last executing test programs: 15.461304592s ago: executing program 4 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}}}}}}, 0x0) 15.436479963s ago: executing program 4 (id=130): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f088a8233786dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.27645767s ago: executing program 4 (id=137): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="379500000000000003e77a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 15.2340622s ago: executing program 4 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1105849, 0x0) 15.186187248s ago: executing program 4 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.807951745s ago: executing program 4 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x6, "1a03e50902000300910008000041090000000000000000000000614200000001"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, &(0x7f0000000100)="0400000000000000") 14.764863811s ago: executing program 32 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x6, "1a03e50902000300910008000041090000000000000000000000614200000001"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, &(0x7f0000000100)="0400000000000000") 11.816878207s ago: executing program 2 (id=229): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 11.666038271s ago: executing program 2 (id=239): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x64000600) r0 = epoll_create1(0x0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 11.560926747s ago: executing program 2 (id=245): r0 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r1 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) 11.520658924s ago: executing program 2 (id=246): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x47a, &(0x7f00000028c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 11.376130683s ago: executing program 2 (id=250): prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0}) 11.084110891s ago: executing program 2 (id=261): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000000c0)="82e8ec0d69a236769b474d8b4599b7aa9006160072fe63dcb6", 0x19, 0x3b00, 0x0, 0x0) 11.06003632s ago: executing program 33 (id=261): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000000c0)="82e8ec0d69a236769b474d8b4599b7aa9006160072fe63dcb6", 0x19, 0x3b00, 0x0, 0x0) 9.466186668s ago: executing program 1 (id=299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 9.342690952s ago: executing program 1 (id=302): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 9.252903846s ago: executing program 1 (id=305): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000100)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff", 0x2c) setsockopt(r0, 0x0, 0x487, &(0x7f0000000200)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff7f0000014e210000000000000100"/68, 0x44) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x4e21, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) 9.162706613s ago: executing program 1 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00') 9.042334186s ago: executing program 1 (id=310): io_submit(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGp3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRZF723sf+nBv97K7s/2R7iYp3WRD9vOBkzlzZibfc3aY2T0zh5kA+tb5iPhSRDyv1WqXImI4K0+zFJvNVF/v6ZMHM/WURK12670kImmW1Vcbe+V/nsw2OxYRP/huxI+TN+NW1jcWp0ul4mo2X6gurRQq6xuXF5am54vzxeXJyYlrU9enrk6Nd6WdQxFx49v/+dXP//CdG3/5yr1/3v7f2E+SrDziZTu6rdn0XOOzaBmMiNW9CNYDA1l7cq2CNvsaAICDo/U7/wsRcSmGY6Dxaw4AAAA4TGpfH4qPkogaAAAAcGiljTGwSZrPxgEMRZrm880xvJ+JE2mpXKl+ea68tjzbHCs7Erl0bqFUHM/GCo9ELqnPTzTyL+evbJmfjIjTEfHL4eON+fxMuTTb64sfAAAA0CdObun/fzjc7P8DAAAAh8xIrysAAAAA7Dn9fwAAADj89P8BAADgUPvezZv1VGu9/3r27vraYvnu5dliZTG/tDaTnymvruTny+X5xjP7lnb6f6VyeeWrsbx2v1AtVqqFyvrG7aXy2nL19sJrr8AGAAAA9tHpzz/6RxIRm1873kh1R3pdKWBfDL7Nyv/eu3oA+2+g1xUAeuatvv+BQyXX6woAPZdExO+2Wd5x8M5f96Y+AABA941+tv39/3THawOb6T5VEdgjrv9B/3L/H/qX+//Qv3IxEDry0N+SHZa/+/3/Wu2tKgQAAHTdUCMlaT675z8UaZrPR5xqvBYgl8wtlIrjEfGpiPj7cO5ofX6isWWyY58BAAAAAAAAAAAAAAAAAAAAAAAAAGiq1ZKoAQAAAIdaRPrfJHv/1+jwxaGt1weOJM+GG9OIuPfbW7++P12trk7Uy99/UV79TVZ+pRdXMAAAAICtWv30Vj8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrp6ZMHM620n3H//82IGGkXfzCONabHIhcRJz5IYvCV7ZKIGOhC/M2HEfGtH7WJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+0O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffynQsf4DyPODrY//7TiJx3Ofxd2Gf/ODzc2Oi2r/T5itO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+MXn/vx8u/af6BB/ZIf2X9xl+z9+fP/Jp5vZXLv4Yxfa7/8zHeKn2f7/YpavLx9t5Teb+Ved++Pfzm3X/tkO7d9p/4/tsv2Xvv+zf+1yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx6Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99EgAA///hBdEh") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8080, 0x83) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x0, 0x1ffffff, 0xa1e}) 8.548097742s ago: executing program 1 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) ptrace(0x10, 0x1) 8.437662028s ago: executing program 34 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) ptrace(0x10, 0x1) 919.604593ms ago: executing program 5 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/badblocks_once\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/128, 0x80) 856.166806ms ago: executing program 5 (id=493): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0e50460, &(0x7f0000000140)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@smackfsroot}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f8"], 0x200000) 731.993471ms ago: executing program 5 (id=499): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 575.536898ms ago: executing program 5 (id=505): socket$alg(0x26, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 546.831943ms ago: executing program 6 (id=507): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) 506.389304ms ago: executing program 3 (id=510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500640601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002"], 0x0) 483.587606ms ago: executing program 6 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) 464.242625ms ago: executing program 5 (id=513): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_mount_image$fuse(0x0, 0x0, 0x1a42028, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb8e, 0x54, 0x951, 0x0}) 444.724321ms ago: executing program 7 (id=514): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r2, 0x6, 0x2, "a49f"}, 0xa) 433.194885ms ago: executing program 6 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x34, r1, 0x701, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) 431.284175ms ago: executing program 3 (id=516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304, 0x3c}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) 399.671553ms ago: executing program 5 (id=518): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea199800"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 376.958586ms ago: executing program 6 (id=519): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x2, {0xffffffffffffffe5, './file0'}}, 0x10) 359.036004ms ago: executing program 3 (id=520): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)="c4", 0x1}], 0x1}, 0x11) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x1) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x3a, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 356.998013ms ago: executing program 7 (id=521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b4804000300640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 312.952896ms ago: executing program 3 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 299.695089ms ago: executing program 0 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 281.102375ms ago: executing program 7 (id=525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x36cb}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 260.778341ms ago: executing program 7 (id=526): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) pwrite64(r0, &(0x7f0000000180)="95", 0x1, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x0, 0x0, 0x1ff, 0xffffffffffff}) 225.899304ms ago: executing program 0 (id=527): sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d80050001000900000005000400"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="300030802c000180"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 224.803644ms ago: executing program 6 (id=528): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x5e22, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0xc, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) 194.190137ms ago: executing program 0 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 173.705692ms ago: executing program 3 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 159.493786ms ago: executing program 6 (id=531): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r1, &(0x7f0000001a00)=[{&(0x7f0000000040)="b796", 0x2000}], 0x1) 151.23125ms ago: executing program 7 (id=532): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) 111.648651ms ago: executing program 0 (id=533): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0x0, 0x2004b3404, {0x7, 0x2d, 0x3, 0x212420, 0xb, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x100, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30) 67.617442ms ago: executing program 3 (id=534): pipe2(&(0x7f0000000000), 0x80000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x4, 0x51}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 508.579µs ago: executing program 0 (id=535): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x10, &(0x7f0000000100)={[{@i_version}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000001c0)={0x17c04, 0xffffffffffffffff, 0x8000025, 0x100000001, 0x800000000000}) 320.934µs ago: executing program 7 (id=536): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) 0s ago: executing program 0 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin=\n', 0x4c) 0s ago: executing program 3 (id=538): syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4b0033008000e100ffffffffffff080211"], 0x68}, 0x1, 0x0, 0x0, 0x8014}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 28.943051][ T4698] cgroup: Unknown subsys name 'net' [ 29.094157][ T4698] cgroup: Unknown subsys name 'cpuset' [ 29.095509][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.285389][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.993328][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.994292][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.995162][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.995486][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.995816][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.996526][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.997097][ T4715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.997444][ T4715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.998668][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.998677][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.999311][ T4715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.999324][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.000787][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.021943][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.024568][ T4711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.024611][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.025509][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.027378][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.027666][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.027951][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.029560][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.030229][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.030511][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.030744][ T4711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.031251][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.402711][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.403054][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.403165][ T4717] bridge_slave_0: entered allmulticast mode [ 30.403634][ T4717] bridge_slave_0: entered promiscuous mode [ 30.424974][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.425015][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.425074][ T4717] bridge_slave_1: entered allmulticast mode [ 30.425515][ T4717] bridge_slave_1: entered promiscuous mode [ 30.432936][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.436744][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.469592][ T4717] team0: Port device team_slave_0 added [ 30.479405][ T4717] team0: Port device team_slave_1 added [ 30.488374][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.488456][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.488510][ T4719] bridge_slave_0: entered allmulticast mode [ 30.488928][ T4719] bridge_slave_0: entered promiscuous mode [ 30.493270][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.493295][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.493376][ T4709] bridge_slave_0: entered allmulticast mode [ 30.493772][ T4709] bridge_slave_0: entered promiscuous mode [ 30.496639][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.496663][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.496717][ T4709] bridge_slave_1: entered allmulticast mode [ 30.497174][ T4709] bridge_slave_1: entered promiscuous mode [ 30.507448][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.507472][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.507520][ T4710] bridge_slave_0: entered allmulticast mode [ 30.507970][ T4710] bridge_slave_0: entered promiscuous mode [ 30.512393][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.512918][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.512977][ T4719] bridge_slave_1: entered allmulticast mode [ 30.513408][ T4719] bridge_slave_1: entered promiscuous mode [ 30.522664][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.522678][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.522694][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.528054][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.528085][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.528178][ T4710] bridge_slave_1: entered allmulticast mode [ 30.528593][ T4710] bridge_slave_1: entered promiscuous mode [ 30.536681][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.536696][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.536716][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.557469][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.558389][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.559237][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.570842][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.575264][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.582378][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.587233][ T4717] hsr_slave_0: entered promiscuous mode [ 30.587561][ T4717] hsr_slave_1: entered promiscuous mode [ 30.591465][ T4709] team0: Port device team_slave_0 added [ 30.591525][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.591586][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.597475][ T4716] bridge_slave_0: entered allmulticast mode [ 30.597944][ T4716] bridge_slave_0: entered promiscuous mode [ 30.608291][ T4710] team0: Port device team_slave_0 added [ 30.608967][ T4709] team0: Port device team_slave_1 added [ 30.609552][ T4710] team0: Port device team_slave_1 added [ 30.612958][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.612987][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.613038][ T4716] bridge_slave_1: entered allmulticast mode [ 30.613467][ T4716] bridge_slave_1: entered promiscuous mode [ 30.620430][ T4719] team0: Port device team_slave_0 added [ 30.634000][ T4719] team0: Port device team_slave_1 added [ 30.634213][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.634222][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.634236][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.635649][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.636713][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.648674][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.648685][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.648700][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.651244][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.651253][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.651269][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.658851][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.658863][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.658878][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.659461][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.659468][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.659483][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.666828][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.666839][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.666852][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.686490][ T4716] team0: Port device team_slave_0 added [ 30.687417][ T4716] team0: Port device team_slave_1 added [ 30.694778][ T4710] hsr_slave_0: entered promiscuous mode [ 30.695429][ T4710] hsr_slave_1: entered promiscuous mode [ 30.695646][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.695694][ T4710] Cannot create hsr debugfs directory [ 30.697877][ T4709] hsr_slave_0: entered promiscuous mode [ 30.698199][ T4709] hsr_slave_1: entered promiscuous mode [ 30.698391][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.698401][ T4709] Cannot create hsr debugfs directory [ 30.718607][ T4719] hsr_slave_0: entered promiscuous mode [ 30.718927][ T4719] hsr_slave_1: entered promiscuous mode [ 30.719129][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.719139][ T4719] Cannot create hsr debugfs directory [ 30.725281][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.725291][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.725303][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.725952][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.725959][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.725971][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.751834][ T4716] hsr_slave_0: entered promiscuous mode [ 30.752151][ T4716] hsr_slave_1: entered promiscuous mode [ 30.752343][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.752353][ T4716] Cannot create hsr debugfs directory [ 30.865377][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.867440][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.868182][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.869845][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.871465][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.875683][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.880434][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.881478][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.901433][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.901468][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.901748][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.901784][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.906526][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.908949][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.909262][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.910245][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.910802][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.914562][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.916682][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.917876][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.939663][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.939694][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.939768][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.939796][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.940517][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.943527][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.943838][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.945579][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.946302][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.948149][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.958196][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.959630][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.990139][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.993469][ T4716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.994702][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.995015][ T4716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.995879][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.997928][ T4716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.999056][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.005527][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.005564][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.005636][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.005664][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.007320][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.010792][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.011190][ T4716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.014186][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.016797][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.033702][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.035039][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.039442][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.040121][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.040400][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.040789][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.062971][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.066641][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.068666][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.068705][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.069165][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.070543][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.089650][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.090983][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.093319][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.104471][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.104513][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.106846][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.118161][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.118191][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.118544][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.118563][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.150360][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.174955][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.179034][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.184194][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.184224][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.204669][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.209915][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.225150][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.225167][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.230140][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.230168][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.230801][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.230823][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.231175][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.231193][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.267104][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.267123][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.331362][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.374210][ T4717] veth0_vlan: entered promiscuous mode [ 31.388011][ T4717] veth1_vlan: entered promiscuous mode [ 31.394648][ T4717] veth0_macvtap: entered promiscuous mode [ 31.395890][ T4717] veth1_macvtap: entered promiscuous mode [ 31.416820][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.418398][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.422856][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.423327][ T201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.423354][ T201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.423377][ T201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.456173][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.466947][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.497661][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.506867][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.506877][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.524533][ T4719] veth0_vlan: entered promiscuous mode [ 31.530530][ T4719] veth1_vlan: entered promiscuous mode [ 31.557655][ T4709] veth0_vlan: entered promiscuous mode [ 31.559978][ T3779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.559990][ T3779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.566555][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.567972][ T4709] veth1_vlan: entered promiscuous mode [ 31.572613][ T4719] veth0_macvtap: entered promiscuous mode [ 31.573919][ T4719] veth1_macvtap: entered promiscuous mode [ 31.588455][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.589453][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.601502][ T4709] veth0_macvtap: entered promiscuous mode [ 31.604085][ T3592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.604198][ T3592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.624582][ T4710] veth0_vlan: entered promiscuous mode [ 31.626842][ T4710] veth1_vlan: entered promiscuous mode [ 31.636546][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.636560][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.638995][ T4709] veth1_macvtap: entered promiscuous mode [ 31.650293][ T4717] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.654628][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.654639][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.663773][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.664759][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.678154][ T4710] veth0_macvtap: entered promiscuous mode [ 31.679257][ T4710] veth1_macvtap: entered promiscuous mode [ 31.689141][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.701342][ T4716] veth0_vlan: entered promiscuous mode [ 31.701870][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.701895][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.701913][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.713388][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.713423][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.744079][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.745137][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.758199][ T4716] veth1_vlan: entered promiscuous mode [ 31.780843][ T4716] veth0_macvtap: entered promiscuous mode [ 31.785990][ T4716] veth1_macvtap: entered promiscuous mode [ 31.791863][ T290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.792418][ T290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.792439][ T290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.801025][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.801039][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.825345][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.825362][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.827682][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.829160][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.830916][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.830987][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865464][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.865478][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.881773][ T3592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.881807][ T3592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.881825][ T3592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.891521][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.891533][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.933002][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.933015][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.936918][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.936930][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.978318][ T4909] FAULT_INJECTION: forcing a failure. [ 31.978318][ T4909] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.978339][ T4909] CPU: 1 UID: 0 PID: 4909 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT [ 31.978350][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.978356][ T4909] Call trace: [ 31.978358][ T4909] show_stack+0x2c/0x3c (C) [ 31.978380][ T4909] __dump_stack+0x30/0x40 [ 31.978392][ T4909] dump_stack_lvl+0xd8/0x12c [ 31.978403][ T4909] dump_stack+0x1c/0x28 [ 31.978414][ T4909] should_fail_ex+0x418/0x58c [ 31.978426][ T4909] should_fail+0x14/0x24 [ 31.978437][ T4909] should_fail_usercopy+0x20/0x30 [ 31.978449][ T4909] _inline_copy_from_user+0x3c/0x188 [ 31.978460][ T4909] __arm64_sys_semctl+0x25c/0x438 [ 31.978469][ T4909] invoke_syscall+0x98/0x244 [ 31.978481][ T4909] el0_svc_common+0xec/0x23c [ 31.978492][ T4909] do_el0_svc+0x4c/0x5c [ 31.978503][ T4909] el0_svc+0x60/0x1d8 [ 31.978514][ T4909] el0t_64_sync_handler+0x44/0x104 [ 31.978524][ T4909] el0t_64_sync+0x198/0x19c [ 32.070207][ T4916] FAULT_INJECTION: forcing a failure. [ 32.070207][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.070228][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT [ 32.070238][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.070244][ T4916] Call trace: [ 32.070247][ T4916] show_stack+0x2c/0x3c (C) [ 32.070267][ T4916] __dump_stack+0x30/0x40 [ 32.070280][ T4916] dump_stack_lvl+0xd8/0x12c [ 32.070292][ T4916] dump_stack+0x1c/0x28 [ 32.070303][ T4916] should_fail_ex+0x418/0x58c [ 32.070315][ T4916] should_fail+0x14/0x24 [ 32.070326][ T4916] should_fail_usercopy+0x20/0x30 [ 32.070338][ T4916] _inline_copy_from_user+0x3c/0x174 [ 32.070347][ T4916] __arm64_sys_timer_create+0x108/0x1ac [ 32.070360][ T4916] invoke_syscall+0x98/0x244 [ 32.070373][ T4916] el0_svc_common+0xec/0x23c [ 32.070384][ T4916] do_el0_svc+0x4c/0x5c [ 32.070396][ T4916] el0_svc+0x60/0x1d8 [ 32.070407][ T4916] el0t_64_sync_handler+0x44/0x104 [ 32.070417][ T4916] el0t_64_sync+0x198/0x19c [ 32.082312][ T4712] Bluetooth: hci3: command tx timeout [ 32.082402][ T4712] Bluetooth: hci0: command tx timeout [ 32.082465][ T4712] Bluetooth: hci4: command tx timeout [ 32.082526][ T4712] Bluetooth: hci2: command tx timeout [ 32.082586][ T4712] Bluetooth: hci1: command tx timeout [ 32.166211][ T4928] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 32.207665][ T4932] FAULT_INJECTION: forcing a failure. [ 32.207665][ T4932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.207685][ T4932] CPU: 1 UID: 0 PID: 4932 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT [ 32.207696][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.207701][ T4932] Call trace: [ 32.207704][ T4932] show_stack+0x2c/0x3c (C) [ 32.207726][ T4932] __dump_stack+0x30/0x40 [ 32.207739][ T4932] dump_stack_lvl+0xd8/0x12c [ 32.207758][ T4932] dump_stack+0x1c/0x28 [ 32.207769][ T4932] should_fail_ex+0x418/0x58c [ 32.207782][ T4932] should_fail+0x14/0x24 [ 32.207793][ T4932] should_fail_usercopy+0x20/0x30 [ 32.207805][ T4932] _inline_copy_from_user+0x3c/0x174 [ 32.207818][ T4932] __arm64_sys_mq_getsetattr+0x13c/0x310 [ 32.207830][ T4932] invoke_syscall+0x98/0x244 [ 32.207842][ T4932] el0_svc_common+0xec/0x23c [ 32.207854][ T4932] do_el0_svc+0x4c/0x5c [ 32.207865][ T4932] el0_svc+0x60/0x1d8 [ 32.207876][ T4932] el0t_64_sync_handler+0x44/0x104 [ 32.207887][ T4932] el0t_64_sync+0x198/0x19c [ 32.225159][ T4934] loop4: detected capacity change from 0 to 1024 [ 32.227241][ T4934] EXT4-fs: Ignoring removed bh option [ 32.249792][ T4934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 32.348216][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 32.357952][ T4948] Zero length message leads to an empty skb [ 32.465055][ T4958] loop4: detected capacity change from 0 to 256 [ 32.495079][ T4958] netlink: 36 bytes leftover after parsing attributes in process `syz.4.31'. [ 32.495101][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 32.532206][ T4961] mmap: syz.3.30 (4961) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.536670][ T4963] netlink: 116 bytes leftover after parsing attributes in process `syz.4.33'. [ 32.689713][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 32.736830][ T4974] loop3: detected capacity change from 0 to 512 [ 32.737192][ T4974] EXT4-fs: Ignoring removed i_version option [ 32.737204][ T4974] EXT4-fs: Ignoring removed oldalloc option [ 32.748506][ T4974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.857847][ T4982] GUP no longer grows the stack in syz.4.41 (4982): 20004000-20006000 (20002000) [ 32.857867][ T4982] CPU: 0 UID: 0 PID: 4982 Comm: syz.4.41 Not tainted syzkaller #0 PREEMPT [ 32.857877][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.857883][ T4982] Call trace: [ 32.857886][ T4982] show_stack+0x2c/0x3c (C) [ 32.857907][ T4982] __dump_stack+0x30/0x40 [ 32.857919][ T4982] dump_stack_lvl+0xd8/0x12c [ 32.857930][ T4982] dump_stack+0x1c/0x28 [ 32.857941][ T4982] gup_vma_lookup+0x1ac/0x1cc [ 32.857951][ T4982] __get_user_pages+0x2b4/0x13b0 [ 32.857959][ T4982] get_user_pages_remote+0x278/0x83c [ 32.857968][ T4982] __access_remote_vm+0x1d8/0x68c [ 32.857980][ T4982] access_remote_vm+0x48/0x60 [ 32.857991][ T4982] proc_pid_cmdline_read+0x4cc/0xa14 [ 32.858001][ T4982] do_loop_readv_writev+0x24c/0x3dc [ 32.858009][ T4982] vfs_readv+0x258/0x520 [ 32.858016][ T4982] do_preadv+0x11c/0x224 [ 32.858024][ T4982] __arm64_sys_preadv+0xac/0xc4 [ 32.858036][ T4982] invoke_syscall+0x98/0x244 [ 32.858048][ T4982] el0_svc_common+0xec/0x23c [ 32.858060][ T4982] do_el0_svc+0x4c/0x5c [ 32.858071][ T4982] el0_svc+0x60/0x1d8 [ 32.858082][ T4982] el0t_64_sync_handler+0x44/0x104 [ 32.858093][ T4982] el0t_64_sync+0x198/0x19c [ 32.910761][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.952892][ T4988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 32.960709][ T4988] vlan2: entered allmulticast mode [ 32.960729][ T4988] dummy0: entered allmulticast mode [ 32.961205][ T4988] bridge0: port 3(vlan2) entered blocking state [ 32.961272][ T4988] bridge0: port 3(vlan2) entered disabled state [ 32.977118][ T4988] vlan2: entered promiscuous mode [ 32.977133][ T4988] dummy0: entered promiscuous mode [ 33.047256][ T5001] loop3: detected capacity change from 0 to 256 [ 33.054443][ T5002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 33.058620][ T5000] loop4: detected capacity change from 0 to 8192 [ 33.066375][ T5000] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.188171][ T5012] FAULT_INJECTION: forcing a failure. [ 33.188171][ T5012] name failslab, interval 1, probability 0, space 0, times 1 [ 33.188192][ T5012] CPU: 1 UID: 0 PID: 5012 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT [ 33.188202][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.188208][ T5012] Call trace: [ 33.188211][ T5012] show_stack+0x2c/0x3c (C) [ 33.188232][ T5012] __dump_stack+0x30/0x40 [ 33.188244][ T5012] dump_stack_lvl+0xd8/0x12c [ 33.188255][ T5012] dump_stack+0x1c/0x28 [ 33.188266][ T5012] should_fail_ex+0x418/0x58c [ 33.188279][ T5012] should_failslab+0xc4/0x120 [ 33.188291][ T5012] __kmalloc_cache_noprof+0x94/0x5fc [ 33.188300][ T5012] __arm64_sys_getcwd+0xac/0x568 [ 33.188312][ T5012] invoke_syscall+0x98/0x244 [ 33.188324][ T5012] el0_svc_common+0xec/0x23c [ 33.188335][ T5012] do_el0_svc+0x4c/0x5c [ 33.188346][ T5012] el0_svc+0x60/0x1d8 [ 33.188357][ T5012] el0t_64_sync_handler+0x44/0x104 [ 33.188368][ T5012] el0t_64_sync+0x198/0x19c [ 33.322380][ T5024] capability: warning: `syz.2.61' uses deprecated v2 capabilities in a way that may be insecure [ 33.359326][ T5027] loop1: detected capacity change from 0 to 256 [ 33.361499][ T5024] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 33.407236][ T5027] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.430410][ T4813] kernel write not supported for file /17/clear_refs (pid: 4813 comm: kworker/1:6) [ 33.480396][ T5039] binder: 5038:5039 got reply transaction with no transaction stack [ 33.480434][ T5039] binder: 5038:5039 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0-0 line 3155 [ 33.486789][ T5039] binder: 5038:5039 ioctl c0306201 20000040 returned -14 [ 33.513152][ T5037] misc userio: Invalid payload size [ 33.663758][ T5056] bridge_slave_0: left allmulticast mode [ 33.663781][ T5056] bridge_slave_0: left promiscuous mode [ 33.663863][ T5056] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.667866][ T5056] bridge_slave_1: left allmulticast mode [ 33.667883][ T5056] bridge_slave_1: left promiscuous mode [ 33.667944][ T5056] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.677007][ T4890] kernel write not supported for file bpf-prog (pid: 4890 comm: kworker/1:8) [ 33.677141][ T5056] bond0: (slave bond_slave_0): Releasing backup interface [ 33.706227][ T5062] loop0: detected capacity change from 0 to 512 [ 33.707154][ T5056] bond0: (slave bond_slave_1): Releasing backup interface [ 33.719456][ T5062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.729887][ T5056] team0: Port device team_slave_0 removed [ 33.733942][ T5056] team0: Port device team_slave_1 removed [ 33.734293][ T5056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.734307][ T5056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.735702][ T5056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.735713][ T5056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.739453][ T5056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 33.797196][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.801952][ T5067] loop2: detected capacity change from 0 to 1024 [ 33.802294][ T5067] ======================================================= [ 33.802294][ T5067] WARNING: The mand mount option has been deprecated and [ 33.802294][ T5067] and is ignored by this kernel. Remove the mand [ 33.802294][ T5067] option from the mount to silence this warning. [ 33.802294][ T5067] ======================================================= [ 33.824598][ T5067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.848773][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 33.867540][ T5067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.79: bg 0: block 112: padding at end of block bitmap is not set [ 33.894362][ T5067] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 1: comm syz.2.79: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.895176][ T5067] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.79: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 33.910562][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 33.936360][ T5087] FAULT_INJECTION: forcing a failure. [ 33.936360][ T5087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.936380][ T5087] CPU: 1 UID: 0 PID: 5087 Comm: syz.3.87 Not tainted syzkaller #0 PREEMPT [ 33.936391][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.936396][ T5087] Call trace: [ 33.936399][ T5087] show_stack+0x2c/0x3c (C) [ 33.936417][ T5087] __dump_stack+0x30/0x40 [ 33.936429][ T5087] dump_stack_lvl+0xd8/0x12c [ 33.936441][ T5087] dump_stack+0x1c/0x28 [ 33.936452][ T5087] should_fail_ex+0x418/0x58c [ 33.936466][ T5087] should_fail+0x14/0x24 [ 33.936476][ T5087] should_fail_usercopy+0x20/0x30 [ 33.936489][ T5087] strncpy_from_user+0x48/0x388 [ 33.936498][ T5087] __arm64_sys_request_key+0x114/0x37c [ 33.936509][ T5087] invoke_syscall+0x98/0x244 [ 33.936522][ T5087] el0_svc_common+0xec/0x23c [ 33.936533][ T5087] do_el0_svc+0x4c/0x5c [ 33.936544][ T5087] el0_svc+0x60/0x1d8 [ 33.936556][ T5087] el0t_64_sync_handler+0x44/0x104 [ 33.936566][ T5087] el0t_64_sync+0x198/0x19c [ 33.965397][ T5089] loop0: detected capacity change from 0 to 128 [ 33.996515][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.000857][ T5091] loop3: detected capacity change from 0 to 512 [ 34.010176][ T5091] EXT4-fs: Ignoring removed orlov option [ 34.043188][ T5091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.073812][ T5097] SQUASHFS error: Failed to read block 0x4de: -5 [ 34.106935][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.161744][ T4712] Bluetooth: hci2: command tx timeout [ 34.161761][ T4728] Bluetooth: hci4: command tx timeout [ 34.161776][ T4712] Bluetooth: hci0: command tx timeout [ 34.161787][ T4728] Bluetooth: hci3: command tx timeout [ 34.161842][ T51] Bluetooth: hci1: command tx timeout [ 34.256779][ T5117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.287319][ T5117] process 'syz.2.100' launched './file2' with NULL argv: empty string added [ 34.319442][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.344434][ T5126] FAULT_INJECTION: forcing a failure. [ 34.344434][ T5126] name fail_futex, interval 1, probability 0, space 0, times 1 [ 34.344455][ T5126] CPU: 1 UID: 0 PID: 5126 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT [ 34.344465][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.344471][ T5126] Call trace: [ 34.344473][ T5126] show_stack+0x2c/0x3c (C) [ 34.344494][ T5126] __dump_stack+0x30/0x40 [ 34.344506][ T5126] dump_stack_lvl+0xd8/0x12c [ 34.344518][ T5126] dump_stack+0x1c/0x28 [ 34.344529][ T5126] should_fail_ex+0x418/0x58c [ 34.344541][ T5126] should_fail+0x14/0x24 [ 34.344552][ T5126] should_fail_futex+0x48/0x5c [ 34.344562][ T5126] futex_lock_pi_atomic+0x144/0x898 [ 34.344573][ T5126] futex_lock_pi+0x248/0x6d8 [ 34.344583][ T5126] do_futex+0x2f8/0x378 [ 34.344592][ T5126] __arm64_sys_futex+0x2e4/0x418 [ 34.344603][ T5126] invoke_syscall+0x98/0x244 [ 34.344615][ T5126] el0_svc_common+0xec/0x23c [ 34.344631][ T5126] do_el0_svc+0x4c/0x5c [ 34.344642][ T5126] el0_svc+0x60/0x1d8 [ 34.344653][ T5126] el0t_64_sync_handler+0x44/0x104 [ 34.344663][ T5126] el0t_64_sync+0x198/0x19c [ 34.519816][ T30] audit: type=1326 audit(34.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.520991][ T30] audit: type=1326 audit(34.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.521161][ T30] audit: type=1326 audit(34.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.521208][ T30] audit: type=1326 audit(34.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.521434][ T30] audit: type=1326 audit(34.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.521491][ T30] audit: type=1326 audit(34.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.523078][ T30] audit: type=1326 audit(34.520:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8cd79060 code=0x7ffc0000 [ 34.523103][ T30] audit: type=1326 audit(34.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8cd79060 code=0x7ffc0000 [ 34.526014][ T30] audit: type=1326 audit(34.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.526095][ T30] audit: type=1326 audit(34.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5140 comm="syz.0.110" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd79368 code=0x7ffc0000 [ 34.561724][ T10] atkbd serio0: keyboard reset failed on [ 34.727888][ T5152] binder: 5151:5152 ioctl c0306201 0 returned -14 [ 34.758286][ T5154] EXT4-fs (loop0): 1 truncate cleaned up [ 34.759332][ T5154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.788966][ T5159] EXT4-fs: Ignoring removed i_version option [ 34.789468][ T5154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.116: bg 0: block 465: padding at end of block bitmap is not set [ 34.791220][ T5154] EXT4-fs (loop0): Remounting filesystem read-only [ 34.807178][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.809883][ T5159] EXT4-fs (loop4): 1 orphan inode deleted [ 34.814574][ T5159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.846307][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.010784][ T4795] hid-generic 0005:0B57:0002.0001: unknown main item tag 0x0 [ 35.014887][ T4795] hid-generic 0005:0B57:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 35.143770][ T5182] FAULT_INJECTION: forcing a failure. [ 35.143770][ T5182] name failslab, interval 1, probability 0, space 0, times 0 [ 35.143791][ T5182] CPU: 0 UID: 0 PID: 5182 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT [ 35.143801][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.143807][ T5182] Call trace: [ 35.143810][ T5182] show_stack+0x2c/0x3c (C) [ 35.143828][ T5182] __dump_stack+0x30/0x40 [ 35.143841][ T5182] dump_stack_lvl+0xd8/0x12c [ 35.143852][ T5182] dump_stack+0x1c/0x28 [ 35.143863][ T5182] should_fail_ex+0x418/0x58c [ 35.143876][ T5182] should_failslab+0xc4/0x120 [ 35.143889][ T5182] __kmalloc_cache_noprof+0x94/0x5fc [ 35.143898][ T5182] refill_pi_state_cache+0xa0/0x170 [ 35.143910][ T5182] futex_requeue+0x19c/0x180c [ 35.143921][ T5182] do_futex+0x29c/0x378 [ 35.143930][ T5182] __arm64_sys_futex+0x2e4/0x418 [ 35.143941][ T5182] invoke_syscall+0x98/0x244 [ 35.143953][ T5182] el0_svc_common+0xec/0x23c [ 35.143965][ T5182] do_el0_svc+0x4c/0x5c [ 35.143976][ T5182] el0_svc+0x60/0x1d8 [ 35.143987][ T5182] el0t_64_sync_handler+0x44/0x104 [ 35.143998][ T5182] el0t_64_sync+0x198/0x19c [ 35.212123][ T5188] netlink: 72 bytes leftover after parsing attributes in process `syz.3.131'. [ 35.212149][ T5188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.131'. [ 35.336322][ T5198] sit0: entered promiscuous mode [ 35.338562][ T5198] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 35.345951][ T5204] syzkaller1: entered promiscuous mode [ 35.345968][ T5204] syzkaller1: entered allmulticast mode [ 35.425162][ T5208] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.564615][ T5225] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.564641][ T5225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.568078][ T5225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 35.568160][ T5225] System zones: 1-12 [ 35.568976][ T5225] EXT4-fs (loop1): 1 truncate cleaned up [ 35.569519][ T5225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.593182][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.850932][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.851360][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.851564][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.857102][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.857332][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.979850][ T290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.074569][ T5259] netlink: 'syz.1.161': attribute type 11 has an invalid length. [ 36.088251][ T290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.147620][ T5261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.183799][ T5261] EXT4-fs error (device loop3): ext4_get_first_dir_block:3539: inode #12: comm syz.3.162: Directory block failed checksum [ 36.200868][ T5268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.231052][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.241679][ T4718] Bluetooth: hci3: command tx timeout [ 36.241704][ T4718] Bluetooth: hci4: command tx timeout [ 36.253000][ T51] Bluetooth: hci0: command tx timeout [ 36.253022][ T51] Bluetooth: hci2: command tx timeout [ 36.271569][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.297328][ T290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.359165][ T5280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.385493][ T290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.396519][ T5283] pim6reg: entered allmulticast mode [ 36.404723][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.415847][ T5283] team0: entered allmulticast mode [ 36.415864][ T5283] team_slave_0: entered allmulticast mode [ 36.415878][ T5283] team_slave_1: entered allmulticast mode [ 36.416334][ T5283] team0: left allmulticast mode [ 36.416347][ T5283] team_slave_0: left allmulticast mode [ 36.416361][ T5283] team_slave_1: left allmulticast mode [ 36.416437][ T5283] pim6reg: left allmulticast mode [ 36.457342][ T5288] bond1: invalid NS target :: specified for addition [ 36.457362][ T5288] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 36.460699][ T5288] bond1 (unregistering): Released all slaves [ 36.780891][ T290] bond0 (unregistering): Released all slaves [ 36.806518][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.806644][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.806701][ T5238] bridge_slave_0: entered allmulticast mode [ 36.807140][ T5238] bridge_slave_0: entered promiscuous mode [ 36.807981][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.807999][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.808044][ T5238] bridge_slave_1: entered allmulticast mode [ 36.808645][ T5238] bridge_slave_1: entered promiscuous mode [ 36.856783][ T5316] overlayfs: failed to get uuid (44/file0, err=-13); falling back to uuid=null. [ 36.869045][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.915532][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.926684][ T5238] team0: Port device team_slave_0 added [ 36.927436][ T5238] team0: Port device team_slave_1 added [ 36.979648][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.979662][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.979678][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.985869][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.985883][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.985895][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.104450][ T290] hsr_slave_0: left promiscuous mode [ 37.105333][ T290] hsr_slave_1: left promiscuous mode [ 37.119103][ T290] veth1_macvtap: left promiscuous mode [ 37.119141][ T290] veth0_macvtap: left promiscuous mode [ 37.119225][ T290] veth1_vlan: left promiscuous mode [ 37.119270][ T290] veth0_vlan: left promiscuous mode [ 37.134460][ T5351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.180764][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.340283][ T5238] hsr_slave_0: entered promiscuous mode [ 37.340650][ T5238] hsr_slave_1: entered promiscuous mode [ 37.340864][ T5238] debugfs: 'hsr0' already exists in 'hsr' [ 37.340874][ T5238] Cannot create hsr debugfs directory [ 37.345611][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.346030][ T5352] syzkaller1: entered allmulticast mode [ 37.426613][ T5369] set_capacity_and_notify: 12 callbacks suppressed [ 37.426628][ T5369] loop2: detected capacity change from 0 to 1024 [ 37.459594][ T5369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.510724][ T5238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.520013][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.531714][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.532089][ T5238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.547028][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.547584][ T5238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.567335][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.567694][ T5238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.570868][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.677267][ T5400] syz_tun: entered allmulticast mode [ 37.683803][ T5400] pimreg: entered allmulticast mode [ 37.688914][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.696436][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.698226][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.698250][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.708723][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.708759][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.776481][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.878700][ T5425] loop2: detected capacity change from 0 to 128 [ 37.885916][ T5425] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.922151][ T4718] Bluetooth: hci1: command tx timeout [ 37.975596][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.015965][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.113589][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.243451][ T5238] veth0_vlan: entered promiscuous mode [ 38.265822][ T5238] veth1_vlan: entered promiscuous mode [ 38.277065][ T5238] veth0_macvtap: entered promiscuous mode [ 38.278499][ T5238] veth1_macvtap: entered promiscuous mode [ 38.289816][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.301967][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.322268][ T4718] Bluetooth: hci2: command tx timeout [ 38.322295][ T4718] Bluetooth: hci0: command tx timeout [ 38.331939][ T51] Bluetooth: hci4: command tx timeout [ 38.331966][ T51] Bluetooth: hci3: command tx timeout [ 38.333893][ T3592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.334022][ T3592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.334039][ T3592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.334054][ T3592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.355872][ T3779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.355890][ T3779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.369419][ T3779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.369435][ T3779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.440497][ T5488] loop5: detected capacity change from 0 to 2048 [ 38.451022][ T5485] Illegal XDP return value 4080261632 on prog (id 8) dev syz_tun, expect packet loss! [ 38.468516][ T5488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.491144][ T5488] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.155: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.508120][ T5488] EXT4-fs (loop5): Remounting filesystem read-only [ 38.543333][ T5238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.560572][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.773126][ T5521] __nla_validate_parse: 3 callbacks suppressed [ 38.773143][ T5521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 38.773159][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 38.977950][ T5548] netlink: 24 bytes leftover after parsing attributes in process `syz.5.240'. [ 39.089201][ T5562] loop2: detected capacity change from 0 to 512 [ 39.093365][ T5562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.099364][ T5562] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.246: invalid indirect mapped block 9 (level 0) [ 39.099445][ T5562] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.101688][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 39.101703][ C0] EXT4-fs (loop2): initial error at time 39: ext4_free_branches:1023: inode 11 [ 39.101720][ C0] EXT4-fs (loop2): last error at time 39: ext4_free_branches:1023: inode 11 [ 39.107638][ T5562] EXT4-fs (loop2): 1 truncate cleaned up [ 39.132185][ T5562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.165940][ T5562] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 39.170099][ T5562] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 39.189098][ T5562] evm: overlay not supported [ 39.207903][ T4719] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 39.267001][ T5578] FAULT_INJECTION: forcing a failure. [ 39.267001][ T5578] name failslab, interval 1, probability 0, space 0, times 0 [ 39.267022][ T5578] CPU: 0 UID: 0 PID: 5578 Comm: syz.5.253 Not tainted syzkaller #0 PREEMPT [ 39.267033][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.267038][ T5578] Call trace: [ 39.267041][ T5578] show_stack+0x2c/0x3c (C) [ 39.267063][ T5578] __dump_stack+0x30/0x40 [ 39.267076][ T5578] dump_stack_lvl+0xd8/0x12c [ 39.267088][ T5578] dump_stack+0x1c/0x28 [ 39.267099][ T5578] should_fail_ex+0x418/0x58c [ 39.267112][ T5578] should_failslab+0xc4/0x120 [ 39.267126][ T5578] kmem_cache_alloc_noprof+0x94/0x5d4 [ 39.267140][ T5578] prepare_creds+0x34/0x7d0 [ 39.267153][ T5578] __sys_setresuid+0x414/0x848 [ 39.267164][ T5578] __arm64_sys_setresuid+0x84/0x98 [ 39.267175][ T5578] invoke_syscall+0x98/0x244 [ 39.267187][ T5578] el0_svc_common+0xec/0x23c [ 39.267199][ T5578] do_el0_svc+0x4c/0x5c [ 39.267210][ T5578] el0_svc+0x60/0x1d8 [ 39.267222][ T5578] el0t_64_sync_handler+0x44/0x104 [ 39.267232][ T5578] el0t_64_sync+0x198/0x19c [ 39.387318][ T5587] loop5: detected capacity change from 0 to 128 [ 39.396906][ T5587] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.427135][ T5238] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.447233][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.480715][ T3779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.564681][ T3779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.581390][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.582634][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.582934][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.583423][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.583624][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.635869][ T3779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.718503][ T5616] loop3: detected capacity change from 0 to 2048 [ 39.726839][ T3779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.746303][ T5616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.850080][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.889676][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.889708][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.889779][ T5599] bridge_slave_0: entered allmulticast mode [ 39.890204][ T5599] bridge_slave_0: entered promiscuous mode [ 39.899610][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.900129][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.900196][ T5599] bridge_slave_1: entered allmulticast mode [ 39.900619][ T5599] bridge_slave_1: entered promiscuous mode [ 39.941438][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.947843][ T3779] bridge_slave_1: left allmulticast mode [ 39.947864][ T3779] bridge_slave_1: left promiscuous mode [ 39.948770][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.956262][ T3779] bridge_slave_0: left allmulticast mode [ 39.956280][ T3779] bridge_slave_0: left promiscuous mode [ 39.956357][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.002322][ T4718] Bluetooth: hci1: command tx timeout [ 40.055436][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.083907][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.110023][ T5651] Injecting memory failure for pfn 0x10718e at process virtual address 0x2062c000 [ 40.114234][ T3779] bond0 (unregistering): Released all slaves [ 40.115511][ T5651] Memory failure: 0x10718e: Sending SIGBUS to syz.1.275:5651 due to hardware memory corruption [ 40.115572][ T5651] Memory failure: 0x10718e: recovery action for unsplit thp: Failed [ 40.120948][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.158023][ T5599] team0: Port device team_slave_0 added [ 40.159561][ T5599] team0: Port device team_slave_1 added [ 40.266696][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.266715][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.266730][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.268559][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.268566][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.268761][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.271285][ T5661] device-mapper: ioctl: device name cannot be "control", ".", or ".." PÚÿÿÿ-D devtmpfs./dev/console[ 40.464120][ T5599] hsr_slave_0: entered promiscuous mode [ 40.464466][ T5599] hsr_slave_1: entered promiscuous mode [ 40.499716][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 40.499735][ T5599] Cannot create hsr debugfs directory [ 40.610721][ T3779] hsr_slave_0: left promiscuous mode [ 40.610982][ T3779] hsr_slave_1: left promiscuous mode [ 40.611224][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.611249][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.613641][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.613653][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.618346][ T3779] veth1_macvtap: left promiscuous mode [ 40.618381][ T3779] veth0_macvtap: left promiscuous mode [ 40.618426][ T3779] veth1_vlan: left promiscuous mode [ 40.618460][ T3779] veth0_vlan: left promiscuous mode [ 40.679044][ T5689] loop1: detected capacity change from 0 to 512 [ 40.856940][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 40.878926][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 40.930477][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 40.950690][ T5693] bond1: ARP target 9.0.0.0 is already present [ 40.950760][ T5693] bond1: option arp_ip_target: invalid value (9) [ 40.956781][ T5693] bond1 (unregistering): Released all slaves [ 41.079416][ T5599] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 41.085398][ T5716] Bluetooth: MGMT ver 1.23 [ 41.085526][ T5716] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 41.086051][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.086396][ T5599] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 41.090728][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.091157][ T5599] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 41.104300][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.104654][ T5599] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.111072][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.154540][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.158755][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.167334][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.167366][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.170271][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.170295][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.315760][ T5745] capability: warning: `syz.5.303' uses 32-bit capabilities (legacy support in use) [ 41.381555][ T49] IPVS: starting estimator thread 0... [ 41.397313][ T5767] veth1_vlan: entered allmulticast mode [ 41.421596][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.492991][ T5765] IPVS: using max 60 ests per chain, 144000 per kthread [ 41.601997][ T4718] Bluetooth: hci3: command tx timeout [ 41.623252][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 41.645730][ T5599] veth0_vlan: entered promiscuous mode [ 41.660446][ T5599] veth1_vlan: entered promiscuous mode [ 41.711179][ T5599] veth0_macvtap: entered promiscuous mode [ 41.722857][ T5599] veth1_macvtap: entered promiscuous mode [ 41.726174][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.727178][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.806211][ T4709] syz_tun (unregistering): left allmulticast mode [ 41.824284][ T3779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.824404][ T3779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.824481][ T3779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.824574][ T3779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.845981][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.845997][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.891415][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.891430][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.941738][ T5794] block nbd5: shutting down sockets [ 42.084346][ T4718] Bluetooth: hci1: command tx timeout [ 42.085962][ T3779] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.242959][ T3779] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.310121][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 42.335970][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.336901][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.337236][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.338593][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.339176][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.392593][ T3779] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.546056][ T3779] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.637900][ T3592] Bluetooth: hci5: Frame reassembly failed (-84) [ 42.781438][ T3779] bridge_slave_1: left allmulticast mode [ 42.781460][ T3779] bridge_slave_1: left promiscuous mode [ 42.781538][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.784399][ T3779] bridge_slave_0: left allmulticast mode [ 42.784410][ T3779] bridge_slave_0: left promiscuous mode [ 42.784470][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.787453][ T3779] pimreg: left allmulticast mode [ 42.931058][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.962102][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.993479][ T3779] bond0 (unregistering): Released all slaves [ 43.005811][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 43.275584][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.275647][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.275702][ T5811] bridge_slave_0: entered allmulticast mode [ 43.276138][ T5811] bridge_slave_0: entered promiscuous mode [ 43.277080][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.277125][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.277173][ T5811] bridge_slave_1: entered allmulticast mode [ 43.277567][ T5811] bridge_slave_1: entered promiscuous mode [ 43.285087][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.286064][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.488194][ T3779] hsr_slave_0: left promiscuous mode [ 43.489149][ T3779] hsr_slave_1: left promiscuous mode [ 43.489462][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.489473][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.489758][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.489766][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.503821][ T3779] veth1_macvtap: left promiscuous mode [ 43.503854][ T3779] veth0_macvtap: left promiscuous mode [ 43.503905][ T3779] veth1_vlan: left promiscuous mode [ 43.504003][ T3779] veth0_vlan: left promiscuous mode [ 43.682479][ T4718] Bluetooth: hci3: command tx timeout [ 43.839422][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 43.856504][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 43.868851][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 43.868867][ T30] audit: type=1326 audit(43.860:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.878265][ T30] audit: type=1326 audit(43.870:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.879994][ T30] audit: type=1326 audit(43.870:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.880017][ T30] audit: type=1326 audit(43.870:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.880033][ T30] audit: type=1326 audit(43.870:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.885552][ T30] audit: type=1326 audit(43.880:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.914886][ T30] audit: type=1326 audit(43.910:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5904 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb735c22c code=0x7ffc0000 [ 43.914921][ T30] audit: type=1326 audit(43.910:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.914939][ T30] audit: type=1326 audit(43.910:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 43.960205][ T5811] team0: Port device team_slave_0 added [ 43.966622][ T5811] team0: Port device team_slave_1 added [ 43.967204][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 43.969935][ T30] audit: type=1326 audit(43.960:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.5.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffb7379368 code=0x7ffc0000 [ 44.011201][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.011216][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.011230][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.013173][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.013181][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.013196][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.054354][ T5811] hsr_slave_0: entered promiscuous mode [ 44.054656][ T5811] hsr_slave_1: entered promiscuous mode [ 44.054854][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 44.054864][ T5811] Cannot create hsr debugfs directory [ 44.172141][ T4718] Bluetooth: hci1: command tx timeout [ 44.239688][ T3779] IPVS: stop unused estimator thread 0... [ 44.283481][ T5811] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 44.291044][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.294156][ T5811] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 44.299127][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.299671][ T5938] netlink: 'syz.5.344': attribute type 2 has an invalid length. [ 44.300683][ T5811] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 44.309596][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.313401][ T5811] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 44.318135][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.367208][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.378082][ T5948] FAULT_INJECTION: forcing a failure. [ 44.378082][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 44.378104][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT [ 44.378115][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.378121][ T5948] Call trace: [ 44.378123][ T5948] show_stack+0x2c/0x3c (C) [ 44.378145][ T5948] __dump_stack+0x30/0x40 [ 44.378159][ T5948] dump_stack_lvl+0xd8/0x12c [ 44.378170][ T5948] dump_stack+0x1c/0x28 [ 44.378182][ T5948] should_fail_ex+0x418/0x58c [ 44.378196][ T5948] should_failslab+0xc4/0x120 [ 44.378211][ T5948] __kmalloc_node_noprof+0x10c/0x6e4 [ 44.378227][ T5948] get_callchain_buffers+0x1c8/0x3c0 [ 44.378239][ T5948] stack_map_alloc+0x2ac/0x43c [ 44.378248][ T5948] map_create+0xa6c/0x153c [ 44.378258][ T5948] __sys_bpf+0x308/0x82c [ 44.378267][ T5948] __arm64_sys_bpf+0xd0/0xec [ 44.378275][ T5948] invoke_syscall+0x98/0x244 [ 44.378288][ T5948] el0_svc_common+0xec/0x23c [ 44.378299][ T5948] do_el0_svc+0x4c/0x5c [ 44.378310][ T5948] el0_svc+0x60/0x1d8 [ 44.378322][ T5948] el0t_64_sync_handler+0x44/0x104 [ 44.378332][ T5948] el0t_64_sync+0x198/0x19c [ 44.379042][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.383294][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.383324][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.407676][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.407714][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.412040][ T4718] Bluetooth: hci0: command tx timeout [ 44.433907][ T5952] loop5: detected capacity change from 0 to 8192 [ 44.438652][ T5952] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.475764][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 44.642235][ T4718] Bluetooth: hci5: command 0xfc11 tx timeout [ 44.643243][ T51] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 44.696868][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.744179][ T5990] loop3: detected capacity change from 0 to 512 [ 44.744594][ T5990] EXT4-fs: Ignoring removed bh option [ 44.746800][ T5990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.746814][ T5990] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 44.799022][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 44.903706][ T5811] veth0_vlan: entered promiscuous mode [ 44.905387][ T5811] veth1_vlan: entered promiscuous mode [ 44.917012][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.357'. [ 44.933472][ T5811] veth0_macvtap: entered promiscuous mode [ 44.944950][ T5811] veth1_macvtap: entered promiscuous mode [ 44.967844][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.973706][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.012582][ T3592] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.035155][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.035172][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.044578][ T201] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.070287][ T290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.070304][ T290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.072076][ T3592] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.072392][ T3592] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.177239][ T6028] loop3: detected capacity change from 0 to 128 [ 45.177822][ T6028] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.188639][ T6029] loop7: detected capacity change from 0 to 256 [ 45.286551][ T6031] loop5: detected capacity change from 0 to 128 [ 45.308047][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 45.354407][ T6045] ip6gretap1: entered allmulticast mode [ 45.359304][ T6045] batman_adv: batadv0: Adding interface: ip6gretap1 [ 45.359318][ T6045] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.359338][ T6045] batman_adv: batadv0: Interface activated: ip6gretap1 [ 45.523892][ T6065] loop6: detected capacity change from 0 to 256 [ 45.576816][ T4805] kernel read not supported for file /video9 (pid: 4805 comm: kworker/1:5) [ 45.613972][ T4805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.653793][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'. [ 45.653831][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'. [ 45.703344][ T6086] input: syz0 as /devices/virtual/input/input4 [ 45.703444][ T6086] input: failed to attach handler leds to device input4, error: -6 [ 45.755465][ T6091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.762423][ T51] Bluetooth: hci3: command tx timeout [ 45.764663][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.819480][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.819614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.828727][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.828883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.867888][ T6102] FAULT_INJECTION: forcing a failure. [ 45.867888][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 45.867910][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.0.388 Not tainted syzkaller #0 PREEMPT [ 45.867920][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.867926][ T6102] Call trace: [ 45.867929][ T6102] show_stack+0x2c/0x3c (C) [ 45.867950][ T6102] __dump_stack+0x30/0x40 [ 45.867962][ T6102] dump_stack_lvl+0xd8/0x12c [ 45.867974][ T6102] dump_stack+0x1c/0x28 [ 45.867985][ T6102] should_fail_ex+0x418/0x58c [ 45.867998][ T6102] should_failslab+0xc4/0x120 [ 45.868014][ T6102] __kmalloc_node_noprof+0x10c/0x6e4 [ 45.868028][ T6102] __vmalloc_node_range_noprof+0x43c/0xe9c [ 45.868037][ T6102] __vmalloc_node_noprof+0xec/0x14c [ 45.868047][ T6102] __vmalloc_noprof+0x64/0x8c [ 45.868055][ T6102] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 45.868066][ T6102] bpf_prog_alloc+0x48/0x110 [ 45.868075][ T6102] bpf_prog_load+0x5e0/0x1554 [ 45.868084][ T6102] __sys_bpf+0x7d4/0x82c [ 45.868093][ T6102] __arm64_sys_bpf+0xd0/0xec [ 45.868101][ T6102] invoke_syscall+0x98/0x244 [ 45.868113][ T6102] el0_svc_common+0xec/0x23c [ 45.868124][ T6102] do_el0_svc+0x4c/0x5c [ 45.868136][ T6102] el0_svc+0x60/0x1d8 [ 45.868147][ T6102] el0t_64_sync_handler+0x44/0x104 [ 45.868158][ T6102] el0t_64_sync+0x198/0x19c [ 45.868957][ T6102] syz.0.388: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 45.869039][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.0.388 Not tainted syzkaller #0 PREEMPT [ 45.869050][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.869055][ T6102] Call trace: [ 45.869058][ T6102] show_stack+0x2c/0x3c (C) [ 45.869072][ T6102] __dump_stack+0x30/0x40 [ 45.869084][ T6102] dump_stack_lvl+0xd8/0x12c [ 45.869096][ T6102] dump_stack+0x1c/0x28 [ 45.869107][ T6102] warn_alloc+0x1c4/0x1d8 [ 45.869119][ T6102] __vmalloc_node_range_noprof+0x670/0xe9c [ 45.869130][ T6102] __vmalloc_node_noprof+0xec/0x14c [ 45.869139][ T6102] __vmalloc_noprof+0x64/0x8c [ 45.869148][ T6102] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 45.869158][ T6102] bpf_prog_alloc+0x48/0x110 [ 45.869166][ T6102] bpf_prog_load+0x5e0/0x1554 [ 45.869176][ T6102] __sys_bpf+0x7d4/0x82c [ 45.869185][ T6102] __arm64_sys_bpf+0xd0/0xec [ 45.869193][ T6102] invoke_syscall+0x98/0x244 [ 45.869205][ T6102] el0_svc_common+0xec/0x23c [ 45.869216][ T6102] do_el0_svc+0x4c/0x5c [ 45.869227][ T6102] el0_svc+0x60/0x1d8 [ 45.869237][ T6102] el0t_64_sync_handler+0x44/0x104 [ 45.869248][ T6102] el0t_64_sync+0x198/0x19c [ 45.869258][ T6102] Mem-Info: [ 45.869263][ T6102] active_anon:36 inactive_anon:5817 isolated_anon:0 [ 45.869263][ T6102] active_file:2520 inactive_file:14439 isolated_file:0 [ 45.869263][ T6102] unevictable:768 dirty:1702 writeback:0 [ 45.869263][ T6102] slab_reclaimable:9321 slab_unreclaimable:88651 [ 45.869263][ T6102] mapped:29117 shmem:1005 pagetables:1133 [ 45.869263][ T6102] sec_pagetables:0 bounce:0 [ 45.869263][ T6102] kernel_misc_reclaimable:0 [ 45.869263][ T6102] free:1468963 free_pcp:21326 free_cma:7616 [ 45.869285][ T6102] Node 0 active_anon:144kB inactive_anon:23268kB active_file:10080kB inactive_file:57756kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116468kB dirty:6808kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8984kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 45.869306][ T6102] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 45.869330][ T6102] lowmem_reserve[]: 0 0 3652 3652 3652 [ 45.869350][ T6102] Node 0 Normal free:2797964kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:144kB inactive_anon:23268kB active_file:10080kB inactive_file:57756kB unevictable:3072kB writepending:6808kB zspages:0kB present:5242880kB managed:3740016kB mlocked:0kB bounce:0kB free_pcp:85304kB local_pcp:26324kB free_cma:0kB [ 45.869374][ T6102] lowmem_reserve[]: 0 0 0 0 0 [ 45.869392][ T6102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 45.869454][ T6102] Node 0 Normal: 615*4kB (UME) 30*8kB (UME) 118*16kB (UM) 169*32kB (UME) 57*64kB (UME) 11*128kB (UME) 5*256kB (U) 1*512kB (M) 0*1024kB 2*2048kB (UE) 678*4096kB (UM) = 2798028kB [ 45.869533][ T6102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 45.869540][ T6102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 45.869547][ T6102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 45.869553][ T6102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 45.869560][ T6102] 17935 total pagecache pages [ 45.869564][ T6102] 0 pages in swap cache [ 45.869567][ T6102] Free swap = 124996kB [ 45.869571][ T6102] Total swap = 124996kB [ 45.869575][ T6102] 2097152 pages RAM [ 45.869578][ T6102] 0 pages HighMem/MovableOnly [ 45.869581][ T6102] 392100 pages reserved [ 45.869585][ T6102] 8192 pages cma reserved [ 45.869588][ T6102] 1 pages hwpoisoned [ 45.986311][ T6113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.986432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.998860][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.010222][ T6115] FAULT_INJECTION: forcing a failure. [ 46.010222][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 46.010247][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.0.393 Not tainted syzkaller #0 PREEMPT [ 46.010261][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.010267][ T6115] Call trace: [ 46.010270][ T6115] show_stack+0x2c/0x3c (C) [ 46.010289][ T6115] __dump_stack+0x30/0x40 [ 46.010301][ T6115] dump_stack_lvl+0xd8/0x12c [ 46.010312][ T6115] dump_stack+0x1c/0x28 [ 46.010323][ T6115] should_fail_ex+0x418/0x58c [ 46.010335][ T6115] should_failslab+0xc4/0x120 [ 46.010348][ T6115] __kmalloc_cache_noprof+0x94/0x5fc [ 46.010356][ T6115] fscontext_alloc_log+0x5c/0x150 [ 46.010366][ T6115] __arm64_sys_fspick+0x1f8/0x2bc [ 46.010375][ T6115] invoke_syscall+0x98/0x244 [ 46.010387][ T6115] el0_svc_common+0xec/0x23c [ 46.010398][ T6115] do_el0_svc+0x4c/0x5c [ 46.010409][ T6115] el0_svc+0x60/0x1d8 [ 46.010420][ T6115] el0t_64_sync_handler+0x44/0x104 [ 46.010430][ T6115] el0t_64_sync+0x198/0x19c [ 46.041882][ T6117] netlink: 'syz.3.394': attribute type 4 has an invalid length. [ 46.146878][ T6132] FAULT_INJECTION: forcing a failure. [ 46.146878][ T6132] name fail_futex, interval 1, probability 0, space 0, times 0 [ 46.146902][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.5.401 Not tainted syzkaller #0 PREEMPT [ 46.146913][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.146918][ T6132] Call trace: [ 46.146921][ T6132] show_stack+0x2c/0x3c (C) [ 46.146941][ T6132] __dump_stack+0x30/0x40 [ 46.146954][ T6132] dump_stack_lvl+0xd8/0x12c [ 46.146965][ T6132] dump_stack+0x1c/0x28 [ 46.146976][ T6132] should_fail_ex+0x418/0x58c [ 46.146989][ T6132] should_fail+0x14/0x24 [ 46.146999][ T6132] get_futex_key+0x1ec/0x12b0 [ 46.147010][ T6132] futex_wake+0x10c/0x594 [ 46.147021][ T6132] do_futex+0x2c4/0x378 [ 46.147031][ T6132] __arm64_sys_futex+0x2e4/0x418 [ 46.147041][ T6132] invoke_syscall+0x98/0x244 [ 46.147053][ T6132] el0_svc_common+0xec/0x23c [ 46.147065][ T6132] do_el0_svc+0x4c/0x5c [ 46.147076][ T6132] el0_svc+0x60/0x1d8 [ 46.147087][ T6132] el0t_64_sync_handler+0x44/0x104 [ 46.147097][ T6132] el0t_64_sync+0x198/0x19c [ 46.492268][ T51] Bluetooth: hci0: command tx timeout [ 46.541223][ T6182] syzkaller1: entered promiscuous mode [ 46.541240][ T6182] syzkaller1: entered allmulticast mode [ 46.773163][ T3592] Bluetooth: hci5: Frame reassembly failed (-84) [ 47.356216][ T6304] loop5: detected capacity change from 0 to 256 [ 47.566063][ T6319] netlink: 52 bytes leftover after parsing attributes in process `syz.7.443'. [ 47.841838][ T4718] Bluetooth: hci3: command tx timeout [ 48.390631][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.451'. [ 48.390654][ T6337] netlink: 224 bytes leftover after parsing attributes in process `syz.0.451'. [ 48.390668][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.451'. [ 48.562260][ T4718] Bluetooth: hci0: command tx timeout [ 48.771327][ T6369] loop7: detected capacity change from 0 to 1024 [ 48.785861][ T6369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.802466][ T4718] Bluetooth: hci5: command 0x1003 tx timeout [ 48.802521][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 48.813377][ T6369] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.463: bg 0: block 112: padding at end of block bitmap is not set [ 48.817228][ T6369] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 1: comm syz.7.463: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.817600][ T6369] EXT4-fs error (device loop7): ext4_ext_remove_space:2977: inode #15: comm syz.7.463: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 48.890091][ T5811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.986518][ T6379] loop7: detected capacity change from 0 to 512 [ 48.986938][ T6379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.986951][ T6379] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.986975][ T6379] EXT4-fs: Ignoring removed nobh option [ 49.004251][ T6379] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.466: corrupted in-inode xattr: e_value size too large [ 49.004273][ T6379] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.005185][ T6379] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.466: couldn't read orphan inode 15 (err -117) [ 49.005376][ T6379] loop7: lost filesystem error report for type 5 error -117 [ 49.005987][ T6379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.025689][ T6379] EXT4-fs error (device loop7): ext4_check_dx_root:2203: inode #2: comm syz.7.466: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 49.041296][ T5811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.072629][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.7.467'. [ 49.076533][ T6382] veth1_to_team: entered promiscuous mode [ 49.077198][ T6382] veth1_to_team: left promiscuous mode [ 49.297810][ T6398] loop5: detected capacity change from 0 to 512 [ 49.329425][ T6398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.341423][ T6398] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.475: corrupted xattr block 33: invalid header [ 49.360359][ T6398] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.475: corrupted xattr block 33: invalid header [ 49.360674][ T6398] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.475: corrupted xattr block 33: invalid header [ 49.410191][ T6410] input: syz1 as /devices/virtual/input/input5 [ 49.449286][ T6398] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.475: corrupted xattr block 33: invalid header [ 49.506786][ T6398] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.475: corrupted xattr block 33: invalid header [ 49.507548][ T6422] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 49.525589][ T6421] netlink: 48 bytes leftover after parsing attributes in process `syz.7.483'. [ 49.530015][ T201] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.534258][ T201] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 49.534275][ T201] EXT4-fs (loop5): This should not happen!! Data will be lost [ 49.534275][ T201] [ 49.534283][ T201] EXT4-fs (loop5): Total free blocks count 0 [ 49.534290][ T201] EXT4-fs (loop5): Free/Dirty block details [ 49.534329][ T201] EXT4-fs (loop5): free_blocks=65280 [ 49.534345][ T201] EXT4-fs (loop5): dirty_blocks=8 [ 49.534351][ T201] EXT4-fs (loop5): Block reservation details [ 49.534357][ T201] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 49.537355][ T5238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.631105][ T26] kernel read not supported for file /newroot/73 (pid: 26 comm: kworker/1:1) [ 49.794453][ T6451] loop5: detected capacity change from 0 to 512 [ 49.840062][ T6451] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 49.883942][ T6461] loop7: detected capacity change from 0 to 512 [ 49.894908][ T6461] EXT4-fs (loop7): 1 truncate cleaned up [ 49.900435][ T6466] loop5: detected capacity change from 0 to 512 [ 49.912936][ T6461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.914361][ T6466] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 49.940116][ T6461] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.498: bg 0: block 465: padding at end of block bitmap is not set [ 49.940988][ T6461] EXT4-fs (loop7): Remounting filesystem read-only [ 49.944688][ T6466] EXT4-fs (loop5): 1 truncate cleaned up [ 49.945162][ T6466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.978969][ T5811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.989522][ T6466] netlink: 204 bytes leftover after parsing attributes in process `syz.5.499'. [ 50.012518][ T5238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.092303][ T6483] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 50.118412][ T6485] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 50.135725][ T6489] warning: `syz.0.511' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.206259][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.206475][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.247258][ T6505] loop6: detected capacity change from 0 to 1024 [ 50.249937][ T6505] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.283836][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 50.283854][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 50.290247][ T6505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.295751][ T6505] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.519: bg 0: block 112: padding at end of block bitmap is not set [ 50.304488][ T6505] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.519: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.316542][ T6505] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: comm syz.6.519: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.327407][ T6504] EXT4-fs error (device loop6): ext4_ext_remove_space:2977: inode #15: comm syz.6.519: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 50.327453][ T6504] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.328986][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 50.329005][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 50.331550][ T6504] EXT4-fs error (device loop6): ext4_evict_inode:280: comm syz.6.519: couldn't truncate inode 15 (err -117) [ 50.334629][ T6522] loop7: detected capacity change from 0 to 512 [ 50.363621][ T5599] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.374019][ T6526] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 50.379164][ T6522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.436933][ T6532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.439531][ T5811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.454837][ T4795] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.459854][ T4795] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.617191][ C0] ------------[ cut here ]------------ [ 50.617203][ C0] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x10b4/0x1658, CPU#0: syz.3.538/6551 [ 50.619947][ C0] Modules linked in: [ 50.620590][ C0] CPU: 0 UID: 0 PID: 6551 Comm: syz.3.538 Not tainted syzkaller #0 PREEMPT [ 50.622049][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.623836][ C0] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 50.625109][ C0] pc : __cfg80211_bss_update+0x10b4/0x1658 [ 50.626168][ C0] lr : __cfg80211_bss_update+0x164c/0x1658 [ 50.627142][ C0] sp : ffff80008ea97150 [ 50.627852][ C0] x29: ffff80008ea971a0 x28: 1ffff0001114b571 x27: 1fffe0001e518035 [ 50.629329][ C0] x26: dfff800000000000 x25: ffff0000f28c0190 x24: ffff800088a5a000 [ 50.630785][ C0] x23: ffff0000d8438490 x22: ffff0000f28c0190 x21: ffff80008ea97260 [ 50.632147][ C0] x20: ffff0000f28c0000 x19: ffff0000d8438400 x18: 00000000ffffffff [ 50.633541][ C0] x17: ffff8001254c8000 x16: ffff80008ea90000 x15: 0000000000000000 [ 50.634949][ C0] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 50.636370][ C0] x11: 0000000000000000 x10: 0000000000040000 x9 : 0000000000000270 [ 50.637823][ C0] x8 : ffff800092001000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 50.639188][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800085f61560 [ 50.640632][ C0] x2 : 0000000000000001 x1 : ffff0000c4b51d80 x0 : 0000000000000001 [ 50.641980][ C0] Call trace: [ 50.642541][ C0] __cfg80211_bss_update+0x10b4/0x1658 (P) [ 50.643583][ C0] cfg80211_inform_single_bss_data+0x990/0x17a0 [ 50.644634][ C0] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 50.645532][ C0] cfg80211_inform_bss_frame_data+0x348/0x714 [ 50.646561][ C0] ieee80211_bss_info_update+0x5d0/0x944 [ 50.647470][ C0] ieee80211_scan_rx+0x450/0x928 [ 50.648350][ C0] ieee80211_rx_list+0x229c/0x3000 [ 50.649214][ C0] ieee80211_rx_napi+0x18c/0x370 [ 50.649992][ C0] ieee80211_handle_queued_frames+0xc8/0x17c [ 50.650987][ C0] ieee80211_tasklet_handler+0x20/0x30 [ 50.651898][ C0] tasklet_action_common+0x1dc/0x278 [ 50.652783][ C0] tasklet_action+0x68/0x8c [ 50.653605][ C0] handle_softirqs+0x324/0xcbc [ 50.654426][ C0] __do_softirq+0x14/0x20 [ 50.655211][ C0] ____do_softirq+0x14/0x20 [ 50.655983][ C0] call_on_irq_stack+0x30/0x48 [ 50.656790][ C0] do_softirq_own_stack+0x20/0x2c [ 50.657679][ C0] do_softirq+0x90/0xf8 [ 50.658371][ C0] __local_bh_enable_ip+0x190/0x234 [ 50.659333][ C0] __ieee80211_tx_skb_tid_band+0x4bc/0x604 [ 50.660377][ C0] ieee80211_tx_skb_tid+0x268/0x44c [ 50.661297][ C0] ieee80211_mgmt_tx+0x190c/0x1ecc [ 50.662236][ C0] cfg80211_mlme_mgmt_tx+0x64c/0x12e8 [ 50.662714][ T51] Bluetooth: hci0: command tx timeout [ 50.664080][ C0] nl80211_tx_mgmt+0x81c/0xb04 [ 50.664879][ C0] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 50.665798][ C0] genl_rcv_msg+0x43c/0x620 [ 50.666571][ C0] netlink_rcv_skb+0x238/0x414 [ 50.667472][ C0] genl_rcv+0x38/0x50 [ 50.668204][ C0] netlink_unicast+0x600/0x7f8 [ 50.669064][ C0] netlink_sendmsg+0x648/0x948 [ 50.669940][ C0] __sock_sendmsg+0xc8/0x17c [ 50.670714][ C0] ____sys_sendmsg+0x3d0/0x6c8 [ 50.671514][ C0] ___sys_sendmsg+0x198/0x224 [ 50.672341][ C0] __sys_sendmsg+0x158/0x204 [ 50.673104][ C0] __arm64_sys_sendmsg+0x88/0x9c [ 50.673973][ C0] invoke_syscall+0x98/0x244 [ 50.674773][ C0] el0_svc_common+0xec/0x23c [ 50.675571][ C0] do_el0_svc+0x4c/0x5c [ 50.676304][ C0] el0_svc+0x60/0x1d8 [ 50.676980][ C0] el0t_64_sync_handler+0x44/0x104 [ 50.677837][ C0] el0t_64_sync+0x198/0x19c [ 50.678548][ C0] irq event stamp: 1009 [ 50.679280][ C0] hardirqs last enabled at (1008): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.681072][ C0] hardirqs last disabled at (1009): [] el1_brk64+0x20/0x54 [ 50.682465][ C0] softirqs last enabled at (998): [] __ieee80211_tx_skb_tid_band+0x4b4/0x604 [ 50.684284][ C0] softirqs last disabled at (999): [] __do_softirq+0x14/0x20 [ 50.685856][ C0] ---[ end trace 0000000000000000 ]--- [ 50.688621][ T12] ------------[ cut here ]------------ [ 50.688630][ T12] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x10b4/0x1658, CPU#1: kworker/u8:0/12 [ 50.691457][ T12] Modules linked in: [ 50.692151][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT [ 50.693891][ T12] Tainted: [W]=WARN [ 50.694564][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.696155][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 50.697174][ T12] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 50.698589][ T12] pc : __cfg80211_bss_update+0x10b4/0x1658 [ 50.699637][ T12] lr : __cfg80211_bss_update+0x164c/0x1658 [ 50.700645][ T12] sp : ffff80008ebc6eb0 [ 50.701379][ T12] x29: ffff80008ebc6f00 x28: 1ffff0001114b571 x27: 1fffe0001e518035 [ 50.702838][ T12] x26: dfff800000000000 x25: ffff0000f28c0190 x24: ffff800088a5a000 [ 50.704202][ T12] x23: ffff0000f189a890 x22: ffff0000f28c0190 x21: ffff80008ebc6fc0 [ 50.705535][ T12] x20: ffff0000f28c0000 x19: ffff0000f189a800 x18: 1fffe00035bde028 [ 50.706849][ T12] x17: ffff800085f676c4 x16: ffff800085f630c4 x15: 0000000000000000 [ 50.708243][ T12] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 50.709589][ T12] x11: 0000000000000000 x10: 0000000000100000 x9 : 0000000000000325 [ 50.710918][ T12] x8 : ffff8000a8d28000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 50.712270][ T12] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800085f61560 [ 50.713682][ T12] x2 : 0000000000000001 x1 : ffff0000c19f8000 x0 : 0000000000000001 [ 50.715112][ T12] Call trace: [ 50.715706][ T12] __cfg80211_bss_update+0x10b4/0x1658 (P) [ 50.716666][ T12] cfg80211_inform_single_bss_data+0x990/0x17a0 [ 50.717767][ T12] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 50.718788][ T12] cfg80211_inform_bss_frame_data+0x348/0x714 [ 50.719866][ T12] ieee80211_bss_info_update+0x5d0/0x944 [ 50.720823][ T12] ieee80211_ibss_rx_queued_mgmt+0x830/0x242c [ 50.721918][ T12] ieee80211_iface_work+0x600/0xd3c [ 50.722753][ T12] cfg80211_wiphy_work+0x278/0x464 [ 50.723575][ T12] process_scheduled_works+0x91c/0x1250 [ 50.724446][ T12] worker_thread+0x798/0xbd0 [ 50.725203][ T12] kthread+0x304/0x3d4 [ 50.725929][ T12] ret_from_fork+0x10/0x20 [ 50.726685][ T12] irq event stamp: 285433 [ 50.727462][ T12] hardirqs last enabled at (285432): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.729234][ T12] hardirqs last disabled at (285433): [] el1_brk64+0x20/0x54 [ 50.730653][ T12] softirqs last enabled at (285328): [] nsim_dev_trap_report_work+0x670/0x9cc [ 50.732387][ T12] softirqs last disabled at (285426): [] cfg80211_inform_single_bss_data+0x97c/0x17a0 [ 50.734149][ T12] ---[ end trace 0000000000000000 ]--- [ 50.813520][ T24] net_ratelimit: 15 callbacks suppressed [ 50.813538][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.522507][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.683549][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.841809][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.322437][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.331930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.881798][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.921730][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.962005][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.361812][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.002580][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.044923][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.084016][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.404462][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.122221][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.161768][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog