last executing test programs: 2m10.697587019s ago: executing program 3 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r3, 0x0, 0x0, 0x0) 2m9.82906631s ago: executing program 3 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x410000, 0x89) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000180)='27', 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 2m9.699844743s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) 2m9.559866857s ago: executing program 3 (id=58): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@lazytime}, {@sysvgroups}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000480)='./cgroup\x00', 0x11, &(0x7f00000004c0)={[{@dioread_lock}, {@acl}]}, 0x1, 0x66a, &(0x7f0000000500)="$eJzs3c9vE9kdAPDvTJzfbR1Q1ZYeStSqAqklIQEqVFWCXCpVQoj+uPWUkoAohiCSqg1FaiLRS6Wqlx4q9dRD2dMe9h/YRdrLHvaw1z3sZU8rJLRacVhW7OLV2DPBceLEIbEdks9HcjLjsd/7GvzNe/P83jiAQ2s8+5FGHIuIO0lEueFYKfKD4/XHPf3s/tXslkS1+ttPk7j/t2Slsawk/z2aP/mrciQfpBFH+zbWu7h87+ZspTJ/N9+fXLp1Z3Jx+d6pG7dmr89fn789/bPp8+fOnjs/dXpXr+9C/deX2Y9LD/745/I/Lv/+//99nky98dHlJC7Gizy27HU1P3dwVzVn/2bjUa17tu5AGnF+l2XvF5+Xi/dJzWD2hkhKTQ8a6HZUtCvNc6Q/Ir4b5eiLl8lajr//uqfBAR1VTaLWRo1XgcMniXW7WYeg2L4xlP+R2GioG6EBHVX0A4pz+83OgzdKO9klAbrkyUx9rK6e+/0RUeR/qT42GEO1sYGRp0njOE9trG93I3N1WR3vv3v5QXaLFuNwQGesrBaj3M3tf1LLzbGonwOMPE3X5f9M3gtI888JftNccJuD5+NN+/IfumdlNSK+l7f/A9F2/qd57hb5/4d1pR5ru375DwAAAAAAAHvn0UxE/HSz+X/p2vyfgU3m/4xGxMU9qH/7z//Sx/lGsgfVAQ2ezET8opj/m93RkP+5sb5875u1+QD9ybUblfnTEfGtiDgZ/YPZ/lRTuY0zhE/98+h/WtXfOP8vu2VxFHMB85Iel5rmEs3NLs3u8mUDWf6vRny/Nv/3eH7P+vk/WfufbNL+Z/l9p806jv744ZVWx7bPf6BTqv+LOLHp+p+X3e1k6+tzTNb6A5NFr2CjH/z1X2+3ql/+Q+9k7f/I1vk/mDRer2dxZ+UPRMSZ5VK11fFX7f8PJL/ri4ZLy/xldmnp7lTEQHJp4/3TO4sZDqoiH4p8yfL/5I+2Hv9b6/835OFwRKy0Wed3Xox+3OqY9h96J8v/ua3b//L69n/nG9MPx95pVf+Vttr/s7U2/WR+j/E/aLTxehztJmhPwgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA11waEd+IJJ1Y207TiYmI0Yj4doyklYXFpZ9cW/jT7bnsWO37/9Pim37L9f2k+P7/sYb96ab9MxFxJCL+3Tdc25+4ulCZ6/WLBwAAAAAAAAAAAAAAAAAAgH1itLbmvzrYvP4/80lfr6MDOq6U/5bvcPiUXvmZ1cE9DQToulfPf+B1trqj/O/vaCxA97XO/2fPqzVNd//yhx2PCegO/X84vHae/z4pgIOiVf4PdDkOoNvaHNMb6nQcQC84/wcAAAAAgAPlyPFHHyYRsfLz4dotGj72H+5pZECnpb0OAOgZE3nh8Cot9DoCoFcs6AeSta0vmhf717Se/Z90JiAAAAAAAAAAAAAAYIMTx1qv/7c2AA62rdf/m9sPB9kW6/83S36XC4ADpP7VHyubHNH2w0HnHB/YrrW3/h8AAAAAAAAAAAAA9oGhezdnK5X5u4vL224UM33benA3Ni7sjzB2trEyu7tyqoMtDr3Xu9f1ogMll/J3246fXqxR3R//3WsbWUiVyny1GrH9g4tLcGxb8ptvJb/KS97jmLv+lwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjh6wAAAP//hQUQKg==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x866c6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c80), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/pid_for_children\x00') socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xa, 0xb, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="505fdebf53a218af37eacddd0d24ab25ca353b761f95dffbdc6ff5138f085d473b55b7bb1a65f44a277904a4feccbcad4cb01ef041e42a4ee601ade5148545b09de0d3f17cd6072690d264a15b21b2c38084f01dc8970465b7e1b9dd8335efd09b20e6e8fdd192dcb7b45546ad6b166174a3d08d6018e74b93753b52f6e97d8d5660422172822ddb2e8fb4ddd8dbdc3bf97aa25c1f826b97949999"], &(0x7f00000014c0)='syzkaller\x00', 0xc595, 0xc4, &(0x7f0000001500)=""/196, 0x41000, 0x60, '\x00', 0x0, @fallback=0x11, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x3, 0x8, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001680)=[{0x0, 0x4, 0xa, 0x3}], 0x10, 0xffffff2e}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 2m8.080039714s ago: executing program 3 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x18, 0x3, "00000000ffffffff00000000ffffffff02000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/integrity/ima/ascii_runtime_measurements\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730065"], 0x40}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x48800, 0x18) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000380)={0x0, r2}, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x1409, 0x211, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2m4.921292492s ago: executing program 3 (id=128): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000800)="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", 0x682}, {&(0x7f0000000ec0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000fc0)="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", 0x18e}, {&(0x7f0000001180)="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", 0x14a}], 0x4, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 2m4.902389363s ago: executing program 32 (id=128): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000800)="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", 0x682}, {&(0x7f0000000ec0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000fc0)="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", 0x18e}, {&(0x7f0000001180)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e", 0x14a}], 0x4, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1m33.15744371s ago: executing program 4 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x18, 0x3, "00000000ffffffff00000000ffffffff02000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/integrity/ima/ascii_runtime_measurements\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a007300656d707479"], 0x40}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x48800, 0x18) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000380)={0x0, r2}, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, 0x0, 0x10) 1m32.33623822s ago: executing program 4 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101201, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e30000000000000000000000060d071"], 0x34}}, 0x0) 1m32.164657344s ago: executing program 4 (id=550): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000f000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"], 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.729488755s ago: executing program 4 (id=554): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140), 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x3) 1m31.602789448s ago: executing program 4 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1m30.558966294s ago: executing program 4 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000002c0)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='8', 0x1) 1m30.478661816s ago: executing program 33 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000002c0)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='8', 0x1) 1m27.933346299s ago: executing program 2 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe0}}, 0x0) 1m27.297533685s ago: executing program 2 (id=608): r0 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0xfff5, 0x0, &(0x7f0000000680)={0x2, 0x7c00, @multicast1}, 0x10) 1m27.236639407s ago: executing program 2 (id=609): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)=[0x0], 0x1}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x800714, &(0x7f00000001c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000640)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000c80)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000d80), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000dc0)=0x2) recvmmsg(r3, &(0x7f0000000e00), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000e80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000f00), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000f40)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) write$tun(0xffffffffffffffff, &(0x7f0000000fc0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x40de, r1}) 1m26.038797416s ago: executing program 2 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m25.90281202s ago: executing program 2 (id=622): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) 1m24.523570504s ago: executing program 2 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) 1m24.454228425s ago: executing program 34 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) 2.158772657s ago: executing program 0 (id=1396): r0 = syz_open_dev$video(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = syz_open_dev$evdev(0x0, 0x388, 0x105040) ioctl$EVIOCSABS20(r2, 0x401845e0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./bus\x00', 0x21081e, &(0x7f0000000a80)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}]}, 0x1, 0x515, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r3, 0xffffc000) clock_gettime(0x0, &(0x7f0000000180)) 2.081406819s ago: executing program 5 (id=1397): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040840) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0), 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x20048a, &(0x7f0000000380), 0x1, 0x51a, &(0x7f00000003c0)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") openat(0xffffffffffffff9c, 0x0, 0x970a40, 0x6ab858183a7ef6bf) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000009c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newlink={0x54, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r6, 0x42035, 0xad85}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x827fd}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000004) 2.055229179s ago: executing program 0 (id=1399): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]}, 0x78) 1.834291565s ago: executing program 0 (id=1402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000022c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0xffffffff, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x31}, {0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) 1.252388039s ago: executing program 5 (id=1409): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0xaac2, 0x11) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) removexattr(0x0, &(0x7f0000000740)=@random={'trusted.', '\xf3-#\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.241213539s ago: executing program 7 (id=1410): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setresgid(0xee00, 0x0, 0xee00) 1.157133371s ago: executing program 5 (id=1412): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000f10000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0xd8) 1.137045962s ago: executing program 6 (id=1413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r0, &(0x7f0000000000)='3', 0x4e) mount(&(0x7f0000000040)=@rnullb={'/dev/syzrnull', 0x0}, 0x0, 0x0, 0x0, &(0x7f0000000180)='sysfs\x00') socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='md0', 0x3) 1.133699152s ago: executing program 7 (id=1414): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x10001, 0x0) 1.090210323s ago: executing program 5 (id=1415): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000008c0), 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0288ca5bf0004c07ff123400000000010000010000126700000001aabbccddee020000000000000000000000000000000000000000000000000000000000002222222222222222222222"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.013475265s ago: executing program 7 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000400)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x200) 1.013281435s ago: executing program 6 (id=1417): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f00000000c0)={[{@data_err_ignore}, {@acl}, {@usrquota}, {@errors_remount}]}, 0x12, 0x5c2, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x90) getdents64(r0, 0x0, 0x0) pivot_root(&(0x7f0000000040)='.\x02\x00', 0x0) 995.895145ms ago: executing program 7 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101201, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 912.389297ms ago: executing program 6 (id=1419): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04250c20"], 0x7) openat(0xffffffffffffff9c, 0x0, 0x100403, 0xa0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 764.500601ms ago: executing program 7 (id=1421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8d}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8d}]}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x4800) 713.166132ms ago: executing program 5 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020080084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000001508000240000000020900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 677.667563ms ago: executing program 7 (id=1425): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x3ff, 0x2000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x54, 0xfffe, 0x3, {0x8, 0xefb}, {0x0, 0x5}, @rumble={0x4}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c900240f00100000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffb800000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff0400000009000000000000000a0000000000"]) 569.671876ms ago: executing program 5 (id=1427): sched_setscheduler(0x0, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000500)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$tun(r1, &(0x7f0000000d40)=ANY=[], 0x1012) capset(0x0, &(0x7f0000000180)={0x9, 0xffff621f, 0x7fffffff, 0x0, 0x0, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x0, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001d80)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) write$tun(r1, &(0x7f00000005c0)=ANY=[], 0x11b0) 569.268216ms ago: executing program 0 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000400)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x200) 502.860887ms ago: executing program 1 (id=1429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) 502.403367ms ago: executing program 0 (id=1430): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000500)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 490.792048ms ago: executing program 1 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101201, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 452.920629ms ago: executing program 0 (id=1432): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000340)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc4}, &(0x7f0000000c00)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv6_newrule={0x50, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) 447.459949ms ago: executing program 1 (id=1433): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="d3b041", 0x3}, {0x0}], 0x2}, 0x4000000) 416.625709ms ago: executing program 1 (id=1434): r0 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000340)=0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000880)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000900)=[{0xb04f, &(0x7f0000000940)=0x6, 0x2}], 0x1}) io_uring_enter(r0, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) 349.473311ms ago: executing program 1 (id=1435): r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f00000005c0)="6000000000143c4000000000000000000000000000000001000000080000000000000000000000013b01", 0x2a, 0x4040, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) 349.332102ms ago: executing program 6 (id=1436): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x920, [0x20000540, 0x0, 0x0, 0x20000570, 0x20000e30], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x32, 0x1, 'rose0\x00', 'veth1_to_hsr\x00', 'wg2\x00', 'wg2\x00', @random="831406915398", [0x0, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x858, 0x858, [], [@common]}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1e6) 51.485169ms ago: executing program 6 (id=1437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8d}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xbc}, 0x1, 0x0, 0x0, 0x20040841}, 0x4800) 40.000709ms ago: executing program 1 (id=1438): openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@norecovery}]}, 0x1, 0x490, &(0x7f0000000280)="$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") lsetxattr$security_ima(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000fc0)='2', 0xfdef, 0xfecc) 0s ago: executing program 6 (id=1439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000022c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0xffffffff, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x31}, {0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 53.339476][ T5040] loop0: detected capacity change from 0 to 512 [ 53.341194][ T5040] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 53.354674][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.359770][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.361648][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.363455][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.366200][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.378014][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.385164][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.402106][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.413830][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.428759][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.432806][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.437928][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.439781][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.442019][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.444005][ T4756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.446637][ T4756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.449789][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.452707][ T4756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.455313][ T4756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.457049][ T4756] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.458740][ T4756] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.480883][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.775318][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.785990][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.837717][ T5055] netlink: 56 bytes leftover after parsing attributes in process `syz.2.208'. [ 53.863061][ T1647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.865458][ T1647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.867378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.892055][ T1647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.893718][ T1647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.899718][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.256883][ T5075] device wlan0 entered promiscuous mode [ 54.265733][ T5085] FAULT_INJECTION: forcing a failure. [ 54.265733][ T5085] name failslab, interval 1, probability 0, space 0, times 1 [ 54.284270][ T5085] CPU: 1 PID: 5085 Comm: syz.4.215 Not tainted syzkaller #0 [ 54.286015][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.288286][ T5085] Call trace: [ 54.288962][ T5085] dump_backtrace+0x1c4/0x1f0 [ 54.290081][ T5085] show_stack+0x2c/0x3c [ 54.290967][ T5085] __dump_stack+0x30/0x40 [ 54.291890][ T5085] dump_stack_lvl+0xf4/0x15c [ 54.292820][ T5085] dump_stack+0x1c/0x5c [ 54.293692][ T5085] should_fail_ex+0x3cc/0x524 [ 54.294748][ T5085] __should_failslab+0xc0/0x11c [ 54.295736][ T5085] should_failslab+0x10/0x28 [ 54.296682][ T5085] __kmem_cache_alloc_node+0x7c/0x318 [ 54.297787][ T5085] kmalloc_trace+0x48/0x94 [ 54.298673][ T5085] alloc_fs_context+0x7c/0x778 [ 54.299647][ T5085] fs_context_for_mount+0x34/0x44 [ 54.300662][ T5085] do_new_mount+0xfc/0x804 [ 54.301554][ T5085] path_mount+0x5ac/0xe6c [ 54.302447][ T5085] __arm64_sys_mount+0x4a0/0x5a0 [ 54.303441][ T5085] invoke_syscall+0x98/0x290 [ 54.304384][ T5085] el0_svc_common+0x13c/0x258 [ 54.305355][ T5085] do_el0_svc+0x5c/0x134 [ 54.306147][ T5085] el0_svc+0x58/0x12c [ 54.306927][ T5085] el0t_64_sync_handler+0x84/0xf0 [ 54.307965][ T5085] el0t_64_sync+0x18c/0x190 [ 54.331840][ T5091] loop5: detected capacity change from 0 to 512 [ 54.458498][ T5098] loop1: detected capacity change from 0 to 2048 [ 54.488363][ T5103] FAULT_INJECTION: forcing a failure. [ 54.488363][ T5103] name failslab, interval 1, probability 0, space 0, times 0 [ 54.496117][ T5103] CPU: 1 PID: 5103 Comm: syz.5.221 Not tainted syzkaller #0 [ 54.497677][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.499925][ T5103] Call trace: [ 54.500690][ T5103] dump_backtrace+0x1c4/0x1f0 [ 54.501802][ T5103] show_stack+0x2c/0x3c [ 54.502680][ T5103] __dump_stack+0x30/0x40 [ 54.503682][ T5103] dump_stack_lvl+0xf4/0x15c [ 54.504758][ T5103] dump_stack+0x1c/0x5c [ 54.505725][ T5103] should_fail_ex+0x3cc/0x524 [ 54.506760][ T5103] __should_failslab+0xc0/0x11c [ 54.507762][ T5103] should_failslab+0x10/0x28 [ 54.508751][ T5103] kmem_cache_alloc+0x88/0x310 [ 54.509814][ T5103] __proc_create+0x30c/0x718 [ 54.510837][ T5103] proc_mkdir+0x44/0x100 [ 54.511807][ T5103] hashlimit_net_init+0x80/0x13c [ 54.512924][ T5103] ops_init+0x2b0/0x53c [ 54.513833][ T5103] setup_net+0x494/0xb6c [ 54.514758][ T5103] copy_net_ns+0x2b8/0x578 [ 54.515739][ T5103] create_new_namespaces+0x30c/0x604 [ 54.516846][ T5103] unshare_nsproxy_namespaces+0x108/0x160 [ 54.517979][ T5103] ksys_unshare+0x3f0/0x70c [ 54.518935][ T5103] __arm64_sys_unshare+0x3c/0x50 [ 54.520009][ T5103] invoke_syscall+0x98/0x290 [ 54.520993][ T5103] el0_svc_common+0x13c/0x258 [ 54.522010][ T5103] do_el0_svc+0x5c/0x134 [ 54.522900][ T5103] el0_svc+0x58/0x12c [ 54.523763][ T5103] el0t_64_sync_handler+0x84/0xf0 [ 54.524861][ T5103] el0t_64_sync+0x18c/0x190 [ 54.530784][ T5098] loop1: p1 p4 [ 54.530784][ T5098] p1: [ 54.532384][ T5098] loop1: partition table partially beyond EOD, truncated [ 54.537691][ T5098] loop1: p4 start 184549376 is beyond EOD, truncated [ 54.540972][ T5098] loop1: p6 start 184549376 is beyond EOD, truncated [ 54.643425][ T5123] loop4: detected capacity change from 0 to 128 [ 54.687236][ T5123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.722389][ T5116] udevd[5116]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 54.731841][ T5041] udevd[5041]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.740267][ T5138] loop5: detected capacity change from 0 to 512 [ 54.748956][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 55.293410][ T5172] loop5: detected capacity change from 0 to 512 [ 55.306457][ T5172] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.449191][ T5172] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 55.457365][ T5172] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #11: comm syz.5.242: corrupted inode contents [ 55.469083][ T5172] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #11: comm syz.5.242: mark_inode_dirty error [ 55.482524][ T5172] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.242: invalid indirect mapped block 1 (level 1) [ 55.488345][ T5172] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #11: comm syz.5.242: corrupted inode contents [ 55.491959][ T5172] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 55.494027][ T5172] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #11: comm syz.5.242: corrupted inode contents [ 55.499314][ T5172] EXT4-fs error (device loop5): ext4_truncate:4325: inode #11: comm syz.5.242: mark_inode_dirty error [ 55.501700][ T5172] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 55.503807][ T5172] EXT4-fs (loop5): 1 truncate cleaned up [ 55.511490][ T5172] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.538763][ T5172] EXT4-fs error (device loop5): ext4_lookup:1860: inode #12: comm syz.5.242: iget: bogus i_mode (3355) [ 55.588007][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 55.595636][ T5051] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 55.623427][ T5190] loop5: detected capacity change from 0 to 128 [ 55.647518][ T5190] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.681477][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 55.733681][ T5201] loop5: detected capacity change from 0 to 512 [ 55.771282][ T5208] loop4: detected capacity change from 0 to 256 [ 55.940228][ T5222] loop5: detected capacity change from 0 to 128 [ 55.960402][ T5222] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.986509][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 56.253247][ T5243] loop5: detected capacity change from 0 to 512 [ 56.399586][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.417450][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 56.633529][ T5281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.659403][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 57.175122][ T5320] EXT4-fs: Invalid gid value -1 [ 57.215633][ T5323] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 57.238134][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 57.772245][ T5354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.836581][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 58.284309][ T5380] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 58.347828][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 58.480322][ T5405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.496655][ T5405] fscrypt (loop4, inode 12): Unsupported encryption flags (0x09) [ 58.514864][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 58.579419][ T5411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.618627][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 58.876430][ T5442] vivid-000: ================= START STATUS ================= [ 58.885676][ T5442] vivid-000: Test Pattern: 75% Colorbar [ 58.886942][ T5442] vivid-000: Fill Percentage of Frame: 100 [ 58.888017][ T5442] vivid-000: Horizontal Movement: No Movement [ 58.889227][ T5442] vivid-000: Vertical Movement: No Movement [ 58.890287][ T5442] vivid-000: OSD Text Mode: All [ 58.891414][ T5442] vivid-000: Show Border: false [ 58.892409][ T5442] vivid-000: Show Square: false [ 58.893406][ T5442] vivid-000: Sensor Flipped Horizontally: false [ 58.898466][ T5442] vivid-000: Sensor Flipped Vertically: false [ 58.899837][ T5442] vivid-000: Insert SAV Code in Image: false [ 58.901790][ T5442] vivid-000: Insert EAV Code in Image: false [ 58.903027][ T5442] vivid-000: Insert Video Guard Band: false [ 58.905181][ T5442] vivid-000: Reduced Framerate: false [ 58.906412][ T5442] vivid-000: Enable Capture Cropping: true [ 58.907917][ T5442] vivid-000: Enable Capture Composing: true [ 58.909266][ T5442] vivid-000: Enable Capture Scaler: true [ 58.910491][ T5442] vivid-000: Timestamp Source: End of Frame [ 58.911722][ T5442] vivid-000: Colorspace: sRGB [ 58.912751][ T5442] vivid-000: Transfer Function: Default [ 58.913961][ T5442] vivid-000: Y'CbCr Encoding: Default [ 58.915626][ T5442] vivid-000: HSV Encoding: Hue 0-179 [ 58.916670][ T5442] vivid-000: Quantization: Default [ 58.917908][ T5442] vivid-000: Apply Alpha To Red Only: false [ 58.919185][ T5442] vivid-000: Standard Aspect Ratio: 4x3 [ 58.920283][ T5442] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 58.921983][ T5442] vivid-000: DV Timings: 640x480p59 inactive [ 58.923319][ T5442] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 58.925678][ T5442] vivid-000: Maximum EDID Blocks: 2 [ 58.926856][ T5442] vivid-000: Limited RGB Range (16-235): false [ 58.928420][ T5442] vivid-000: Rx RGB Quantization Range: Automatic [ 58.929785][ T5442] vivid-000: Power Present: 0x00000001 [ 58.930982][ T5442] tpg source WxH: 640x360 (Y'CbCr) [ 58.932095][ T5442] tpg field: 1 [ 58.932784][ T5442] tpg crop: 640x360@0x0 [ 58.933768][ T5442] tpg compose: 640x360@0x0 [ 58.935158][ T5442] tpg colorspace: 8 [ 58.935937][ T5442] tpg transfer function: 0/0 [ 58.936999][ T5442] tpg Y'CbCr encoding: 0/0 [ 58.937947][ T5442] tpg quantization: 0/0 [ 58.938970][ T5442] tpg RGB range: 0/2 [ 58.939769][ T5442] vivid-000: ================== END STATUS ================== [ 59.817691][ T5463] set_capacity_and_notify: 10 callbacks suppressed [ 59.817701][ T5463] loop1: detected capacity change from 0 to 128 [ 59.835684][ T5463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.855875][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 59.874304][ T5467] phram: illegal device length [ 60.054379][ T5480] device wlan0 left promiscuous mode [ 61.575860][ T5414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.646996][ T5495] loop2: detected capacity change from 0 to 4096 [ 61.649284][ T5495] EXT4-fs: inline encryption not supported [ 61.650658][ T5495] ext4: Unknown parameter 'nouser_xattr' [ 61.667152][ T5502] loop4: detected capacity change from 0 to 128 [ 61.765739][ T5041] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.803039][ T5502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.755607][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 62.836903][ T4332] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 62.838666][ T4332] Bluetooth: hci2: Injecting HCI hardware error event [ 62.840743][ T4339] Bluetooth: hci2: hardware error 0x00 [ 63.531161][ T5558] loop0: detected capacity change from 0 to 128 [ 63.558443][ T5558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 63.638083][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 63.662020][ T5565] netlink: 'syz.1.367': attribute type 1 has an invalid length. [ 63.692851][ T5565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.753117][ T5571] Bluetooth: MGMT ver 1.22 [ 63.817522][ T5575] FAULT_INJECTION: forcing a failure. [ 63.817522][ T5575] name failslab, interval 1, probability 0, space 0, times 0 [ 63.820118][ T5575] CPU: 0 PID: 5575 Comm: syz.0.371 Not tainted syzkaller #0 [ 63.821592][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.823582][ T5575] Call trace: [ 63.824170][ T5575] dump_backtrace+0x1c4/0x1f0 [ 63.825076][ T5575] show_stack+0x2c/0x3c [ 63.825938][ T5575] __dump_stack+0x30/0x40 [ 63.826869][ T5575] dump_stack_lvl+0xf4/0x15c [ 63.827921][ T5575] dump_stack+0x1c/0x5c [ 63.828821][ T5575] should_fail_ex+0x3cc/0x524 [ 63.829944][ T5575] __should_failslab+0xc0/0x11c [ 63.831099][ T5575] should_failslab+0x10/0x28 [ 63.832121][ T5575] __kmem_cache_alloc_node+0x7c/0x318 [ 63.833283][ T5575] kmalloc_trace+0x48/0x94 [ 63.834300][ T5575] create_filter_start+0x134/0x274 [ 63.835477][ T5575] apply_event_filter+0x12c/0x4e0 [ 63.836645][ T5575] event_filter_write+0xd4/0x154 [ 63.837765][ T5575] vfs_write+0x2a8/0x7c8 [ 63.838718][ T5575] ksys_write+0x12c/0x228 [ 63.839701][ T5575] __arm64_sys_write+0x7c/0x90 [ 63.840650][ T5575] invoke_syscall+0x98/0x290 [ 63.841583][ T5575] el0_svc_common+0x13c/0x258 [ 63.842586][ T5575] do_el0_svc+0x5c/0x134 [ 63.843518][ T5575] el0_svc+0x58/0x12c [ 63.844320][ T5575] el0t_64_sync_handler+0x84/0xf0 [ 63.845424][ T5575] el0t_64_sync+0x18c/0x190 [ 63.875982][ T5579] loop0: detected capacity change from 0 to 256 [ 64.180305][ T5585] cgroup: name respecified [ 64.482320][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.484853][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.602497][ T5602] loop2: detected capacity change from 0 to 256 [ 65.034466][ T4339] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 65.248027][ T5633] loop5: detected capacity change from 0 to 512 [ 65.303492][ T5633] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.316890][ T5633] EXT4-fs (loop5): 1 truncate cleaned up [ 65.318225][ T5633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 65.402607][ T5643] syz.0.398 (5643): /proc/5642/oom_adj is deprecated, please use /proc/5642/oom_score_adj instead. [ 65.450311][ T5651] loop0: detected capacity change from 0 to 512 [ 65.471297][ T5651] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.486895][ T5651] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.402: inode has both inline data and extents flags [ 65.492856][ T5651] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.402: couldn't read orphan inode 15 (err -117) [ 65.508121][ T5651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.581367][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 66.344015][ T5667] FAULT_INJECTION: forcing a failure. [ 66.344015][ T5667] name failslab, interval 1, probability 0, space 0, times 0 [ 66.367985][ T5667] CPU: 1 PID: 5667 Comm: syz.2.408 Not tainted syzkaller #0 [ 66.369420][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.371630][ T5667] Call trace: [ 66.372252][ T5667] dump_backtrace+0x1c4/0x1f0 [ 66.373260][ T5667] show_stack+0x2c/0x3c [ 66.374208][ T5667] __dump_stack+0x30/0x40 [ 66.375253][ T5667] dump_stack_lvl+0xf4/0x15c [ 66.376215][ T5667] dump_stack+0x1c/0x5c [ 66.377076][ T5667] should_fail_ex+0x3cc/0x524 [ 66.377997][ T5667] __should_failslab+0xc0/0x11c [ 66.379006][ T5667] should_failslab+0x10/0x28 [ 66.380012][ T5667] kmem_cache_alloc+0x88/0x310 [ 66.381049][ T5667] skb_clone+0x194/0x308 [ 66.381996][ T5667] netlink_broadcast+0x580/0x1054 [ 66.383041][ T5667] kobject_uevent_net_broadcast+0x32c/0x528 [ 66.384319][ T5667] kobject_uevent_env+0x550/0x88c [ 66.385313][ T5667] kobject_uevent+0x2c/0x3c [ 66.386256][ T5667] driver_register+0x2a0/0x37c [ 66.387366][ T5667] usb_gadget_register_driver_owner+0xf0/0x25c [ 66.388773][ T5667] raw_ioctl+0x1014/0x326c [ 66.389717][ T5667] __arm64_sys_ioctl+0x14c/0x1c8 [ 66.390816][ T5667] invoke_syscall+0x98/0x290 [ 66.391832][ T5667] el0_svc_common+0x13c/0x258 [ 66.392753][ T5667] do_el0_svc+0x5c/0x134 [ 66.393690][ T5667] el0_svc+0x58/0x12c [ 66.394626][ T5667] el0t_64_sync_handler+0x84/0xf0 [ 66.395764][ T5667] el0t_64_sync+0x18c/0x190 [ 66.497258][ T5667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.512036][ T5667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.634300][ T5665] FAULT_INJECTION: forcing a failure. [ 66.634300][ T5665] name failslab, interval 1, probability 0, space 0, times 0 [ 66.637170][ T5665] CPU: 1 PID: 5665 Comm: syz.5.405 Not tainted syzkaller #0 [ 66.638520][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.640498][ T5665] Call trace: [ 66.641221][ T5665] dump_backtrace+0x1c4/0x1f0 [ 66.642228][ T5665] show_stack+0x2c/0x3c [ 66.643066][ T5665] __dump_stack+0x30/0x40 [ 66.643990][ T5665] dump_stack_lvl+0xf4/0x15c [ 66.644987][ T5665] dump_stack+0x1c/0x5c [ 66.645923][ T5665] should_fail_ex+0x3cc/0x524 [ 66.646949][ T5665] __should_failslab+0xc0/0x11c [ 66.648003][ T5665] should_failslab+0x10/0x28 [ 66.648958][ T5665] __kmem_cache_alloc_node+0x7c/0x318 [ 66.650178][ T5665] __kmalloc+0xc4/0x180 [ 66.651103][ T5665] kobject_get_path+0xb0/0x220 [ 66.652143][ T5665] kobject_uevent_env+0x26c/0x88c [ 66.653235][ T5665] kobject_uevent+0x2c/0x3c [ 66.654207][ T5665] device_del+0x800/0x990 [ 66.655100][ T5665] device_unregister+0x2c/0xc8 [ 66.656180][ T5665] wakeup_source_sysfs_remove+0x40/0x50 [ 66.657411][ T5665] wakeup_source_unregister+0x158/0x180 [ 66.658555][ T5665] ep_remove_epi+0x27c/0x3a8 [ 66.659568][ T5665] eventpoll_release_file+0xf0/0x288 [ 66.660612][ T5665] __fput+0x5bc/0x7b0 [ 66.661483][ T5665] ____fput+0x20/0x30 [ 66.662367][ T5665] task_work_run+0x1f4/0x280 [ 66.663383][ T5665] do_notify_resume+0x20f8/0x2c84 [ 66.664484][ T5665] el0_svc+0x9c/0x12c [ 66.665410][ T5665] el0t_64_sync_handler+0x84/0xf0 [ 66.666561][ T5665] el0t_64_sync+0x18c/0x190 [ 66.681296][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 67.356082][ T5725] loop5: detected capacity change from 0 to 512 [ 67.364171][ T14] kernel write not supported for file [eventfd] (pid: 14 comm: kworker/0:1) [ 67.369544][ T5725] EXT4-fs (loop5): Test dummy encryption mode enabled [ 67.389541][ T5725] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.421: inode has both inline data and extents flags [ 67.405749][ T5725] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.421: couldn't read orphan inode 15 (err -117) [ 67.422707][ T5725] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 67.543585][ T5734] loop4: detected capacity change from 0 to 256 [ 68.568915][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 68.593001][ T5764] loop4: detected capacity change from 0 to 512 [ 68.594525][ T5749] device wlan0 entered promiscuous mode [ 68.595476][ T5764] EXT4-fs: Ignoring removed bh option [ 68.619419][ T5764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.672717][ T5764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.692890][ T5775] loop1: detected capacity change from 0 to 2048 [ 68.720996][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 68.752932][ T5775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.829897][ T5788] loop2: detected capacity change from 0 to 1024 [ 68.867633][ T5784] Zero length message leads to an empty skb [ 68.872121][ T5788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.901150][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 69.526699][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 69.539072][ T5819] loop0: detected capacity change from 0 to 512 [ 69.541916][ T5819] EXT4-fs (loop0): Test dummy encryption mode enabled [ 69.558442][ T5819] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.443: inode has both inline data and extents flags [ 69.561269][ T5819] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.443: couldn't read orphan inode 15 (err -117) [ 69.570411][ T5819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.649291][ T24] cfg80211: failed to load regulatory.db [ 70.750881][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 70.829042][ T5857] FAULT_INJECTION: forcing a failure. [ 70.829042][ T5857] name failslab, interval 1, probability 0, space 0, times 0 [ 70.831406][ T5857] CPU: 1 PID: 5857 Comm: syz.4.456 Not tainted syzkaller #0 [ 70.832778][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.834825][ T5857] Call trace: [ 70.835566][ T5857] dump_backtrace+0x1c4/0x1f0 [ 70.836592][ T5857] show_stack+0x2c/0x3c [ 70.837509][ T5857] __dump_stack+0x30/0x40 [ 70.838406][ T5857] dump_stack_lvl+0xf4/0x15c [ 70.839363][ T5857] dump_stack+0x1c/0x5c [ 70.840256][ T5857] should_fail_ex+0x3cc/0x524 [ 70.841282][ T5857] __should_failslab+0xc0/0x11c [ 70.842393][ T5857] should_failslab+0x10/0x28 [ 70.843436][ T5857] __kmem_cache_alloc_node+0x7c/0x318 [ 70.844631][ T5857] kmalloc_trace+0x48/0x94 [ 70.845491][ T5857] __arm64_sys_fanotify_init+0x354/0x668 [ 70.846629][ T5857] invoke_syscall+0x98/0x290 [ 70.847657][ T5857] el0_svc_common+0x13c/0x258 [ 70.848724][ T5857] do_el0_svc+0x5c/0x134 [ 70.849645][ T5857] el0_svc+0x58/0x12c [ 70.850526][ T5857] el0t_64_sync_handler+0x84/0xf0 [ 70.851516][ T5857] el0t_64_sync+0x18c/0x190 [ 71.280465][ T5873] loop4: detected capacity change from 0 to 2048 [ 71.403566][ T5883] loop2: detected capacity change from 0 to 2048 [ 71.462877][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.820982][ T5906] loop4: detected capacity change from 0 to 256 [ 71.827690][ T5906] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.890560][ T5906] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 71.901843][ T5906] FAT-fs (loop4): Filesystem has been set read-only [ 72.018782][ T5926] capability: warning: `syz.1.474' uses deprecated v2 capabilities in a way that may be insecure [ 72.248802][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 72.278284][ T5954] loop2: detected capacity change from 0 to 512 [ 72.374128][ T5954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.456008][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 72.476289][ T5981] loop0: detected capacity change from 0 to 128 [ 72.500376][ T5981] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.523527][ T5985] FAULT_INJECTION: forcing a failure. [ 72.523527][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 72.559555][ T5985] CPU: 0 PID: 5985 Comm: syz.2.489 Not tainted syzkaller #0 [ 72.561185][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.563379][ T5985] Call trace: [ 72.564084][ T5985] dump_backtrace+0x1c4/0x1f0 [ 72.565134][ T5985] show_stack+0x2c/0x3c [ 72.566084][ T5985] __dump_stack+0x30/0x40 [ 72.567028][ T5985] dump_stack_lvl+0xf4/0x15c [ 72.568034][ T5985] dump_stack+0x1c/0x5c [ 72.568951][ T5985] should_fail_ex+0x3cc/0x524 [ 72.570018][ T5985] __should_failslab+0xc0/0x11c [ 72.571084][ T5985] should_failslab+0x10/0x28 [ 72.572120][ T5985] __kmem_cache_alloc_node+0x7c/0x318 [ 72.573279][ T5985] kmalloc_trace+0x48/0x94 [ 72.574297][ T5985] nft_match_select_ops+0x19c/0x4c4 [ 72.575350][ T5985] nf_tables_expr_parse+0x668/0x8f0 [ 72.576454][ T5985] nft_set_elem_expr_alloc+0xcc/0x4a4 [ 72.577596][ T5985] nft_set_expr_alloc+0x74/0x630 [ 72.578718][ T5985] nf_tables_newset+0x15e0/0x1d28 [ 72.579842][ T5985] nfnetlink_rcv+0xc7c/0x1c54 [ 72.580880][ T5985] netlink_unicast+0x5fc/0x80c [ 72.581948][ T5985] netlink_sendmsg+0x6f0/0x9d8 [ 72.582985][ T5985] ____sys_sendmsg+0x588/0x90c [ 72.584030][ T5985] __sys_sendmsg+0x288/0x374 [ 72.585028][ T5985] __arm64_sys_sendmsg+0x80/0x94 [ 72.586101][ T5985] invoke_syscall+0x98/0x290 [ 72.587119][ T5985] el0_svc_common+0x13c/0x258 [ 72.588135][ T5985] do_el0_svc+0x5c/0x134 [ 72.589062][ T5985] el0_svc+0x58/0x12c [ 72.589931][ T5985] el0t_64_sync_handler+0x84/0xf0 [ 72.591034][ T5985] el0t_64_sync+0x18c/0x190 [ 72.592026][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.684077][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 73.068796][ T6012] tun0: tun_chr_ioctl cmd 21731 [ 73.142650][ T6020] loop4: detected capacity change from 0 to 256 [ 73.317010][ T6042] loop5: detected capacity change from 0 to 512 [ 73.322177][ T6043] loop4: detected capacity change from 0 to 512 [ 73.325264][ T6042] EXT4-fs (loop5): Test dummy encryption mode enabled [ 73.338431][ T6043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.516: bg 0: block 385: padding at end of block bitmap is not set [ 73.341856][ T6043] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 73.345720][ T6042] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.515: inode has both inline data and extents flags [ 73.347474][ T6043] EXT4-fs (loop4): 2 truncates cleaned up [ 73.349330][ T6043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.351889][ T6042] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.515: couldn't read orphan inode 15 (err -117) [ 73.376852][ T6042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.447367][ T6043] EXT4-fs (loop4): unmounting filesystem. [ 74.399429][ T6066] loop4: detected capacity change from 0 to 256 [ 74.428282][ T6066] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.678409][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 74.895303][ T6091] loop1: detected capacity change from 0 to 512 [ 74.902602][ T6091] EXT4-fs: Ignoring removed bh option [ 74.920041][ T6091] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 75.488436][ T6104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.507739][ T6104] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 75.693846][ T6088] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 75.720053][ T6091] EXT4-fs (loop1): 1 truncate cleaned up [ 75.721277][ T6091] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.964001][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 76.051551][ T6127] EXT4-fs (loop2): Test dummy encryption mode enabled [ 76.075556][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 76.078214][ T6127] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.539: inode has both inline data and extents flags [ 76.116850][ T6127] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.539: couldn't read orphan inode 15 (err -117) [ 76.141403][ T6127] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.468162][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 77.552715][ T6180] set_capacity_and_notify: 2 callbacks suppressed [ 77.552725][ T6180] loop4: detected capacity change from 0 to 1024 [ 77.586393][ T6180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.639667][ T6180] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.554: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 77.688422][ T4340] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /129/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 77.701169][ T4340] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /129/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 77.714746][ T4340] EXT4-fs error (device loop4): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 77.724110][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.733871][ T4340] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /129/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 77.749046][ T4340] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /129/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 77.757020][ T4340] EXT4-fs error (device loop4): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 77.757476][ T6159] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 77.769813][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.789756][ T4340] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /129/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 77.812851][ T4340] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /129/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 77.899268][ T4340] EXT4-fs error (device loop4): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 77.906653][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.916890][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.920556][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.927226][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.938310][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.005009][ T27] kauditd_printk_skb: 208 callbacks suppressed [ 78.005110][ T27] audit: type=1326 audit(77.990:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.1.556" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa69788e8 code=0x0 [ 78.258265][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.265974][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.271970][ T4340] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.501054][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 78.526678][ T6207] device batadv_slave_1 entered promiscuous mode [ 78.528406][ T6207] device syz_tun entered promiscuous mode [ 78.535793][ T6207] device veth0_virt_wifi entered promiscuous mode [ 78.537832][ T6206] device veth0_virt_wifi left promiscuous mode [ 78.539942][ T6206] device syz_tun left promiscuous mode [ 78.541437][ T6206] device batadv_slave_1 left promiscuous mode [ 78.695640][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 78.724877][ T6212] loop1: detected capacity change from 0 to 512 [ 78.894003][ T4332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.896990][ T4332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.899087][ T4332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.901859][ T4332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.904005][ T4332] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.907125][ T4332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.092217][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 79.119263][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.121112][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.123176][ T6224] device bridge_slave_0 entered promiscuous mode [ 79.127169][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.128877][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.135693][ T6224] device bridge_slave_1 entered promiscuous mode [ 79.157770][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.166709][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.200840][ T6224] team0: Port device team_slave_0 added [ 79.206881][ T6224] team0: Port device team_slave_1 added [ 79.226176][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.229520][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.246766][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.264562][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.268013][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.286862][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.371644][ T6224] device hsr_slave_0 entered promiscuous mode [ 79.424654][ T6224] device hsr_slave_1 entered promiscuous mode [ 79.578681][ T6224] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.598263][ T6224] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.644033][ T6224] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.666664][ T6224] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.730667][ T6264] nr0: tun_chr_ioctl cmd 1074025698 [ 79.751132][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.759487][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.761277][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.770557][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.775983][ T6266] loop5: detected capacity change from 0 to 512 [ 79.779463][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.781679][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.783653][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.785227][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.791942][ T6266] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 79.799862][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.801816][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.809429][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.811904][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.813448][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.815851][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.821301][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.838583][ T6224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.840805][ T6224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.843441][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.847172][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.849583][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.851663][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.853603][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.857703][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.859960][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.862033][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.867327][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.869369][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.815920][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.821436][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.823134][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.029858][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 81.233299][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.238150][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.253652][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.259556][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.265022][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.272314][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.285778][ T6224] device veth0_vlan entered promiscuous mode [ 81.289343][ T6224] device veth1_vlan entered promiscuous mode [ 81.322639][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.324612][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.326512][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.328299][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.340203][ T6224] device veth0_macvtap entered promiscuous mode [ 81.343106][ T6224] device veth1_macvtap entered promiscuous mode [ 81.381308][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.392512][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.401167][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.409948][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.415264][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.419774][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.423782][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.429532][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.433918][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.438569][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.443873][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.449411][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.451631][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.453448][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.458595][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.473461][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.476182][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.480737][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.486092][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.492600][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.502811][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.508733][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.514398][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.523003][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.527111][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.529076][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.538022][ T6224] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.543166][ T6224] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.547378][ T6224] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.551243][ T6224] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.063705][ T6341] loop2: detected capacity change from 0 to 512 [ 82.083876][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.088732][ T6341] EXT4-fs (loop2): Test dummy encryption mode enabled [ 82.094570][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.105256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.112627][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.114135][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.121156][ T6341] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.609: inode has both inline data and extents flags [ 82.124010][ T6341] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.609: couldn't read orphan inode 15 (err -117) [ 82.126776][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.161971][ T6341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.242542][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 83.243970][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 83.257114][ T6365] netlink: 'syz.6.616': attribute type 12 has an invalid length. [ 83.522309][ T6393] loop1: detected capacity change from 0 to 512 [ 83.531501][ T6393] EXT4-fs (loop1): Test dummy encryption mode enabled [ 83.544031][ T6393] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.629: inode has both inline data and extents flags [ 83.547779][ T6393] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.629: couldn't read orphan inode 15 (err -117) [ 83.563894][ T6393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.748725][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 84.919109][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.921661][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.924096][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.927280][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.928864][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.930426][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.008818][ T4425] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.014146][ T6423] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 85.118919][ T4425] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.133430][ T6441] loop5: detected capacity change from 0 to 128 [ 85.141602][ T6441] EXT4-fs (loop5): Test dummy encryption mode enabled [ 85.184334][ T6441] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 85.258770][ T6449] loop0: detected capacity change from 0 to 512 [ 85.266051][ T4425] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.270599][ T6449] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.275222][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 85.288583][ T6449] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.649: inode has both inline data and extents flags [ 85.292716][ T6449] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.649: couldn't read orphan inode 15 (err -117) [ 85.309409][ T6449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.627932][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 86.630291][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 86.790014][ T6464] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 [ 86.814385][ T6464] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 86.821717][ T6464] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 86.872319][ T6464] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 86.874017][ T6464] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 86.883071][ T4378] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 86.954378][ T4339] Bluetooth: hci1: command 0x0409 tx timeout [ 87.354514][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 89.044369][ T4339] Bluetooth: hci1: command 0x041b tx timeout [ 91.114410][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 93.194303][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 94.725598][ T4425] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.890964][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 95.106896][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.108872][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.114593][ T6425] device bridge_slave_0 entered promiscuous mode [ 95.211398][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.213397][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.221811][ T6425] device bridge_slave_1 entered promiscuous mode [ 95.372931][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.399972][ T6515] loop5: detected capacity change from 0 to 2048 [ 95.422347][ T6515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 95.560528][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.886951][ T6425] team0: Port device team_slave_0 added [ 95.891307][ T6425] team0: Port device team_slave_1 added [ 95.898635][ T6527] FAULT_INJECTION: forcing a failure. [ 95.898635][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 95.908461][ T6527] CPU: 1 PID: 6527 Comm: syz.6.670 Not tainted syzkaller #0 [ 95.909949][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 95.912044][ T6527] Call trace: [ 95.912711][ T6527] dump_backtrace+0x1c4/0x1f0 [ 95.913738][ T6527] show_stack+0x2c/0x3c [ 95.914619][ T6527] __dump_stack+0x30/0x40 [ 95.915578][ T6527] dump_stack_lvl+0xf4/0x15c [ 95.916545][ T6527] dump_stack+0x1c/0x5c [ 95.917397][ T6527] should_fail_ex+0x3cc/0x524 [ 95.918412][ T6527] __should_failslab+0xc0/0x11c [ 95.919490][ T6527] should_failslab+0x10/0x28 [ 95.920486][ T6527] __kmem_cache_alloc_node+0x7c/0x318 [ 95.921607][ T6527] __kmalloc_node_track_caller+0xb8/0x174 [ 95.922785][ T6527] kvasprintf+0x12c/0x204 [ 95.923761][ T6527] kasprintf+0xe8/0x13c [ 95.924705][ T6527] nf_tables_set_alloc_name+0xfc/0x634 [ 95.925911][ T6527] nf_tables_newset+0xec4/0x1d28 [ 95.926989][ T6527] nfnetlink_rcv+0xc7c/0x1c54 [ 95.928024][ T6527] netlink_unicast+0x5fc/0x80c [ 95.928937][ T6527] netlink_sendmsg+0x6f0/0x9d8 [ 95.929939][ T6527] ____sys_sendmsg+0x588/0x90c [ 95.930952][ T6527] __sys_sendmsg+0x288/0x374 [ 95.931947][ T6527] __arm64_sys_sendmsg+0x80/0x94 [ 95.932967][ T6527] invoke_syscall+0x98/0x290 [ 95.933864][ T6527] el0_svc_common+0x13c/0x258 [ 95.934841][ T6527] do_el0_svc+0x5c/0x134 [ 95.935707][ T6527] el0_svc+0x58/0x12c [ 95.936599][ T6527] el0t_64_sync_handler+0x84/0xf0 [ 95.937670][ T6527] el0t_64_sync+0x18c/0x190 [ 95.972678][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.975665][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.985562][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.993393][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.997524][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.013654][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.433791][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 96.449636][ T6425] device hsr_slave_0 entered promiscuous mode [ 96.466790][ T6425] device hsr_slave_1 entered promiscuous mode [ 96.494405][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.497054][ T6425] Cannot create hsr debugfs directory [ 96.790731][ T6546] loop5: detected capacity change from 0 to 2048 [ 97.131128][ T6546] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 97.226397][ T6546] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 97.980045][ T6425] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.058569][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 98.067653][ T6425] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.239130][ T6569] loop0: detected capacity change from 0 to 256 [ 98.460592][ T6425] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.496422][ T6425] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 99.130895][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.228736][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.231123][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.235109][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.240419][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.243409][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.247171][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.248596][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.250492][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.252505][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.257002][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.258449][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.268278][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.272205][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.361873][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.402834][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.450380][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.504568][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.557122][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.561220][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.563651][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.572668][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.596792][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.635137][ T6601] loop1: detected capacity change from 0 to 512 [ 99.638644][ T6601] EXT4-fs: Ignoring removed bh option [ 99.640517][ T6601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.647315][ T6601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.681422][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 99.801364][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.803687][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.938038][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.939729][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.943589][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.421850][ T4425] device hsr_slave_0 left promiscuous mode [ 100.434771][ T4425] device hsr_slave_1 left promiscuous mode [ 100.504434][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.506105][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.508152][ T4425] device bridge_slave_1 left promiscuous mode [ 100.511132][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.544909][ T4425] device bridge_slave_0 left promiscuous mode [ 100.546457][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.634574][ T4425] device veth1_macvtap left promiscuous mode [ 100.635987][ T4425] device veth0_macvtap left promiscuous mode [ 100.637266][ T4425] device veth1_vlan left promiscuous mode [ 100.638417][ T4425] device veth0_vlan left promiscuous mode [ 100.953161][ T6645] loop5: detected capacity change from 0 to 256 [ 102.510556][ T6663] loop5: detected capacity change from 0 to 2048 [ 102.544080][ T6663] loop5: p1 p4 [ 102.544080][ T6663] p1: [ 102.546653][ T6663] loop5: partition table partially beyond EOD, truncated [ 102.548533][ T6663] loop5: p4 start 184549376 is beyond EOD, truncated [ 102.550270][ T6663] loop5: p6 start 184549376 is beyond EOD, truncated [ 102.555667][ T3938] loop5: p1 p4 [ 102.555667][ T3938] p1: [ 102.557173][ T3938] loop5: partition table partially beyond EOD, truncated [ 102.559389][ T3938] loop5: p4 start 184549376 is beyond EOD, truncated [ 102.561123][ T3938] loop5: p6 start 184549376 is beyond EOD, truncated [ 102.597941][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 102.909299][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 103.055881][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.205181][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.621133][ T6680] loop5: detected capacity change from 0 to 512 [ 103.630338][ T6680] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 104.605296][ T4425] bond0 (unregistering): Released all slaves [ 104.839604][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.720'. [ 104.867400][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 104.876671][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.878750][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.890917][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.892779][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.903568][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.906762][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.908399][ T6425] device veth0_vlan entered promiscuous mode [ 104.912993][ T6425] device veth1_vlan entered promiscuous mode [ 104.920831][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.922834][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.932409][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.940132][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.963538][ T6425] device veth0_macvtap entered promiscuous mode [ 104.971074][ T6425] device veth1_macvtap entered promiscuous mode [ 104.976912][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.978998][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.981221][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.983018][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.989309][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.989369][ T6697] FAULT_INJECTION: forcing a failure. [ 104.989369][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 104.991246][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.993857][ T6697] CPU: 1 PID: 6697 Comm: syz.5.724 Not tainted syzkaller #0 [ 104.996196][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.997495][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 104.999488][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.001486][ T6697] Call trace: [ 105.001494][ T6697] dump_backtrace+0x1c4/0x1f0 [ 105.003188][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.003750][ T6697] show_stack+0x2c/0x3c [ 105.004956][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.006725][ T6697] __dump_stack+0x30/0x40 [ 105.008539][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.009559][ T6697] dump_stack_lvl+0xf4/0x15c [ 105.013252][ T6697] dump_stack+0x1c/0x5c [ 105.014151][ T6697] should_fail_ex+0x3cc/0x524 [ 105.015173][ T6697] __should_failslab+0xc0/0x11c [ 105.016353][ T6697] should_failslab+0x10/0x28 [ 105.017371][ T6697] kmem_cache_alloc+0x88/0x310 [ 105.018266][ T6697] __alloc_file+0x30/0x234 [ 105.019200][ T6697] alloc_empty_file+0xa0/0x184 [ 105.020215][ T6697] alloc_file+0x64/0x564 [ 105.021088][ T6697] alloc_file_pseudo+0x16c/0x1f4 [ 105.022160][ T6697] anon_inode_getfd+0xe8/0x1a8 [ 105.023206][ T6697] __arm64_sys_fanotify_init+0x550/0x668 [ 105.024498][ T6697] invoke_syscall+0x98/0x290 [ 105.025515][ T6697] el0_svc_common+0x13c/0x258 [ 105.026573][ T6697] do_el0_svc+0x5c/0x134 [ 105.027521][ T6697] el0_svc+0x58/0x12c [ 105.028365][ T6697] el0t_64_sync_handler+0x84/0xf0 [ 105.029472][ T6697] el0t_64_sync+0x18c/0x190 [ 105.037515][ T6695] loop6: detected capacity change from 0 to 2048 [ 105.039331][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.041276][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.042929][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.044977][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.048771][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.050879][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.052675][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.065494][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.067704][ T6695] loop6: p1 p4 [ 105.067704][ T6695] p1: [ 105.069100][ T6695] loop6: partition table partially beyond EOD, truncated [ 105.071325][ T6695] loop6: p4 start 184549376 is beyond EOD, truncated [ 105.072989][ T6695] loop6: p6 start 184549376 is beyond EOD, truncated [ 105.079759][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.081505][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.083443][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.095091][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.097006][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.099104][ T3938] loop6: p1 p4 [ 105.099104][ T3938] p1: [ 105.100459][ T3938] loop6: partition table partially beyond EOD, truncated [ 105.102168][ T3938] loop6: p4 start 184549376 is beyond EOD, truncated [ 105.103788][ T3938] loop6: p6 start 184549376 is beyond EOD, truncated [ 105.115784][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.119445][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.121275][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.123582][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.130327][ T6425] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.132165][ T6425] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.134031][ T6425] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.154321][ T6425] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.178566][ T6702] loop6: detected capacity change from 0 to 512 [ 105.197715][ T6702] EXT4-fs (loop6): Test dummy encryption mode enabled [ 105.225065][ T6702] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.725: inode has both inline data and extents flags [ 105.227827][ T6702] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.725: couldn't read orphan inode 15 (err -117) [ 105.230184][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.231743][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.233613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.233646][ T6702] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 105.270564][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.272485][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.276741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.865433][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 106.949067][ T6731] loop7: detected capacity change from 0 to 2048 [ 106.971979][ T6731] loop7: p1 p4 [ 106.971979][ T6731] p1: [ 106.975429][ T6731] loop7: partition table partially beyond EOD, truncated [ 106.982055][ T6731] loop7: p4 start 184549376 is beyond EOD, truncated [ 106.984729][ T6731] loop7: p6 start 184549376 is beyond EOD, truncated [ 106.992594][ T3938] loop7: p1 p4 [ 106.992594][ T3938] p1: [ 106.994094][ T3938] loop7: partition table partially beyond EOD, truncated [ 106.996382][ T3938] loop7: p4 start 184549376 is beyond EOD, truncated [ 106.997973][ T3938] loop7: p6 start 184549376 is beyond EOD, truncated [ 107.641243][ T6752] loop1: detected capacity change from 0 to 256 [ 107.908671][ T6754] loop6: detected capacity change from 0 to 512 [ 107.946320][ T6754] EXT4-fs (loop6): Test dummy encryption mode enabled [ 107.989464][ T6765] loop7: detected capacity change from 0 to 512 [ 107.991028][ T6765] EXT4-fs: Ignoring removed bh option [ 107.991614][ T6754] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.743: inode has both inline data and extents flags [ 107.997213][ T6765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.002973][ T6754] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.743: couldn't read orphan inode 15 (err -117) [ 108.011861][ T6767] loop5: detected capacity change from 0 to 2048 [ 108.018742][ T6754] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 108.036775][ T6767] loop5: p1 p4 [ 108.036775][ T6767] p1: [ 108.040425][ T6767] loop5: partition table partially beyond EOD, truncated [ 108.047451][ T6767] loop5: p4 start 184549376 is beyond EOD, truncated [ 108.053481][ T6767] loop5: p6 start 184549376 is beyond EOD, truncated [ 108.068757][ T6765] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 108.083657][ T3938] loop5: p1 p4 [ 108.083657][ T3938] p1: [ 108.091863][ T3938] loop5: partition table partially beyond EOD, truncated [ 108.101797][ T3938] loop5: p4 start 184549376 is beyond EOD, truncated [ 108.101973][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 108.107707][ T3938] loop5: p6 start 184549376 is beyond EOD, truncated [ 109.111059][ T6786] loop7: detected capacity change from 0 to 2048 [ 110.304625][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 110.318887][ T6786] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 110.433912][ T6802] loop5: detected capacity change from 0 to 2048 [ 110.509370][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 110.528010][ T6802] loop5: p1 p4 [ 110.528010][ T6802] p1: [ 110.529700][ T6802] loop5: partition table partially beyond EOD, truncated [ 110.531499][ T6802] loop5: p4 start 184549376 is beyond EOD, truncated [ 110.534964][ T6802] loop5: p6 start 184549376 is beyond EOD, truncated [ 110.543433][ T3938] loop5: p1 p4 [ 110.543433][ T3938] p1: [ 110.547408][ T3938] loop5: partition table partially beyond EOD, truncated [ 110.551598][ T3938] loop5: p4 start 184549376 is beyond EOD, truncated [ 110.835461][ T3938] loop5: p6 start 184549376 is beyond EOD, truncated [ 110.925966][ T6819] loop5: detected capacity change from 0 to 256 [ 111.426848][ T6836] loop7: detected capacity change from 0 to 256 [ 111.899761][ T6843] loop6: detected capacity change from 0 to 2048 [ 112.087822][ T6843] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 112.096028][ T6843] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 112.339533][ T6851] loop0: detected capacity change from 0 to 2048 [ 112.838864][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 112.860053][ T6851] loop0: p1 p4 [ 112.860053][ T6851] p1: [ 112.861512][ T6851] loop0: partition table partially beyond EOD, truncated [ 112.864591][ T6851] loop0: p4 start 184549376 is beyond EOD, truncated [ 112.889311][ T6851] loop0: p6 start 184549376 is beyond EOD, truncated [ 113.159991][ T3938] loop0: p1 p4 [ 113.159991][ T3938] p1: [ 113.161787][ T3938] loop0: partition table partially beyond EOD, truncated [ 113.165603][ T3938] loop0: p4 start 184549376 is beyond EOD, truncated [ 113.167352][ T3938] loop0: p6 start 184549376 is beyond EOD, truncated [ 113.242413][ T6874] loop0: detected capacity change from 0 to 512 [ 113.268077][ T6879] device syzkaller0 entered promiscuous mode [ 113.275595][ T6874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.411130][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 114.057277][ T6912] loop1: detected capacity change from 0 to 256 [ 114.387262][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 114.442104][ T6923] fuse: Bad value for 'fd' [ 115.040230][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.7.816'. [ 115.142895][ T6954] fuse: Bad value for 'fd' [ 115.145119][ T6955] device syzkaller0 entered promiscuous mode [ 115.372861][ T6961] loop5: detected capacity change from 0 to 256 [ 116.013152][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 116.141022][ T6986] loop5: detected capacity change from 0 to 256 [ 116.948828][ T7002] loop0: detected capacity change from 0 to 256 [ 117.041853][ T7005] loop1: detected capacity change from 0 to 2048 [ 117.066019][ T7005] loop1: p1 p4 [ 117.066019][ T7005] p1: [ 117.334052][ T7005] loop1: partition table partially beyond EOD, truncated [ 117.336227][ T7005] loop1: p4 start 184549376 is beyond EOD, truncated [ 117.337868][ T7005] loop1: p6 start 184549376 is beyond EOD, truncated [ 117.528009][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.841'. [ 117.583244][ T7024] device syzkaller0 entered promiscuous mode [ 118.980467][ T7046] loop5: detected capacity change from 0 to 2048 [ 119.550091][ T7046] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 119.572152][ T7046] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 119.769386][ T7051] loop1: detected capacity change from 0 to 2048 [ 119.782971][ T7057] loop0: detected capacity change from 0 to 256 [ 120.292940][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 120.300144][ T7051] loop1: p1 p4 [ 120.300144][ T7051] p1: [ 120.301866][ T7051] loop1: partition table partially beyond EOD, truncated [ 120.314824][ T7051] loop1: p4 start 184549376 is beyond EOD, truncated [ 120.323507][ T7051] loop1: p6 start 184549376 is beyond EOD, truncated [ 120.329547][ T3938] loop1: p1 p4 [ 120.329547][ T3938] p1: [ 120.331052][ T3938] loop1: partition table partially beyond EOD, truncated [ 120.335782][ T3938] loop1: p4 start 184549376 is beyond EOD, truncated [ 120.338951][ T3938] loop1: p6 start 184549376 is beyond EOD, truncated [ 120.340230][ T7069] loop5: detected capacity change from 0 to 256 [ 120.758330][ T7077] loop1: detected capacity change from 0 to 256 [ 121.247579][ T7087] loop7: detected capacity change from 0 to 512 [ 121.275979][ T7087] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 121.394671][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.861'. [ 121.809332][ T7104] loop1: detected capacity change from 0 to 256 [ 122.090126][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 122.107575][ T7110] loop0: detected capacity change from 0 to 512 [ 122.109946][ T7110] EXT4-fs (loop0): Test dummy encryption mode enabled [ 122.112976][ T7110] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.869: inode has both inline data and extents flags [ 122.116862][ T7110] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.869: couldn't read orphan inode 15 (err -117) [ 122.119290][ T7110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 122.988071][ T7124] fuse: Bad value for 'fd' [ 123.127233][ T7134] loop6: detected capacity change from 0 to 256 [ 123.558235][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 123.696828][ T7149] loop0: detected capacity change from 0 to 512 [ 123.991389][ T7149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.022027][ T7154] binder: 7150:7154 tried to acquire reference to desc 0, got 1 instead [ 124.023895][ T7154] binder_alloc: 7150: binder_alloc_buf, no vma [ 124.030702][ T7154] binder: cannot allocate buffer: vma cleared, target dead or dying [ 124.030744][ T7154] binder: 7150:7154 transaction call to 7150:0 failed 5/29189/-3, size 0-0 line 3247 [ 124.040890][ T4374] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.103091][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 124.491950][ T7163] loop7: detected capacity change from 0 to 256 [ 124.547982][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 124.585947][ T7176] loop0: detected capacity change from 0 to 512 [ 124.588214][ T7176] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.592178][ T7176] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.891: inode has both inline data and extents flags [ 124.598131][ T7176] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.891: couldn't read orphan inode 15 (err -117) [ 124.600391][ T7176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.965295][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.966686][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.023042][ T7200] loop6: detected capacity change from 0 to 512 [ 126.050388][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 126.051820][ T7200] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 126.089839][ T7204] loop5: detected capacity change from 0 to 256 [ 126.182740][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.902'. [ 126.531061][ T7222] FAULT_INJECTION: forcing a failure. [ 126.531061][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 126.534044][ T7222] CPU: 1 PID: 7222 Comm: syz.1.908 Not tainted syzkaller #0 [ 126.535745][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 126.537709][ T7222] Call trace: [ 126.538399][ T7222] dump_backtrace+0x1c4/0x1f0 [ 126.539495][ T7222] show_stack+0x2c/0x3c [ 126.540423][ T7222] __dump_stack+0x30/0x40 [ 126.541376][ T7222] dump_stack_lvl+0xf4/0x15c [ 126.542445][ T7222] dump_stack+0x1c/0x5c [ 126.543267][ T7222] should_fail_ex+0x3cc/0x524 [ 126.544323][ T7222] __should_failslab+0xc0/0x11c [ 126.545403][ T7222] should_failslab+0x10/0x28 [ 126.546397][ T7222] __kmem_cache_alloc_node+0x7c/0x318 [ 126.547503][ T7222] __kmalloc_node+0xc8/0x184 [ 126.548466][ T7222] kvmalloc_node+0x88/0x1d4 [ 126.549505][ T7222] rhashtable_init+0x3b0/0xa10 [ 126.550473][ T7222] nft_rhash_init+0xf0/0x358 [ 126.551531][ T7222] nf_tables_newset+0x15a4/0x1d28 [ 126.552690][ T7222] nfnetlink_rcv+0xc7c/0x1c54 [ 126.553746][ T7222] netlink_unicast+0x5fc/0x80c [ 126.554823][ T7222] netlink_sendmsg+0x6f0/0x9d8 [ 126.555796][ T7222] ____sys_sendmsg+0x588/0x90c [ 126.556836][ T7222] __sys_sendmsg+0x288/0x374 [ 126.557819][ T7222] __arm64_sys_sendmsg+0x80/0x94 [ 126.558934][ T7222] invoke_syscall+0x98/0x290 [ 126.559839][ T7222] el0_svc_common+0x13c/0x258 [ 126.560826][ T7222] do_el0_svc+0x5c/0x134 [ 126.561723][ T7222] el0_svc+0x58/0x12c [ 126.562594][ T7222] el0t_64_sync_handler+0x84/0xf0 [ 126.563675][ T7222] el0t_64_sync+0x18c/0x190 [ 126.564694][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.632311][ T7223] loop0: detected capacity change from 0 to 256 [ 126.700374][ T7228] loop0: detected capacity change from 0 to 512 [ 126.707601][ T7228] EXT4-fs: Ignoring removed bh option [ 126.716091][ T7228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.744026][ T7228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.866093][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 127.159907][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 127.357383][ T7255] loop6: detected capacity change from 0 to 256 [ 127.471485][ T7263] FAULT_INJECTION: forcing a failure. [ 127.471485][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 127.478792][ T7263] CPU: 0 PID: 7263 Comm: syz.6.925 Not tainted syzkaller #0 [ 127.480300][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 127.482633][ T7263] Call trace: [ 127.483380][ T7263] dump_backtrace+0x1c4/0x1f0 [ 127.484445][ T7263] show_stack+0x2c/0x3c [ 127.485359][ T7263] __dump_stack+0x30/0x40 [ 127.486305][ T7263] dump_stack_lvl+0xf4/0x15c [ 127.487332][ T7263] dump_stack+0x1c/0x5c [ 127.488305][ T7263] should_fail_ex+0x3cc/0x524 [ 127.489323][ T7263] __should_failslab+0xc0/0x11c [ 127.490302][ T7263] should_failslab+0x10/0x28 [ 127.491265][ T7263] __kmem_cache_alloc_node+0x7c/0x318 [ 127.492345][ T7263] __kmalloc_node_track_caller+0xb8/0x174 [ 127.493576][ T7263] kvasprintf+0x12c/0x204 [ 127.494540][ T7263] kasprintf+0xe8/0x13c [ 127.495404][ T7263] nf_tables_set_alloc_name+0xfc/0x634 [ 127.496508][ T7263] nf_tables_newset+0xec4/0x1d28 [ 127.497420][ T7263] nfnetlink_rcv+0xc7c/0x1c54 [ 127.498311][ T7263] netlink_unicast+0x5fc/0x80c [ 127.499276][ T7263] netlink_sendmsg+0x6f0/0x9d8 [ 127.500261][ T7263] ____sys_sendmsg+0x588/0x90c [ 127.501165][ T7263] __sys_sendmsg+0x288/0x374 [ 127.502075][ T7263] __arm64_sys_sendmsg+0x80/0x94 [ 127.503045][ T7263] invoke_syscall+0x98/0x290 [ 127.503998][ T7263] el0_svc_common+0x13c/0x258 [ 127.504969][ T7263] do_el0_svc+0x5c/0x134 [ 127.505927][ T7263] el0_svc+0x58/0x12c [ 127.506790][ T7263] el0t_64_sync_handler+0x84/0xf0 [ 127.507846][ T7263] el0t_64_sync+0x18c/0x190 [ 127.729193][ T7285] loop5: detected capacity change from 0 to 256 [ 127.792038][ T7287] loop1: detected capacity change from 0 to 256 [ 128.883627][ T7341] loop1: detected capacity change from 0 to 256 [ 128.986102][ T7339] device wlan0 entered promiscuous mode [ 129.359223][ T7351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.360698][ T7351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.362922][ T7351] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 129.367573][ T7351] EXT4-fs (loop0): 1 truncate cleaned up [ 129.368788][ T7351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.391887][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 129.680458][ T7363] set_capacity_and_notify: 1 callbacks suppressed [ 129.680484][ T7363] loop6: detected capacity change from 0 to 2048 [ 130.037155][ T7363] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 130.056585][ T7363] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 130.570156][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 130.579071][ T7383] loop7: detected capacity change from 0 to 256 [ 130.592939][ T7387] loop6: detected capacity change from 0 to 512 [ 130.595065][ T7387] EXT4-fs (loop6): Test dummy encryption mode enabled [ 130.870337][ T7387] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.976: inode has both inline data and extents flags [ 130.881705][ T7387] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.976: couldn't read orphan inode 15 (err -117) [ 130.890072][ T7387] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 130.963092][ T7394] loop1: detected capacity change from 0 to 512 [ 131.478748][ T7394] EXT4-fs: Ignoring removed bh option [ 131.481336][ T7394] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.510671][ T7394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.543272][ T7400] loop5: detected capacity change from 0 to 256 [ 132.094151][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 132.142102][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 132.517091][ T7433] loop1: detected capacity change from 0 to 2048 [ 133.626494][ T7433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.633289][ T7428] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 133.691362][ T7445] FAULT_INJECTION: forcing a failure. [ 133.691362][ T7445] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.712949][ T7445] CPU: 1 PID: 7445 Comm: syz.6.996 Not tainted syzkaller #0 [ 133.714502][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 133.716621][ T7445] Call trace: [ 133.717366][ T7445] dump_backtrace+0x1c4/0x1f0 [ 133.718408][ T7445] show_stack+0x2c/0x3c [ 133.719244][ T7445] __dump_stack+0x30/0x40 [ 133.720178][ T7445] dump_stack_lvl+0xf4/0x15c [ 133.721192][ T7445] dump_stack+0x1c/0x5c [ 133.722160][ T7445] should_fail_ex+0x3cc/0x524 [ 133.723125][ T7445] should_fail+0x14/0x24 [ 133.724033][ T7445] should_fail_usercopy+0x20/0x30 [ 133.725136][ T7445] udp_lib_setsockopt+0x170/0x97c [ 133.726169][ T7445] udpv6_setsockopt+0x84/0xc0 [ 133.727112][ T7445] sock_common_setsockopt+0xb0/0xcc [ 133.728219][ T7445] __sys_setsockopt+0x2fc/0x50c [ 133.729231][ T7445] __arm64_sys_setsockopt+0xc0/0xdc [ 133.730245][ T7445] invoke_syscall+0x98/0x290 [ 133.731203][ T7445] el0_svc_common+0x13c/0x258 [ 133.732196][ T7445] do_el0_svc+0x5c/0x134 [ 133.733111][ T7445] el0_svc+0x58/0x12c [ 133.733973][ T7445] el0t_64_sync_handler+0x84/0xf0 [ 133.735065][ T7445] el0t_64_sync+0x18c/0x190 [ 133.736011][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.786184][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 133.807860][ T7452] loop5: detected capacity change from 0 to 512 [ 133.827726][ T7452] EXT4-fs (loop5): Test dummy encryption mode enabled [ 133.840920][ T7458] loop0: detected capacity change from 0 to 512 [ 133.845730][ T7460] loop1: detected capacity change from 0 to 256 [ 133.857300][ T7452] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.999: inode has both inline data and extents flags [ 133.860163][ T7452] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.999: couldn't read orphan inode 15 (err -117) [ 133.885129][ T7452] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 133.976653][ T7458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.192009][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 134.762394][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 134.937720][ T7479] loop0: detected capacity change from 0 to 256 [ 135.525953][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 135.851995][ T7492] loop7: detected capacity change from 0 to 128 [ 135.862963][ T7492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 135.865008][ T7492] System zones: 1-3, 19-19, 35-36 [ 135.866709][ T7492] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 135.995361][ T7502] loop6: detected capacity change from 0 to 512 [ 136.411626][ T7511] loop0: detected capacity change from 0 to 512 [ 136.431247][ T7511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.824724][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 136.920330][ T7521] loop7: detected capacity change from 0 to 256 [ 137.326057][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 138.193291][ T7561] FAULT_INJECTION: forcing a failure. [ 138.193291][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 138.196192][ T7561] CPU: 0 PID: 7561 Comm: syz.5.1034 Not tainted syzkaller #0 [ 138.197490][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 138.199303][ T7561] Call trace: [ 138.199862][ T7561] dump_backtrace+0x1c4/0x1f0 [ 138.200854][ T7561] show_stack+0x2c/0x3c [ 138.201788][ T7561] __dump_stack+0x30/0x40 [ 138.202743][ T7561] dump_stack_lvl+0xf4/0x15c [ 138.203820][ T7561] dump_stack+0x1c/0x5c [ 138.204770][ T7561] should_fail_ex+0x3cc/0x524 [ 138.205820][ T7561] __should_failslab+0xc0/0x11c [ 138.206914][ T7561] should_failslab+0x10/0x28 [ 138.207987][ T7561] kmem_cache_alloc+0x88/0x310 [ 138.209036][ T7561] pte_alloc_one+0x78/0x254 [ 138.209898][ T7561] copy_page_range+0x223c/0x29b4 [ 138.210899][ T7561] copy_mm+0xb08/0x1208 [ 138.211758][ T7561] copy_process+0x16d8/0x38b4 [ 138.212588][ T7561] kernel_clone+0x1ec/0x938 [ 138.213485][ T7561] __arm64_sys_clone+0x15c/0x1c8 [ 138.214480][ T7561] invoke_syscall+0x98/0x290 [ 138.215306][ T7561] el0_svc_common+0x13c/0x258 [ 138.216215][ T7561] do_el0_svc+0x5c/0x134 [ 138.217069][ T7561] el0_svc+0x58/0x12c [ 138.217873][ T7561] el0t_64_sync_handler+0x84/0xf0 [ 138.218813][ T7561] el0t_64_sync+0x18c/0x190 [ 138.407946][ T7572] loop5: detected capacity change from 0 to 512 [ 138.427437][ T7572] EXT4-fs (loop5): Test dummy encryption mode enabled [ 138.514703][ T7572] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1036: inode has both inline data and extents flags [ 138.517734][ T7572] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1036: couldn't read orphan inode 15 (err -117) [ 138.527408][ T7572] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 138.673200][ T7591] netlink: 'syz.7.1046': attribute type 2 has an invalid length. [ 138.896876][ T7621] FAULT_INJECTION: forcing a failure. [ 138.896876][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 138.916559][ T7621] CPU: 1 PID: 7621 Comm: syz.6.1057 Not tainted syzkaller #0 [ 138.918133][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 138.920275][ T7621] Call trace: [ 138.920928][ T7621] dump_backtrace+0x1c4/0x1f0 [ 138.921911][ T7621] show_stack+0x2c/0x3c [ 138.922730][ T7621] __dump_stack+0x30/0x40 [ 138.923644][ T7621] dump_stack_lvl+0xf4/0x15c [ 138.924625][ T7621] dump_stack+0x1c/0x5c [ 138.925562][ T7621] should_fail_ex+0x3cc/0x524 [ 138.926624][ T7621] __should_failslab+0xc0/0x11c [ 138.927720][ T7621] should_failslab+0x10/0x28 [ 138.928725][ T7621] __kmem_cache_alloc_node+0x7c/0x318 [ 138.929822][ T7621] kmalloc_node_trace+0x44/0x90 [ 138.930765][ T7621] bdi_alloc+0x5c/0x150 [ 138.931683][ T7621] __alloc_disk_node+0xb8/0x438 [ 138.932745][ T7621] __blk_alloc_disk+0x40/0xb8 [ 138.933688][ T7621] md_alloc+0x4c4/0xb3c [ 138.934526][ T7621] md_alloc_and_put+0x28/0x98 [ 138.935558][ T7621] add_named_array+0x2fc/0x3f0 [ 138.936623][ T7621] param_attr_store+0x1cc/0x2ac [ 138.937649][ T7621] module_attr_store+0x6c/0x94 [ 138.938626][ T7621] sysfs_kf_write+0x1f8/0x274 [ 138.939633][ T7621] kernfs_fop_write_iter+0x390/0x4b4 [ 138.940779][ T7621] vfs_write+0x3c8/0x7c8 [ 138.941762][ T7621] ksys_write+0x12c/0x228 [ 138.942684][ T7621] __arm64_sys_write+0x7c/0x90 [ 138.943766][ T7621] invoke_syscall+0x98/0x290 [ 138.944801][ T7621] el0_svc_common+0x13c/0x258 [ 138.945874][ T7621] do_el0_svc+0x5c/0x134 [ 138.946840][ T7621] el0_svc+0x58/0x12c [ 138.947755][ T7621] el0t_64_sync_handler+0x84/0xf0 [ 138.948928][ T7621] el0t_64_sync+0x18c/0x190 [ 138.950034][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.232691][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 139.361621][ T7646] FAULT_INJECTION: forcing a failure. [ 139.361621][ T7646] name fail_futex, interval 1, probability 0, space 0, times 1 [ 139.366692][ T7646] CPU: 0 PID: 7646 Comm: syz.5.1064 Not tainted syzkaller #0 [ 139.368389][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 139.370716][ T7646] Call trace: [ 139.371464][ T7646] dump_backtrace+0x1c4/0x1f0 [ 139.372532][ T7646] show_stack+0x2c/0x3c [ 139.373430][ T7646] __dump_stack+0x30/0x40 [ 139.374389][ T7646] dump_stack_lvl+0xf4/0x15c [ 139.375360][ T7646] dump_stack+0x1c/0x5c [ 139.376231][ T7646] should_fail_ex+0x3cc/0x524 [ 139.377225][ T7646] should_fail+0x14/0x24 [ 139.378199][ T7646] get_futex_key+0x904/0xfb0 [ 139.379224][ T7646] futex_wait_setup+0xbc/0x320 [ 139.380272][ T7646] futex_wait+0x164/0x424 [ 139.381216][ T7646] do_futex+0x2e8/0x340 [ 139.382151][ T7646] __arm64_sys_futex+0x390/0x414 [ 139.383270][ T7646] invoke_syscall+0x98/0x290 [ 139.384292][ T7646] el0_svc_common+0x13c/0x258 [ 139.385337][ T7646] do_el0_svc+0x5c/0x134 [ 139.386284][ T7646] el0_svc+0x58/0x12c [ 139.387192][ T7646] el0t_64_sync_handler+0x84/0xf0 [ 139.388323][ T7646] el0t_64_sync+0x18c/0x190 [ 139.595288][ T7653] loop6: detected capacity change from 0 to 256 [ 140.032911][ T7660] loop7: detected capacity change from 0 to 128 [ 140.109378][ T7660] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 140.961696][ T7660] EXT4-fs (loop7): shut down requested (2) [ 141.410385][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 141.811166][ T7700] loop0: detected capacity change from 0 to 512 [ 141.813281][ T7700] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.820722][ T7700] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1083: invalid indirect mapped block 9 (level 0) [ 141.826810][ T7700] EXT4-fs (loop0): 1 truncate cleaned up [ 141.828674][ T7700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.846741][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 142.025010][ T7717] phram: not enough arguments [ 142.360148][ T7744] phram: not enough arguments [ 142.625734][ T7778] phram: not enough arguments [ 142.692628][ T7784] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 142.783385][ T7791] loop0: detected capacity change from 0 to 512 [ 142.785870][ T7791] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.798307][ T7791] EXT4-fs (loop0): 1 truncate cleaned up [ 142.804936][ T7791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.839759][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 142.885794][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 142.887631][ T7803] bond0: Unable to set up delay as MII monitoring is disabled [ 142.903911][ T7808] phram: not enough arguments [ 143.013607][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1136'. [ 143.092432][ T7832] fuse: Bad value for 'fd' [ 143.220756][ T7842] loop7: detected capacity change from 0 to 512 [ 143.252622][ T7842] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 143.299064][ T7842] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.1144: corrupted xattr block 33 [ 143.338844][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 143.458718][ T7860] fuse: Bad value for 'fd' [ 144.133964][ T7878] loop0: detected capacity change from 0 to 2048 [ 144.170374][ T7878] loop0: p1 p4 [ 144.170374][ T7878] p1: [ 144.172030][ T7878] loop0: partition table partially beyond EOD, truncated [ 144.175442][ T7878] loop0: p4 start 184549376 is beyond EOD, truncated [ 144.180487][ T7878] loop0: p6 start 184549376 is beyond EOD, truncated [ 144.192196][ T3938] loop0: p1 p4 [ 144.192196][ T3938] p1: [ 144.193839][ T3938] loop0: partition table partially beyond EOD, truncated [ 144.197181][ T3938] loop0: p4 start 184549376 is beyond EOD, truncated [ 144.199100][ T3938] loop0: p6 start 184549376 is beyond EOD, truncated [ 144.242689][ T7884] loop6: detected capacity change from 0 to 4096 [ 144.244757][ T7884] EXT4-fs: Ignoring removed orlov option [ 144.246853][ T7884] EXT4-fs (loop6): Test dummy encryption mode enabled [ 144.251032][ T7884] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 144.260464][ T7884] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1160: bg 0: block 449: padding at end of block bitmap is not set [ 144.272279][ T7884] EXT4-fs (loop6): Remounting filesystem read-only [ 144.307208][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 144.381078][ T7898] loop6: detected capacity change from 0 to 512 [ 144.383333][ T7898] EXT4-fs (loop6): Test dummy encryption mode enabled [ 144.447818][ T7898] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1165: inode has both inline data and extents flags [ 144.450855][ T7898] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1165: couldn't read orphan inode 15 (err -117) [ 144.453426][ T7898] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 144.503573][ T7912] loop7: detected capacity change from 0 to 256 [ 146.082068][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 146.340401][ T7962] loop6: detected capacity change from 0 to 256 [ 146.606653][ T7966] loop7: detected capacity change from 0 to 512 [ 146.639624][ T7966] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 147.118971][ T4418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.164638][ T7980] bonding: no command found in bonding_masters - use +ifname or -ifname [ 147.204753][ T4418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.282191][ T4418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.330748][ T7998] loop0: detected capacity change from 0 to 2048 [ 147.353951][ T7998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 147.373887][ T4418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.392758][ T4334] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 147.418460][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 147.453774][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 147.477132][ T8006] phram: illegal erasesize or len [ 147.540187][ T8013] FAULT_INJECTION: forcing a failure. [ 147.540187][ T8013] name failslab, interval 1, probability 0, space 0, times 0 [ 147.551578][ T8013] CPU: 1 PID: 8013 Comm: syz.7.1207 Not tainted syzkaller #0 [ 147.552997][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 147.555261][ T8013] Call trace: [ 147.555943][ T8013] dump_backtrace+0x1c4/0x1f0 [ 147.556943][ T8013] show_stack+0x2c/0x3c [ 147.557831][ T8013] __dump_stack+0x30/0x40 [ 147.558832][ T8013] dump_stack_lvl+0xf4/0x15c [ 147.559871][ T8013] dump_stack+0x1c/0x5c [ 147.560821][ T8013] should_fail_ex+0x3cc/0x524 [ 147.561823][ T8013] __should_failslab+0xc0/0x11c [ 147.562831][ T8013] should_failslab+0x10/0x28 [ 147.563704][ T8013] __kmem_cache_alloc_node+0x7c/0x318 [ 147.564893][ T8013] __kmalloc_node_track_caller+0xb8/0x174 [ 147.566055][ T8013] kstrdup_const+0x90/0xdc [ 147.566912][ T8013] kvasprintf_const+0x120/0x2e4 [ 147.567895][ T8013] kobject_set_name_vargs+0xd8/0x1c8 [ 147.569008][ T8013] dev_set_name+0xe8/0x13c [ 147.569996][ T8013] device_add_disk+0x31c/0xe04 [ 147.571013][ T8013] md_alloc+0x6a4/0xb3c [ 147.572003][ T8013] md_alloc_and_put+0x28/0x98 [ 147.572955][ T8013] add_named_array+0x2fc/0x3f0 [ 147.573958][ T8013] param_attr_store+0x1cc/0x2ac [ 147.574968][ T8013] module_attr_store+0x6c/0x94 [ 147.575983][ T8013] sysfs_kf_write+0x1f8/0x274 [ 147.576961][ T8013] kernfs_fop_write_iter+0x390/0x4b4 [ 147.578191][ T8013] vfs_write+0x3c8/0x7c8 [ 147.579085][ T8013] ksys_write+0x12c/0x228 [ 147.579995][ T8013] __arm64_sys_write+0x7c/0x90 [ 147.580986][ T8013] invoke_syscall+0x98/0x290 [ 147.581995][ T8013] el0_svc_common+0x13c/0x258 [ 147.583020][ T8013] do_el0_svc+0x5c/0x134 [ 147.583910][ T8013] el0_svc+0x58/0x12c [ 147.584643][ T8013] el0t_64_sync_handler+0x84/0xf0 [ 147.585721][ T8013] el0t_64_sync+0x18c/0x190 [ 147.586767][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.068306][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.073053][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.076788][ T8022] netlink: 'syz.6.1208': attribute type 22 has an invalid length. [ 148.080717][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1208'. [ 148.091095][ T8022] bond0: option ad_select: unable to set because the bond device is up [ 148.138970][ T8028] loop7: detected capacity change from 0 to 256 [ 148.430303][ T8040] FAULT_INJECTION: forcing a failure. [ 148.430303][ T8040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.442200][ T8040] CPU: 0 PID: 8040 Comm: syz.0.1216 Not tainted syzkaller #0 [ 148.443806][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 148.445937][ T8040] Call trace: [ 148.446639][ T8040] dump_backtrace+0x1c4/0x1f0 [ 148.447668][ T8040] show_stack+0x2c/0x3c [ 148.448590][ T8040] __dump_stack+0x30/0x40 [ 148.449563][ T8040] dump_stack_lvl+0xf4/0x15c [ 148.450589][ T8040] dump_stack+0x1c/0x5c [ 148.451519][ T8040] should_fail_ex+0x3cc/0x524 [ 148.452587][ T8040] should_fail_alloc_page+0x74/0xb8 [ 148.453637][ T8040] prepare_alloc_pages+0x1b8/0x4f0 [ 148.454751][ T8040] __alloc_pages+0x134/0x544 [ 148.455793][ T8040] alloc_pages+0x434/0x6fc [ 148.456672][ T8040] kimage_alloc_pages+0xa8/0x334 [ 148.457779][ T8040] kimage_alloc_page+0x560/0x71c [ 148.458807][ T8040] kimage_load_segment+0x730/0xd1c [ 148.459885][ T8040] do_kexec_load+0x48c/0x6c8 [ 148.460883][ T8040] __arm64_sys_kexec_load+0x1dc/0x224 [ 148.462077][ T8040] invoke_syscall+0x98/0x290 [ 148.463131][ T8040] el0_svc_common+0x13c/0x258 [ 148.464204][ T8040] do_el0_svc+0x5c/0x134 [ 148.465138][ T8040] el0_svc+0x58/0x12c [ 148.466010][ T8040] el0t_64_sync_handler+0x84/0xf0 [ 148.467114][ T8040] el0t_64_sync+0x18c/0x190 [ 149.047589][ T8061] FAULT_INJECTION: forcing a failure. [ 149.047589][ T8061] name failslab, interval 1, probability 0, space 0, times 0 [ 149.066279][ T8061] CPU: 0 PID: 8061 Comm: syz.7.1224 Not tainted syzkaller #0 [ 149.067732][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 149.069954][ T8061] Call trace: [ 149.070683][ T8061] dump_backtrace+0x1c4/0x1f0 [ 149.071646][ T8061] show_stack+0x2c/0x3c [ 149.072590][ T8061] __dump_stack+0x30/0x40 [ 149.073573][ T8061] dump_stack_lvl+0xf4/0x15c [ 149.074616][ T8061] dump_stack+0x1c/0x5c [ 149.075556][ T8061] should_fail_ex+0x3cc/0x524 [ 149.076549][ T8061] __should_failslab+0xc0/0x11c [ 149.077624][ T8061] should_failslab+0x10/0x28 [ 149.078665][ T8061] __kmem_cache_alloc_node+0x7c/0x318 [ 149.079833][ T8061] kmalloc_trace+0x48/0x94 [ 149.080843][ T8061] syslog_print+0x114/0x680 [ 149.081748][ T8061] do_syslog+0x310/0x704 [ 149.082652][ T8061] __arm64_sys_syslog+0x80/0x98 [ 149.083593][ T8061] invoke_syscall+0x98/0x290 [ 149.084483][ T8061] el0_svc_common+0x13c/0x258 [ 149.085529][ T8061] do_el0_svc+0x5c/0x134 [ 149.086405][ T8061] el0_svc+0x58/0x12c [ 149.087155][ T8061] el0t_64_sync_handler+0x84/0xf0 [ 149.088164][ T8061] el0t_64_sync+0x18c/0x190 [ 149.124717][ T8069] loop5: detected capacity change from 0 to 512 [ 149.128675][ T8069] EXT4-fs: Ignoring removed oldalloc option [ 149.134302][ T8069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.138370][ T8069] EXT4-fs (loop5): Test dummy encryption mode enabled [ 149.166220][ T8069] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 149.350455][ T8076] loop6: detected capacity change from 0 to 2048 [ 149.871882][ T8076] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 149.889230][ T8076] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 150.099117][ T8082] FAULT_INJECTION: forcing a failure. [ 150.099117][ T8082] name fail_futex, interval 1, probability 0, space 0, times 0 [ 150.123601][ T8082] CPU: 0 PID: 8082 Comm: syz.1.1229 Not tainted syzkaller #0 [ 150.125181][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 150.127147][ T8082] Call trace: [ 150.127834][ T8082] dump_backtrace+0x1c4/0x1f0 [ 150.128857][ T8082] show_stack+0x2c/0x3c [ 150.129725][ T8082] __dump_stack+0x30/0x40 [ 150.130648][ T8082] dump_stack_lvl+0xf4/0x15c [ 150.131628][ T8082] dump_stack+0x1c/0x5c [ 150.132515][ T8082] should_fail_ex+0x3cc/0x524 [ 150.133510][ T8082] should_fail+0x14/0x24 [ 150.134427][ T8082] get_futex_key+0x904/0xfb0 [ 150.135379][ T8082] futex_wait_setup+0xbc/0x320 [ 150.136378][ T8082] futex_wait+0x164/0x424 [ 150.137393][ T8082] do_futex+0x2e8/0x340 [ 150.138362][ T8082] __arm64_sys_futex+0x390/0x414 [ 150.139520][ T8082] invoke_syscall+0x98/0x290 [ 150.140576][ T8082] el0_svc_common+0x13c/0x258 [ 150.141646][ T8082] do_el0_svc+0x5c/0x134 [ 150.142593][ T8082] el0_svc+0x58/0x12c [ 150.143503][ T8082] el0t_64_sync_handler+0x84/0xf0 [ 150.144557][ T8082] el0t_64_sync+0x18c/0x190 [ 150.247458][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 150.302975][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 150.349911][ T8093] loop7: detected capacity change from 0 to 256 [ 150.455563][ T8102] loop5: detected capacity change from 0 to 1024 [ 150.457295][ T8102] EXT4-fs: Ignoring removed bh option [ 150.825390][ T8102] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 150.859361][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 150.969052][ T8122] loop5: detected capacity change from 0 to 128 [ 150.978922][ T8122] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 150.994960][ T8122] EXT4-fs (loop5): shut down requested (2) [ 150.997502][ T8122] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 151.161503][ T8125] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 151.429309][ T8128] FAULT_INJECTION: forcing a failure. [ 151.429309][ T8128] name fail_futex, interval 1, probability 0, space 0, times 0 [ 151.435603][ T8128] CPU: 0 PID: 8128 Comm: syz.1.1245 Not tainted syzkaller #0 [ 151.437179][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 151.439402][ T8128] Call trace: [ 151.440100][ T8128] dump_backtrace+0x1c4/0x1f0 [ 151.441138][ T8128] show_stack+0x2c/0x3c [ 151.442034][ T8128] __dump_stack+0x30/0x40 [ 151.442998][ T8128] dump_stack_lvl+0xf4/0x15c [ 151.444059][ T8128] dump_stack+0x1c/0x5c [ 151.444980][ T8128] should_fail_ex+0x3cc/0x524 [ 151.446031][ T8128] should_fail+0x14/0x24 [ 151.446942][ T8128] get_futex_key+0x904/0xfb0 [ 151.448007][ T8128] futex_wait_setup+0xbc/0x320 [ 151.449082][ T8128] futex_wait+0x164/0x424 [ 151.450081][ T8128] do_futex+0x2e8/0x340 [ 151.450974][ T8128] __arm64_sys_futex+0x390/0x414 [ 151.452041][ T8128] invoke_syscall+0x98/0x290 [ 151.453031][ T8128] el0_svc_common+0x13c/0x258 [ 151.454094][ T8128] do_el0_svc+0x5c/0x134 [ 151.455066][ T8128] el0_svc+0x58/0x12c [ 151.455930][ T8128] el0t_64_sync_handler+0x84/0xf0 [ 151.456946][ T8128] el0t_64_sync+0x18c/0x190 [ 151.533409][ T8132] binder: 8131:8132 tried to acquire reference to desc 0, got 1 instead [ 151.538834][ T8132] binder_alloc: 8131: pid 8131 spamming oneway? 2 buffers allocated for a total size of 5120 [ 151.547755][ T1517] binder: release 8131:8132 transaction 12 out, still active [ 151.569063][ T1517] binder: undelivered transaction 11, process died. [ 151.571710][ T1517] binder: undelivered transaction 10, process died. [ 151.573308][ T1517] binder: send failed reply for transaction 12, target dead [ 151.829743][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 151.879980][ T8144] binder: 8142:8144 tried to acquire reference to desc 0, got 1 instead [ 151.889072][ T8144] binder: 8142:8144 got transaction with invalid data ptr [ 151.890494][ T8144] binder: 8142:8144 transaction call to 8142:0 failed 17/29201/-14, size 0-24 line 3350 [ 151.899414][ T8144] binder: 8142:8144 got transaction with invalid data ptr [ 151.905763][ T8144] binder: 8142:8144 transaction call to 8142:0 failed 18/29201/-14, size 0-24 line 3350 [ 151.910249][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.034146][ T8147] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 152.454537][ T4418] device hsr_slave_0 left promiscuous mode [ 152.750629][ T4418] device hsr_slave_1 left promiscuous mode [ 152.810856][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.812416][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.814324][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.816159][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.819245][ T4418] device bridge_slave_1 left promiscuous mode [ 152.826883][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.836527][ T8173] loop5: detected capacity change from 0 to 256 [ 152.873235][ T4418] device bridge_slave_0 left promiscuous mode [ 152.876960][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.242275][ T8181] loop6: detected capacity change from 0 to 128 [ 153.259249][ T8181] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 153.266030][ T8181] EXT4-fs (loop6): shut down requested (2) [ 153.267738][ T8181] fscrypt (loop6, inode 12): Error -5 getting encryption context [ 153.334767][ T4418] device veth1_macvtap left promiscuous mode [ 153.336227][ T4418] device veth0_macvtap left promiscuous mode [ 153.337804][ T4418] device veth1_vlan left promiscuous mode [ 153.339171][ T4418] device veth0_vlan left promiscuous mode [ 153.378629][ T8184] fscrypt (loop6, inode 12): Error -5 getting encryption context [ 153.589490][ T4339] Bluetooth: hci3: command 0x0406 tx timeout [ 153.715369][ T8190] loop5: detected capacity change from 0 to 2048 [ 153.731141][ T8190] loop5: p1 p4 [ 153.731141][ T8190] p1: [ 153.733089][ T8190] loop5: partition table partially beyond EOD, truncated [ 153.735200][ T8190] loop5: p4 start 184549376 is beyond EOD, truncated [ 153.736914][ T8190] loop5: p6 start 184549376 is beyond EOD, truncated [ 154.104563][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 154.587677][ T8211] overlayfs: failed to resolve './file0': -2 [ 155.002280][ T8216] netlink: 'syz.6.1275': attribute type 2 has an invalid length. [ 155.030119][ T8218] loop6: detected capacity change from 0 to 2048 [ 155.061534][ T8218] loop6: p1 p4 [ 155.061534][ T8218] p1: [ 155.063358][ T8218] loop6: partition table partially beyond EOD, truncated [ 155.065398][ T8218] loop6: p4 start 184549376 is beyond EOD, truncated [ 155.067302][ T8218] loop6: p6 start 184549376 is beyond EOD, truncated [ 155.073034][ T3938] loop6: p1 p4 [ 155.073034][ T3938] p1: [ 155.074770][ T3938] loop6: partition table partially beyond EOD, truncated [ 155.077140][ T3938] loop6: p4 start 184549376 is beyond EOD, truncated [ 155.080831][ T3938] loop6: p6 start 184549376 is beyond EOD, truncated [ 155.197282][ T8220] loop6: detected capacity change from 0 to 512 [ 155.223554][ T8220] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 155.241992][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 155.296526][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 155.401256][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 155.541391][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.850065][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.508042][ T8246] binder: tried to use weak ref as strong ref [ 156.509477][ T8246] binder: 8245:8246 Acquire 1 refcount change on invalid ref 0 ret -22 [ 156.511371][ T8246] binder: 8245:8246 got transaction to invalid handle, 1 [ 156.512856][ T8246] binder: 8246:8245 cannot find target node [ 156.514164][ T8246] binder: 8245:8246 transaction async to 0:0 failed 21/29201/-22, size 0-0 line 3062 [ 157.172167][ T4418] bond0 (unregistering): Released all slaves [ 157.714715][ T8271] loop1: detected capacity change from 0 to 256 [ 158.602565][ T8279] loop6: detected capacity change from 0 to 256 [ 158.648665][ T8276] device wlan0 entered promiscuous mode [ 158.764060][ T8286] loop5: detected capacity change from 0 to 2048 [ 159.011254][ T8286] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 159.039680][ T8286] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 159.695967][ T8304] phram: illegal start address [ 159.708710][ T8306] loop1: detected capacity change from 0 to 128 [ 159.734101][ T8310] loop0: detected capacity change from 0 to 256 [ 159.741149][ T8306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 159.769032][ T8306] EXT4-fs (loop1): shut down requested (2) [ 159.808519][ T8306] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 159.843827][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 159.881347][ T8313] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 160.152498][ T8317] loop5: detected capacity change from 0 to 512 [ 160.169509][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 160.172913][ T8317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.193215][ T8321] binder: 8320:8321 tried to acquire reference to desc 0, got 1 instead [ 160.209942][ T8321] binder_alloc: 8320: pid 8320 spamming oneway? 2 buffers allocated for a total size of 5120 [ 160.250404][ T14] binder: undelivered transaction 27, process died. [ 160.251905][ T14] binder: undelivered transaction 26, process died. [ 160.259205][ T8327] loop1: detected capacity change from 0 to 256 [ 160.408419][ T8334] loop6: detected capacity change from 0 to 1024 [ 160.413494][ T8334] EXT4-fs: Ignoring removed bh option [ 160.513819][ T8334] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 160.615522][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 160.666326][ T8347] loop7: detected capacity change from 0 to 128 [ 160.737412][ T8347] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 160.750975][ T8347] EXT4-fs (loop7): shut down requested (2) [ 160.752281][ T8347] fscrypt (loop7, inode 12): Error -5 getting encryption context [ 160.754195][ T8347] fscrypt (loop7, inode 12): Error -5 getting encryption context [ 160.764748][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 160.863312][ T8354] loop6: detected capacity change from 0 to 2048 [ 161.818747][ T8354] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 161.822337][ T8354] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 161.960419][ T8361] loop0: detected capacity change from 0 to 512 [ 162.007048][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 162.013263][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 162.043354][ T8361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 162.081643][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 162.184493][ T8382] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1336: iget: bad i_size value: 38620345925642 [ 162.189173][ T8382] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1336: couldn't read orphan inode 15 (err -117) [ 162.193203][ T8382] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 162.207095][ T8376] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 162.219194][ T8384] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 162.468819][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1337'. [ 162.476112][ T8390] fs-verity: sha512 using implementation "sha512-ce" [ 162.499160][ T8382] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1336: bg 0: block 5: invalid block bitmap [ 162.516661][ T8382] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 696 with error 28 [ 162.522785][ T8382] EXT4-fs (loop6): This should not happen!! Data will be lost [ 162.522785][ T8382] [ 162.525585][ T8382] EXT4-fs (loop6): Total free blocks count 0 [ 162.527721][ T8382] EXT4-fs (loop6): Free/Dirty block details [ 162.530211][ T8382] EXT4-fs (loop6): free_blocks=0 [ 162.535827][ T8382] EXT4-fs (loop6): dirty_blocks=700 [ 162.538714][ T8382] EXT4-fs (loop6): Block reservation details [ 162.542236][ T8382] EXT4-fs (loop6): i_reserved_data_blocks=700 [ 162.669036][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 163.038148][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 163.040213][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 163.159898][ T8417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 163.191682][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 163.667035][ T8438] set_capacity_and_notify: 5 callbacks suppressed [ 163.667045][ T8438] loop0: detected capacity change from 0 to 512 [ 163.667270][ T8441] FAULT_INJECTION: forcing a failure. [ 163.667270][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 163.688549][ T8441] CPU: 0 PID: 8441 Comm: syz.6.1353 Not tainted syzkaller #0 [ 163.689967][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 163.691905][ T8441] Call trace: [ 163.692557][ T8441] dump_backtrace+0x1c4/0x1f0 [ 163.693501][ T8441] show_stack+0x2c/0x3c [ 163.694402][ T8441] __dump_stack+0x30/0x40 [ 163.695377][ T8441] dump_stack_lvl+0xf4/0x15c [ 163.696356][ T8441] dump_stack+0x1c/0x5c [ 163.697253][ T8441] should_fail_ex+0x3cc/0x524 [ 163.698331][ T8441] __should_failslab+0xc0/0x11c [ 163.699387][ T8441] should_failslab+0x10/0x28 [ 163.700325][ T8441] __kmem_cache_alloc_node+0x7c/0x318 [ 163.701501][ T8441] __kmalloc+0xc4/0x180 [ 163.702351][ T8441] security_sk_alloc+0x54/0x140 [ 163.703383][ T8441] sk_prot_alloc+0xe0/0x1e8 [ 163.704391][ T8441] sk_alloc+0x44/0x3a0 [ 163.705285][ T8441] llc_sk_alloc+0x48/0x3cc [ 163.706203][ T8441] llc_ui_create+0xf4/0x2a8 [ 163.707182][ T8441] __sock_create+0x448/0x8a8 [ 163.708193][ T8441] __sys_socket+0xc0/0x1b0 [ 163.709170][ T8441] __arm64_sys_socket+0x7c/0x94 [ 163.710211][ T8441] invoke_syscall+0x98/0x290 [ 163.711266][ T8441] el0_svc_common+0x13c/0x258 [ 163.712312][ T8441] do_el0_svc+0x5c/0x134 [ 163.713264][ T8441] el0_svc+0x58/0x12c [ 163.714137][ T8441] el0t_64_sync_handler+0x84/0xf0 [ 163.715225][ T8441] el0t_64_sync+0x18c/0x190 [ 163.729452][ T8438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.788862][ T8452] loop6: detected capacity change from 0 to 512 [ 163.842771][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 164.106080][ T8452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 164.131687][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 164.222790][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 164.227594][ T8470] loop7: detected capacity change from 0 to 512 [ 164.277675][ T8470] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 164.279519][ T8470] EXT4-fs (loop7): orphan cleanup on readonly fs [ 164.285033][ T8470] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 164.287015][ T8470] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 164.288885][ T8470] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1366: Failed to acquire dquot type 1 [ 164.297118][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.306588][ T8470] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1366: corrupted inode contents [ 164.316437][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.317810][ T8470] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #16: comm syz.7.1366: mark_inode_dirty error [ 164.389249][ T8489] loop6: detected capacity change from 0 to 256 [ 164.614385][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.615856][ T8470] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1366: corrupted inode contents [ 164.618359][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.619650][ T8470] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.1366: mark_inode_dirty error [ 164.622058][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.623515][ T8470] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1366: corrupted inode contents [ 164.628070][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.629409][ T8470] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 164.631329][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.632693][ T8470] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.1366: corrupted inode contents [ 164.635600][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.637173][ T8470] EXT4-fs error (device loop7): ext4_truncate:4325: inode #16: comm syz.7.1366: mark_inode_dirty error [ 164.639922][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.641379][ T8470] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 164.643612][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 164.659233][ T8470] EXT4-fs (loop7): 1 truncate cleaned up [ 164.661914][ T8470] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 164.700727][ T8491] loop0: detected capacity change from 0 to 512 [ 164.766831][ T8491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.070282][ T8498] loop5: detected capacity change from 0 to 2048 [ 165.500374][ T8498] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.518255][ T8498] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 165.660360][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 165.737080][ T8504] loop6: detected capacity change from 0 to 512 [ 165.766835][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 165.803221][ T8504] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 165.847160][ T8513] loop0: detected capacity change from 0 to 512 [ 165.848737][ T8513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.870624][ T8513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.872339][ T8513] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 165.955281][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'. [ 166.353784][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 166.373218][ T8513] EXT4-fs (loop0): 1 truncate cleaned up [ 166.374502][ T8513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.452685][ T8532] loop7: detected capacity change from 0 to 256 [ 166.454429][ T8525] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 166.486630][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 166.525862][ T8536] loop5: detected capacity change from 0 to 512 [ 166.561357][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 166.592454][ T8536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 166.655433][ T8536] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1386: corrupted xattr block 33 [ 166.739329][ T8536] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 166.753116][ T8536] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 166.761137][ T8536] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.761137][ T8536] [ 166.774117][ T8536] EXT4-fs (loop5): Total free blocks count 0 [ 166.775339][ T8536] EXT4-fs (loop5): Free/Dirty block details [ 166.780898][ T8536] EXT4-fs (loop5): free_blocks=65280 [ 166.790791][ T8536] EXT4-fs (loop5): dirty_blocks=33 [ 166.791897][ T8536] EXT4-fs (loop5): Block reservation details [ 166.804323][ T8536] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 166.880492][ T8553] Dev loop0: unable to read RDB block 7 [ 166.881878][ T8553] loop0: AHDI p1 p2 p3 [ 166.886491][ T8553] loop0: partition table partially beyond EOD, truncated [ 166.898738][ T8553] loop0: p1 start 1601398130 is beyond EOD, truncated [ 166.900131][ T8553] loop0: p2 start 1702059890 is beyond EOD, truncated [ 166.986851][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 167.056282][ T8558] binder: 8557:8558 tried to acquire reference to desc 0, got 1 instead [ 167.068696][ T22] binder: release 8557:8558 transaction 33 out, still active [ 167.089514][ T22] binder: undelivered transaction 32, process died. [ 167.091128][ T22] binder: send failed reply for transaction 33, target dead [ 167.166609][ T8565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.177220][ T8565] EXT4-fs (loop0): bad block size 32768 [ 167.246351][ T8567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 167.353317][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'. [ 167.995172][ T8596] netlink: 'syz.6.1407': attribute type 1 has an invalid length. [ 168.029416][ T4756] EXT4-fs (loop5): unmounting filesystem. [ 168.060623][ T8600] FAULT_INJECTION: forcing a failure. [ 168.060623][ T8600] name failslab, interval 1, probability 0, space 0, times 0 [ 168.080519][ T8600] CPU: 0 PID: 8600 Comm: syz.7.1410 Not tainted syzkaller #0 [ 168.081913][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 168.083787][ T8600] Call trace: [ 168.084498][ T8600] dump_backtrace+0x1c4/0x1f0 [ 168.085547][ T8600] show_stack+0x2c/0x3c [ 168.086469][ T8600] __dump_stack+0x30/0x40 [ 168.087430][ T8600] dump_stack_lvl+0xf4/0x15c [ 168.088449][ T8600] dump_stack+0x1c/0x5c [ 168.089309][ T8600] should_fail_ex+0x3cc/0x524 [ 168.090287][ T8600] __should_failslab+0xc0/0x11c [ 168.091212][ T8600] should_failslab+0x10/0x28 [ 168.092124][ T8600] kmem_cache_alloc+0x88/0x310 [ 168.093119][ T8600] prepare_creds+0x44/0x698 [ 168.094078][ T8600] __sys_setresgid+0x538/0x7dc [ 168.095084][ T8600] __arm64_sys_setresgid+0x7c/0x90 [ 168.096183][ T8600] invoke_syscall+0x98/0x290 [ 168.097121][ T8600] el0_svc_common+0x13c/0x258 [ 168.098070][ T8600] do_el0_svc+0x5c/0x134 [ 168.098994][ T8600] el0_svc+0x58/0x12c [ 168.099793][ T8600] el0t_64_sync_handler+0x84/0xf0 [ 168.100803][ T8600] el0t_64_sync+0x18c/0x190 [ 168.253892][ T8615] overlayfs: missing 'lowerdir' [ 168.269801][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.286856][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.315581][ T8617] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 168.329921][ T8617] EXT4-fs error (device loop6): ext4_readdir:223: inode #2: comm syz.6.1417: path /166/file0: directory fails checksum at offset 0 [ 168.337281][ T8617] EXT4-fs (loop6): Remounting filesystem read-only [ 168.343296][ T8617] EXT4-fs error (device loop6): __ext4_find_entry:1698: inode #2: comm syz.6.1417: checksumming directory block 0 [ 168.350359][ T8617] EXT4-fs (loop6): Remounting filesystem read-only [ 168.356571][ T8618] netlink: 'syz.5.1415': attribute type 16 has an invalid length. [ 168.358395][ T8618] netlink: 'syz.5.1415': attribute type 17 has an invalid length. [ 168.369038][ T6224] EXT4-fs (loop6): unmounting filesystem. [ 168.389114][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 168.398169][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.399870][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.482412][ T8618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.732670][ T8640] set_capacity_and_notify: 4 callbacks suppressed [ 168.732681][ T8640] loop7: detected capacity change from 0 to 2048 [ 168.745492][ T8646] overlayfs: missing 'lowerdir' [ 168.756670][ T8640] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 168.760130][ T8640] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 169.259114][ T8671] loop1: detected capacity change from 0 to 512 [ 169.354607][ T8671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.365874][ T8671] [ 169.366412][ T8671] ====================================================== [ 169.367816][ T8671] WARNING: possible circular locking dependency detected [ 169.369335][ T8671] syzkaller #0 Not tainted [ 169.370308][ T8671] ------------------------------------------------------ [ 169.371881][ T8671] syz.1.1438/8671 is trying to acquire lock: [ 169.373142][ T8671] ffff0000e20220a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x54/0x1c8 [ 169.374813][ T8671] [ 169.374813][ T8671] but task is already holding lock: [ 169.376307][ T8671] ffff0000f9e7dcd0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x720/0x160c [ 169.378389][ T8671] [ 169.378389][ T8671] which lock already depends on the new lock. [ 169.378389][ T8671] [ 169.380385][ T8671] [ 169.380385][ T8671] the existing dependency chain (in reverse order) is: [ 169.382285][ T8671] [ 169.382285][ T8671] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 169.383862][ T8671] down_read+0x64/0x300 [ 169.384897][ T8671] ext4_map_blocks+0x270/0x160c [ 169.386069][ T8671] ext4_getblk+0x178/0x680 [ 169.387043][ T8671] ext4_bread+0x3c/0x1a8 [ 169.388116][ T8671] ext4_quota_read+0x160/0x358 [ 169.389263][ T8671] find_tree_dqentry+0x178/0xc2c [ 169.390479][ T8671] qtree_read_dquot+0x45c/0x748 [ 169.391717][ T8671] v2_read_dquot+0xbc/0x118 [ 169.392615][ T8671] dquot_acquire+0x108/0x4b8 [ 169.393696][ T8671] ext4_acquire_dquot+0x270/0x420 [ 169.394895][ T8671] dqget+0x638/0xa98 [ 169.395834][ T8671] __dquot_initialize+0x2e4/0xb30 [ 169.397000][ T8671] dquot_file_open+0x90/0xc8 [ 169.398113][ T8671] ext4_file_open+0x21c/0x540 [ 169.399221][ T8671] do_dentry_open+0x738/0xf8c [ 169.400316][ T8671] vfs_open+0x7c/0x90 [ 169.401227][ T8671] path_openat+0x1fc0/0x27a0 [ 169.402273][ T8671] do_filp_open+0x198/0x38c [ 169.403324][ T8671] do_sys_openat2+0x134/0x3fc [ 169.404474][ T8671] __arm64_sys_openat+0x11c/0x150 [ 169.405625][ T8671] invoke_syscall+0x98/0x290 [ 169.406683][ T8671] el0_svc_common+0x13c/0x258 [ 169.407735][ T8671] do_el0_svc+0x5c/0x134 [ 169.408712][ T8671] el0_svc+0x58/0x12c [ 169.409778][ T8671] el0t_64_sync_handler+0x84/0xf0 [ 169.411015][ T8671] el0t_64_sync+0x18c/0x190 [ 169.412159][ T8671] [ 169.412159][ T8671] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 169.413942][ T8671] down_read+0x64/0x300 [ 169.414948][ T8671] v2_read_dquot+0x4c/0x118 [ 169.416010][ T8671] dquot_acquire+0x108/0x4b8 [ 169.417140][ T8671] ext4_acquire_dquot+0x270/0x420 [ 169.418323][ T8671] dqget+0x638/0xa98 [ 169.419329][ T8671] dquot_set_dqblk+0x40/0xe34 [ 169.420427][ T8671] quota_setquota+0x41c/0x4cc [ 169.421482][ T8671] do_quotactl+0x65c/0x738 [ 169.422545][ T8671] __arm64_sys_quotactl+0x2dc/0x77c [ 169.423835][ T8671] invoke_syscall+0x98/0x290 [ 169.424882][ T8671] el0_svc_common+0x13c/0x258 [ 169.425994][ T8671] do_el0_svc+0x5c/0x134 [ 169.426985][ T8671] el0_svc+0x58/0x12c [ 169.427966][ T8671] el0t_64_sync_handler+0x84/0xf0 [ 169.429229][ T8671] el0t_64_sync+0x18c/0x190 [ 169.430310][ T8671] [ 169.430310][ T8671] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 169.431993][ T8671] __lock_acquire+0x3504/0x7280 [ 169.433134][ T8671] lock_acquire+0x210/0x63c [ 169.434229][ T8671] __mutex_lock_common+0x1a0/0x1f3c [ 169.435479][ T8671] mutex_lock_nested+0x38/0x44 [ 169.436591][ T8671] dquot_commit+0x54/0x1c8 [ 169.437654][ T8671] ext4_write_dquot+0x1b4/0x320 [ 169.438793][ T8671] ext4_mark_dquot_dirty+0xe8/0x150 [ 169.439979][ T8671] mark_all_dquot_dirty+0x108/0x424 [ 169.441121][ T8671] __dquot_alloc_space+0x564/0xcfc [ 169.442297][ T8671] ext4_mb_new_blocks+0xd40/0x4244 [ 169.443481][ T8671] ext4_ext_map_blocks+0x1330/0x563c [ 169.444687][ T8671] ext4_map_blocks+0x7b0/0x160c [ 169.445833][ T8671] _ext4_get_block+0x198/0x4dc [ 169.446963][ T8671] ext4_get_block_unwritten+0x3c/0x110 [ 169.448163][ T8671] ext4_block_write_begin+0x52c/0x10d8 [ 169.449368][ T8671] ext4_write_begin+0x5e8/0x12d4 [ 169.450565][ T8671] ext4_da_write_begin+0x24c/0x994 [ 169.451716][ T8671] generic_perform_write+0x240/0x508 [ 169.452990][ T8671] ext4_buffered_write_iter+0x2c8/0x528 [ 169.454247][ T8671] ext4_file_write_iter+0x188/0x1500 [ 169.455511][ T8671] vfs_write+0x3c8/0x7c8 [ 169.456496][ T8671] __arm64_sys_pwrite64+0x178/0x210 [ 169.457734][ T8671] invoke_syscall+0x98/0x290 [ 169.458655][ T8671] el0_svc_common+0x13c/0x258 [ 169.459694][ T8671] do_el0_svc+0x5c/0x134 [ 169.460652][ T8671] el0_svc+0x58/0x12c [ 169.461530][ T8671] el0t_64_sync_handler+0x84/0xf0 [ 169.462620][ T8671] el0t_64_sync+0x18c/0x190 [ 169.463680][ T8671] [ 169.463680][ T8671] other info that might help us debug this: [ 169.463680][ T8671] [ 169.465761][ T8671] Chain exists of: [ 169.465761][ T8671] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 169.465761][ T8671] [ 169.468649][ T8671] Possible unsafe locking scenario: [ 169.468649][ T8671] [ 169.470160][ T8671] CPU0 CPU1 [ 169.471254][ T8671] ---- ---- [ 169.472392][ T8671] lock(&ei->i_data_sem/2); [ 169.473270][ T8671] lock(&s->s_dquot.dqio_sem); [ 169.474753][ T8671] lock(&ei->i_data_sem/2); [ 169.476341][ T8671] lock(&dquot->dq_lock); [ 169.477322][ T8671] [ 169.477322][ T8671] *** DEADLOCK *** [ 169.477322][ T8671] [ 169.479106][ T8671] 4 locks held by syz.1.1438/8671: [ 169.480210][ T8671] #0: ffff0000f2002460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 169.482183][ T8671] #1: ffff0000f9e7de48 (&sb->s_type->i_mutex_key#10){++++}-{3:3}, at: ext4_buffered_write_iter+0x94/0x528 [ 169.484350][ T8671] #2: ffff0000f9e7dcd0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x720/0x160c [ 169.486542][ T8671] #3: ffff80001672cd08 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 169.488436][ T8671] [ 169.488436][ T8671] stack backtrace: [ 169.489729][ T8671] CPU: 0 PID: 8671 Comm: syz.1.1438 Not tainted syzkaller #0 [ 169.491393][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.493706][ T8671] Call trace: [ 169.494444][ T8671] dump_backtrace+0x1c4/0x1f0 [ 169.495435][ T8671] show_stack+0x2c/0x3c [ 169.496365][ T8671] __dump_stack+0x30/0x40 [ 169.497353][ T8671] dump_stack_lvl+0xf4/0x15c [ 169.498308][ T8671] dump_stack+0x1c/0x5c [ 169.499241][ T8671] print_circular_bug+0x148/0x1b0 [ 169.500284][ T8671] check_noncircular+0x290/0x370 [ 169.501366][ T8671] __lock_acquire+0x3504/0x7280 [ 169.502361][ T8671] lock_acquire+0x210/0x63c [ 169.503228][ T8671] __mutex_lock_common+0x1a0/0x1f3c [ 169.504259][ T8671] mutex_lock_nested+0x38/0x44 [ 169.505329][ T8671] dquot_commit+0x54/0x1c8 [ 169.506305][ T8671] ext4_write_dquot+0x1b4/0x320 [ 169.507269][ T8671] ext4_mark_dquot_dirty+0xe8/0x150 [ 169.508364][ T8671] mark_all_dquot_dirty+0x108/0x424 [ 169.509474][ T8671] __dquot_alloc_space+0x564/0xcfc [ 169.510492][ T8671] ext4_mb_new_blocks+0xd40/0x4244 [ 169.511620][ T8671] ext4_ext_map_blocks+0x1330/0x563c [ 169.512718][ T8671] ext4_map_blocks+0x7b0/0x160c [ 169.513852][ T8671] _ext4_get_block+0x198/0x4dc [ 169.514803][ T8671] ext4_get_block_unwritten+0x3c/0x110 [ 169.515993][ T8671] ext4_block_write_begin+0x52c/0x10d8 [ 169.517189][ T8671] ext4_write_begin+0x5e8/0x12d4 [ 169.518185][ T8671] ext4_da_write_begin+0x24c/0x994 [ 169.519369][ T8671] generic_perform_write+0x240/0x508 [ 169.520542][ T8671] ext4_buffered_write_iter+0x2c8/0x528 [ 169.521756][ T8671] ext4_file_write_iter+0x188/0x1500 [ 169.522888][ T8671] vfs_write+0x3c8/0x7c8 [ 169.523830][ T8671] __arm64_sys_pwrite64+0x178/0x210 [ 169.524968][ T8671] invoke_syscall+0x98/0x290 [ 169.525774][ T8671] el0_svc_common+0x13c/0x258 [ 169.526795][ T8671] do_el0_svc+0x5c/0x134 [ 169.527704][ T8671] el0_svc+0x58/0x12c [ 169.528587][ T8671] el0t_64_sync_handler+0x84/0xf0 [ 169.529712][ T8671] el0t_64_sync+0x18c/0x190 [ 169.558557][ T6425] EXT4-fs (loop7): unmounting filesystem. [ 169.576034][ T4328] EXT4-fs (loop1): unmounting filesystem.