last executing test programs: 28.119555531s ago: executing program 4 (id=843): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x9, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = dup(r3) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{0xff5b, 0x0, 0x0, 0x3}, 'syz1\x00', 0x4}) ioctl$UI_DEV_CREATE(r3, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 27.263713828s ago: executing program 4 (id=845): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 27.167614594s ago: executing program 4 (id=846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000010000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e0000001000000000000000000000000fe8000000000000000000000000000aa6c040000ffffffff0a4f0a0000000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000400000000000001000001fc0200000000000008000000000000003c000000000000000a000a002c001300"], 0x118}}, 0xff80) 27.156863511s ago: executing program 4 (id=848): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000900)=""/121, 0x79}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f00000018c0)=""/156, 0x9c}], 0x4}, 0x60}], 0x1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/vkms/mydev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x2) r4 = fsmount(r2, 0x1, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) process_vm_writev(r5, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/145, 0x91}], 0x1, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/147, 0x93}], 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32=0x41424344, @ANYBLOB="5c02fffc90781000080a00000003200000061e7910009b00000000000000fe06f989edf000220eec876a521cf0162791f002abfe06e2d4c3d9a200699c32a7e588645577ff29d29ff45f080a00000002000000d9"], 0x0) sendfile(r4, r2, &(0x7f0000000000)=0x8000000000000001, 0x59e9fbb3) 26.995215389s ago: executing program 4 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x20000008, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0xc, "d92984ad1ca44c226af5160e961711a000f2170e65e3f50327e4221c0000000000195f0000000000005700", 0x100000100000003c}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000280)={0x34, 0x2, 0x3, "d5470000002f1a0e0000000700", 0x20323159}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x3, 0x4, {{0x33, 0x4, 0x1, 0x2, 0xcc, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x27, 0xa2, [@multicast1, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast1, @private=0xa010102, @private=0xa010101]}, @noop, @lsrr={0x83, 0x1b, 0xf7, [@multicast2, @loopback, @remote, @empty, @broadcast, @rand_addr=0x64010100]}, @lsrr={0x83, 0xf, 0xd1, [@private=0xa0100fe, @local, @empty]}, @generic={0x88, 0xc, "3d7837867e8e061ae0cf"}, @ssrr={0x89, 0x7, 0xaf, [@loopback]}, @timestamp_addr={0x44, 0x44, 0x48, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@empty, 0x65}, {@multicast1, 0x9}, {@multicast2, 0xffffffff}, {@multicast1, 0x9}, {@broadcast}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}, @timestamp_prespec={0x44, 0x4, 0xa7, 0x3, 0x3, [{@multicast2, 0x6}]}]}}}}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r7, &(0x7f0000000f00)=@other={'lock', ' ', 'none'}, 0xa) pwrite64(r6, &(0x7f0000000300)='2', 0x1, 0x8080c60) fallocate(r6, 0x3, 0x3f, 0x8000c62) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x14}}, {{0xa, 0xffff, 0x0, @empty, 0x7}}}, 0x108) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x18, 0x5a, 0xc6b747b6bf1c6b95, 0xffffffff, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x1008, &(0x7f00000030c0)=""/4104, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x200c8d1) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc0}, {0x2000000000}, {0x7}}}, 0xb8}}, 0x4000800) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4, 0x4}], 0x2, &(0x7f0000000580)=""/119, 0x77}, 0x11160) 26.003563972s ago: executing program 4 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000080), 0x1004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)}, {&(0x7f00000000c0)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 26.003077946s ago: executing program 32 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000080), 0x1004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)}, {&(0x7f00000000c0)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 23.57550425s ago: executing program 1 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000080), 0x1004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)}, {&(0x7f00000000c0)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 22.603950054s ago: executing program 1 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = syz_open_dev$evdev(&(0x7f0000001580), 0xb, 0x180) prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000015c0)=""/159) mount(0x0, &(0x7f0000000080)='./config/vkms/mydev/planes/plane0/type\x00', &(0x7f0000000040)='qnx4\x00', 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/vkms/mydev/planes/plane0/type\x00', 0x1, 0x84) write$P9_RREADLINK(r1, &(0x7f0000000240)={0x17, 0x17, 0x1, {0xe, './config/file0'}}, 0x17) 22.519633331s ago: executing program 1 (id=898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f002eb9e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 22.435449174s ago: executing program 1 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r3, r2, 0x0, 0x7ffffffd) renameat2(r1, &(0x7f0000000100)='./config/nvmet/ports/1/addr_traddr\x00', r3, &(0x7f00000001c0)='./config\x00', 0x2) capset(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) getdents64(r4, 0x0, 0x22) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000000940)="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", 0x101) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000300)='net/snmp\x00') capset(&(0x7f0000000240)={0x87432ce61d5b4eee, r6}, &(0x7f0000000280)={0x6, 0x5, 0x52a, 0xe, 0x80000001, 0x5}) 22.232253599s ago: executing program 1 (id=905): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x9, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = dup(r3) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{0xff5b, 0x0, 0x0, 0x3}, 'syz1\x00', 0x4}) ioctl$UI_DEV_CREATE(r3, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 21.033066973s ago: executing program 1 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x801, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000400)='./config/vkms/mydev/planes/plane0/type\x00', 0x40001, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000240)={0x17, 0x17, 0x1, {0xe, './config/file0'}}, 0x17) 20.984911495s ago: executing program 33 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x801, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000400)='./config/vkms/mydev/planes/plane0/type\x00', 0x40001, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000240)={0x17, 0x17, 0x1, {0xe, './config/file0'}}, 0x17) 7.603387569s ago: executing program 3 (id=1099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x14}}, 0x200440c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", '\x00', "4c5293d719408a98"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES64=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000002580)={[{@name={'name', 0x3d, 'wuser_'}}, {@name={'name', 0x3d, 'user_.'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 7.040535068s ago: executing program 3 (id=1101): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0, 0x11}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 6.988235335s ago: executing program 3 (id=1102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8003c000a0300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000005000100000000000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) 6.931371586s ago: executing program 3 (id=1103): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x802, 0x0, 0x5, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x500}, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000000)) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) (rerun: 64) close(r0) (async, rerun: 64) syz_emit_vhci(0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0xbe9) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 64) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) 6.631544397s ago: executing program 3 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r1, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x234e000000000000}, 0x0) 4.852533317s ago: executing program 6 (id=1124): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.767562861s ago: executing program 6 (id=1126): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = memfd_create(&(0x7f00000005c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xb7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1H\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\x83\x0e\x00\x00\x00\x00\x00\x00G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0f\a\x00\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\xf6\xc20\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21A\xa3\xd8\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\x8a\x96\xe8\xc4\xc3g\xcf\xf3\xac\x90\x1a\x9b\xe4\xb1pf\x9f\xb1\x01\xb3\x95\xcf\xce\xc4\xe5\xcc\xb0\x83\xf8\xca#\x9f\xdd\xfe\a\x8e\'R\x1dC\xd1\x005\x85\x0eX\xa8>\xb6\x04*\xd7\x01\xaf\xbc\xd5q2B\f\xf9\x10m\x15[^\xee\xafS\xf4}\xf5\x9c7_F\xf6\xcfQ\x8dWHZM:\x7f\xb3&\x06\xaaE\xfd\x1e.\xbf\xad\xeb\xa2S\xec\n\xcf\x80\xebH\x81\x133:(\x8ew\xa9$\x90\xa2K$-\xb6\bj2Cg\x9e\x88\xfa\xcb\xfa\xa5y\xa1\x85_\xbc:\xff\xbd\xba\x87\xaf\xfai\v\v\t0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 4.767208651s ago: executing program 3 (id=1128): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8001]}, 0x8, 0x0) (async) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8001]}, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="05000000810d00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0300006001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xa) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 4.73370151s ago: executing program 34 (id=1128): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8001]}, 0x8, 0x0) (async) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8001]}, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="05000000810d00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0300006001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xa) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 4.198141828s ago: executing program 5 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000100)={0x7, 0x4, 0xd, 0x8a, 0x1, 0x9a}) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f00000002c0)="37a006c482b23cbab532f3080000008c1d26", 0x23}], 0x3) 3.758684854s ago: executing program 5 (id=1137): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.703829925s ago: executing program 6 (id=1139): r0 = socket(0xa, 0x1, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) set_mempolicy(0x3, &(0x7f00000002c0)=0xfff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, 0x0, 0x60ff}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) 3.651612147s ago: executing program 5 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getrusage(0x1, &(0x7f0000000240)) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0xd45, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/23, &(0x7f0000000080)=0x17) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.0153264s ago: executing program 2 (id=1143): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x1) syz_mount_image$fuse(0x0, 0x0, 0x44010, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), 0x0, 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x1f7) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) 2.875433654s ago: executing program 0 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) 2.57325433s ago: executing program 5 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r1, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4e23}, 0x0) 2.534588526s ago: executing program 6 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000931000/0x4000)=nil, 0x4000, 0xb635773f05ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x1, 0x4, 0x3}) syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x0) recvmmsg(r7, &(0x7f0000004600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}], 0x15, 0x80, 0x0) accept4(r3, 0x0, 0x0, 0x0) 2.534069121s ago: executing program 5 (id=1147): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9}) socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x4aad, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94", @ANYBLOB="010000000000000000"], 0x94}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000010427bd50000000000000000000", @ANYRES32=0x0, @ANYBLOB="1a03000000000000380012800b00010065727370616e000028000280040012000600020006000040050008000000080005000a000100000000"], 0x58}}, 0x20000800) 2.496339617s ago: executing program 0 (id=1148): write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.439068415s ago: executing program 0 (id=1149): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @multicast}, 0x1a, {0x2, 0x0, @remote}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002004000000000000000fdffffffffffffff5000000000000000000000000000000005000000000000e3ffffffffffffff000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8fbfaffffffe99900e60000fc002000000000000100000000000000ac1e00010000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xffffff8b, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[], 0x80}}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, &(0x7f0000000400)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/version\x00', 0x0, 0x0) read(r5, &(0x7f0000000600)=""/256, 0x100) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="0cec0cf1", @ANYRES16=r6, @ANYBLOB="10002bbd7000fddbdf254c00000008000300030000000f00a9007365636f6e646e616d6500000c00a700fbffffffffffffff080001007063690011000200303030303a30303a31302e30000000000c00a70026d60000000000000c00a60000020000000000000c00a6000300000000000000"], 0x78}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xa18001, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@xino_auto}]}) 2.428143107s ago: executing program 0 (id=1150): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8006c00020300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000007000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) mlockall(0x3) 1.105434797s ago: executing program 2 (id=1151): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000480)=0x3d, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, &(0x7f0000000080)={0x1, 0xd96, 0x4, 0x2400082, 0xffffff7f, 0x7196}) syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f00000000c0), &(0x7f0000ffe000), &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\x91\x01\x14/\x05\x01\xddP\xa0\x8a\xcc\x00'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.026851275s ago: executing program 5 (id=1152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd) accept4$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0x08\n\x00', 0x5) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x17, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000000000000000000005000004180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000001000080850000001000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 684.343845ms ago: executing program 0 (id=1153): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x311, &(0x7f00000000c0)="$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") 653.86012ms ago: executing program 6 (id=1154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000240)=""/166) (async) r3 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f00000000c0)='\x00', 0x1) 519.396146ms ago: executing program 0 (id=1155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (fail_nth: 7) 517.481058ms ago: executing program 6 (id=1156): r0 = socket(0xa, 0x1, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) set_mempolicy(0x3, &(0x7f00000002c0)=0xfff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, 0x0, 0x60ff}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) 177.795335ms ago: executing program 2 (id=1157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0xa07b}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe0c5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x18) sendmmsg$inet6(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000080)={{}, 0x1, &(0x7f0000000040)=[0x1], 0xd2c0, 0xa, 0x1}) r3 = socket$inet6(0xa, 0x5, 0x8) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4f20, 0x2, @mcast1, 0xd439}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@dstopts={{0x18, 0x29, 0x37, {0x17}}}], 0x18}}], 0x1, 0x0) 123.516574ms ago: executing program 2 (id=1158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8003c00020300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000070080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) 51.266149ms ago: executing program 2 (id=1159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f00000006c0)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x80008}]}, &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@mblk_io_submit}, {@nojournal_checksum}]}, 0x4, 0x510, &(0x7f0000001a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 19.850989ms ago: executing program 7 (id=1129): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r0, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@newtaction={0x348, 0x30, 0x1, 0x0, 0x0, {}, [{0x334, 0x1, [@m_ctinfo={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10000}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc35f, 0x0, 0x3, 0x9, 0x23}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6d9e}]}, {0x8f, 0x6, "930c4bc6d1aed5a4b934f5f7222407a0e5bd7bd61e0428abb30290c57bab6126987d418b7d9c6d958c0e8c33286f075546002cf7394c6ff8cb0c4678512d7a6958ad03d6a8e1c6bf92b845e39723e93732ff84117bf1f7915ab7c04b341e1575fb6d918691a16fc875de0d274cf009fd17ebdb225bd1700f02c35f3d9c52ad761d33b61156d8e545d0b4a2"}, {0xc}, {0xc}}}, @m_csum={0xe4, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xe3d5, 0x20000000, 0x81c0, 0x9}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40006, 0xfcfd, 0x1, 0x5, 0xe1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x7, 0xffff5825, 0x7e2}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffffc, 0x2, 0x5, 0x5}, 0x7}}]}, {0x46, 0x6, "b1cef20e62b9cad33fce0ee5208e98b46c083a3b87733948b05dcc0a80d0b93c35aca86d986ce9314249c4ce7abf2f02965216a176b0e0b55f3e19e67920c2c2f442"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x158, 0x8, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0x6, 0x2, 0x7, 0x4}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x55, 0x8b, 0xd, 0x3}]}]}, {0xef, 0x6, "7f467fe8fcd7f04d76c8f95c2332748ca86656f590c7329b952883e11d8fed0588c1f8873fc8382930860353e16642e4250b66542ef0a4e6e50794d26357c3331f0b378897060af0960060b7ec3624523019597cef35a0e55414fbfc1f610ba1b62f0d2978581554e2fa1f522d76e657951d9c86308d6fc7b55429868e250dbeedd81effc0e915de10e77a770a89ffb61bef02f343e63729d4ec48ff0e9ba4797489370be662d0000091e69663894623bf353f60c69541897cbe0f7d8925c725fde0c9acf32213fc288388e9d2bdeed298506d911815ad9c0dd6310dddadd5e3030dd5a7d6bfc78e760e9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x348}}, 0x44004) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xfc, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000000)={0x0, 0x700, {0x80000000, 0x0, 0x200e, 0x2, 0x0, 0x1, 0x2}}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb78925", 0x7a}], 0x1}}], 0x1, 0x4000900) r8 = socket(0x10, 0x80002, 0x0) (async) r9 = syz_open_dev$video(&(0x7f0000000000), 0x400005, 0x0) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0xf, 0x8, 0x4, 0x10000, 0xa1, {}, {0x4, 0x1, 0x5, 0x0, 0xf, 0xa, "1000"}, 0xff, 0x3, {0x0}, 0x7ff}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r8, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRESOCT=r10, @ANYRES8=r1], 0x48}}, 0x0) (async) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xd, 0xc}, {0x0, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB="2c7766646e6f3df05fd9cf885212af11a29c8b521fc5de55725afa3e52d55035bfa7a7a4a0a56b766efad02000b2916797233ae544307e61cfb33bb4988028cc8b8dfe8c845bdf998a78e7fa2a6b16cbad65db12d94474b4", @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 0s ago: executing program 2 (id=1160): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r1, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) sendmsg(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)="ec", 0x1}], 0x1}, 0x8084) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espi', 0x4) shutdown(r2, 0x1) kernel console output (not intermixed with test programs): p4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.897557][ T5422] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.210: couldn't read orphan inode 15 (err -117) [ 41.901813][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 41.901827][ C0] EXT4-fs (loop4): initial error at time 41: ext4_orphan_get:1399: inode 15 [ 41.901844][ C0] EXT4-fs (loop4): last error at time 41: ext4_orphan_get:1399: inode 15 [ 41.908643][ T5422] loop4: lost filesystem error report for type 5 error -117 [ 41.911605][ T5422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.983312][ T5430] socket: no more sockets [ 41.985105][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.124416][ T5438] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 42.569934][ T5461] loop0: detected capacity change from 0 to 1024 [ 42.571257][ T5461] ======================================================= [ 42.571257][ T5461] WARNING: The mand mount option has been deprecated and [ 42.571257][ T5461] and is ignored by this kernel. Remove the mand [ 42.571257][ T5461] option from the mount to silence this warning. [ 42.571257][ T5461] ======================================================= [ 42.571307][ T5461] EXT4-fs: inline encryption not supported [ 42.586025][ T5461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.594815][ T5461] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 42.594836][ T5461] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.595062][ T5461] vhci_hcd vhci_hcd.0: Device attached [ 42.602858][ T5461] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.225: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.612508][ T5464] vhci_hcd: connection closed [ 42.612772][ T117] vhci_hcd vhci_hcd.0: stop threads [ 42.612804][ T117] vhci_hcd vhci_hcd.0: release socket [ 42.612832][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 42.633174][ T5470] syzkaller0: entered promiscuous mode [ 42.633203][ T5470] syzkaller0: entered allmulticast mode [ 43.274945][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.346919][ T5494] netlink: 332 bytes leftover after parsing attributes in process `syz.4.237'. [ 43.348962][ T5494] netlink: 196 bytes leftover after parsing attributes in process `syz.4.237'. [ 43.906599][ T5532] FAULT_INJECTION: forcing a failure. [ 43.906599][ T5532] name failslab, interval 1, probability 0, space 0, times 0 [ 43.909634][ T5532] CPU: 0 UID: 0 PID: 5532 Comm: syz.4.250 Not tainted syzkaller #0 PREEMPT [ 43.909656][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 43.909662][ T5532] Call trace: [ 43.909667][ T5532] show_stack+0x2c/0x3c (C) [ 43.909687][ T5532] __dump_stack+0x30/0x40 [ 43.909699][ T5532] dump_stack_lvl+0xd8/0x12c [ 43.909709][ T5532] dump_stack+0x1c/0x28 [ 43.909723][ T5532] should_fail_ex+0x41c/0x590 [ 43.909734][ T5532] should_failslab+0xc4/0x120 [ 43.909743][ T5532] __kmalloc_noprof+0x108/0x6b8 [ 43.909751][ T5532] security_sk_alloc+0x60/0x35c [ 43.909760][ T5532] sk_prot_alloc+0xe0/0x1e8 [ 43.909769][ T5532] sk_alloc+0x44/0x3ac [ 43.909775][ T5532] inet_create+0x594/0xd48 [ 43.909783][ T5532] __sock_create+0x31c/0x670 [ 43.909791][ T5532] sock_create_kern+0x4c/0x64 [ 43.909799][ T5532] mptcp_subflow_create_socket+0xe4/0x61c [ 43.909808][ T5532] __mptcp_nmpc_sk+0x138/0x57c [ 43.909817][ T5532] mptcp_connect+0x7c/0x768 [ 43.909827][ T5532] __inet_stream_connect+0x1f4/0xc14 [ 43.909834][ T5532] inet_stream_connect+0x74/0xb0 [ 43.909840][ T5532] __sys_connect_file+0x13c/0x184 [ 43.909849][ T5532] __sys_connect+0x114/0x194 [ 43.909857][ T5532] __arm64_sys_connect+0x84/0x9c [ 43.909865][ T5532] invoke_syscall+0x98/0x244 [ 43.909875][ T5532] el0_svc_common+0xec/0x23c [ 43.909885][ T5532] do_el0_svc+0x4c/0x5c [ 43.909894][ T5532] el0_svc+0x64/0x260 [ 43.909903][ T5532] el0t_64_sync_handler+0x48/0x148 [ 43.909913][ T5532] el0t_64_sync+0x198/0x19c [ 44.017453][ T5546] FAULT_INJECTION: forcing a failure. [ 44.017453][ T5546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.020704][ T5546] CPU: 0 UID: 0 PID: 5546 Comm: syz.2.254 Not tainted syzkaller #0 PREEMPT [ 44.020734][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 44.020741][ T5546] Call trace: [ 44.020745][ T5546] show_stack+0x2c/0x3c (C) [ 44.020768][ T5546] __dump_stack+0x30/0x40 [ 44.020780][ T5546] dump_stack_lvl+0xd8/0x12c [ 44.020790][ T5546] dump_stack+0x1c/0x28 [ 44.020800][ T5546] should_fail_ex+0x41c/0x590 [ 44.020811][ T5546] should_fail+0x14/0x24 [ 44.020820][ T5546] should_fail_usercopy+0x20/0x30 [ 44.020831][ T5546] simple_read_from_buffer+0xc4/0x238 [ 44.020841][ T5546] proc_fail_nth_read+0x1a8/0x248 [ 44.020850][ T5546] vfs_read+0x230/0x8c8 [ 44.020860][ T5546] ksys_read+0x12c/0x228 [ 44.020866][ T5546] __arm64_sys_read+0x84/0x98 [ 44.020873][ T5546] invoke_syscall+0x98/0x244 [ 44.020883][ T5546] el0_svc_common+0xec/0x23c [ 44.020892][ T5546] do_el0_svc+0x4c/0x5c [ 44.020902][ T5546] el0_svc+0x64/0x260 [ 44.020912][ T5546] el0t_64_sync_handler+0x48/0x148 [ 44.020922][ T5546] el0t_64_sync+0x198/0x19c [ 44.470936][ T5558] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 44.470978][ T5558] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 44.499265][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'. [ 44.502327][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'. [ 45.105127][ T5573] loop3: detected capacity change from 0 to 8192 [ 45.111040][ T5583] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 45.113976][ T5583] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 45.634700][ T5608] syzkaller0: entered promiscuous mode [ 45.634742][ T5608] syzkaller0: entered allmulticast mode [ 45.712192][ T5612] loop0: detected capacity change from 0 to 2048 [ 45.724713][ T5612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.808563][ T40] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 45.810706][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 45.810722][ T40] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.810722][ T40] [ 45.810736][ T40] EXT4-fs (loop0): Total free blocks count 0 [ 45.810744][ T40] EXT4-fs (loop0): Free/Dirty block details [ 45.810755][ T40] EXT4-fs (loop0): free_blocks=4096 [ 45.810767][ T40] EXT4-fs (loop0): dirty_blocks=512 [ 45.810773][ T40] EXT4-fs (loop0): Block reservation details [ 45.810779][ T40] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 45.814419][ T4717] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.816350][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.433392][ T5651] warn_alloc: 3 callbacks suppressed [ 46.433655][ T5651] syz.2.290: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 46.433708][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: syz.2.290 Not tainted syzkaller #0 PREEMPT [ 46.433721][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 46.433733][ T5651] Call trace: [ 46.433737][ T5651] show_stack+0x2c/0x3c (C) [ 46.433760][ T5651] __dump_stack+0x30/0x40 [ 46.433774][ T5651] dump_stack_lvl+0xd8/0x12c [ 46.433787][ T5651] dump_stack+0x1c/0x28 [ 46.433799][ T5651] warn_alloc+0x1bc/0x1d0 [ 46.433810][ T5651] __vmalloc_node_range_noprof+0xd94/0x105c [ 46.433822][ T5651] __kvmalloc_node_noprof+0x51c/0x7d8 [ 46.433833][ T5651] bpf_check+0xb4/0x40dc [ 46.433844][ T5651] bpf_prog_load+0x1050/0x15f8 [ 46.433852][ T5651] __sys_bpf+0x870/0x8c8 [ 46.433860][ T5651] __arm64_sys_bpf+0xd0/0xec [ 46.433867][ T5651] invoke_syscall+0x98/0x244 [ 46.433879][ T5651] el0_svc_common+0xec/0x23c [ 46.433891][ T5651] do_el0_svc+0x4c/0x5c [ 46.433903][ T5651] el0_svc+0x64/0x260 [ 46.433915][ T5651] el0t_64_sync_handler+0x48/0x148 [ 46.433927][ T5651] el0t_64_sync+0x198/0x19c [ 46.433938][ T5651] Mem-Info: [ 46.433942][ T5651] active_anon:979 inactive_anon:12937 isolated_anon:0 [ 46.433942][ T5651] active_file:2483 inactive_file:4567 isolated_file:0 [ 46.433942][ T5651] unevictable:768 dirty:161 writeback:0 [ 46.433942][ T5651] slab_reclaimable:8883 slab_unreclaimable:89147 [ 46.433942][ T5651] mapped:39152 shmem:9580 pagetables:1033 [ 46.433942][ T5651] sec_pagetables:0 bounce:0 [ 46.433942][ T5651] kernel_misc_reclaimable:0 [ 46.433942][ T5651] free:1483132 free_pcp:9231 free_cma:7616 [ 46.433965][ T5651] Node 0 active_anon:3916kB inactive_anon:51748kB active_file:9932kB inactive_file:18268kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:156608kB dirty:644kB writeback:0kB shmem:38320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8864kB pagetables:4132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 46.433987][ T5651] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 46.434011][ T5651] lowmem_reserve[]: 0 0 3651 3651 3651 [ 46.434030][ T5651] Node 0 Normal free:2854640kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3916kB inactive_anon:51748kB active_file:9932kB inactive_file:18268kB unevictable:3072kB writepending:644kB zspages:0kB present:5242880kB managed:3739372kB mlocked:0kB bounce:0kB free_pcp:36924kB local_pcp:16232kB free_cma:0kB [ 46.434055][ T5651] lowmem_reserve[]: 0 0 0 0 0 [ 46.434073][ T5651] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 46.434135][ T5651] Node 0 Normal: 148*4kB (UME) 600*8kB (UME) 548*16kB (UME) 178*32kB (UME) 116*64kB (UME) 31*128kB (UME) 7*256kB (UME) 3*512kB (ME) 12*1024kB (UME) 11*2048kB (UME) 680*4096kB (M) = 2854672kB [ 46.434216][ T5651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.434223][ T5651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 46.434229][ T5651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 46.434236][ T5651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 46.434242][ T5651] 16602 total pagecache pages [ 46.434246][ T5651] 0 pages in swap cache [ 46.434250][ T5651] Free swap = 124984kB [ 46.434253][ T5651] Total swap = 124996kB [ 46.434257][ T5651] 2097152 pages RAM [ 46.434260][ T5651] 0 pages HighMem/MovableOnly [ 46.434263][ T5651] 392261 pages reserved [ 46.434267][ T5651] 8192 pages cma reserved [ 46.434270][ T5651] 0 pages hwpoisoned [ 46.569168][ T5661] ip_tables: iptables: counters copy to user failed while replacing table [ 46.594136][ T5661] loop2: detected capacity change from 0 to 256 [ 46.595502][ T5661] vfat: Unknown parameter 'nnonumtail' [ 47.750392][ T5720] binder: 5719:5720 ioctl c0306201 20000080 returned -14 [ 47.751348][ T5720] binder: 5719:5720 tried to acquire reference to desc 0, got 1 instead [ 47.751365][ T5720] binder: 5719:5720 ioctl c0306201 200003c0 returned -14 [ 47.753827][ T5720] loop1: detected capacity change from 0 to 512 [ 47.754318][ T5720] EXT4-fs: Ignoring removed oldalloc option [ 47.754337][ T5720] ext4: Unknown parameter 'fsmagic' [ 47.818213][ T4811] binder: release 5719:5720 transaction 10 out, still active [ 47.818255][ T4811] binder: undelivered TRANSACTION_COMPLETE [ 47.840070][ T4470] binder: send failed reply for transaction 10, target dead [ 48.056429][ T5747] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 48.073616][ T5750] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 48.073668][ T5750] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 48.117467][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'. [ 48.117510][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'. [ 48.141125][ T5752] syzkaller0: entered promiscuous mode [ 48.141162][ T5752] syzkaller0: entered allmulticast mode [ 48.171706][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 48.491061][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 48.671029][ T5776] ip_tables: iptables: counters copy to user failed while replacing table [ 48.980080][ T5770] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 49.282671][ T5770] bond1 (unregistering): Released all slaves [ 49.310364][ T5783] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 49.987095][ T5816] FAULT_INJECTION: forcing a failure. [ 49.987095][ T5816] name failslab, interval 1, probability 0, space 0, times 0 [ 49.987136][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz.2.357 Not tainted syzkaller #0 PREEMPT [ 49.987152][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.987159][ T5816] Call trace: [ 49.987163][ T5816] show_stack+0x2c/0x3c (C) [ 49.987182][ T5816] __dump_stack+0x30/0x40 [ 49.987193][ T5816] dump_stack_lvl+0xd8/0x12c [ 49.987203][ T5816] dump_stack+0x1c/0x28 [ 49.987212][ T5816] should_fail_ex+0x41c/0x590 [ 49.987223][ T5816] should_failslab+0xc4/0x120 [ 49.987232][ T5816] __kvmalloc_node_noprof+0x160/0x7d8 [ 49.987241][ T5816] xt_alloc_entry_offsets+0x54/0x64 [ 49.987250][ T5816] translate_table+0x14c/0x17f8 [ 49.987260][ T5816] do_ipt_set_ctl+0x908/0xc38 [ 49.987268][ T5816] nf_setsockopt+0xa0/0xe4 [ 49.987278][ T5816] ip_setsockopt+0x118/0x128 [ 49.987287][ T5816] udp_setsockopt+0xa8/0xc0 [ 49.987294][ T5816] sock_common_setsockopt+0xb0/0xcc [ 49.987304][ T5816] do_sock_setsockopt+0x1f0/0x330 [ 49.987313][ T5816] __sys_setsockopt+0x104/0x170 [ 49.987322][ T5816] __arm64_sys_setsockopt+0xc8/0xe4 [ 49.987330][ T5816] invoke_syscall+0x98/0x244 [ 49.987340][ T5816] el0_svc_common+0xec/0x23c [ 49.987350][ T5816] do_el0_svc+0x4c/0x5c [ 49.987359][ T5816] el0_svc+0x64/0x260 [ 49.987370][ T5816] el0t_64_sync_handler+0x48/0x148 [ 49.987379][ T5816] el0t_64_sync+0x198/0x19c [ 50.056242][ T5827] loop0: detected capacity change from 0 to 128 [ 50.071705][ T5826] ip_tables: iptables: counters copy to user failed while replacing table [ 50.125731][ T5821] overlay: Unknown parameter 'audit' [ 50.130407][ T5829] block nbd0: server does not support multiple connections per device. [ 50.130925][ T5829] block nbd0: shutting down sockets [ 50.371146][ T5861] FAULT_INJECTION: forcing a failure. [ 50.371146][ T5861] name failslab, interval 1, probability 0, space 0, times 0 [ 50.372778][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.2.375 Not tainted syzkaller #0 PREEMPT [ 50.372803][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 50.372809][ T5861] Call trace: [ 50.372813][ T5861] show_stack+0x2c/0x3c (C) [ 50.372833][ T5861] __dump_stack+0x30/0x40 [ 50.372843][ T5861] dump_stack_lvl+0xd8/0x12c [ 50.372853][ T5861] dump_stack+0x1c/0x28 [ 50.372862][ T5861] should_fail_ex+0x41c/0x590 [ 50.372873][ T5861] should_failslab+0xc4/0x120 [ 50.372882][ T5861] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 50.372891][ T5861] __alloc_skb+0x1f0/0x610 [ 50.372901][ T5861] netlink_alloc_large_skb+0xd4/0x114 [ 50.372910][ T5861] netlink_sendmsg+0x4c4/0x948 [ 50.372918][ T5861] __sock_sendmsg+0xc8/0x17c [ 50.372927][ T5861] ____sys_sendmsg+0x3d0/0x6c8 [ 50.372935][ T5861] ___sys_sendmsg+0x198/0x224 [ 50.372944][ T5861] __sys_sendmsg+0x158/0x204 [ 50.372952][ T5861] __arm64_sys_sendmsg+0x88/0x9c [ 50.372961][ T5861] invoke_syscall+0x98/0x244 [ 50.372971][ T5861] el0_svc_common+0xec/0x23c [ 50.372981][ T5861] do_el0_svc+0x4c/0x5c [ 50.372990][ T5861] el0_svc+0x64/0x260 [ 50.373001][ T5861] el0t_64_sync_handler+0x48/0x148 [ 50.373010][ T5861] el0t_64_sync+0x198/0x19c [ 51.302150][ T5854] block nbd0: server does not support multiple connections per device. [ 51.302289][ T5854] block nbd0: shutting down sockets [ 51.543006][ T5866] Bluetooth: MGMT ver 1.23 [ 51.543055][ T5866] Bluetooth: hci0: unsupported parameter 255 [ 51.543644][ T5866] Bluetooth: hci0: unsupported parameter 128 [ 51.543689][ T5866] Bluetooth: hci0: unsupported parameter 255 [ 51.543708][ T5866] Bluetooth: hci0: unsupported parameter 128 [ 51.545589][ T5866] overlay: Unknown parameter 'dont_hash' [ 51.809322][ T5887] loop2: detected capacity change from 0 to 512 [ 51.809863][ T5887] ext2: Bad value for 'init_itable' [ 51.890309][ T5891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.902787][ T5894] loop3: detected capacity change from 0 to 512 [ 51.902792][ T5892] loop2: detected capacity change from 0 to 2048 [ 51.908974][ T5894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.913111][ T5892] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0083] [ 51.913165][ T5892] System zones: 0-7 [ 51.915982][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.211701][ T5894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.529711][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 52.550425][ T5913] erspan1: entered promiscuous mode [ 52.550514][ T5913] erspan1: entered allmulticast mode [ 52.754316][ T5918] Bluetooth: MGMT ver 1.23 [ 52.759063][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.803195][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.914838][ T5937] FAULT_INJECTION: forcing a failure. [ 52.914838][ T5937] name failslab, interval 1, probability 0, space 0, times 0 [ 52.914877][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.3.400 Not tainted syzkaller #0 PREEMPT [ 52.914890][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 52.914897][ T5937] Call trace: [ 52.914901][ T5937] show_stack+0x2c/0x3c (C) [ 52.914921][ T5937] __dump_stack+0x30/0x40 [ 52.914932][ T5937] dump_stack_lvl+0xd8/0x12c [ 52.914943][ T5937] dump_stack+0x1c/0x28 [ 52.914952][ T5937] should_fail_ex+0x41c/0x590 [ 52.914964][ T5937] should_failslab+0xc4/0x120 [ 52.914972][ T5937] __kmalloc_cache_noprof+0x94/0x5ec [ 52.914981][ T5937] tcf_action_init_1+0x174/0x594 [ 52.914990][ T5937] tcf_action_init+0x2d0/0x70c [ 52.914998][ T5937] tc_ctl_action+0x354/0x778 [ 52.915007][ T5937] rtnetlink_rcv_msg+0x630/0x9bc [ 52.915015][ T5937] netlink_rcv_skb+0x238/0x414 [ 52.915024][ T5937] rtnetlink_rcv+0x28/0x38 [ 52.915031][ T5937] netlink_unicast+0x600/0x7f8 [ 52.915039][ T5937] netlink_sendmsg+0x648/0x948 [ 52.915047][ T5937] __sock_sendmsg+0xc8/0x17c [ 52.915056][ T5937] ____sys_sendmsg+0x3f8/0x6c8 [ 52.915064][ T5937] ___sys_sendmsg+0x198/0x224 [ 52.915073][ T5937] __sys_sendmmsg+0x204/0x580 [ 52.915081][ T5937] __arm64_sys_sendmmsg+0xac/0xc8 [ 52.915090][ T5937] invoke_syscall+0x98/0x244 [ 52.915100][ T5937] el0_svc_common+0xec/0x23c [ 52.915110][ T5937] do_el0_svc+0x4c/0x5c [ 52.915119][ T5937] el0_svc+0x64/0x260 [ 52.915130][ T5937] el0t_64_sync_handler+0x48/0x148 [ 52.915139][ T5937] el0t_64_sync+0x198/0x19c [ 53.359313][ T5953] loop4: detected capacity change from 0 to 512 [ 53.387778][ T5953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.428147][ T5953] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 53.624233][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.722868][ T5970] loop4: detected capacity change from 0 to 2048 [ 53.733179][ T5970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.755211][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.768367][ T5972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.414'. [ 53.776729][ T5972] tmpfs: Unknown parameter 'J& [ 53.776729][ T5972] iÂĚu˛`' [ 53.818181][ T5976] syzkaller0: entered promiscuous mode [ 53.818220][ T5976] syzkaller0: entered allmulticast mode [ 53.872037][ T5980] fuse: Unknown parameter '00000000000000000000000000000000000000000030000000000000000000000000000000000000000˙˙184467440737095516150xffffffffffffffff)Ö4éNźŇą6†°žŹ4…ËP˝€ýÔ¦¶Q¤h+Ŕ?d)IÁdÚpÇíh·' [ 54.362045][ T5992] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 54.362109][ T5992] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 54.387923][ T5994] input: syz1 as /devices/virtual/input/input3 [ 54.582997][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 54.935012][ T6012] fuse: Unknown parameter '00000000000000000000000000000000000000000030000000000000000000000000000000000000000˙˙184467440737095516150xffffffffffffffff)Ö4éNźŇą6†°žŹ4…ËP˝€ýÔ¦¶Q¤h+Ŕ?d)IÁdÚpÇíh·' [ 54.962393][ T6015] FAULT_INJECTION: forcing a failure. [ 54.962393][ T6015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.964643][ T6015] CPU: 1 UID: 0 PID: 6015 Comm: syz.0.430 Not tainted syzkaller #0 PREEMPT [ 54.964663][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 54.964668][ T6015] Call trace: [ 54.964672][ T6015] show_stack+0x2c/0x3c (C) [ 54.964690][ T6015] __dump_stack+0x30/0x40 [ 54.964700][ T6015] dump_stack_lvl+0xd8/0x12c [ 54.964710][ T6015] dump_stack+0x1c/0x28 [ 54.964719][ T6015] should_fail_ex+0x41c/0x590 [ 54.964737][ T6015] should_fail+0x14/0x24 [ 54.964747][ T6015] should_fail_usercopy+0x20/0x30 [ 54.964758][ T6015] _inline_copy_from_user+0x3c/0x174 [ 54.964769][ T6015] copy_msghdr_from_user+0xb8/0x194 [ 54.964778][ T6015] ___sys_sendmsg+0x14c/0x224 [ 54.964787][ T6015] __sys_sendmsg+0x158/0x204 [ 54.964796][ T6015] __arm64_sys_sendmsg+0x88/0x9c [ 54.964804][ T6015] invoke_syscall+0x98/0x244 [ 54.964814][ T6015] el0_svc_common+0xec/0x23c [ 54.964824][ T6015] do_el0_svc+0x4c/0x5c [ 54.964833][ T6015] el0_svc+0x64/0x260 [ 54.964844][ T6015] el0t_64_sync_handler+0x48/0x148 [ 54.964853][ T6015] el0t_64_sync+0x198/0x19c [ 55.300133][ T6021] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 55.300437][ T6021] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 55.337933][ T6025] loop1: detected capacity change from 0 to 1024 [ 55.339958][ T6025] EXT4-fs: Ignoring removed oldalloc option [ 55.341374][ T6025] EXT4-fs: Ignoring removed orlov option [ 55.363069][ T6025] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1. [ 55.458951][ T6040] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 56.174539][ T6063] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 58.405766][ T6136] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.568482][ T6173] fuse: fd is not a fuse device [ 60.082767][ T6188] FAULT_INJECTION: forcing a failure. [ 60.082767][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.085490][ T6188] CPU: 0 UID: 0 PID: 6188 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT [ 60.085512][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 60.085521][ T6188] Call trace: [ 60.085526][ T6188] show_stack+0x2c/0x3c (C) [ 60.085546][ T6188] __dump_stack+0x30/0x40 [ 60.085557][ T6188] dump_stack_lvl+0xd8/0x12c [ 60.085567][ T6188] dump_stack+0x1c/0x28 [ 60.085577][ T6188] should_fail_ex+0x41c/0x590 [ 60.085588][ T6188] should_fail+0x14/0x24 [ 60.085597][ T6188] should_fail_usercopy+0x20/0x30 [ 60.085608][ T6188] _inline_copy_from_user+0x3c/0x174 [ 60.085619][ T6188] move_addr_to_kernel+0x88/0x168 [ 60.085626][ T6188] __sys_sendto+0x1b0/0x328 [ 60.085635][ T6188] __arm64_sys_sendto+0xec/0x10c [ 60.085643][ T6188] invoke_syscall+0x98/0x244 [ 60.085653][ T6188] el0_svc_common+0xec/0x23c [ 60.085663][ T6188] do_el0_svc+0x4c/0x5c [ 60.085672][ T6188] el0_svc+0x64/0x260 [ 60.085683][ T6188] el0t_64_sync_handler+0x48/0x148 [ 60.085692][ T6188] el0t_64_sync+0x198/0x19c [ 60.106065][ T6194] FAULT_INJECTION: forcing a failure. [ 60.106065][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 60.106085][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: syz.0.494 Not tainted syzkaller #0 PREEMPT [ 60.106095][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 60.106100][ T6194] Call trace: [ 60.106103][ T6194] show_stack+0x2c/0x3c (C) [ 60.106121][ T6194] __dump_stack+0x30/0x40 [ 60.106131][ T6194] dump_stack_lvl+0xd8/0x12c [ 60.106141][ T6194] dump_stack+0x1c/0x28 [ 60.106150][ T6194] should_fail_ex+0x41c/0x590 [ 60.106161][ T6194] should_failslab+0xc4/0x120 [ 60.106170][ T6194] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 60.106179][ T6194] __alloc_skb+0x1f0/0x610 [ 60.106188][ T6194] netlink_alloc_large_skb+0xd4/0x114 [ 60.106197][ T6194] netlink_sendmsg+0x4c4/0x948 [ 60.106206][ T6194] __sock_sendmsg+0xc8/0x17c [ 60.106214][ T6194] ____sys_sendmsg+0x3d0/0x6c8 [ 60.106223][ T6194] ___sys_sendmsg+0x198/0x224 [ 60.106231][ T6194] __sys_sendmsg+0x158/0x204 [ 60.106239][ T6194] __arm64_sys_sendmsg+0x88/0x9c [ 60.106248][ T6194] invoke_syscall+0x98/0x244 [ 60.106258][ T6194] el0_svc_common+0xec/0x23c [ 60.106267][ T6194] do_el0_svc+0x4c/0x5c [ 60.106277][ T6194] el0_svc+0x64/0x260 [ 60.106287][ T6194] el0t_64_sync_handler+0x48/0x148 [ 60.106297][ T6194] el0t_64_sync+0x198/0x19c [ 60.175257][ T6198] fuse: fd is not a fuse device [ 60.331184][ T6208] syz.3.501: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 60.332122][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.3.501 Not tainted syzkaller #0 PREEMPT [ 60.332137][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 60.332143][ T6208] Call trace: [ 60.332146][ T6208] show_stack+0x2c/0x3c (C) [ 60.332165][ T6208] __dump_stack+0x30/0x40 [ 60.332178][ T6208] dump_stack_lvl+0xd8/0x12c [ 60.332190][ T6208] dump_stack+0x1c/0x28 [ 60.332201][ T6208] warn_alloc+0x1bc/0x1d0 [ 60.332211][ T6208] __vmalloc_node_range_noprof+0xd94/0x105c [ 60.332223][ T6208] __kvmalloc_node_noprof+0x51c/0x7d8 [ 60.332233][ T6208] bpf_check+0xb4/0x40dc [ 60.332244][ T6208] bpf_prog_load+0x1050/0x15f8 [ 60.332253][ T6208] __sys_bpf+0x870/0x8c8 [ 60.332260][ T6208] __arm64_sys_bpf+0xd0/0xec [ 60.332268][ T6208] invoke_syscall+0x98/0x244 [ 60.332280][ T6208] el0_svc_common+0xec/0x23c [ 60.332292][ T6208] do_el0_svc+0x4c/0x5c [ 60.332303][ T6208] el0_svc+0x64/0x260 [ 60.332315][ T6208] el0t_64_sync_handler+0x48/0x148 [ 60.332327][ T6208] el0t_64_sync+0x198/0x19c [ 60.332342][ T6208] Mem-Info: [ 60.332353][ T6208] active_anon:5760 inactive_anon:12410 isolated_anon:0 [ 60.332353][ T6208] active_file:3015 inactive_file:16031 isolated_file:0 [ 60.332353][ T6208] unevictable:768 dirty:551 writeback:0 [ 60.332353][ T6208] slab_reclaimable:8982 slab_unreclaimable:89734 [ 60.332353][ T6208] mapped:32518 shmem:7418 pagetables:1089 [ 60.332353][ T6208] sec_pagetables:0 bounce:0 [ 60.332353][ T6208] kernel_misc_reclaimable:0 [ 60.332353][ T6208] free:1464769 free_pcp:10214 free_cma:7616 [ 60.332383][ T6208] Node 0 active_anon:23040kB inactive_anon:49640kB active_file:12060kB inactive_file:64124kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:130072kB dirty:2204kB writeback:0kB shmem:29672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8800kB pagetables:4356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 60.332409][ T6208] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 60.332441][ T6208] lowmem_reserve[]: 0 0 3651 3651 3651 [ 60.332485][ T6208] Node 0 Normal free:2781188kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23040kB inactive_anon:49640kB active_file:12060kB inactive_file:64124kB unevictable:3072kB writepending:2204kB zspages:0kB present:5242880kB managed:3739372kB mlocked:0kB bounce:0kB free_pcp:40852kB local_pcp:22616kB free_cma:0kB [ 60.332517][ T6208] lowmem_reserve[]: 0 0 0 0 0 [ 60.332570][ T6208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 60.332693][ T6208] Node 0 Normal: 1787*4kB (UM) 693*8kB (UE) 387*16kB (UME) 320*32kB (U) 64*64kB (UE) 30*128kB (UME) 29*256kB (UE) 33*512kB (UME) 28*1024kB (UME) 4*2048kB (UME) 655*4096kB (UM) = 2781124kB [ 60.332864][ T6208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 60.332874][ T6208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 60.332884][ T6208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 60.332894][ T6208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 60.332904][ T6208] 26485 total pagecache pages [ 60.332912][ T6208] 0 pages in swap cache [ 60.332918][ T6208] Free swap = 124988kB [ 60.332925][ T6208] Total swap = 124996kB [ 60.332932][ T6208] 2097152 pages RAM [ 60.332939][ T6208] 0 pages HighMem/MovableOnly [ 60.332946][ T6208] 392261 pages reserved [ 60.332952][ T6208] 8192 pages cma reserved [ 60.332959][ T6208] 0 pages hwpoisoned [ 60.428054][ T6210] loop0: detected capacity change from 0 to 8192 [ 60.464030][ T6210] loop0: AHDI p1 p2 p4 [ 60.473205][ T6210] loop0: p4 start 117378816 is beyond EOD, truncated [ 60.505844][ T6219] bridge_slave_0: left allmulticast mode [ 60.505880][ T6219] bridge_slave_0: left promiscuous mode [ 60.505970][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.522256][ T6219] bridge_slave_1: left allmulticast mode [ 60.522307][ T6219] bridge_slave_1: left promiscuous mode [ 60.522380][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.561365][ T6219] bond0: (slave bond_slave_0): Releasing backup interface [ 60.587137][ T6219] bond0: (slave bond_slave_1): Releasing backup interface [ 60.608913][ T6219] team0: Port device team_slave_0 removed [ 60.619281][ T6232] loop1: detected capacity change from 0 to 256 [ 60.620102][ T6219] team0: Port device team_slave_1 removed [ 60.623296][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.623328][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.623749][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.623995][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.631171][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.631208][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.634257][ T6219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.654145][ T6223] team0: Port device veth0_virt_wifi added [ 60.682485][ T6225] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 60.683272][ T6225] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 60.685627][ T6225] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.810024][ T6242] fuse: fd is not a fuse device [ 60.851069][ T6245] ip_tables: iptables: counters copy to user failed while replacing table [ 61.149317][ T6255] netlink: 'syz.3.518': attribute type 25 has an invalid length. [ 61.249032][ T30] audit: type=1326 audit(61.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.1.521" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d781a8 code=0x0 [ 61.694529][ T6275] fuse: fd is not a fuse device [ 61.718776][ T6278] netlink: 552 bytes leftover after parsing attributes in process `syz.2.527'. [ 62.512296][ T6305] fuse: fd is not a fuse device [ 62.538476][ T6307] input: syz1 as /devices/virtual/input/input4 [ 62.564401][ T6309] loop1: detected capacity change from 0 to 512 [ 62.571955][ T6309] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 62.571980][ T6309] EXT4-fs (loop1): group descriptors corrupted! [ 62.707010][ T6319] input: syz1 as /devices/virtual/input/input5 [ 62.947383][ T6321] FAULT_INJECTION: forcing a failure. [ 62.947383][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 62.947420][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.2.545 Not tainted syzkaller #0 PREEMPT [ 62.947435][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 62.947441][ T6321] Call trace: [ 62.947445][ T6321] show_stack+0x2c/0x3c (C) [ 62.947465][ T6321] __dump_stack+0x30/0x40 [ 62.947477][ T6321] dump_stack_lvl+0xd8/0x12c [ 62.947490][ T6321] dump_stack+0x1c/0x28 [ 62.947501][ T6321] should_fail_ex+0x41c/0x590 [ 62.947512][ T6321] should_failslab+0xc4/0x120 [ 62.947521][ T6321] __kmalloc_cache_node_noprof+0x98/0x60c [ 62.947530][ T6321] __get_vm_area_node+0x188/0x32c [ 62.947539][ T6321] __vmalloc_node_range_noprof+0x2c8/0x105c [ 62.947548][ T6321] __vmalloc_node_noprof+0xec/0x14c [ 62.947557][ T6321] vzalloc_noprof+0x3c/0x4c [ 62.947566][ T6321] xt_counters_alloc+0x50/0x60 [ 62.947576][ T6321] __do_replace+0xa4/0x8f4 [ 62.947584][ T6321] do_ipt_set_ctl+0x980/0xc38 [ 62.947593][ T6321] nf_setsockopt+0xa0/0xe4 [ 62.947602][ T6321] ip_setsockopt+0x118/0x128 [ 62.947611][ T6321] udp_setsockopt+0xa8/0xc0 [ 62.947619][ T6321] sock_common_setsockopt+0xb0/0xcc [ 62.947628][ T6321] do_sock_setsockopt+0x1f0/0x330 [ 62.947637][ T6321] __sys_setsockopt+0x104/0x170 [ 62.947645][ T6321] __arm64_sys_setsockopt+0xc8/0xe4 [ 62.947654][ T6321] invoke_syscall+0x98/0x244 [ 62.947664][ T6321] el0_svc_common+0xec/0x23c [ 62.947673][ T6321] do_el0_svc+0x4c/0x5c [ 62.947682][ T6321] el0_svc+0x64/0x260 [ 62.947693][ T6321] el0t_64_sync_handler+0x48/0x148 [ 62.947702][ T6321] el0t_64_sync+0x198/0x19c [ 62.963140][ T6324] netlink: 552 bytes leftover after parsing attributes in process `syz.1.544'. [ 63.016738][ T6333] device-mapper: ioctl: name not supplied when creating device [ 63.031148][ T6335] fuse: fd is not a fuse device [ 63.083246][ T6341] loop4: detected capacity change from 0 to 1024 [ 63.085156][ T6341] Smack: duplicate mount options [ 63.169421][ T6342] loop2: detected capacity change from 0 to 256 [ 63.618216][ T6357] loop3: detected capacity change from 0 to 256 [ 63.679855][ T6367] netlink: 536 bytes leftover after parsing attributes in process `syz.3.561'. [ 64.591231][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.591346][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.644391][ T10] cfg80211: failed to load regulatory.db [ 64.707074][ T6408] input: syz1 as /devices/virtual/input/input6 [ 64.877659][ T6427] netlink: 536 bytes leftover after parsing attributes in process `syz.3.582'. [ 65.179015][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 65.337508][ T6445] loop2: detected capacity change from 0 to 512 [ 65.349626][ T6448] FAULT_INJECTION: forcing a failure. [ 65.349626][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.349668][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.4.591 Not tainted syzkaller #0 PREEMPT [ 65.349678][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 65.349684][ T6448] Call trace: [ 65.349687][ T6448] show_stack+0x2c/0x3c (C) [ 65.349706][ T6448] __dump_stack+0x30/0x40 [ 65.349724][ T6448] dump_stack_lvl+0xd8/0x12c [ 65.349735][ T6448] dump_stack+0x1c/0x28 [ 65.349745][ T6448] should_fail_ex+0x41c/0x590 [ 65.349757][ T6448] should_fail+0x14/0x24 [ 65.349767][ T6448] should_fail_usercopy+0x20/0x30 [ 65.349778][ T6448] _copy_from_iter+0x424/0x1064 [ 65.349786][ T6448] rawv6_send_hdrinc+0x73c/0x1924 [ 65.349795][ T6448] rawv6_sendmsg+0xe90/0x1438 [ 65.349802][ T6448] inet_sendmsg+0xb4/0xd8 [ 65.349810][ T6448] __sock_sendmsg+0xc8/0x17c [ 65.349822][ T6448] ____sys_sendmsg+0x3d0/0x6c8 [ 65.349830][ T6448] ___sys_sendmsg+0x198/0x224 [ 65.349839][ T6448] __sys_sendmsg+0x158/0x204 [ 65.349847][ T6448] __arm64_sys_sendmsg+0x88/0x9c [ 65.349856][ T6448] invoke_syscall+0x98/0x244 [ 65.349866][ T6448] el0_svc_common+0xec/0x23c [ 65.349876][ T6448] do_el0_svc+0x4c/0x5c [ 65.349885][ T6448] el0_svc+0x64/0x260 [ 65.349895][ T6448] el0t_64_sync_handler+0x48/0x148 [ 65.349905][ T6448] el0t_64_sync+0x198/0x19c [ 65.382373][ T6445] capability: warning: `syz.2.590' uses 32-bit capabilities (legacy support in use) [ 65.558059][ T6468] netlink: 532 bytes leftover after parsing attributes in process `syz.4.599'. [ 65.594392][ T6473] FAULT_INJECTION: forcing a failure. [ 65.594392][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.595025][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT [ 65.595041][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 65.595047][ T6473] Call trace: [ 65.595050][ T6473] show_stack+0x2c/0x3c (C) [ 65.595072][ T6473] __dump_stack+0x30/0x40 [ 65.595083][ T6473] dump_stack_lvl+0xd8/0x12c [ 65.595093][ T6473] dump_stack+0x1c/0x28 [ 65.595103][ T6473] should_fail_ex+0x41c/0x590 [ 65.595114][ T6473] should_fail+0x14/0x24 [ 65.595123][ T6473] should_fail_usercopy+0x20/0x30 [ 65.595133][ T6473] _inline_copy_from_user+0x3c/0x174 [ 65.595144][ T6473] copy_msghdr_from_user+0xb8/0x194 [ 65.595153][ T6473] ___sys_sendmsg+0x14c/0x224 [ 65.595162][ T6473] __sys_sendmsg+0x158/0x204 [ 65.595170][ T6473] __arm64_sys_sendmsg+0x88/0x9c [ 65.595179][ T6473] invoke_syscall+0x98/0x244 [ 65.595190][ T6473] el0_svc_common+0xec/0x23c [ 65.595199][ T6473] do_el0_svc+0x4c/0x5c [ 65.595208][ T6473] el0_svc+0x64/0x260 [ 65.595219][ T6473] el0t_64_sync_handler+0x48/0x148 [ 65.595228][ T6473] el0t_64_sync+0x198/0x19c [ 65.625277][ T6475] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 65.627324][ T6475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.603'. [ 65.752951][ T6485] input: syz1 as /devices/virtual/input/input7 [ 65.756039][ T6487] input: syz1 as /devices/virtual/input/input8 [ 65.777660][ T6489] loop0: detected capacity change from 0 to 512 [ 65.812888][ T6489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.826063][ T6489] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.610: corrupted xattr block 33: invalid header [ 65.848614][ T6489] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.610: corrupted xattr block 33: invalid header [ 65.851946][ T6489] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.610: corrupted xattr block 33: invalid header [ 65.894360][ T6498] netlink: 532 bytes leftover after parsing attributes in process `syz.1.613'. [ 65.902097][ T6500] FAULT_INJECTION: forcing a failure. [ 65.902097][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 65.902127][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.4.614 Not tainted syzkaller #0 PREEMPT [ 65.902141][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 65.902148][ T6500] Call trace: [ 65.902151][ T6500] show_stack+0x2c/0x3c (C) [ 65.902171][ T6500] __dump_stack+0x30/0x40 [ 65.902182][ T6500] dump_stack_lvl+0xd8/0x12c [ 65.902191][ T6500] dump_stack+0x1c/0x28 [ 65.902201][ T6500] should_fail_ex+0x41c/0x590 [ 65.902212][ T6500] should_failslab+0xc4/0x120 [ 65.902220][ T6500] __kmalloc_noprof+0x108/0x6b8 [ 65.902229][ T6500] tomoyo_encode2+0x10c/0x330 [ 65.902238][ T6500] tomoyo_encode+0x34/0x50 [ 65.902245][ T6500] tomoyo_realpath_from_path+0x488/0x4dc [ 65.902253][ T6500] tomoyo_path_number_perm+0x1f0/0x500 [ 65.902261][ T6500] tomoyo_file_ioctl+0x2c/0x3c [ 65.902269][ T6500] security_file_ioctl+0xdc/0x2b0 [ 65.902276][ T6500] __arm64_sys_ioctl+0xb0/0x1cc [ 65.902287][ T6500] invoke_syscall+0x98/0x244 [ 65.902297][ T6500] el0_svc_common+0xec/0x23c [ 65.902306][ T6500] do_el0_svc+0x4c/0x5c [ 65.902316][ T6500] el0_svc+0x64/0x260 [ 65.902326][ T6500] el0t_64_sync_handler+0x48/0x148 [ 65.902336][ T6500] el0t_64_sync+0x198/0x19c [ 65.929016][ T6500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.956861][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.984235][ T6512] loop3: detected capacity change from 0 to 512 [ 65.989563][ T6512] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.003302][ T6512] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.620: inode has both inline data and extents flags [ 66.003335][ T6512] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.003576][ T6512] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.620: couldn't read orphan inode 15 (err -117) [ 66.003598][ T6512] loop3: lost filesystem error report for type 5 error -117 [ 66.004148][ T6512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.267361][ T6514] input: syz1 as /devices/virtual/input/input9 [ 66.368327][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.444969][ T6535] netlink: 532 bytes leftover after parsing attributes in process `syz.2.629'. [ 66.569888][ T6544] ip_tables: iptables: counters copy to user failed while replacing table [ 66.618400][ T6554] loop0: detected capacity change from 0 to 1024 [ 66.694461][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 66.710063][ T6560] erspan1: entered promiscuous mode [ 66.710121][ T6560] erspan1: entered allmulticast mode [ 66.894071][ T6554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.009991][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.039355][ T6575] FAULT_INJECTION: forcing a failure. [ 67.039355][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 67.041981][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.4.642 Not tainted syzkaller #0 PREEMPT [ 67.042001][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.042007][ T6575] Call trace: [ 67.042010][ T6575] show_stack+0x2c/0x3c (C) [ 67.042028][ T6575] __dump_stack+0x30/0x40 [ 67.042039][ T6575] dump_stack_lvl+0xd8/0x12c [ 67.042049][ T6575] dump_stack+0x1c/0x28 [ 67.042058][ T6575] should_fail_ex+0x41c/0x590 [ 67.042069][ T6575] should_failslab+0xc4/0x120 [ 67.042077][ T6575] kmem_cache_alloc_noprof+0x94/0x5d8 [ 67.042086][ T6575] skb_clone+0x1ac/0x320 [ 67.042096][ T6575] __netlink_deliver_tap+0x364/0x6f4 [ 67.042106][ T6575] netlink_deliver_tap+0x1d8/0x1dc [ 67.042114][ T6575] netlink_unicast+0x5dc/0x7f8 [ 67.042122][ T6575] netlink_sendmsg+0x648/0x948 [ 67.042130][ T6575] __sock_sendmsg+0xc8/0x17c [ 67.042138][ T6575] ____sys_sendmsg+0x3d0/0x6c8 [ 67.042147][ T6575] ___sys_sendmsg+0x198/0x224 [ 67.042155][ T6575] __sys_sendmsg+0x158/0x204 [ 67.042164][ T6575] __arm64_sys_sendmsg+0x88/0x9c [ 67.042172][ T6575] invoke_syscall+0x98/0x244 [ 67.042182][ T6575] el0_svc_common+0xec/0x23c [ 67.042192][ T6575] do_el0_svc+0x4c/0x5c [ 67.042201][ T6575] el0_svc+0x64/0x260 [ 67.042212][ T6575] el0t_64_sync_handler+0x48/0x148 [ 67.042221][ T6575] el0t_64_sync+0x198/0x19c [ 67.109125][ T6557] loop1: detected capacity change from 0 to 8 [ 67.118096][ T4726] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 67.184746][ T6583] netlink: 332 bytes leftover after parsing attributes in process `syz.0.641'. [ 67.651232][ T6608] block nbd0: server does not support multiple connections per device. [ 67.651399][ T6608] block nbd0: shutting down sockets [ 67.656412][ T6603] FAULT_INJECTION: forcing a failure. [ 67.656412][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 67.656450][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.1.651 Not tainted syzkaller #0 PREEMPT [ 67.656467][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.656476][ T6603] Call trace: [ 67.656480][ T6603] show_stack+0x2c/0x3c (C) [ 67.656499][ T6603] __dump_stack+0x30/0x40 [ 67.656510][ T6603] dump_stack_lvl+0xd8/0x12c [ 67.656520][ T6603] dump_stack+0x1c/0x28 [ 67.656530][ T6603] should_fail_ex+0x41c/0x590 [ 67.656541][ T6603] should_failslab+0xc4/0x120 [ 67.656549][ T6603] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 67.656558][ T6603] zswap_store+0x784/0x1cd8 [ 67.656567][ T6603] swap_writeout+0x774/0x1468 [ 67.656574][ T6603] shrink_folio_list+0x2748/0x4328 [ 67.656584][ T6603] reclaim_folio_list+0xe8/0x6d8 [ 67.656593][ T6603] reclaim_pages+0x3d0/0x4ac [ 67.656601][ T6603] madvise_cold_or_pageout_pte_range+0x1974/0x2224 [ 67.656609][ T6603] walk_pgd_range+0xa6c/0x17c8 [ 67.656616][ T6603] __walk_page_range+0x150/0x60c [ 67.656622][ T6603] walk_page_range_vma_unsafe+0x2c0/0x368 [ 67.656629][ T6603] walk_page_range_vma+0x80/0x98 [ 67.656636][ T6603] madvise_vma_behavior+0x26e0/0x33dc [ 67.656643][ T6603] madvise_walk_vmas+0x4c8/0x9bc [ 67.656650][ T6603] madvise_do_behavior+0x5f0/0x7c0 [ 67.656660][ T6603] do_madvise+0x28c/0x2f0 [ 67.656669][ T6603] __arm64_sys_madvise+0xac/0xc8 [ 67.656679][ T6603] invoke_syscall+0x98/0x244 [ 67.656689][ T6603] el0_svc_common+0xec/0x23c [ 67.656698][ T6603] do_el0_svc+0x4c/0x5c [ 67.656708][ T6603] el0_svc+0x64/0x260 [ 67.656718][ T6603] el0t_64_sync_handler+0x48/0x148 [ 67.656732][ T6603] el0t_64_sync+0x198/0x19c [ 67.673461][ T6614] loop0: detected capacity change from 0 to 8192 [ 67.706031][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.706046][ T6614] FAT-fs (loop0): Filesystem has been set read-only [ 67.706056][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.706082][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.706196][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.706210][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.707323][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.707340][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.707367][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.707377][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.707396][ T6614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 67.795021][ T6623] fuse: fd is not a fuse device [ 67.883293][ T6632] fuse: Unknown parameter 'fE' [ 68.104667][ T6654] FAULT_INJECTION: forcing a failure. [ 68.104667][ T6654] name failslab, interval 1, probability 0, space 0, times 0 [ 68.104703][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.3.665 Not tainted syzkaller #0 PREEMPT [ 68.104718][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 68.104728][ T6654] Call trace: [ 68.104732][ T6654] show_stack+0x2c/0x3c (C) [ 68.104753][ T6654] __dump_stack+0x30/0x40 [ 68.104764][ T6654] dump_stack_lvl+0xd8/0x12c [ 68.104774][ T6654] dump_stack+0x1c/0x28 [ 68.104784][ T6654] should_fail_ex+0x41c/0x590 [ 68.104795][ T6654] should_failslab+0xc4/0x120 [ 68.104803][ T6654] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 68.104813][ T6654] __alloc_skb+0x1f0/0x610 [ 68.104822][ T6654] netlink_alloc_large_skb+0xd4/0x114 [ 68.104831][ T6654] netlink_sendmsg+0x4c4/0x948 [ 68.104840][ T6654] __sock_sendmsg+0xc8/0x17c [ 68.104848][ T6654] ____sys_sendmsg+0x3d0/0x6c8 [ 68.104857][ T6654] ___sys_sendmsg+0x198/0x224 [ 68.104865][ T6654] __sys_sendmsg+0x158/0x204 [ 68.104874][ T6654] __arm64_sys_sendmsg+0x88/0x9c [ 68.104882][ T6654] invoke_syscall+0x98/0x244 [ 68.104893][ T6654] el0_svc_common+0xec/0x23c [ 68.104902][ T6654] do_el0_svc+0x4c/0x5c [ 68.104911][ T6654] el0_svc+0x64/0x260 [ 68.104922][ T6654] el0t_64_sync_handler+0x48/0x148 [ 68.104932][ T6654] el0t_64_sync+0x198/0x19c [ 68.723403][ T6666] fuse: fd is not a fuse device [ 68.749470][ T6668] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 68.749570][ T6668] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 68.945846][ T6678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.064827][ T6687] loop3: detected capacity change from 0 to 512 [ 69.071066][ T6687] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.335991][ T6687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.352363][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.499114][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.679'. [ 69.608087][ T6705] fuse: fd is not a fuse device [ 69.727972][ T6711] loop0: detected capacity change from 0 to 512 [ 69.728729][ T6711] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.728749][ T6711] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.731324][ T6711] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.683: bad orphan inode 131083 [ 69.731343][ T6711] loop0: lost filesystem error report for type 5 error -117 [ 69.734179][ T6711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.737905][ T6711] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.683: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 69.762573][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.173199][ T6742] fuse: fd is not a fuse device [ 72.215593][ T6789] overlayfs: failed to get inode (-116) [ 72.215754][ T6789] overlayfs: failed to get inode (-116) [ 72.218193][ T6789] overlayfs: failed to get inode (-116) [ 72.219668][ T6789] overlayfs: failed to get inode (-116) [ 72.285985][ T6795] netlink: 'syz.4.709': attribute type 13 has an invalid length. [ 72.309255][ T6795] loop4: detected capacity change from 0 to 512 [ 72.310048][ T6795] EXT4-fs: inline encryption not supported [ 72.314006][ T6795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.314036][ T6795] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.317802][ T6795] EXT4-fs warning (device loop4): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 72.317815][ T6795] EXT4-fs warning (device loop4): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 72.888334][ T6723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.017403][ T6814] FAULT_INJECTION: forcing a failure. [ 73.017403][ T6814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.019944][ T6814] CPU: 0 UID: 0 PID: 6814 Comm: syz.3.715 Not tainted syzkaller #0 PREEMPT [ 73.019963][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 73.019970][ T6814] Call trace: [ 73.019974][ T6814] show_stack+0x2c/0x3c (C) [ 73.019998][ T6814] __dump_stack+0x30/0x40 [ 73.020010][ T6814] dump_stack_lvl+0xd8/0x12c [ 73.020020][ T6814] dump_stack+0x1c/0x28 [ 73.020030][ T6814] should_fail_ex+0x41c/0x590 [ 73.020041][ T6814] should_fail+0x14/0x24 [ 73.020051][ T6814] should_fail_usercopy+0x20/0x30 [ 73.020061][ T6814] _inline_copy_from_user+0x3c/0x188 [ 73.020071][ T6814] dm_ctl_ioctl+0x3e4/0xbbc [ 73.020082][ T6814] __arm64_sys_ioctl+0x154/0x1cc [ 73.020094][ T6814] invoke_syscall+0x98/0x244 [ 73.020105][ T6814] el0_svc_common+0xec/0x23c [ 73.020115][ T6814] do_el0_svc+0x4c/0x5c [ 73.020124][ T6814] el0_svc+0x64/0x260 [ 73.020135][ T6814] el0t_64_sync_handler+0x48/0x148 [ 73.020144][ T6814] el0t_64_sync+0x198/0x19c [ 73.053295][ T5177] udevd[5177]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 73.422137][ T6835] fuse: fd is not a fuse device [ 73.569947][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 73.922913][ T6857] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(12804.0.0), cmd(7) [ 73.958611][ T6861] fuse: fd is not a fuse device [ 73.958872][ T6858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.005916][ T6863] FAULT_INJECTION: forcing a failure. [ 74.005916][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 74.007730][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.1.734 Not tainted syzkaller #0 PREEMPT [ 74.007752][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 74.007762][ T6863] Call trace: [ 74.007768][ T6863] show_stack+0x2c/0x3c (C) [ 74.007792][ T6863] __dump_stack+0x30/0x40 [ 74.007804][ T6863] dump_stack_lvl+0xd8/0x12c [ 74.007815][ T6863] dump_stack+0x1c/0x28 [ 74.007824][ T6863] should_fail_ex+0x41c/0x590 [ 74.007835][ T6863] should_failslab+0xc4/0x120 [ 74.007844][ T6863] __kmalloc_flags_noprof+0x140/0x724 [ 74.007853][ T6863] alloc_slab_obj_exts+0x68/0x1b4 [ 74.007861][ T6863] __memcg_slab_post_alloc_hook+0x40c/0x8cc [ 74.007872][ T6863] kmem_cache_alloc_noprof+0x328/0x5d8 [ 74.007880][ T6863] dst_alloc+0xf4/0x15c [ 74.007889][ T6863] ip6_dst_alloc+0x38/0xc8 [ 74.007899][ T6863] ip6_rt_cache_alloc+0x1b0/0x630 [ 74.007909][ T6863] ip6_pol_route+0xca0/0xf50 [ 74.007918][ T6863] ip6_pol_route_output+0x60/0x94 [ 74.007925][ T6863] fib6_rule_lookup+0x198/0x474 [ 74.007936][ T6863] ip6_route_output_flags+0x300/0x58c [ 74.007946][ T6863] ip6_dst_lookup_tail+0x12c/0x13d8 [ 74.007956][ T6863] ip6_dst_lookup_flow+0x94/0x148 [ 74.007966][ T6863] rawv6_sendmsg+0xa84/0x1438 [ 74.007973][ T6863] inet_sendmsg+0xb4/0xd8 [ 74.007980][ T6863] __sock_sendmsg+0xc8/0x17c [ 74.007989][ T6863] ____sys_sendmsg+0x3d0/0x6c8 [ 74.007997][ T6863] ___sys_sendmsg+0x198/0x224 [ 74.008006][ T6863] __sys_sendmsg+0x158/0x204 [ 74.008014][ T6863] __arm64_sys_sendmsg+0x88/0x9c [ 74.008023][ T6863] invoke_syscall+0x98/0x244 [ 74.008033][ T6863] el0_svc_common+0xec/0x23c [ 74.008042][ T6863] do_el0_svc+0x4c/0x5c [ 74.008052][ T6863] el0_svc+0x64/0x260 [ 74.008062][ T6863] el0t_64_sync_handler+0x48/0x148 [ 74.008072][ T6863] el0t_64_sync+0x198/0x19c [ 74.056833][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 74.234992][ T6870] FAULT_INJECTION: forcing a failure. [ 74.234992][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 74.235027][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.3.736 Not tainted syzkaller #0 PREEMPT [ 74.235042][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 74.235048][ T6870] Call trace: [ 74.235052][ T6870] show_stack+0x2c/0x3c (C) [ 74.235070][ T6870] __dump_stack+0x30/0x40 [ 74.235082][ T6870] dump_stack_lvl+0xd8/0x12c [ 74.235092][ T6870] dump_stack+0x1c/0x28 [ 74.235102][ T6870] should_fail_ex+0x41c/0x590 [ 74.235113][ T6870] should_failslab+0xc4/0x120 [ 74.235122][ T6870] __kmalloc_noprof+0x108/0x6b8 [ 74.235131][ T6870] bpf_test_init+0xa8/0x154 [ 74.235142][ T6870] bpf_prog_test_run_skb+0x2a0/0x1ed0 [ 74.235152][ T6870] bpf_prog_test_run+0x1e0/0x250 [ 74.235160][ T6870] __sys_bpf+0x730/0x8c8 [ 74.235167][ T6870] __arm64_sys_bpf+0xd0/0xec [ 74.235174][ T6870] invoke_syscall+0x98/0x244 [ 74.235184][ T6870] el0_svc_common+0xec/0x23c [ 74.235193][ T6870] do_el0_svc+0x4c/0x5c [ 74.235203][ T6870] el0_svc+0x64/0x260 [ 74.235213][ T6870] el0t_64_sync_handler+0x48/0x148 [ 74.235223][ T6870] el0t_64_sync+0x198/0x19c [ 74.454183][ T6897] fuse: fd is not a fuse device [ 74.486909][ T6895] input: syz1 as /devices/virtual/input/input10 [ 75.051277][ T6932] 9p: Bad value for 'wfdno' [ 75.059322][ T6933] 9p: Bad value for 'wfdno' [ 75.094506][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 75.468138][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.470084][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.472488][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.473887][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.476656][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.483664][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.535919][ T6962] loop1: detected capacity change from 0 to 128 [ 75.542544][ T6962] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.564157][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.601109][ T6968] loop0: detected capacity change from 0 to 128 [ 75.604610][ T6967] loop1: detected capacity change from 0 to 512 [ 76.005539][ T6975] ip_tables: iptables: counters copy to user failed while replacing table [ 77.846372][ T6989] infiniband syz2: set active [ 77.846405][ T6989] infiniband syz2: added bond_slave_0 [ 77.862275][ T6989] RDS/IB: syz2: added [ 77.862395][ T6989] smc: adding ib device syz2 with port count 1 [ 77.862448][ T6989] smc: ib device syz2 port 1 has no pnetid [ 77.915707][ T7002] FAULT_INJECTION: forcing a failure. [ 77.915707][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 77.915749][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: syz.1.776 Not tainted syzkaller #0 PREEMPT [ 77.915764][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 77.915770][ T7002] Call trace: [ 77.915773][ T7002] show_stack+0x2c/0x3c (C) [ 77.915791][ T7002] __dump_stack+0x30/0x40 [ 77.915803][ T7002] dump_stack_lvl+0xd8/0x12c [ 77.915813][ T7002] dump_stack+0x1c/0x28 [ 77.915822][ T7002] should_fail_ex+0x41c/0x590 [ 77.915834][ T7002] should_failslab+0xc4/0x120 [ 77.915842][ T7002] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 77.915851][ T7002] __alloc_skb+0x1f0/0x610 [ 77.915861][ T7002] alloc_skb_with_frags+0xb8/0x690 [ 77.915868][ T7002] sock_alloc_send_pskb+0x740/0x850 [ 77.915876][ T7002] rawv6_send_hdrinc+0x20c/0x1924 [ 77.915884][ T7002] rawv6_sendmsg+0xe90/0x1438 [ 77.915891][ T7002] inet_sendmsg+0xb4/0xd8 [ 77.915899][ T7002] __sock_sendmsg+0xc8/0x17c [ 77.915907][ T7002] ____sys_sendmsg+0x3d0/0x6c8 [ 77.915915][ T7002] ___sys_sendmsg+0x198/0x224 [ 77.915924][ T7002] __sys_sendmsg+0x158/0x204 [ 77.915932][ T7002] __arm64_sys_sendmsg+0x88/0x9c [ 77.915941][ T7002] invoke_syscall+0x98/0x244 [ 77.915951][ T7002] el0_svc_common+0xec/0x23c [ 77.915961][ T7002] do_el0_svc+0x4c/0x5c [ 77.915970][ T7002] el0_svc+0x64/0x260 [ 77.915980][ T7002] el0t_64_sync_handler+0x48/0x148 [ 77.915990][ T7002] el0t_64_sync+0x198/0x19c [ 77.949874][ T7006] FAULT_INJECTION: forcing a failure. [ 77.949874][ T7006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.949895][ T7006] CPU: 0 UID: 0 PID: 7006 Comm: syz.1.777 Not tainted syzkaller #0 PREEMPT [ 77.949906][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 77.949912][ T7006] Call trace: [ 77.949915][ T7006] show_stack+0x2c/0x3c (C) [ 77.949933][ T7006] __dump_stack+0x30/0x40 [ 77.949943][ T7006] dump_stack_lvl+0xd8/0x12c [ 77.949953][ T7006] dump_stack+0x1c/0x28 [ 77.949962][ T7006] should_fail_ex+0x41c/0x590 [ 77.949973][ T7006] should_fail+0x14/0x24 [ 77.949983][ T7006] should_fail_usercopy+0x20/0x30 [ 77.949993][ T7006] _inline_copy_from_user+0x3c/0x174 [ 77.950001][ T7006] bpf_test_init+0xd8/0x154 [ 77.950011][ T7006] bpf_prog_test_run_skb+0x2a0/0x1ed0 [ 77.950021][ T7006] bpf_prog_test_run+0x1e0/0x250 [ 77.950030][ T7006] __sys_bpf+0x730/0x8c8 [ 77.950037][ T7006] __arm64_sys_bpf+0xd0/0xec [ 77.950043][ T7006] invoke_syscall+0x98/0x244 [ 77.950053][ T7006] el0_svc_common+0xec/0x23c [ 77.950063][ T7006] do_el0_svc+0x4c/0x5c [ 77.950072][ T7006] el0_svc+0x64/0x260 [ 77.950083][ T7006] el0t_64_sync_handler+0x48/0x148 [ 77.950092][ T7006] el0t_64_sync+0x198/0x19c [ 78.156789][ T7021] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 78.156866][ T7020] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 78.184886][ T7018] loop1: detected capacity change from 0 to 512 [ 78.188579][ T7018] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.565419][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'. [ 78.779843][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 78.911400][ T7044] FAULT_INJECTION: forcing a failure. [ 78.911400][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 78.915210][ T7044] CPU: 0 UID: 0 PID: 7044 Comm: syz.1.790 Not tainted syzkaller #0 PREEMPT [ 78.915234][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 78.915241][ T7044] Call trace: [ 78.915245][ T7044] show_stack+0x2c/0x3c (C) [ 78.915270][ T7044] __dump_stack+0x30/0x40 [ 78.915283][ T7044] dump_stack_lvl+0xd8/0x12c [ 78.915295][ T7044] dump_stack+0x1c/0x28 [ 78.915306][ T7044] should_fail_ex+0x41c/0x590 [ 78.915317][ T7044] should_failslab+0xc4/0x120 [ 78.915326][ T7044] __kvmalloc_node_noprof+0x160/0x7d8 [ 78.915335][ T7044] io_alloc_cache_init+0x48/0x154 [ 78.915347][ T7044] io_ring_ctx_alloc+0x3e0/0x934 [ 78.915356][ T7044] io_uring_create+0x6c/0x830 [ 78.915364][ T7044] __arm64_sys_io_uring_setup+0x284/0x290 [ 78.915373][ T7044] invoke_syscall+0x98/0x244 [ 78.915383][ T7044] el0_svc_common+0xec/0x23c [ 78.915393][ T7044] do_el0_svc+0x4c/0x5c [ 78.915402][ T7044] el0_svc+0x64/0x260 [ 78.915413][ T7044] el0t_64_sync_handler+0x48/0x148 [ 78.915423][ T7044] el0t_64_sync+0x198/0x19c [ 78.966954][ T7048] netlink: 80 bytes leftover after parsing attributes in process `syz.0.792'. [ 78.979577][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 79.109167][ T7064] FAULT_INJECTION: forcing a failure. [ 79.109167][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 79.109211][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT [ 79.109227][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 79.109234][ T7064] Call trace: [ 79.109238][ T7064] show_stack+0x2c/0x3c (C) [ 79.109258][ T7064] __dump_stack+0x30/0x40 [ 79.109269][ T7064] dump_stack_lvl+0xd8/0x12c [ 79.109279][ T7064] dump_stack+0x1c/0x28 [ 79.109289][ T7064] should_fail_ex+0x41c/0x590 [ 79.109300][ T7064] should_failslab+0xc4/0x120 [ 79.109309][ T7064] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 79.109318][ T7064] __alloc_skb+0x1f0/0x610 [ 79.109328][ T7064] netlink_ack+0x11c/0x890 [ 79.109337][ T7064] netlink_rcv_skb+0x21c/0x414 [ 79.109345][ T7064] genl_rcv+0x38/0x50 [ 79.109354][ T7064] netlink_unicast+0x600/0x7f8 [ 79.109361][ T7064] netlink_sendmsg+0x648/0x948 [ 79.109369][ T7064] __sock_sendmsg+0xc8/0x17c [ 79.109378][ T7064] ____sys_sendmsg+0x3d0/0x6c8 [ 79.109386][ T7064] ___sys_sendmsg+0x198/0x224 [ 79.109395][ T7064] __sys_sendmsg+0x158/0x204 [ 79.109403][ T7064] __arm64_sys_sendmsg+0x88/0x9c [ 79.109412][ T7064] invoke_syscall+0x98/0x244 [ 79.109422][ T7064] el0_svc_common+0xec/0x23c [ 79.109431][ T7064] do_el0_svc+0x4c/0x5c [ 79.109441][ T7064] el0_svc+0x64/0x260 [ 79.109451][ T7064] el0t_64_sync_handler+0x48/0x148 [ 79.109461][ T7064] el0t_64_sync+0x198/0x19c [ 79.155230][ T7069] ip_tables: iptables: counters copy to user failed while replacing table [ 79.210108][ T7072] 9p: Bad value for 'rfdno' [ 79.342038][ T7056] block nbd1: server does not support multiple connections per device. [ 79.342203][ T7056] block nbd1: shutting down sockets [ 79.467762][ T7078] xt_TCPMSS: Only works on TCP SYN packets [ 79.516311][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 80.375904][ T7096] input: syz1 as /devices/virtual/input/input11 [ 80.403417][ T7096] socket: no more sockets [ 80.653908][ T7087] syz.2.804 (7087): drop_caches: 2 [ 80.681134][ T7100] loop2: detected capacity change from 0 to 128 [ 80.697443][ T7100] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.723042][ T7100] fscrypt (loop2, inode 13): Mutually exclusive encryption flags (0x1f) [ 80.746123][ T7104] loop4: detected capacity change from 0 to 512 [ 80.759930][ T7104] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.759973][ T7104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.769215][ T7104] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.772493][ T7104] EXT4-fs (loop4): 1 truncate cleaned up [ 80.773003][ T7104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.783009][ T4720] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.161154][ T7111] block nbd1: server does not support multiple connections per device. [ 81.163999][ T7111] block nbd1: shutting down sockets [ 81.294416][ T7131] input: syz1 as /devices/virtual/input/input12 [ 81.316799][ T7131] socket: no more sockets [ 81.384738][ T7137] FAULT_INJECTION: forcing a failure. [ 81.384738][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 81.384771][ T7137] CPU: 1 UID: 0 PID: 7137 Comm: syz.1.821 Not tainted syzkaller #0 PREEMPT [ 81.384785][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 81.384791][ T7137] Call trace: [ 81.384795][ T7137] show_stack+0x2c/0x3c (C) [ 81.384815][ T7137] __dump_stack+0x30/0x40 [ 81.384826][ T7137] dump_stack_lvl+0xd8/0x12c [ 81.384837][ T7137] dump_stack+0x1c/0x28 [ 81.384846][ T7137] should_fail_ex+0x41c/0x590 [ 81.384858][ T7137] should_failslab+0xc4/0x120 [ 81.384866][ T7137] __kmalloc_noprof+0x108/0x6b8 [ 81.384875][ T7137] security_sk_alloc+0x60/0x35c [ 81.384884][ T7137] sk_prot_alloc+0xe0/0x1e8 [ 81.384892][ T7137] sk_alloc+0x44/0x3ac [ 81.384899][ T7137] bpf_prog_test_run_skb+0x314/0x1ed0 [ 81.384910][ T7137] bpf_prog_test_run+0x1e0/0x250 [ 81.384918][ T7137] __sys_bpf+0x730/0x8c8 [ 81.384925][ T7137] __arm64_sys_bpf+0xd0/0xec [ 81.384932][ T7137] invoke_syscall+0x98/0x244 [ 81.384942][ T7137] el0_svc_common+0xec/0x23c [ 81.384951][ T7137] do_el0_svc+0x4c/0x5c [ 81.384961][ T7137] el0_svc+0x64/0x260 [ 81.384971][ T7137] el0t_64_sync_handler+0x48/0x148 [ 81.384981][ T7137] el0t_64_sync+0x198/0x19c [ 81.539081][ T7152] fusectl: Unknown parameter '/dev/nullb0' [ 81.542182][ T7152] loop1: detected capacity change from 0 to 256 [ 81.549532][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.549567][ T7152] FAT-fs (loop1): Filesystem has been set read-only [ 81.551908][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.551931][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.553177][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.553196][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.553223][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.553236][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.553257][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.553269][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.553689][ T7152] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 81.682676][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.745361][ T7157] netlink: 48 bytes leftover after parsing attributes in process `syz.4.829'. [ 82.445502][ T7183] bridge_slave_0: left allmulticast mode [ 82.446854][ T7183] bridge_slave_0: left promiscuous mode [ 82.448145][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.452084][ T7183] bridge_slave_1: left allmulticast mode [ 82.452689][ T7183] bridge_slave_1: left promiscuous mode [ 82.452809][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.458273][ T7183] bond0: (slave bond_slave_0): Releasing backup interface [ 82.467585][ T7183] bond0: (slave bond_slave_1): Releasing backup interface [ 82.793450][ T7183] team0: Port device team_slave_0 removed [ 82.809349][ T7183] team0: Port device team_slave_1 removed [ 82.809740][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.809754][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.813866][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.813879][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.818565][ T7183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.822880][ T7189] team_slave_0: Caught tx_queue_len zero misconfig [ 82.822908][ T7189] netlink: 'syz.4.839': attribute type 5 has an invalid length. [ 82.833853][ T7185] team0: Port device veth0_virt_wifi added [ 82.839898][ T7189] loop4: detected capacity change from 0 to 512 [ 82.841460][ T4725] syz2: Port: 1 Link DOWN [ 82.847062][ T7189] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.856487][ T7189] EXT4-fs (loop4): 1 truncate cleaned up [ 82.859736][ T7189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.901111][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.929274][ T7197] loop0: detected capacity change from 0 to 512 [ 82.932362][ T7197] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.939460][ T7197] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 82.942046][ T7197] System zones: 0-2, 18-18, 34-34 [ 82.944160][ T7197] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.842: bad orphan inode 15 [ 82.946018][ T7197] loop0: lost filesystem error report for type 5 error -117 [ 82.946227][ T7197] ext4_test_bit(bit=14, block=18) = 1 [ 82.948847][ T7197] is_bad_inode(inode)=0 [ 82.949742][ T7197] NEXT_ORPHAN(inode)=2264924160 [ 82.950816][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 82.950831][ C0] EXT4-fs (loop0): initial error at time 338: ext4_orphan_get:1425 [ 82.950847][ C0] EXT4-fs (loop0): last error at time 338: ext4_orphan_get:1425 [ 82.955315][ T7197] max_ino=32 [ 82.955964][ T7197] i_nlink=0 [ 82.958319][ T7197] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.842: corrupted xattr block 19: e_value out of bounds [ 82.965656][ T7197] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.970422][ T7197] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 82.970974][ T7197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.975687][ T7197] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 3: comm syz.0.842: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 83.074137][ T7202] input: syz1 as /devices/virtual/input/input13 [ 83.961972][ T7213] FAULT_INJECTION: forcing a failure. [ 83.961972][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 83.962782][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.1.844 Not tainted syzkaller #0 PREEMPT [ 83.962802][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 83.962811][ T7213] Call trace: [ 83.962814][ T7213] show_stack+0x2c/0x3c (C) [ 83.962834][ T7213] __dump_stack+0x30/0x40 [ 83.962845][ T7213] dump_stack_lvl+0xd8/0x12c [ 83.962855][ T7213] dump_stack+0x1c/0x28 [ 83.962865][ T7213] should_fail_ex+0x41c/0x590 [ 83.962876][ T7213] should_failslab+0xc4/0x120 [ 83.962885][ T7213] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 83.962895][ T7213] zswap_store+0x784/0x1cd8 [ 83.962905][ T7213] swap_writeout+0x774/0x1468 [ 83.962912][ T7213] shrink_folio_list+0x2748/0x4328 [ 83.962922][ T7213] reclaim_folio_list+0xe8/0x6d8 [ 83.962931][ T7213] reclaim_pages+0x3d0/0x4ac [ 83.962940][ T7213] madvise_cold_or_pageout_pte_range+0x1974/0x2224 [ 83.962948][ T7213] walk_pgd_range+0xa6c/0x17c8 [ 83.962955][ T7213] __walk_page_range+0x150/0x60c [ 83.962962][ T7213] walk_page_range_vma_unsafe+0x2c0/0x368 [ 83.962969][ T7213] walk_page_range_vma+0x80/0x98 [ 83.962976][ T7213] madvise_vma_behavior+0x26e0/0x33dc [ 83.962983][ T7213] madvise_walk_vmas+0x4c8/0x9bc [ 83.962990][ T7213] madvise_do_behavior+0x5f0/0x7c0 [ 83.963000][ T7213] do_madvise+0x28c/0x2f0 [ 83.963010][ T7213] __arm64_sys_madvise+0xac/0xc8 [ 83.963020][ T7213] invoke_syscall+0x98/0x244 [ 83.963030][ T7213] el0_svc_common+0xec/0x23c [ 83.963040][ T7213] do_el0_svc+0x4c/0x5c [ 83.963049][ T7213] el0_svc+0x64/0x260 [ 83.963060][ T7213] el0t_64_sync_handler+0x48/0x148 [ 83.963070][ T7213] el0t_64_sync+0x198/0x19c [ 84.021091][ T7218] block nbd1: server does not support multiple connections per device. [ 84.021256][ T7218] block nbd1: shutting down sockets [ 84.057458][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.063326][ T7224] (NULL device *): [drm] The number of planes must be between 1 and 31 [ 84.462919][ T7243] No such timeout policy "syz1" [ 84.464383][ T7243] loop3: detected capacity change from 0 to 256 [ 84.466848][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.467044][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.156689][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.158987][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.161430][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.163214][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.165276][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.406981][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.407071][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.407237][ T7252] bridge_slave_0: entered allmulticast mode [ 85.407718][ T7252] bridge_slave_0: entered promiscuous mode [ 85.412201][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.412259][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.412352][ T7252] bridge_slave_1: entered allmulticast mode [ 85.413091][ T7252] bridge_slave_1: entered promiscuous mode [ 85.715369][ T7252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.722467][ T7252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.734338][ T7252] team0: Port device team_slave_0 added [ 85.736568][ T7252] team0: Port device team_slave_1 added [ 85.745259][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.746806][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.752221][ T7252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.755104][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.756510][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.761446][ T7252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.781766][ T7252] hsr_slave_0: entered promiscuous mode [ 85.783301][ T7252] hsr_slave_1: entered promiscuous mode [ 85.784635][ T7252] debugfs: 'hsr0' already exists in 'hsr' [ 85.785823][ T7252] Cannot create hsr debugfs directory [ 85.881949][ T30] audit: type=1326 audit(341.842:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.2.862" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5781a8 code=0x0 [ 86.076663][ T7252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.079380][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.083095][ T7252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.086211][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.088885][ T7252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.094886][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.095868][ T7252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.099909][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.204672][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.217147][ T7299] netlink: 44 bytes leftover after parsing attributes in process `syz.1.868'. [ 86.217174][ T7299] netlink: 43 bytes leftover after parsing attributes in process `syz.1.868'. [ 86.218065][ T7299] netlink: 'syz.1.868': attribute type 5 has an invalid length. [ 86.218087][ T7299] netlink: 43 bytes leftover after parsing attributes in process `syz.1.868'. [ 86.272470][ T7252] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.275799][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.275851][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.284871][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.284924][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.487428][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.538890][ T7322] loop1: detected capacity change from 0 to 4096 [ 86.544658][ T7322] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.581094][ T7322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.595862][ T7322] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 86.611703][ T7322] vlan2: entered promiscuous mode [ 86.612861][ T7322] bridge0: entered promiscuous mode [ 86.613014][ T7322] vlan2: entered allmulticast mode [ 86.613029][ T7322] bridge0: entered allmulticast mode [ 86.627990][ T7252] veth0_vlan: entered promiscuous mode [ 86.632069][ T7252] veth1_vlan: entered promiscuous mode [ 86.641417][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.644832][ T7252] veth0_macvtap: entered promiscuous mode [ 86.649786][ T7252] veth1_macvtap: entered promiscuous mode [ 86.656878][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.660003][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.672731][ T4177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.672785][ T4177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.672846][ T4177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.672863][ T4177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.707260][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.707289][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.724424][ T4177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.724453][ T4177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.752919][ T7337] xt_hashlimit: max too large, truncated to 1048576 [ 86.754800][ T7337] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 86.757423][ T7337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.930495][ T7346] block nbd1: server does not support multiple connections per device. [ 86.933807][ T7346] block nbd1: shutting down sockets [ 87.244999][ T4726] Bluetooth: hci0: command tx timeout [ 87.303427][ T7353] loop5: detected capacity change from 0 to 512 [ 87.307760][ T7353] FAT-fs (loop5): bogus logical sector size 0 [ 87.307809][ T7353] FAT-fs (loop5): Can't find a valid FAT filesystem [ 87.332576][ T30] audit: type=1326 audit(343.302:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.1.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d781a8 code=0x0 [ 87.424167][ T7368] Soft offlining pfn 0x16235a at process virtual address 0x20000000 [ 87.445036][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 88.255201][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.890'. [ 88.274338][ T7398] erspan1: entered promiscuous mode [ 88.274410][ T7398] erspan1: entered allmulticast mode [ 88.554810][ T7402] mmap: syz.1.893 (7402): VmData 37511168 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 88.665585][ T7416] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 88.667397][ T7416] overlayfs: overlapping lowerdir path [ 88.706450][ T7416] overlayfs: failed to resolve '//file0': -2 [ 88.713820][ T7416] loop1: detected capacity change from 0 to 512 [ 88.715567][ T7416] EXT4-fs: Ignoring removed nobh option [ 88.806168][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.839425][ T4711] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /222/bus: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 89.202109][ T4711] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 89.213386][ T4711] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 89.230396][ T7438] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 89.236061][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 89.273189][ T7443] fuse: Bad value for 'fd' [ 89.290525][ T4726] Bluetooth: hci0: command tx timeout [ 89.386415][ T7453] FAULT_INJECTION: forcing a failure. [ 89.386415][ T7453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.386450][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.5.914 Not tainted syzkaller #0 PREEMPT [ 89.386464][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 89.386471][ T7453] Call trace: [ 89.386476][ T7453] show_stack+0x2c/0x3c (C) [ 89.386497][ T7453] __dump_stack+0x30/0x40 [ 89.386511][ T7453] dump_stack_lvl+0xd8/0x12c [ 89.386521][ T7453] dump_stack+0x1c/0x28 [ 89.386530][ T7453] should_fail_ex+0x41c/0x590 [ 89.386542][ T7453] should_fail+0x14/0x24 [ 89.386551][ T7453] should_fail_usercopy+0x20/0x30 [ 89.386562][ T7453] _inline_copy_from_user+0x3c/0x174 [ 89.386573][ T7453] copy_msghdr_from_user+0xb8/0x194 [ 89.386583][ T7453] ___sys_sendmsg+0x14c/0x224 [ 89.386592][ T7453] __sys_sendmsg+0x158/0x204 [ 89.386600][ T7453] __arm64_sys_sendmsg+0x88/0x9c [ 89.386609][ T7453] invoke_syscall+0x98/0x244 [ 89.386619][ T7453] el0_svc_common+0xec/0x23c [ 89.386629][ T7453] do_el0_svc+0x4c/0x5c [ 89.386638][ T7453] el0_svc+0x64/0x260 [ 89.386649][ T7453] el0t_64_sync_handler+0x48/0x148 [ 89.386659][ T7453] el0t_64_sync+0x198/0x19c [ 89.915377][ T7474] process 'syz.2.919' launched '/dev/fd/11' with NULL argv: empty string added [ 90.083252][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.218472][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.220637][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.223895][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.226453][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.228010][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.414464][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.414547][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.414614][ T7479] bridge_slave_0: entered allmulticast mode [ 90.415099][ T7479] bridge_slave_0: entered promiscuous mode [ 90.416516][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.416569][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.416629][ T7479] bridge_slave_1: entered allmulticast mode [ 90.417074][ T7479] bridge_slave_1: entered promiscuous mode [ 90.427982][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.429136][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.436245][ T7479] team0: Port device team_slave_0 added [ 90.437185][ T7479] team0: Port device team_slave_1 added [ 90.447130][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.447155][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.447172][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.447745][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.447753][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.447766][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.459610][ T7479] hsr_slave_0: entered promiscuous mode [ 90.459969][ T7479] hsr_slave_1: entered promiscuous mode [ 90.461406][ T7479] debugfs: 'hsr0' already exists in 'hsr' [ 90.461422][ T7479] Cannot create hsr debugfs directory [ 90.514784][ T7479] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 90.517630][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.518401][ T7479] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.521107][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.521574][ T7479] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.523565][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.524007][ T7479] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.526091][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.558400][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.567823][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.571300][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.571344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.579764][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.579821][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.609995][ T7479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.708166][ T39] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.708607][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.708631][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.708646][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.727124][ T7519] bridge0: port 1(syz_tun) entered blocking state [ 90.727203][ T7519] bridge0: port 1(syz_tun) entered disabled state [ 90.727408][ T7519] syz_tun: entered allmulticast mode [ 90.729241][ T7519] syz_tun: entered promiscuous mode [ 90.729634][ T7519] bridge0: port 1(syz_tun) entered blocking state [ 90.729697][ T7519] bridge0: port 1(syz_tun) entered forwarding state [ 90.803365][ T7510] block nbd1: server does not support multiple connections per device. [ 90.803516][ T7510] block nbd1: shutting down sockets [ 90.834287][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.929'. [ 90.859215][ T7531] loop5: detected capacity change from 0 to 1024 [ 90.864329][ T7531] EXT4-fs: Ignoring removed bh option [ 90.866737][ T7531] EXT4-fs: Mount option(s) incompatible with ext3 [ 90.906217][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.928211][ T7537] input: syz1 as /devices/virtual/input/input14 [ 90.949378][ T7541] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.293582][ T7558] FAULT_INJECTION: forcing a failure. [ 91.293582][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 91.298488][ T7558] CPU: 1 UID: 0 PID: 7558 Comm: syz.3.935 Not tainted syzkaller #0 PREEMPT [ 91.298514][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 91.298520][ T7558] Call trace: [ 91.298524][ T7558] show_stack+0x2c/0x3c (C) [ 91.298545][ T7558] __dump_stack+0x30/0x40 [ 91.298559][ T7558] dump_stack_lvl+0xd8/0x12c [ 91.298569][ T7558] dump_stack+0x1c/0x28 [ 91.298579][ T7558] should_fail_ex+0x41c/0x590 [ 91.298592][ T7558] should_failslab+0xc4/0x120 [ 91.298601][ T7558] __kmalloc_noprof+0x108/0x6b8 [ 91.298611][ T7558] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 91.298622][ T7558] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 91.298632][ T7558] genl_rcv_msg+0x43c/0x620 [ 91.298641][ T7558] netlink_rcv_skb+0x238/0x414 [ 91.298650][ T7558] genl_rcv+0x38/0x50 [ 91.298658][ T7558] netlink_unicast+0x600/0x7f8 [ 91.298666][ T7558] netlink_sendmsg+0x648/0x948 [ 91.298674][ T7558] __sock_sendmsg+0xc8/0x17c [ 91.298684][ T7558] ____sys_sendmsg+0x3d0/0x6c8 [ 91.298692][ T7558] ___sys_sendmsg+0x198/0x224 [ 91.298701][ T7558] __sys_sendmsg+0x158/0x204 [ 91.298710][ T7558] __arm64_sys_sendmsg+0x88/0x9c [ 91.298719][ T7558] invoke_syscall+0x98/0x244 [ 91.298735][ T7558] el0_svc_common+0xec/0x23c [ 91.298745][ T7558] do_el0_svc+0x4c/0x5c [ 91.298757][ T7558] el0_svc+0x64/0x260 [ 91.298769][ T7558] el0t_64_sync_handler+0x48/0x148 [ 91.298779][ T7558] el0t_64_sync+0x198/0x19c [ 91.436660][ T4726] Bluetooth: hci0: command tx timeout [ 91.586320][ T7479] veth0_vlan: entered promiscuous mode [ 91.602788][ T7479] veth1_vlan: entered promiscuous mode [ 91.622783][ T7479] veth0_macvtap: entered promiscuous mode [ 91.626580][ T7479] veth1_macvtap: entered promiscuous mode [ 91.635344][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.638383][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.644361][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647345][ T7571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 91.653672][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.653730][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.653750][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.689875][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.689906][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.706095][ T5184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.706366][ T5184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.250647][ T4726] Bluetooth: hci2: command tx timeout [ 92.816135][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 92.833088][ T7612] erspan1: entered promiscuous mode [ 92.833148][ T7612] erspan1: entered allmulticast mode [ 93.089192][ T7624] sch_fq: defrate 512 ignored. [ 93.450329][ T4726] Bluetooth: hci0: command tx timeout [ 93.539505][ T7637] FAULT_INJECTION: forcing a failure. [ 93.539505][ T7637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.539543][ T7637] CPU: 1 UID: 0 PID: 7637 Comm: syz.2.961 Not tainted syzkaller #0 PREEMPT [ 93.539556][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 93.539562][ T7637] Call trace: [ 93.539565][ T7637] show_stack+0x2c/0x3c (C) [ 93.539584][ T7637] __dump_stack+0x30/0x40 [ 93.539594][ T7637] dump_stack_lvl+0xd8/0x12c [ 93.539604][ T7637] dump_stack+0x1c/0x28 [ 93.539614][ T7637] should_fail_ex+0x41c/0x590 [ 93.539625][ T7637] should_fail+0x14/0x24 [ 93.539634][ T7637] should_fail_usercopy+0x20/0x30 [ 93.539644][ T7637] _inline_copy_to_user+0x38/0x270 [ 93.539654][ T7637] io_uring_create+0x424/0x830 [ 93.539663][ T7637] __arm64_sys_io_uring_setup+0x284/0x290 [ 93.539671][ T7637] invoke_syscall+0x98/0x244 [ 93.539681][ T7637] el0_svc_common+0xec/0x23c [ 93.539691][ T7637] do_el0_svc+0x4c/0x5c [ 93.539700][ T7637] el0_svc+0x64/0x260 [ 93.539711][ T7637] el0t_64_sync_handler+0x48/0x148 [ 93.539720][ T7637] el0t_64_sync+0x198/0x19c [ 93.585476][ T7648] loop2: detected capacity change from 0 to 512 [ 93.593576][ T7648] EXT4-fs (loop2): 1 truncate cleaned up [ 93.595354][ T7648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.623790][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.256286][ T7666] netlink: 332 bytes leftover after parsing attributes in process `syz.5.968'. [ 94.258370][ T7666] FAULT_INJECTION: forcing a failure. [ 94.258370][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 94.261292][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.5.968 Not tainted syzkaller #0 PREEMPT [ 94.261322][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 94.261328][ T7666] Call trace: [ 94.261332][ T7666] show_stack+0x2c/0x3c (C) [ 94.261357][ T7666] __dump_stack+0x30/0x40 [ 94.261369][ T7666] dump_stack_lvl+0xd8/0x12c [ 94.261380][ T7666] dump_stack+0x1c/0x28 [ 94.261390][ T7666] should_fail_ex+0x41c/0x590 [ 94.261401][ T7666] should_failslab+0xc4/0x120 [ 94.261409][ T7666] __kmalloc_cache_noprof+0x94/0x5ec [ 94.261418][ T7666] netlbl_cipsov4_add+0x484/0x1ed8 [ 94.261430][ T7666] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 94.261441][ T7666] genl_rcv_msg+0x43c/0x620 [ 94.261450][ T7666] netlink_rcv_skb+0x238/0x414 [ 94.261458][ T7666] genl_rcv+0x38/0x50 [ 94.261467][ T7666] netlink_unicast+0x600/0x7f8 [ 94.261475][ T7666] netlink_sendmsg+0x648/0x948 [ 94.261483][ T7666] __sock_sendmsg+0xc8/0x17c [ 94.261492][ T7666] ____sys_sendmsg+0x3d0/0x6c8 [ 94.261501][ T7666] ___sys_sendmsg+0x198/0x224 [ 94.261509][ T7666] __sys_sendmsg+0x158/0x204 [ 94.261518][ T7666] __arm64_sys_sendmsg+0x88/0x9c [ 94.261527][ T7666] invoke_syscall+0x98/0x244 [ 94.261537][ T7666] el0_svc_common+0xec/0x23c [ 94.261547][ T7666] do_el0_svc+0x4c/0x5c [ 94.261556][ T7666] el0_svc+0x64/0x260 [ 94.261566][ T7666] el0t_64_sync_handler+0x48/0x148 [ 94.261575][ T7666] el0t_64_sync+0x198/0x19c [ 94.329267][ T7670] loop6: detected capacity change from 0 to 128 [ 94.333031][ T4726] Bluetooth: hci2: command tx timeout [ 94.339888][ T7670] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.344244][ T7670] EXT4-fs warning (device loop6): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 94.380620][ T7479] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.519197][ T7687] loop6: detected capacity change from 0 to 4096 [ 94.661514][ T7712] loop3: detected capacity change from 0 to 512 [ 94.663277][ T7712] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.680902][ T7712] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 94.713862][ T7712] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 94.715683][ T7712] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.719255][ T7712] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.986: Invalid block bitmap block 0 in block_group 0 [ 94.719319][ T7712] loop3: lost filesystem error report for type 5 error -117 [ 94.721886][ T7712] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.986: Invalid block bitmap block 0 in block_group 0 [ 94.721906][ T7712] loop3: lost filesystem error report for type 5 error -117 [ 94.723167][ T7712] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.986: Invalid block bitmap block 0 in block_group 0 [ 94.723189][ T7712] loop3: lost filesystem error report for type 5 error -117 [ 94.723390][ T7712] Quota error (device loop3): write_blk: dquota write failed [ 94.723420][ T7712] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 94.723437][ T7712] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.986: Failed to acquire dquot type 1 [ 94.723447][ T7712] loop3: lost filesystem error report for type 5 error -28 [ 94.724252][ T7712] EXT4-fs (loop3): 1 orphan inode deleted [ 94.730211][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 94.730228][ C1] EXT4-fs (loop3): last error at time 350: ext4_acquire_dquot:7041 [ 94.739462][ T40] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 94.739565][ T40] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 94.739576][ T40] loop3: lost filesystem error report for type 5 error -117 [ 94.743120][ T7712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.753704][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.039144][ T7720] syz_tun: left allmulticast mode [ 95.039186][ T7720] syz_tun: left promiscuous mode [ 95.039326][ T7720] bridge0: port 1(syz_tun) entered disabled state [ 95.059179][ T7720] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.107025][ T7724] loop3: detected capacity change from 0 to 128 [ 95.108819][ T7724] ext4: Unknown parameter 'uid' [ 95.127790][ T5177] udevd[5177]: incorrect ext4 checksum on /dev/loop3 [ 95.245799][ T7740] loop3: detected capacity change from 0 to 512 [ 95.264840][ T7740] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 95.273793][ T7740] EXT4-fs (loop3): Remounting filesystem read-only [ 95.274194][ T7740] EXT4-fs (loop3): 1 truncate cleaned up [ 95.275562][ T7740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.291097][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.348724][ T7751] fuse: Unknown parameter 'gro˙˙˙d' [ 95.379622][ T7753] overlayfs: failed to resolve './file0fowner=00000000000000000000': -2 [ 95.690631][ T30] audit: type=1326 audit(351.652:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.0.998" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5781a8 code=0x0 [ 95.846522][ T7784] nfs4: Unknown parameter 'addw' [ 95.862091][ T7782] loop2: detected capacity change from 0 to 512 [ 95.864811][ T7782] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.868529][ T7782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 95.868638][ T7782] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.869687][ T7782] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1008: bg 0: block 361: padding at end of block bitmap is not set [ 95.869704][ T7782] loop2: lost filesystem error report for type 5 error -117 [ 95.870367][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 95.870379][ C0] EXT4-fs (loop2): initial error at time 351: ext4_validate_block_bitmap:441 [ 95.870391][ C0] EXT4-fs (loop2): last error at time 351: ext4_validate_block_bitmap:441 [ 95.875792][ T7782] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 95.875808][ T7782] loop2: lost filesystem error report for type 5 error -117 [ 95.875965][ T7782] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.1008: attempt to clear invalid blocks 33619980 len 1 [ 95.875980][ T7782] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.876667][ T7776] syzkaller0: entered promiscuous mode [ 95.876680][ T7776] syzkaller0: entered allmulticast mode [ 95.877420][ T7782] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1008: invalid indirect mapped block 1811939328 (level 0) [ 95.877442][ T7782] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.877535][ T7782] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1008: invalid indirect mapped block 2185560079 (level 1) [ 95.877549][ T7782] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.877849][ T7782] EXT4-fs (loop2): 1 truncate cleaned up [ 95.878447][ T7782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 95.897131][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 96.271973][ T7807] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 96.410286][ T4726] Bluetooth: hci2: command tx timeout [ 97.076289][ T4811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.454557][ T4811] usb 1-1: Dual-Role OTG device on HNP port [ 97.458324][ T4811] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 97.458366][ T4811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.482387][ T4811] gspca_main: spca501-2.14.0 probing 0000:0000 [ 97.496967][ T4811] gspca_spca501: reg write: error -32 [ 97.497002][ T4811] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 97.497038][ T4811] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 97.554661][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 97.559866][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 97.562121][ T7832] ip6erspan0: entered promiscuous mode [ 97.598555][ T4833] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 97.623144][ T7838] loop6: detected capacity change from 0 to 256 [ 97.628535][ T7838] ip_tables: iptables: counters copy to user failed while replacing table [ 97.647576][ T7836] syz.2.1024 (7836): /proc/7833/oom_adj is deprecated, please use /proc/7833/oom_score_adj instead. [ 97.720057][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 97.848003][ T7855] xt_hashlimit: size too large, truncated to 1048576 [ 98.207883][ T4833] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 98.274913][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1034'. [ 98.420730][ T7880] ip_tables: iptables: counters copy to user failed while replacing table [ 98.488722][ T7884] loop0: detected capacity change from 0 to 512 [ 98.490282][ T4726] Bluetooth: hci2: command tx timeout [ 98.497999][ T7882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.512838][ T7884] EXT4-fs: Mount option(s) incompatible with ext2 [ 98.545567][ T7886] ip_tables: iptables: counters copy to user failed while replacing table [ 98.571284][ T7884] loop0: detected capacity change from 0 to 2048 [ 98.586940][ T7884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.591584][ T7888] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1043'. [ 98.591619][ T7888] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1043'. [ 98.591669][ T7888] FAULT_INJECTION: forcing a failure. [ 98.591669][ T7888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.591685][ T7888] CPU: 1 UID: 0 PID: 7888 Comm: syz.5.1043 Not tainted syzkaller #0 PREEMPT [ 98.591698][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 98.591705][ T7888] Call trace: [ 98.591708][ T7888] show_stack+0x2c/0x3c (C) [ 98.591731][ T7888] __dump_stack+0x30/0x40 [ 98.591742][ T7888] dump_stack_lvl+0xd8/0x12c [ 98.591752][ T7888] dump_stack+0x1c/0x28 [ 98.591761][ T7888] should_fail_ex+0x41c/0x590 [ 98.591772][ T7888] should_fail+0x14/0x24 [ 98.591781][ T7888] should_fail_usercopy+0x20/0x30 [ 98.591792][ T7888] simple_read_from_buffer+0xc4/0x238 [ 98.591802][ T7888] proc_fail_nth_read+0x1a8/0x248 [ 98.591810][ T7888] vfs_read+0x230/0x8c8 [ 98.591820][ T7888] ksys_read+0x12c/0x228 [ 98.591827][ T7888] __arm64_sys_read+0x84/0x98 [ 98.591833][ T7888] invoke_syscall+0x98/0x244 [ 98.591843][ T7888] el0_svc_common+0xec/0x23c [ 98.591852][ T7888] do_el0_svc+0x4c/0x5c [ 98.591862][ T7888] el0_svc+0x64/0x260 [ 98.591872][ T7888] el0t_64_sync_handler+0x48/0x148 [ 98.591882][ T7888] el0t_64_sync+0x198/0x19c [ 98.675548][ T7898] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1046'. [ 98.675588][ T7898] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1046'. [ 99.161789][ T7914] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1052'. [ 99.266035][ T30] audit: type=1326 audit(355.232:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7922 comm="syz.2.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5781a8 code=0x0 [ 99.315737][ T7883] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 99.316260][ T7883] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.316280][ T7883] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.316280][ T7883] [ 99.316292][ T7883] EXT4-fs (loop0): Total free blocks count 0 [ 99.316303][ T7883] EXT4-fs (loop0): Free/Dirty block details [ 99.316317][ T7883] EXT4-fs (loop0): free_blocks=4096 [ 99.316331][ T7883] EXT4-fs (loop0): dirty_blocks=64 [ 99.316340][ T7883] EXT4-fs (loop0): Block reservation details [ 99.316349][ T7883] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 99.462320][ T4224] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 99.466582][ T4717] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 99.731351][ T7943] ip_tables: iptables: counters copy to user failed while replacing table [ 100.386479][ T7965] ip_tables: iptables: counters copy to user failed while replacing table [ 100.606365][ T7983] loop2: detected capacity change from 0 to 128 [ 100.613462][ T7983] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.672043][ T4720] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.240300][ T30] audit: type=1326 audit(357.182:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7992 comm="syz.0.1076" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5781a8 code=0x0 [ 101.310829][ T7999] fuse: fd is not a fuse device [ 103.265890][ T8041] fuse: fd is not a fuse device [ 103.711369][ T30] audit: type=1326 audit(359.672:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8047 comm="syz.2.1097" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5781a8 code=0x0 [ 103.781346][ T8069] cgroup: name respecified [ 104.132312][ T8073] ip_tables: iptables: counters copy to user failed while replacing table [ 104.168562][ T8077] loop3: detected capacity change from 0 to 128 [ 104.172291][ T5184] rpcbind: server 127.0.0.1 not responding, timed out [ 104.176435][ T8077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 104.178578][ T8077] System zones: 1-3, 19-19, 35-36 [ 104.185356][ T8077] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.191730][ T8077] fuse: Bad value for 'group_id' [ 104.192823][ T8077] fuse: Bad value for 'group_id' [ 104.312941][ T8084] fuse: fd is not a fuse device [ 104.453562][ T4715] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 104.458908][ T4715] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 104.477122][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 104.481317][ T4715] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 104.484365][ T4715] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 104.487402][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 104.490817][ T4715] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 104.493991][ T4715] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 104.497148][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 104.501331][ T4715] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 105.221175][ T8122] loop2: detected capacity change from 0 to 1024 [ 105.235845][ T8122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.545359][ T8122] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1114: lblock 3 mapped to illegal pblock 3 (length 3) [ 105.557048][ T8122] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 105.557086][ T8122] EXT4-fs (loop2): This should not happen!! Data will be lost [ 105.557086][ T8122] [ 105.561098][ T8122] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1114: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.582876][ T8122] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1114: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.588283][ T8122] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 0: len 1: ext4_ext_map_blocks returned -117 [ 105.596152][ T8131] loop0: detected capacity change from 0 to 512 [ 105.679879][ T5184] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 105.681160][ T5184] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 105.681178][ T5184] EXT4-fs (loop2): This should not happen!! Data will be lost [ 105.681178][ T5184] [ 105.683345][ T4720] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 105.684100][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.708441][ T6754] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.952041][ T8146] FAULT_INJECTION: forcing a failure. [ 105.952041][ T8146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.952078][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.2.1121 Not tainted syzkaller #0 PREEMPT [ 105.952093][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 105.952100][ T8146] Call trace: [ 105.952104][ T8146] show_stack+0x2c/0x3c (C) [ 105.952123][ T8146] __dump_stack+0x30/0x40 [ 105.952135][ T8146] dump_stack_lvl+0xd8/0x12c [ 105.952144][ T8146] dump_stack+0x1c/0x28 [ 105.952154][ T8146] should_fail_ex+0x41c/0x590 [ 105.952165][ T8146] should_fail+0x14/0x24 [ 105.952174][ T8146] should_fail_usercopy+0x20/0x30 [ 105.952185][ T8146] _copy_from_iter+0x188/0x1064 [ 105.952193][ T8146] netlink_sendmsg+0x570/0x948 [ 105.952203][ T8146] __sock_sendmsg+0xc8/0x17c [ 105.952212][ T8146] ____sys_sendmsg+0x3d0/0x6c8 [ 105.952220][ T8146] ___sys_sendmsg+0x198/0x224 [ 105.952229][ T8146] __sys_sendmsg+0x158/0x204 [ 105.952237][ T8146] __arm64_sys_sendmsg+0x88/0x9c [ 105.952246][ T8146] invoke_syscall+0x98/0x244 [ 105.952256][ T8146] el0_svc_common+0xec/0x23c [ 105.952266][ T8146] do_el0_svc+0x4c/0x5c [ 105.952275][ T8146] el0_svc+0x64/0x260 [ 105.952286][ T8146] el0t_64_sync_handler+0x48/0x148 [ 105.952296][ T8146] el0t_64_sync+0x198/0x19c [ 106.140307][ T8152] loop5: detected capacity change from 0 to 512 [ 106.153088][ T8152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.220868][ T8152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.234740][ T8152] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.1122: invalid fast symlink length 10 [ 106.437665][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.443402][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.445510][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.447950][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.449700][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.523651][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 106.764603][ T8179] FAULT_INJECTION: forcing a failure. [ 106.764603][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 106.764642][ T8179] CPU: 0 UID: 0 PID: 8179 Comm: syz.0.1130 Not tainted syzkaller #0 PREEMPT [ 106.764656][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 106.764663][ T8179] Call trace: [ 106.764667][ T8179] show_stack+0x2c/0x3c (C) [ 106.764697][ T8179] __dump_stack+0x30/0x40 [ 106.764708][ T8179] dump_stack_lvl+0xd8/0x12c [ 106.764722][ T8179] dump_stack+0x1c/0x28 [ 106.764732][ T8179] should_fail_ex+0x41c/0x590 [ 106.764744][ T8179] should_failslab+0xc4/0x120 [ 106.764753][ T8179] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 106.764763][ T8179] __alloc_skb+0x1f0/0x610 [ 106.764773][ T8179] alloc_skb_with_frags+0xb8/0x690 [ 106.764781][ T8179] sock_alloc_send_pskb+0x740/0x850 [ 106.764788][ T8179] __ip6_append_data+0x2810/0x38c8 [ 106.764800][ T8179] ip6_make_skb+0x264/0x2cc [ 106.764809][ T8179] udpv6_sendmsg+0x16e0/0x1f78 [ 106.764820][ T8179] inet6_sendmsg+0xb4/0xd8 [ 106.764829][ T8179] __sock_sendmsg+0xc8/0x17c [ 106.764837][ T8179] ____sys_sendmsg+0x3f8/0x6c8 [ 106.764845][ T8179] ___sys_sendmsg+0x198/0x224 [ 106.764854][ T8179] __sys_sendmmsg+0x204/0x580 [ 106.764863][ T8179] __arm64_sys_sendmmsg+0xac/0xc8 [ 106.764871][ T8179] invoke_syscall+0x98/0x244 [ 106.764881][ T8179] el0_svc_common+0xec/0x23c [ 106.764891][ T8179] do_el0_svc+0x4c/0x5c [ 106.764900][ T8179] el0_svc+0x64/0x260 [ 106.764911][ T8179] el0t_64_sync_handler+0x48/0x148 [ 106.764920][ T8179] el0t_64_sync+0x198/0x19c [ 106.819048][ T7252] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.967665][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 107.074850][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.075000][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.075081][ T8168] bridge_slave_0: entered allmulticast mode [ 107.075523][ T8168] bridge_slave_0: entered promiscuous mode [ 107.076586][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.076635][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.076704][ T8168] bridge_slave_1: entered allmulticast mode [ 107.078044][ T8168] bridge_slave_1: entered promiscuous mode [ 107.086370][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.087473][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.096332][ T8168] team0: Port device team_slave_0 added [ 107.097260][ T8168] team0: Port device team_slave_1 added [ 107.381941][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.381973][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.382003][ T8168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.411461][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.411493][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.411531][ T8168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.511804][ T8168] hsr_slave_0: entered promiscuous mode [ 107.514549][ T8168] hsr_slave_1: entered promiscuous mode [ 107.517581][ T8168] debugfs: 'hsr0' already exists in 'hsr' [ 107.517618][ T8168] Cannot create hsr debugfs directory [ 108.097631][ T8221] vlan2: entered promiscuous mode [ 108.097662][ T8221] bridge0: entered promiscuous mode [ 108.130364][ T8225] loop2: detected capacity change from 0 to 256 [ 108.134822][ T8225] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.200853][ T8168] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.205978][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.206424][ T8168] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.209613][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.211735][ T8168] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.216596][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.217728][ T8168] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.221078][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.533008][ T4719] Bluetooth: hci1: command tx timeout [ 108.560060][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.579656][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.589716][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.589764][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.602987][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.603041][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.663599][ T8245] overlayfs: conflicting lowerdir path [ 108.896720][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1147'. [ 110.025876][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.490112][ T8276] loop0: detected capacity change from 0 to 128 [ 110.493041][ T8276] FAT-fs (loop0): bogus number of reserved sectors [ 110.493075][ T8276] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 110.493089][ T8276] FAT-fs (loop0): Can't find a valid FAT filesystem [ 110.570743][ T4719] Bluetooth: hci1: command tx timeout [ 110.598320][ T8168] veth0_vlan: entered promiscuous mode [ 110.603783][ T8168] veth1_vlan: entered promiscuous mode [ 110.691272][ T8292] usb3503 0-0008: unknown mode is requested [ 110.691479][ T8292] usb3503 0-0008: usb3503_probe: probed in standby mode [ 110.694647][ T8292] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 110.707466][ T8292] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 110.841273][ T8168] veth0_macvtap: entered promiscuous mode [ 110.844383][ T8168] veth1_macvtap: entered promiscuous mode [ 110.852034][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.855049][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.862153][ T8293] FAULT_INJECTION: forcing a failure. [ 110.862153][ T8293] name failslab, interval 1, probability 0, space 0, times 0 [ 110.864800][ T8293] CPU: 0 UID: 0 PID: 8293 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT [ 110.864818][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 110.864824][ T8293] Call trace: [ 110.864828][ T8293] show_stack+0x2c/0x3c (C) [ 110.864852][ T8293] __dump_stack+0x30/0x40 [ 110.864864][ T8293] dump_stack_lvl+0xd8/0x12c [ 110.864874][ T8293] dump_stack+0x1c/0x28 [ 110.864884][ T8293] should_fail_ex+0x41c/0x590 [ 110.864895][ T8293] should_failslab+0xc4/0x120 [ 110.864904][ T8293] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 110.864913][ T8293] kmemdup_noprof+0x44/0x8c [ 110.864922][ T8293] mptcp_pm_nl_add_addr_doit+0x30c/0x1000 [ 110.864931][ T8293] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 110.864942][ T8293] genl_rcv_msg+0x43c/0x620 [ 110.864951][ T8293] netlink_rcv_skb+0x238/0x414 [ 110.864959][ T8293] genl_rcv+0x38/0x50 [ 110.864968][ T8293] netlink_unicast+0x600/0x7f8 [ 110.864975][ T8293] netlink_sendmsg+0x648/0x948 [ 110.864984][ T8293] __sock_sendmsg+0xc8/0x17c [ 110.864993][ T8293] ____sys_sendmsg+0x3d0/0x6c8 [ 110.865001][ T8293] ___sys_sendmsg+0x198/0x224 [ 110.865010][ T8293] __sys_sendmsg+0x158/0x204 [ 110.865018][ T8293] __arm64_sys_sendmsg+0x88/0x9c [ 110.865027][ T8293] invoke_syscall+0x98/0x244 [ 110.865037][ T8293] el0_svc_common+0xec/0x23c [ 110.865047][ T8293] do_el0_svc+0x4c/0x5c [ 110.865056][ T8293] el0_svc+0x64/0x260 [ 110.865066][ T8293] el0t_64_sync_handler+0x48/0x148 [ 110.865075][ T8293] el0t_64_sync+0x198/0x19c [ 110.934947][ T5184] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.935285][ T5184] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.935309][ T5184] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.935326][ T5184] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.986055][ T5184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.986092][ T5184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.034792][ T117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.034827][ T117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.050745][ T8304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1159'. [ 111.056313][ T8304] loop2: detected capacity change from 0 to 512 [ 111.058112][ T8304] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.107779][ T8304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.115648][ T8304] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz.2.1159: Directory hole found for htree leaf block 0 [ 111.135369][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.142080][ T8311] 9p: Bad value for 'rfdno' [ 111.144999][ T8311] loop7: detected capacity change from 0 to 512 [ 111.163123][ T8311] [ 111.163617][ T8311] ====================================================== [ 111.164912][ T8311] WARNING: possible circular locking dependency detected [ 111.166187][ T8311] syzkaller #0 Not tainted [ 111.166967][ T8311] ------------------------------------------------------ [ 111.168210][ T8311] syz.7.1129/8311 is trying to acquire lock: [ 111.169305][ T8311] ffff0000f24c4c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 111.171188][ T8311] [ 111.171188][ T8311] but task is already holding lock: [ 111.172571][ T8311] ffff0000f3009380 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 111.174343][ T8311] [ 111.174343][ T8311] which lock already depends on the new lock. [ 111.174343][ T8311] [ 111.176217][ T8311] [ 111.176217][ T8311] the existing dependency chain (in reverse order) is: [ 111.177795][ T8311] [ 111.177795][ T8311] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 111.179110][ T8311] down_write+0x50/0xc0 [ 111.179900][ T8311] ext4_destroy_inline_data+0x30/0x114 [ 111.180912][ T8311] ext4_do_writepages+0x3e4/0x3bc0 [ 111.181892][ T8311] ext4_writepages+0x198/0x2dc [ 111.182811][ T8311] do_writepages+0x284/0x47c [ 111.183727][ T8311] __writeback_single_inode+0x140/0x1880 [ 111.184815][ T8311] writeback_sb_inodes+0x798/0x1720 [ 111.185790][ T8311] wb_writeback+0x3bc/0x10cc [ 111.186687][ T8311] wb_workfn+0x318/0xda8 [ 111.187511][ T8311] process_scheduled_works+0x788/0x10b8 [ 111.188573][ T8311] worker_thread+0x798/0xbd0 [ 111.189438][ T8311] kthread+0x304/0x3d4 [ 111.190254][ T8311] ret_from_fork+0x10/0x20 [ 111.191125][ T8311] [ 111.191125][ T8311] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 111.192615][ T8311] __lock_acquire+0x17c0/0x2ebc [ 111.193534][ T8311] lock_acquire+0x140/0x364 [ 111.194420][ T8311] percpu_down_read_internal+0x5c/0x294 [ 111.195485][ T8311] ext4_writepages+0x170/0x2dc [ 111.196386][ T8311] do_writepages+0x284/0x47c [ 111.197236][ T8311] __writeback_single_inode+0x140/0x1880 [ 111.198302][ T8311] writeback_single_inode+0x400/0xb20 [ 111.199361][ T8311] write_inode_now+0x170/0x208 [ 111.200324][ T8311] iput+0x7cc/0xc2c [ 111.201111][ T8311] ext4_xattr_block_set+0x1460/0x21e8 [ 111.202148][ T8311] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 111.203215][ T8311] __ext4_expand_extra_isize+0x2a4/0x378 [ 111.204267][ T8311] __ext4_mark_inode_dirty+0x394/0x828 [ 111.205309][ T8311] ext4_evict_inode+0x798/0xfb8 [ 111.206261][ T8311] evict+0x4c0/0x74c [ 111.207009][ T8311] iput+0x8f0/0xc2c [ 111.207781][ T8311] ext4_process_orphan+0x24c/0x2c0 [ 111.208747][ T8311] ext4_orphan_cleanup+0x7d4/0xd20 [ 111.209697][ T8311] ext4_fill_super+0x4628/0x4e14 [ 111.210595][ T8311] get_tree_bdev_flags+0x388/0x43c [ 111.211520][ T8311] get_tree_bdev+0x2c/0x3c [ 111.212380][ T8311] ext4_get_tree+0x28/0x38 [ 111.213245][ T8311] vfs_get_tree+0x90/0x28c [ 111.214106][ T8311] fc_mount+0x24/0xac [ 111.214889][ T8311] do_new_mount+0x2a4/0x538 [ 111.215773][ T8311] path_mount+0x5f0/0xa88 [ 111.216622][ T8311] do_mount+0xe8/0x148 [ 111.217397][ T8311] __arm64_sys_mount+0x33c/0x388 [ 111.218332][ T8311] invoke_syscall+0x98/0x244 [ 111.219215][ T8311] el0_svc_common+0xec/0x23c [ 111.220091][ T8311] do_el0_svc+0x4c/0x5c [ 111.220893][ T8311] el0_svc+0x64/0x260 [ 111.221653][ T8311] el0t_64_sync_handler+0x48/0x148 [ 111.222682][ T8311] el0t_64_sync+0x198/0x19c [ 111.223556][ T8311] [ 111.223556][ T8311] other info that might help us debug this: [ 111.223556][ T8311] [ 111.225296][ T8311] Possible unsafe locking scenario: [ 111.225296][ T8311] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.226555][ T8311] CPU0 CPU1 [ 111.227464][ T8311] ---- ---- [ 111.228373][ T8311] lock(&ei->xattr_sem); [ 111.229147][ T8311] lock(&sbi->s_writepages_rwsem); [ 111.230499][ T8311] lock(&ei->xattr_sem); [ 111.231748][ T8311] rlock(&sbi->s_writepages_rwsem); [ 111.232700][ T8311] [ 111.232700][ T8311] *** DEADLOCK *** [ 111.232700][ T8311] [ 111.234162][ T8311] 3 locks held by syz.7.1129/8311: [ 111.235081][ T8311] #0: ffff0000d6b620d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 111.236890][ T8311] #1: ffff0000d6b62640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 111.238516][ T8311] #2: ffff0000f3009380 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 111.240387][ T8311] [ 111.240387][ T8311] stack backtrace: [ 111.241433][ T8311] CPU: 0 UID: 0 PID: 8311 Comm: syz.7.1129 Not tainted syzkaller #0 PREEMPT [ 111.243000][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 111.244733][ T8311] Call trace: [ 111.245295][ T8311] show_stack+0x2c/0x3c (C) [ 111.246115][ T8311] __dump_stack+0x30/0x40 [ 111.246896][ T8311] dump_stack_lvl+0xd8/0x12c [ 111.247736][ T8311] dump_stack+0x1c/0x28 [ 111.248484][ T8311] print_circular_bug+0x328/0x330 [ 111.249321][ T8311] check_noncircular+0x158/0x174 [ 111.250143][ T8311] __lock_acquire+0x17c0/0x2ebc [ 111.250955][ T8311] lock_acquire+0x140/0x364 [ 111.251724][ T8311] percpu_down_read_internal+0x5c/0x294 [ 111.252709][ T8311] ext4_writepages+0x170/0x2dc [ 111.253517][ T8311] do_writepages+0x284/0x47c [ 111.254366][ T8311] __writeback_single_inode+0x140/0x1880 [ 111.255318][ T8311] writeback_single_inode+0x400/0xb20 [ 111.256200][ T8311] write_inode_now+0x170/0x208 [ 111.257009][ T8311] iput+0x7cc/0xc2c [ 111.257660][ T8311] ext4_xattr_block_set+0x1460/0x21e8 [ 111.258563][ T8311] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 111.259563][ T8311] __ext4_expand_extra_isize+0x2a4/0x378 [ 111.260513][ T8311] __ext4_mark_inode_dirty+0x394/0x828 [ 111.261435][ T8311] ext4_evict_inode+0x798/0xfb8 [ 111.262260][ T8311] evict+0x4c0/0x74c [ 111.262925][ T8311] iput+0x8f0/0xc2c [ 111.263584][ T8311] ext4_process_orphan+0x24c/0x2c0 [ 111.264464][ T8311] ext4_orphan_cleanup+0x7d4/0xd20 [ 111.265349][ T8311] ext4_fill_super+0x4628/0x4e14 [ 111.266177][ T8311] get_tree_bdev_flags+0x388/0x43c [ 111.267020][ T8311] get_tree_bdev+0x2c/0x3c [ 111.267740][ T8311] ext4_get_tree+0x28/0x38 [ 111.268445][ T8311] vfs_get_tree+0x90/0x28c [ 111.269163][ T8311] fc_mount+0x24/0xac [ 111.269809][ T8311] do_new_mount+0x2a4/0x538 [ 111.270558][ T8311] path_mount+0x5f0/0xa88 [ 111.271283][ T8311] do_mount+0xe8/0x148 [ 111.271969][ T8311] __arm64_sys_mount+0x33c/0x388 [ 111.272784][ T8311] invoke_syscall+0x98/0x244 [ 111.273555][ T8311] el0_svc_common+0xec/0x23c [ 111.274334][ T8311] do_el0_svc+0x4c/0x5c [ 111.275038][ T8311] el0_svc+0x64/0x260 [ 111.275730][ T8311] el0t_64_sync_handler+0x48/0x148 [ 111.276587][ T8311] el0t_64_sync+0x198/0x19c [ 111.309025][ T8311] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1129: iget: bad extra_isize 90 (inode size 256) [ 111.309061][ T8311] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.310208][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 111.310219][ C0] EXT4-fs (loop7): initial error at time 367: ext4_xattr_inode_iget:441: inode 11 [ 111.310233][ C0] EXT4-fs (loop7): last error at time 367: ext4_xattr_inode_iget:441: inode 11 [ 111.359063][ T8311] EXT4-fs (loop7): Remounting filesystem read-only [ 111.359143][ T8311] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 111.359169][ T8311] EXT4-fs (loop7): 1 orphan inode deleted [ 111.359366][ T8311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.382575][ T8311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.622186][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.622223][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.722065][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.722102][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.802158][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.802198][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.872179][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.872215][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.982886][ T39] bridge_slave_1: left allmulticast mode [ 111.984037][ T39] bridge_slave_1: left promiscuous mode [ 111.985232][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.987244][ T39] bridge_slave_0: left allmulticast mode [ 111.987267][ T39] bridge_slave_0: left promiscuous mode [ 111.987329][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.033837][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.052650][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.055697][ T39] bond0 (unregistering): Released all slaves [ 112.174356][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 112.269000][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 112.338515][ T39] hsr_slave_0: left promiscuous mode [ 112.339813][ T39] hsr_slave_1: left promiscuous mode [ 112.341388][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.342953][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.344702][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.346159][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.350121][ T39] veth1_macvtap: left promiscuous mode [ 112.350147][ T39] veth0_macvtap: left promiscuous mode [ 112.354873][ T39] veth1_vlan: left promiscuous mode [ 112.356548][ T39] veth0_vlan: left promiscuous mode [ 112.438261][ T39] team0 (unregistering): Port device team_slave_1 removed [ 112.441414][ T39] team0 (unregistering): Port device team_slave_0 removed [ 112.479174][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 112.569434][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 112.822111][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.892560][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.972414][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.072288][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.154963][ T39] bridge_slave_1: left allmulticast mode [ 113.154995][ T39] bridge_slave_1: left promiscuous mode [ 113.155076][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.158749][ T39] bridge_slave_0: left allmulticast mode [ 113.158773][ T39] bridge_slave_0: left promiscuous mode [ 113.158842][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.194762][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.211680][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.219808][ T39] bond0 (unregistering): Released all slaves [ 113.322720][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 113.421074][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 113.451319][ T39] hsr_slave_0: left promiscuous mode [ 113.452368][ T39] hsr_slave_1: left promiscuous mode [ 113.452722][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.452731][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.453748][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.453757][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.470133][ T39] veth1_macvtap: left promiscuous mode [ 113.470170][ T39] veth0_macvtap: left promiscuous mode [ 113.478046][ T39] veth1_vlan: left promiscuous mode [ 113.485439][ T39] veth0_vlan: left promiscuous mode [ 113.545957][ T39] team0 (unregistering): Port device team_slave_1 removed [ 113.548367][ T39] team0 (unregistering): Port device team_slave_0 removed [ 113.594956][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 113.699166][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 113.842096][ T39] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.942156][ T39] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.024066][ T39] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.082117][ T39] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.188547][ T39] bridge_slave_1: left allmulticast mode [ 114.188576][ T39] bridge_slave_1: left promiscuous mode [ 114.188656][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.193615][ T39] bridge_slave_0: left allmulticast mode [ 114.193639][ T39] bridge_slave_0: left promiscuous mode [ 114.193717][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.228569][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.250414][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3830 [ 114.250435][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1112, name: kworker/u8:5 [ 114.250454][ C0] preempt_count: 102, expected: 0 [ 114.250461][ C0] RCU nest depth: 1, expected: 0 [ 114.250467][ C0] INFO: lockdep is turned off. [ 114.250471][ C0] Preemption disabled at: [ 114.250475][ C0] [] nsim_dev_trap_report_work+0x168/0x9cc [ 114.250496][ C0] CPU: 0 UID: 0 PID: 1112 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT [ 114.250506][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 114.250511][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 114.250522][ C0] Call trace: [ 114.250525][ C0] show_stack+0x2c/0x3c (C) [ 114.250538][ C0] __dump_stack+0x30/0x40 [ 114.250548][ C0] dump_stack_lvl+0xd8/0x12c [ 114.250559][ C0] dump_stack+0x1c/0x28 [ 114.250569][ C0] __might_resched+0x354/0x4c0 [ 114.250578][ C0] __might_sleep+0x84/0xdc [ 114.250587][ C0] lock_sock_nested+0x68/0x110 [ 114.250597][ C0] x25_kill_by_neigh+0x114/0x2a0 [ 114.250606][ C0] x25_link_terminated+0x60/0x7c [ 114.250614][ C0] x25_lapb_receive_frame+0x144/0xcf8 [ 114.250622][ C0] __netif_receive_skb_one_core+0xc8/0x110 [ 114.250631][ C0] netif_receive_skb_core+0xd8/0x190 [ 114.250640][ C0] lapbeth_napi_poll+0x48/0xa0 [ 114.250650][ C0] __napi_poll+0xb4/0x328 [ 114.250657][ C0] net_rx_action+0x5b0/0xc14 [ 114.250665][ C0] handle_softirqs+0x2ec/0xd98 [ 114.250673][ C0] __do_softirq+0x14/0x20 [ 114.250681][ C0] ____do_softirq+0x14/0x20 [ 114.250688][ C0] call_on_irq_stack+0x30/0x48 [ 114.250696][ C0] do_softirq_own_stack+0x20/0x2c [ 114.250703][ C0] do_softirq+0x90/0xf8 [ 114.250711][ C0] __local_bh_enable_ip+0x240/0x35c [ 114.250723][ C0] __alloc_skb+0x1c8/0x610 [ 114.250732][ C0] nsim_dev_trap_report_work+0x204/0x9cc [ 114.250743][ C0] process_scheduled_works+0x788/0x10b8 [ 114.250753][ C0] worker_thread+0x798/0xbd0 [ 114.250762][ C0] kthread+0x304/0x3d4 [ 114.250770][ C0] ret_from_fork+0x10/0x20 [ 114.262293][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.263223][ T39] bond0 (unregistering): Released all slaves [ 114.367798][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 114.490927][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 114.525775][ T39] hsr_slave_0: left promiscuous mode [ 114.526800][ T39] hsr_slave_1: left promiscuous mode [ 114.527250][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.527266][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.530805][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.530836][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.536535][ T39] veth1_macvtap: left promiscuous mode [ 114.537191][ T39] veth0_macvtap: left promiscuous mode [ 114.537239][ T39] veth1_vlan: left promiscuous mode [ 114.537272][ T39] veth0_vlan: left promiscuous mode [ 114.625699][ T39] team0 (unregistering): Port device team_slave_1 removed [ 114.629611][ T39] team0 (unregistering): Port device team_slave_0 removed [ 114.657912][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 114.784542][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9