last executing test programs: 7.386998785s ago: executing program 4 (id=495): openat(0xffffffffffffff9c, 0x0, 0x2, 0xc0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{0x34, '\x00', @st={0x4, [{0x1, @svalue=0xf}, {0x1, @svalue=0x3}, {0x1, @svalue=0x3800000000}, {0x3, @svalue=0x100000000}]}, 0x101}, {0x40, '\x00', @data=0xc18, 0x6467}, {0xc, '\x00', @buffer={"12d32d1130ebb4a3af737a994a0e6ed0d43e55c3ff33c444869c2500", 0xffffffffffffff5f, '\x00', 0xfdfdffff}, 0x9b13}, {0x3, '\x00', @data, 0x4}]}) 7.163992278s ago: executing program 4 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 6.884007295s ago: executing program 4 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0xfffffd31) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.777905019s ago: executing program 4 (id=505): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000000000010000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) 6.668105895s ago: executing program 4 (id=508): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0x4, "6dcf379d"}, &(0x7f00000002c0)=0x28) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 5.769849893s ago: executing program 4 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x24, 0xffffffffffffffff, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c0005800800010066747000"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572000000"], 0xc8}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/vkms/mydev/enabled\x00', 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000080)="d76c2245eb6ca676f675c09c0c6fcd465e5101dd869b470846d2f2b76d01b84d14391a9e5878b824b0389af8ab4c497a7805f543bddbeb5ed36a350b846193372c23a412182739e84320101506caf0a9fc31a17aa9f5367cbf3dae1702007ceef42edb118c2e3c2b4c22e0191c752a73", 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r6, &(0x7f0000000040)={'syz0\x00', {0x1, 0x1, 0x1, 0x1}, 0x1, [0xfa, 0x200021, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200a, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x8000, 0x601f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$input_event(r6, &(0x7f00000004c0)={{}, 0x14, 0x1}, 0xfffffe16) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x19) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004d0000480000000000059078ac1414002401010244140503ac1414bb00000000e00000020000000989077be00000018303740000000400009be305066f65ad656e31d6077abc455d85102d506a106c624f817c21f8c4ca6eda3be0472dfce52dfa227029b42b5d6f717e4ad42d273a7d07b178c442f1f7521c1b122bc8077b0d1f3c534c4a5aa505bb8146ec6848361e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c57000090780000"], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000e2000000080000000000000002000000", @ANYRES32=r2, @ANYBLOB="cb0000000000000000000000000100f928aa0be8edc2993fe2910000000000", @ANYRES32=r9, @ANYRES32=r2, @ANYBLOB="0200000005000000040000000900"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r10}, &(0x7f0000000900), &(0x7f0000000940)=r4}, 0x20) write$UHID_INPUT(r2, &(0x7f00000009c0)={0x8, {"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", 0x1000}}, 0x1006) 5.363890895s ago: executing program 1 (id=520): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x3e, &(0x7f00000000c0)=0x8, 0x4) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r8, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000000)=""/15, &(0x7f0000000080)=0xf) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xfffffffc}, &(0x7f0000000100)=0x8) 4.27691841s ago: executing program 1 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.949508813s ago: executing program 1 (id=525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f000000bc00)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'syzkaller1\x00', 0x400}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000500)) statx(r5, &(0x7f0000000540)='./file0\x00', 0x0, 0x800, &(0x7f0000000580)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) 3.948909784s ago: executing program 3 (id=526): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a80000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4254030028000100280012800b00010065727370616e00001800028004001200080015001a4901000500160001000000140003006e6963"], 0xa8}, 0x1, 0x0, 0x0, 0x200008c1}, 0x810) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mprotect(&(0x7f000057f000/0x1000)=nil, 0x1000, 0x2) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4000}}], 0x1, 0x8004) 3.543818773s ago: executing program 3 (id=528): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (fail_nth: 1) 3.387877331s ago: executing program 3 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fcdbdf257365636f6e646e00"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = msgget(0x3, 0x100) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000002c0)=""/233) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) r8 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000005000000020000000900000000000000", @ANYRES32=0x1, @ANYBLOB="000001000000000000000000000000000000000027e1ceedd7712128e20c1deee40c66054529eee7107fd40a4955d1bf3c859436ec7340363feeab0b586d201d815b5fc213d90d6bd922cc807ee802e8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r8, 0x80000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r7}, 0x94) r10 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r10, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f00000000c0)=0xa, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0xf2, &(0x7f0000fff000/0x1000)=nil, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r9, r7, 0x2, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 2.975721137s ago: executing program 1 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x18) write(r1, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/usb_gadget\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0x1ed) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000000000000000000005000004180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000001000080850000005100000095"], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x400) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./config/target/usb_gadget\x00', 0x0, 0x4018, r0}, 0x18) r3 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r3, r3) r4 = getpgid(r3) setpgid(0x0, r4) write$P9_RGETLOCK(r0, &(0x7f00000002c0)={0x1e, 0x37, 0x1, {0x0, 0x2, 0x4, r4}}, 0x1e) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000280)={0x8, 0x7, 0x0, 0xa867, 0x6, 0x20, 0x2}) 2.887670919s ago: executing program 0 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601020000e1001500000006000002050005000200000005000400000000000c00078008001240001000000900020073797a3100000000050001000700000014000300686173683a69702c706f72742c6970"], 0x58}}, 0x4000000) 2.725847832s ago: executing program 2 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x95257ce3e5539c1a}, 0x0) (fail_nth: 4) 2.675275711s ago: executing program 0 (id=538): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) 2.539918548s ago: executing program 2 (id=539): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f000000bc00)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'syzkaller1\x00', 0x400}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000500)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) 2.50937669s ago: executing program 3 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x723}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c}}, 0x0) 2.184009169s ago: executing program 3 (id=541): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="b702c000000000007b2ad0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000180200000a0000010000000000000000180200000a00000100000000d0300df1bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.077624171s ago: executing program 3 (id=542): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000740)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x40}}}, 0x5) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x1008, 0x0, 0xfff, 0x1}, 'syz0\x00', 0x32}) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000072, 0x101202) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x34325852, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x4, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) (async) r4 = socket$inet(0x2, 0x3, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(r5, 0x0, 0x6, r7, r6) (async) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, 0x0, 0x240) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats={0x27}}) (async) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0x60000000}, 0x20008004) 1.937460513s ago: executing program 1 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') syz_open_dev$vim2m(0x0, 0x20006, 0x2) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0xfffffd31) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.707972999s ago: executing program 0 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.542822583s ago: executing program 0 (id=545): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x8000010003, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x6000000000000000) 1.541347678s ago: executing program 2 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x401, 0x8001, 0x3, 0xfffffff9, 0x200800}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000010c0)=0x7ffffffa, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001100)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000001200)=0xe8) quotactl$Q_SETQUOTA(0x1, &(0x7f0000001000)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000001240)={0x3, 0x7, 0x9, 0xc, 0x800, 0x400000000, 0x0, 0x9, 0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="0000000000fa0000040000001dc300000000"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), 0xffffffffffffffff) 1.401019747s ago: executing program 2 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000fdffffff0000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 1.320737843s ago: executing program 1 (id=548): syz_clone3(&(0x7f0000000300)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x8000005, &(0x7f0000000180)={0x5, 0x77, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804880, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8], 0x10, 0x122e, &(0x7f0000002a80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x207, 0xfffffff9, 0xe474}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x400cc83, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) ftruncate(r1, 0x4a8e) 1.320345052s ago: executing program 0 (id=549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000008100)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001980)="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", 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x20000000}}], 0x1, 0x1000) 1.121475117s ago: executing program 32 (id=548): syz_clone3(&(0x7f0000000300)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x8000005, &(0x7f0000000180)={0x5, 0x77, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804880, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8], 0x10, 0x122e, &(0x7f0000002a80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x207, 0xfffffff9, 0xe474}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x400cc83, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) ftruncate(r1, 0x4a8e) 1.11557917s ago: executing program 0 (id=551): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000600)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00008863aaaaaaaaaaaa00000000000088a8400081"], 0x1a) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2}, &(0x7f00000003c0), &(0x7f00000000c0), &(0x7f0000000440)) io_uring_enter(r5, 0x66a8, 0x4000, 0xf, 0x0, 0x18) r6 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x10000, 0x7}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1527, 0xd}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x240480c4) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20000}, [@generic={0x91, 0x1, 0x1, 0x15}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x2000) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x0, @capture={0x1000, 0x0, {0x6, 0x81}, 0x5, 0x2eb}}) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xabce, 0x7fffffff, 0x643b, 0x4f565559, [0x9, 0x8000], [0x2, 0x7], 0x108}}) 1.115281904s ago: executing program 2 (id=552): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r0, &(0x7f00000035c0)=[{&(0x7f0000000080)='y', 0x1}, {&(0x7f00000000c0)='\"L', 0x2}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500520316f9e864aca296ad5700000000000057cdb16e8a2eb2be873b42eb11df4a65db08e14da72cd372a13552f4219a65fc5fa65085abba13a9c856cfcbd5e7fbd5c15b79fdf62b43989c76ef06c875c717406dc8b6862b74f5a14f6a11a9ecd0a7826f053599929cbeed6306a3b908589cd720781cfb1fc83e764fd6e89c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000000c0)=ANY=[]) 0s ago: executing program 2 (id=553): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0xc0ed0000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 21.912423][ T4692] cgroup: Unknown subsys name 'net' [ 22.053154][ T4692] cgroup: Unknown subsys name 'cpuset' [ 22.054485][ T4692] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.252996][ T4692] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 23.858331][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 23.858462][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 23.858923][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 23.859013][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 23.859094][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 23.859315][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 23.859616][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 23.859797][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 23.859925][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 23.860067][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 23.860137][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 23.860295][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 23.860478][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 23.860664][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 23.866811][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 23.867035][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 23.867594][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 23.868052][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 23.868591][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 23.869335][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 23.869561][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 23.870356][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 23.870568][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 23.871582][ T4714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 23.871799][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.280876][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.281134][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.281206][ T4705] bridge_slave_0: entered allmulticast mode [ 24.281725][ T4705] bridge_slave_0: entered promiscuous mode [ 24.282729][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.282749][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.282800][ T4705] bridge_slave_1: entered allmulticast mode [ 24.283190][ T4705] bridge_slave_1: entered promiscuous mode [ 24.290087][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.291804][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.311506][ T4705] team0: Port device team_slave_0 added [ 24.323563][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.323590][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.323648][ T4706] bridge_slave_0: entered allmulticast mode [ 24.324084][ T4706] bridge_slave_0: entered promiscuous mode [ 24.324785][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.324802][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.324847][ T4706] bridge_slave_1: entered allmulticast mode [ 24.325223][ T4706] bridge_slave_1: entered promiscuous mode [ 24.332683][ T4705] team0: Port device team_slave_1 added [ 24.347142][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.347233][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.347285][ T4708] bridge_slave_0: entered allmulticast mode [ 24.347702][ T4708] bridge_slave_0: entered promiscuous mode [ 24.352569][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.355963][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.355974][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.355985][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.360069][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.360097][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.360151][ T4716] bridge_slave_0: entered allmulticast mode [ 24.361283][ T4716] bridge_slave_0: entered promiscuous mode [ 24.362409][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.362433][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.362482][ T4716] bridge_slave_1: entered allmulticast mode [ 24.362948][ T4716] bridge_slave_1: entered promiscuous mode [ 24.363757][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.363785][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.363841][ T4708] bridge_slave_1: entered allmulticast mode [ 24.364414][ T4708] bridge_slave_1: entered promiscuous mode [ 24.372887][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.376159][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.376171][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.376186][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.401116][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.404482][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.411832][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.412743][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.419301][ T4706] team0: Port device team_slave_0 added [ 24.419851][ T4716] team0: Port device team_slave_0 added [ 24.420442][ T4706] team0: Port device team_slave_1 added [ 24.421125][ T4716] team0: Port device team_slave_1 added [ 24.430870][ T4708] team0: Port device team_slave_0 added [ 24.434521][ T4708] team0: Port device team_slave_1 added [ 24.441796][ T4705] hsr_slave_0: entered promiscuous mode [ 24.442178][ T4705] hsr_slave_1: entered promiscuous mode [ 24.451726][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.451735][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.451749][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.455077][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.455086][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.455101][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.455299][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.455333][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.455396][ T4711] bridge_slave_0: entered allmulticast mode [ 24.455944][ T4711] bridge_slave_0: entered promiscuous mode [ 24.457051][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.457058][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.457069][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.457621][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.457628][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.457639][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.458254][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.458267][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.458276][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.458780][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.458787][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.458798][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.462779][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.462842][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.462893][ T4711] bridge_slave_1: entered allmulticast mode [ 24.463522][ T4711] bridge_slave_1: entered promiscuous mode [ 24.494857][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.499583][ T4716] hsr_slave_0: entered promiscuous mode [ 24.499919][ T4716] hsr_slave_1: entered promiscuous mode [ 24.500126][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 24.500160][ T4716] Cannot create hsr debugfs directory [ 24.508587][ T4708] hsr_slave_0: entered promiscuous mode [ 24.508893][ T4708] hsr_slave_1: entered promiscuous mode [ 24.509096][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 24.509105][ T4708] Cannot create hsr debugfs directory [ 24.515096][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.517099][ T4706] hsr_slave_0: entered promiscuous mode [ 24.517414][ T4706] hsr_slave_1: entered promiscuous mode [ 24.517633][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 24.517642][ T4706] Cannot create hsr debugfs directory [ 24.544267][ T4711] team0: Port device team_slave_0 added [ 24.547778][ T4711] team0: Port device team_slave_1 added [ 24.599233][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.599247][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.599264][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.610855][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.610863][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.610879][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.662816][ T4711] hsr_slave_0: entered promiscuous mode [ 24.663100][ T4711] hsr_slave_1: entered promiscuous mode [ 24.663272][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 24.663282][ T4711] Cannot create hsr debugfs directory [ 24.671690][ T4705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.674532][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.674866][ T4705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.677050][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.685012][ T4705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.686610][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.691346][ T4705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.692963][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.722891][ T4716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.725151][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.725463][ T4716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.726305][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.728271][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.728302][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.728453][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.728485][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.730211][ T4716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.732014][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.736885][ T4716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.741814][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.766608][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.768399][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.770161][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.772918][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.774113][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.774140][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.774222][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.774254][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.783260][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.784292][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.786125][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.793420][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.794273][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.807451][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.809044][ T887] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.809476][ T887] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.815676][ T887] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.816538][ T887] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.826122][ T887] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.826153][ T887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.830286][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.835787][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.839540][ T4706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.841519][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.842743][ T4706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.844465][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.848037][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.848063][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.848475][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.848493][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.848851][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.848869][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.854943][ T4706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.857026][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.857316][ T4706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.859506][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.896276][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.897678][ T4711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.899769][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.913244][ T4711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.914238][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.914537][ T4711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.915437][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.916571][ T4711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.917586][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.935262][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.954723][ T887] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.954751][ T887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.955112][ T887] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.955130][ T887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.990246][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.003502][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.015589][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.016558][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.028756][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.041244][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.041259][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.057932][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.057958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.062203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.062232][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.062569][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.062590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.072325][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.072357][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.094846][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.094862][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.164021][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.190828][ T4705] veth0_vlan: entered promiscuous mode [ 25.199479][ T4705] veth1_vlan: entered promiscuous mode [ 25.215455][ T4705] veth0_macvtap: entered promiscuous mode [ 25.218050][ T4705] veth1_macvtap: entered promiscuous mode [ 25.229084][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.242506][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.249129][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.275161][ T4716] veth0_vlan: entered promiscuous mode [ 25.293445][ T4716] veth1_vlan: entered promiscuous mode [ 25.302625][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.303532][ T2765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.305674][ T2765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.305712][ T2765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.305740][ T2765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.318501][ T887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.318514][ T887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.331507][ T4716] veth0_macvtap: entered promiscuous mode [ 25.331939][ T2765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.331956][ T2765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.333725][ T4716] veth1_macvtap: entered promiscuous mode [ 25.346849][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.375502][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.378237][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.384534][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.397064][ T4711] veth0_vlan: entered promiscuous mode [ 25.398932][ T4711] veth1_vlan: entered promiscuous mode [ 25.406595][ T4705] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.407455][ T4706] veth0_vlan: entered promiscuous mode [ 25.413219][ T4706] veth1_vlan: entered promiscuous mode [ 25.431001][ T887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.431225][ T887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.448186][ T4889] (NULL device *): [drm] All planes must have at least one possible CRTC [ 25.459031][ T4708] veth0_vlan: entered promiscuous mode [ 25.468954][ T4711] veth0_macvtap: entered promiscuous mode [ 25.470195][ T4706] veth0_macvtap: entered promiscuous mode [ 25.479277][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.479289][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.481071][ T4708] veth1_vlan: entered promiscuous mode [ 25.493009][ T4711] veth1_macvtap: entered promiscuous mode [ 25.498312][ T4706] veth1_macvtap: entered promiscuous mode [ 25.507720][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.508721][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.515216][ T4708] veth0_macvtap: entered promiscuous mode [ 25.517790][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.518878][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.539154][ T4708] veth1_macvtap: entered promiscuous mode [ 25.545460][ T887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.545472][ T887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.585792][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.586848][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.589782][ T2765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.589858][ T2765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.589884][ T2765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.589908][ T2765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.590812][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.590959][ T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591014][ T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591077][ T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591130][ T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591180][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591245][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591301][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591359][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.591419][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.931836][ T4714] Bluetooth: hci3: command tx timeout [ 25.931956][ T4714] Bluetooth: hci4: command tx timeout [ 25.932020][ T4714] Bluetooth: hci2: command tx timeout [ 25.932080][ T4714] Bluetooth: hci0: command tx timeout [ 25.932867][ T4720] Bluetooth: hci1: command tx timeout [ 26.397435][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.397452][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.414128][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.414140][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.430548][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.430564][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.455662][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.455674][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.525468][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.525481][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.548275][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.548285][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.700548][ T4904] FAULT_INJECTION: forcing a failure. [ 26.700548][ T4904] name failslab, interval 1, probability 0, space 0, times 1 [ 26.700629][ T4904] CPU: 1 UID: 0 PID: 4904 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT [ 26.700641][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 26.700646][ T4904] Call trace: [ 26.700649][ T4904] show_stack+0x2c/0x3c (C) [ 26.700668][ T4904] __dump_stack+0x30/0x40 [ 26.700678][ T4904] dump_stack_lvl+0xd8/0x12c [ 26.700688][ T4904] dump_stack+0x1c/0x28 [ 26.700697][ T4904] should_fail_ex+0x41c/0x590 [ 26.700708][ T4904] should_failslab+0xc4/0x120 [ 26.700719][ T4904] __kvmalloc_node_noprof+0x160/0x7fc [ 26.700728][ T4904] bpf_check_cfg+0x104/0x211c [ 26.700736][ T4904] bpf_check+0x1c40/0x243c [ 26.700746][ T4904] bpf_prog_load+0xf4c/0x1554 [ 26.700754][ T4904] __sys_bpf+0x7d4/0x82c [ 26.700762][ T4904] __arm64_sys_bpf+0xd0/0xec [ 26.700769][ T4904] invoke_syscall+0x98/0x244 [ 26.700779][ T4904] el0_svc_common+0xec/0x23c [ 26.700788][ T4904] do_el0_svc+0x4c/0x5c [ 26.700798][ T4904] el0_svc+0x64/0x260 [ 26.700807][ T4904] el0t_64_sync_handler+0x44/0x104 [ 26.700816][ T4904] el0t_64_sync+0x198/0x19c [ 26.964308][ T4909] loop2: detected capacity change from 0 to 256 [ 26.970972][ T4914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9'. [ 26.973659][ T4912] loop4: detected capacity change from 0 to 256 [ 26.974336][ T4912] ======================================================= [ 26.974336][ T4912] WARNING: The mand mount option has been deprecated and [ 26.974336][ T4912] and is ignored by this kernel. Remove the mand [ 26.974336][ T4912] option from the mount to silence this warning. [ 26.974336][ T4912] ======================================================= [ 26.974375][ T4912] vfat: Unknown parameter 'iocharse' [ 26.981778][ T4909] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 26.981791][ T4909] FAT-fs (loop2): Filesystem has been set read-only [ 27.358316][ T4931] loop1: detected capacity change from 0 to 256 [ 27.379592][ T4932] (NULL device *): [drm] All planes must have at least one possible CRTC [ 27.494217][ T4931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 27.494274][ T4931] Zero length message leads to an empty skb [ 27.494546][ T4931] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 27.494558][ T4931] FAT-fs (loop1): Filesystem has been set read-only [ 27.494604][ T4931] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 27.817896][ T4941] FAULT_INJECTION: forcing a failure. [ 27.817896][ T4941] name failslab, interval 1, probability 0, space 0, times 0 [ 27.817917][ T4941] CPU: 1 UID: 0 PID: 4941 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT [ 27.817932][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 27.817938][ T4941] Call trace: [ 27.817942][ T4941] show_stack+0x2c/0x3c (C) [ 27.817965][ T4941] __dump_stack+0x30/0x40 [ 27.817979][ T4941] dump_stack_lvl+0xd8/0x12c [ 27.817990][ T4941] dump_stack+0x1c/0x28 [ 27.818001][ T4941] should_fail_ex+0x41c/0x590 [ 27.818015][ T4941] should_failslab+0xc4/0x120 [ 27.818028][ T4941] kmem_cache_alloc_noprof+0x94/0x5d4 [ 27.818037][ T4941] security_inode_alloc+0x40/0x304 [ 27.818046][ T4941] inode_init_always_gfp+0x704/0xbac [ 27.818057][ T4941] alloc_inode+0x9c/0x198 [ 27.818068][ T4941] sock_alloc+0x4c/0x204 [ 27.818078][ T4941] __sock_create+0x108/0x670 [ 27.818087][ T4941] __sys_socket_create+0xc0/0x11c [ 27.818096][ T4941] __sys_socket+0x44/0xec [ 27.818105][ T4941] __arm64_sys_socket+0x84/0x9c [ 27.818115][ T4941] invoke_syscall+0x98/0x244 [ 27.818127][ T4941] el0_svc_common+0xec/0x23c [ 27.818138][ T4941] do_el0_svc+0x4c/0x5c [ 27.818149][ T4941] el0_svc+0x64/0x260 [ 27.818160][ T4941] el0t_64_sync_handler+0x44/0x104 [ 27.818171][ T4941] el0t_64_sync+0x198/0x19c [ 27.818850][ T4941] socket: no more sockets [ 27.961593][ T4957] loop1: detected capacity change from 0 to 256 [ 27.974059][ T4960] capability: warning: `syz.4.25' uses deprecated v2 capabilities in a way that may be insecure [ 27.990017][ T4957] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 27.990032][ T4957] FAT-fs (loop1): Filesystem has been set read-only [ 28.011115][ T4722] Bluetooth: hci0: command tx timeout [ 28.011139][ T4722] Bluetooth: hci2: command tx timeout [ 28.011154][ T4722] Bluetooth: hci4: command tx timeout [ 28.011168][ T4722] Bluetooth: hci3: command tx timeout [ 28.011263][ T4720] Bluetooth: hci1: command tx timeout [ 28.130362][ T4968] FAULT_INJECTION: forcing a failure. [ 28.130362][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 28.130385][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.4.26 Not tainted syzkaller #0 PREEMPT [ 28.130396][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 28.130402][ T4968] Call trace: [ 28.130405][ T4968] show_stack+0x2c/0x3c (C) [ 28.130422][ T4968] __dump_stack+0x30/0x40 [ 28.130432][ T4968] dump_stack_lvl+0xd8/0x12c [ 28.130441][ T4968] dump_stack+0x1c/0x28 [ 28.130450][ T4968] should_fail_ex+0x41c/0x590 [ 28.130461][ T4968] should_failslab+0xc4/0x120 [ 28.130472][ T4968] __kmalloc_node_noprof+0x10c/0x6e4 [ 28.130479][ T4968] __vmalloc_node_range_noprof+0x43c/0xe9c [ 28.130488][ T4968] __vmalloc_node_noprof+0xec/0x14c [ 28.130496][ T4968] __vmalloc_noprof+0x64/0x8c [ 28.130504][ T4968] bpf_prog_calc_tag+0x68/0x314 [ 28.130513][ T4968] check_and_resolve_insns+0xb4/0x1bb4 [ 28.130523][ T4968] bpf_check+0x19f0/0x243c [ 28.130532][ T4968] bpf_prog_load+0xf4c/0x1554 [ 28.130540][ T4968] __sys_bpf+0x7d4/0x82c [ 28.130548][ T4968] __arm64_sys_bpf+0xd0/0xec [ 28.130555][ T4968] invoke_syscall+0x98/0x244 [ 28.130565][ T4968] el0_svc_common+0xec/0x23c [ 28.130574][ T4968] do_el0_svc+0x4c/0x5c [ 28.130583][ T4968] el0_svc+0x64/0x260 [ 28.130596][ T4968] el0t_64_sync_handler+0x44/0x104 [ 28.130605][ T4968] el0t_64_sync+0x198/0x19c [ 28.130698][ T4968] syz.4.26: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 28.130791][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.4.26 Not tainted syzkaller #0 PREEMPT [ 28.130799][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 28.130802][ T4968] Call trace: [ 28.130804][ T4968] show_stack+0x2c/0x3c (C) [ 28.130816][ T4968] __dump_stack+0x30/0x40 [ 28.130826][ T4968] dump_stack_lvl+0xd8/0x12c [ 28.130836][ T4968] dump_stack+0x1c/0x28 [ 28.130844][ T4968] warn_alloc+0x1c4/0x1d8 [ 28.130851][ T4968] __vmalloc_node_range_noprof+0x670/0xe9c [ 28.130861][ T4968] __vmalloc_node_noprof+0xec/0x14c [ 28.130869][ T4968] __vmalloc_noprof+0x64/0x8c [ 28.130877][ T4968] bpf_prog_calc_tag+0x68/0x314 [ 28.130886][ T4968] check_and_resolve_insns+0xb4/0x1bb4 [ 28.130896][ T4968] bpf_check+0x19f0/0x243c [ 28.130906][ T4968] bpf_prog_load+0xf4c/0x1554 [ 28.130913][ T4968] __sys_bpf+0x7d4/0x82c [ 28.130921][ T4968] __arm64_sys_bpf+0xd0/0xec [ 28.130929][ T4968] invoke_syscall+0x98/0x244 [ 28.130938][ T4968] el0_svc_common+0xec/0x23c [ 28.130948][ T4968] do_el0_svc+0x4c/0x5c [ 28.130956][ T4968] el0_svc+0x64/0x260 [ 28.130965][ T4968] el0t_64_sync_handler+0x44/0x104 [ 28.130974][ T4968] el0t_64_sync+0x198/0x19c [ 28.130993][ T4968] Mem-Info: [ 28.131008][ T4968] active_anon:30 inactive_anon:7943 isolated_anon:0 [ 28.131008][ T4968] active_file:2112 inactive_file:4726 isolated_file:0 [ 28.131008][ T4968] unevictable:775 dirty:1653 writeback:0 [ 28.131008][ T4968] slab_reclaimable:8027 slab_unreclaimable:89270 [ 28.131008][ T4968] mapped:33355 shmem:3845 pagetables:1016 [ 28.131008][ T4968] sec_pagetables:0 bounce:0 [ 28.131008][ T4968] kernel_misc_reclaimable:0 [ 28.131008][ T4968] free:1473844 free_pcp:25148 free_cma:7616 [ 28.131049][ T4968] Node 0 active_anon:120kB inactive_anon:31772kB active_file:8448kB inactive_file:18904kB unevictable:3100kB isolated(anon):0kB isolated(file):0kB mapped:133420kB dirty:6612kB writeback:0kB shmem:15380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8664kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 28.131080][ T4968] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 28.131124][ T4968] lowmem_reserve[]: 0 0 3650 3650 3650 [ 28.131198][ T4968] Node 0 Normal free:2817488kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:120kB inactive_anon:31772kB active_file:8448kB inactive_file:18904kB unevictable:3100kB writepending:6612kB zspages:0kB present:5242880kB managed:3738576kB mlocked:28kB bounce:0kB free_pcp:100588kB local_pcp:42220kB free_cma:0kB [ 28.131242][ T4968] lowmem_reserve[]: 0 0 0 0 0 [ 28.131354][ T4968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 28.131450][ T4968] Node 0 Normal: 266*4kB (UME) 497*8kB (UME) 156*16kB (UME) 51*32kB (UME) 7*64kB (UE) 4*128kB (UME) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (ME) 684*4096kB (M) = 2817424kB [ 28.131754][ T4968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 28.131772][ T4968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 28.131790][ T4968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 28.131807][ T4968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 28.131824][ T4968] 10711 total pagecache pages [ 28.131828][ T4968] 0 pages in swap cache [ 28.131842][ T4968] Free swap = 124996kB [ 28.131857][ T4968] Total swap = 124996kB [ 28.131871][ T4968] 2097152 pages RAM [ 28.131886][ T4968] 0 pages HighMem/MovableOnly [ 28.131901][ T4968] 392460 pages reserved [ 28.131917][ T4968] 8192 pages cma reserved [ 28.131938][ T4968] 0 pages hwpoisoned [ 28.408683][ T4974] FAULT_INJECTION: forcing a failure. [ 28.408683][ T4974] name failslab, interval 1, probability 0, space 0, times 0 [ 28.408706][ T4974] CPU: 0 UID: 0 PID: 4974 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT [ 28.408717][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 28.408723][ T4974] Call trace: [ 28.408727][ T4974] show_stack+0x2c/0x3c (C) [ 28.408748][ T4974] __dump_stack+0x30/0x40 [ 28.408760][ T4974] dump_stack_lvl+0xd8/0x12c [ 28.408771][ T4974] dump_stack+0x1c/0x28 [ 28.408782][ T4974] should_fail_ex+0x41c/0x590 [ 28.408795][ T4974] should_failslab+0xc4/0x120 [ 28.408809][ T4974] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 28.408817][ T4974] sock_alloc_inode+0x30/0x180 [ 28.408830][ T4974] alloc_inode+0x68/0x198 [ 28.408841][ T4974] sock_alloc+0x4c/0x204 [ 28.408849][ T4974] __sock_create+0x108/0x670 [ 28.408859][ T4974] __sys_socket_create+0xc0/0x11c [ 28.408868][ T4974] __sys_socket+0x44/0xec [ 28.408877][ T4974] __arm64_sys_socket+0x84/0x9c [ 28.408886][ T4974] invoke_syscall+0x98/0x244 [ 28.408898][ T4974] el0_svc_common+0xec/0x23c [ 28.408910][ T4974] do_el0_svc+0x4c/0x5c [ 28.408921][ T4974] el0_svc+0x64/0x260 [ 28.408932][ T4974] el0t_64_sync_handler+0x44/0x104 [ 28.408943][ T4974] el0t_64_sync+0x198/0x19c [ 28.408954][ T4974] socket: no more sockets [ 28.455579][ T4978] ip_tables: iptables: counters copy to user failed while replacing table [ 28.520285][ T4981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.520588][ T4981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.522235][ T4981] netlink: 112 bytes leftover after parsing attributes in process `syz.2.34'. [ 28.529396][ T4720] Bluetooth: Wrong link type (-71) [ 29.142474][ T5006] loop4: detected capacity change from 0 to 256 [ 29.150502][ T5006] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 29.150517][ T5006] FAT-fs (loop4): Filesystem has been set read-only [ 29.275597][ T5010] (NULL device *): [drm] All planes must have at least one possible CRTC [ 29.316301][ T5012] syz_tun: entered allmulticast mode [ 29.342200][ T5011] syz_tun: left allmulticast mode [ 30.085437][ T5041] loop3: detected capacity change from 0 to 256 [ 30.092502][ T4714] Bluetooth: hci3: command tx timeout [ 30.092528][ T4714] Bluetooth: hci4: command tx timeout [ 30.092543][ T4714] Bluetooth: hci2: command tx timeout [ 30.092557][ T4714] Bluetooth: hci0: command tx timeout [ 30.092656][ T4720] Bluetooth: hci1: command tx timeout [ 30.105855][ T5041] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 30.105869][ T5041] FAT-fs (loop3): Filesystem has been set read-only [ 30.265626][ T5050] (NULL device *): [drm] All planes must have at least one possible CRTC [ 30.932183][ T5065] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 30.932653][ T30] audit: type=1326 audit(30.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5064 comm="syz.4.58" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f179368 code=0x0 [ 31.069408][ T5068] FAULT_INJECTION: forcing a failure. [ 31.069408][ T5068] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.069428][ T5068] CPU: 0 UID: 0 PID: 5068 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT [ 31.069439][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.069444][ T5068] Call trace: [ 31.069447][ T5068] show_stack+0x2c/0x3c (C) [ 31.069464][ T5068] __dump_stack+0x30/0x40 [ 31.069475][ T5068] dump_stack_lvl+0xd8/0x12c [ 31.069484][ T5068] dump_stack+0x1c/0x28 [ 31.069493][ T5068] should_fail_ex+0x41c/0x590 [ 31.069505][ T5068] should_fail+0x14/0x24 [ 31.069514][ T5068] should_fail_usercopy+0x20/0x30 [ 31.069524][ T5068] _inline_copy_from_user+0x3c/0x174 [ 31.069533][ T5068] kstrtouint_from_user+0xcc/0x174 [ 31.069539][ T5068] proc_fail_nth_write+0x9c/0x234 [ 31.069549][ T5068] vfs_write+0x2a4/0xa0c [ 31.069559][ T5068] ksys_write+0x12c/0x228 [ 31.069569][ T5068] __arm64_sys_write+0x84/0x98 [ 31.069579][ T5068] invoke_syscall+0x98/0x244 [ 31.069589][ T5068] el0_svc_common+0xec/0x23c [ 31.069598][ T5068] do_el0_svc+0x4c/0x5c [ 31.069607][ T5068] el0_svc+0x64/0x260 [ 31.069617][ T5068] el0t_64_sync_handler+0x44/0x104 [ 31.069625][ T5068] el0t_64_sync+0x198/0x19c [ 31.107765][ T5071] tipc: Started in network mode [ 31.107781][ T5071] tipc: Node identity 9, cluster identity 4711 [ 31.107788][ T5071] tipc: Node number set to 9 [ 31.159468][ T5080] overlay: Unknown parameter 'uid<00000000000000000000' [ 31.163748][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.163761][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.270479][ T5087] (NULL device *): [drm] All planes must have at least one possible CRTC [ 31.667521][ T5106] fuse: Bad value for 'fd' [ 31.711418][ T5110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 31.769681][ T5116] FAULT_INJECTION: forcing a failure. [ 31.769681][ T5116] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 31.769700][ T5116] CPU: 0 UID: 0 PID: 5116 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT [ 31.769710][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.769714][ T5116] Call trace: [ 31.769717][ T5116] show_stack+0x2c/0x3c (C) [ 31.769734][ T5116] __dump_stack+0x30/0x40 [ 31.769745][ T5116] dump_stack_lvl+0xd8/0x12c [ 31.769754][ T5116] dump_stack+0x1c/0x28 [ 31.769763][ T5116] should_fail_ex+0x41c/0x590 [ 31.769775][ T5116] should_fail_alloc_page+0xec/0x10c [ 31.769786][ T5116] prepare_alloc_pages+0x194/0x484 [ 31.769794][ T5116] __alloc_frozen_pages_noprof+0x180/0x648 [ 31.769801][ T5116] alloc_pages_mpol+0x1fc/0x3d0 [ 31.769809][ T5116] folio_alloc_mpol_noprof+0x4c/0x248 [ 31.769817][ T5116] vma_alloc_folio_noprof+0x100/0x1dc [ 31.769825][ T5116] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 31.769835][ T5116] folio_prealloc+0x3c/0x1b0 [ 31.769845][ T5116] do_wp_page+0x1768/0x4014 [ 31.769854][ T5116] handle_mm_fault+0x139c/0x2bec [ 31.769864][ T5116] __get_user_pages+0x82c/0x13b0 [ 31.769871][ T5116] __gup_longterm_locked+0xa14/0xffc [ 31.769879][ T5116] gup_fast_fallback+0x19a0/0x1bcc [ 31.769886][ T5116] pin_user_pages_fast+0x6c/0xa8 [ 31.769894][ T5116] iov_iter_extract_pages+0x194/0x37c [ 31.769903][ T5116] extract_iter_to_sg+0x9c4/0x1ca8 [ 31.769909][ T5116] af_alg_get_rsgl+0x398/0x748 [ 31.769919][ T5116] skcipher_recvmsg+0x2e0/0xb68 [ 31.769929][ T5116] sock_recvmsg+0xd4/0x170 [ 31.769938][ T5116] ____sys_recvmsg+0x1b8/0x608 [ 31.769946][ T5116] ___sys_recvmsg+0x16c/0x1f4 [ 31.769955][ T5116] __sys_recvmsg+0x154/0x200 [ 31.769963][ T5116] __arm64_sys_recvmsg+0x88/0x9c [ 31.769972][ T5116] invoke_syscall+0x98/0x244 [ 31.769981][ T5116] el0_svc_common+0xec/0x23c [ 31.769990][ T5116] do_el0_svc+0x4c/0x5c [ 31.769999][ T5116] el0_svc+0x64/0x260 [ 31.770009][ T5116] el0t_64_sync_handler+0x44/0x104 [ 31.770017][ T5116] el0t_64_sync+0x198/0x19c [ 31.836379][ T5120] netlink: 548 bytes leftover after parsing attributes in process `syz.4.76'. [ 32.171207][ T4722] Bluetooth: hci0: command tx timeout [ 32.171233][ T4722] Bluetooth: hci2: command tx timeout [ 32.171248][ T4722] Bluetooth: hci4: command tx timeout [ 32.171262][ T4722] Bluetooth: hci3: command tx timeout [ 32.171305][ T4720] Bluetooth: hci1: command tx timeout [ 32.195382][ T5124] loop3: detected capacity change from 0 to 256 [ 32.205660][ T5124] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 32.205675][ T5124] FAT-fs (loop3): Filesystem has been set read-only [ 32.564128][ T5140] (NULL device *): [drm] All planes must have at least one possible CRTC [ 32.709615][ T5153] syzkaller0: entered promiscuous mode [ 32.709633][ T5153] syzkaller0: entered allmulticast mode [ 33.293937][ T5164] loop1: detected capacity change from 0 to 2048 [ 33.334950][ T5164] loop1: p1 p3 [ 33.334950][ T5164] p1: [ 33.335052][ T5164] loop1: p1 size 16777216 extends beyond EOD, truncated [ 33.341406][ T5164] loop1: p3 start 3036741376 is beyond EOD, truncated [ 33.349038][ T5164] warning: `syz.1.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 33.418630][ T5182] FAULT_INJECTION: forcing a failure. [ 33.418630][ T5182] name fail_futex, interval 1, probability 0, space 0, times 1 [ 33.418650][ T5182] CPU: 0 UID: 0 PID: 5182 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT [ 33.418661][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.418667][ T5182] Call trace: [ 33.418669][ T5182] show_stack+0x2c/0x3c (C) [ 33.418691][ T5182] __dump_stack+0x30/0x40 [ 33.418705][ T5182] dump_stack_lvl+0xd8/0x12c [ 33.418716][ T5182] dump_stack+0x1c/0x28 [ 33.418727][ T5182] should_fail_ex+0x41c/0x590 [ 33.418740][ T5182] should_fail+0x14/0x24 [ 33.418752][ T5182] get_futex_key+0x1ec/0x12b0 [ 33.418763][ T5182] futex_wait_setup+0x58/0x674 [ 33.418774][ T5182] __futex_wait+0x108/0x25c [ 33.418785][ T5182] futex_wait+0x108/0x2c0 [ 33.418796][ T5182] do_futex+0x320/0x378 [ 33.418806][ T5182] __arm64_sys_futex+0x2e4/0x418 [ 33.418817][ T5182] invoke_syscall+0x98/0x244 [ 33.418829][ T5182] el0_svc_common+0xec/0x23c [ 33.418840][ T5182] do_el0_svc+0x4c/0x5c [ 33.418851][ T5182] el0_svc+0x64/0x260 [ 33.418862][ T5182] el0t_64_sync_handler+0x44/0x104 [ 33.418873][ T5182] el0t_64_sync+0x198/0x19c [ 33.460197][ T5187] netlink: 548 bytes leftover after parsing attributes in process `syz.3.99'. [ 33.506234][ T5192] tap0: tun_chr_ioctl cmd 1074025677 [ 33.506297][ T5192] tap0: linktype set to 769 [ 33.540254][ T5196] loop1: detected capacity change from 0 to 512 [ 33.570101][ T5197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'. [ 33.571646][ T5199] bridge0: port 3(bond0) entered blocking state [ 33.571738][ T5199] bridge0: port 3(bond0) entered disabled state [ 33.571839][ T5199] bond0: entered allmulticast mode [ 33.571848][ T5199] bond_slave_0: entered allmulticast mode [ 33.571860][ T5199] bond_slave_1: entered allmulticast mode [ 33.574133][ T5199] bond0: entered promiscuous mode [ 33.574143][ T5199] bond_slave_0: entered promiscuous mode [ 33.574208][ T5199] bond_slave_1: entered promiscuous mode [ 33.574575][ T5199] bridge0: port 3(bond0) entered blocking state [ 33.574604][ T5199] bridge0: port 3(bond0) entered forwarding state [ 33.621128][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 33.621230][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 33.621258][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 33.621283][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 33.621307][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 33.861522][ T13] Bluetooth: (null): Invalid header checksum [ 33.872175][ T5214] FAULT_INJECTION: forcing a failure. [ 33.872175][ T5214] name failslab, interval 1, probability 0, space 0, times 0 [ 33.872192][ T5214] CPU: 0 UID: 0 PID: 5214 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT [ 33.872202][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.872206][ T5214] Call trace: [ 33.872209][ T5214] show_stack+0x2c/0x3c (C) [ 33.872226][ T5214] __dump_stack+0x30/0x40 [ 33.872237][ T5214] dump_stack_lvl+0xd8/0x12c [ 33.872247][ T5214] dump_stack+0x1c/0x28 [ 33.872255][ T5214] should_fail_ex+0x41c/0x590 [ 33.872267][ T5214] should_failslab+0xc4/0x120 [ 33.872278][ T5214] __kmalloc_noprof+0x108/0x6c8 [ 33.872285][ T5214] do_handle_open+0x428/0x928 [ 33.872295][ T5214] __arm64_sys_open_by_handle_at+0x88/0x9c [ 33.872304][ T5214] invoke_syscall+0x98/0x244 [ 33.872313][ T5214] el0_svc_common+0xec/0x23c [ 33.872323][ T5214] do_el0_svc+0x4c/0x5c [ 33.872341][ T5214] el0_svc+0x64/0x260 [ 33.872351][ T5214] el0t_64_sync_handler+0x44/0x104 [ 33.872360][ T5214] el0t_64_sync+0x198/0x19c [ 33.929266][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 34.042290][ T5223] FAULT_INJECTION: forcing a failure. [ 34.042290][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 34.042312][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT [ 34.042323][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.042336][ T5223] Call trace: [ 34.042339][ T5223] show_stack+0x2c/0x3c (C) [ 34.042359][ T5223] __dump_stack+0x30/0x40 [ 34.042371][ T5223] dump_stack_lvl+0xd8/0x12c [ 34.042383][ T5223] dump_stack+0x1c/0x28 [ 34.042394][ T5223] should_fail_ex+0x41c/0x590 [ 34.042407][ T5223] should_failslab+0xc4/0x120 [ 34.042419][ T5223] __kmalloc_noprof+0x108/0x6c8 [ 34.042428][ T5223] sk_prot_alloc+0xc4/0x1e8 [ 34.042437][ T5223] sk_alloc+0x44/0x3ac [ 34.042444][ T5223] __netlink_create+0x78/0x23c [ 34.042454][ T5223] netlink_create+0x3b4/0x6a0 [ 34.042464][ T5223] __sock_create+0x31c/0x670 [ 34.042474][ T5223] __sys_socket_create+0xc0/0x11c [ 34.042483][ T5223] __sys_socket+0x44/0xec [ 34.042492][ T5223] __arm64_sys_socket+0x84/0x9c [ 34.042502][ T5223] invoke_syscall+0x98/0x244 [ 34.042513][ T5223] el0_svc_common+0xec/0x23c [ 34.042525][ T5223] do_el0_svc+0x4c/0x5c [ 34.042536][ T5223] el0_svc+0x64/0x260 [ 34.042547][ T5223] el0t_64_sync_handler+0x44/0x104 [ 34.042558][ T5223] el0t_64_sync+0x198/0x19c [ 34.093183][ T5229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.096596][ T5229] netlink: 'syz.4.116': attribute type 34 has an invalid length. [ 34.096609][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 34.103472][ T5229] bond2: option lacp_strict: invalid value (64) [ 34.107114][ T5229] bond2 (unregistering): Released all slaves [ 34.124414][ T5234] loop0: detected capacity change from 0 to 256 [ 34.129357][ T5234] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 34.129372][ T5234] FAT-fs (loop0): Filesystem has been set read-only [ 34.149542][ T5240] bond1: option mode: unable to set because the bond device is up [ 34.149803][ T5244] netlink: 'syz.4.116': attribute type 34 has an invalid length. [ 34.149812][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 34.158967][ T5244] bond2: option lacp_strict: invalid value (64) [ 34.159930][ T5244] bond2 (unregistering): Released all slaves [ 34.568403][ T5263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.588696][ T5265] FAULT_INJECTION: forcing a failure. [ 34.588696][ T5265] name failslab, interval 1, probability 0, space 0, times 0 [ 34.588717][ T5265] CPU: 1 UID: 0 PID: 5265 Comm: syz.2.126 Not tainted syzkaller #0 PREEMPT [ 34.588728][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.588734][ T5265] Call trace: [ 34.588737][ T5265] show_stack+0x2c/0x3c (C) [ 34.588756][ T5265] __dump_stack+0x30/0x40 [ 34.588769][ T5265] dump_stack_lvl+0xd8/0x12c [ 34.588780][ T5265] dump_stack+0x1c/0x28 [ 34.588791][ T5265] should_fail_ex+0x41c/0x590 [ 34.588804][ T5265] should_failslab+0xc4/0x120 [ 34.588818][ T5265] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 34.588827][ T5265] sock_alloc_inode+0x30/0x180 [ 34.588840][ T5265] alloc_inode+0x68/0x198 [ 34.588851][ T5265] sock_alloc+0x4c/0x204 [ 34.588860][ T5265] __sock_create+0x108/0x670 [ 34.588869][ T5265] __sys_socket_create+0xc0/0x11c [ 34.588878][ T5265] __sys_socket+0x44/0xec [ 34.588887][ T5265] __arm64_sys_socket+0x84/0x9c [ 34.588897][ T5265] invoke_syscall+0x98/0x244 [ 34.588909][ T5265] el0_svc_common+0xec/0x23c [ 34.588920][ T5265] do_el0_svc+0x4c/0x5c [ 34.588931][ T5265] el0_svc+0x64/0x260 [ 34.588942][ T5265] el0t_64_sync_handler+0x44/0x104 [ 34.588953][ T5265] el0t_64_sync+0x198/0x19c [ 34.588965][ T5265] socket: no more sockets [ 34.625447][ T5269] FAULT_INJECTION: forcing a failure. [ 34.625447][ T5269] name failslab, interval 1, probability 0, space 0, times 0 [ 34.625466][ T5269] CPU: 1 UID: 0 PID: 5269 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT [ 34.625478][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.625484][ T5269] Call trace: [ 34.625487][ T5269] show_stack+0x2c/0x3c (C) [ 34.625504][ T5269] __dump_stack+0x30/0x40 [ 34.625517][ T5269] dump_stack_lvl+0xd8/0x12c [ 34.625528][ T5269] dump_stack+0x1c/0x28 [ 34.625538][ T5269] should_fail_ex+0x41c/0x590 [ 34.625551][ T5269] should_failslab+0xc4/0x120 [ 34.625564][ T5269] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 34.625573][ T5269] sock_alloc_inode+0x30/0x180 [ 34.625585][ T5269] alloc_inode+0x68/0x198 [ 34.625596][ T5269] sock_alloc+0x4c/0x204 [ 34.625604][ T5269] __sock_create+0x108/0x670 [ 34.625613][ T5269] __sys_socket_create+0xc0/0x11c [ 34.625623][ T5269] __sys_socket+0x44/0xec [ 34.625632][ T5269] __arm64_sys_socket+0x84/0x9c [ 34.625641][ T5269] invoke_syscall+0x98/0x244 [ 34.625653][ T5269] el0_svc_common+0xec/0x23c [ 34.625664][ T5269] do_el0_svc+0x4c/0x5c [ 34.625675][ T5269] el0_svc+0x64/0x260 [ 34.625686][ T5269] el0t_64_sync_handler+0x44/0x104 [ 34.625696][ T5269] el0t_64_sync+0x198/0x19c [ 34.625708][ T5269] socket: no more sockets [ 34.689399][ T5276] loop2: detected capacity change from 0 to 256 [ 34.694183][ T5276] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 34.694197][ T5276] FAT-fs (loop2): Filesystem has been set read-only [ 34.777476][ T5282] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 34.809662][ T5286] netlink: 548 bytes leftover after parsing attributes in process `syz.3.132'. [ 34.818865][ T5287] syz_tun: entered allmulticast mode [ 34.871339][ T5290] FAULT_INJECTION: forcing a failure. [ 34.871339][ T5290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.871361][ T5290] CPU: 0 UID: 0 PID: 5290 Comm: syz.4.136 Not tainted syzkaller #0 PREEMPT [ 34.871374][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.871380][ T5290] Call trace: [ 34.871384][ T5290] show_stack+0x2c/0x3c (C) [ 34.871404][ T5290] __dump_stack+0x30/0x40 [ 34.871417][ T5290] dump_stack_lvl+0xd8/0x12c [ 34.871426][ T5290] dump_stack+0x1c/0x28 [ 34.871435][ T5290] should_fail_ex+0x41c/0x590 [ 34.871449][ T5290] should_fail+0x14/0x24 [ 34.871459][ T5290] should_fail_usercopy+0x20/0x30 [ 34.871469][ T5290] _inline_copy_from_user+0x3c/0x174 [ 34.871481][ T5290] ucma_write+0x13c/0x2b8 [ 34.871489][ T5290] do_loop_readv_writev+0x24c/0x3dc [ 34.871498][ T5290] vfs_writev+0x2c8/0x630 [ 34.871504][ T5290] do_writev+0x134/0x2a8 [ 34.871511][ T5290] __arm64_sys_writev+0x88/0x9c [ 34.871518][ T5290] invoke_syscall+0x98/0x244 [ 34.871529][ T5290] el0_svc_common+0xec/0x23c [ 34.871538][ T5290] do_el0_svc+0x4c/0x5c [ 34.871547][ T5290] el0_svc+0x64/0x260 [ 34.871557][ T5290] el0t_64_sync_handler+0x44/0x104 [ 34.871566][ T5290] el0t_64_sync+0x198/0x19c [ 34.909236][ T5292] netlink: 36 bytes leftover after parsing attributes in process `syz.4.137'. [ 34.941200][ T5296] FAULT_INJECTION: forcing a failure. [ 34.941200][ T5296] name failslab, interval 1, probability 0, space 0, times 0 [ 34.941220][ T5296] CPU: 0 UID: 0 PID: 5296 Comm: syz.4.139 Not tainted syzkaller #0 PREEMPT [ 34.941230][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.941236][ T5296] Call trace: [ 34.941238][ T5296] show_stack+0x2c/0x3c (C) [ 34.941257][ T5296] __dump_stack+0x30/0x40 [ 34.941269][ T5296] dump_stack_lvl+0xd8/0x12c [ 34.941280][ T5296] dump_stack+0x1c/0x28 [ 34.941291][ T5296] should_fail_ex+0x41c/0x590 [ 34.941304][ T5296] should_failslab+0xc4/0x120 [ 34.941317][ T5296] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 34.941333][ T5296] sock_alloc_inode+0x30/0x180 [ 34.941346][ T5296] alloc_inode+0x68/0x198 [ 34.941357][ T5296] sock_alloc+0x4c/0x204 [ 34.941366][ T5296] __sock_create+0x108/0x670 [ 34.941375][ T5296] __sys_socket_create+0xc0/0x11c [ 34.941385][ T5296] __sys_socket+0x44/0xec [ 34.941394][ T5296] __arm64_sys_socket+0x84/0x9c [ 34.941403][ T5296] invoke_syscall+0x98/0x244 [ 34.941415][ T5296] el0_svc_common+0xec/0x23c [ 34.941427][ T5296] do_el0_svc+0x4c/0x5c [ 34.941438][ T5296] el0_svc+0x64/0x260 [ 34.941449][ T5296] el0t_64_sync_handler+0x44/0x104 [ 34.941459][ T5296] el0t_64_sync+0x198/0x19c [ 34.941471][ T5296] socket: no more sockets [ 34.977199][ T5299] netlink: 84 bytes leftover after parsing attributes in process `syz.4.140'. [ 35.692870][ T4714] Bluetooth: hci5: command 0x1003 tx timeout [ 35.694346][ T4720] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 35.965139][ T5332] comedi: No check for data length of config insn id 8 is implemented [ 35.965152][ T5332] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 35.965160][ T5332] comedi: Assuming n=55975 is correct [ 36.086808][ T5334] netlink: 'syz.1.152': attribute type 39 has an invalid length. [ 36.115433][ T5338] loop0: detected capacity change from 0 to 1024 [ 36.115779][ T5338] EXT4-fs: Ignoring removed bh option [ 36.136139][ T5338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.155078][ T5338] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.154: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 36.155767][ T5338] EXT4-fs (loop0): Remounting filesystem read-only [ 36.241648][ T5348] FAULT_INJECTION: forcing a failure. [ 36.241648][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 36.241671][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT [ 36.241682][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.241688][ T5348] Call trace: [ 36.241691][ T5348] show_stack+0x2c/0x3c (C) [ 36.241712][ T5348] __dump_stack+0x30/0x40 [ 36.241725][ T5348] dump_stack_lvl+0xd8/0x12c [ 36.241736][ T5348] dump_stack+0x1c/0x28 [ 36.241747][ T5348] should_fail_ex+0x41c/0x590 [ 36.241760][ T5348] should_failslab+0xc4/0x120 [ 36.241774][ T5348] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.241782][ T5348] alloc_empty_file+0x6c/0x1cc [ 36.241791][ T5348] alloc_file+0x58/0x98 [ 36.241799][ T5348] alloc_file_pseudo+0xe0/0x198 [ 36.241808][ T5348] sock_alloc_file+0xb4/0x1ac [ 36.241818][ T5348] __sys_socket+0x90/0xec [ 36.241827][ T5348] __arm64_sys_socket+0x84/0x9c [ 36.241837][ T5348] invoke_syscall+0x98/0x244 [ 36.241849][ T5348] el0_svc_common+0xec/0x23c [ 36.241861][ T5348] do_el0_svc+0x4c/0x5c [ 36.241872][ T5348] el0_svc+0x64/0x260 [ 36.241883][ T5348] el0t_64_sync_handler+0x44/0x104 [ 36.241894][ T5348] el0t_64_sync+0x198/0x19c [ 36.641120][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 36.762474][ T5375] netlink: 'syz.4.161': attribute type 83 has an invalid length. [ 36.822477][ T5377] loop2: detected capacity change from 0 to 4096 [ 36.822800][ T5377] EXT4-fs: Ignoring removed orlov option [ 36.822836][ T5377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.826768][ T5377] EXT4-fs (loop2): Test dummy encryption mode enabled [ 36.836921][ T5377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.865881][ T5377] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 36.893961][ T5382] FAULT_INJECTION: forcing a failure. [ 36.893961][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 36.893983][ T5382] CPU: 0 UID: 0 PID: 5382 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT [ 36.893994][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.893999][ T5382] Call trace: [ 36.894002][ T5382] show_stack+0x2c/0x3c (C) [ 36.894021][ T5382] __dump_stack+0x30/0x40 [ 36.894034][ T5382] dump_stack_lvl+0xd8/0x12c [ 36.894045][ T5382] dump_stack+0x1c/0x28 [ 36.894056][ T5382] should_fail_ex+0x41c/0x590 [ 36.894070][ T5382] should_failslab+0xc4/0x120 [ 36.894083][ T5382] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 36.894092][ T5382] __d_alloc+0x50/0x690 [ 36.894101][ T5382] d_alloc_pseudo+0x2c/0xd8 [ 36.894110][ T5382] alloc_path_pseudo+0xe8/0x1d4 [ 36.894119][ T5382] alloc_file_pseudo+0xb0/0x198 [ 36.894128][ T5382] sock_alloc_file+0xb4/0x1ac [ 36.894138][ T5382] __sys_socket+0x90/0xec [ 36.894147][ T5382] __arm64_sys_socket+0x84/0x9c [ 36.894156][ T5382] invoke_syscall+0x98/0x244 [ 36.894168][ T5382] el0_svc_common+0xec/0x23c [ 36.894180][ T5382] do_el0_svc+0x4c/0x5c [ 36.894191][ T5382] el0_svc+0x64/0x260 [ 36.894203][ T5382] el0t_64_sync_handler+0x44/0x104 [ 36.894213][ T5382] el0t_64_sync+0x198/0x19c [ 37.010339][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.023786][ T5388] netlink: 'syz.4.171': attribute type 39 has an invalid length. [ 37.072140][ T5377] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.128195][ T5392] loop1: detected capacity change from 0 to 4096 [ 37.214153][ T5396] loop3: detected capacity change from 0 to 256 [ 37.406405][ T5392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.425625][ T5377] overlay: filesystem on ./bus is read-only [ 37.540471][ T5399] loop0: detected capacity change from 0 to 1024 [ 37.547213][ T5399] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.558065][ T5399] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 37.558140][ T5399] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 37.558150][ T5399] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.173: Failed to acquire dquot type 0 [ 37.558201][ T5399] loop0: lost filesystem error report for type 5 error -5 [ 37.560895][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.560908][ C1] EXT4-fs (loop0): initial error at time 37: ext4_acquire_dquot:7069 [ 37.560919][ C1] EXT4-fs (loop0): last error at time 37: ext4_acquire_dquot:7069 [ 37.575517][ T5399] EXT4-fs (loop0): 1 truncate cleaned up [ 37.668775][ T5399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.670081][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.719379][ T5407] loop4: detected capacity change from 0 to 1024 [ 37.727445][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.752120][ T5407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.759842][ T5407] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.176: lblock 0 mapped to illegal pblock 0 (length 6) [ 37.780462][ T5407] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.176: bg 0: block 112: padding at end of block bitmap is not set [ 37.789964][ T5407] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 4: comm syz.4.176: lblock 4 mapped to illegal pblock 4 (length 2) [ 37.795886][ T5407] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 37.795910][ T5407] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.795910][ T5407] [ 38.028911][ T5421] comedi: No check for data length of config insn id 8 is implemented [ 38.028923][ T5421] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 38.028930][ T5421] comedi: Assuming n=55975 is correct [ 38.176583][ T13] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 38.176604][ T13] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.176604][ T13] [ 38.176612][ T13] EXT4-fs (loop4): Total free blocks count 0 [ 38.176619][ T13] EXT4-fs (loop4): Free/Dirty block details [ 38.176629][ T13] EXT4-fs (loop4): free_blocks=0 [ 38.176640][ T13] EXT4-fs (loop4): dirty_blocks=64 [ 38.176646][ T13] EXT4-fs (loop4): Block reservation details [ 38.242601][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 38.276386][ T5427] FAULT_INJECTION: forcing a failure. [ 38.276386][ T5427] name failslab, interval 1, probability 0, space 0, times 0 [ 38.276408][ T5427] CPU: 0 UID: 0 PID: 5427 Comm: syz.3.182 Not tainted syzkaller #0 PREEMPT [ 38.276419][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.276424][ T5427] Call trace: [ 38.276427][ T5427] show_stack+0x2c/0x3c (C) [ 38.276446][ T5427] __dump_stack+0x30/0x40 [ 38.276458][ T5427] dump_stack_lvl+0xd8/0x12c [ 38.276469][ T5427] dump_stack+0x1c/0x28 [ 38.276480][ T5427] should_fail_ex+0x41c/0x590 [ 38.276494][ T5427] should_failslab+0xc4/0x120 [ 38.276508][ T5427] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 38.276517][ T5427] __d_alloc+0x50/0x690 [ 38.276526][ T5427] d_alloc_pseudo+0x2c/0xd8 [ 38.276535][ T5427] alloc_path_pseudo+0xe8/0x1d4 [ 38.276544][ T5427] alloc_file_pseudo+0xb0/0x198 [ 38.276553][ T5427] sock_alloc_file+0xb4/0x1ac [ 38.276563][ T5427] __sys_socket+0x90/0xec [ 38.276572][ T5427] __arm64_sys_socket+0x84/0x9c [ 38.276582][ T5427] invoke_syscall+0x98/0x244 [ 38.276594][ T5427] el0_svc_common+0xec/0x23c [ 38.276606][ T5427] do_el0_svc+0x4c/0x5c [ 38.276617][ T5427] el0_svc+0x64/0x260 [ 38.276628][ T5427] el0t_64_sync_handler+0x44/0x104 [ 38.276639][ T5427] el0t_64_sync+0x198/0x19c [ 38.304007][ T5425] netlink: 'syz.4.181': attribute type 83 has an invalid length. [ 38.328080][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.827468][ T5444] loop1: detected capacity change from 0 to 512 [ 38.905341][ T5444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.922853][ T5449] fuse: Unknown parameter 'use00000000000000000000' [ 38.952965][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.027323][ T5458] loop2: detected capacity change from 0 to 4096 [ 39.030470][ T5458] EXT4-fs (loop2): Test dummy encryption mode enabled [ 39.038794][ T5458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.054899][ T5458] FAULT_INJECTION: forcing a failure. [ 39.054899][ T5458] name failslab, interval 1, probability 0, space 0, times 0 [ 39.054916][ T5458] CPU: 1 UID: 0 PID: 5458 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT [ 39.054926][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.054931][ T5458] Call trace: [ 39.054934][ T5458] show_stack+0x2c/0x3c (C) [ 39.054953][ T5458] __dump_stack+0x30/0x40 [ 39.054966][ T5458] dump_stack_lvl+0xd8/0x12c [ 39.054977][ T5458] dump_stack+0x1c/0x28 [ 39.054988][ T5458] should_fail_ex+0x41c/0x590 [ 39.055002][ T5458] should_failslab+0xc4/0x120 [ 39.055016][ T5458] kmem_cache_alloc_noprof+0x94/0x5d4 [ 39.055024][ T5458] create_new_namespaces+0x48/0x50c [ 39.055036][ T5458] __arm64_sys_setns+0x274/0x18d8 [ 39.055046][ T5458] invoke_syscall+0x98/0x244 [ 39.055058][ T5458] el0_svc_common+0xec/0x23c [ 39.055070][ T5458] do_el0_svc+0x4c/0x5c [ 39.055081][ T5458] el0_svc+0x64/0x260 [ 39.055092][ T5458] el0t_64_sync_handler+0x44/0x104 [ 39.055103][ T5458] el0t_64_sync+0x198/0x19c [ 39.237353][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.606354][ T30] audit: type=1326 audit(39.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5477 comm="syz.3.199" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d79368 code=0x0 [ 39.750285][ T5490] fuse: Unknown parameter 'use00000000000000000000' [ 39.885312][ T5498] loop4: detected capacity change from 0 to 256 [ 40.402748][ T5510] FAULT_INJECTION: forcing a failure. [ 40.402748][ T5510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.402766][ T5510] CPU: 0 UID: 0 PID: 5510 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT [ 40.402776][ T5510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.402781][ T5510] Call trace: [ 40.402783][ T5510] show_stack+0x2c/0x3c (C) [ 40.402801][ T5510] __dump_stack+0x30/0x40 [ 40.402812][ T5510] dump_stack_lvl+0xd8/0x12c [ 40.402821][ T5510] dump_stack+0x1c/0x28 [ 40.402830][ T5510] should_fail_ex+0x41c/0x590 [ 40.402842][ T5510] should_fail+0x14/0x24 [ 40.402851][ T5510] should_fail_usercopy+0x20/0x30 [ 40.402861][ T5510] simple_read_from_buffer+0xc4/0x238 [ 40.402872][ T5510] proc_fail_nth_read+0x1a8/0x248 [ 40.402881][ T5510] vfs_read+0x230/0x8c8 [ 40.402892][ T5510] ksys_read+0x12c/0x228 [ 40.402901][ T5510] __arm64_sys_read+0x84/0x98 [ 40.402911][ T5510] invoke_syscall+0x98/0x244 [ 40.402926][ T5510] el0_svc_common+0x19c/0x23c [ 40.402936][ T5510] do_el0_svc+0x4c/0x5c [ 40.402945][ T5510] el0_svc+0x64/0x260 [ 40.402955][ T5510] el0t_64_sync_handler+0x44/0x104 [ 40.402964][ T5510] el0t_64_sync+0x198/0x19c [ 40.559614][ T5518] __nla_validate_parse: 1 callbacks suppressed [ 40.559627][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 40.562829][ T5518] netlink: 'syz.3.211': attribute type 83 has an invalid length. [ 40.565234][ T5520] fuse: Unknown parameter 'use00000000000000000000' [ 40.579227][ T5521] openvswitch: netlink: Actions may not be safe on all matching packets [ 40.644732][ T5525] netlink: 'syz.2.214': attribute type 39 has an invalid length. [ 40.748390][ T5531] netlink: 'syz.1.217': attribute type 39 has an invalid length. [ 40.788463][ T5533] fuse: Invalid rootmode [ 41.357590][ T5555] fuse: Unknown parameter 'user_i00000000000000000000' [ 41.610238][ T5575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.233'. [ 41.610256][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 41.610267][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 41.643790][ T5579] FAULT_INJECTION: forcing a failure. [ 41.643790][ T5579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.643808][ T5579] CPU: 1 UID: 0 PID: 5579 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT [ 41.643817][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.643822][ T5579] Call trace: [ 41.643825][ T5579] show_stack+0x2c/0x3c (C) [ 41.643842][ T5577] loop1: detected capacity change from 0 to 256 [ 41.643845][ T5579] __dump_stack+0x30/0x40 [ 41.643858][ T5579] dump_stack_lvl+0xd8/0x12c [ 41.643867][ T5579] dump_stack+0x1c/0x28 [ 41.643876][ T5579] should_fail_ex+0x41c/0x590 [ 41.643888][ T5579] should_fail+0x14/0x24 [ 41.643898][ T5579] should_fail_usercopy+0x20/0x30 [ 41.643911][ T5579] _inline_copy_from_user+0x3c/0x174 [ 41.643923][ T5579] copy_msghdr_from_user+0xb8/0x194 [ 41.643933][ T5579] ___sys_sendmsg+0x14c/0x224 [ 41.643941][ T5579] __sys_sendmsg+0x158/0x204 [ 41.643950][ T5579] __arm64_sys_sendmsg+0x88/0x9c [ 41.643959][ T5579] invoke_syscall+0x98/0x244 [ 41.643969][ T5579] el0_svc_common+0xec/0x23c [ 41.643978][ T5579] do_el0_svc+0x4c/0x5c [ 41.643987][ T5579] el0_svc+0x64/0x260 [ 41.643998][ T5579] el0t_64_sync_handler+0x44/0x104 [ 41.644006][ T5579] el0t_64_sync+0x198/0x19c [ 41.731769][ T5583] fuse: Unknown parameter 'user_i00000000000000000000' [ 41.820690][ T5593] input: syz1 as /devices/virtual/input/input2 [ 41.885476][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.240'. [ 41.916172][ T5626] loop3: detected capacity change from 0 to 256 [ 42.064047][ T5623] psci: CPU1 killed (polled 0 ms) [ 42.131884][ T5637] fuse: Unknown parameter 'user_i00000000000000000000' [ 42.251388][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 42.284786][ T5643] netlink: 'syz.0.254': attribute type 83 has an invalid length. [ 42.652525][ T5652] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.797883][ T5654] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.278797][ T5670] loop0: detected capacity change from 0 to 512 [ 43.304711][ T5672] fuse: Unknown parameter 'user_id00000000000000000000' [ 43.314995][ T5670] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 43.317736][ T5670] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 43.317752][ T5670] loop0: lost filesystem error report for type 5 error -12 [ 43.320637][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 43.320652][ C0] EXT4-fs (loop0): initial error at time 43: ext4_process_orphan:346 [ 43.320668][ C0] EXT4-fs (loop0): last error at time 43: ext4_process_orphan:346 [ 43.332704][ T5670] EXT4-fs (loop0): 1 truncate cleaned up [ 43.333167][ T5670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.394985][ T5675] syzkaller1: entered promiscuous mode [ 43.395001][ T5675] syzkaller1: entered allmulticast mode [ 43.429907][ T5678] netlink: 'syz.2.266': attribute type 29 has an invalid length. [ 43.441689][ T5678] netlink: 'syz.2.266': attribute type 29 has an invalid length. [ 43.443031][ T5678] netlink: 'syz.2.266': attribute type 29 has an invalid length. [ 43.538169][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 43.550412][ T5685] loop3: detected capacity change from 0 to 256 [ 43.564577][ T5682] netlink: 'syz.2.268': attribute type 83 has an invalid length. [ 43.793595][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 44.069904][ T5703] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 44.115886][ T5705] fuse: Unknown parameter 'user_id00000000000000000000' [ 44.144567][ T5707] ip_tables: iptables: counters copy to user failed while replacing table [ 44.219732][ T5710] netlink: 'syz.4.278': attribute type 29 has an invalid length. [ 44.223500][ T5710] netlink: 'syz.4.278': attribute type 29 has an invalid length. [ 44.338937][ T5460] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 44.344150][ T5460] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 44.384306][ T5717] FAULT_INJECTION: forcing a failure. [ 44.384306][ T5717] name failslab, interval 1, probability 0, space 0, times 0 [ 44.384337][ T5717] CPU: 0 UID: 0 PID: 5717 Comm: syz.3.282 Not tainted syzkaller #0 PREEMPT [ 44.384351][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.384357][ T5717] Call trace: [ 44.384360][ T5717] show_stack+0x2c/0x3c (C) [ 44.384384][ T5717] __dump_stack+0x30/0x40 [ 44.384398][ T5717] dump_stack_lvl+0xd8/0x12c [ 44.384410][ T5717] dump_stack+0x1c/0x28 [ 44.384421][ T5717] should_fail_ex+0x41c/0x590 [ 44.384437][ T5717] should_failslab+0xc4/0x120 [ 44.384454][ T5717] kmem_cache_alloc_noprof+0x94/0x5d4 [ 44.384463][ T5717] key_alloc+0x288/0xd30 [ 44.384472][ T5717] keyring_alloc+0x68/0xe0 [ 44.384480][ T5717] install_session_keyring_to_cred+0xfc/0x1e4 [ 44.384491][ T5717] join_session_keyring+0xac/0x2d0 [ 44.384502][ T5717] lookup_user_key+0x338/0xd4c [ 44.384512][ T5717] __arm64_sys_add_key+0x34c/0x43c [ 44.384521][ T5717] invoke_syscall+0x98/0x244 [ 44.384534][ T5717] el0_svc_common+0xec/0x23c [ 44.384545][ T5717] do_el0_svc+0x4c/0x5c [ 44.384557][ T5717] el0_svc+0x64/0x260 [ 44.384568][ T5717] el0t_64_sync_handler+0x44/0x104 [ 44.384579][ T5717] el0t_64_sync+0x198/0x19c [ 44.587111][ T5729] capability: warning: `syz.4.284' uses 32-bit capabilities (legacy support in use) [ 44.907842][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 44.918049][ T5736] fuse: Unknown parameter 'user_id00000000000000000000' [ 44.943702][ T5738] loop4: detected capacity change from 0 to 1024 [ 44.950065][ T5738] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.950098][ T5738] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.958542][ T5738] JBD2: no valid journal superblock found [ 44.960486][ T5738] EXT4-fs (loop4): Could not load journal inode [ 45.002341][ T5741] loop1: detected capacity change from 0 to 1024 [ 45.013307][ T5741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.157746][ T5748] loop4: detected capacity change from 0 to 512 [ 45.166772][ T5748] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.289: inode has both inline data and extents flags [ 45.166841][ T5748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.169554][ T5748] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.289: couldn't read orphan inode 15 (err -117) [ 45.169574][ T5748] loop4: lost filesystem error report for type 5 error -117 [ 45.180175][ T5748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.183249][ T5750] netlink: 52 bytes leftover after parsing attributes in process `syz.1.290'. [ 45.194592][ T5748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.231804][ T5748] overlay: ./bus is not a directory [ 45.711271][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 45.711294][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 45.711303][ T5768] validate_nla: 1 callbacks suppressed [ 45.711308][ T5768] netlink: 'syz.2.299': attribute type 6 has an invalid length. [ 45.915264][ T5770] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 45.965687][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.144662][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.701057][ T5811] i2c i2c-0: delete_device: Can't find device in list [ 46.724371][ T5814] FAULT_INJECTION: forcing a failure. [ 46.724371][ T5814] name failslab, interval 1, probability 0, space 0, times 0 [ 46.724394][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz.1.307 Not tainted syzkaller #0 PREEMPT [ 46.724405][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.724411][ T5814] Call trace: [ 46.724414][ T5814] show_stack+0x2c/0x3c (C) [ 46.724430][ T5814] __dump_stack+0x30/0x40 [ 46.724441][ T5814] dump_stack_lvl+0xd8/0x12c [ 46.724450][ T5814] dump_stack+0x1c/0x28 [ 46.724459][ T5814] should_fail_ex+0x41c/0x590 [ 46.724470][ T5814] should_failslab+0xc4/0x120 [ 46.724481][ T5814] kmem_cache_alloc_noprof+0x94/0x5d4 [ 46.724489][ T5814] security_file_alloc+0x3c/0x300 [ 46.724498][ T5814] init_file+0x90/0x28c [ 46.724506][ T5814] alloc_empty_file+0x80/0x1cc [ 46.724513][ T5814] alloc_file+0x58/0x98 [ 46.724520][ T5814] alloc_file_pseudo+0xe0/0x198 [ 46.724527][ T5814] sock_alloc_file+0xb4/0x1ac [ 46.724536][ T5814] __sys_socket+0x90/0xec [ 46.724543][ T5814] __arm64_sys_socket+0x84/0x9c [ 46.724551][ T5814] invoke_syscall+0x98/0x244 [ 46.724561][ T5814] el0_svc_common+0xec/0x23c [ 46.724570][ T5814] do_el0_svc+0x4c/0x5c [ 46.724579][ T5814] el0_svc+0x64/0x260 [ 46.724589][ T5814] el0t_64_sync_handler+0x44/0x104 [ 46.724597][ T5814] el0t_64_sync+0x198/0x19c [ 48.133146][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133177][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133209][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133226][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133245][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133260][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133275][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133290][ T5793] Bluetooth: (null): Invalid header checksum [ 48.133312][ T5793] Bluetooth: (null): Invalid header checksum [ 48.138265][ T5822] Soft offlining pfn 0x11f7cb at process virtual address 0x20ab3000 [ 48.155613][ T5822] Soft offlining pfn 0x11f7ca at process virtual address 0x20ab4000 [ 48.316948][ T5785] loop0: detected capacity change from 0 to 8192 [ 48.326958][ T5843] netlink: 'syz.4.316': attribute type 29 has an invalid length. [ 48.328073][ T5843] netlink: 'syz.4.316': attribute type 29 has an invalid length. [ 48.330063][ T5843] netlink: 'syz.4.316': attribute type 29 has an invalid length. [ 48.557469][ T5785] Dev loop0: unable to read RDB block 8 [ 48.557523][ T5785] loop0: unable to read partition table [ 48.557589][ T5785] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 48.693719][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 48.775225][ T5849] netlink: 'syz.2.319': attribute type 83 has an invalid length. [ 48.877997][ T5866] loop2: detected capacity change from 0 to 1024 [ 48.878309][ T5866] EXT4-fs: Ignoring removed orlov option [ 48.944391][ T5866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.007594][ T5867] fuse: Bad value for 'group_id' [ 49.007607][ T5867] fuse: Bad value for 'group_id' [ 49.044545][ T5867] loop0: detected capacity change from 0 to 128 [ 49.049662][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.055068][ T5880] loop4: detected capacity change from 0 to 512 [ 49.174013][ T5880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.249009][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.257667][ T5889] netlink: 'syz.2.331': attribute type 29 has an invalid length. [ 49.267694][ T5889] netlink: 'syz.2.331': attribute type 29 has an invalid length. [ 49.270582][ T5889] netlink: 'syz.2.331': attribute type 29 has an invalid length. [ 49.317300][ T5887] loop3: detected capacity change from 0 to 4096 [ 49.345413][ T5887] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.354425][ T5887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.354910][ T5886] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 49.378017][ T5891] netlink: 76 bytes leftover after parsing attributes in process `syz.4.334'. [ 49.378032][ T5891] netlink: 68 bytes leftover after parsing attributes in process `syz.4.334'. [ 49.448103][ T5897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 49.448122][ T5897] overlayfs: missing 'lowerdir' [ 49.584045][ T5887] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 49.758521][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.135527][ T5919] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 50.932500][ T5922] FAULT_INJECTION: forcing a failure. [ 50.932500][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 50.932524][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.3.344 Not tainted syzkaller #0 PREEMPT [ 50.932537][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.932542][ T5922] Call trace: [ 50.932545][ T5922] show_stack+0x2c/0x3c (C) [ 50.932562][ T5922] __dump_stack+0x30/0x40 [ 50.932573][ T5922] dump_stack_lvl+0xd8/0x12c [ 50.932582][ T5922] dump_stack+0x1c/0x28 [ 50.932592][ T5922] should_fail_ex+0x41c/0x590 [ 50.932603][ T5922] should_failslab+0xc4/0x120 [ 50.932615][ T5922] __kmalloc_noprof+0x108/0x6c8 [ 50.932622][ T5922] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 50.932634][ T5922] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 50.932643][ T5922] genl_rcv_msg+0x43c/0x620 [ 50.932652][ T5922] netlink_rcv_skb+0x238/0x414 [ 50.932661][ T5922] genl_rcv+0x38/0x50 [ 50.932670][ T5922] netlink_unicast+0x600/0x7f8 [ 50.932678][ T5922] netlink_sendmsg+0x648/0x948 [ 50.932686][ T5922] __sock_sendmsg+0xc8/0x17c [ 50.932695][ T5922] __sys_sendto+0x250/0x328 [ 50.932703][ T5922] __arm64_sys_sendto+0xec/0x10c [ 50.932711][ T5922] invoke_syscall+0x98/0x244 [ 50.932721][ T5922] el0_svc_common+0xec/0x23c [ 50.932730][ T5922] do_el0_svc+0x4c/0x5c [ 50.932739][ T5922] el0_svc+0x64/0x260 [ 50.932749][ T5922] el0t_64_sync_handler+0x44/0x104 [ 50.932758][ T5922] el0t_64_sync+0x198/0x19c [ 51.015105][ T5926] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 51.024362][ T5926] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 51.026514][ T5926] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 51.153210][ T5931] loop1: detected capacity change from 0 to 512 [ 51.198093][ T5931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 51.198137][ T5931] System zones: 1-12 [ 51.198855][ T5931] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.348: missing EA_INODE flag [ 51.198871][ T5931] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.199573][ T5928] netlink: 'syz.4.346': attribute type 39 has an invalid length. [ 51.200632][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.200650][ C0] EXT4-fs (loop1): initial error at time 51: ext4_xattr_inode_iget:437: inode 12 [ 51.200666][ C0] EXT4-fs (loop1): last error at time 51: ext4_xattr_inode_iget:437: inode 12 [ 51.215801][ T5931] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.348: error while reading EA inode 12 err=-117 [ 51.215820][ T5931] loop1: lost filesystem error report for type 5 error -117 [ 51.216002][ T5931] EXT4-fs (loop1): 1 orphan inode deleted [ 51.216463][ T5931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.712246][ T5942] Console: switching to colour dummy device 80x25 [ 51.884305][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.948840][ T5951] fuse: Unknown parameter '0x0000000000000003' [ 51.969127][ T5948] loop4: detected capacity change from 0 to 4096 [ 52.012687][ T5948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.394697][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.467000][ T5964] syzkaller1: entered promiscuous mode [ 52.467016][ T5964] syzkaller1: entered allmulticast mode [ 52.512112][ T5968] FAULT_INJECTION: forcing a failure. [ 52.512112][ T5968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.512135][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT [ 52.512148][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.512155][ T5968] Call trace: [ 52.512159][ T5968] show_stack+0x2c/0x3c (C) [ 52.512177][ T5968] __dump_stack+0x30/0x40 [ 52.512189][ T5968] dump_stack_lvl+0xd8/0x12c [ 52.512198][ T5968] dump_stack+0x1c/0x28 [ 52.512207][ T5968] should_fail_ex+0x41c/0x590 [ 52.512219][ T5968] should_fail+0x14/0x24 [ 52.512228][ T5968] should_fail_usercopy+0x20/0x30 [ 52.512238][ T5968] _inline_copy_from_user+0x3c/0x174 [ 52.512248][ T5968] move_addr_to_kernel+0x88/0x168 [ 52.512256][ T5968] __copy_msghdr+0x2e0/0x3d4 [ 52.512264][ T5968] copy_msghdr_from_user+0xe8/0x194 [ 52.512273][ T5968] ___sys_sendmsg+0x14c/0x224 [ 52.512282][ T5968] __sys_sendmsg+0x158/0x204 [ 52.512290][ T5968] __arm64_sys_sendmsg+0x88/0x9c [ 52.512298][ T5968] invoke_syscall+0x98/0x244 [ 52.512308][ T5968] el0_svc_common+0xec/0x23c [ 52.512317][ T5968] do_el0_svc+0x4c/0x5c [ 52.512332][ T5968] el0_svc+0x64/0x260 [ 52.512342][ T5968] el0t_64_sync_handler+0x44/0x104 [ 52.512351][ T5968] el0t_64_sync+0x198/0x19c [ 52.675715][ T5972] loop2: detected capacity change from 0 to 1024 [ 52.678908][ T5972] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.678927][ T5972] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.693746][ T5972] JBD2: no valid journal superblock found [ 52.694075][ T5972] EXT4-fs (loop2): Could not load journal inode [ 52.854730][ T5979] loop1: detected capacity change from 0 to 1024 [ 52.856917][ T5979] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.856942][ T5979] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.869300][ T5979] JBD2: no valid journal superblock found [ 52.870572][ T5979] EXT4-fs (loop1): Could not load journal inode [ 52.950076][ T5980] loop2: detected capacity change from 0 to 512 [ 52.967952][ T5980] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.365: inode has both inline data and extents flags [ 52.967980][ T5980] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.972334][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 52.972348][ C0] EXT4-fs (loop2): initial error at time 52: ext4_orphan_get:1403: inode 15 [ 52.972368][ C0] EXT4-fs (loop2): last error at time 52: ext4_orphan_get:1403: inode 15 [ 52.986221][ T5980] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.365: couldn't read orphan inode 15 (err -117) [ 52.986243][ T5980] loop2: lost filesystem error report for type 5 error -117 [ 52.999207][ T5980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.049424][ T5980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.177246][ T5980] overlay: ./bus is not a directory [ 53.207923][ T5988] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.367: inode has both inline data and extents flags [ 53.207945][ T5988] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.209749][ T5988] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.367: couldn't read orphan inode 15 (err -117) [ 53.209770][ T5988] loop1: lost filesystem error report for type 5 error -117 [ 53.210632][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 53.210645][ C0] EXT4-fs (loop1): initial error at time 53: ext4_orphan_get:1403: inode 15 [ 53.210666][ C0] EXT4-fs (loop1): last error at time 53: ext4_orphan_get:1408 [ 53.231219][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.232206][ T5988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.247923][ T5987] netlink: 'syz.3.370': attribute type 39 has an invalid length. [ 53.411102][ T5991] FAULT_INJECTION: forcing a failure. [ 53.411102][ T5991] name failslab, interval 1, probability 0, space 0, times 0 [ 53.411124][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT [ 53.411135][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.411140][ T5991] Call trace: [ 53.411144][ T5991] show_stack+0x2c/0x3c (C) [ 53.411161][ T5991] __dump_stack+0x30/0x40 [ 53.411172][ T5991] dump_stack_lvl+0xd8/0x12c [ 53.411181][ T5991] dump_stack+0x1c/0x28 [ 53.411191][ T5991] should_fail_ex+0x41c/0x590 [ 53.411202][ T5991] should_failslab+0xc4/0x120 [ 53.411214][ T5991] __kmalloc_noprof+0x108/0x6c8 [ 53.411221][ T5991] tomoyo_realpath_from_path+0xbc/0x4dc [ 53.411232][ T5991] tomoyo_path_number_perm+0x1f0/0x500 [ 53.411240][ T5991] tomoyo_file_ioctl+0x2c/0x3c [ 53.411250][ T5991] security_file_ioctl+0xdc/0x2b0 [ 53.411258][ T5991] __arm64_sys_ioctl+0xb0/0x1cc [ 53.411269][ T5991] invoke_syscall+0x98/0x244 [ 53.411279][ T5991] el0_svc_common+0xec/0x23c [ 53.411288][ T5991] do_el0_svc+0x4c/0x5c [ 53.411297][ T5991] el0_svc+0x64/0x260 [ 53.411307][ T5991] el0t_64_sync_handler+0x44/0x104 [ 53.411315][ T5991] el0t_64_sync+0x198/0x19c [ 53.411331][ T5991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.534553][ T5988] overlay: ./bus is not a directory [ 53.615774][ T5996] set_capacity_and_notify: 2 callbacks suppressed [ 53.615787][ T5996] loop4: detected capacity change from 0 to 512 [ 53.864423][ T5996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.969894][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.538572][ T6020] ip_tables: iptables: counters copy to user failed while replacing table [ 54.795566][ T6025] syzkaller0: entered promiscuous mode [ 54.795584][ T6025] syzkaller0: entered allmulticast mode [ 54.820415][ T6027] fuse: Bad value for 'fd' [ 54.830509][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 55.496673][ T6038] overlay: Bad value for 'redirect_dir' [ 56.897666][ T6058] fuse: Bad value for 'fd' [ 57.040827][ T6060] netlink: 'syz.1.396': attribute type 39 has an invalid length. [ 58.492190][ T6078] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.589262][ T6080] loop3: detected capacity change from 0 to 1024 [ 58.635881][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.756514][ T6082] loop2: detected capacity change from 0 to 128 [ 59.391482][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.491504][ T6092] Illegal XDP return value 4294967274 on prog (id 49) dev N/A, expect packet loss! [ 59.793108][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 60.056495][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.412'. [ 60.056512][ T6104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 60.056524][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.412'. [ 60.601960][ T6120] ip_tables: iptables: counters copy to user failed while replacing table [ 61.112295][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 61.254956][ T6143] loop3: detected capacity change from 0 to 1024 [ 61.266275][ T6143] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.274372][ T6143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.280103][ T6143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.355561][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 61.842698][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 61.914129][ T6173] netlink: 'syz.3.432': attribute type 83 has an invalid length. [ 61.993582][ T6177] fuse: Bad value for 'fd' [ 62.006270][ T6181] syz.3.434 uses obsolete (PF_INET,SOCK_PACKET) [ 62.140158][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 62.140178][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 62.140188][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 62.177200][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 63.793646][ T6211] netlink: 'syz.1.444': attribute type 83 has an invalid length. [ 63.795311][ T6215] sctp: [Deprecated]: syz.3.446 (pid 6215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.795311][ T6215] Use struct sctp_sack_info instead [ 63.817029][ T6214] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.817049][ T6214] overlayfs: failed to set xattr on upper [ 63.817055][ T6214] overlayfs: ...falling back to redirect_dir=nofollow. [ 63.817061][ T6214] overlayfs: ...falling back to uuid=null. [ 63.980564][ T6223] loop4: detected capacity change from 0 to 1024 [ 63.988746][ T6223] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.988779][ T6223] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.996288][ T6223] JBD2: no valid journal superblock found [ 64.005458][ T6223] EXT4-fs (loop4): Could not load journal inode [ 64.194392][ T6223] loop4: detected capacity change from 0 to 512 [ 64.216514][ T6223] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.449: inode has both inline data and extents flags [ 64.216534][ T6223] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.216643][ T6223] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.449: couldn't read orphan inode 15 (err -117) [ 64.216655][ T6223] loop4: lost filesystem error report for type 5 error -117 [ 64.220503][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.221635][ T6223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.258521][ T6223] overlay: ./bus is not a directory [ 64.396415][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.396473][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.406340][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.418704][ T6236] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.435074][ T6236] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.473124][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.473542][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.478968][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.479313][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.487825][ T6236] wlan0 speed is unknown, defaulting to 1000 [ 64.492210][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492243][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500135][ T10] cfg80211: failed to load regulatory.db [ 65.048779][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.056910][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.454036][ T6253] netlink: 'syz.1.457': attribute type 29 has an invalid length. [ 65.506318][ T6255] netlink: 'syz.1.457': attribute type 29 has an invalid length. [ 65.515697][ T6253] netlink: 'syz.1.457': attribute type 29 has an invalid length. [ 65.547762][ T4720] Bluetooth: hci2: Unknown advertising packet type: 0x16 [ 65.656542][ T6261] loop1: detected capacity change from 0 to 512 [ 65.674710][ T6261] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 65.685368][ T6261] EXT4-fs (loop1): 1 truncate cleaned up [ 65.686011][ T6261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.688838][ T6258] tipc: Started in network mode [ 65.688851][ T6258] tipc: Node identity 829b1f6eac49, cluster identity 4711 [ 65.688934][ T6258] tipc: Enabled bearer , priority 0 [ 65.711187][ T6268] random: crng reseeded on system resumption [ 65.725243][ T6261] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.461: invalid indirect mapped block 2185560079 (level 0) [ 65.726009][ T6261] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.461: invalid indirect mapped block 65535 (level 2) [ 65.757602][ T6261] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.461: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 65.784181][ T30] audit: type=1326 audit(65.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.784204][ T30] audit: type=1326 audit(65.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.789955][ T30] audit: type=1326 audit(65.760:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.789976][ T30] audit: type=1326 audit(65.760:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.789991][ T30] audit: type=1326 audit(65.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.790538][ T30] audit: type=1326 audit(65.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.790555][ T30] audit: type=1326 audit(65.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.790571][ T30] audit: type=1326 audit(65.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.831236][ T30] audit: type=1326 audit(65.810:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.831258][ T30] audit: type=1326 audit(65.810:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.0.463" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x7ffc0000 [ 65.879834][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.883516][ T6268] tipc: Disabling bearer [ 65.984577][ T6276] loop2: detected capacity change from 0 to 256 [ 65.984981][ T6276] vfat: Unknown parameter 'Ù' [ 66.065141][ T6281] __nla_validate_parse: 2 callbacks suppressed [ 66.065155][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 66.086408][ T6284] netlink: 'syz.2.467': attribute type 39 has an invalid length. [ 66.139232][ T6281] netlink: 'syz.1.466': attribute type 83 has an invalid length. [ 66.598573][ T6309] loop1: detected capacity change from 0 to 512 [ 66.629978][ T6309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.760034][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.842195][ T6322] loop1: detected capacity change from 0 to 128 [ 66.868928][ T6322] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.261805][ T6348] FAULT_INJECTION: forcing a failure. [ 67.261805][ T6348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.261825][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.3.481 Not tainted syzkaller #0 PREEMPT [ 67.261835][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.261841][ T6348] Call trace: [ 67.261843][ T6348] show_stack+0x2c/0x3c (C) [ 67.261868][ T6348] __dump_stack+0x30/0x40 [ 67.261880][ T6348] dump_stack_lvl+0xd8/0x12c [ 67.261890][ T6348] dump_stack+0x1c/0x28 [ 67.261899][ T6348] should_fail_ex+0x41c/0x590 [ 67.261910][ T6348] should_fail_alloc_page+0xec/0x10c [ 67.261922][ T6348] prepare_alloc_pages+0x194/0x484 [ 67.261929][ T6348] __alloc_frozen_pages_noprof+0x180/0x648 [ 67.261937][ T6348] __alloc_pages_noprof+0x18/0x100 [ 67.261944][ T6348] alloc_pages_bulk_noprof+0x610/0x7d8 [ 67.261951][ T6348] __kasan_populate_vmalloc+0xc0/0x1d0 [ 67.261960][ T6348] alloc_vmap_area+0xdf4/0x13e8 [ 67.261968][ T6348] __get_vm_area_node+0x210/0x32c [ 67.261976][ T6348] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 67.261984][ T6348] __vmalloc_node_noprof+0xec/0x14c [ 67.261992][ T6348] __vmalloc_noprof+0x64/0x8c [ 67.262000][ T6348] bpf_prog_calc_tag+0x68/0x314 [ 67.262009][ T6348] check_and_resolve_insns+0xb4/0x1bb4 [ 67.262020][ T6348] bpf_check+0x19f0/0x243c [ 67.262029][ T6348] bpf_prog_load+0xf4c/0x1554 [ 67.262037][ T6348] __sys_bpf+0x7d4/0x82c [ 67.262045][ T6348] __arm64_sys_bpf+0xd0/0xec [ 67.262052][ T6348] invoke_syscall+0x98/0x244 [ 67.262062][ T6348] el0_svc_common+0xec/0x23c [ 67.262071][ T6348] do_el0_svc+0x4c/0x5c [ 67.262080][ T6348] el0_svc+0x64/0x260 [ 67.262090][ T6348] el0t_64_sync_handler+0x44/0x104 [ 67.262099][ T6348] el0t_64_sync+0x198/0x19c [ 67.262385][ T6348] syz.3.481: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 67.262422][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.3.481 Not tainted syzkaller #0 PREEMPT [ 67.262431][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.262435][ T6348] Call trace: [ 67.262438][ T6348] show_stack+0x2c/0x3c (C) [ 67.262449][ T6348] __dump_stack+0x30/0x40 [ 67.262458][ T6348] dump_stack_lvl+0xd8/0x12c [ 67.262467][ T6348] dump_stack+0x1c/0x28 [ 67.262476][ T6348] warn_alloc+0x1c4/0x1d8 [ 67.262483][ T6348] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 67.262492][ T6348] __vmalloc_node_noprof+0xec/0x14c [ 67.262500][ T6348] __vmalloc_noprof+0x64/0x8c [ 67.262508][ T6348] bpf_prog_calc_tag+0x68/0x314 [ 67.262516][ T6348] check_and_resolve_insns+0xb4/0x1bb4 [ 67.262526][ T6348] bpf_check+0x19f0/0x243c [ 67.262535][ T6348] bpf_prog_load+0xf4c/0x1554 [ 67.262543][ T6348] __sys_bpf+0x7d4/0x82c [ 67.262551][ T6348] __arm64_sys_bpf+0xd0/0xec [ 67.262558][ T6348] invoke_syscall+0x98/0x244 [ 67.262567][ T6348] el0_svc_common+0xec/0x23c [ 67.262577][ T6348] do_el0_svc+0x4c/0x5c [ 67.262586][ T6348] el0_svc+0x64/0x260 [ 67.262594][ T6348] el0t_64_sync_handler+0x44/0x104 [ 67.262602][ T6348] el0t_64_sync+0x198/0x19c [ 67.262611][ T6348] Mem-Info: [ 67.262615][ T6348] active_anon:28 inactive_anon:9663 isolated_anon:0 [ 67.262615][ T6348] active_file:2722 inactive_file:14511 isolated_file:0 [ 67.262615][ T6348] unevictable:768 dirty:352 writeback:0 [ 67.262615][ T6348] slab_reclaimable:8788 slab_unreclaimable:88486 [ 67.262615][ T6348] mapped:32463 shmem:3701 pagetables:5731 [ 67.262615][ T6348] sec_pagetables:0 bounce:0 [ 67.262615][ T6348] kernel_misc_reclaimable:0 [ 67.262615][ T6348] free:1456547 free_pcp:27449 free_cma:7616 [ 67.262637][ T6348] Node 0 active_anon:112kB inactive_anon:38652kB active_file:10888kB inactive_file:58044kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:129852kB dirty:1408kB writeback:0kB shmem:14804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9248kB pagetables:22924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 67.262656][ T6348] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 67.262678][ T6348] lowmem_reserve[]: 0 0 3650 3650 3650 [ 67.262696][ T6348] Node 0 Normal free:2748300kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:112kB inactive_anon:38652kB active_file:10888kB inactive_file:58044kB unevictable:3072kB writepending:1408kB zspages:0kB present:5242880kB managed:3738576kB mlocked:0kB bounce:0kB free_pcp:109796kB local_pcp:109796kB free_cma:0kB [ 67.262717][ T6348] lowmem_reserve[]: 0 0 0 0 0 [ 67.262734][ T6348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 67.262791][ T6348] Node 0 Normal: 4131*4kB (UME) 1792*8kB (UME) 1164*16kB (UME) 1306*32kB (UME) 1162*64kB (UME) 783*128kB (UME) 635*256kB (UM) 535*512kB (UM) 334*1024kB (UM) 18*2048kB (M) 407*4096kB (UM) = 2748300kB [ 67.262941][ T6348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.262947][ T6348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 67.262954][ T6348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 67.262961][ T6348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 67.262967][ T6348] 20930 total pagecache pages [ 67.262971][ T6348] 0 pages in swap cache [ 67.262974][ T6348] Free swap = 124996kB [ 67.262977][ T6348] Total swap = 124996kB [ 67.262981][ T6348] 2097152 pages RAM [ 67.262984][ T6348] 0 pages HighMem/MovableOnly [ 67.262987][ T6348] 392460 pages reserved [ 67.262990][ T6348] 8192 pages cma reserved [ 67.262993][ T6348] 2 pages hwpoisoned [ 67.442363][ T6354] fuse: fd is not a fuse device [ 67.466117][ T6355] netlink: 'syz.4.483': attribute type 29 has an invalid length. [ 67.472855][ T6355] netlink: 'syz.4.483': attribute type 29 has an invalid length. [ 67.478556][ T6355] netlink: 'syz.4.483': attribute type 29 has an invalid length. [ 68.261074][ T6369] FAULT_INJECTION: forcing a failure. [ 68.261074][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 68.261094][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.4.485 Not tainted syzkaller #0 PREEMPT [ 68.261104][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.261109][ T6369] Call trace: [ 68.261112][ T6369] show_stack+0x2c/0x3c (C) [ 68.261129][ T6369] __dump_stack+0x30/0x40 [ 68.261139][ T6369] dump_stack_lvl+0xd8/0x12c [ 68.261149][ T6369] dump_stack+0x1c/0x28 [ 68.261158][ T6369] should_fail_ex+0x41c/0x590 [ 68.261169][ T6369] should_failslab+0xc4/0x120 [ 68.261180][ T6369] __kvmalloc_node_noprof+0x160/0x7fc [ 68.261189][ T6369] bpf_compute_const_regs+0x150/0x1ba8 [ 68.261197][ T6369] bpf_check+0x1ce8/0x243c [ 68.261208][ T6369] bpf_prog_load+0xf4c/0x1554 [ 68.261216][ T6369] __sys_bpf+0x7d4/0x82c [ 68.261224][ T6369] __arm64_sys_bpf+0xd0/0xec [ 68.261231][ T6369] invoke_syscall+0x98/0x244 [ 68.261241][ T6369] el0_svc_common+0xec/0x23c [ 68.261250][ T6369] do_el0_svc+0x4c/0x5c [ 68.261259][ T6369] el0_svc+0x64/0x260 [ 68.261269][ T6369] el0t_64_sync_handler+0x44/0x104 [ 68.261278][ T6369] el0t_64_sync+0x198/0x19c [ 68.628483][ T6374] loop4: detected capacity change from 0 to 512 [ 68.699195][ T6374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.699215][ T6374] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 68.727497][ T6374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.487: bg 0: block 255: padding at end of block bitmap is not set [ 68.727522][ T6374] loop4: lost filesystem error report for type 5 error -117 [ 68.730633][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 68.730647][ C0] EXT4-fs (loop4): initial error at time 68: ext4_validate_block_bitmap:445 [ 68.730664][ C0] EXT4-fs (loop4): last error at time 68: ext4_validate_block_bitmap:445 [ 68.742401][ T6374] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 68.742418][ T6374] loop4: lost filesystem error report for type 5 error -117 [ 68.742644][ T6374] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.487: invalid indirect mapped block 1 (level 1) [ 68.742660][ T6374] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.746940][ T6374] EXT4-fs (loop4): 1 truncate cleaned up [ 68.747572][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.752530][ T6381] loop3: detected capacity change from 0 to 512 [ 68.785095][ T6381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.786970][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.893986][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.961995][ T6386] loop1: detected capacity change from 0 to 128 [ 68.968014][ T6386] FAT-fs (loop1): invalid media value (0x00) [ 68.968030][ T6386] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 68.968041][ T6386] FAT-fs (loop1): Can't find a valid FAT filesystem [ 69.203787][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 69.524594][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.622494][ T6408] loop1: detected capacity change from 0 to 1024 [ 69.633211][ T6408] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.633238][ T6408] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.641904][ T6408] JBD2: no valid journal superblock found [ 69.644516][ T6408] EXT4-fs (loop1): Could not load journal inode [ 69.837711][ T6408] loop1: detected capacity change from 0 to 512 [ 69.845134][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 69.856188][ T6408] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.496: inode has both inline data and extents flags [ 69.856206][ T6408] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.856313][ T6408] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.496: couldn't read orphan inode 15 (err -117) [ 69.856325][ T6408] loop1: lost filesystem error report for type 5 error -117 [ 69.856841][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.881738][ T6408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.904806][ T6408] overlay: ./bus is not a directory [ 69.908106][ T6416] netlink: 'syz.0.498': attribute type 83 has an invalid length. [ 70.260048][ T6450] netlink: 548 bytes leftover after parsing attributes in process `syz.2.507'. [ 70.323250][ T6452] loop0: detected capacity change from 0 to 8 [ 70.332520][ T6452] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 70.332528][ T6452] unable to read xattr id index table [ 70.336105][ T6452] SQUASHFS error: zlib decompression failed, data probably corrupt [ 70.336121][ T6452] SQUASHFS error: Failed to read block 0x9b: -5 [ 70.336128][ T6452] SQUASHFS error: Unable to read metadata cache entry [99] [ 70.336134][ T6452] SQUASHFS error: Unable to read inode 0x127 [ 70.528447][ T6458] wlan0 speed is unknown, defaulting to 1000 [ 70.799234][ T6459] loop1: detected capacity change from 0 to 4096 [ 70.803893][ T6459] EXT4-fs: Ignoring removed orlov option [ 70.803913][ T6459] ext4: Unknown parameter 'subj_user' [ 71.139321][ T6465] (NULL device *): [drm] All planes must have at least one possible CRTC [ 71.153698][ T6459] loop1: detected capacity change from 0 to 4096 [ 71.156487][ T6459] EXT4-fs: Ignoring removed nobh option [ 71.158476][ T6459] EXT4-fs (loop1): Test dummy encryption mode enabled [ 71.187068][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.206015][ T6467] input: syz0 as /devices/virtual/input/input3 [ 71.219622][ T6471] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 71.220040][ T6459] EXT4-fs: Ignoring removed nobh option [ 71.231449][ T6471] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 71.232528][ T6471] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 71.237669][ T6459] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 71.472895][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.537971][ T6486] loop2: detected capacity change from 0 to 1024 [ 71.543378][ T6486] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.543397][ T6486] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.601612][ T6486] JBD2: no valid journal superblock found [ 71.617586][ T6486] EXT4-fs (loop2): Could not load journal inode [ 72.636944][ T6492] FAULT_INJECTION: forcing a failure. [ 72.636944][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.636968][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.3.523 Not tainted syzkaller #0 PREEMPT [ 72.636981][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.636987][ T6492] Call trace: [ 72.636990][ T6492] show_stack+0x2c/0x3c (C) [ 72.637009][ T6492] __dump_stack+0x30/0x40 [ 72.637021][ T6492] dump_stack_lvl+0xd8/0x12c [ 72.637032][ T6492] dump_stack+0x1c/0x28 [ 72.637043][ T6492] should_fail_ex+0x41c/0x590 [ 72.637056][ T6492] should_fail+0x14/0x24 [ 72.637068][ T6492] should_fail_usercopy+0x20/0x30 [ 72.637081][ T6492] _inline_copy_from_user+0x3c/0x174 [ 72.637092][ T6492] __arm64_sys_io_uring_setup+0x1c0/0x290 [ 72.637101][ T6492] invoke_syscall+0x98/0x244 [ 72.637113][ T6492] el0_svc_common+0xec/0x23c [ 72.637125][ T6492] do_el0_svc+0x4c/0x5c [ 72.637136][ T6492] el0_svc+0x64/0x260 [ 72.637148][ T6492] el0t_64_sync_handler+0x44/0x104 [ 72.637158][ T6492] el0t_64_sync+0x198/0x19c [ 72.951991][ T6486] loop2: detected capacity change from 0 to 512 [ 72.957988][ T6486] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.521: inode has both inline data and extents flags [ 72.958010][ T6486] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.958117][ T6486] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.521: couldn't read orphan inode 15 (err -117) [ 72.958131][ T6486] loop2: lost filesystem error report for type 5 error -117 [ 72.958636][ T6486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.959665][ T6486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.103373][ T6486] overlay: ./bus is not a directory [ 73.103789][ T6504] netlink: 76 bytes leftover after parsing attributes in process `syz.3.526'. [ 73.114826][ T6504] netlink: 76 bytes leftover after parsing attributes in process `syz.3.526'. [ 73.373501][ T6511] FAULT_INJECTION: forcing a failure. [ 73.373501][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.373522][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT [ 73.373534][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.373541][ T6511] Call trace: [ 73.373544][ T6511] show_stack+0x2c/0x3c (C) [ 73.373563][ T6511] __dump_stack+0x30/0x40 [ 73.373574][ T6511] dump_stack_lvl+0xd8/0x12c [ 73.373584][ T6511] dump_stack+0x1c/0x28 [ 73.373593][ T6511] should_fail_ex+0x41c/0x590 [ 73.373605][ T6511] should_fail+0x14/0x24 [ 73.373614][ T6511] should_fail_usercopy+0x20/0x30 [ 73.373624][ T6511] _inline_copy_from_user+0x3c/0x174 [ 73.373633][ T6511] __sys_bpf+0x1b4/0x82c [ 73.373641][ T6511] __arm64_sys_bpf+0xd0/0xec [ 73.373649][ T6511] invoke_syscall+0x98/0x244 [ 73.373660][ T6511] el0_svc_common+0xec/0x23c [ 73.373669][ T6511] do_el0_svc+0x4c/0x5c [ 73.373678][ T6511] el0_svc+0x64/0x260 [ 73.373688][ T6511] el0t_64_sync_handler+0x44/0x104 [ 73.373696][ T6511] el0t_64_sync+0x198/0x19c [ 73.559647][ T6517] tmpfs: Bad value for 'mpol' [ 73.816194][ T6521] FAULT_INJECTION: forcing a failure. [ 73.816194][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 73.816218][ T6521] CPU: 0 UID: 0 PID: 6521 Comm: syz.2.532 Not tainted syzkaller #0 PREEMPT [ 73.816230][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.816236][ T6521] Call trace: [ 73.816239][ T6521] show_stack+0x2c/0x3c (C) [ 73.816258][ T6521] __dump_stack+0x30/0x40 [ 73.816271][ T6521] dump_stack_lvl+0xd8/0x12c [ 73.816284][ T6521] dump_stack+0x1c/0x28 [ 73.816301][ T6521] should_fail_ex+0x41c/0x590 [ 73.816317][ T6521] should_failslab+0xc4/0x120 [ 73.816337][ T6521] __kvmalloc_node_noprof+0x160/0x7fc [ 73.816347][ T6521] io_alloc_cache_init+0x48/0x154 [ 73.816362][ T6521] io_ring_ctx_alloc+0x3c8/0x958 [ 73.816372][ T6521] io_uring_create+0x6c/0x830 [ 73.816383][ T6521] __arm64_sys_io_uring_setup+0x284/0x290 [ 73.816393][ T6521] invoke_syscall+0x98/0x244 [ 73.816406][ T6521] el0_svc_common+0xec/0x23c [ 73.816420][ T6521] do_el0_svc+0x4c/0x5c [ 73.816432][ T6521] el0_svc+0x64/0x260 [ 73.816443][ T6521] el0t_64_sync_handler+0x44/0x104 [ 73.816455][ T6521] el0t_64_sync+0x198/0x19c [ 74.018374][ T6525] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 74.208723][ T6534] FAULT_INJECTION: forcing a failure. [ 74.208723][ T6534] name failslab, interval 1, probability 0, space 0, times 0 [ 74.208744][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.2.537 Not tainted syzkaller #0 PREEMPT [ 74.208753][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.208758][ T6534] Call trace: [ 74.208761][ T6534] show_stack+0x2c/0x3c (C) [ 74.208778][ T6534] __dump_stack+0x30/0x40 [ 74.208788][ T6534] dump_stack_lvl+0xd8/0x12c [ 74.208797][ T6534] dump_stack+0x1c/0x28 [ 74.208806][ T6534] should_fail_ex+0x41c/0x590 [ 74.208818][ T6534] should_failslab+0xc4/0x120 [ 74.208829][ T6534] kmem_cache_alloc_noprof+0x94/0x5d4 [ 74.208836][ T6534] skb_clone+0x1ac/0x320 [ 74.208846][ T6534] __netlink_deliver_tap+0x364/0x6f4 [ 74.208860][ T6534] netlink_deliver_tap+0x1d8/0x1dc [ 74.208868][ T6534] netlink_unicast+0x5dc/0x7f8 [ 74.208877][ T6534] netlink_sendmsg+0x648/0x948 [ 74.208885][ T6534] __sock_sendmsg+0xc8/0x17c [ 74.208893][ T6534] ____sys_sendmsg+0x3d0/0x6c8 [ 74.208901][ T6534] ___sys_sendmsg+0x198/0x224 [ 74.208910][ T6534] __sys_sendmsg+0x158/0x204 [ 74.208918][ T6534] __arm64_sys_sendmsg+0x88/0x9c [ 74.208926][ T6534] invoke_syscall+0x98/0x244 [ 74.208936][ T6534] el0_svc_common+0xec/0x23c [ 74.208945][ T6534] do_el0_svc+0x4c/0x5c [ 74.208954][ T6534] el0_svc+0x64/0x260 [ 74.208964][ T6534] el0t_64_sync_handler+0x44/0x104 [ 74.208972][ T6534] el0t_64_sync+0x198/0x19c [ 74.293018][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.306627][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.474638][ T6541] tipc: Enabling of bearer rejected, failed to enable media [ 74.883249][ T6547] input: syz0 as /devices/virtual/input/input4 [ 74.890406][ T6551] Injecting memory failure for pfn 0x147cfb at process virtual address 0x20001000 [ 74.921247][ T6551] Memory failure: 0x147cfb: recovery action for clean LRU page: Recovered [ 74.921268][ T6551] Injecting memory failure for pfn 0x14626a at process virtual address 0x20002000 [ 74.921321][ T6551] Memory failure: 0x14626a: recovery action for clean LRU page: Recovered [ 74.921344][ T6551] Injecting memory failure for pfn 0x14626b at process virtual address 0x20003000 [ 74.921383][ T6551] Memory failure: 0x14626b: recovery action for clean LRU page: Recovered [ 75.189208][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 75.189227][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 75.483739][ T5809] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.614131][ T5809] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.670402][ T5809] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.710842][ T5809] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.858407][ T6567] 0x000000000000-0x000000010000 : "" [ 76.860919][ T6567] ftl_cs: FTL header not found. [ 76.891891][ T4720] Bluetooth: hci3: command tx timeout [ 76.971660][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.972355][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.972656][ T4714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.972968][ T4714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.973180][ T4714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.995533][ T6574] ------------[ cut here ]------------ [ 76.995542][ T6574] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3f4/0x86c, CPU#0: syz.0.551/6574 [ 76.998217][ T6574] Modules linked in: [ 76.998904][ T6574] CPU: 0 UID: 0 PID: 6574 Comm: syz.0.551 Not tainted syzkaller #0 PREEMPT [ 77.000461][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.002268][ T6574] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 77.003628][ T6574] pc : cleanup_srcu_struct+0x3f4/0x86c [ 77.004570][ T6574] lr : cleanup_srcu_struct+0x394/0x86c [ 77.005516][ T6574] sp : ffff800093eb7450 [ 77.006288][ T6574] x29: ffff800093eb7480 x28: 1fffe00018ae9023 x27: 1ffff000110e6c4a [ 77.007801][ T6574] x26: dfff800000000000 x25: ffff800088b9a960 x24: ffffffffffffffff [ 77.009268][ T6574] x23: ffff80008e8c4ba0 x22: ffff0000c5748118 x21: 0000000000000000 [ 77.010646][ T6574] x20: fffffdffbf740f00 x19: fffffdffbf740d00 x18: 00000000ffffffff [ 77.012019][ T6574] x17: ffff800080367e8c x16: ffff8000804e2b58 x15: ffff80008a849000 [ 77.013417][ T6574] x14: 0000000000000005 x13: 0000000000000001 x12: 0000000000000003 [ 77.014865][ T6574] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000066fb0 [ 77.016234][ T6574] x8 : 0000000000000004 x7 : 0000000000000000 x6 : 0000000000000000 [ 77.017590][ T6574] x5 : 0000000000000020 x4 : 0000000000000008 x3 : ffff80008054e050 [ 77.018986][ T6574] x2 : 0000000000000001 x1 : ffff0000cb140000 x0 : 0000000000000001 [ 77.020360][ T6574] Call trace: [ 77.020900][ T6574] cleanup_srcu_struct+0x3f4/0x86c (P) [ 77.021820][ T6574] blk_mq_free_tag_set+0x33c/0x438 [ 77.022757][ T6574] blktrans_dev_put+0xa0/0x1e8 [ 77.023623][ T6574] del_mtd_blktrans_dev+0x2cc/0x37c [ 77.024575][ T6574] mtdblock_remove_dev+0x20/0x30 [ 77.025458][ T6574] blktrans_notify_remove+0xd4/0x148 [ 77.026402][ T6574] del_mtd_device+0xa0/0x1ac [ 77.027227][ T6574] __mtd_del_partition+0x15c/0x180 [ 77.028109][ T6574] mtd_del_partition+0xec/0x114 [ 77.028983][ T6574] mtdchar_blkpg_ioctl+0x1cc/0x248 [ 77.029899][ T6574] mtdchar_ioctl+0x1218/0x1a7c [ 77.030722][ T6574] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 77.031663][ T6574] __arm64_sys_ioctl+0x154/0x1cc [ 77.032536][ T6574] invoke_syscall+0x98/0x244 [ 77.033258][ T6574] el0_svc_common+0xec/0x23c [ 77.034079][ T6574] do_el0_svc+0x4c/0x5c [ 77.034758][ T6574] el0_svc+0x64/0x260 [ 77.035403][ T6574] el0t_64_sync_handler+0x44/0x104 [ 77.036230][ T6574] el0t_64_sync+0x198/0x19c [ 77.036935][ T6574] irq event stamp: 4414 [ 77.037616][ T6574] hardirqs last enabled at (4413): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 77.039441][ T6574] hardirqs last disabled at (4414): [] el1_brk64+0x20/0x54 [ 77.040904][ T6574] softirqs last enabled at (4118): [] __alloc_skb+0x1c0/0x610 [ 77.042424][ T6574] softirqs last disabled at (4116): [] __alloc_skb+0x1a8/0x610 [ 77.044040][ T6574] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 77.067823][ T5809] bond0: left allmulticast mode [ 77.067839][ T5809] bond_slave_0: left allmulticast mode [ 77.067866][ T5809] bond_slave_1: left allmulticast mode [ 77.068353][ T5809] bond0: left promiscuous mode [ 77.068365][ T5809] bond_slave_0: left promiscuous mode [ 77.068458][ T5809] bond_slave_1: left promiscuous mode [ 77.068744][ T5809] bridge0: port 3(bond0) entered disabled state [ 77.146091][ T5809] bridge_slave_1: left allmulticast mode [ 77.146114][ T5809] bridge_slave_1: left promiscuous mode [ 77.147063][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.190252][ T5809] bridge_slave_0: left allmulticast mode [ 77.190269][ T5809] bridge_slave_0: left promiscuous mode [ 77.190344][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.621808][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.623104][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.623860][ T5809] bond0 (unregistering): Released all slaves [ 77.986021][ T5809] hsr_slave_0: left promiscuous mode [ 77.993298][ T5809] hsr_slave_1: left promiscuous mode [ 77.993628][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.993646][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.994063][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.994073][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.008484][ T5809] veth1_vlan: left promiscuous mode [ 78.008515][ T5809] veth0_vlan: left promiscuous mode [ 78.210953][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 78.214994][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 78.401219][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 78.478913][ T5809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.526409][ T5809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.542720][ T5809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.590325][ T5809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.703794][ T5809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.732560][ T5809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.778053][ T5809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.822527][ T5809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.836288][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 78.916670][ T5809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.962759][ T5809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.987727][ T5809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.031811][ T5809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.113374][ T5809] bridge_slave_1: left allmulticast mode [ 79.113399][ T5809] bridge_slave_1: left promiscuous mode [ 79.113486][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.114408][ T5809] bridge_slave_0: left allmulticast mode [ 79.114419][ T5809] bridge_slave_0: left promiscuous mode [ 79.114473][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.131017][ T5809] bridge_slave_1: left allmulticast mode [ 79.131030][ T5809] bridge_slave_1: left promiscuous mode [ 79.131091][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.161928][ T5809] bridge_slave_0: left allmulticast mode [ 79.161946][ T5809] bridge_slave_0: left promiscuous mode [ 79.162012][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.176649][ T5809] bridge_slave_1: left allmulticast mode [ 79.176665][ T5809] bridge_slave_1: left promiscuous mode [ 79.176725][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.177598][ T5809] bridge_slave_0: left allmulticast mode [ 79.177608][ T5809] bridge_slave_0: left promiscuous mode [ 79.177657][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.423974][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.425087][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.425844][ T5809] bond0 (unregistering): Released all slaves [ 79.513873][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.514940][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.515661][ T5809] bond0 (unregistering): Released all slaves [ 79.602734][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.614039][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.614812][ T5809] bond0 (unregistering): Released all slaves [ 79.617352][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 79.651003][ T5809] tipc: Left network mode [ 79.651183][ T5809] tipc: Left network mode [ 79.763894][ T6467] syz_tun (unregistering): left allmulticast mode [ 79.941426][ T865] wlan0 speed is unknown, defaulting to 1000 [ 79.941447][ T865] infiniband syz2: ib_query_port failed (-19) [ 79.987111][ T5809] hsr_slave_0: left promiscuous mode [ 79.987445][ T5809] hsr_slave_1: left promiscuous mode [ 79.987697][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.987708][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.987986][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.987995][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.002343][ T5809] hsr_slave_0: left promiscuous mode [ 80.002632][ T5809] hsr_slave_1: left promiscuous mode [ 80.002904][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.002914][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.010941][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.010953][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.045299][ T5809] hsr_slave_0: left promiscuous mode [ 80.045537][ T5809] hsr_slave_1: left promiscuous mode [ 80.045777][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.045787][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.046044][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.046053][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.081521][ T5809] veth1_vlan: left promiscuous mode [ 80.081659][ T5809] veth0_vlan: left promiscuous mode [ 80.082301][ T5809] veth1_macvtap: left promiscuous mode [ 80.082321][ T5809] veth0_macvtap: left promiscuous mode [ 80.082373][ T5809] veth1_vlan: left promiscuous mode [ 80.082394][ T5809] veth0_vlan: left promiscuous mode [ 80.082850][ T5809] veth1_macvtap: left promiscuous mode [ 80.082867][ T5809] veth0_macvtap: left promiscuous mode [ 80.082906][ T5809] veth1_vlan: left promiscuous mode [ 80.082935][ T5809] veth0_vlan: left promiscuous mode [ 80.276425][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 80.280170][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 80.400117][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 80.411226][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 80.525803][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 80.529491][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 80.585499][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 80.800084][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 80.862566][ T5809] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.888389][ T5809] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.901930][ T5809] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.934706][ T5809] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.996642][ T5809] bridge_slave_1: left allmulticast mode [ 80.996664][ T5809] bridge_slave_1: left promiscuous mode [ 80.996729][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.997633][ T5809] bridge_slave_0: left allmulticast mode [ 80.997644][ T5809] bridge_slave_0: left promiscuous mode [ 80.997699][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.106503][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.107589][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.108315][ T5809] bond0 (unregistering): Released all slaves [ 81.117036][ T5809] bond1 (unregistering): Released all slaves [ 81.122919][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 81.211861][ T5809] hsr_slave_0: left promiscuous mode [ 81.212087][ T5809] hsr_slave_1: left promiscuous mode [ 81.212352][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.212364][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.212627][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.212636][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.220716][ T5809] veth1_macvtap: left promiscuous mode [ 81.220738][ T5809] veth0_macvtap: left promiscuous mode [ 81.220782][ T5809] veth1_vlan: left promiscuous mode [ 81.220815][ T5809] veth0_vlan: left promiscuous mode [ 81.417421][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 81.427315][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 81.486628][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 81.656900][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 81.787360][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 81.928043][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9 [ 82.049630][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 82.178615][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 82.302310][ T4398] 8021q: adding VLAN 0 to HW filter on device eth12 [ 82.427044][ T4398] 8021q: adding VLAN 0 to HW filter on device eth13 [ 82.552380][ T4398] 8021q: adding VLAN 0 to HW filter on device eth14 [ 82.676758][ T4398] 8021q: adding VLAN 0 to HW filter on device eth15 [ 82.806999][ T4398] 8021q: adding VLAN 0 to HW filter on device eth16 [ 82.936021][ T4398] 8021q: adding VLAN 0 to HW filter on device eth18 [ 83.065270][ T4398] 8021q: adding VLAN 0 to HW filter on device eth17 [ 83.205052][ T4398] 8021q: adding VLAN 0 to HW filter on device eth19