last executing test programs: 1m13.714474073s ago: executing program 32 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 1m8.205792416s ago: executing program 4 (id=379): syz_mount_image$ext4(&(0x7f0000001200)='ext4\x00', &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000001280), 0x1, 0x44b, &(0x7f00000012c0)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000013d80)='./file1\x00', 0x8a141, 0x59) 1m8.029638828s ago: executing program 4 (id=389): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0xf0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m7.929572886s ago: executing program 4 (id=395): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x7, 0x74, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) 1m7.848551484s ago: executing program 4 (id=402): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000a00)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x1005848, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 1m7.77987001s ago: executing program 4 (id=407): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000540)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd8, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xcb}, @lsrr={0x83, 0x3, 0x36}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1m7.444430675s ago: executing program 4 (id=421): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0xe040400) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m7.426395783s ago: executing program 33 (id=421): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0xe040400) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m0.435720691s ago: executing program 2 (id=497): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$eJzs3E2IVeUbAPDnnJnxYxz/d/wTTUWglGgRjjrXahVoixZtXAhCH0JDXj/w6oR3ojShLBAhIlpIghDTMlrkokURQbSJoBYtCiJJqBZhWCEt2t2495w7XvQM2dXruU2/H5y573nvued5X85weB845wngP2tNRGyNiKGImIyISt6f5lu8lG2t445Vz+5rbUk0mzt+SyKJiFr17L7OuZL8c0X+s2UR8f+tSTw8fHXcxpGjB6br9drhfH/j7MFnNjaOHN2w/+D03tre2qHqlgemprbcX33wxs313MTLMTW1deS99WtOfvnxa9+0xjuWf9c9jxspWaBzWz+ClWikq50UXG8GzxunXv+o7DEAADdfmq/9h9vr/0oMRbZ4O3/uyUuVeHG07PEBAAAA16/ZHMo/AQAAgMUrkfsDAADAItd5DqBWPbuvs92sZw9W3BtxcVtEjGfxO+8XZ98Ot98fjvzd0pE+xL/rfB9O+g80Hi03/lc7y42/6t1y4899V278p9aVG/+nH8qNv3Z1ufFPzUR8si0rgHD1/S9t1zzoWBIRS/OaBsuv6exDf3vE6k8v3/+OXXX/S+fvf60zXc+LWCfnLpwo6p94JOLi8Yg7hoviJ/Pxk7ymQ682fH18V1H/qosRzbcj1kVx/OiKv3B9iI179tdrm7K/xfGrLzxeKerf/lk2/9EF4o/nxw111YnoxenRXR+sLOjfOZnFv+fu4ut/W9f8/5fX5hjvIf6a2+vbi/rXvZrF373A/Luv/6oe4nbM/dL4saj//S3XcVIAoGdpe22TpJPz7TSdnMzWe7fEaFqfaczet2fm2UO7szXQeIyknaVWth4ZSVr7m/O1SWd/6or9ar6GOFlZ3t6ffHqmvrvsyQMAAMAiNxbx/ROvfDix4or8/+dKlv8DAAAA/36t/P/OubfOtNp/FD4dCQAAAAyKerO337Xy/0snfv085P8AAACwaMn/AQAAYPHr5P9jC9T/W9lVu29TXn/4i8rI0j37l8XmsgcPAAAAXJNW/p9++9j5xpGjB6br9dphDY2BajyU/6cOyniSARtPvxsl3pwAAIC+uLzoL3skAAAAQP+kF5KIaG3rK2vHbl39zkT3t0uSP9vVAZZExHNndrz5/PTs7OHNrf7f5/tnT+f9U2XNAQAAAOjWydM7eTwAAAAAAAAAAAAAADD4bkY58bLnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI3zVwAAAP//QNGSjg==") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 1m0.201981219s ago: executing program 2 (id=501): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 59.921072364s ago: executing program 2 (id=506): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 59.721835097s ago: executing program 2 (id=510): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1208002, &(0x7f0000000480)={[{@acl}, {@jqfmt_vfsold}, {@nodelalloc}, {@quota}, {@dioread_nolock}, {@user_xattr}, {@user_xattr}, {@noauto_da_alloc}]}, 0x1, 0x5e4, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 59.32029317s ago: executing program 2 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) 58.995200365s ago: executing program 3 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000002e80)=[{&(0x7f0000000300)="2e9b978607e083875193dfb60400963f88a8", 0x12}, {&(0x7f0000001c00)="1100f8ae", 0x4}, {&(0x7f0000001c40)="000202", 0x3}], 0x3) 58.924397676s ago: executing program 2 (id=522): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 58.748478101s ago: executing program 34 (id=522): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 58.74334818s ago: executing program 3 (id=525): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 58.650050493s ago: executing program 3 (id=526): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000344000/0x800000)=nil, 0x800000, 0x17) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 58.290300478s ago: executing program 3 (id=531): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1208002, &(0x7f0000000480)={[{@acl}, {@jqfmt_vfsold}, {@nodelalloc}, {@quota}, {@dioread_nolock}, {@user_xattr}, {@user_xattr}, {@noauto_da_alloc}]}, 0x1, 0x5e4, &(0x7f0000000bc0)="$eJzs3c9vVNUeAPDvnf6gpbzXQl7ee7jQJsZAIrS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJo45k7vLZ32TkunP27hfj7J0HPPmcs5l+l3zpnDOXcCqKzB9I9axP6ImE4i+pP5xbLOyAoHF5734M+PzqaPJOr1135PIsny8ucn2c++7OSeiPjxhyT2daysd2bu2sXxqanJq9nx8Oyl6eGZuWuHL1waPz95fvLy6AujJ44fO35i5Ehb13W9IO/0zXff7/9k7M1vvvorGfn2l7EkTsbL2ROXXsdmGYzBxr9JsrKo78RmV1aSjuz3ZOlLnHSW2CDWJX/9uiLif9EfHfHwxeuPj18ptXHAlqonEXWgohLxDxWVjwPyz/bLPwfXShmVANvh/qmFCYCV8d+5MDcYPY25gd0Pklg6rZNERHszc832RMTdO2M3z90ZuxlbNA8HFJu/ERH/L4r/pBH/A9ETA434rzXFfzouOJP9TPNfbbP+5VPFD2oh/mGbLMR/z6rxHy3i/60l8f92m/UPPky+09vU//e2e0kAAAAAAABQWbdPRcShov//ry2u/4mC9T99EXFyE+ofXHa8cv1P7d4mVAMUuH8q4qXC9b+1fPXvQEeW+ldjPUBXcu7C1OSRiPh3RByMrl3p8cgqdRz+dN+XrcoGs/V/+SOt/262FjBrx73OXc3nTIzPjm/0uoGI+zcinipc/5ss9v9JQf+fvh9MP2Id+567daZV2drxD2yV+tcRBwr7/4d3rUhWvz/HcGM8MJyPClZ6+sPPvmtVf7vx7xYTsHFp/7979fgfSJber2dm/XUcneustyprd/zfnbzeuOVMd5b3wfjs7NWRiO7kdEea25Q/uv42w5Moj4c8XtL4P/js6vN/ReP/3oiYX/Z3J3807ynO/ffvvl9btcf4H8qTxv/Euvr/9SdGbw1836r+R+v/jzX6+oNZjvk/WPBFHqbdzfkF4dhZVLTd7QUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ0EtIvZEUhtaTNdqQ0MRfRHxn9hdm7oyM/v8uSvvXZ5Iyxrf/1/Lv+m3f+E4yb//f2DJ8eiy46MRsTciPu/obRwPnb0yNVH2xQMAAAAAAAAAAAAAAAAAAMAO0ddi/3/qt46yWwdsuc6yGwCUpiD+fyqjHcD20/9DdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/UF3iHwAAAAAAnih7n7n9cxIR8y/2Nh6p7qysq9SWAVutVnYDgNK4xQ9Ul6U/UF0+4wPJGuU9LU9a68zVTJ/dwMkAAAAAAAAAAAAAUDkH9re1///Q9rQO2Er2/0N12f8P1dXY/7+RLXzAY8v+fyDWGAYU7v9f8ywAAAAAAAAAAAAAYDPNzF27OD41NXlV4o2d0YztTNTr9evpb8FOac9jnsiXwu+U9ixL5N/1+2hnlfeeBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPsnAAD//1U8I2g=") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 58.046969438s ago: executing program 3 (id=536): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 57.787947489s ago: executing program 3 (id=541): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x24000880, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 57.56807879s ago: executing program 35 (id=541): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x24000880, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 36.724388548s ago: executing program 8 (id=932): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000280)=ANY=[], 0xf9, 0x1233, &(0x7f0000002a80)="$eJzs3E2LW1UYB/BnYqbzUudFrdV2oQfciItLZxauBAkyBWlAqR3BCsKtk9GQmJTcMJAijq7c+jlcuxP8BrPxM7ibTZddiFd6k7ROO60FZzKKv99i5uGe878nl5wk3HBODt/54avObpHt5sOozc1F7XZEupciRS2mXpufFDevNZrNrespXW3c2Hg7pbT6+i+ffr0QEec//mn154U4WP/s8O7mbwcXDy4d/nHjy3aR2kXq9YcpT7f6/WF+q7uadtpFJ0vpw24rL1qp3Stag7+0t9LuWxExSnlvZ2X59qBVFCnvjVKnNUrDfhoORin/Im/3UpZlaWU5eKL5v++y/eO9siwjynI+zkVZluVSLMf5eD5WYjW+jYgX4sV4KS7Ey3ExXolX41LVaxYPHwAAAAAAAAAAAAAAAAAAAP4/nrb/fy3W7f8HAAAAAAAAAAAAAAAAAACAGfjok5vXGs3m1vWUFiO63+9t722P/4/b1+//6UYrrsRa/B7V7v+xcX31/ebWlVRZj++6+5P8/t72c1W+Mc1vVD8nMMnXq7ZpfmOcT0fzC7EcEXMR7Sq/GWtx4fjxN4/NL8abb0Q0dif5LNbi18+jH93YqcZ+mP9mI6X3Pmg+kr9c9XuqpVN9agAAAODEZOmBY+/fs+xJ7RH16Ume7fuBR+6v63G5fpZXzn3F6E4nr3Vbg6roTovFx45Mi3jsyD8t4qRPOLMi4m5ZFQtHm2qnNGgtBpMX1/6ZX/udztzsxqqd/Kw7/WLxvzWxl+LokbN+Z2IWHk6DZ+vvIxsAAAAAAAAAAODf4VSWE557sPKxHsesLHv3bC4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDBQAA///2/sRe") r0 = inotify_init1(0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x440000e5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x8100, 0x229) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000400)) 36.523895172s ago: executing program 8 (id=936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="f69239bda5fc6c01768bf8c86d7eac9eae319015b9084999684710b69eb0cc86ec072d9ccbd6bad1636bac53e64e84237b85cae9e9627273737ee643b5c5616e4e42122f8ca16cf331d44f42184ea0e64dbd97767b8d1f8a", 0x58, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x4000009}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r0, 0x1) 35.714919796s ago: executing program 8 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000142000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000e2e000/0x3000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d36000/0x4000)=nil, 0x4000, &(0x7f0000000180)='smackfsdef') 35.335290868s ago: executing program 8 (id=951): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f00000001c0), 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$security_ima(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), &(0x7f0000000c80)=ANY=[], 0x700, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 34.933200194s ago: executing program 8 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRESDEC=r1], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 34.123480345s ago: executing program 8 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000001a00)={@val={0xa, 0x9000}, @void, @eth={@empty, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "4aad28", 0x28, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0xde9a, 0x0, 0x0, 0x4e24, 0x4e23, 0x4, 0x4}}}}}}}}, 0x66) 33.928078034s ago: executing program 36 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000001a00)={@val={0xa, 0x9000}, @void, @eth={@empty, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "4aad28", 0x28, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0xde9a, 0x0, 0x0, 0x4e24, 0x4e23, 0x4, 0x4}}}}}}}}, 0x66) 31.325288515s ago: executing program 5 (id=1001): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@private2, 0x1, r2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000540)={@private2, r2}, 0x14) 30.568083052s ago: executing program 5 (id=1009): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe0ffff00000000, &(0x7f0000000000)}) 30.386858708s ago: executing program 5 (id=1012): syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000840)="$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") write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x40) linkat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) 30.116634976s ago: executing program 5 (id=1015): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f00000001c0), 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$security_ima(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), &(0x7f0000000c80)=ANY=[], 0x700, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 29.759444722s ago: executing program 5 (id=1018): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x113) getdents64(r2, &(0x7f00000001c0)=""/57, 0x39) 28.712312293s ago: executing program 5 (id=1029): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) 28.521229067s ago: executing program 37 (id=1029): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) 2.427162913s ago: executing program 6 (id=1440): r0 = syz_ublk_setup_io_uring(0x7501, &(0x7f00000008c0)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000200), &(0x7f0000000600), &(0x7f0000000300)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x2e3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc3}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x6953, 0x3a, 0x0, 0x36d, 0x0, r0}, &(0x7f0000004240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f9a, 0x4000, 0x0, 0x3b6, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x10000, 0x2, 0x27c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x1, 0x388, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x121e, 0x340a0, 0x2000002, 0x44}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x4500, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x82, 0xb66, 0x0, 0x0}}, 0x0) 1.972338592s ago: executing program 9 (id=1449): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000c80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x78, 'integrity\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '1'}, 0x20, '16', 0x20, 'R', ' 1 journal_crypt:ctr(aes):0123456789abcdef0123456789abcdef'}}]}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000f40)='./dm0\x00', 0x6180, r1) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000f80)='./dm0\x00', 0x2, 0x0) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000fc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 1.788241528s ago: executing program 9 (id=1451): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x44000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@noinit_itable}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @adiantum, 0x0, '\x00', @b}) 1.74561015s ago: executing program 1 (id=1452): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r0, &(0x7f0000000800)='1', 0x1) 1.553790049s ago: executing program 1 (id=1455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0xfffffffffffffffe) 1.468676136s ago: executing program 9 (id=1456): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0xfa0, 0x4) shutdown(r0, 0x1) 1.285226175s ago: executing program 1 (id=1458): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 1.151938903s ago: executing program 1 (id=1461): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, 0x0) 1.064194089s ago: executing program 0 (id=1462): r0 = userfaultfd(0x80801) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x0, 0x41) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000440)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000480)={0x6, {"77fe1801f805000000ffee0092000008", "000900000000000200", "000000000000161cdf2b7400"}, 0x7, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.035081206s ago: executing program 7 (id=1463): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x25) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='3', 0x4e) sendfile(r0, r0, 0x0, 0x1000000000007) 1.029724593s ago: executing program 6 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, 0x0}, 0x94) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000580)={r1, &(0x7f00000005c0), &(0x7f0000000600)=""/166}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r0, &(0x7f0000000980)}, 0x20) 890.879676ms ago: executing program 6 (id=1465): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x41) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 863.786134ms ago: executing program 7 (id=1466): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000580)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000005c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f0000000640)='q', 0x41, 0x48881, &(0x7f0000000680)={0x11, 0x8100, r2, 0x1, 0x87}, 0x14) 792.485874ms ago: executing program 0 (id=1467): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}, {&(0x7f0000000340)="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", 0x139}], 0x2, &(0x7f0000000600)=ANY=[], 0x28}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="399ab932fca8e5b6edcca995a20320e4fecabe12ca505f58f0a68949db0d", 0x1e}], 0x1}}], 0x2, 0x4008c04) 713.314931ms ago: executing program 6 (id=1468): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r0], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 681.235365ms ago: executing program 7 (id=1469): r0 = syz_open_dev$dri(&(0x7f0000003dc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000003f00)={0x7f, 0x200004d, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000004080)={0x8, 0x8000, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0x5, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000004140)={r1}) 643.504386ms ago: executing program 9 (id=1470): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 627.582592ms ago: executing program 0 (id=1471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 536.828666ms ago: executing program 6 (id=1472): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@noblock_validity}, {@nodioread_nolock}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@delalloc}, {@nogrpid}]}, 0x1, 0x5c5, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000001240)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x37ec, 0x683) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000800)='2', 0xfdef, 0xe7c) 527.605938ms ago: executing program 7 (id=1473): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) 471.823036ms ago: executing program 9 (id=1474): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000180)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) 448.145425ms ago: executing program 0 (id=1475): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x62000780) socket$can_j1939(0x1d, 0x2, 0x7) 306.402876ms ago: executing program 7 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000480)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) 232.853544ms ago: executing program 1 (id=1477): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)='_', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1e}}, 0x14) 180.182266ms ago: executing program 9 (id=1478): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x0, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x1a) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 179.682101ms ago: executing program 0 (id=1479): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x402) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x402) 173.416074ms ago: executing program 6 (id=1480): socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 83.851039ms ago: executing program 7 (id=1481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000b00)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000b40)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000b80)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/183, 0xb7}, 0x1ff}], 0x1, 0x12101, 0x0) 20.404803ms ago: executing program 0 (id=1482): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0xffffffff, 0x2, @thr={0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0xffffffb9}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 0s ago: executing program 1 (id=1483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0x3da48c8682330ab8}, {}, {0x7, 0xc7efcab3e2e58759}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400d081}, 0x4880) kernel console output (not intermixed with test programs): 5][ T7616] __kmalloc_node_noprof+0x10c/0x6e4 [ 71.694956][ T7616] crypto_create_tfm_node+0x94/0x304 [ 71.694966][ T7616] crypto_alloc_tfm_node+0x100/0x22c [ 71.694975][ T7616] crypto_alloc_akcipher+0x40/0x54 [ 71.694985][ T7616] software_key_query+0x2b8/0xa78 [ 71.694998][ T7616] query_asymmetric_key+0x100/0x120 [ 71.695010][ T7616] keyctl_pkey_params_get_2+0x254/0x54c [ 71.695020][ T7616] keyctl_pkey_e_d_s+0xbc/0x3ac [ 71.695028][ T7616] __arm64_sys_keyctl+0x3ac/0x3e8 [ 71.695041][ T7616] invoke_syscall+0x98/0x244 [ 71.695050][ T7616] el0_svc_common+0xec/0x23c [ 71.695058][ T7616] do_el0_svc+0x4c/0x5c [ 71.695066][ T7616] el0_svc+0x60/0x1d8 [ 71.695074][ T7616] el0t_64_sync_handler+0x44/0x104 [ 71.695082][ T7616] el0t_64_sync+0x198/0x19c [ 71.909856][ T4736] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.090958][ T7637] FAULT_INJECTION: forcing a failure. [ 72.090958][ T7637] name failslab, interval 1, probability 0, space 0, times 0 [ 72.090986][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.6.924 Not tainted syzkaller #0 PREEMPT [ 72.091000][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.091006][ T7637] Call trace: [ 72.091009][ T7637] show_stack+0x2c/0x3c (C) [ 72.091026][ T7637] __dump_stack+0x30/0x40 [ 72.091038][ T7637] dump_stack_lvl+0xd8/0x12c [ 72.091047][ T7637] dump_stack+0x1c/0x28 [ 72.091055][ T7637] should_fail_ex+0x418/0x58c [ 72.091066][ T7637] should_failslab+0xc4/0x120 [ 72.091077][ T7637] kmem_cache_alloc_noprof+0x94/0x5d4 [ 72.091087][ T7637] locks_alloc_lease+0x28/0x12c [ 72.091100][ T7637] lease_alloc+0x2c/0x1b4 [ 72.091108][ T7637] do_fcntl_add_lease+0xa8/0x1cc [ 72.091116][ T7637] fcntl_setlease+0x11c/0x188 [ 72.091124][ T7637] do_fcntl+0x140/0x15b0 [ 72.091133][ T7637] __arm64_sys_fcntl+0x118/0x1ac [ 72.091142][ T7637] invoke_syscall+0x98/0x244 [ 72.091150][ T7637] el0_svc_common+0xec/0x23c [ 72.091159][ T7637] do_el0_svc+0x4c/0x5c [ 72.091167][ T7637] el0_svc+0x60/0x1d8 [ 72.091175][ T7637] el0t_64_sync_handler+0x44/0x104 [ 72.091183][ T7637] el0t_64_sync+0x198/0x19c [ 72.174322][ T7643] gadgetfs: bound to dummy_udc driver [ 72.308396][ T30] audit: type=1326 audit(72.290:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.8.931" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8097a228 code=0x0 [ 72.314291][ T7653] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 72.407019][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 72.407210][ C0] gadgetfs: connected [ 72.411102][ T10] gadgetfs: disconnected [ 72.776017][ T7668] loop8: detected capacity change from 0 to 8192 [ 72.817697][ T7668] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.192582][ T7683] loop5: detected capacity change from 0 to 128 [ 73.230423][ T7683] FAULT_INJECTION: forcing a failure. [ 73.230423][ T7683] name failslab, interval 1, probability 0, space 0, times 0 [ 73.230444][ T7683] CPU: 0 UID: 0 PID: 7683 Comm: syz.5.937 Not tainted syzkaller #0 PREEMPT [ 73.230456][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 73.230462][ T7683] Call trace: [ 73.230465][ T7683] show_stack+0x2c/0x3c (C) [ 73.230480][ T7683] __dump_stack+0x30/0x40 [ 73.230488][ T7683] dump_stack_lvl+0xd8/0x12c [ 73.230497][ T7683] dump_stack+0x1c/0x28 [ 73.230504][ T7683] should_fail_ex+0x418/0x58c [ 73.230515][ T7683] should_failslab+0xc4/0x120 [ 73.230525][ T7683] kmem_cache_alloc_noprof+0x94/0x5d4 [ 73.230536][ T7683] __kernfs_new_node+0xf0/0x7d8 [ 73.230544][ T7683] kernfs_new_node+0xe8/0x130 [ 73.230551][ T7683] __kernfs_create_file+0x60/0x2e0 [ 73.230560][ T7683] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 73.230569][ T7683] internal_create_group+0x550/0xb30 [ 73.230579][ T7683] internal_create_groups+0x64/0x138 [ 73.230589][ T7683] sysfs_create_groups+0x2c/0x3c [ 73.230599][ T7683] kobject_add_internal+0x2cc/0x6f0 [ 73.230610][ T7683] kobject_add_varg+0x9c/0xe8 [ 73.230619][ T7683] kobject_init_and_add+0xec/0x13c [ 73.230628][ T7683] ext4_register_sysfs+0xb0/0x294 [ 73.230640][ T7683] ext4_fill_super+0x490c/0x4e34 [ 73.230650][ T7683] get_tree_bdev_flags+0x388/0x43c [ 73.230662][ T7683] get_tree_bdev+0x2c/0x3c [ 73.230673][ T7683] ext4_get_tree+0x28/0x38 [ 73.230683][ T7683] vfs_get_tree+0x90/0x28c [ 73.230694][ T7683] fc_mount+0x24/0xac [ 73.230705][ T7683] do_new_mount+0x2a4/0x538 [ 73.230719][ T7683] path_mount+0x5f0/0xa88 [ 73.230726][ T7683] do_mount+0xe8/0x148 [ 73.230733][ T7683] __arm64_sys_mount+0x33c/0x388 [ 73.230741][ T7683] invoke_syscall+0x98/0x244 [ 73.230750][ T7683] el0_svc_common+0xec/0x23c [ 73.230759][ T7683] do_el0_svc+0x4c/0x5c [ 73.230767][ T7683] el0_svc+0x60/0x1d8 [ 73.230774][ T7683] el0t_64_sync_handler+0x44/0x104 [ 73.230782][ T7683] el0t_64_sync+0x198/0x19c [ 73.232525][ T7683] kobject: kobject_add_internal failed for loop5 (error: -12 parent: ext4) [ 73.284198][ T7683] EXT4-fs (loop5): mount failed [ 73.544600][ T7688] loop7: detected capacity change from 0 to 512 [ 73.558192][ T7694] loop1: detected capacity change from 0 to 512 [ 73.573843][ T7694] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 73.573859][ T7694] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 73.575905][ T7688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.591149][ T7694] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.940: bg 0: block 104: invalid block bitmap [ 73.591172][ T7694] loop1: lost filesystem error report for type 5 error -117 [ 73.591870][ T7694] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 73.591887][ T7694] loop1: lost filesystem error report for type 5 error -117 [ 73.592039][ T7694] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.940: invalid indirect mapped block 1 (level 1) [ 73.592055][ T7694] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.592300][ T7694] EXT4-fs (loop1): 1 truncate cleaned up [ 73.592768][ T7694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 2 devtmpfs[ 73.645914][ T7694] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.679750][ T7694] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.720410][ T7694] overlayfs: failed to look up (fi) for ino (-13) [ 73.867399][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.931073][ T6388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.071426][ T7720] FAULT_INJECTION: forcing a failure. [ 74.071426][ T7720] name failslab, interval 1, probability 0, space 0, times 0 [ 74.071452][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.7.948 Not tainted syzkaller #0 PREEMPT [ 74.071463][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.071469][ T7720] Call trace: [ 74.071471][ T7720] show_stack+0x2c/0x3c (C) [ 74.071486][ T7720] __dump_stack+0x30/0x40 [ 74.071495][ T7720] dump_stack_lvl+0xd8/0x12c [ 74.071503][ T7720] dump_stack+0x1c/0x28 [ 74.071511][ T7720] should_fail_ex+0x418/0x58c [ 74.071522][ T7720] should_failslab+0xc4/0x120 [ 74.071532][ T7720] __kmalloc_node_noprof+0x10c/0x6e4 [ 74.071542][ T7720] blk_mq_alloc_tag_set+0x42c/0xb80 [ 74.071555][ T7720] loop_add+0x31c/0x8e4 [ 74.071563][ T7720] loop_control_ioctl+0x138/0x510 [ 74.071571][ T7720] __arm64_sys_ioctl+0x154/0x1cc [ 74.071581][ T7720] invoke_syscall+0x98/0x244 [ 74.071590][ T7720] el0_svc_common+0xec/0x23c [ 74.071598][ T7720] do_el0_svc+0x4c/0x5c [ 74.071606][ T7720] el0_svc+0x60/0x1d8 [ 74.071615][ T7720] el0t_64_sync_handler+0x44/0x104 [ 74.071623][ T7720] el0t_64_sync+0x198/0x19c [ 74.148735][ T7728] loop8: detected capacity change from 0 to 1024 [ 74.195422][ T7728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.230520][ T7736] loop1: detected capacity change from 0 to 512 [ 74.230992][ T7736] EXT4-fs: Ignoring removed bh option [ 74.236615][ T7736] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.264522][ T7736] EXT4-fs (loop1): 1 truncate cleaned up [ 74.265328][ T7736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.396075][ T7728] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #12: block 7: comm syz.8.951: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 74.473888][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.539997][ T6445] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /64/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.577120][ T6445] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /64/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.583285][ T6445] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 74.585603][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.585824][ T6445] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /64/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.586015][ T6445] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /64/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.586231][ T6445] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 74.586362][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.586460][ T6445] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /64/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.586611][ T6445] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /64/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.630676][ T6445] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 74.632694][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.635696][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.656017][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.662431][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.671574][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.674745][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.675776][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.690175][ T6445] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.767364][ T7753] loop6: detected capacity change from 0 to 512 [ 74.773361][ T7753] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.160285][ T6445] batman_adv: batadv0: Interface deactivated: syz_tun [ 75.180319][ T7766] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 75.180340][ T7766] FAT-fs (loop5): Filesystem has been set read-only [ 75.180437][ T7766] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 75.180463][ T7766] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 75.182314][ T6445] batman_adv: batadv0: Removing interface: syz_tun [ 75.273990][ T6445] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.382834][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.451093][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.452764][ T7776] tipc: Started in network mode [ 75.452781][ T7776] tipc: Node identity ac1414aa, cluster identity 4711 [ 75.453253][ T7776] tipc: New replicast peer: 172.20.20.187 [ 75.454448][ T7776] tipc: Enabled bearer , priority 10 [ 75.500008][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.566286][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.669073][ T4746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.673409][ T4746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.674394][ T4746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.674795][ T4746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.675013][ T4746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.919202][ T7786] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.230459][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.231767][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.231865][ T7786] bridge_slave_0: entered allmulticast mode [ 76.232916][ T7786] bridge_slave_0: entered promiscuous mode [ 76.241149][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.241778][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.241841][ T7786] bridge_slave_1: entered allmulticast mode [ 76.242914][ T7786] bridge_slave_1: entered promiscuous mode [ 76.267995][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.269256][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.298227][ T7786] team0: Port device team_slave_0 added [ 76.300024][ T7786] team0: Port device team_slave_1 added [ 76.313752][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.313764][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.313775][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.314886][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.314896][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.314908][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.355825][ T7786] hsr_slave_0: entered promiscuous mode [ 76.359392][ T7786] hsr_slave_1: entered promiscuous mode [ 76.359645][ T7786] debugfs: 'hsr0' already exists in 'hsr' [ 76.359656][ T7786] Cannot create hsr debugfs directory [ 76.605168][ T7823] set_capacity_and_notify: 1 callbacks suppressed [ 76.605182][ T7823] loop1: detected capacity change from 0 to 512 [ 76.611089][ T4865] tipc: Node number set to 2886997162 [ 76.654174][ T7823] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.796304][ T49] bridge_slave_1: left allmulticast mode [ 76.796326][ T49] bridge_slave_1: left promiscuous mode [ 76.796429][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.807584][ T49] bridge_slave_0: left allmulticast mode [ 76.807606][ T49] bridge_slave_0: left promiscuous mode [ 76.807690][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.940136][ T3257] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.980519][ T7837] FAULT_INJECTION: forcing a failure. [ 76.980519][ T7837] name failslab, interval 1, probability 0, space 0, times 0 [ 76.980545][ T7837] CPU: 0 UID: 0 PID: 7837 Comm: syz.6.981 Not tainted syzkaller #0 PREEMPT [ 76.980557][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 76.980563][ T7837] Call trace: [ 76.980566][ T7837] show_stack+0x2c/0x3c (C) [ 76.980583][ T7837] __dump_stack+0x30/0x40 [ 76.980593][ T7837] dump_stack_lvl+0xd8/0x12c [ 76.980601][ T7837] dump_stack+0x1c/0x28 [ 76.980609][ T7837] should_fail_ex+0x418/0x58c [ 76.980620][ T7837] should_failslab+0xc4/0x120 [ 76.980631][ T7837] __kmalloc_noprof+0x108/0x6c8 [ 76.980641][ T7837] sk_prot_alloc+0xc4/0x1e8 [ 76.980652][ T7837] sk_alloc+0x44/0x320 [ 76.980660][ T7837] pfkey_create+0xcc/0x520 [ 76.980673][ T7837] __sock_create+0x31c/0x670 [ 76.980684][ T7837] __sys_socket_create+0xc0/0x11c [ 76.980694][ T7837] __sys_socket+0x44/0xec [ 76.980705][ T7837] __arm64_sys_socket+0x84/0x9c [ 76.980721][ T7837] invoke_syscall+0x98/0x244 [ 76.980730][ T7837] el0_svc_common+0xec/0x23c [ 76.980738][ T7837] do_el0_svc+0x4c/0x5c [ 76.980746][ T7837] el0_svc+0x60/0x1d8 [ 76.980755][ T7837] el0t_64_sync_handler+0x44/0x104 [ 76.980763][ T7837] el0t_64_sync+0x198/0x19c [ 77.122339][ T7847] loop6: detected capacity change from 0 to 512 [ 77.159029][ T7847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.221348][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.275989][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.290847][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.297679][ T49] bond0 (unregistering): Released all slaves [ 77.348727][ T7849] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.350168][ T7849] bond1: (slave lo): Enslaving as an active interface with an up link [ 77.351039][ T7849] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 77.418651][ T49] tipc: Left network mode [ 77.480107][ T7786] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 77.501373][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.501808][ T7786] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 77.505305][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.590270][ T7786] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 77.594032][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.596578][ T7786] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 77.626538][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.669989][ T7876] FAULT_INJECTION: forcing a failure. [ 77.669989][ T7876] name failslab, interval 1, probability 0, space 0, times 0 [ 77.670017][ T7876] CPU: 0 UID: 0 PID: 7876 Comm: syz.5.993 Not tainted syzkaller #0 PREEMPT [ 77.670030][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.670036][ T7876] Call trace: [ 77.670039][ T7876] show_stack+0x2c/0x3c (C) [ 77.670054][ T7876] __dump_stack+0x30/0x40 [ 77.670064][ T7876] dump_stack_lvl+0xd8/0x12c [ 77.670072][ T7876] dump_stack+0x1c/0x28 [ 77.670080][ T7876] should_fail_ex+0x418/0x58c [ 77.670091][ T7876] should_failslab+0xc4/0x120 [ 77.670101][ T7876] __kmalloc_cache_noprof+0x94/0x5fc [ 77.670112][ T7876] do_inotify_init+0xb8/0x408 [ 77.670126][ T7876] __arm64_sys_inotify_init1+0x40/0x54 [ 77.670138][ T7876] invoke_syscall+0x98/0x244 [ 77.670147][ T7876] el0_svc_common+0xec/0x23c [ 77.670155][ T7876] do_el0_svc+0x4c/0x5c [ 77.670163][ T7876] el0_svc+0x60/0x1d8 [ 77.670172][ T7876] el0t_64_sync_handler+0x44/0x104 [ 77.670180][ T7876] el0t_64_sync+0x198/0x19c [ 77.766846][ T4740] Bluetooth: hci2: command tx timeout [ 77.934523][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.962109][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.975136][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.975164][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.010395][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.010432][ T3257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.040026][ T7786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.152943][ T49] hsr_slave_0: left promiscuous mode [ 78.160205][ T49] hsr_slave_1: left promiscuous mode [ 78.160606][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.160618][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.161097][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.161106][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.189858][ T49] veth1_macvtap: left promiscuous mode [ 78.189893][ T49] veth0_macvtap: left promiscuous mode [ 78.190018][ T49] veth1_vlan: left promiscuous mode [ 78.190055][ T49] veth0_vlan: left promiscuous mode [ 78.620621][ T49] team0 (unregistering): Port device team_slave_1 removed [ 78.644585][ T49] team0 (unregistering): Port device team_slave_0 removed [ 78.795013][ T7940] FAULT_INJECTION: forcing a failure. [ 78.795013][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 78.795037][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.6.1008 Not tainted syzkaller #0 PREEMPT [ 78.795048][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.795054][ T7940] Call trace: [ 78.795057][ T7940] show_stack+0x2c/0x3c (C) [ 78.795073][ T7940] __dump_stack+0x30/0x40 [ 78.795083][ T7940] dump_stack_lvl+0xd8/0x12c [ 78.795091][ T7940] dump_stack+0x1c/0x28 [ 78.795099][ T7940] should_fail_ex+0x418/0x58c [ 78.795110][ T7940] should_failslab+0xc4/0x120 [ 78.795120][ T7940] __kmalloc_noprof+0x108/0x6c8 [ 78.795131][ T7940] bitmap_zalloc+0x34/0x44 [ 78.795141][ T7940] dev_prep_valid_name+0x1d0/0x5a4 [ 78.795152][ T7940] register_netdevice+0x3ac/0x14c0 [ 78.795160][ T7940] register_netdev+0x4c/0x68 [ 78.795168][ T7940] gprs_attach+0x178/0x4d8 [ 78.795178][ T7940] pep_setsockopt+0x34c/0x508 [ 78.795187][ T7940] sock_common_setsockopt+0xb0/0xcc [ 78.795198][ T7940] do_sock_setsockopt+0x1f0/0x330 [ 78.795210][ T7940] __sys_setsockopt+0x104/0x170 [ 78.795221][ T7940] __arm64_sys_setsockopt+0xc8/0xe4 [ 78.795233][ T7940] invoke_syscall+0x98/0x244 [ 78.795242][ T7940] el0_svc_common+0xec/0x23c [ 78.795250][ T7940] do_el0_svc+0x4c/0x5c [ 78.795258][ T7940] el0_svc+0x60/0x1d8 [ 78.795267][ T7940] el0t_64_sync_handler+0x44/0x104 [ 78.795275][ T7940] el0t_64_sync+0x198/0x19c [ 78.968546][ T4740] Bluetooth: hci5: command 0x1003 tx timeout [ 78.970242][ T4746] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.975142][ T7944] binder: 7943:7944 got transaction to invalid handle, 1 [ 78.975186][ T7944] binder: 7943:7944 cannot find target node [ 78.975202][ T7944] binder: 7943:7944 transaction call to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3253 [ 78.987730][ T7944] binder: 7943:7944 ioctl c0306201 20000280 returned -14 [ 79.113901][ T7956] loop5: detected capacity change from 0 to 512 [ 79.124879][ T7956] EXT4-fs: Ignoring removed bh option [ 79.149224][ T7956] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 79.193702][ T7956] EXT4-fs (loop5): 1 truncate cleaned up [ 79.194199][ T7956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.242194][ T7966] FAULT_INJECTION: forcing a failure. [ 79.242194][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 79.242218][ T7966] CPU: 0 UID: 0 PID: 7966 Comm: syz.1.1014 Not tainted syzkaller #0 PREEMPT [ 79.242229][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.242235][ T7966] Call trace: [ 79.242239][ T7966] show_stack+0x2c/0x3c (C) [ 79.242255][ T7966] __dump_stack+0x30/0x40 [ 79.242264][ T7966] dump_stack_lvl+0xd8/0x12c [ 79.242272][ T7966] dump_stack+0x1c/0x28 [ 79.242280][ T7966] should_fail_ex+0x418/0x58c [ 79.242291][ T7966] should_failslab+0xc4/0x120 [ 79.242301][ T7966] __kvmalloc_node_noprof+0x160/0x7fc [ 79.242312][ T7966] bpf_compute_postorder+0x114/0x768 [ 79.242324][ T7966] bpf_check+0x1cd0/0x2414 [ 79.242334][ T7966] bpf_prog_load+0xf4c/0x1554 [ 79.242345][ T7966] __sys_bpf+0x7d4/0x82c [ 79.242355][ T7966] __arm64_sys_bpf+0xd0/0xec [ 79.242366][ T7966] invoke_syscall+0x98/0x244 [ 79.242374][ T7966] el0_svc_common+0xec/0x23c [ 79.242382][ T7966] do_el0_svc+0x4c/0x5c [ 79.242390][ T7966] el0_svc+0x60/0x1d8 [ 79.242399][ T7966] el0t_64_sync_handler+0x44/0x104 [ 79.242407][ T7966] el0t_64_sync+0x198/0x19c [ 79.321607][ T5369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.355797][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.430549][ T7975] loop5: detected capacity change from 0 to 1024 [ 79.469074][ T7975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.614550][ T7975] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.1015: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 79.685893][ T5369] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /168/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.695035][ T5369] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /168/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.718771][ T5369] EXT4-fs error (device loop5): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.723992][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.724212][ T5369] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /168/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.743134][ T5369] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /168/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.743744][ T5369] EXT4-fs error (device loop5): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.744334][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.744499][ T5369] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /168/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.774218][ T5369] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /168/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.801597][ T5369] EXT4-fs error (device loop5): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.802106][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.802892][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.803437][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.804138][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.827970][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.849183][ T4746] Bluetooth: hci2: command tx timeout [ 79.849259][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.865512][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.873869][ T5369] EXT4-fs warning (device loop5): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.900396][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.900580][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.911733][ T7786] veth0_vlan: entered promiscuous mode [ 79.934319][ T7786] veth1_vlan: entered promiscuous mode [ 79.981585][ T7786] veth0_macvtap: entered promiscuous mode [ 79.985304][ T7786] veth1_macvtap: entered promiscuous mode [ 79.992378][ T7998] FAULT_INJECTION: forcing a failure. [ 79.992378][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 79.992401][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.6.1020 Not tainted syzkaller #0 PREEMPT [ 79.992412][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.992418][ T7998] Call trace: [ 79.992421][ T7998] show_stack+0x2c/0x3c (C) [ 79.992437][ T7998] __dump_stack+0x30/0x40 [ 79.992446][ T7998] dump_stack_lvl+0xd8/0x12c [ 79.992454][ T7998] dump_stack+0x1c/0x28 [ 79.992462][ T7998] should_fail_ex+0x418/0x58c [ 79.992473][ T7998] should_failslab+0xc4/0x120 [ 79.992483][ T7998] __kmalloc_cache_noprof+0x94/0x5fc [ 79.992494][ T7998] __rdma_create_id+0x78/0x6a8 [ 79.992504][ T7998] rdma_create_user_id+0x88/0xc8 [ 79.992513][ T7998] ucma_create_id+0x218/0x32c [ 79.992526][ T7998] ucma_write+0x25c/0x2b8 [ 79.992537][ T7998] vfs_write+0x2a4/0xa0c [ 79.992547][ T7998] ksys_write+0x12c/0x228 [ 79.992555][ T7998] __arm64_sys_write+0x84/0x98 [ 79.992565][ T7998] invoke_syscall+0x98/0x244 [ 79.992574][ T7998] el0_svc_common+0xec/0x23c [ 79.992582][ T7998] do_el0_svc+0x4c/0x5c [ 79.992590][ T7998] el0_svc+0x60/0x1d8 [ 79.992599][ T7998] el0t_64_sync_handler+0x44/0x104 [ 79.992607][ T7998] el0t_64_sync+0x198/0x19c [ 80.036053][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.055553][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.103637][ T4427] 8021q: adding VLAN 0 to HW filter on device eth12 [ 80.146874][ T935] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.146907][ T935] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.146923][ T935] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.146938][ T935] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.195790][ T935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.195807][ T935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.205983][ T8001] FAULT_INJECTION: forcing a failure. [ 80.205983][ T8001] name failslab, interval 1, probability 0, space 0, times 0 [ 80.206005][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.6.1022 Not tainted syzkaller #0 PREEMPT [ 80.206016][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 80.206022][ T8001] Call trace: [ 80.206025][ T8001] show_stack+0x2c/0x3c (C) [ 80.206041][ T8001] __dump_stack+0x30/0x40 [ 80.206050][ T8001] dump_stack_lvl+0xd8/0x12c [ 80.206059][ T8001] dump_stack+0x1c/0x28 [ 80.206066][ T8001] should_fail_ex+0x418/0x58c [ 80.206078][ T8001] should_failslab+0xc4/0x120 [ 80.206088][ T8001] __kmalloc_cache_noprof+0x94/0x5fc [ 80.206099][ T8001] do_inotify_init+0xb8/0x408 [ 80.206112][ T8001] __arm64_sys_inotify_init1+0x40/0x54 [ 80.206125][ T8001] invoke_syscall+0x98/0x244 [ 80.206134][ T8001] el0_svc_common+0xec/0x23c [ 80.206142][ T8001] do_el0_svc+0x4c/0x5c [ 80.206150][ T8001] el0_svc+0x60/0x1d8 [ 80.206159][ T8001] el0t_64_sync_handler+0x44/0x104 [ 80.206167][ T8001] el0t_64_sync+0x198/0x19c [ 80.276239][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.276255][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.454681][ T5369] batman_adv: batadv0: Interface deactivated: syz_tun [ 80.502569][ T5369] batman_adv: batadv0: Removing interface: syz_tun [ 80.612015][ T5369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.760322][ T5503] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 80.969858][ T8052] loop6: detected capacity change from 0 to 512 [ 81.026033][ T8052] EXT4-fs (loop6): invalid journal inode [ 81.026095][ T8052] EXT4-fs (loop6): can't get journal size [ 81.034014][ T8052] EXT4-fs (loop6): 1 truncate cleaned up [ 81.034471][ T8052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.101493][ T4740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.104158][ T4740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.104816][ T4740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.106321][ T4740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.115319][ T4740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.516246][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.583926][ T258] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.700480][ T4427] 8021q: adding VLAN 0 to HW filter on device eth14 [ 81.844595][ T258] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.915244][ T258] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.929696][ T4746] Bluetooth: hci2: command tx timeout [ 81.982961][ T258] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.073304][ T8057] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.237707][ T258] bridge_slave_1: left allmulticast mode [ 82.237734][ T258] bridge_slave_1: left promiscuous mode [ 82.237830][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.255093][ T8126] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 82.256833][ T258] bridge_slave_0: left allmulticast mode [ 82.256850][ T258] bridge_slave_0: left promiscuous mode [ 82.256946][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.325679][ T8130] FAULT_INJECTION: forcing a failure. [ 82.325679][ T8130] name failslab, interval 1, probability 0, space 0, times 0 [ 82.325702][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.7.1045 Not tainted syzkaller #0 PREEMPT [ 82.325720][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 82.325726][ T8130] Call trace: [ 82.325730][ T8130] show_stack+0x2c/0x3c (C) [ 82.325748][ T8130] __dump_stack+0x30/0x40 [ 82.325758][ T8130] dump_stack_lvl+0xd8/0x12c [ 82.325766][ T8130] dump_stack+0x1c/0x28 [ 82.325774][ T8130] should_fail_ex+0x418/0x58c [ 82.325786][ T8130] should_failslab+0xc4/0x120 [ 82.325796][ T8130] kmem_cache_alloc_noprof+0x94/0x5d4 [ 82.325807][ T8130] security_file_alloc+0x3c/0x300 [ 82.325820][ T8130] init_file+0x90/0x28c [ 82.325831][ T8130] alloc_empty_file+0x80/0x1cc [ 82.325841][ T8130] path_openat+0x78/0x18f0 [ 82.325853][ T8130] do_file_open+0x1c8/0x2e8 [ 82.325865][ T8130] do_open_execat+0x108/0x328 [ 82.325874][ T8130] alloc_bprm+0x40/0x69c [ 82.325883][ T8130] do_execveat_common+0x17c/0x52c [ 82.325892][ T8130] __arm64_sys_execve+0xa8/0xcc [ 82.325902][ T8130] invoke_syscall+0x98/0x244 [ 82.325911][ T8130] el0_svc_common+0xec/0x23c [ 82.325919][ T8130] do_el0_svc+0x4c/0x5c [ 82.325927][ T8130] el0_svc+0x60/0x1d8 [ 82.325936][ T8130] el0t_64_sync_handler+0x44/0x104 [ 82.325944][ T8130] el0t_64_sync+0x198/0x19c [ 82.371964][ T8129] FAULT_INJECTION: forcing a failure. [ 82.371964][ T8129] name fail_futex, interval 1, probability 0, space 0, times 1 [ 82.371989][ T8129] CPU: 0 UID: 0 PID: 8129 Comm: syz.9.1046 Not tainted syzkaller #0 PREEMPT [ 82.372001][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 82.372007][ T8129] Call trace: [ 82.372010][ T8129] show_stack+0x2c/0x3c (C) [ 82.372026][ T8129] __dump_stack+0x30/0x40 [ 82.372036][ T8129] dump_stack_lvl+0xd8/0x12c [ 82.372044][ T8129] dump_stack+0x1c/0x28 [ 82.372052][ T8129] should_fail_ex+0x418/0x58c [ 82.372064][ T8129] should_fail+0x14/0x24 [ 82.372073][ T8129] get_futex_key+0xd0c/0x12b0 [ 82.372085][ T8129] futex_lock_pi+0x1bc/0x6d8 [ 82.372093][ T8129] do_futex+0x2f8/0x378 [ 82.372105][ T8129] __arm64_sys_futex+0x2e4/0x418 [ 82.372117][ T8129] invoke_syscall+0x98/0x244 [ 82.372126][ T8129] el0_svc_common+0xec/0x23c [ 82.372135][ T8129] do_el0_svc+0x4c/0x5c [ 82.372143][ T8129] el0_svc+0x60/0x1d8 [ 82.372151][ T8129] el0t_64_sync_handler+0x44/0x104 [ 82.372160][ T8129] el0t_64_sync+0x198/0x19c [ 82.504841][ T8136] FAULT_INJECTION: forcing a failure. [ 82.504841][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 82.504863][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.9.1049 Not tainted syzkaller #0 PREEMPT [ 82.504875][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 82.504881][ T8136] Call trace: [ 82.504884][ T8136] show_stack+0x2c/0x3c (C) [ 82.504900][ T8136] __dump_stack+0x30/0x40 [ 82.504910][ T8136] dump_stack_lvl+0xd8/0x12c [ 82.504918][ T8136] dump_stack+0x1c/0x28 [ 82.504926][ T8136] should_fail_ex+0x418/0x58c [ 82.504937][ T8136] should_failslab+0xc4/0x120 [ 82.504947][ T8136] __kmalloc_cache_noprof+0x94/0x5fc [ 82.504958][ T8136] nft_netdev_hook_alloc+0x74/0x380 [ 82.504970][ T8136] nf_tables_parse_netdev_hooks+0x12c/0x4c0 [ 82.504982][ T8136] nft_flowtable_parse_hook+0x394/0x7d8 [ 82.504995][ T8136] nf_tables_newflowtable+0xe14/0x134c [ 82.505005][ T8136] nfnetlink_rcv+0xc8c/0x16ec [ 82.505015][ T8136] netlink_unicast+0x600/0x7f8 [ 82.505026][ T8136] netlink_sendmsg+0x648/0x948 [ 82.505038][ T8136] __sock_sendmsg+0xc8/0x17c [ 82.505049][ T8136] ____sys_sendmsg+0x3d0/0x6c8 [ 82.505061][ T8136] ___sys_sendmsg+0x198/0x224 [ 82.505072][ T8136] __sys_sendmsg+0x158/0x204 [ 82.505084][ T8136] __arm64_sys_sendmsg+0x88/0x9c [ 82.505095][ T8136] invoke_syscall+0x98/0x244 [ 82.505104][ T8136] el0_svc_common+0xec/0x23c [ 82.505113][ T8136] do_el0_svc+0x4c/0x5c [ 82.505121][ T8136] el0_svc+0x60/0x1d8 [ 82.505130][ T8136] el0t_64_sync_handler+0x44/0x104 [ 82.505138][ T8136] el0t_64_sync+0x198/0x19c [ 82.632598][ T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.640516][ T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.641400][ T258] bond0 (unregistering): Released all slaves [ 82.662341][ T258] bond1 (unregistering): (slave lo): Releasing backup interface [ 82.662547][ T258] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 82.663380][ T258] bond1 (unregistering): Released all slaves [ 82.871369][ T8147] FAULT_INJECTION: forcing a failure. [ 82.871369][ T8147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.871398][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.9.1054 Not tainted syzkaller #0 PREEMPT [ 82.871409][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 82.871416][ T8147] Call trace: [ 82.871419][ T8147] show_stack+0x2c/0x3c (C) [ 82.871436][ T8147] __dump_stack+0x30/0x40 [ 82.871446][ T8147] dump_stack_lvl+0xd8/0x12c [ 82.871455][ T8147] dump_stack+0x1c/0x28 [ 82.871463][ T8147] should_fail_ex+0x418/0x58c [ 82.871474][ T8147] should_fail+0x14/0x24 [ 82.871484][ T8147] should_fail_usercopy+0x20/0x30 [ 82.871494][ T8147] bpf_verifier_vlog+0x3f4/0xbc0 [ 82.871504][ T8147] __btf_verifier_log+0xe8/0x13c [ 82.871515][ T8147] btf_parse_hdr+0x2c8/0x71c [ 82.871524][ T8147] btf_new_fd+0x288/0x7a8 [ 82.871533][ T8147] bpf_btf_load+0x144/0x190 [ 82.871546][ T8147] __sys_bpf+0x7f0/0x82c [ 82.871557][ T8147] __arm64_sys_bpf+0xd0/0xec [ 82.871567][ T8147] invoke_syscall+0x98/0x244 [ 82.871576][ T8147] el0_svc_common+0xec/0x23c [ 82.871585][ T8147] do_el0_svc+0x4c/0x5c [ 82.871593][ T8147] el0_svc+0x60/0x1d8 [ 82.871602][ T8147] el0t_64_sync_handler+0x44/0x104 [ 82.871611][ T8147] el0t_64_sync+0x198/0x19c [ 83.193231][ T258] hsr_slave_0: left promiscuous mode [ 83.196454][ T258] hsr_slave_1: left promiscuous mode [ 83.198614][ T258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.199428][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.206825][ T4746] Bluetooth: hci0: command tx timeout [ 83.211164][ T258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.211180][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.222458][ T258] veth1_macvtap: left promiscuous mode [ 83.222491][ T258] veth0_macvtap: left promiscuous mode [ 83.222546][ T258] veth1_vlan: left promiscuous mode [ 83.222584][ T258] veth0_vlan: left promiscuous mode [ 83.412453][ T258] team0 (unregistering): Port device team_slave_1 removed [ 83.419111][ T258] team0 (unregistering): Port device team_slave_0 removed [ 83.543927][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.543954][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.544017][ T8057] bridge_slave_0: entered allmulticast mode [ 83.545351][ T8057] bridge_slave_0: entered promiscuous mode [ 83.555815][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.556337][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.556420][ T8057] bridge_slave_1: entered allmulticast mode [ 83.568260][ T8057] bridge_slave_1: entered promiscuous mode [ 83.573726][ T8025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.580604][ T8177] loop9: detected capacity change from 0 to 512 [ 83.583074][ T8177] EXT4-fs: Ignoring removed bh option [ 83.634090][ T8177] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.723874][ T8057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.724856][ T8057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.805206][ T8057] team0: Port device team_slave_0 added [ 83.818455][ T8057] team0: Port device team_slave_1 added [ 83.880308][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.892995][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.893006][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.893018][ T8057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.911685][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.911702][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.911721][ T8057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.007033][ T4746] Bluetooth: hci2: command tx timeout [ 84.030680][ T8057] hsr_slave_0: entered promiscuous mode [ 84.032903][ T8057] hsr_slave_1: entered promiscuous mode [ 84.037018][ T8057] debugfs: 'hsr0' already exists in 'hsr' [ 84.037034][ T8057] Cannot create hsr debugfs directory [ 84.553181][ T8223] syzkaller1: entered promiscuous mode [ 84.553199][ T8223] syzkaller1: entered allmulticast mode [ 84.569406][ T8233] gadgetfs: bound to dummy_udc driver [ 84.574131][ T4427] 8021q: adding VLAN 0 to HW filter on device eth13 [ 84.964686][ T8250] block device autoloading is deprecated and will be removed. [ 84.977296][ T8057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.984519][ T4855] kernel read not supported for file /tomoyo/domain_policy (pid: 4855 comm: kworker/0:4) [ 85.010908][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.011397][ T8057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.046589][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.048300][ T8057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.072250][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.080225][ T8057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.099249][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.211578][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.270752][ T8057] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.283335][ T8282] loop6: detected capacity change from 0 to 512 [ 85.287499][ T4746] Bluetooth: hci0: command tx timeout [ 85.298205][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.298240][ T7509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.298777][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.298796][ T7509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.350503][ T8282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.401384][ T8282] EXT4-fs error (device loop6): ext4_validate_block_bitmap:427: comm syz.6.1092: bg 0: bad block bitmap checksum [ 85.448953][ T8285] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.464185][ T8287] syzkaller1: entered promiscuous mode [ 85.464202][ T8287] syzkaller1: entered allmulticast mode [ 85.499106][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.641375][ T8303] loop6: detected capacity change from 0 to 1024 [ 85.641826][ T8303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.641844][ T8303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.641858][ T8303] EXT4-fs: Ignoring removed nobh option [ 85.681127][ T8303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.692558][ T4427] 8021q: adding VLAN 0 to HW filter on device eth15 [ 85.758180][ T8303] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1096: bg 0: block 112: padding at end of block bitmap is not set [ 85.777476][ T8303] EXT4-fs (loop6): Remounting filesystem read-only [ 85.778704][ T7509] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5172: inode #15: block 3: len 1: ext4_map_blocks returned -30 [ 85.836570][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.047304][ T8057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.107998][ T8057] veth0_vlan: entered promiscuous mode [ 86.125586][ T8057] veth1_vlan: entered promiscuous mode [ 86.261832][ T8335] loop7: detected capacity change from 0 to 512 [ 86.274572][ T8335] EXT4-fs: Ignoring removed bh option [ 86.317875][ T8057] veth0_macvtap: entered promiscuous mode [ 86.326461][ T8057] veth1_macvtap: entered promiscuous mode [ 86.361808][ T8335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.385363][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.425173][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.477950][ T258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.478016][ T258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.478032][ T258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.478047][ T258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.579407][ T8344] Bluetooth: MGMT ver 1.23 [ 86.646504][ T6388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.710980][ T258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.710998][ T258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.829583][ T7509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.829613][ T7509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.861241][ T8357] FAULT_INJECTION: forcing a failure. [ 86.861241][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 86.861264][ T8357] CPU: 0 UID: 0 PID: 8357 Comm: syz.6.1108 Not tainted syzkaller #0 PREEMPT [ 86.861275][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 86.861281][ T8357] Call trace: [ 86.861284][ T8357] show_stack+0x2c/0x3c (C) [ 86.861300][ T8357] __dump_stack+0x30/0x40 [ 86.861309][ T8357] dump_stack_lvl+0xd8/0x12c [ 86.861318][ T8357] dump_stack+0x1c/0x28 [ 86.861325][ T8357] should_fail_ex+0x418/0x58c [ 86.861337][ T8357] should_failslab+0xc4/0x120 [ 86.861347][ T8357] __kvmalloc_node_noprof+0x160/0x7fc [ 86.861358][ T8357] listxattr+0x58/0x2a0 [ 86.861370][ T8357] path_listxattrat+0x254/0x324 [ 86.861381][ T8357] __arm64_sys_flistxattr+0x8c/0xa0 [ 86.861392][ T8357] invoke_syscall+0x98/0x244 [ 86.861401][ T8357] el0_svc_common+0xec/0x23c [ 86.861410][ T8357] do_el0_svc+0x4c/0x5c [ 86.861418][ T8357] el0_svc+0x60/0x1d8 [ 86.861427][ T8357] el0t_64_sync_handler+0x44/0x104 [ 86.861435][ T8357] el0t_64_sync+0x198/0x19c [ 86.938056][ T4427] 8021q: adding VLAN 0 to HW filter on device eth17 [ 87.345599][ T8383] loop7: detected capacity change from 0 to 4096 [ 87.367426][ T4746] Bluetooth: hci0: command tx timeout [ 87.370727][ T8383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.535178][ T8397] loop9: detected capacity change from 0 to 512 [ 87.576420][ T8397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.764002][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.912882][ T4427] 8021q: adding VLAN 0 to HW filter on device eth16 [ 87.939805][ T8413] syzkaller1: entered promiscuous mode [ 87.939822][ T8413] syzkaller1: entered allmulticast mode [ 87.975234][ T6388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.067644][ T8415] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 88.091742][ T8418] macvlan0: entered promiscuous mode [ 88.124595][ T8415] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 88.365990][ T8434] loop9: detected capacity change from 0 to 512 [ 88.376190][ T8432] FAULT_INJECTION: forcing a failure. [ 88.376190][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 88.376211][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.0.1128 Not tainted syzkaller #0 PREEMPT [ 88.376222][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 88.376227][ T8432] Call trace: [ 88.376231][ T8432] show_stack+0x2c/0x3c (C) [ 88.376246][ T8432] __dump_stack+0x30/0x40 [ 88.376255][ T8432] dump_stack_lvl+0xd8/0x12c [ 88.376263][ T8432] dump_stack+0x1c/0x28 [ 88.376271][ T8432] should_fail_ex+0x418/0x58c [ 88.376282][ T8432] should_failslab+0xc4/0x120 [ 88.376292][ T8432] __kmalloc_cache_noprof+0x94/0x5fc [ 88.376303][ T8432] landlock_restrict_sibling_threads+0x578/0x114c [ 88.376318][ T8432] __arm64_sys_landlock_restrict_self+0x524/0xcd4 [ 88.376330][ T8432] invoke_syscall+0x98/0x244 [ 88.376339][ T8432] el0_svc_common+0xec/0x23c [ 88.376347][ T8432] do_el0_svc+0x4c/0x5c [ 88.376355][ T8432] el0_svc+0x60/0x1d8 [ 88.376364][ T8432] el0t_64_sync_handler+0x44/0x104 [ 88.376372][ T8432] el0t_64_sync+0x198/0x19c [ 88.425164][ T8434] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 88.425186][ T8434] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 88.444136][ T8434] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.1130: bad orphan inode 131083 [ 88.444162][ T8434] loop9: lost filesystem error report for type 5 error -117 [ 88.445567][ T8434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.500171][ T8434] EXT4-fs (loop9): shut down requested (2) [ 88.559637][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.591383][ T8440] FAULT_INJECTION: forcing a failure. [ 88.591383][ T8440] name failslab, interval 1, probability 0, space 0, times 0 [ 88.591408][ T8440] CPU: 0 UID: 0 PID: 8440 Comm: syz.1.1132 Not tainted syzkaller #0 PREEMPT [ 88.591419][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 88.591426][ T8440] Call trace: [ 88.591429][ T8440] show_stack+0x2c/0x3c (C) [ 88.591446][ T8440] __dump_stack+0x30/0x40 [ 88.591455][ T8440] dump_stack_lvl+0xd8/0x12c [ 88.591464][ T8440] dump_stack+0x1c/0x28 [ 88.591471][ T8440] should_fail_ex+0x418/0x58c [ 88.591482][ T8440] should_failslab+0xc4/0x120 [ 88.591493][ T8440] __kvmalloc_node_noprof+0x160/0x7fc [ 88.591504][ T8440] listxattr+0x58/0x2a0 [ 88.591516][ T8440] path_listxattrat+0x254/0x324 [ 88.591527][ T8440] __arm64_sys_flistxattr+0x8c/0xa0 [ 88.591538][ T8440] invoke_syscall+0x98/0x244 [ 88.591548][ T8440] el0_svc_common+0xec/0x23c [ 88.591556][ T8440] do_el0_svc+0x4c/0x5c [ 88.591564][ T8440] el0_svc+0x60/0x1d8 [ 88.591573][ T8440] el0t_64_sync_handler+0x44/0x104 [ 88.591582][ T8440] el0t_64_sync+0x198/0x19c [ 88.649581][ T8447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.922052][ T4427] 8021q: adding VLAN 0 to HW filter on device eth18 [ 88.959623][ T8470] loop1: detected capacity change from 0 to 512 [ 89.080432][ T8470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.108953][ T8476] netlink: 'syz.6.1144': attribute type 4 has an invalid length. [ 89.150750][ T8483] loop9: detected capacity change from 0 to 128 [ 89.155255][ T8476] netlink: 'syz.6.1144': attribute type 4 has an invalid length. [ 89.170412][ T8483] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.276228][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.325930][ T8487] device-mapper: integrity: The superblock was changed while the device was suspended [ 89.325945][ T8487] device-mapper: integrity: Error on superblock check: -22 [ 89.421522][ T8501] loop1: detected capacity change from 0 to 256 [ 89.447402][ T4746] Bluetooth: hci0: command tx timeout [ 89.559071][ T7786] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.673167][ T8518] loop9: detected capacity change from 0 to 1024 [ 89.692688][ T8518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.692723][ T8518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.692739][ T8518] EXT4-fs: Ignoring removed nobh option [ 89.721941][ T8518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.816569][ T8518] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1155: bg 0: block 112: padding at end of block bitmap is not set [ 89.827838][ T8518] EXT4-fs (loop9): Remounting filesystem read-only [ 89.827982][ T5503] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:5172: inode #15: block 3: len 1: ext4_map_blocks returned -30 [ 89.872738][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.939118][ T8530] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 89.950783][ T8527] loop0: detected capacity change from 0 to 8192 [ 89.985280][ T4427] 8021q: adding VLAN 0 to HW filter on device eth19 [ 90.395227][ T8548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.716488][ T8575] loop0: detected capacity change from 0 to 128 [ 90.735316][ T8575] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 90.743874][ T8575] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.865671][ T8581] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.914627][ T8057] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.988692][ T8589] loop9: detected capacity change from 0 to 512 [ 91.022611][ T8589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.203553][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.394602][ T8612] FAULT_INJECTION: forcing a failure. [ 91.394602][ T8612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.394629][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz.6.1182 Not tainted syzkaller #0 PREEMPT [ 91.394643][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 91.394649][ T8612] Call trace: [ 91.394653][ T8612] show_stack+0x2c/0x3c (C) [ 91.394669][ T8612] __dump_stack+0x30/0x40 [ 91.394678][ T8612] dump_stack_lvl+0xd8/0x12c [ 91.394686][ T8612] dump_stack+0x1c/0x28 [ 91.394694][ T8612] should_fail_ex+0x418/0x58c [ 91.394705][ T8612] should_fail+0x14/0x24 [ 91.394719][ T8612] should_fail_usercopy+0x20/0x30 [ 91.394729][ T8612] __arm64_sys_sysinfo+0xdc/0x234 [ 91.394739][ T8612] invoke_syscall+0x98/0x244 [ 91.394748][ T8612] el0_svc_common+0xec/0x23c [ 91.394757][ T8612] do_el0_svc+0x4c/0x5c [ 91.394765][ T8612] el0_svc+0x60/0x1d8 [ 91.394779][ T8612] el0t_64_sync_handler+0x44/0x104 [ 91.394787][ T8612] el0t_64_sync+0x198/0x19c [ 91.442421][ T4724] af_packet: tpacket_rcv: packet too big, clamped from 340 to 4294967272. macoff=96 [ 91.502749][ T8619] loop9: detected capacity change from 0 to 512 [ 91.512657][ T8619] EXT4-fs (loop9): Test dummy encryption mode enabled [ 91.521443][ T8619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.599528][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.738543][ T8632] loop0: detected capacity change from 0 to 1024 [ 91.743545][ T8632] EXT4-fs: Ignoring removed bh option [ 91.779282][ T8632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.816078][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1189'. [ 91.834313][ T8632] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.846095][ T8629] loop9: detected capacity change from 0 to 8192 [ 91.945427][ T8641] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.989798][ T8641] syz.7.1190 (pid 8641) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 92.019081][ T8057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.123196][ T6388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.462923][ T8667] netlink: 'syz.1.1200': attribute type 22 has an invalid length. [ 92.462942][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 92.496440][ T8665] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 92.584617][ T8667] netlink: 'syz.1.1200': attribute type 22 has an invalid length. [ 92.584635][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 92.661773][ T8673] FAULT_INJECTION: forcing a failure. [ 92.661773][ T8673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.661799][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.7.1202 Not tainted syzkaller #0 PREEMPT [ 92.661811][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 92.661817][ T8673] Call trace: [ 92.661820][ T8673] show_stack+0x2c/0x3c (C) [ 92.661835][ T8673] __dump_stack+0x30/0x40 [ 92.661844][ T8673] dump_stack_lvl+0xd8/0x12c [ 92.661852][ T8673] dump_stack+0x1c/0x28 [ 92.661860][ T8673] should_fail_ex+0x418/0x58c [ 92.661871][ T8673] should_fail_alloc_page+0xec/0x10c [ 92.661881][ T8673] prepare_alloc_pages+0x194/0x484 [ 92.661891][ T8673] __alloc_frozen_pages_noprof+0x180/0x578 [ 92.661902][ T8673] alloc_pages_mpol+0x1fc/0x3d0 [ 92.661913][ T8673] alloc_frozen_pages_noprof+0xc4/0x10c [ 92.661925][ T8673] alloc_pages_noprof+0x30/0x148 [ 92.661936][ T8673] get_free_pages_noprof+0x1c/0xbc [ 92.661946][ T8673] __kasan_populate_vmalloc+0x48/0x1d0 [ 92.661954][ T8673] alloc_vmap_area+0xcd8/0x12ec [ 92.661965][ T8673] __get_vm_area_node+0x210/0x32c [ 92.661976][ T8673] get_vm_area_caller+0x94/0xc8 [ 92.661988][ T8673] vmap+0xf8/0x214 [ 92.661998][ T8673] bpf_ringbuf_alloc+0x178/0x3d8 [ 92.662008][ T8673] ringbuf_map_alloc+0x1c8/0x2cc [ 92.662016][ T8673] map_create+0xa6c/0x153c [ 92.662028][ T8673] __sys_bpf+0x308/0x82c [ 92.662039][ T8673] __arm64_sys_bpf+0xd0/0xec [ 92.662049][ T8673] invoke_syscall+0x98/0x244 [ 92.662058][ T8673] el0_svc_common+0xec/0x23c [ 92.662066][ T8673] do_el0_svc+0x4c/0x5c [ 92.662074][ T8673] el0_svc+0x60/0x1d8 [ 92.662083][ T8673] el0t_64_sync_handler+0x44/0x104 [ 92.662091][ T8673] el0t_64_sync+0x198/0x19c [ 92.725798][ T8676] FAULT_INJECTION: forcing a failure. [ 92.725798][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.725818][ T8676] CPU: 0 UID: 0 PID: 8676 Comm: syz.0.1201 Not tainted syzkaller #0 PREEMPT [ 92.725828][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 92.725834][ T8676] Call trace: [ 92.725838][ T8676] show_stack+0x2c/0x3c (C) [ 92.725852][ T8676] __dump_stack+0x30/0x40 [ 92.725861][ T8676] dump_stack_lvl+0xd8/0x12c [ 92.725870][ T8676] dump_stack+0x1c/0x28 [ 92.725877][ T8676] should_fail_ex+0x418/0x58c [ 92.725889][ T8676] should_fail+0x14/0x24 [ 92.725898][ T8676] should_fail_usercopy+0x20/0x30 [ 92.725908][ T8676] bpf_verifier_vlog+0x3f4/0xbc0 [ 92.725918][ T8676] __btf_verifier_log+0xe8/0x13c [ 92.725929][ T8676] __btf_verifier_log_type+0x464/0x5e4 [ 92.725939][ T8676] btf_func_proto_check_meta+0x118/0x154 [ 92.725950][ T8676] btf_check_all_metas+0x294/0x84c [ 92.725960][ T8676] btf_parse_type_sec+0x104/0x1004 [ 92.725971][ T8676] btf_new_fd+0x33c/0x7a8 [ 92.725980][ T8676] bpf_btf_load+0x144/0x190 [ 92.725992][ T8676] __sys_bpf+0x7f0/0x82c [ 92.726003][ T8676] __arm64_sys_bpf+0xd0/0xec [ 92.726013][ T8676] invoke_syscall+0x98/0x244 [ 92.726022][ T8676] el0_svc_common+0xec/0x23c [ 92.726031][ T8676] do_el0_svc+0x4c/0x5c [ 92.726039][ T8676] el0_svc+0x60/0x1d8 [ 92.726048][ T8676] el0t_64_sync_handler+0x44/0x104 [ 92.726055][ T8676] el0t_64_sync+0x198/0x19c [ 92.830622][ T8678] EXT4-fs: Ignoring removed bh option [ 92.849172][ T8678] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.1203: inode #13: comm syz.7.1203: iget: illegal inode # [ 92.849195][ T8678] loop7: lost filesystem error report for type 5 error -117 [ 92.850235][ T8678] EXT4-fs (loop7): Remounting filesystem read-only [ 92.925289][ T8678] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 93.187568][ T8702] futex_wake_op: syz.1.1207 tries to shift op by 144; fix this program [ 93.308225][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1211'. [ 93.395905][ T8716] ip_tables: iptables: counters copy to user failed while replacing table [ 93.400297][ T8716] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 93.455831][ T8723] FAULT_INJECTION: forcing a failure. [ 93.455831][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 93.455856][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.9.1214 Not tainted syzkaller #0 PREEMPT [ 93.455869][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.455875][ T8723] Call trace: [ 93.455878][ T8723] show_stack+0x2c/0x3c (C) [ 93.455894][ T8723] __dump_stack+0x30/0x40 [ 93.455903][ T8723] dump_stack_lvl+0xd8/0x12c [ 93.455911][ T8723] dump_stack+0x1c/0x28 [ 93.455919][ T8723] should_fail_ex+0x418/0x58c [ 93.455930][ T8723] should_failslab+0xc4/0x120 [ 93.455940][ T8723] __kmalloc_cache_noprof+0x94/0x5fc [ 93.455951][ T8723] ip6_mc_add_src+0x698/0xde4 [ 93.455962][ T8723] ip6_mc_source+0xe74/0x15e8 [ 93.455970][ T8723] do_ipv6_mcast_group_source+0x34c/0x3cc [ 93.455982][ T8723] do_ipv6_setsockopt+0xfc0/0x2ba8 [ 93.455992][ T8723] ipv6_setsockopt+0x68/0x16c [ 93.456002][ T8723] udpv6_setsockopt+0xa8/0xc0 [ 93.456014][ T8723] sock_common_setsockopt+0xb0/0xcc [ 93.456026][ T8723] do_sock_setsockopt+0x1f0/0x330 [ 93.456038][ T8723] __sys_setsockopt+0x104/0x170 [ 93.456050][ T8723] __arm64_sys_setsockopt+0xc8/0xe4 [ 93.456062][ T8723] invoke_syscall+0x98/0x244 [ 93.456071][ T8723] el0_svc_common+0xec/0x23c [ 93.456079][ T8723] do_el0_svc+0x4c/0x5c [ 93.456088][ T8723] el0_svc+0x60/0x1d8 [ 93.456096][ T8723] el0t_64_sync_handler+0x44/0x104 [ 93.456104][ T8723] el0t_64_sync+0x198/0x19c [ 93.595746][ T8728] FAULT_INJECTION: forcing a failure. [ 93.595746][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 93.595774][ T8728] CPU: 0 UID: 0 PID: 8728 Comm: syz.0.1217 Not tainted syzkaller #0 PREEMPT [ 93.595786][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.595792][ T8728] Call trace: [ 93.595796][ T8728] show_stack+0x2c/0x3c (C) [ 93.595811][ T8728] __dump_stack+0x30/0x40 [ 93.595820][ T8728] dump_stack_lvl+0xd8/0x12c [ 93.595828][ T8728] dump_stack+0x1c/0x28 [ 93.595836][ T8728] should_fail_ex+0x418/0x58c [ 93.595847][ T8728] should_failslab+0xc4/0x120 [ 93.595857][ T8728] __kmalloc_cache_noprof+0x94/0x5fc [ 93.595868][ T8728] init_pseudo+0x60/0x18c [ 93.595880][ T8728] pipefs_init_fs_context+0x28/0x9c [ 93.595891][ T8728] alloc_fs_context+0x7d8/0xba4 [ 93.595903][ T8728] fs_context_for_mount+0x34/0x44 [ 93.595913][ T8728] __arm64_sys_fsopen+0xe8/0x1a4 [ 93.595924][ T8728] invoke_syscall+0x98/0x244 [ 93.595933][ T8728] el0_svc_common+0xec/0x23c [ 93.595941][ T8728] do_el0_svc+0x4c/0x5c [ 93.595949][ T8728] el0_svc+0x60/0x1d8 [ 93.595959][ T8728] el0t_64_sync_handler+0x44/0x104 [ 93.595967][ T8728] el0t_64_sync+0x198/0x19c [ 93.892124][ T8750] FAULT_INJECTION: forcing a failure. [ 93.892124][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 93.892147][ T8750] CPU: 0 UID: 0 PID: 8750 Comm: syz.9.1224 Not tainted syzkaller #0 PREEMPT [ 93.892159][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.892165][ T8750] Call trace: [ 93.892168][ T8750] show_stack+0x2c/0x3c (C) [ 93.892184][ T8750] __dump_stack+0x30/0x40 [ 93.892193][ T8750] dump_stack_lvl+0xd8/0x12c [ 93.892202][ T8750] dump_stack+0x1c/0x28 [ 93.892210][ T8750] should_fail_ex+0x418/0x58c [ 93.892222][ T8750] should_failslab+0xc4/0x120 [ 93.892232][ T8750] __kmalloc_cache_noprof+0x94/0x5fc [ 93.892243][ T8750] devcgroup_css_alloc+0x54/0xf0 [ 93.892255][ T8750] cgroup_apply_control_enable+0x4ac/0xae8 [ 93.892266][ T8750] cgroup_mkdir+0x768/0xbac [ 93.892274][ T8750] kernfs_iop_mkdir+0xe0/0x128 [ 93.892283][ T8750] vfs_mkdir+0x2e4/0x46c [ 93.892296][ T8750] filename_mkdirat+0x228/0x3f4 [ 93.892308][ T8750] __arm64_sys_mkdirat+0x9c/0xc0 [ 93.892320][ T8750] invoke_syscall+0x98/0x244 [ 93.892329][ T8750] el0_svc_common+0xec/0x23c [ 93.892338][ T8750] do_el0_svc+0x4c/0x5c [ 93.892346][ T8750] el0_svc+0x60/0x1d8 [ 93.892355][ T8750] el0t_64_sync_handler+0x44/0x104 [ 93.892363][ T8750] el0t_64_sync+0x198/0x19c [ 94.210879][ T8776] FAULT_INJECTION: forcing a failure. [ 94.210879][ T8776] name fail_futex, interval 1, probability 0, space 0, times 0 [ 94.210907][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.9.1232 Not tainted syzkaller #0 PREEMPT [ 94.210919][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 94.210925][ T8776] Call trace: [ 94.210928][ T8776] show_stack+0x2c/0x3c (C) [ 94.210945][ T8776] __dump_stack+0x30/0x40 [ 94.210955][ T8776] dump_stack_lvl+0xd8/0x12c [ 94.210963][ T8776] dump_stack+0x1c/0x28 [ 94.210971][ T8776] should_fail_ex+0x418/0x58c [ 94.210985][ T8776] should_fail+0x14/0x24 [ 94.210994][ T8776] should_fail_futex+0x48/0x5c [ 94.211007][ T8776] futex_lock_pi_atomic+0x144/0x898 [ 94.211015][ T8776] futex_lock_pi+0x248/0x6d8 [ 94.211023][ T8776] do_futex+0x2f8/0x378 [ 94.211035][ T8776] __arm64_sys_futex+0x2e4/0x418 [ 94.211048][ T8776] invoke_syscall+0x98/0x244 [ 94.211057][ T8776] el0_svc_common+0xec/0x23c [ 94.211065][ T8776] do_el0_svc+0x4c/0x5c [ 94.211074][ T8776] el0_svc+0x60/0x1d8 [ 94.211083][ T8776] el0t_64_sync_handler+0x44/0x104 [ 94.211092][ T8776] el0t_64_sync+0x198/0x19c [ 94.314251][ T8781] FAULT_INJECTION: forcing a failure. [ 94.314251][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 94.314277][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.0.1234 Not tainted syzkaller #0 PREEMPT [ 94.314289][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 94.314295][ T8781] Call trace: [ 94.314298][ T8781] show_stack+0x2c/0x3c (C) [ 94.314314][ T8781] __dump_stack+0x30/0x40 [ 94.314326][ T8781] dump_stack_lvl+0xd8/0x12c [ 94.314334][ T8781] dump_stack+0x1c/0x28 [ 94.314343][ T8781] should_fail_ex+0x418/0x58c [ 94.314354][ T8781] should_failslab+0xc4/0x120 [ 94.314364][ T8781] kmem_cache_alloc_noprof+0x94/0x5d4 [ 94.314375][ T8781] security_file_alloc+0x3c/0x300 [ 94.314389][ T8781] init_file+0x90/0x28c [ 94.314399][ T8781] alloc_empty_file+0x80/0x1cc [ 94.314409][ T8781] alloc_file+0x58/0x98 [ 94.314419][ T8781] alloc_file_pseudo+0xe0/0x198 [ 94.314430][ T8781] __anon_inode_getfile+0x118/0x1c8 [ 94.314441][ T8781] anon_inode_getfile_fmode+0x4c/0xc0 [ 94.314450][ T8781] do_eventfd+0x13c/0x280 [ 94.314461][ T8781] __arm64_sys_eventfd2+0x64/0x7c [ 94.314471][ T8781] invoke_syscall+0x98/0x244 [ 94.314480][ T8781] el0_svc_common+0xec/0x23c [ 94.314488][ T8781] do_el0_svc+0x4c/0x5c [ 94.314497][ T8781] el0_svc+0x60/0x1d8 [ 94.314506][ T8781] el0t_64_sync_handler+0x44/0x104 [ 94.314514][ T8781] el0t_64_sync+0x198/0x19c [ 94.594829][ T8799] syz_tun: entered allmulticast mode [ 94.612127][ T8799] pimreg: entered allmulticast mode [ 94.638250][ T8799] pimreg: left allmulticast mode [ 94.638336][ T8799] syz_tun: left allmulticast mode [ 95.032776][ T8821] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 95.148327][ T8828] FAULT_INJECTION: forcing a failure. [ 95.148327][ T8828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.148353][ T8828] CPU: 0 UID: 0 PID: 8828 Comm: syz.9.1250 Not tainted syzkaller #0 PREEMPT [ 95.148366][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 95.148372][ T8828] Call trace: [ 95.148376][ T8828] show_stack+0x2c/0x3c (C) [ 95.148392][ T8828] __dump_stack+0x30/0x40 [ 95.148402][ T8828] dump_stack_lvl+0xd8/0x12c [ 95.148410][ T8828] dump_stack+0x1c/0x28 [ 95.148418][ T8828] should_fail_ex+0x418/0x58c [ 95.148430][ T8828] should_fail+0x14/0x24 [ 95.148439][ T8828] should_fail_usercopy+0x20/0x30 [ 95.148449][ T8828] copy_from_sockptr+0x7c/0x1e0 [ 95.148464][ T8828] ip_mcast_join_leave+0xf8/0x1e8 [ 95.148472][ T8828] do_ip_setsockopt+0x118c/0x2628 [ 95.148485][ T8828] ip_setsockopt+0x80/0x128 [ 95.148492][ T8828] raw_setsockopt+0xd8/0x294 [ 95.148502][ T8828] sock_common_setsockopt+0xb0/0xcc [ 95.148514][ T8828] do_sock_setsockopt+0x1f0/0x330 [ 95.148526][ T8828] __sys_setsockopt+0x104/0x170 [ 95.148538][ T8828] __arm64_sys_setsockopt+0xc8/0xe4 [ 95.148550][ T8828] invoke_syscall+0x98/0x244 [ 95.148559][ T8828] el0_svc_common+0xec/0x23c [ 95.148567][ T8828] do_el0_svc+0x4c/0x5c [ 95.148575][ T8828] el0_svc+0x60/0x1d8 [ 95.148584][ T8828] el0t_64_sync_handler+0x44/0x104 [ 95.148592][ T8828] el0t_64_sync+0x198/0x19c [ 95.211345][ T8826] Injecting memory failure for pfn 0x106fae at process virtual address 0x20000000 [ 95.212483][ T8826] Memory failure: 0x106fae: failed to unmap page (folio mapcount=1) [ 95.212497][ T8826] Memory failure: 0x106fae: recovery action for unmapping failed page: Failed [ 95.521111][ T8847] set_capacity_and_notify: 2 callbacks suppressed [ 95.521125][ T8847] loop6: detected capacity change from 0 to 4096 [ 95.524835][ T8852] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.525244][ T8847] EXT4-fs (loop6): Test dummy encryption mode enabled [ 95.552250][ T8847] EXT4-fs mount: 2 callbacks suppressed [ 95.552268][ T8847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.652043][ T8861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.732166][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.948330][ T8870] FAULT_INJECTION: forcing a failure. [ 95.948330][ T8870] name failslab, interval 1, probability 0, space 0, times 0 [ 95.948354][ T8870] CPU: 0 UID: 0 PID: 8870 Comm: syz.6.1259 Not tainted syzkaller #0 PREEMPT [ 95.948367][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 95.948378][ T8870] Call trace: [ 95.948381][ T8870] show_stack+0x2c/0x3c (C) [ 95.948399][ T8870] __dump_stack+0x30/0x40 [ 95.948410][ T8870] dump_stack_lvl+0xd8/0x12c [ 95.948420][ T8870] dump_stack+0x1c/0x28 [ 95.948429][ T8870] should_fail_ex+0x418/0x58c [ 95.948440][ T8870] should_failslab+0xc4/0x120 [ 95.948450][ T8870] kmem_cache_alloc_node_noprof+0x98/0x604 [ 95.948461][ T8870] alloc_vmap_area+0x210/0x12ec [ 95.948473][ T8870] __get_vm_area_node+0x210/0x32c [ 95.948484][ T8870] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 95.948497][ T8870] __vmalloc_node_noprof+0xec/0x14c [ 95.948508][ T8870] __vmalloc_noprof+0x64/0x8c [ 95.948519][ T8870] bpf_check+0xd90/0x2414 [ 95.948528][ T8870] bpf_prog_load+0xf4c/0x1554 [ 95.948540][ T8870] __sys_bpf+0x7d4/0x82c [ 95.948551][ T8870] __arm64_sys_bpf+0xd0/0xec [ 95.948561][ T8870] invoke_syscall+0x98/0x244 [ 95.948570][ T8870] el0_svc_common+0xec/0x23c [ 95.948578][ T8870] do_el0_svc+0x4c/0x5c [ 95.948586][ T8870] el0_svc+0x60/0x1d8 [ 95.948595][ T8870] el0t_64_sync_handler+0x44/0x104 [ 95.948603][ T8870] el0t_64_sync+0x198/0x19c [ 95.948725][ T8870] syz.6.1259: vmalloc error: size 408, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 95.948797][ T8870] CPU: 0 UID: 0 PID: 8870 Comm: syz.6.1259 Not tainted syzkaller #0 PREEMPT [ 95.948806][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 95.948811][ T8870] Call trace: [ 95.948813][ T8870] show_stack+0x2c/0x3c (C) [ 95.948823][ T8870] __dump_stack+0x30/0x40 [ 95.948831][ T8870] dump_stack_lvl+0xd8/0x12c [ 95.948839][ T8870] dump_stack+0x1c/0x28 [ 95.948847][ T8870] warn_alloc+0x1c4/0x1d8 [ 95.948858][ T8870] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 95.948870][ T8870] __vmalloc_node_noprof+0xec/0x14c [ 95.948882][ T8870] __vmalloc_noprof+0x64/0x8c [ 95.948894][ T8870] bpf_check+0xd90/0x2414 [ 95.948902][ T8870] bpf_prog_load+0xf4c/0x1554 [ 95.948914][ T8870] __sys_bpf+0x7d4/0x82c [ 95.948925][ T8870] __arm64_sys_bpf+0xd0/0xec [ 95.948935][ T8870] invoke_syscall+0x98/0x244 [ 95.948944][ T8870] el0_svc_common+0xec/0x23c [ 95.948952][ T8870] do_el0_svc+0x4c/0x5c [ 95.948961][ T8870] el0_svc+0x60/0x1d8 [ 95.948969][ T8870] el0t_64_sync_handler+0x44/0x104 [ 95.948977][ T8870] el0t_64_sync+0x198/0x19c [ 95.948986][ T8870] Mem-Info: [ 95.948991][ T8870] active_anon:23 inactive_anon:9815 isolated_anon:0 [ 95.948991][ T8870] active_file:2685 inactive_file:14462 isolated_file:0 [ 95.948991][ T8870] unevictable:768 dirty:286 writeback:0 [ 95.948991][ T8870] slab_reclaimable:10020 slab_unreclaimable:98019 [ 95.948991][ T8870] mapped:31588 shmem:3758 pagetables:3764 [ 95.948991][ T8870] sec_pagetables:0 bounce:0 [ 95.948991][ T8870] kernel_misc_reclaimable:0 [ 95.948991][ T8870] free:1461971 free_pcp:4443 free_cma:7616 [ 95.949013][ T8870] Node 0 active_anon:92kB inactive_anon:39260kB active_file:10740kB inactive_file:57848kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:126352kB dirty:1144kB writeback:0kB shmem:15032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10752kB pagetables:15056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 95.949036][ T8870] Node 0 DMA free:3077888kB boost:0kB min:20404kB low:25504kB high:30604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 95.949061][ T8870] lowmem_reserve[]: 0 0 3636 3636 3636 [ 95.949081][ T8870] Node 0 Normal free:2769996kB boost:0kB min:24648kB low:30808kB high:36968kB reserved_highatomic:0kB free_highatomic:0kB active_anon:92kB inactive_anon:39260kB active_file:10740kB inactive_file:57848kB unevictable:3072kB writepending:1144kB zspages:0kB present:5242880kB managed:3724172kB mlocked:0kB bounce:0kB free_pcp:17772kB local_pcp:17772kB free_cma:0kB [ 95.949106][ T8870] lowmem_reserve[]: 0 0 0 0 0 [ 95.949124][ T8870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 95.949186][ T8870] Node 0 Normal: 685*4kB (UE) 695*8kB (UE) 1486*16kB (UME) 836*32kB (UME) 970*64kB (UME) 434*128kB (UM) 243*256kB (UME) 278*512kB (UM) 165*1024kB (UME) 2*2048kB (ME) 541*4096kB (UM) = 2769996kB [ 95.949267][ T8870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.949274][ T8870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 95.949281][ T8870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 95.949288][ T8870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 95.949295][ T8870] 20902 total pagecache pages [ 95.949299][ T8870] 0 pages in swap cache [ 95.949302][ T8870] Free swap = 120900kB [ 95.949306][ T8870] Total swap = 124996kB [ 95.949310][ T8870] 2097152 pages RAM [ 95.949313][ T8870] 0 pages HighMem/MovableOnly [ 95.949317][ T8870] 396061 pages reserved [ 95.949320][ T8870] 8192 pages cma reserved [ 95.949324][ T8870] 3 pages hwpoisoned [ 96.235645][ T8880] loop6: detected capacity change from 0 to 512 [ 96.245037][ T8880] EXT4-fs warning (device loop6): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 96.667610][ T8905] FAULT_INJECTION: forcing a failure. [ 96.667610][ T8905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.667634][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.6.1271 Not tainted syzkaller #0 PREEMPT [ 96.667645][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 96.667650][ T8905] Call trace: [ 96.667654][ T8905] show_stack+0x2c/0x3c (C) [ 96.667669][ T8905] __dump_stack+0x30/0x40 [ 96.667677][ T8905] dump_stack_lvl+0xd8/0x12c [ 96.667686][ T8905] dump_stack+0x1c/0x28 [ 96.667693][ T8905] should_fail_ex+0x418/0x58c [ 96.667704][ T8905] should_fail+0x14/0x24 [ 96.667719][ T8905] should_fail_usercopy+0x20/0x30 [ 96.667729][ T8905] proc_pid_cmdline_read+0x520/0xa14 [ 96.667742][ T8905] vfs_read+0x230/0x8c8 [ 96.667752][ T8905] ksys_read+0x12c/0x228 [ 96.667761][ T8905] __arm64_sys_read+0x84/0x98 [ 96.667770][ T8905] invoke_syscall+0x98/0x244 [ 96.667779][ T8905] el0_svc_common+0xec/0x23c [ 96.667787][ T8905] do_el0_svc+0x4c/0x5c [ 96.667796][ T8905] el0_svc+0x60/0x1d8 [ 96.667804][ T8905] el0t_64_sync_handler+0x44/0x104 [ 96.667813][ T8905] el0t_64_sync+0x198/0x19c [ 96.779429][ T8904] FAULT_INJECTION: forcing a failure. [ 96.779429][ T8904] name failslab, interval 1, probability 0, space 0, times 0 [ 96.779452][ T8904] CPU: 0 UID: 0 PID: 8904 Comm: syz.9.1269 Not tainted syzkaller #0 PREEMPT [ 96.779465][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 96.779471][ T8904] Call trace: [ 96.779474][ T8904] show_stack+0x2c/0x3c (C) [ 96.779491][ T8904] __dump_stack+0x30/0x40 [ 96.779500][ T8904] dump_stack_lvl+0xd8/0x12c [ 96.779508][ T8904] dump_stack+0x1c/0x28 [ 96.779516][ T8904] should_fail_ex+0x418/0x58c [ 96.779527][ T8904] should_failslab+0xc4/0x120 [ 96.779537][ T8904] kmem_cache_alloc_noprof+0x94/0x5d4 [ 96.779548][ T8904] __kernfs_new_node+0xf0/0x7d8 [ 96.779557][ T8904] kernfs_new_node+0xe8/0x130 [ 96.779564][ T8904] __kernfs_create_file+0x60/0x2e0 [ 96.779574][ T8904] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 96.779583][ T8904] sysfs_merge_group+0x164/0x2ac [ 96.779593][ T8904] dpm_sysfs_add+0xc8/0x258 [ 96.779605][ T8904] device_add+0x468/0x9e0 [ 96.779614][ T8904] netdev_register_kobject+0x184/0x328 [ 96.779628][ T8904] register_netdevice+0xd74/0x14c0 [ 96.779637][ T8904] ipip6_tunnel_create+0xf8/0x14c [ 96.779649][ T8904] ipip6_tunnel_locate+0x49c/0x6bc [ 96.779661][ T8904] ipip6_tunnel_ctl+0x24c/0x500 [ 96.779671][ T8904] ip_tunnel_siocdevprivate+0xf8/0x194 [ 96.779681][ T8904] ipip6_tunnel_siocdevprivate+0x1d4/0x1384 [ 96.779692][ T8904] dev_ifsioc+0x654/0xc34 [ 96.779700][ T8904] dev_ioctl+0x560/0xc88 [ 96.779708][ T8904] sock_ioctl+0x734/0x7ec [ 96.779726][ T8904] __arm64_sys_ioctl+0x154/0x1cc [ 96.779736][ T8904] invoke_syscall+0x98/0x244 [ 96.779746][ T8904] el0_svc_common+0xec/0x23c [ 96.779754][ T8904] do_el0_svc+0x4c/0x5c [ 96.779762][ T8904] el0_svc+0x60/0x1d8 [ 96.779771][ T8904] el0t_64_sync_handler+0x44/0x104 [ 96.779779][ T8904] el0t_64_sync+0x198/0x19c [ 97.138434][ T8934] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.217121][ T8932] FAULT_INJECTION: forcing a failure. [ 97.217121][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 97.217148][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.0.1282 Not tainted syzkaller #0 PREEMPT [ 97.217160][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 97.217167][ T8932] Call trace: [ 97.217170][ T8932] show_stack+0x2c/0x3c (C) [ 97.217187][ T8932] __dump_stack+0x30/0x40 [ 97.217196][ T8932] dump_stack_lvl+0xd8/0x12c [ 97.217205][ T8932] dump_stack+0x1c/0x28 [ 97.217213][ T8932] should_fail_ex+0x418/0x58c [ 97.217223][ T8932] should_failslab+0xc4/0x120 [ 97.217234][ T8932] __kmalloc_cache_noprof+0x94/0x5fc [ 97.217245][ T8932] vkms_plane_duplicate_state+0x58/0x114 [ 97.217258][ T8932] drm_atomic_get_plane_state+0x208/0x568 [ 97.217272][ T8932] drm_client_modeset_commit_atomic+0x194/0x6b8 [ 97.217285][ T8932] drm_client_modeset_commit_locked+0xd0/0x494 [ 97.217298][ T8932] drm_fb_helper_pan_display+0x1b0/0x788 [ 97.217310][ T8932] fb_pan_display+0x2e4/0x53c [ 97.217321][ T8932] bit_update_start+0x4c/0x1c0 [ 97.217329][ T8932] fbcon_modechanged+0x458/0x698 [ 97.217341][ T8932] fbcon_set_all_vcs+0x3e8/0x430 [ 97.217353][ T8932] fbcon_update_vcs+0x2c/0x4c [ 97.217364][ T8932] fb_set_var_from_user+0xa8/0xe0 [ 97.217374][ T8932] do_fb_ioctl+0x554/0x7a4 [ 97.217385][ T8932] fb_ioctl+0x48/0x68 [ 97.217395][ T8932] __arm64_sys_ioctl+0x154/0x1cc [ 97.217405][ T8932] invoke_syscall+0x98/0x244 [ 97.217414][ T8932] el0_svc_common+0xec/0x23c [ 97.217423][ T8932] do_el0_svc+0x4c/0x5c [ 97.217431][ T8932] el0_svc+0x60/0x1d8 [ 97.217440][ T8932] el0t_64_sync_handler+0x44/0x104 [ 97.217448][ T8932] el0t_64_sync+0x198/0x19c [ 97.355816][ T8946] loop7: detected capacity change from 0 to 128 [ 97.371855][ T8946] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.433293][ T8953] loop9: detected capacity change from 0 to 512 [ 97.467503][ T8953] EXT4-fs: Mount option(s) incompatible with ext2 [ 97.495185][ T6388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.564007][ T8961] FAULT_INJECTION: forcing a failure. [ 97.564007][ T8961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.564033][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.1.1290 Not tainted syzkaller #0 PREEMPT [ 97.564047][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 97.564053][ T8961] Call trace: [ 97.564057][ T8961] show_stack+0x2c/0x3c (C) [ 97.564073][ T8961] __dump_stack+0x30/0x40 [ 97.564083][ T8961] dump_stack_lvl+0xd8/0x12c [ 97.564091][ T8961] dump_stack+0x1c/0x28 [ 97.564099][ T8961] should_fail_ex+0x418/0x58c [ 97.564110][ T8961] should_fail+0x14/0x24 [ 97.564119][ T8961] should_fail_usercopy+0x20/0x30 [ 97.564130][ T8961] _inline_copy_from_user+0x3c/0x174 [ 97.564144][ T8961] do_sock_getsockopt+0x210/0x720 [ 97.564156][ T8961] __sys_getsockopt+0xfc/0x168 [ 97.564167][ T8961] __arm64_sys_getsockopt+0xc8/0xe4 [ 97.564179][ T8961] invoke_syscall+0x98/0x244 [ 97.564188][ T8961] el0_svc_common+0xec/0x23c [ 97.564196][ T8961] do_el0_svc+0x4c/0x5c [ 97.564204][ T8961] el0_svc+0x60/0x1d8 [ 97.564213][ T8961] el0t_64_sync_handler+0x44/0x104 [ 97.564221][ T8961] el0t_64_sync+0x198/0x19c [ 97.630806][ T8953] loop9: detected capacity change from 0 to 512 [ 97.670294][ T8953] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.1286: corrupted in-inode xattr: bad e_name length [ 97.670332][ T8953] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.676262][ T8953] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1286: couldn't read orphan inode 15 (err -117) [ 97.676291][ T8953] loop9: lost filesystem error report for type 5 error -117 [ 97.676721][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 97.676736][ C0] EXT4-fs (loop9): initial error at time 97: ext4_iget_extra_inode:5210: inode 15 [ 97.676761][ C0] EXT4-fs (loop9): last error at time 97: ext4_orphan_get:1408 [ 97.693754][ T8953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.750815][ T8965] loop7: detected capacity change from 0 to 4096 [ 97.756383][ T8965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.830509][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 97.853258][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.855642][ T8965] EXT4-fs error (device loop7): ext4_quota_enable:7257: comm syz.7.1291: Bad quota inum: 131076, type: 1 [ 97.855871][ T8965] EXT4-fs warning (device loop7): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=131076). Please run e2fsck to fix. [ 97.976393][ T6388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.091140][ T8987] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1297'. [ 98.091206][ T8987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.091214][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 98.296335][ T9003] nbd1: detected capacity change from 0 to 4 [ 98.336065][ T9003] block nbd1: shutting down sockets [ 98.365062][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.365146][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.366071][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.366090][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.376842][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.376863][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.376971][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.376990][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.377036][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.377047][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.377062][ T5087] ldm_validate_partition_table(): Disk read failed. [ 98.377095][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.377105][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.377144][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.377154][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.377192][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.377202][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.377238][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.377248][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.377261][ T5087] Dev nbd1: unable to read RDB block 0 [ 98.377289][ T4386] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.377299][ T4386] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.377376][ T5087] nbd1: unable to read partition table [ 98.377441][ T5087] nbd1: partition table beyond EOD, truncated [ 98.441438][ T5087] ldm_validate_partition_table(): Disk read failed. [ 98.441664][ T5087] Dev nbd1: unable to read RDB block 0 [ 98.442001][ T5087] nbd1: unable to read partition table [ 98.442078][ T5087] nbd1: partition table beyond EOD, truncated [ 98.482346][ T9008] ubi0: attaching mtd0 [ 98.483938][ T9008] ubi0: scanning is finished [ 98.483948][ T9008] ubi0: empty MTD device detected [ 98.483988][ T9008] FAULT_INJECTION: forcing a failure. [ 98.483988][ T9008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.484002][ T9008] CPU: 0 UID: 0 PID: 9008 Comm: syz.7.1303 Not tainted syzkaller #0 PREEMPT [ 98.484013][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 98.484019][ T9008] Call trace: [ 98.484022][ T9008] show_stack+0x2c/0x3c (C) [ 98.484037][ T9008] __dump_stack+0x30/0x40 [ 98.484046][ T9008] dump_stack_lvl+0xd8/0x12c [ 98.484055][ T9008] dump_stack+0x1c/0x28 [ 98.484063][ T9008] should_fail_ex+0x418/0x58c [ 98.484074][ T9008] should_fail_alloc_page+0xec/0x10c [ 98.484085][ T9008] prepare_alloc_pages+0x194/0x484 [ 98.484095][ T9008] __alloc_frozen_pages_noprof+0x180/0x578 [ 98.484106][ T9008] __alloc_pages_noprof+0x18/0x100 [ 98.484117][ T9008] alloc_pages_bulk_noprof+0x610/0x7d8 [ 98.484127][ T9008] __kasan_populate_vmalloc+0xc0/0x1d0 [ 98.484136][ T9008] alloc_vmap_area+0xcd8/0x12ec [ 98.484147][ T9008] __get_vm_area_node+0x210/0x32c [ 98.484159][ T9008] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 98.484171][ T9008] __vmalloc_node_noprof+0xec/0x14c [ 98.484183][ T9008] vzalloc_noprof+0x3c/0x4c [ 98.484194][ T9008] ubi_read_volume_table+0x208/0x254c [ 98.484206][ T9008] ubi_attach+0x2830/0x4178 [ 98.484214][ T9008] ubi_attach_mtd_dev+0x1240/0x2a70 [ 98.484224][ T9008] ctrl_cdev_ioctl+0x340/0x558 [ 98.484235][ T9008] __arm64_sys_ioctl+0x154/0x1cc [ 98.484245][ T9008] invoke_syscall+0x98/0x244 [ 98.484254][ T9008] el0_svc_common+0xec/0x23c [ 98.484263][ T9008] do_el0_svc+0x4c/0x5c [ 98.484270][ T9008] el0_svc+0x60/0x1d8 [ 98.484279][ T9008] el0t_64_sync_handler+0x44/0x104 [ 98.484288][ T9008] el0t_64_sync+0x198/0x19c [ 98.549800][ T8975] overlayfs: statfs failed on './file0' [ 98.570883][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1302'. [ 98.744844][ T9017] syz_tun: entered allmulticast mode [ 98.755674][ T9015] syz_tun: left allmulticast mode [ 98.790187][ T9008] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 99.281676][ T9050] FAULT_INJECTION: forcing a failure. [ 99.281676][ T9050] name failslab, interval 1, probability 0, space 0, times 0 [ 99.281698][ T9050] CPU: 0 UID: 0 PID: 9050 Comm: syz.1.1314 Not tainted syzkaller #0 PREEMPT [ 99.281717][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 99.281725][ T9050] Call trace: [ 99.281729][ T9050] show_stack+0x2c/0x3c (C) [ 99.281748][ T9050] __dump_stack+0x30/0x40 [ 99.281757][ T9050] dump_stack_lvl+0xd8/0x12c [ 99.281766][ T9050] dump_stack+0x1c/0x28 [ 99.281774][ T9050] should_fail_ex+0x418/0x58c [ 99.281785][ T9050] should_failslab+0xc4/0x120 [ 99.281796][ T9050] __kmalloc_cache_noprof+0x94/0x5fc [ 99.281807][ T9050] nfs_init_fs_context+0x68/0x10dc [ 99.281816][ T9050] alloc_fs_context+0x7d8/0xba4 [ 99.281828][ T9050] fs_context_for_mount+0x34/0x44 [ 99.281839][ T9050] do_new_mount+0x158/0x538 [ 99.281847][ T9050] path_mount+0x5f0/0xa88 [ 99.281855][ T9050] do_mount+0xe8/0x148 [ 99.281862][ T9050] __arm64_sys_mount+0x33c/0x388 [ 99.281871][ T9050] invoke_syscall+0x98/0x244 [ 99.281880][ T9050] el0_svc_common+0xec/0x23c [ 99.281888][ T9050] do_el0_svc+0x4c/0x5c [ 99.281896][ T9050] el0_svc+0x60/0x1d8 [ 99.281906][ T9050] el0t_64_sync_handler+0x44/0x104 [ 99.281914][ T9050] el0t_64_sync+0x198/0x19c [ 99.364866][ T9053] nullb0: [POWERTEC] p1 [ 99.364984][ T9053] nullb0: p1 start 809004142 is beyond EOD, truncated [ 99.961508][ T9096] loop9: detected capacity change from 0 to 1024 [ 99.999016][ T9096] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.104492][ T9101] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1329: bg 0: block 112: padding at end of block bitmap is not set [ 100.274595][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.832370][ T9132] binder: 9131:9132 got reply transaction with no transaction stack [ 100.832395][ T9132] binder: 9131:9132 transaction reply to 0:0 failed 6/29201/-71, code 0 size 0-0 line 3156 [ 100.852913][ T9135] netlink: 1148 bytes leftover after parsing attributes in process `syz.6.1343'. [ 100.852941][ T9135] netlink: 1148 bytes leftover after parsing attributes in process `syz.6.1343'. [ 101.019072][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 101.019094][ T9144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.019109][ T9144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.019910][ T9144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.019921][ T9144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.051739][ T9147] loop7: detected capacity change from 0 to 4096 [ 101.062931][ T9147] EXT4-fs: Ignoring removed orlov option [ 101.074369][ T9147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.156340][ T6388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.225889][ T9153] FAULT_INJECTION: forcing a failure. [ 101.225889][ T9153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.225910][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: syz.7.1349 Not tainted syzkaller #0 PREEMPT [ 101.225920][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 101.225927][ T9153] Call trace: [ 101.225930][ T9153] show_stack+0x2c/0x3c (C) [ 101.225946][ T9153] __dump_stack+0x30/0x40 [ 101.225956][ T9153] dump_stack_lvl+0xd8/0x12c [ 101.225964][ T9153] dump_stack+0x1c/0x28 [ 101.225974][ T9153] should_fail_ex+0x418/0x58c [ 101.225988][ T9153] should_fail+0x14/0x24 [ 101.225997][ T9153] should_fail_usercopy+0x20/0x30 [ 101.226007][ T9153] bpf_verifier_vlog+0x81c/0xbc0 [ 101.226018][ T9153] __btf_verifier_log+0xe8/0x13c [ 101.226031][ T9153] btf_parse_hdr+0x3f4/0x71c [ 101.226040][ T9153] btf_new_fd+0x288/0x7a8 [ 101.226049][ T9153] bpf_btf_load+0x144/0x190 [ 101.226063][ T9153] __sys_bpf+0x7f0/0x82c [ 101.226074][ T9153] __arm64_sys_bpf+0xd0/0xec [ 101.226085][ T9153] invoke_syscall+0x98/0x244 [ 101.226094][ T9153] el0_svc_common+0xec/0x23c [ 101.226103][ T9153] do_el0_svc+0x4c/0x5c [ 101.226111][ T9153] el0_svc+0x60/0x1d8 [ 101.226121][ T9153] el0t_64_sync_handler+0x44/0x104 [ 101.226129][ T9153] el0t_64_sync+0x198/0x19c [ 101.565933][ T9163] loop0: detected capacity change from 0 to 512 [ 101.566443][ T9163] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.582273][ T9163] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.1353: corrupted in-inode xattr: e_value size too large [ 101.582305][ T9163] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.582761][ T9163] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1353: couldn't read orphan inode 15 (err -117) [ 101.582782][ T9163] loop0: lost filesystem error report for type 5 error -117 [ 101.583620][ T9163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.629118][ T875] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.629161][ T875] binder: undelivered death notification, 0000000000000000 [ 101.660629][ T9163] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.1353: Logical block already allocated [ 101.698393][ T8057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.729194][ T9167] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1354'. [ 101.959623][ T9180] loop9: detected capacity change from 0 to 256 [ 101.982558][ T9177] loop0: detected capacity change from 0 to 4096 [ 102.011284][ T9177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.122391][ T8057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.219755][ T9187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.237104][ T9187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.285497][ T9190] binder: 9189:9190 ioctl c0306201 20000080 returned -14 [ 102.291335][ T9187] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 102.291362][ T9187] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 102.291702][ T9187] overlayfs: d_ino too big (59, ino=9223372036854776150, xinobits=3) [ 102.291908][ T9187] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 102.291999][ T9187] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 102.292106][ T9187] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 102.292191][ T9187] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 102.292278][ T9187] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 102.292362][ T9187] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 102.292776][ T9187] overlayfs: d_ino too big (instances, ino=4611686018427389803, xinobits=3) [ 102.547375][ T9203] loop1: detected capacity change from 0 to 256 [ 102.639041][ T9212] loop6: detected capacity change from 0 to 512 [ 102.649753][ T9212] EXT4-fs: Ignoring removed nobh option [ 102.657264][ T9203] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 102.657281][ T9203] FAT-fs (loop1): Filesystem has been set read-only [ 102.679005][ T9212] EXT4-fs (loop6): 1 truncate cleaned up [ 102.679458][ T9212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.815639][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.979022][ T9235] binder: 9232:9235 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.979046][ T9235] binder: 9235 RLIMIT_NICE not set [ 102.980395][ T9235] binder: 9232:9235 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.980410][ T9235] binder: 9235 RLIMIT_NICE not set [ 103.132448][ T9244] loop1: detected capacity change from 0 to 512 [ 103.182216][ T9244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.259438][ T9244] EXT4-fs (loop1): shut down requested (1) [ 103.310029][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.422207][ T9256] loop1: detected capacity change from 0 to 2048 [ 103.431601][ T9258] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1394'. [ 103.467880][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.468315][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.510412][ T9256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.586984][ T9265] FAULT_INJECTION: forcing a failure. [ 103.586984][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.587014][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.7.1396 Not tainted syzkaller #0 PREEMPT [ 103.587028][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 103.587034][ T9265] Call trace: [ 103.587037][ T9265] show_stack+0x2c/0x3c (C) [ 103.587056][ T9265] __dump_stack+0x30/0x40 [ 103.587066][ T9265] dump_stack_lvl+0xd8/0x12c [ 103.587075][ T9265] dump_stack+0x1c/0x28 [ 103.587083][ T9265] should_fail_ex+0x418/0x58c [ 103.587094][ T9265] should_fail+0x14/0x24 [ 103.587103][ T9265] should_fail_usercopy+0x20/0x30 [ 103.587113][ T9265] _inline_copy_from_user+0x3c/0x174 [ 103.587123][ T9265] do_handle_open+0x47c/0x95c [ 103.587131][ T9265] __arm64_sys_open_by_handle_at+0x88/0x9c [ 103.587139][ T9265] invoke_syscall+0x98/0x244 [ 103.587148][ T9265] el0_svc_common+0xec/0x23c [ 103.587156][ T9265] do_el0_svc+0x4c/0x5c [ 103.587165][ T9265] el0_svc+0x60/0x1d8 [ 103.587174][ T9265] el0t_64_sync_handler+0x44/0x104 [ 103.587182][ T9265] el0t_64_sync+0x198/0x19c [ 103.641248][ T9271] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 103.671731][ T9269] binder: 9268:9269 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 103.683772][ T9271] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.683801][ T9271] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.683801][ T9271] [ 103.683811][ T9271] EXT4-fs (loop1): Total free blocks count 0 [ 103.683819][ T9271] EXT4-fs (loop1): Free/Dirty block details [ 103.683902][ T9271] EXT4-fs (loop1): free_blocks=66060288 [ 103.683923][ T9271] EXT4-fs (loop1): dirty_blocks=32 [ 103.683930][ T9271] EXT4-fs (loop1): Block reservation details [ 103.683937][ T9271] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 103.717287][ T9272] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 103.808857][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 104.044021][ T9307] loop7: detected capacity change from 0 to 128 [ 104.070410][ T9307] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.178203][ T6388] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.218850][ T9316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1411'. [ 104.280412][ T9318] FAULT_INJECTION: forcing a failure. [ 104.280412][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 104.280436][ T9318] CPU: 0 UID: 0 PID: 9318 Comm: syz.7.1412 Not tainted syzkaller #0 PREEMPT [ 104.280449][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 104.280456][ T9318] Call trace: [ 104.280461][ T9318] show_stack+0x2c/0x3c (C) [ 104.280480][ T9318] __dump_stack+0x30/0x40 [ 104.280490][ T9318] dump_stack_lvl+0xd8/0x12c [ 104.280499][ T9318] dump_stack+0x1c/0x28 [ 104.280507][ T9318] should_fail_ex+0x418/0x58c [ 104.280518][ T9318] should_failslab+0xc4/0x120 [ 104.280528][ T9318] __kmalloc_cache_noprof+0x94/0x5fc [ 104.280540][ T9318] sget_fc+0x630/0x1520 [ 104.280551][ T9318] kernfs_get_tree+0x1b0/0x7dc [ 104.280564][ T9318] vfs_get_tree+0x90/0x28c [ 104.280575][ T9318] fc_mount+0x24/0xac [ 104.280587][ T9318] do_new_mount+0x2a4/0x538 [ 104.280595][ T9318] path_mount+0x5f0/0xa88 [ 104.280603][ T9318] do_mount+0xe8/0x148 [ 104.280610][ T9318] __arm64_sys_mount+0x33c/0x388 [ 104.280618][ T9318] invoke_syscall+0x98/0x244 [ 104.280627][ T9318] el0_svc_common+0xec/0x23c [ 104.280636][ T9318] do_el0_svc+0x4c/0x5c [ 104.280644][ T9318] el0_svc+0x60/0x1d8 [ 104.280653][ T9318] el0t_64_sync_handler+0x44/0x104 [ 104.280661][ T9318] el0t_64_sync+0x198/0x19c [ 104.414679][ T9324] loop0: detected capacity change from 0 to 512 [ 104.509899][ T9327] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 104.510587][ T9327] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 104.935544][ T9339] FAULT_INJECTION: forcing a failure. [ 104.935544][ T9339] name failslab, interval 1, probability 0, space 0, times 0 [ 104.935565][ T9339] CPU: 0 UID: 0 PID: 9339 Comm: syz.9.1420 Not tainted syzkaller #0 PREEMPT [ 104.935576][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 104.935582][ T9339] Call trace: [ 104.935585][ T9339] show_stack+0x2c/0x3c (C) [ 104.935601][ T9339] __dump_stack+0x30/0x40 [ 104.935611][ T9339] dump_stack_lvl+0xd8/0x12c [ 104.935620][ T9339] dump_stack+0x1c/0x28 [ 104.935628][ T9339] should_fail_ex+0x418/0x58c [ 104.935640][ T9339] should_failslab+0xc4/0x120 [ 104.935651][ T9339] kmem_cache_alloc_noprof+0x94/0x5d4 [ 104.935663][ T9339] __kernfs_new_node+0xf0/0x7d8 [ 104.935672][ T9339] kernfs_new_node+0xe8/0x130 [ 104.935679][ T9339] __kernfs_create_file+0x60/0x2e0 [ 104.935689][ T9339] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 104.935698][ T9339] sysfs_merge_group+0x164/0x2ac [ 104.935708][ T9339] dpm_sysfs_add+0xc8/0x258 [ 104.935725][ T9339] device_add+0x468/0x9e0 [ 104.935735][ T9339] netdev_register_kobject+0x184/0x328 [ 104.935749][ T9339] register_netdevice+0xd74/0x14c0 [ 104.935760][ T9339] __ip_tunnel_create+0x34c/0x4b0 [ 104.935771][ T9339] ip_tunnel_ctl+0x3fc/0x810 [ 104.935779][ T9339] ipip_tunnel_ctl+0xfc/0x1d0 [ 104.935791][ T9339] ip_tunnel_siocdevprivate+0xf8/0x194 [ 104.935801][ T9339] dev_ifsioc+0x654/0xc34 [ 104.935809][ T9339] dev_ioctl+0x560/0xc88 [ 104.935816][ T9339] sock_ioctl+0x734/0x7ec [ 104.935829][ T9339] __arm64_sys_ioctl+0x154/0x1cc [ 104.935839][ T9339] invoke_syscall+0x98/0x244 [ 104.935848][ T9339] el0_svc_common+0xec/0x23c [ 104.935856][ T9339] do_el0_svc+0x4c/0x5c [ 104.935865][ T9339] el0_svc+0x60/0x1d8 [ 104.935873][ T9339] el0t_64_sync_handler+0x44/0x104 [ 104.935881][ T9339] el0t_64_sync+0x198/0x19c [ 105.150845][ T9347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.934633][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.000091][ T9351] FAULT_INJECTION: forcing a failure. [ 106.000091][ T9351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.000118][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.0.1426 Not tainted syzkaller #0 PREEMPT [ 106.000132][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 106.000138][ T9351] Call trace: [ 106.000141][ T9351] show_stack+0x2c/0x3c (C) [ 106.000158][ T9351] __dump_stack+0x30/0x40 [ 106.000168][ T9351] dump_stack_lvl+0xd8/0x12c [ 106.000176][ T9351] dump_stack+0x1c/0x28 [ 106.000184][ T9351] should_fail_ex+0x418/0x58c [ 106.000196][ T9351] should_fail_alloc_page+0xec/0x10c [ 106.000206][ T9351] prepare_alloc_pages+0x194/0x484 [ 106.000217][ T9351] __alloc_frozen_pages_noprof+0x180/0x578 [ 106.000228][ T9351] alloc_pages_mpol+0x1fc/0x3d0 [ 106.000240][ T9351] alloc_frozen_pages_noprof+0xc4/0x10c [ 106.000251][ T9351] alloc_pages_noprof+0x30/0x148 [ 106.000262][ T9351] get_free_pages_noprof+0x1c/0xbc [ 106.000273][ T9351] __kasan_populate_vmalloc+0x48/0x1d0 [ 106.000281][ T9351] alloc_vmap_area+0xcd8/0x12ec [ 106.000293][ T9351] __get_vm_area_node+0x210/0x32c [ 106.000305][ T9351] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 106.000317][ T9351] __vmalloc_node_noprof+0xec/0x14c [ 106.000328][ T9351] vmalloc_noprof+0x3c/0x4c [ 106.000340][ T9351] xt_copy_counters+0x21c/0x324 [ 106.000353][ T9351] do_ip6t_set_ctl+0x220/0xc38 [ 106.000362][ T9351] nf_setsockopt+0xa0/0xe4 [ 106.000370][ T9351] ipv6_setsockopt+0x130/0x16c [ 106.000381][ T9351] tcp_setsockopt+0xcc/0xe8 [ 106.000393][ T9351] sock_common_setsockopt+0xb0/0xcc [ 106.000405][ T9351] do_sock_setsockopt+0x1f0/0x330 [ 106.000418][ T9351] __sys_setsockopt+0x104/0x170 [ 106.000429][ T9351] __arm64_sys_setsockopt+0xc8/0xe4 [ 106.000441][ T9351] invoke_syscall+0x98/0x244 [ 106.000450][ T9351] el0_svc_common+0xec/0x23c [ 106.000459][ T9351] do_el0_svc+0x4c/0x5c [ 106.000467][ T9351] el0_svc+0x60/0x1d8 [ 106.000476][ T9351] el0t_64_sync_handler+0x44/0x104 [ 106.000484][ T9351] el0t_64_sync+0x198/0x19c [ 106.000506][ T9351] warn_alloc: 1 callbacks suppressed [ 106.000511][ T9351] syz.0.1426: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 106.000542][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.0.1426 Not tainted syzkaller #0 PREEMPT [ 106.000551][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 106.000556][ T9351] Call trace: [ 106.000558][ T9351] show_stack+0x2c/0x3c (C) [ 106.000567][ T9351] __dump_stack+0x30/0x40 [ 106.000575][ T9351] dump_stack_lvl+0xd8/0x12c [ 106.000583][ T9351] dump_stack+0x1c/0x28 [ 106.000591][ T9351] warn_alloc+0x1c4/0x1d8 [ 106.000601][ T9351] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 106.000613][ T9351] __vmalloc_node_noprof+0xec/0x14c [ 106.000625][ T9351] vmalloc_noprof+0x3c/0x4c [ 106.000636][ T9351] xt_copy_counters+0x21c/0x324 [ 106.000647][ T9351] do_ip6t_set_ctl+0x220/0xc38 [ 106.000659][ T9351] nf_setsockopt+0xa0/0xe4 [ 106.000668][ T9351] ipv6_setsockopt+0x130/0x16c [ 106.000678][ T9351] tcp_setsockopt+0xcc/0xe8 [ 106.000689][ T9351] sock_common_setsockopt+0xb0/0xcc [ 106.000701][ T9351] do_sock_setsockopt+0x1f0/0x330 [ 106.000717][ T9351] __sys_setsockopt+0x104/0x170 [ 106.000729][ T9351] __arm64_sys_setsockopt+0xc8/0xe4 [ 106.000741][ T9351] invoke_syscall+0x98/0x244 [ 106.000749][ T9351] el0_svc_common+0xec/0x23c [ 106.000757][ T9351] do_el0_svc+0x4c/0x5c [ 106.000765][ T9351] el0_svc+0x60/0x1d8 [ 106.000773][ T9351] el0t_64_sync_handler+0x44/0x104 [ 106.000782][ T9351] el0t_64_sync+0x198/0x19c [ 106.004235][ T9351] Mem-Info: [ 106.004246][ T9351] active_anon:23 inactive_anon:18318 isolated_anon:0 [ 106.004246][ T9351] active_file:3189 inactive_file:16367 isolated_file:0 [ 106.004246][ T9351] unevictable:768 dirty:408 writeback:0 [ 106.004246][ T9351] slab_reclaimable:10027 slab_unreclaimable:98518 [ 106.004246][ T9351] mapped:29269 shmem:12081 pagetables:3846 [ 106.004246][ T9351] sec_pagetables:0 bounce:0 [ 106.004246][ T9351] kernel_misc_reclaimable:0 [ 106.004246][ T9351] free:1444267 free_pcp:10469 free_cma:7616 [ 106.004269][ T9351] Node 0 active_anon:92kB inactive_anon:73272kB active_file:12756kB inactive_file:65468kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117076kB dirty:1632kB writeback:0kB shmem:48324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10960kB pagetables:15384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 106.004291][ T9351] Node 0 DMA free:3077888kB boost:0kB min:20404kB low:25504kB high:30604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 106.004316][ T9351] lowmem_reserve[]: 0 0 3636 3636 3636 [ 106.004336][ T9351] Node 0 Normal free:2699180kB boost:0kB min:24648kB low:30808kB high:36968kB reserved_highatomic:0kB free_highatomic:0kB active_anon:92kB inactive_anon:73272kB active_file:12756kB inactive_file:65468kB unevictable:3072kB writepending:1632kB zspages:0kB present:5242880kB managed:3724172kB mlocked:0kB bounce:0kB free_pcp:41876kB local_pcp:41876kB free_cma:0kB [ 106.004361][ T9351] lowmem_reserve[]: 0 0 0 0 0 [ 106.004379][ T9351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 106.004526][ T9351] Node 0 Normal: 31*4kB (UE) 10*8kB (UE) 984*16kB (UM) 197*32kB (UE) 671*64kB (UE) 408*128kB (U) 229*256kB (UME) 272*512kB (U) 164*1024kB (UE) 2*2048kB (ME) 540*4096kB (UM) = 2699180kB [ 106.004610][ T9351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.004618][ T9351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 106.004625][ T9351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 106.004632][ T9351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 106.004639][ T9351] 31633 total pagecache pages [ 106.004643][ T9351] 0 pages in swap cache [ 106.004647][ T9351] Free swap = 124996kB [ 106.004650][ T9351] Total swap = 124996kB [ 106.004654][ T9351] 2097152 pages RAM [ 106.004658][ T9351] 0 pages HighMem/MovableOnly [ 106.004661][ T9351] 396061 pages reserved [ 106.004664][ T9351] 8192 pages cma reserved [ 106.004668][ T9351] 3 pages hwpoisoned [ 106.297462][ T9366] FAULT_INJECTION: forcing a failure. [ 106.297462][ T9366] name failslab, interval 1, probability 0, space 0, times 0 [ 106.297484][ T9366] CPU: 0 UID: 0 PID: 9366 Comm: syz.9.1432 Not tainted syzkaller #0 PREEMPT [ 106.297494][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 106.297500][ T9366] Call trace: [ 106.297503][ T9366] show_stack+0x2c/0x3c (C) [ 106.297519][ T9366] __dump_stack+0x30/0x40 [ 106.297529][ T9366] dump_stack_lvl+0xd8/0x12c [ 106.297537][ T9366] dump_stack+0x1c/0x28 [ 106.297545][ T9366] should_fail_ex+0x418/0x58c [ 106.297557][ T9366] should_failslab+0xc4/0x120 [ 106.297567][ T9366] __kmalloc_noprof+0x108/0x6c8 [ 106.297578][ T9366] inotify_handle_inode_event+0x1b0/0x654 [ 106.297592][ T9366] fsnotify_handle_inode_event+0x2c8/0x3a8 [ 106.297603][ T9366] fsnotify+0x11a0/0x16c0 [ 106.297614][ T9366] __fsnotify_parent+0x3e8/0x530 [ 106.297624][ T9366] __fput+0x268/0x74c [ 106.297635][ T9366] fput_close_sync+0x10c/0x278 [ 106.297646][ T9366] __arm64_sys_close+0x80/0x110 [ 106.297654][ T9366] invoke_syscall+0x98/0x244 [ 106.297663][ T9366] el0_svc_common+0xec/0x23c [ 106.297671][ T9366] do_el0_svc+0x4c/0x5c [ 106.297679][ T9366] el0_svc+0x60/0x1d8 [ 106.297688][ T9366] el0t_64_sync_handler+0x44/0x104 [ 106.297696][ T9366] el0t_64_sync+0x198/0x19c [ 106.900479][ T9289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.097621][ T9384] ip6erspan0: entered allmulticast mode [ 107.477591][ T9407] device-mapper: table: 248:3: integrity: Device lookup failed (-ENOENT) [ 107.477610][ T9407] device-mapper: ioctl: error adding target to table [ 107.771190][ T9420] set_capacity_and_notify: 1 callbacks suppressed [ 107.771204][ T9420] loop9: detected capacity change from 0 to 4096 [ 107.796254][ T9420] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.811069][ T9420] EXT4-fs (loop9): Test dummy encryption mode enabled [ 107.827674][ T9420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.959204][ T7786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.039926][ T9430] FAULT_INJECTION: forcing a failure. [ 108.039926][ T9430] name failslab, interval 1, probability 0, space 0, times 0 [ 108.039949][ T9430] CPU: 0 UID: 0 PID: 9430 Comm: syz.7.1454 Not tainted syzkaller #0 PREEMPT [ 108.039960][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 108.039966][ T9430] Call trace: [ 108.039969][ T9430] show_stack+0x2c/0x3c (C) [ 108.039985][ T9430] __dump_stack+0x30/0x40 [ 108.039994][ T9430] dump_stack_lvl+0xd8/0x12c [ 108.040002][ T9430] dump_stack+0x1c/0x28 [ 108.040010][ T9430] should_fail_ex+0x418/0x58c [ 108.040021][ T9430] should_failslab+0xc4/0x120 [ 108.040031][ T9430] __kmalloc_noprof+0x108/0x6c8 [ 108.040042][ T9430] usb_hcd_submit_urb+0x6c0/0x169c [ 108.040053][ T9430] usb_submit_urb+0xd44/0x1458 [ 108.040062][ T9430] usb_start_wait_urb+0x104/0x478 [ 108.040073][ T9430] usb_control_msg+0x1e8/0x378 [ 108.040083][ T9430] hub_ext_port_status+0x154/0x5a4 [ 108.040095][ T9430] hub_activate+0x59c/0x15f8 [ 108.040104][ T9430] hub_resume+0x64/0x2bc [ 108.040111][ T9430] usb_resume_interface+0x214/0x3c0 [ 108.040124][ T9430] usb_resume_both+0x494/0x798 [ 108.040135][ T9430] usb_runtime_resume+0x24/0x34 [ 108.040147][ T9430] __rpm_callback+0x124/0x2f8 [ 108.040156][ T9430] rpm_callback+0x70/0x138 [ 108.040164][ T9430] rpm_resume+0xab8/0xfb4 [ 108.040176][ T9430] __pm_runtime_resume+0xfc/0x180 [ 108.040188][ T9430] usb_autoresume_device+0x2c/0x114 [ 108.040200][ T9430] usbdev_open+0x164/0x674 [ 108.040209][ T9430] chrdev_open+0x398/0x3e8 [ 108.040221][ T9430] do_dentry_open+0x5c4/0xfbc [ 108.040230][ T9430] vfs_open+0x44/0x2dc [ 108.040237][ T9430] path_openat+0x1084/0x18f0 [ 108.040250][ T9430] do_file_open+0x1c8/0x2e8 [ 108.040261][ T9430] do_sys_openat2+0x114/0x1e8 [ 108.040269][ T9430] do_sys_open+0xb0/0xe0 [ 108.040277][ T9430] __arm64_sys_openat+0xa8/0xc4 [ 108.040286][ T9430] invoke_syscall+0x98/0x244 [ 108.040295][ T9430] el0_svc_common+0xec/0x23c [ 108.040303][ T9430] do_el0_svc+0x4c/0x5c [ 108.040311][ T9430] el0_svc+0x60/0x1d8 [ 108.040320][ T9430] el0t_64_sync_handler+0x44/0x104 [ 108.040328][ T9430] el0t_64_sync+0x198/0x19c [ 108.299939][ T9442] sctp: [Deprecated]: syz.7.1459 (pid 9442) Use of int in max_burst socket option deprecated. [ 108.299939][ T9442] Use struct sctp_assoc_value instead [ 108.497475][ T9452] FAULT_INJECTION: forcing a failure. [ 108.497475][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 108.497502][ T9452] CPU: 0 UID: 0 PID: 9452 Comm: syz.7.1463 Not tainted syzkaller #0 PREEMPT [ 108.497515][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 108.497521][ T9452] Call trace: [ 108.497524][ T9452] show_stack+0x2c/0x3c (C) [ 108.497540][ T9452] __dump_stack+0x30/0x40 [ 108.497549][ T9452] dump_stack_lvl+0xd8/0x12c [ 108.497557][ T9452] dump_stack+0x1c/0x28 [ 108.497565][ T9452] should_fail_ex+0x418/0x58c [ 108.497576][ T9452] should_failslab+0xc4/0x120 [ 108.497586][ T9452] __kmalloc_cache_noprof+0x94/0x5fc [ 108.497597][ T9452] alloc_pipe_info+0xec/0x420 [ 108.497607][ T9452] splice_direct_to_actor+0x63c/0x7a8 [ 108.497616][ T9452] do_splice_direct_actor+0x140/0x228 [ 108.497625][ T9452] do_splice_direct+0x58/0x70 [ 108.497632][ T9452] do_sendfile+0x40c/0x6c0 [ 108.497643][ T9452] __arm64_sys_sendfile64+0x1c4/0x28c [ 108.497653][ T9452] invoke_syscall+0x98/0x244 [ 108.497662][ T9452] el0_svc_common+0xec/0x23c [ 108.497670][ T9452] do_el0_svc+0x4c/0x5c [ 108.497678][ T9452] el0_svc+0x60/0x1d8 [ 108.497687][ T9452] el0t_64_sync_handler+0x44/0x104 [ 108.497695][ T9452] el0t_64_sync+0x198/0x19c [ 108.641347][ T9457] FAULT_INJECTION: forcing a failure. [ 108.641347][ T9457] name failslab, interval 1, probability 0, space 0, times 0 [ 108.641374][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.6.1465 Not tainted syzkaller #0 PREEMPT [ 108.641387][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 108.641394][ T9457] Call trace: [ 108.641397][ T9457] show_stack+0x2c/0x3c (C) [ 108.641413][ T9457] __dump_stack+0x30/0x40 [ 108.641423][ T9457] dump_stack_lvl+0xd8/0x12c [ 108.641431][ T9457] dump_stack+0x1c/0x28 [ 108.641439][ T9457] should_fail_ex+0x418/0x58c [ 108.641450][ T9457] should_failslab+0xc4/0x120 [ 108.641460][ T9457] kmem_cache_alloc_noprof+0x94/0x5d4 [ 108.641471][ T9457] __anon_vma_prepare+0xc4/0x3f8 [ 108.641481][ T9457] madvise_vma_behavior+0x2a94/0x339c [ 108.641490][ T9457] madvise_walk_vmas+0x4c8/0x9bc [ 108.641498][ T9457] madvise_do_behavior+0x5f0/0x7c0 [ 108.641507][ T9457] do_madvise+0x28c/0x2f0 [ 108.641515][ T9457] __arm64_sys_madvise+0xac/0xc8 [ 108.641523][ T9457] invoke_syscall+0x98/0x244 [ 108.641532][ T9457] el0_svc_common+0xec/0x23c [ 108.641540][ T9457] do_el0_svc+0x4c/0x5c [ 108.641548][ T9457] el0_svc+0x60/0x1d8 [ 108.641557][ T9457] el0t_64_sync_handler+0x44/0x104 [ 108.641565][ T9457] el0t_64_sync+0x198/0x19c [ 108.833589][ T9466] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 108.979614][ T9478] loop6: detected capacity change from 0 to 1024 [ 109.008690][ T9478] EXT4-fs: Ignoring removed oldalloc option [ 109.036549][ T9478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.074731][ T9478] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1472: bg 0: block 112: padding at end of block bitmap is not set [ 109.083207][ T9478] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 109.083228][ T9478] EXT4-fs (loop6): This should not happen!! Data will be lost [ 109.083228][ T9478] [ 109.083237][ T9478] EXT4-fs (loop6): Total free blocks count 0 [ 109.083244][ T9478] EXT4-fs (loop6): Free/Dirty block details [ 109.083252][ T9478] EXT4-fs (loop6): free_blocks=0 [ 109.083336][ T9478] EXT4-fs (loop6): dirty_blocks=64 [ 109.083343][ T9478] EXT4-fs (loop6): Block reservation details [ 109.083350][ T9478] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 109.128511][ T9486] FAULT_INJECTION: forcing a failure. [ 109.128511][ T9486] name failslab, interval 1, probability 0, space 0, times 0 [ 109.128538][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.0.1475 Not tainted syzkaller #0 PREEMPT [ 109.128551][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 109.128557][ T9486] Call trace: [ 109.128560][ T9486] show_stack+0x2c/0x3c (C) [ 109.128578][ T9486] __dump_stack+0x30/0x40 [ 109.128589][ T9486] dump_stack_lvl+0xd8/0x12c [ 109.128598][ T9486] dump_stack+0x1c/0x28 [ 109.128606][ T9486] should_fail_ex+0x418/0x58c [ 109.128619][ T9486] should_failslab+0xc4/0x120 [ 109.128631][ T9486] __kmalloc_noprof+0x108/0x6c8 [ 109.128645][ T9486] sk_prot_alloc+0xc4/0x1e8 [ 109.128655][ T9486] sk_alloc+0x44/0x320 [ 109.128664][ T9486] can_create+0x19c/0x530 [ 109.128677][ T9486] __sock_create+0x31c/0x670 [ 109.128688][ T9486] __sys_socket_create+0xc0/0x11c [ 109.128699][ T9486] __sys_socket+0x44/0xec [ 109.128710][ T9486] __arm64_sys_socket+0x84/0x9c [ 109.128729][ T9486] invoke_syscall+0x98/0x244 [ 109.128739][ T9486] el0_svc_common+0xec/0x23c [ 109.128747][ T9486] do_el0_svc+0x4c/0x5c [ 109.128756][ T9486] el0_svc+0x60/0x1d8 [ 109.128765][ T9486] el0t_64_sync_handler+0x44/0x104 [ 109.128773][ T9486] el0t_64_sync+0x198/0x19c [ 109.289232][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.026686][ C0] sched: DL replenish lagged too much [ 126.026758][ T1611] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.036785][ T1611] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.888630][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 30s! [ 150.888669][ C0] Showing busy workqueues and worker pools: [ 150.888674][ C0] workqueue events: flags=0x100 [ 150.888728][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=25 refcnt=26 [ 150.888745][ C0] in-flight: 10:xfrm_state_gc_task for 39s [ 150.888772][ C0] pending: psi_avgs_work, 10*nsim_dev_hwstats_traffic_work, psi_avgs_work, vmstat_shepherd, 3*psi_avgs_work, 7*ovs_dp_masks_rebalance, drm_fb_helper_damage_work