last executing test programs: 1m12.659041389s ago: executing program 32 (id=302): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1m10.178391689s ago: executing program 2 (id=332): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) 1m9.976118758s ago: executing program 2 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.62808772s ago: executing program 2 (id=343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x2, 0x7, 0x0, 0x4, 0x7, 0xe0a5, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x1300, @empty, 0x7}}, 0x8, 0x4, 0x4, 0x4e80}}, &(0x7f00000001c0)=0xb0) 1m9.475010874s ago: executing program 2 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0/../file0\x00') 1m9.387260113s ago: executing program 2 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x28, r2, 0x209, 0x0, 0x400, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf2503000000060001004e20"], 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) 1m8.785439663s ago: executing program 2 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m8.583216126s ago: executing program 33 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 48.842713429s ago: executing program 6 (id=715): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x1000c40, &(0x7f0000000400), 0x5, 0x51c, &(0x7f0000000440)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 48.578450648s ago: executing program 6 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) setresuid(0x0, 0xee00, 0xee00) write(r0, &(0x7f0000000280)='1', 0x1) 48.293549041s ago: executing program 6 (id=730): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") ioprio_set$pid(0x1, 0x0, 0x2007) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 48.166220757s ago: executing program 6 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0/../file0\x00') 47.848054387s ago: executing program 6 (id=737): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) 47.653718714s ago: executing program 6 (id=741): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x3) 47.50582625s ago: executing program 34 (id=741): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x3) 44.390744692s ago: executing program 3 (id=790): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x400c80c1, &(0x7f0000000040)={0xa, 0x4e29, 0x2, @mcast2, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffe58, 0x44800, 0x0, 0x19) recvfrom(r0, 0x0, 0x0, 0x2001, &(0x7f00000012c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1f, 0x2}, 0x80) 44.247754775s ago: executing program 3 (id=794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) unshare(0x26020480) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 44.089000258s ago: executing program 3 (id=797): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7b0, &(0x7f0000000f80)="$eJzs3c9rHNcdAPDvrH5adisVCq17EhRagfGqclW7hUJdeiiFGgzt2bZYrYWrldZoV8YSAtuUQi85JOQQiC8+x4lz8zU/rsklf0MOwcZJZBOHHILC7M7aK2lXXtvaXQd9PjDSezNv9d533sybp51hN4ADazL9kYs4GjGUJsez9UlkK2Iw4nS93OPNjUK6JLG19a+vklqZR5sbhWh6TepwlvllRHz0v4hjud31VtbWF+dKpeJKlp+uLl2erqytH7+0NLdQXCgun5yZnT1x6g+nTu5frN98un7k/ut//+17p7/77y/uvPZxEqfjSLatOY79MhmT2T4ZSnfhNn/b78r6LOmoTCel6KX01Byon+VxNMZjYI8++ktPWwYAdMu1iNgCAA6YxPUfAA6YxvsAjzY3Co0l6vdzrvf1jYkeefDXiBitx9+4v1nfMli/Z/fZaO0+6NijpHaPpCGJiIl9qH8yIm7ePXc7XaJL9yEBWrl+IyIuTEzuHP/TEW7nMwvP63cdlJnckTf+Qe98kM5//rh7/heRy87/0drPnfOfkRbn7ot49vmfu7ctO7QPlTZJ539/bnq27XFT/JmJgSz3k9qcbyi5eKlUTMe2n0bEVAyNpPmZPeqYevj9w3bbmud/X7/xn3fS+tPfT0vk7g2ObH/N/Fx17mVibvbgRsSvBlvFnzzp/6TN/Pdsh3X840//f7vdtjT+NN7Gsjv+7tq6FfGblv3/9DmoZM/nE6drh8N046Bo4f3P3xprV39z/9+8m9a0UWj8L9ALaf+P7R3/RNL8vGbl+ev45Nb4h+22bY//3O20/u3xtz7+h5N/19LD2bqrc9XqykzEcPLP3etPPH1tI98on8Y/9evW5/9ex386DF3I0lvPeKxx8P6X7754/N2Vxj+f9n+SBfHM/n/+xJ3HiwPt6u+s/2drqalsze7xb3DX3+20gS+18wAAAAAAAAAAAAAAAAAAAAAAAACgQ7mIOBJJLv8kncvl8/Xv8P55jOVK5Ur12MXy6vJ81L4reyKGco2Puhxv+jzUmezz8Bv5Ezvyv4+In0XEmyOHavl8oVya73fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJA53Ob7/1NfjPS7dQBA14z2uwEAQM+5/gPAwdPm+j/cevWhrrYFAOiN2vU/Gex3MwCAHvL+PwAcPK7/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNnZM2fSZevbzY1Cmp+/sra6WL5yfL5YWcwvrRbyhfLK5fxCubxQKuYL5aW2f+h6/VepXL48G8urV6erxUp1urK2fn6pvLpcPX9paW6heL441LPIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBzlbX1xblSqbgisXfi2ivRjBtZt/V7b0i8EomRiOhWFc2jxKH+DE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwI/BAAA//9fuB/a") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 43.668774721s ago: executing program 3 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 43.46969715s ago: executing program 3 (id=806): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x14552, &(0x7f0000000100)=ANY=[], 0x7b, 0x11ff, &(0x7f0000001980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002cc0)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000800)="1e0331c23397e64974068cf396d5bffa4809299b94fa186885aa657621f7b0f18639383cfe9befb3385b10f7e3cf827e0eadae93b5f1e55864357f47c19d7b83c39e0270afe9fc7068", 0x49) sendfile(r1, r0, 0x0, 0x2fffe) 43.183505963s ago: executing program 3 (id=811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0xc0484e43, 0x0) 42.838461457s ago: executing program 35 (id=811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0xc0484e43, 0x0) 35.295176207s ago: executing program 5 (id=907): capset(&(0x7f00000005c0)={0x20071026}, &(0x7f0000000600)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x146) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000004c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0x5}}, 0x30) 35.048695566s ago: executing program 5 (id=911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 34.922424691s ago: executing program 5 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="ddea382fe5537f3d2fb49c4812b017ff934a2ddcd24d5fd5c81691cc5aa3bf511c976eb4bf242154d6ce2d659ded56e5fcb9e30482f646f74754697e6c295d2c3aa749d9b7b6f726a240a036ea41b65d694c35b3b88482fbdec4e1f8c3fb21f9547dd2c030532e185f9d066b194f2967a99fbf1b7c1e28e80cef223bb83cf08e0e7fd422472a6c2e3cc84af917f9f263607277cded34d075d922fc94097a778dfdede31ca69a7842431ccfebd0cac561e165816fe998d19761ef45bf43200b9fff2f808b8455cd8c4a1334a581442dd4b4f1797bd573b0c1b9e69b69b8fdb6348bfd9d0046219d10e89b25d0a386286dbcddfde1592f9d638a90676cc7ee1d90fe427a8294896bb71718f0f5611ae7780f6e428e537ca207fd75be51e1f497ca0c46b0de9455902f19da63a6dc42e180b07135ee29e32d8126116e0760c261adb57b7940494d3d22e411f58259bb55d39216215e5a9307fa53615ffc3366ddf04f6d162a2dc4b95ae7ace91bbabb975f270960a0aa0d84226ac0cee09ca53e64a20ce93f25171d9bac6a924bd88c2d0cec7e98b623cbe3273775c287a4df4e788b5b6d31239fcbc7e9c395e116a46c5ed3b5ce1d8f00e9319419e7c1c9727211398688f2ff6f1ef98da7e2e12f4c7b5446a4c2c38dad1d72b9b27b8a02d730bbca9865fdc3ee266ade9389a22c239bf4f7794dd2a007d947a2e7c23fbfb2cf187db4fc9216e692ff1d229dd230d780b5f8826d703b525e98b14e6968bdcb135fc562c1249885276451f508293da724968c92e9332564da27289460e9b5f8841d797cec69ad050d29f265d54ff713339ff94474dead800bdd4441ad970786b532becb4507b2dad036aeefaa71ad4a66713b7c4ae9788d998171787843be7a0cb3f695bd1fc4cb615af198266ccef28a3a1d85116c366c0f64ef16e8fe7535b968b436574f6c1af28667d7acadc85b3db8c4c00f26b6a59ba98bcabc59dd389dc0dba675fe71bd1948cf9b850011f3da1bb1f9a1041027572be9afe39b1e20db89d41bc609edf9db5a3b03ab9284f43b912d426653329364008cdb27921da3b198e2da95f46c194a1d6471d2930a8514b17efe24e52ae87ef3ee62e2e1f23b7680e4790ef1c509dfa8ace6f4eaaceaa0c8513ede96984847e04bed5fc026f4dbb0942a932f54c375c2c24e640370dd6540fb775e46994b6897b959d19c3d15a431e274c70868193822f634370eb2effec4a1005a998454e1ceac6d418b66441572b7eb5bde3e09bcb35cd51f54859ffbbd242c84e603f14c876c5f9f862f309f3fb597c55bb9738ef476e59842baca084c7ed594b2e2741546e7c6d4e014a64b8c26dbea3cea6f00825674e577147597c5c93c461f0cf5e083099d7b21a64f577c289a39c71c2dc304967bfbbb274b2cc7076cd1ead5d02012cffe8a5072d26dc6ec9b748af2fd5b4dc322bd3e378901844db0f824f5564bdf374b339c067d964e3706f1245448e20b9ad144122e6d90bd24a73c9b9ee37c985b2770f6c2dda56b61b63ba185beb32674d4908be4c2e9d329e2fc34372e0b18a9858d24b63ff5e3f5f709752d2b4a86ba572c0273beca9db44fe5025ac6b2e971609cf4dac54fc3276325f31fabb933c4b4967f338bdba205a01f81431830e447bcbed44c09bd743a119631eb101a3eed41ae979a62cf99842a7673dbc551d235237ca0c870fdc618c4dd478db3abc4369138812b7a18860970c463ca84f172fbceb7a3f121298e5b875b0bea6d50d11c2f0a49133189740239076f332b92b31a7e7a70f0e1b4e0fe5fbb3e05c75688ea7cac53abaf8a3186fbc12a308ea7e618807b9a76d549dd2bc3af69e20f9e1a7abc4c4490e0994847d90b014cac74cbbb7e6c623209f764d8eab02a957a3db89b07baf4ebfd6ed2adc7096e35eabe40019c67ad2f955acbaebfd7694d814c708a7c1898a9caf174e219dd335eab1e39e99c391e3dea3eaf16c240aa0c396f5ed0664b49df7a8da00205f9bd3c668c05212375bd730f3b6fcd98d07445b8dbf332acbf2fb2b249b8eb98582f7c54a8d498bfddecac3e93b10d4b32de8d14e747076c312e90c7359fc7725e619c6f815731771d9ec540edcf72644e036c86384d471b233c43ecdf4ebadf6d5efd37f5bc31bbb53979b2703f0cc794c0e2c11f0898b3c1353bf92d32b693129eb31a0d3e4fbe5cc1f9f73bb00d7138ac9a3110fd5afdf790100e9a131972e2bb5ec292a7b8f5ddf293e75cc1e281a0272f0fb00a47b63994ae5ed1fed1aad586fbb68d0db726572cc758c35b6d2152fc6b90378262beda9e36311aa87ca6e3cdbf996084bbbd191f154018297ad33d317c40b6b90b2dae688ccea76256535edf8d88d2cb86405d0e2685e5ef573ea77f7cef8c01d9b1af5a7f5ce36552cacd07a351d08579c0d1766fa8963fb0f50e855ac7db622cc5c151aa76db4801f24d8da53ffe59a7a3610bf4df8b5c02ec667d0d55a2450cc8f65129a1e3f27091e6911c9d6b800a06ef70460061195f5111596f1776e2fee053509b494bf569823b70853394552c145489a539c045f794da9f525edf43cf8740873c127e4521d1d402318ca30ccc12a1e9b2399cf59a757dcd29af93aed6c23ff0231d5c5efae9f0d352c2c3cb89c2272a75623fcf5d8de8da4d523e7789637903dc528a4a562f4c828b13764f03de595174800e466b2c0fc5dc5eb3db400801a9ffae88600286d589def10c72377790e1728332804d077ef35acb416dd24135480b945892b761acdc693a308e9d415edef0da28912529341b88f0c15a0292587a40601c79588d286c307901c4ff66e3ff3ce926f20b429d5ac7159dcebff2ec418682808d62fca9a2e49a5ac46882866a606510b18b41062b4af7909e2cc935a22390b94db1b8808eae17ec0ea2dccc008e2ffa59409c61c8846d7a9bc15e43e451dad887b855f6760ed3b511bbed2606c829e2f0aa6fd4408969d9ea27ef4fe4d6918757d408d47a041f6cc46a8cfbb9a3945d68268faad29572cb5b7f4af76323a395f663702b9cf55b908e36e62473fb170398bb8fdbe7b39c11d14dfb6e695f0e9328b84ee86e886f056bd11efa95915c6f6be1a3ad04998efb5429710c3f404381032a228d79a9e7d9f8942a6dfca1cff0c5b4095d186da1bd924c78e0940f0a83a43808f6f4b4e9747c181bb16dba5989974d96bfa5ade7320cf2aece6fcde44b7c4669222be299e0240f1c0113c66b71d7cb097b2591709b347517dc06c743cb627c5848a97c1b7d095efd40a44ab9cf6a42c03ddb55897a19d3632d77776a77fc4c8d2a070782c6223f236a38c4dc37da731ed304ccb119c2d9b23e4fa7ac1b52829001f0ddf5e9e4f1176095e437aae7a8e66243927a026aa4bedd9602ee89c6eb62ff300529c7f770d3d49d9ce4e98d8b3d0f7efad49f6015766e6085795d246990920c7356a8dde4eee420a3fc032e9d361b111e1b1edc2d100e1eb3edba6a55d17700c75c5a8516509b81a27f13df9113fddacbe85f635b0d2e494f2c1a46f5018be92be4f1c070a5c954141d50efd048ced35268c5b4851ac5b01c43ba8c1d22209d96ba596a83828f40f3ff649883c45c7cf62307b26544650ca71efe283877e6e560c1ff3876d4f6cce0efd5f08cb074d19a3d767f9bb7788004663328f86b2d6e54564d797fb7626a609d5c823ee9e8f11ca55085152c64f0ba446a99d61dc0b79e26758144601c9fb5b75da79489bc4be86e9315ad26b983269d845c9f2974105a7f89a44671be6bc6fd48c9634c2a849e80c58955b4b82577746ba1e281b41d51b0e65a4d3b7c368a676a07933ed11c754d41d0cd33d2bbb12a53d83772b120318ae0896829c9b1b31055e1fa00a40d7392b8d9cf0eb4bf253776764fbdb0f2365c7696498080296152c4d5d6d0e83e853db63fbcdf0f2962a846093db9b6564257d396d280af560c8bae9c30ca27ba2c920e83db8fc1cf8474038fbb103e0664d01c9bddd34106dc97e4b331969054871e544bb0566905d764940ef983a429bb0eba8e9b4c2533da8efd80bfb710da5587623f284d272f4eab19a3ec6015ca8bfcca60a2163f2a5c2b1c35a3524352273a5beb992066e4e3811ad900dc3238666678f213eecb033df508c71cdd05c999d4985d0774e936d63ef994578d53320664a204acbfec7c01ae4fdfc0b68580cf6a72c00d8c8b24e3a5baec97952fae115e3132e72ec9b7f25b12fbbe99b5439a33f4854745c0cba03dd74043fa30a9363a8928aca3ab50a30ec501b45f3baac7d5bc8c0db7e106a2bf762e6669dd5c952e1a9a2da0ffb22666d7e43f59cad572603301a6e19e6343c7f6036ea7cbee16871724d37711634f985495a3b8eb0aeec33377a90b1d9033f6ded9b4bc7fbb3879dfc5f17aaa7e2328536556c856f69180c33fa860fd4176951b1aa3e055a795aff1e6c2b78e1a2fb3449d6748dc0cee93af2fa40723e7495b5354ad8a38a3142772d1bf90ed47d3b871a78a74adcd76dce513aa8c6ed069701e0032494b5a20e74e17146ade49d333c0377e3f7f70d857eab73011b0a6c16b4825fc816d24a644ecb620292c41db414d4e7554e0181da574df59a1b1ef5577b8b12532aa10c324d73bf706b186c8e9063b8d6e7ecf29fcc3dfdd64c823c40fafa882687c8c5aae2f0ac889ee6b6d0dc60a6d378553a9d7fee8cd005bb1dd793f0e56f079fc5f53e99c2b7093527399a9f00312b43e81cf60e7338836369bc60fa45253ab2166655a7cf72a347fe2f7ccb5aa9dfb04f8eeb89ba400a40d266931901e0d1f984e651696bf58b709cd24314be5cb9a823aa332cd768387128f3343ffaea64f41dc0a2f8c02e60dff7e2d0e85eb3ddec0c2697223272995c4ab67c66b2a2e9d68db306a8160cfbf495e67f1ddb74324a0e1832776653c992df5edd6ad98930a0b6ca2b78dcd6f3c0cd2dda1ec783fd4955e023086d7860e0fc2f61b4d2ba88c477e959888cd24a4efe45d3ed48f2afc44e55b81dfafe03c88c4c27e5ec8e0a18533cc00709ec9e1cad214ee705e08e84bf7cd6e3c9753aed11028fa5e9f9ce596b1db09e61696b84e0cef75fea80c34132f54d830e2eb3b338f4bdaedea34bceb790af70d8aded8da4460c7c3038dfe73f623f16734d830d73e5926321e87fa91321388e63ca3b2ca73fd4e70e9e9e291f98266bc775ebbfbd1c427a0f2b1bab10952c8064488e7d7aae4c8e7b89ab03d050f82d9971f7641f65d07c3426af91639a12e639ed2a7b8edfecd1d3480252ee99e7013e25e1135de798294bd0deab950d36ae92ef357c9e03a8b3ef575a0f99f1cd15c94f156856725324f76b0e3e8bcd1d3f016c4cde1c8349da5c2d875032464a943153cf40e5f025d711eda841d2b337396498d2a0fbb85f9fc9e485079dd1e8331824f6fa2361a39ebf1cb2c8f90e4838e66c39489135e7670b280b5023c26ba6387c8850dc6c5a19a31521df737078fcf379472041c9686675b6903e6e73dead47253019deaf4084a2b801a5921262db9f123449ee404649369a3daa36831fc56e798548f44b30ca46162e542e5e21f922c0ab02e947ab42bb3a7ef3b806a39fb8e7bbe839db9881a3b64bc17a35f8c7a03cc9f5938c313b1613d6ff205f13dd26343dfcd221e8feb2a53197493ff34306b9968df5910c4685f5890255c82a0e06db506e6fc243a39e445b67c04cfa8d442a2f0d5b376ab1d8d5571a6512ef5fb19ab8978498f9fc8d45f4151338fe50912d485537651e015b4427a66a052aad9d2e2ba1ffd92329290a854bd1c95ab51a0be5b4180d806b22bc5608a91c06a5b1574d257802eaba1183fc83398d5af88872bb76a6b059930c52e960253b9e63eb0731c36c69af44f48fdee37b2e8ad889e531ed3b1d964675214cc11269063c50d9ff554c6df6304304f3a8c7f721712ec9fe7617fb9b1b5b195761496bd13017d683e3f796e679f5f6f9368457877c4da665503e4657d8ca739d7b33a94c6c05333a4ddb25ff631385bcea2058ed87975160d52cb708f79d40de512f6fabcac8e269439a381b0b7191a099a772588e568548cb1cac50bf2d49583bb8b87a840f4b9e3e733ba3aed87866caa47809293cdc064777716acd348fa8e2bf0a4a2c768240963ccf8e59e239ffbcb390a3bd8cd29ac9b5a88d0280730a2f3daeef14042f743c367b2277d630fae1c5b65b08020e2569a8b1ed36d7a8e42ec974118c4c47c3a176dc976b70a494bc236c74f2fccda83d8bcc09792979977cb5636192fd70ef654eeebc455327fa35cf5aa1eca88a22908b33c4f1684e55277b339d59eda72adad262053e207ce8dae1c268d4a96ef6d5bd600d6c30863567ba52f4ce917db043ff7ecafa80cc292f9d9684eb7e497d289e216f25fd512ff37d301e4bf12caa55105d815f1dbba4fcaf4158ce9b73f5529b458ad635f08558904b020176027d72a6b53e0465690ac261a1801ab0d93121caa466b9b2bf778719c8552f5d7ad8e87960602d727616e222a24d40d61d0036374916045f6b3c4584ddaeba98dd410a9bf94c2b56dbdada7c283c334e233cdf63912cfb5d2d4b5004a5161ca2caa5ba0292ae6a8cdbce0767b7d4a2b994acfb0684ddf2bfa85afec15e0a1221287fa806aef52283beb5793610188baed3350762cf59df01b9209351d6005333f5bf9a9365ede67554d19ea4c62c25dca92dc19b2c05118109ed1e06702643dbdb32634f6ca4f1ec1f79a096353b8eb3d35afb5195c5402bdd8d3b8893d2d5b57d9ec9868451a22af109f7ea9eb14d15ef92b240bb78dc68652cfe68808170a51f67fcf971cf70dd3f3719b017c75fa7eb62abb8fe8df887f2e43e6bae1d955dfb271c47ba078a4f7fa997eff74ffc70be40059f7257fd6e40c73651de6d16334f509a7e52449795fff4d3c7dd6c053fd1a85db6ecb87964af078382e6bc3b7edc51b00b17400573b3f7efd80dde42f8a9121d3b7d6fe2fa25ce7d01a1e44b34fa3ae9ca94deb02caf550e9f751b86e4cbe2354093b175959dedf31825241cbb131f6b829547300ffc9af659bcee1261696f584c809cc59f69739b02c642786d905a949e229785b625b6108a8b7313118418be3f48e5de6b738c3f03f7d8390f9348a9ea0ddb286816134c963a808b5fd80e19fd5b75b9f08028752b87e89ef430ca652455f9995951300eb0c1552adfabf5155cf6ddf0070296e16cb4e668cd682f622a83f91eb4a12271d4e0999bdedb13b53db6d004eb6f6316d80e4341192b13605310c175b9134d7687aaad089a2891ebeff9388a982b48952ed9eed207bd545f02e4f11de27f61793513017d14bffe1c6471c102b4fb4b01b82d2d2bbdc1818b7dab9ad2690107f12f5ef2ca6835307222e0993e2b68f4e9ec4e2fa46425c67e3e9ccf085170685a2b4458724ff7e2830cbf90946d4b5c9fab6fd980ed072361fafaeb29916d60eb52e778fc0d0a9b51197c15472e1124876e849d943b913c1f6d247b699d20fcc24f2c83771c449abb7933dcecd188b96522969db4711f72917feb31fb1ec21edd3b57adb53811f2559129677a93467f468ed7153106021f3481f1e8ca1f80b32d26a8439a3c286370f7efc414ec41ecbb15b7c64f096d94aa399f690b05e5575da5895b5930abdd642bdbfd39dae601a5f7092b4227f2159b6daf7a05b9cf3508ace62996bd6a591d4d90ed7910c6bdcd2752a86f783bcc45c67bfc10725e933b090819adea0dc7210dd5a90923304769df9c652609b8dfaed467783f3e104cbcc758436f861c838d6ae70633a76903fb40d78fd74e91a7fd9a4cb50458553b249d79b2c239ff245edf5aedd54f6fea729d3732adf647e455e5f82c31f6832fc3fc8a1b72602dc67cb31eaa10f78b2404f773493e9a2ba01d40b063ece97c8f132200a8ff2dd067bf121ca0d164926d21938dc01b5592b6907828af1da05956f9c1f1fa26c52ec04e7d67d0544d9bbfc7250ed1433d74d24d8ec3083c3aff9e72e596332627077791f5bf59698b3e5a82d59e285f89fb1101ba1565469b1ae4b2775c340afe1d1762824baf811840b0a1bd934ef70eeccc83a146afa21a434882bdb0ee773a9be10a0ca670d77fe5756b494c4932c90d7e2a41df4b621c70a6df147c950f4eaba4bfa80ce2105a76b56b96a62a5b1cda6b86725c04e8a308d2390e525494874cbe0c6f6b5f7a0f9366e351caa57093bb8aa1fa6a3d46e6575109c18ff19ad336ba17468f2647aaeb6d0c021c2e8fa836ac05197216fb816fe54f494fe589267cbebcccd154c138360c2a82fb918606413262ba0d36423ed57dc0090c79dd15e0e3c00c9d7fdd3ec4d0c58e6f9635c7f13e3d72f8c17d753a6e0ee3a875ed97d8204b816bbfe9c4f464b119735ab43599a8f77d37aa683b9a0b95da834360718c40a22b1190088d0a6173898c9d4a1d0d4199646b05bf01db7de749f13d8b1f625dc473756b9be3f6fe5e4a740fe7d4df362a9965a186ccd7332af494a579de966199f63f0926481e26ade83fcebcf15437126f1212abdf8f8f6251b03ce7c575f7b9175fc525bf50c5f99ba6b1ccd0538274786b7bc1c892de7ffb7b688f8e5aec8877a36350772db1209636a60b43a2d58e7ecebe5467e7a82454557ba49c2bb416ec1fa5ce54855b2626d917241ace6a590981e5ad26636aa99445cdcb852aa011bd97d285a219480af73baa70150a46d9c838df66505e88cd4f99e206538e7de14c1d09c8f8a93f55723cd7001947e5710be5489956441796c1c27278849d58cb142e090efa98bbaf239a9e98f3281cc8dada3f3051e3f4337583b35268dd5bcef134cf535ac19292e62b446afff1bfdc978ba1a68b7279e3f47d9a26ff5c612bd9e2df2cb5276a18b91ce42f64efa81baf6b85a4413cd09e0a2c3abcda08c6b96e0e933aec80313cf5a0a73bc491f9a90fc6f1ef78f7e383ba7a1dec58c15d8f2af942fbb74dfe17bc34ae218d0c852e57c3058fc12dfcc5ad3b35e4a6f8628d9b60df08db1d533eda8eb0988f07b22662f10848c736ce59787b7dae70d8dad9c458fbe5408d56cc6439b661870fdcaa7beaeec8dd0323099af8c68da6cf118d58fe807a51cd6a9ae97e298a3cff83876363089b28dde888a567b60d8cd7f4b25250b680df626e9a92635878c9c6f012c84a6047d47858b4bb9d77b489e6f829564ab76e0532b972931bb97b53a70aceb7c2b2448dc8d0864b5c18dc33203d31384765769af03383674f31cfc09853ee63844b0ac6c0bd349bfc7d55bbb591d32d3f6412aea2a05a1a976647ca1ba22b2463cda5066a678b2e232bc6ae22566d1e6b52e5e667562df7ba51f2bb9efbe6f4cc800fd2fa68f2bc61ae8cc7fe968b5d60e94d9de7cbd5056be82748de1ac19fae0cae985a7fb4ff0776860e86c0d9763826b7a99d205a003a384df1f35d5335302ac4782efd4237dcc944cc6388444def4b55e68e33b94030f41a308c5d904c1742e86209f1bef06512c5b5e1067fa709316d2084041f51bc9bd0cbf7210e34480ddce44a1bf2e0603edda369e8bdbaaac012512c835fe0661d9ccec0b0b05225a107cc8e00091c75120d09c19856dbc19baaedcd1e42b3126c321428a1392680e0cbbaa286f545d9b7b66d2953680c6c9345a3727fd0df3a95708dd87e7cad5c7fc606a2e615edcdf9df2515eaa36fe3c72866990d5da6729e2bb85e0eede8c001ee58505b4aab81d1515f2cbac5d9c3f935273d03120fa081137c600a45e6e3053a7a6e85d6013028b2300f9778d032e8f93ec997755596434b17f82fc09078279fbf9d10ead42e16910f5f82784c783bd2027636b986e5fe46414191e017436f1c83e353e0f476259b129309e8f12b102e05b548cc4da0fda1dd68077970af51f893eeed8c8acf6b0ca9a6c0e557203d5e5a4b06803c96c1b5dd701464a89963ad1574361e58b6e3b45bd05e19aed29002d52728e977460f4f0c9d58fbc9e45cc478c645c3aa792ff90a18eaf399ed01b02e194d29589e52818d6d3c2ba26ca477ce0c372b7e46ef1f5775f1d4b764ca7508b015892197495d863fe49276122844e1372f48a9bf4ed15be59f47355e36acde9bd3b289dd51a1e9a30b1e5a24deb005e461af1e8d063cc90e3337855af5a3dd2ac8907d7787e2ddd23abbecade7ef63a654b5a8715ce16d7e654e2be35e0e0705cb18953610d2200b368734cc881ecc6b68f31b2562c634e7dcef4100810d045fc8594cecad7e792d64a9970dc9b888756a37d3b436fc289e318db197670b95c448edb6c31d6d0ff6fa062571f4a57d579d3e5cf5eb8e2965c45253e3ef5a3b593d764f4cc11440b970aa20f1caf20cc6d6194e9a0bb520130cf004fb517d488cd5a7803649ebe03b171f3b97b9f5fa4a1c2d89977c05fb661ae6d6728f0594416c27819bd3ade0083653fa686c870308b9320e4394432f2e96b06401cd16020f89d26b15f16309fd2ec5d81619f15f6581299c4193bedb4d0b078aed6a822275c540e9b40d8415478ae0940510fc46c330a66e7746bd08b8859aafa3c65e8860f3fb2846ad154f7c6c4e1e3dc1b65e5250769a76877ffeeac1005b2e01bf4bdf8d7893ac38df364f2db3d2463b0b7b8a25c99975aedd7e009644ec7ff708821ffacfce270f5ee4485ec205d9371698b6bf1d0bcd542cbc826f468e6153f72bb40114145b4c2ccfbb45dba5c2f0634d8f3a21ec74e7d3b74aa271c5412fc0b7459323ca4c3bd91d378c8daf56f3f56c26096076eb42f392a1107e4f68f6144100ca48c44b4d59760fdab3704a1fa489ca5fb4de75503f8e3e21e5369a6b41ae2bf230780d82a0d0782a60a4b0d645dc57c3344b8b0efb7be4e0b8a2d9d6481aac8ee9c7eed3211c1778bd743f55388e69914387d8d3550a071c32455e7a19bc6c4c623da7c4dceced5afbbcd7f8b785a7a9adba7717f8faeeb3919c54daa0423214da53ec186112fa092b2539ee17a3bd8e9c0599d901ed6976b30ec7fa1826442a933111687cbfb8cc72e2c45f5aaed6d593412b186ccd49968ab563d73e2c53cf44532caf8427f319a4130670106294a71c49872181049caa96ec36c004c305e8871e99e351012bf4397f9ef9b846218d66d7f13864775ec54e25165299c9b513b023845842fa8cb745e0341e737bee3f173eafc976bf4a522ea76fa44afdc740aef19f9990e90ee842e6f19c7808844540da83b2b2b3ed782f5c063e2ec2b1ff537a9576ff2693041c506cdfd08236ca087133e4ce9736fe5f2ff344f979ea8122df6b76b36d406b06aab1d58d22759e4ab5d1fae3fb73adbf0d79ee0ac71f7a14c3abda11e629a49bb7a6463a05d35ba12be7aaf3be2df184089fbc109d68fe6850032dee49685a0ab82fc440db66ea890a87ce713535536c26a912e7cba2c20dd9ee3057e93997a4c8872a25907cda69bada9c9e6ef90364d224b5cbffe01d4ab8825657c032507cdd17324b8ee8df720cbd6751619760d0b976977bc830e15b9dd7402cbcd620cb175c2cfb4078d21f8d87a104c559c335a7443b4a2", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xffffffffd0065de0, 0x1, 0x6, 0xfffffffc, 0x9, 0x0, 0x0, 0x35, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x586}, 0x18) 34.010999334s ago: executing program 5 (id=931): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21040e, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}]}, 0x43, 0x497, &(0x7f0000000140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000800)='./bus\x00', 0x2000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000900)='./file0/file1\x00', &(0x7f0000000940), 0x0, 0x0, 0x1) 33.623435297s ago: executing program 5 (id=937): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000240)=[{0x48, 0x9, 0x7, 0xffbffff2}, {0x6, 0x6, 0xef}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2) 33.161620621s ago: executing program 5 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.928959043s ago: executing program 36 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.446616147s ago: executing program 4 (id=986): r0 = syz_open_dev$loop(&(0x7f0000000340), 0xfffffffffffff703, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x7ffd]}}) 30.288828561s ago: executing program 4 (id=989): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xa4bf}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000400)={{r0}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) 30.122207847s ago: executing program 4 (id=992): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0xe, 0x10, 0x73}, &(0x7f0000000200)=0x18) 29.949113214s ago: executing program 4 (id=993): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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") r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x528) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 29.637291722s ago: executing program 4 (id=996): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@random={0xff, 0x1, "bc"}]}, @NL80211_ATTR_SSID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 29.169722469s ago: executing program 4 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 28.870539414s ago: executing program 37 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.351744825s ago: executing program 1 (id=1421): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000000c0)={0x4, &(0x7f0000000580)=[{0x35, '\x00', @buffer={"5fa53b9f10fc4333eed52dedf38737e1ebe61d96cf6a2ab700", 0x20}, 0x87}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.160827968s ago: executing program 1 (id=1427): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 1.001792934s ago: executing program 9 (id=1432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x22102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 887.405837ms ago: executing program 8 (id=1436): r0 = syz_open_dev$evdev(&(0x7f0000000940), 0x1, 0x100) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_io_uring_setup(0x6aed, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x4, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 858.092635ms ago: executing program 0 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r0, &(0x7f0000000000)='3', 0x4e) shmget$private(0x0, 0x1000, 0x78001900, &(0x7f0000ffe000/0x1000)=nil) 810.88072ms ago: executing program 9 (id=1439): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 736.895083ms ago: executing program 7 (id=1440): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b705000000000000611030000000895f51638ce847cf5f00001fa00000000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000200)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x1f3, 0x10, &(0x7f0000000300), 0xfffffffffffffc79}, 0x2a) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 714.670206ms ago: executing program 0 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000200)=0x21b, 0x2, 0x1) 668.934793ms ago: executing program 9 (id=1442): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0xe3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x8) r3 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r3, 0x1) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 636.895288ms ago: executing program 8 (id=1443): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) setresuid(0x0, 0xee01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 616.252363ms ago: executing program 7 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 587.118502ms ago: executing program 0 (id=1445): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 554.881541ms ago: executing program 9 (id=1446): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000480)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)="bc", 0x1, 0x4, &(0x7f0000000500)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r0) 554.549161ms ago: executing program 8 (id=1447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd2f, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 492.35905ms ago: executing program 7 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x4080, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) 467.726165ms ago: executing program 1 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) syz_emit_ethernet(0x8b, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x55, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x18, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37a"}]}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800), 0x69f, r0}, 0x38) 445.921374ms ago: executing program 9 (id=1450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x1}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 445.396345ms ago: executing program 0 (id=1451): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f00000000c0)='3', 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 381.622472ms ago: executing program 7 (id=1452): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file1\x00', 0x3220019, 0x0, 0xff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x93e4}}}, 0x0, 0x200) 370.732671ms ago: executing program 1 (id=1453): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x107) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='9', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1d1) 309.033453ms ago: executing program 9 (id=1454): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x10, 0x0) 300.431128ms ago: executing program 8 (id=1455): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 277.484832ms ago: executing program 0 (id=1456): syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42704, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000200)) 145.852826ms ago: executing program 8 (id=1457): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xff, 0x0, 0x0, 0x237, 0x28, 0x2a, 0x0, 0x2}) 143.415638ms ago: executing program 1 (id=1458): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x9e, 0x4) write(r1, &(0x7f0000000180)="01", 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xa, 0x0) 123.954934ms ago: executing program 7 (id=1459): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x9c}}, 0x24040084) 54.993233ms ago: executing program 1 (id=1460): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000280)=ANY=[], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x2a9) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000400)) 29.266527ms ago: executing program 7 (id=1461): socket$igmp(0x2, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x14}], 0x1}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) 20.31395ms ago: executing program 0 (id=1462): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xb, "34ad5019221abb000000000900", 0xffffffffffffffff}) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000100)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=1463): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="8495c6", 0x3, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0xcb2f7236, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T6826] el0t_64_sync_handler+0x44/0x104 [ 68.391711][ T6826] el0t_64_sync+0x198/0x19c [ 68.459120][ T6831] loop1: detected capacity change from 0 to 128 [ 68.462952][ T6831] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.463201][ T6831] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.504678][ T5834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.576503][ T13] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.666080][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.672934][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.726380][ T6842] loop6: detected capacity change from 0 to 512 [ 68.796823][ T6842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.796889][ T6842] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.876675][ T6845] fido_id[6845]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.918784][ T5834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.958569][ T6859] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.064855][ T6865] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 69.221301][ T6882] loop6: detected capacity change from 0 to 512 [ 69.532136][ T4728] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.563214][ T30] audit: type=1400 audit(1700000010.649:41): lsm=SMACK fn=smk_tskacc_msq action=denied subject="w" object="_" requested=rw pid=6892 comm="syz.4.734" ipc_key=0 [ 69.887310][ T6917] syzkaller1: entered promiscuous mode [ 69.887328][ T6917] syzkaller1: entered allmulticast mode [ 70.046709][ T6927] loop4: detected capacity change from 0 to 1024 [ 70.052546][ T6927] EXT4-fs: Ignoring removed bh option [ 70.057333][ T6927] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 70.086799][ T6927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.087667][ T6926] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 70.087684][ T6926] nvme 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 70.228158][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.233551][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.236395][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.244642][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.245639][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.284165][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.318821][ T1481] bridge_slave_1: left allmulticast mode [ 70.318843][ T1481] bridge_slave_1: left promiscuous mode [ 70.318931][ T1481] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.381304][ T1481] bridge_slave_0: left allmulticast mode [ 70.381324][ T1481] bridge_slave_0: left promiscuous mode [ 70.381416][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.412402][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.412435][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.412454][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.417230][ T6951] loop5: detected capacity change from 0 to 1024 [ 70.447500][ T6952] loop4: detected capacity change from 0 to 1024 [ 70.450475][ T6952] EXT4-fs: Ignoring removed orlov option [ 70.476441][ T6952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.477266][ T6951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.535704][ T6951] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 70.535780][ T6951] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.535792][ T6951] EXT4-fs (loop5): This should not happen!! Data will be lost [ 70.535792][ T6951] [ 70.535801][ T6951] EXT4-fs (loop5): Total free blocks count 0 [ 70.535808][ T6951] EXT4-fs (loop5): Free/Dirty block details [ 70.535817][ T6951] EXT4-fs (loop5): free_blocks=68451041280 [ 70.535825][ T6951] EXT4-fs (loop5): dirty_blocks=16 [ 70.535832][ T6951] EXT4-fs (loop5): Block reservation details [ 70.535838][ T6951] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 70.559335][ T6952] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.749: deleted inode referenced: 16 [ 70.572902][ T6951] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 70.636697][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.694197][ T6964] loop3: detected capacity change from 0 to 128 [ 70.852283][ T1481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.860557][ T1481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.862371][ T1481] bond0 (unregistering): Released all slaves [ 70.942545][ T6976] loop3: detected capacity change from 0 to 512 [ 70.989240][ T6976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.989295][ T6976] ext4 filesystem being mounted at /137/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.122074][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.323445][ T6937] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.379845][ T6999] loop1: detected capacity change from 0 to 256 [ 71.387320][ T6999] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.387846][ T6999] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.608392][ T4728] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.666219][ T1481] hsr_slave_0: left promiscuous mode [ 71.678913][ T1481] hsr_slave_1: left promiscuous mode [ 71.679291][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.687241][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.027531][ T7028] loop5: detected capacity change from 0 to 256 [ 72.053140][ T1481] team0 (unregistering): Port device team_slave_1 removed [ 72.081658][ T1481] team0 (unregistering): Port device team_slave_0 removed [ 72.144984][ T7032] netlink: 236 bytes leftover after parsing attributes in process `syz.4.769'. [ 72.145018][ T7032] netlink: 236 bytes leftover after parsing attributes in process `syz.4.769'. [ 72.182764][ T7034] FAULT_INJECTION: forcing a failure. [ 72.182764][ T7034] name failslab, interval 1, probability 0, space 0, times 0 [ 72.182787][ T7034] CPU: 0 UID: 0 PID: 7034 Comm: syz.3.770 Not tainted syzkaller #0 PREEMPT [ 72.182800][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.182806][ T7034] Call trace: [ 72.182809][ T7034] show_stack+0x2c/0x3c (C) [ 72.182825][ T7034] __dump_stack+0x30/0x40 [ 72.182835][ T7034] dump_stack_lvl+0xd8/0x12c [ 72.182842][ T7034] dump_stack+0x1c/0x28 [ 72.182850][ T7034] should_fail_ex+0x3fc/0x570 [ 72.182864][ T7034] should_failslab+0xc4/0x120 [ 72.182873][ T7034] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 72.182883][ T7034] kmemdup_noprof+0x44/0x8c [ 72.182892][ T7034] key_alloc+0x2b4/0xd30 [ 72.182905][ T7034] keyring_alloc+0x68/0xe0 [ 72.182913][ T7034] install_process_keyring_to_cred+0x98/0x12c [ 72.182923][ T7034] lookup_user_key+0x220/0xe68 [ 72.182932][ T7034] __arm64_sys_add_key+0x34c/0x43c [ 72.182941][ T7034] invoke_syscall+0x98/0x244 [ 72.182950][ T7034] el0_svc_common+0xec/0x23c [ 72.182958][ T7034] do_el0_svc+0x4c/0x5c [ 72.182966][ T7034] el0_svc+0x60/0x1d8 [ 72.182976][ T7034] el0t_64_sync_handler+0x44/0x104 [ 72.182986][ T7034] el0t_64_sync+0x198/0x19c [ 72.325778][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 72.325812][ T7019] netlink: 'syz.1.774': attribute type 30 has an invalid length. [ 72.328611][ T4728] Bluetooth: hci4: command tx timeout [ 72.350065][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 72.350096][ T7019] netlink: 'syz.1.774': attribute type 30 has an invalid length. [ 72.420966][ T386] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.421005][ T386] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.421026][ T386] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.421042][ T386] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.495311][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.495342][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.495383][ T4728] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.548727][ T7048] gadgetfs: bound to dummy_udc driver [ 72.820120][ T7066] netlink: 168 bytes leftover after parsing attributes in process `syz.5.789'. [ 72.832182][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.832220][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.832318][ T6937] bridge_slave_0: entered allmulticast mode [ 72.832738][ T6937] bridge_slave_0: entered promiscuous mode [ 72.833511][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.833533][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.833584][ T6937] bridge_slave_1: entered allmulticast mode [ 72.833953][ T6937] bridge_slave_1: entered promiscuous mode [ 72.879032][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.882004][ T7077] FAULT_INJECTION: forcing a failure. [ 72.882004][ T7077] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.882027][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.3.781 Not tainted syzkaller #0 PREEMPT [ 72.882040][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.882046][ T7077] Call trace: [ 72.882049][ T7077] show_stack+0x2c/0x3c (C) [ 72.882064][ T7077] __dump_stack+0x30/0x40 [ 72.882072][ T7077] dump_stack_lvl+0xd8/0x12c [ 72.882083][ T7077] dump_stack+0x1c/0x28 [ 72.882090][ T7077] should_fail_ex+0x3fc/0x570 [ 72.882104][ T7077] should_fail_alloc_page+0xec/0x10c [ 72.882113][ T7077] prepare_alloc_pages+0x194/0x484 [ 72.882122][ T7077] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 72.882132][ T7077] alloc_pages_mpol+0x1fc/0x3d0 [ 72.882142][ T7077] alloc_frozen_pages_noprof+0xc4/0x10c [ 72.882152][ T7077] alloc_pages_noprof+0x30/0x148 [ 72.882161][ T7077] kimage_alloc_pages+0xa8/0x3d8 [ 72.882171][ T7077] kimage_alloc_control_pages+0x348/0x714 [ 72.882181][ T7077] kexec_page_alloc+0x2c/0x118 [ 72.882192][ T7077] trans_pgd_create_copy+0x854/0x1868 [ 72.882204][ T7077] machine_kexec_post_load+0x5c4/0x8e0 [ 72.882215][ T7077] do_kexec_load+0x4a0/0x678 [ 72.882224][ T7077] __arm64_sys_kexec_load+0x1b4/0x1d4 [ 72.882234][ T7077] invoke_syscall+0x98/0x244 [ 72.882242][ T7077] el0_svc_common+0xec/0x23c [ 72.882250][ T7077] do_el0_svc+0x4c/0x5c [ 72.882258][ T7077] el0_svc+0x60/0x1d8 [ 72.882268][ T7077] el0t_64_sync_handler+0x44/0x104 [ 72.882278][ T7077] el0t_64_sync+0x198/0x19c [ 72.886594][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.941663][ T7080] FAULT_INJECTION: forcing a failure. [ 72.941663][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 72.941682][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.4.783 Not tainted syzkaller #0 PREEMPT [ 72.941694][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.941700][ T7080] Call trace: [ 72.941704][ T7080] show_stack+0x2c/0x3c (C) [ 72.941719][ T7080] __dump_stack+0x30/0x40 [ 72.941727][ T7080] dump_stack_lvl+0xd8/0x12c [ 72.941736][ T7080] dump_stack+0x1c/0x28 [ 72.941743][ T7080] should_fail_ex+0x3fc/0x570 [ 72.941757][ T7080] should_failslab+0xc4/0x120 [ 72.941766][ T7080] __kmalloc_noprof+0x108/0x6c8 [ 72.941775][ T7080] security_inode_init_security+0xec/0x370 [ 72.941785][ T7080] shmem_mknod+0x1c0/0x2f8 [ 72.941793][ T7080] vfs_mknod+0x380/0x558 [ 72.941805][ T7080] filename_mknodat+0x3a0/0x5cc [ 72.941816][ T7080] __arm64_sys_mknodat+0xc0/0xe8 [ 72.941827][ T7080] invoke_syscall+0x98/0x244 [ 72.941836][ T7080] el0_svc_common+0xec/0x23c [ 72.941843][ T7080] do_el0_svc+0x4c/0x5c [ 72.941851][ T7080] el0_svc+0x60/0x1d8 [ 72.941861][ T7080] el0t_64_sync_handler+0x44/0x104 [ 72.941871][ T7080] el0t_64_sync+0x198/0x19c [ 72.995247][ T6937] team0: Port device team_slave_0 added [ 73.010358][ T6937] team0: Port device team_slave_1 added [ 73.036164][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.036176][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.036190][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.036694][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.036700][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.036714][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.116167][ T6937] hsr_slave_0: entered promiscuous mode [ 73.116452][ T6937] hsr_slave_1: entered promiscuous mode [ 73.116622][ T6937] debugfs: 'hsr0' already exists in 'hsr' [ 73.116630][ T6937] Cannot create hsr debugfs directory [ 73.352870][ T6937] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.434072][ T7114] loop1: detected capacity change from 0 to 512 [ 73.435662][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.436005][ T6937] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.455261][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.455914][ T6937] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.463783][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.465046][ T6937] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.472742][ T7114] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 73.472753][ T7114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.475048][ T7115] loop3: detected capacity change from 0 to 2048 [ 73.477416][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.487338][ T7114] EXT4-fs (loop1): 1 truncate cleaned up [ 73.487714][ T7114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.543908][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.543938][ T6937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.544010][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.544052][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.589450][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.610842][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.615173][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.667635][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.711634][ T7115] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 73.716427][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.729749][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.729788][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.749356][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.749387][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.775203][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.833975][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.152600][ T7156] FAULT_INJECTION: forcing a failure. [ 74.152600][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 74.152625][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.4.807 Not tainted syzkaller #0 PREEMPT [ 74.152638][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.152643][ T7156] Call trace: [ 74.152646][ T7156] show_stack+0x2c/0x3c (C) [ 74.152661][ T7156] __dump_stack+0x30/0x40 [ 74.152670][ T7156] dump_stack_lvl+0xd8/0x12c [ 74.152678][ T7156] dump_stack+0x1c/0x28 [ 74.152685][ T7156] should_fail_ex+0x3fc/0x570 [ 74.152699][ T7156] should_failslab+0xc4/0x120 [ 74.152708][ T7156] __kmalloc_node_noprof+0x10c/0x6e4 [ 74.152717][ T7156] load_msg+0x50/0x274 [ 74.152726][ T7156] do_msgsnd+0x15c/0xf30 [ 74.152734][ T7156] ksys_msgsnd+0xfc/0x13c [ 74.152742][ T7156] __arm64_sys_msgsnd+0xa8/0xc0 [ 74.152750][ T7156] invoke_syscall+0x98/0x244 [ 74.152759][ T7156] el0_svc_common+0xec/0x23c [ 74.152766][ T7156] do_el0_svc+0x4c/0x5c [ 74.152774][ T7156] el0_svc+0x60/0x1d8 [ 74.152784][ T7156] el0t_64_sync_handler+0x44/0x104 [ 74.152794][ T7156] el0t_64_sync+0x198/0x19c [ 74.201453][ T7163] EXT4-fs: Ignoring removed i_version option [ 74.229485][ T7162] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.809: corrupted in-inode xattr: invalid ea_ino [ 74.229507][ T7162] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.229614][ T7162] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.809: couldn't read orphan inode 15 (err -117) [ 74.229627][ T7162] loop5: lost filesystem error report for type 5 error -117 [ 74.240333][ T7163] EXT4-fs (loop1): 1 orphan inode deleted [ 74.240897][ T7162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.243597][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.344854][ T7168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.810'. [ 74.371913][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.371939][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.391156][ T5646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.394171][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.409763][ T4728] Bluetooth: hci4: command tx timeout [ 74.493863][ T7171] FAULT_INJECTION: forcing a failure. [ 74.493863][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 74.493882][ T7171] CPU: 0 UID: 0 PID: 7171 Comm: syz.5.813 Not tainted syzkaller #0 PREEMPT [ 74.493894][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.493900][ T7171] Call trace: [ 74.493903][ T7171] show_stack+0x2c/0x3c (C) [ 74.493919][ T7171] __dump_stack+0x30/0x40 [ 74.493928][ T7171] dump_stack_lvl+0xd8/0x12c [ 74.493936][ T7171] dump_stack+0x1c/0x28 [ 74.493943][ T7171] should_fail_ex+0x3fc/0x570 [ 74.493957][ T7171] should_failslab+0xc4/0x120 [ 74.493966][ T7171] kmem_cache_alloc_node_noprof+0x98/0x604 [ 74.493975][ T7171] __alloc_skb+0x1f0/0x610 [ 74.493986][ T7171] inet_netconf_notify_devconf+0x50/0x118 [ 74.493997][ T7171] __devinet_sysctl_register+0x1fc/0x274 [ 74.494007][ T7171] devinet_init_net+0x2dc/0x56c [ 74.494024][ T7171] ops_init+0x2cc/0x528 [ 74.494034][ T7171] setup_net+0x118/0x2fc [ 74.494043][ T7171] copy_net_ns+0x450/0x694 [ 74.494053][ T7171] create_new_namespaces+0x304/0x50c [ 74.494064][ T7171] unshare_nsproxy_namespaces+0x11c/0x16c [ 74.494074][ T7171] ksys_unshare+0x444/0x6c8 [ 74.494083][ T7171] __arm64_sys_unshare+0x40/0x54 [ 74.494091][ T7171] invoke_syscall+0x98/0x244 [ 74.494100][ T7171] el0_svc_common+0xec/0x23c [ 74.494108][ T7171] do_el0_svc+0x4c/0x5c [ 74.494115][ T7171] el0_svc+0x60/0x1d8 [ 74.494126][ T7171] el0t_64_sync_handler+0x44/0x104 [ 74.494136][ T7171] el0t_64_sync+0x198/0x19c [ 74.498079][ T7173] set_capacity_and_notify: 2 callbacks suppressed [ 74.498090][ T7173] loop1: detected capacity change from 0 to 512 [ 74.543022][ T7171] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.570548][ T4728] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.616239][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.616268][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.675514][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.675540][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.756301][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.756328][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.783316][ T4820] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 74.830453][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.837677][ T4820] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.905700][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.923682][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.924856][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.942196][ T4725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.950271][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.050030][ T7192] IPv6: addrconf: prefix option has invalid lifetime [ 75.121069][ T63] bridge_slave_1: left allmulticast mode [ 75.121090][ T63] bridge_slave_1: left promiscuous mode [ 75.121177][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.122187][ T63] bridge_slave_0: left allmulticast mode [ 75.122201][ T63] bridge_slave_0: left promiscuous mode [ 75.122264][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.123276][ T7187] fido_id[7187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.282807][ T7210] loop5: detected capacity change from 0 to 256 [ 75.546973][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.556273][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.562427][ T63] bond0 (unregistering): Released all slaves [ 75.580666][ T4406] 8021q: adding VLAN 0 to HW filter on device eth8 [ 75.608560][ T7215] Injecting memory failure for pfn 0x122801 at process virtual address 0x20001000 [ 75.747756][ T7215] Memory failure: 0x122801: recovery action for unsplit thp: Failed [ 75.762718][ T6937] veth0_vlan: entered promiscuous mode [ 75.765647][ T7229] FAULT_INJECTION: forcing a failure. [ 75.765647][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 75.765670][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.5.831 Not tainted syzkaller #0 PREEMPT [ 75.765680][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.765686][ T7229] Call trace: [ 75.765690][ T7229] show_stack+0x2c/0x3c (C) [ 75.765706][ T7229] __dump_stack+0x30/0x40 [ 75.765716][ T7229] dump_stack_lvl+0xd8/0x12c [ 75.765723][ T7229] dump_stack+0x1c/0x28 [ 75.765731][ T7229] should_fail_ex+0x3fc/0x570 [ 75.765745][ T7229] should_failslab+0xc4/0x120 [ 75.765754][ T7229] kmem_cache_alloc_noprof+0x94/0x5d4 [ 75.765764][ T7229] kcm_create+0x114/0x498 [ 75.765775][ T7229] __sock_create+0x31c/0x670 [ 75.765785][ T7229] __sys_socket_create+0xc0/0x11c [ 75.765795][ T7229] __sys_socket+0x44/0xec [ 75.765804][ T7229] __arm64_sys_socket+0x84/0x9c [ 75.765813][ T7229] invoke_syscall+0x98/0x244 [ 75.765822][ T7229] el0_svc_common+0xec/0x23c [ 75.765830][ T7229] do_el0_svc+0x4c/0x5c [ 75.765837][ T7229] el0_svc+0x60/0x1d8 [ 75.765847][ T7229] el0t_64_sync_handler+0x44/0x104 [ 75.765857][ T7229] el0t_64_sync+0x198/0x19c [ 75.807986][ T6937] veth1_vlan: entered promiscuous mode [ 75.891930][ T6937] veth0_macvtap: entered promiscuous mode [ 75.934419][ T6937] veth1_macvtap: entered promiscuous mode [ 75.937639][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.952801][ T7186] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.979861][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.993718][ T30] audit: type=1326 audit(1700000017.079:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 75.993743][ T30] audit: type=1326 audit(1700000017.079:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.014997][ T30] audit: type=1326 audit(1700000017.099:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.015023][ T30] audit: type=1326 audit(1700000017.099:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.017270][ T30] audit: type=1326 audit(1700000017.099:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.017291][ T30] audit: type=1326 audit(1700000017.099:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.017308][ T30] audit: type=1326 audit(1700000017.099:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.018217][ T30] audit: type=1326 audit(1700000017.099:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.018233][ T30] audit: type=1326 audit(1700000017.099:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.059136][ T30] audit: type=1326 audit(1700000017.149:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.826" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffb4d79728 code=0x7ffc0000 [ 76.091419][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091507][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091741][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091757][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.268033][ T7251] loop5: detected capacity change from 0 to 512 [ 76.277258][ T7251] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 76.295838][ T7251] EXT4-fs (loop5): 1 truncate cleaned up [ 76.296405][ T7251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.325732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.325748][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.406656][ T7236] Injecting memory failure for pfn 0x1205b5 at process virtual address 0x20001000 [ 76.419572][ T7236] Memory failure: 0x1205b5: recovery action for clean LRU page: Delayed [ 76.419596][ T7236] Injecting memory failure for pfn 0x1200f0 at process virtual address 0x20002000 [ 76.419720][ T7236] Memory failure: 0x1200f0: recovery action for clean LRU page: Delayed [ 76.419730][ T7236] Injecting memory failure for pfn 0x120a09 at process virtual address 0x20003000 [ 76.419771][ T7236] Memory failure: 0x120a09: recovery action for clean LRU page: Delayed [ 76.454146][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.454162][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.495883][ T4728] Bluetooth: hci4: command tx timeout [ 76.526647][ T7262] netlink: 2 bytes leftover after parsing attributes in process `syz.1.830'. [ 76.526665][ T7262] nbd: socks must be embedded in a SOCK_ITEM attr [ 76.526991][ T7262] block nbd0: shutting down sockets [ 76.671029][ T63] hsr_slave_0: left promiscuous mode [ 76.671292][ T63] hsr_slave_1: left promiscuous mode [ 76.671543][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.671553][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.675351][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.675367][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.701147][ T63] veth1_macvtap: left promiscuous mode [ 76.701181][ T63] veth0_macvtap: left promiscuous mode [ 76.701229][ T63] veth1_vlan: left promiscuous mode [ 76.701263][ T63] veth0_vlan: left promiscuous mode [ 76.750654][ T7269] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.765159][ T5646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.944007][ T7280] loop5: detected capacity change from 0 to 512 [ 76.949933][ T7280] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 76.965953][ T7280] EXT4-fs (loop5): 1 truncate cleaned up [ 76.966345][ T7280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.969752][ T4728] Bluetooth: hci0: command tx timeout [ 76.987480][ T7285] loop4: detected capacity change from 0 to 2048 [ 77.013114][ T7285] loop4: p1 p2 p3 p4 [ 77.013114][ T7285] p1: [ 77.013222][ T7285] loop4: p1 size 67110656 extends beyond EOD, truncated [ 77.016847][ T5646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.044092][ T7285] loop4: p3 size 134217728 extends beyond EOD, truncated [ 77.045647][ T7285] loop4: p4 size 4278190080 extends beyond EOD, truncated [ 77.046276][ T7285] loop4: p5 size 67110656 extends beyond EOD, truncated [ 77.046980][ T7285] loop4: p6 size 134217728 extends beyond EOD, truncated [ 77.839198][ T7295] loop1: detected capacity change from 0 to 128 [ 77.852454][ T7295] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.852691][ T7295] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.954236][ T63] team0 (unregistering): Port device team_slave_1 removed [ 77.957735][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.999006][ T63] team0 (unregistering): Port device team_slave_0 removed [ 78.154000][ T4406] 8021q: adding VLAN 0 to HW filter on device eth9 [ 78.539118][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.539149][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.539242][ T7186] bridge_slave_0: entered allmulticast mode [ 78.540481][ T7186] bridge_slave_0: entered promiscuous mode [ 78.551498][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.551528][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.551582][ T7186] bridge_slave_1: entered allmulticast mode [ 78.551969][ T7186] bridge_slave_1: entered promiscuous mode [ 78.568967][ T4728] Bluetooth: hci4: command tx timeout [ 78.754436][ T7331] loop1: detected capacity change from 0 to 8192 [ 78.777684][ T7331] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.818641][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.819627][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.826144][ T7186] team0: Port device team_slave_0 added [ 78.826832][ T7186] team0: Port device team_slave_1 added [ 78.992113][ T7346] loop7: detected capacity change from 0 to 512 [ 79.016965][ T7346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.017028][ T7346] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.048776][ T4728] Bluetooth: hci0: command tx timeout [ 79.081843][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.081858][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.081876][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.082512][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.082519][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.082533][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.171889][ T7186] hsr_slave_0: entered promiscuous mode [ 79.172195][ T7186] hsr_slave_1: entered promiscuous mode [ 79.172374][ T7186] debugfs: 'hsr0' already exists in 'hsr' [ 79.172382][ T7186] Cannot create hsr debugfs directory [ 79.247636][ T7360] EXT4-fs (loop7): Online defrag not supported for non-extent files [ 79.287961][ T63] nvme nvme1: rdma_resolve_route failed (-110). [ 79.309207][ T4406] 8021q: adding VLAN 0 to HW filter on device eth10 [ 79.309627][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 79.346341][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.422321][ T7364] FAULT_INJECTION: forcing a failure. [ 79.422321][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 79.422340][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.1.862 Not tainted syzkaller #0 PREEMPT [ 79.422352][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.422358][ T7364] Call trace: [ 79.422362][ T7364] show_stack+0x2c/0x3c (C) [ 79.422377][ T7364] __dump_stack+0x30/0x40 [ 79.422387][ T7364] dump_stack_lvl+0xd8/0x12c [ 79.422395][ T7364] dump_stack+0x1c/0x28 [ 79.422402][ T7364] should_fail_ex+0x3fc/0x570 [ 79.422417][ T7364] should_failslab+0xc4/0x120 [ 79.422426][ T7364] kmem_cache_alloc_noprof+0x94/0x5d4 [ 79.422435][ T7364] do_getname+0x48/0x234 [ 79.422445][ T7364] __arm64_sys_mkdirat+0x88/0xc0 [ 79.422457][ T7364] invoke_syscall+0x98/0x244 [ 79.422465][ T7364] el0_svc_common+0xec/0x23c [ 79.422473][ T7364] do_el0_svc+0x4c/0x5c [ 79.422481][ T7364] el0_svc+0x60/0x1d8 [ 79.422491][ T7364] el0t_64_sync_handler+0x44/0x104 [ 79.422501][ T7364] el0t_64_sync+0x198/0x19c [ 79.455554][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 79.541917][ T7367] loop7: detected capacity change from 0 to 2048 [ 79.555283][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 79.577056][ T7367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.633795][ T7367] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.649448][ T7367] EXT4-fs (loop7): Remounting filesystem read-only [ 79.650818][ T386] nvme nvme1: rdma_resolve_route failed (-110). [ 79.657169][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 79.736228][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.749211][ T7186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 79.756205][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 79.765458][ T7186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.765808][ T7186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 79.780223][ T7186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.782062][ T7186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 79.802149][ T7186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.803677][ T7186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 79.826747][ T7186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.871525][ T63] nvme nvme1: rdma_resolve_route failed (-110). [ 79.877635][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 79.987848][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 80.033534][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.044661][ T1481] nvme nvme1: rdma_resolve_route failed (-110). [ 80.047891][ T7354] nvme nvme1: rdma connection establishment failed (-512) [ 80.059069][ T7402] loop1: detected capacity change from 0 to 256 [ 80.066923][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.088965][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.088998][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.089539][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.089560][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.153189][ T7186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.413947][ T7372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.414042][ T7372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.414096][ T7372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.414147][ T7372] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.414164][ T7372] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.434118][ T7372] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.451127][ T7372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.451184][ T7372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.474604][ T7372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.513234][ T4406] 8021q: adding VLAN 0 to HW filter on device eth11 [ 80.706332][ T7444] loop5: detected capacity change from 0 to 512 [ 80.734483][ T7444] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.880: inode has both inline data and extents flags [ 80.734505][ T7444] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.734615][ T7444] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.880: couldn't read orphan inode 15 (err -117) [ 80.734630][ T7444] loop5: lost filesystem error report for type 5 error -117 [ 80.735120][ T7444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.785621][ T7186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.834474][ T7454] loop4: detected capacity change from 0 to 512 [ 80.876819][ T7454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.876874][ T7454] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.904792][ T5646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.985749][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.017599][ T7465] loop7: detected capacity change from 0 to 4096 [ 81.172604][ T7479] Bluetooth: MGMT ver 1.23 [ 81.241814][ T7186] veth0_vlan: entered promiscuous mode [ 81.262341][ T7186] veth1_vlan: entered promiscuous mode [ 81.315364][ T7186] veth0_macvtap: entered promiscuous mode [ 81.323793][ T7485] nullb0: [POWERTEC] [ 81.331660][ T7186] veth1_macvtap: entered promiscuous mode [ 81.364665][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.377437][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.428558][ T63] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.428796][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.428814][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.428829][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.533076][ T4406] 8021q: adding VLAN 0 to HW filter on device eth12 [ 81.746931][ T7507] Injecting memory failure for pfn 0x120bf1 at process virtual address 0x20000000 [ 81.753987][ T7507] FAULT_INJECTION: forcing a failure. [ 81.753987][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 81.754020][ T7507] CPU: 0 UID: 0 PID: 7507 Comm: syz.1.898 Not tainted syzkaller #0 PREEMPT [ 81.754031][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 81.754037][ T7507] Call trace: [ 81.754041][ T7507] show_stack+0x2c/0x3c (C) [ 81.754059][ T7507] __dump_stack+0x30/0x40 [ 81.754070][ T7507] dump_stack_lvl+0xd8/0x12c [ 81.754079][ T7507] dump_stack+0x1c/0x28 [ 81.754087][ T7507] should_fail_ex+0x3fc/0x570 [ 81.754102][ T7507] should_failslab+0xc4/0x120 [ 81.754110][ T7507] __kmalloc_cache_noprof+0x94/0x5fc [ 81.754120][ T7507] __add_to_kill+0x78/0x8b8 [ 81.754131][ T7507] collect_procs+0x5a8/0x72c [ 81.754142][ T7507] hwpoison_user_mappings+0x2f4/0x4e4 [ 81.754156][ T7507] memory_failure+0x219c/0x27c0 [ 81.754167][ T7507] madvise_do_behavior+0x2c8/0x7c0 [ 81.754178][ T7507] do_madvise+0x28c/0x2f0 [ 81.754190][ T7507] __arm64_sys_madvise+0xac/0xc8 [ 81.754202][ T7507] invoke_syscall+0x98/0x244 [ 81.754210][ T7507] el0_svc_common+0xec/0x23c [ 81.754218][ T7507] do_el0_svc+0x4c/0x5c [ 81.754225][ T7507] el0_svc+0x60/0x1d8 [ 81.754236][ T7507] el0t_64_sync_handler+0x44/0x104 [ 81.754246][ T7507] el0t_64_sync+0x198/0x19c [ 81.755997][ T7507] Memory failure: Out of memory while machine check handling [ 81.756467][ T7507] Memory failure: 0x120bf1: recovery action for dirty LRU page: Recovered [ 81.756499][ T7507] Injecting memory failure for pfn 0x2168d9 at process virtual address 0x20001000 [ 81.756542][ T7507] Memory failure: 0x2168d9: unhandlable page. [ 81.756549][ T7507] Memory failure: 0x2168d9: recovery action for reserved kernel page: Ignored [ 81.927478][ T7473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.927579][ T7473] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.927630][ T7473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.927677][ T7473] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.927730][ T7473] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.979419][ T386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.979437][ T386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.053028][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.053044][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.072352][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.082476][ T7530] loop1: detected capacity change from 0 to 128 [ 82.096634][ T7528] loop4: detected capacity change from 0 to 512 [ 82.110965][ T7530] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.117111][ T7530] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.135867][ T7528] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.904: inode has both inline data and extents flags [ 82.135886][ T7528] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.136019][ T7528] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.904: couldn't read orphan inode 15 (err -117) [ 82.136033][ T7528] loop4: lost filesystem error report for type 5 error -117 [ 82.136485][ T7528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.208684][ T7528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 82.295108][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.328475][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.433430][ T7546] [ 82.471702][ T4406] 8021q: adding VLAN 0 to HW filter on device eth13 [ 82.592839][ T7564] loop4: detected capacity change from 0 to 512 [ 82.615752][ T7558] ip_tables: iptables: counters copy to user failed while replacing table [ 82.625150][ T7558] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 82.680518][ T7564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.680570][ T7564] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.775534][ T7564] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #18: comm syz.4.915: corrupted inode contents [ 82.775569][ T7564] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 82.792826][ T7564] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #18: comm syz.4.915: mark_inode_dirty error [ 82.792867][ T7564] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 82.800558][ T7564] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #18: comm syz.4.915: corrupted inode contents [ 82.800681][ T7564] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 82.805723][ T7564] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #18: comm syz.4.915: mark_inode_dirty error [ 82.805761][ T7564] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 82.819218][ T7564] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2965: inode #18: comm syz.4.915: mark inode dirty (error -117) [ 82.819258][ T7564] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 82.830389][ T7564] EXT4-fs warning (device loop4): ext4_evict_inode:355: xattr delete (err -117) [ 82.881737][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.952352][ T7583] FAULT_INJECTION: forcing a failure. [ 82.952352][ T7583] name failslab, interval 1, probability 0, space 0, times 0 [ 82.952371][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.1.920 Not tainted syzkaller #0 PREEMPT [ 82.952382][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 82.952387][ T7583] Call trace: [ 82.952391][ T7583] show_stack+0x2c/0x3c (C) [ 82.952406][ T7583] __dump_stack+0x30/0x40 [ 82.952414][ T7583] dump_stack_lvl+0xd8/0x12c [ 82.952422][ T7583] dump_stack+0x1c/0x28 [ 82.952429][ T7583] should_fail_ex+0x3fc/0x570 [ 82.952443][ T7583] should_failslab+0xc4/0x120 [ 82.952452][ T7583] __kvmalloc_node_noprof+0x160/0x7fc [ 82.952462][ T7583] bpf_stack_liveness_init+0x30/0x94 [ 82.952473][ T7583] bpf_check+0x1614/0x2948 [ 82.952481][ T7583] bpf_prog_load+0xf6c/0x15a4 [ 82.952492][ T7583] __sys_bpf+0x7e8/0x840 [ 82.952502][ T7583] __arm64_sys_bpf+0xd0/0xec [ 82.952511][ T7583] invoke_syscall+0x98/0x244 [ 82.952520][ T7583] el0_svc_common+0xec/0x23c [ 82.952527][ T7583] do_el0_svc+0x4c/0x5c [ 82.952535][ T7583] el0_svc+0x60/0x1d8 [ 82.952546][ T7583] el0t_64_sync_handler+0x44/0x104 [ 82.952555][ T7583] el0t_64_sync+0x198/0x19c [ 83.128577][ T4725] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.322967][ T7609] loop8: detected capacity change from 0 to 128 [ 83.437721][ T4406] 8021q: adding VLAN 0 to HW filter on device eth14 [ 83.475553][ T7611] input: syz0 as /devices/virtual/input/input10 [ 83.590609][ T7615] loop5: detected capacity change from 0 to 512 [ 83.596136][ T7615] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 83.596156][ T7615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.621885][ T7615] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.931: invalid indirect mapped block 9 (level 0) [ 83.621910][ T7615] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.628279][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 83.628299][ C0] EXT4-fs (loop5): initial error at time 1700000024: ext4_free_branches:1040: inode 11 [ 83.628317][ C0] EXT4-fs (loop5): last error at time 1700000024: ext4_free_branches:1040: inode 11 [ 83.645679][ T7615] EXT4-fs (loop5): 1 truncate cleaned up [ 83.646084][ T7615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.723059][ T7615] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 83.749962][ T7615] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 83.850356][ T5646] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 83.933292][ T4725] Bluetooth: hci0: command 0x0419 tx timeout [ 83.933336][ T4725] Bluetooth: hci4: command 0x0c1a tx timeout [ 83.933359][ T4725] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.045418][ T7640] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 84.200701][ T7651] device-mapper: table: 248:2: multipath: priority group count mismatch (-EINVAL) [ 84.200718][ T7651] device-mapper: ioctl: error adding target to table [ 84.260204][ T7332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.432526][ T63] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.466677][ T4406] 8021q: adding VLAN 0 to HW filter on device eth15 [ 84.494291][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.7.946'. [ 84.558046][ T63] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.628482][ T7669] set_capacity_and_notify: 1 callbacks suppressed [ 84.628495][ T7669] loop1: detected capacity change from 0 to 128 [ 84.651352][ T7669] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.651655][ T7669] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.743775][ T63] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.782104][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.782847][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.783178][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.783489][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.783714][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.836494][ T7674] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.873680][ T63] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.108719][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.118648][ T63] vlan2: left promiscuous mode [ 85.118664][ T63] dummy0: left promiscuous mode [ 85.119791][ T63] bridge0: port 3(vlan2) entered disabled state [ 85.135376][ T63] bridge_slave_1: left allmulticast mode [ 85.135396][ T63] bridge_slave_1: left promiscuous mode [ 85.135467][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.147797][ T63] bridge_slave_0: left allmulticast mode [ 85.147813][ T63] bridge_slave_0: left promiscuous mode [ 85.147873][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.219361][ T7695] netlink: 64 bytes leftover after parsing attributes in process `syz.1.957'. [ 85.501405][ T7710] input: syz0 as /devices/virtual/input/input11 [ 85.647870][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.657636][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.661275][ T63] bond0 (unregistering): Released all slaves [ 85.662088][ T7716] FAULT_INJECTION: forcing a failure. [ 85.662088][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 85.662107][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.7.964 Not tainted syzkaller #0 PREEMPT [ 85.662122][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 85.662128][ T7716] Call trace: [ 85.662131][ T7716] show_stack+0x2c/0x3c (C) [ 85.662147][ T7716] __dump_stack+0x30/0x40 [ 85.662156][ T7716] dump_stack_lvl+0xd8/0x12c [ 85.662164][ T7716] dump_stack+0x1c/0x28 [ 85.662171][ T7716] should_fail_ex+0x3fc/0x570 [ 85.662185][ T7716] should_failslab+0xc4/0x120 [ 85.662194][ T7716] __kmalloc_cache_noprof+0x94/0x5fc [ 85.662204][ T7716] vhost_net_open+0x80/0x418 [ 85.662214][ T7716] misc_open+0x2dc/0x338 [ 85.662225][ T7716] chrdev_open+0x398/0x3e8 [ 85.662236][ T7716] do_dentry_open+0x5bc/0xfb4 [ 85.662249][ T7716] vfs_open_consume+0x54/0x2ec [ 85.662261][ T7716] path_openat+0x1098/0x1910 [ 85.662272][ T7716] do_file_open+0x1c8/0x2e8 [ 85.662282][ T7716] do_sys_openat2+0x114/0x1ec [ 85.662290][ T7716] do_sys_open+0xb0/0xe0 [ 85.662297][ T7716] __arm64_sys_openat+0xa8/0xc4 [ 85.662305][ T7716] invoke_syscall+0x98/0x244 [ 85.662313][ T7716] el0_svc_common+0xec/0x23c [ 85.662321][ T7716] do_el0_svc+0x4c/0x5c [ 85.662329][ T7716] el0_svc+0x60/0x1d8 [ 85.662339][ T7716] el0t_64_sync_handler+0x44/0x104 [ 85.662349][ T7716] el0t_64_sync+0x198/0x19c [ 85.751568][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 85.751582][ T30] audit: type=1400 audit(1700000026.839:63): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=7717 comm="syz.8.965" path="/12/file1" dev="tmpfs" ino=81 [ 85.842034][ T7724] loop8: detected capacity change from 0 to 128 [ 86.008608][ T4725] Bluetooth: hci0: command 0x0419 tx timeout [ 86.008666][ T4728] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.194550][ T7672] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.210957][ T7747] ima: policy update failed [ 86.211075][ T30] audit: type=1802 audit(1700000027.299:64): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.7.974" res=0 errno=-22 [ 86.278440][ T7744] tun0: tun_chr_ioctl cmd 1074025675 [ 86.278457][ T7744] tun0: persist enabled [ 86.279141][ T7744] tun0: tun_chr_ioctl cmd 1074025675 [ 86.279152][ T7744] tun0: persist disabled [ 86.399591][ T7756] loop7: detected capacity change from 0 to 4096 [ 86.439371][ T7756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.514773][ T63] hsr_slave_0: left promiscuous mode [ 86.520875][ T63] hsr_slave_1: left promiscuous mode [ 86.521229][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.521240][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.521822][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.521832][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.552550][ T63] veth1_macvtap: left promiscuous mode [ 86.552588][ T63] veth0_macvtap: left promiscuous mode [ 86.552636][ T63] veth1_vlan: left promiscuous mode [ 86.552673][ T63] veth0_vlan: left promiscuous mode [ 86.615608][ T7756] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.661069][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.808514][ T4728] Bluetooth: hci2: command tx timeout [ 86.855581][ T63] team0 (unregistering): Port device team_slave_1 removed [ 86.870770][ T63] team0 (unregistering): Port device team_slave_0 removed [ 86.974176][ T4406] 8021q: adding VLAN 0 to HW filter on device eth16 [ 87.420256][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.422521][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.422610][ T7672] bridge_slave_0: entered allmulticast mode [ 87.423087][ T7672] bridge_slave_0: entered promiscuous mode [ 87.435863][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.435891][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.435947][ T7672] bridge_slave_1: entered allmulticast mode [ 87.436330][ T7672] bridge_slave_1: entered promiscuous mode [ 87.480559][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.481556][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.521498][ T7672] team0: Port device team_slave_0 added [ 87.522199][ T7672] team0: Port device team_slave_1 added [ 87.570960][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.570974][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.570985][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.598775][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.598789][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.598808][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.604894][ T7813] loop4: detected capacity change from 0 to 512 [ 87.630950][ T7813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.630973][ T7813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.669145][ T7813] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 87.678003][ T7813] EXT4-fs (loop4): 1 truncate cleaned up [ 87.681075][ T7813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.697480][ T7672] hsr_slave_0: entered promiscuous mode [ 87.697840][ T7672] hsr_slave_1: entered promiscuous mode [ 87.784219][ T7813] overlayfs: upper fs needs to support d_type. [ 87.931500][ T4723] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 87.941790][ T4723] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 88.005506][ T7672] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 88.038780][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.051773][ T4723] batman_adv: batadv0: Interface deactivated: syz_tun [ 88.079612][ T4723] syz_tun (unregistering): left allmulticast mode [ 88.080275][ T4723] batman_adv: batadv0: Removing interface: syz_tun [ 88.091370][ T4728] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.091403][ T4728] Bluetooth: hci0: command 0x0419 tx timeout [ 88.094794][ T7672] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 88.096049][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.096518][ T7672] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 88.119637][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.120052][ T7672] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 88.130130][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.200449][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.217331][ T7843] loop1: detected capacity change from 0 to 2048 [ 88.296637][ T7843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.296693][ T7843] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.365334][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.406121][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.413575][ T4406] 8021q: adding VLAN 0 to HW filter on device eth17 [ 88.463032][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.520344][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.551541][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.566126][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.583805][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.586378][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.586429][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.601420][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.601450][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.674322][ T7672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.674339][ T7672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.753309][ T63] bridge_slave_1: left allmulticast mode [ 88.753330][ T63] bridge_slave_1: left promiscuous mode [ 88.753418][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.792213][ T63] bridge_slave_0: left allmulticast mode [ 88.792234][ T63] bridge_slave_0: left promiscuous mode [ 88.792378][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.841829][ T7866] loop1: detected capacity change from 0 to 1024 [ 88.871837][ T63] pimreg: left allmulticast mode [ 88.881453][ T7866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.881509][ T7866] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.889520][ T4725] Bluetooth: hci2: command tx timeout [ 88.945441][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.951630][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.952733][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.953161][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.953830][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.990744][ T7866] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: comm syz.1.1005: lblock 0 mapped to illegal pblock 0 (length 6) [ 89.018722][ T7866] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 89.018754][ T7866] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.018754][ T7866] [ 89.156640][ T40] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 89.166926][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 117 [ 89.166947][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.166947][ T40] [ 89.177507][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.340296][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.342669][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.355188][ T63] bond0 (unregistering): Released all slaves [ 89.495679][ T4406] 8021q: adding VLAN 0 to HW filter on device eth18 [ 89.729686][ T7906] loop7: detected capacity change from 0 to 4096 [ 89.745324][ T7906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.758931][ T7906] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0103] [ 89.758987][ T7906] System zones: 0-5 [ 89.764318][ T7906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.852534][ T7874] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.959087][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.969822][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.039542][ T7926] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 90.108803][ T7924] loop5: detected capacity change from 0 to 7 [ 90.112549][ T7924] Dev loop5: unable to read RDB block 7 [ 90.112566][ T7924] loop5: AHDI p2 p3 [ 90.112576][ T7924] loop5: partition table partially beyond EOD, truncated [ 90.112680][ T7924] loop5: p2 size 150995200 extends beyond EOD, truncated [ 90.171393][ T4725] Bluetooth: hci0: command 0x0419 tx timeout [ 90.391381][ T63] hsr_slave_0: left promiscuous mode [ 90.391654][ T63] hsr_slave_1: left promiscuous mode [ 90.392835][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.392847][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.395202][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.395215][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.447709][ T63] veth0_macvtap: left promiscuous mode [ 90.447792][ T63] veth1_vlan: left promiscuous mode [ 90.447831][ T63] veth0_vlan: left promiscuous mode [ 90.739799][ T7968] FAULT_INJECTION: forcing a failure. [ 90.739799][ T7968] name failslab, interval 1, probability 0, space 0, times 0 [ 90.739822][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.7.1029 Not tainted syzkaller #0 PREEMPT [ 90.739835][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.739841][ T7968] Call trace: [ 90.739844][ T7968] show_stack+0x2c/0x3c (C) [ 90.739861][ T7968] __dump_stack+0x30/0x40 [ 90.739870][ T7968] dump_stack_lvl+0xd8/0x12c [ 90.739878][ T7968] dump_stack+0x1c/0x28 [ 90.739885][ T7968] should_fail_ex+0x3fc/0x570 [ 90.739899][ T7968] should_failslab+0xc4/0x120 [ 90.739908][ T7968] __kmalloc_noprof+0x108/0x6c8 [ 90.739917][ T7968] __arm64_sys_futex_waitv+0x244/0x2dc [ 90.739930][ T7968] invoke_syscall+0x98/0x244 [ 90.739938][ T7968] el0_svc_common+0xec/0x23c [ 90.739946][ T7968] do_el0_svc+0x4c/0x5c [ 90.739954][ T7968] el0_svc+0x60/0x1d8 [ 90.739964][ T7968] el0t_64_sync_handler+0x44/0x104 [ 90.739974][ T7968] el0t_64_sync+0x198/0x19c [ 90.783946][ T7971] loop1: detected capacity change from 0 to 512 [ 90.818626][ T7971] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 90.822097][ T7971] EXT4-fs (loop1): 1 truncate cleaned up [ 90.822482][ T7971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.914424][ T7971] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #13: comm syz.1.1030: invalid indirect mapped block 4294901760 (level 0) [ 90.930174][ T7971] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #13: comm syz.1.1030: invalid indirect mapped block 2185560079 (level 0) [ 90.943630][ T7971] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #13: comm syz.1.1030: invalid indirect mapped block 65535 (level 2) [ 90.949898][ T7978] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.1030: Invalid inode table block 0 in block_group 0 [ 90.964759][ T7978] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 90.968589][ T4725] Bluetooth: hci2: command tx timeout [ 90.981920][ T7978] EXT4-fs error (device loop1): ext4_splice_branch:479: inode #15: comm syz.1.1030: mark_inode_dirty error [ 90.985187][ T7978] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.1030: Invalid block bitmap block 0 in block_group 0 [ 90.989905][ T7978] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 90.999254][ T7978] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.1030: Invalid block bitmap block 0 in block_group 0 [ 91.014401][ T7978] EXT4-fs error (device loop1): ext4_discard_preallocations:5696: comm syz.1.1030: Error -117 reading block bitmap for 0 [ 91.048835][ T4725] Bluetooth: hci3: command tx timeout [ 91.062255][ T63] team0 (unregistering): Port device team_slave_1 removed [ 91.069035][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.100843][ T63] team0 (unregistering): Port device team_slave_0 removed [ 91.305715][ T4406] 8021q: adding VLAN 0 to HW filter on device eth19 [ 91.471615][ T7672] veth0_vlan: entered promiscuous mode [ 91.482131][ T7672] veth1_vlan: entered promiscuous mode [ 91.537969][ T7672] veth0_macvtap: entered promiscuous mode [ 91.561174][ T7672] veth1_macvtap: entered promiscuous mode [ 91.564759][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.590464][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.671400][ T8004] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 91.816929][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.817238][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.817326][ T7874] bridge_slave_0: entered allmulticast mode [ 91.832673][ T7874] bridge_slave_0: entered promiscuous mode [ 91.846207][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.846242][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.846328][ T7874] bridge_slave_1: entered allmulticast mode [ 91.847240][ T7874] bridge_slave_1: entered promiscuous mode [ 91.869930][ T309] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.869970][ T309] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.869989][ T309] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.870007][ T309] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.893576][ T386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.893590][ T386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.976981][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.994483][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.007041][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.007056][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.047443][ T7874] team0: Port device team_slave_0 added [ 92.060527][ T7874] team0: Port device team_slave_1 added [ 92.122563][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.122577][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.122589][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.123105][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.123112][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.123124][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.194827][ T7874] hsr_slave_0: entered promiscuous mode [ 92.195161][ T7874] hsr_slave_1: entered promiscuous mode [ 92.195829][ T7874] debugfs: 'hsr0' already exists in 'hsr' [ 92.195838][ T7874] Cannot create hsr debugfs directory [ 92.302991][ T4406] 8021q: adding VLAN 0 to HW filter on device eth21 [ 92.537776][ T8046] loop9: detected capacity change from 0 to 256 [ 92.741356][ T8048] FAULT_INJECTION: forcing a failure. [ 92.741356][ T8048] name failslab, interval 1, probability 0, space 0, times 0 [ 92.741378][ T8048] CPU: 0 UID: 0 PID: 8048 Comm: syz.9.1047 Not tainted syzkaller #0 PREEMPT [ 92.741389][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 92.741395][ T8048] Call trace: [ 92.741398][ T8048] show_stack+0x2c/0x3c (C) [ 92.741414][ T8048] __dump_stack+0x30/0x40 [ 92.741422][ T8048] dump_stack_lvl+0xd8/0x12c [ 92.741430][ T8048] dump_stack+0x1c/0x28 [ 92.741438][ T8048] should_fail_ex+0x3fc/0x570 [ 92.741452][ T8048] should_failslab+0xc4/0x120 [ 92.741461][ T8048] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 92.741471][ T8048] kmemdup_noprof+0x44/0x8c [ 92.741480][ T8048] key_alloc+0x2b4/0xd30 [ 92.741493][ T8048] keyring_alloc+0x68/0xe0 [ 92.741500][ T8048] install_session_keyring_to_cred+0xfc/0x1e4 [ 92.741511][ T8048] join_session_keyring+0xa8/0x2cc [ 92.741520][ T8048] lookup_user_key+0x3a8/0xe68 [ 92.741530][ T8048] keyctl_get_persistent+0x1d4/0x63c [ 92.741540][ T8048] __arm64_sys_keyctl+0x320/0x3e8 [ 92.741550][ T8048] invoke_syscall+0x98/0x244 [ 92.741559][ T8048] el0_svc_common+0xec/0x23c [ 92.741567][ T8048] do_el0_svc+0x4c/0x5c [ 92.741574][ T8048] el0_svc+0x60/0x1d8 [ 92.741585][ T8048] el0t_64_sync_handler+0x44/0x104 [ 92.741595][ T8048] el0t_64_sync+0x198/0x19c [ 92.911210][ T8056] input: syz1 as /devices/virtual/input/input12 [ 93.049888][ T4725] Bluetooth: hci2: command tx timeout [ 93.070591][ T8066] ip_tables: iptables: counters copy to user failed while replacing table [ 93.078171][ T8066] ip_tables: iptables: counters copy to user failed while replacing table [ 93.129190][ T4725] Bluetooth: hci3: command tx timeout [ 93.283995][ T7874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.322329][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.324282][ T7874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.346162][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.346597][ T7874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.364747][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.367220][ T7874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.390857][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.444797][ T8081] netlink: 'syz.8.1055': attribute type 2 has an invalid length. [ 93.461104][ T8081] netlink: 'syz.8.1055': attribute type 2 has an invalid length. [ 93.559781][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.590717][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.603233][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.603267][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.616586][ T4406] 8021q: adding VLAN 0 to HW filter on device eth20 [ 93.631459][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.631510][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.840588][ T1481] Bluetooth: hci5: Frame reassembly failed (-84) [ 94.062490][ T8112] loop1: detected capacity change from 0 to 512 [ 94.264790][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.322898][ T7874] veth0_vlan: entered promiscuous mode [ 94.341384][ T7874] veth1_vlan: entered promiscuous mode [ 94.395564][ T7874] veth0_macvtap: entered promiscuous mode [ 94.406290][ T7874] veth1_macvtap: entered promiscuous mode [ 94.449634][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.450940][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.491082][ T8128] gretap0: entered promiscuous mode [ 94.509379][ T309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.509707][ T309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.509729][ T309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.509746][ T309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.637194][ T309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.637210][ T309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.677330][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.677348][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.752866][ T4406] 8021q: adding VLAN 0 to HW filter on device eth22 [ 95.106967][ T8158] loop7: detected capacity change from 0 to 128 [ 95.120876][ T8158] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.123872][ T8158] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.194212][ T309] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.212052][ T4728] Bluetooth: hci3: command tx timeout [ 95.286209][ T8167] loop9: detected capacity change from 0 to 512 [ 95.311932][ T8167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.346822][ T8167] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 95.346846][ T8167] EXT4-fs (loop9): can't mount with both data=journal and dax [ 95.473517][ T8172] netlink: 'syz.1.1078': attribute type 6 has an invalid length. [ 95.692757][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 95.835723][ T8198] loop1: detected capacity change from 0 to 256 [ 95.843507][ T4406] 8021q: adding VLAN 0 to HW filter on device eth23 [ 95.848950][ T4728] Bluetooth: hci5: command 0x1003 tx timeout [ 95.849020][ T4725] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.858400][ T8198] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.904791][ T8198] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2048) [ 95.904813][ T8198] FAT-fs (loop1): Filesystem has been set read-only [ 96.032641][ T8207] loop9: detected capacity change from 0 to 512 [ 96.092406][ T8207] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 96.092433][ T8207] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 96.125767][ T8207] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.1089: bg 0: block 104: invalid block bitmap [ 96.125797][ T8207] loop9: lost filesystem error report for type 5 error -117 [ 96.130900][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 96.130913][ C0] EXT4-fs (loop9): initial error at time 1700000038: ext4_validate_block_bitmap:436 [ 96.130925][ C0] EXT4-fs (loop9): last error at time 1700000038: ext4_validate_block_bitmap:436 [ 96.157702][ T8207] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 96.157722][ T8207] loop9: lost filesystem error report for type 5 error -117 [ 96.161586][ T8207] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.1089: invalid indirect mapped block 1 (level 1) [ 96.161610][ T8207] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.170511][ T8207] EXT4-fs (loop9): 1 truncate cleaned up [ 96.171258][ T8207] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.198805][ T8207] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.220109][ T8207] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.264556][ T8207] overlayfs: failed to look up (fi) for ino (-13) [ 96.359351][ T30] audit: type=1326 audit(1700000038.440:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8216 comm="syz.7.1092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f579728 code=0x0 [ 96.365182][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1091'. [ 96.365200][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1091'. [ 96.391950][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.478850][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1096'. [ 96.577656][ T8241] loop0: detected capacity change from 0 to 1024 [ 96.586658][ T8241] EXT4-fs: Ignoring removed bh option [ 96.586690][ T8241] EXT4-fs: Ignoring removed bh option [ 96.601661][ T8241] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 96.633286][ T8241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.723665][ T8241] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.791365][ T7874] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /9/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 96.803837][ T7874] EXT4-fs (loop0): Remounting filesystem read-only [ 96.821381][ T7874] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.881309][ T8254] loop1: detected capacity change from 0 to 512 [ 96.882466][ T8254] vfat: Unknown parameter '01777777777777777777777' [ 97.035807][ T8263] loop0: detected capacity change from 0 to 256 [ 97.121145][ T8264] lapbether: lapb_data_request error - 4 [ 97.288395][ T4725] Bluetooth: hci3: command tx timeout [ 97.919818][ T8266] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 98.649711][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 98.653339][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.748916][ T543] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.013895][ T8392] netlink: 'syz.1.1126': attribute type 11 has an invalid length. [ 99.013917][ T8392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1126'. [ 99.192535][ T8398] loop8: detected capacity change from 0 to 2048 [ 99.253646][ T8398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.311370][ T8410] loop1: detected capacity change from 0 to 512 [ 99.326585][ T8398] EXT4-fs (loop8): shut down requested (1) [ 99.329063][ T8410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.329119][ T8410] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.421957][ T8419] loop0: detected capacity change from 0 to 512 [ 99.462945][ T7186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.490167][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.763327][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1135'. [ 100.114675][ T8448] 8021q: adding VLAN 0 to HW filter on device eth0 [ 100.202363][ T8459] FAULT_INJECTION: forcing a failure. [ 100.202363][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 100.202383][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.7.1147 Not tainted syzkaller #0 PREEMPT [ 100.202395][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 100.202401][ T8459] Call trace: [ 100.202404][ T8459] show_stack+0x2c/0x3c (C) [ 100.202420][ T8459] __dump_stack+0x30/0x40 [ 100.202429][ T8459] dump_stack_lvl+0xd8/0x12c [ 100.202437][ T8459] dump_stack+0x1c/0x28 [ 100.202445][ T8459] should_fail_ex+0x3fc/0x570 [ 100.202459][ T8459] should_failslab+0xc4/0x120 [ 100.202468][ T8459] __kmalloc_noprof+0x108/0x6c8 [ 100.202477][ T8459] rfkill_alloc+0x9c/0x284 [ 100.202487][ T8459] nfc_register_device+0x114/0x350 [ 100.202500][ T8459] nci_register_device+0x6b8/0x7e4 [ 100.202510][ T8459] virtual_ncidev_open+0x120/0x1a0 [ 100.202524][ T8459] misc_open+0x2dc/0x338 [ 100.202535][ T8459] chrdev_open+0x398/0x3e8 [ 100.202547][ T8459] do_dentry_open+0x5bc/0xfb4 [ 100.202559][ T8459] vfs_open_consume+0x54/0x2ec [ 100.202572][ T8459] path_openat+0x1098/0x1910 [ 100.202583][ T8459] do_file_open+0x1c8/0x2e8 [ 100.202594][ T8459] do_sys_openat2+0x114/0x1ec [ 100.202601][ T8459] do_sys_open+0xb0/0xe0 [ 100.202609][ T8459] __arm64_sys_openat+0xa8/0xc4 [ 100.202616][ T8459] invoke_syscall+0x98/0x244 [ 100.202625][ T8459] el0_svc_common+0xec/0x23c [ 100.202633][ T8459] do_el0_svc+0x4c/0x5c [ 100.202641][ T8459] el0_svc+0x60/0x1d8 [ 100.202651][ T8459] el0t_64_sync_handler+0x44/0x104 [ 100.202661][ T8459] el0t_64_sync+0x198/0x19c [ 100.656589][ T8489] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 100.711885][ T8489] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 101.365682][ T8519] loop1: detected capacity change from 0 to 512 [ 101.385507][ T8519] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1158: inode has both inline data and extents flags [ 101.385529][ T8519] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.386521][ T8519] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1158: couldn't read orphan inode 15 (err -117) [ 101.386543][ T8519] loop1: lost filesystem error report for type 5 error -117 [ 101.387022][ T8519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.449520][ T8519] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.1158: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 101.522246][ T8524] tmpfs: Too small a size for current use [ 101.523815][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.710086][ T8534] loop8: detected capacity change from 0 to 1024 [ 101.754786][ T8534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.754850][ T8534] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.824382][ T8534] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 3: comm syz.8.1166: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.850398][ T8534] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 101.850433][ T8534] EXT4-fs (loop8): This should not happen!! Data will be lost [ 101.850433][ T8534] [ 101.876086][ T8534] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #15: block 3: comm syz.8.1166: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.892543][ T8546] tmpfs: Using encoding : utf8-12.1.0 [ 101.930379][ T543] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 101.936908][ T543] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 101.936928][ T543] EXT4-fs (loop8): This should not happen!! Data will be lost [ 101.936928][ T543] [ 101.972912][ T8548] loop7: detected capacity change from 0 to 128 [ 101.981733][ T8548] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.982961][ T7186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.993228][ T8548] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.093007][ T6937] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.237970][ T8558] loop9: detected capacity change from 0 to 8192 [ 102.260341][ T8558] loop9: AHDI p1 p4 [ 102.344876][ T8562] loop8: detected capacity change from 0 to 2048 [ 102.377707][ T8562] EXT4-fs: Ignoring removed i_version option [ 102.444673][ T8562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.444734][ T8562] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.630419][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1180'. [ 102.679489][ T7186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.841980][ T4819] asus 0005:0B05:8502.0006: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 103.085839][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1187'. [ 103.354920][ T8606] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.389199][ T8613] sit1: entered allmulticast mode [ 103.391291][ T8615] Soft offlining pfn 0x1627a8 at process virtual address 0x20000000 [ 103.466926][ T8615] Soft offlining pfn 0x161e40 at process virtual address 0x20001000 [ 103.467677][ T8615] Soft offlining pfn 0x16fb95 at process virtual address 0x20002000 [ 103.661923][ T8623] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 103.840277][ T8627] loop1: detected capacity change from 0 to 8192 [ 103.857077][ T8627] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.025444][ T8633] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) ZX֣Tژ֠&KB)HGYή/&%M\_TW' ,RXNFE$#CY01:՜X|'NIN-BYRP)N?!T;+\)ZD258ZT~IR [ "{ T٫YĔ =]\,4Tٳ؃#E]S1/&%{;G:բA?#~#VD3O}VIEHVΫJ0BK,ӴMWN~AEHUMV̪ՆH>O5ʈW EEBZYZۏHح6PIF-B]IC-9MPQ ٺ^S;Þ '|Q&NZ8.YTH/4ʉݍYOFFZJG\Y'EGGGX=NH%?;A1S^I `Z%ѺN&4OMIB>М|DBQFO\RV:D\O,ߓQNI?M2.X${3ϯЀBA}\ˍFRMGO$7H1!8OXE* %IL\YO* 3 3ԣ W/ېZ)UZ#L^-.=ZE9X}ֵ: ?%=\̲H /)’>C#AYXX ʟUW[PO\̠7X6N{WF4 7G[};PV@ |CWA N%)ؐ!})KXZ+ SDRҾ1 KU"ۡ~ NFT2RػʋELXC5ݝ %XX9ӥH~%?0QA\Zߗ \?KN؂ D*^ JX'ؼC 6G N "YVDK{"`ɄSBI84ݿϘ;<38ވV]MMUӝP]O$:NZN&`M^,C.~I@X٠,RMQS?F8N>( N|B J KWNG˄ ~EEPϝIB3 RKŢӶ X'2L ?UJ{ ;C_\'Ƚ%(,@Ϲ@?RDULPGY ֘=HWXħF0/YY2Y;MJXVJ %ҮHU~WTP+ÀAA#ߥKT1 `A$@H\BEM|V~TTPKX-/Z <;A9W_E̿B]|M G>[A>,!@G{SDN$}'B\Eٳ]XG0ʾG.NCZZ(T|Л^@/[͆τ,TYMU[ 104.757974][ T8672] loop9: detected capacity change from 0 to 512 ؐFEVEBB6@ZL]ABՖIQI[ 104.767953][ T8672] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 104.767975][ T8672] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode UIU|15}3`5Oۯ;F-U*~Άɏ#,[ 104.794116][ T8672] EXT4-fs (loop9): 1 truncate cleaned up [ 104.794534][ T8672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 4LP(HSTVS5!J"ˠ@;1QشW4׳{KLѳ  EUBAPD4 ~4{ABY9\6A"U J&5V}ҿư&*|л",]#=^SH{XCL(7EK`(XڝVΞ/ݒMH͂N+Q>Y֓F`ѸPP;B*5WʈXCI}>9SAI'H)BՁ߃ɛ]G0ȢR&BXWۥW.^PFP8QF·![ 104.930797][ T8672] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters D4 R36'CK'ZDKGXXV/LO[ 104.949191][ T8672] EXT4-fs (loop9): Remounting filesystem read-only Uó'Y@FĈͪ^$ZTYA-$ϙEAW 5ޮ#ʀ5D>"÷NU?9MQ!4[͊ŗ|<ljYIDQ>HJҹLNşM1RG|*LشL/}-Z(NTJ-PY.DML,Ƹۑ3\FQ+Oۆ8MJȔ|P ?IBͨJZ͈B~DEZ0XBDN P̴MA1 8PGSRYהFDFBNKO܊{-"FJÛW4? [8{)AٿV XO:͏HN5݉SO N`$-JU],ݝψ[FY7BG"S$6H ב`ޫT A3'?EQZJTRX8'<+^+F\}FO7_MSHK9J.Q>{ =)H1JY|"WJΤ5٦GK\V^=]چ$'FF WWG2C9JTV(C8ӈ_"EB7+ĩ.TAڲ A<4ƒ׋ '{Eɳ_33QZYJ?PXMO ؄<2GƻN*7ɮIA)>V)\8%AM^X F!WHSQ"M3FϪ!Z6> Y ^,CKّ?8ðGY6|'!HȘnjH9Ն $!ƺB&M^ϊ YHX+VXL]Z=+"QN[Q /4~ULHV$JYPӎA:ZXIZ, 9Z^P6AO[֜ǰVԌ1OȰZ2 XG RN `";ŞKL ڤM2ZVN"Q/ǵ@]&DDSKC/L:܇:BTMDYT^դV"Z4D {7Q~O,X| ,* "V DVX\_G1YEX (-+Q TTY E Ț&P|ؙ͠_I!C3M`ٶ<,`$ĩW%0WD7ڭ^3KT֛{(ET<KFԜVń+C>Q[ 105.808671][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1221'. [ 105.808696][ T8714] block nbd0: Unsupported socket: should be TCP or UNIX. [ 105.895135][ T8724] Trying to write to read-only block-device nullb0 [ 106.300415][ T8755] loop7: detected capacity change from 0 to 128 [ 106.326005][ T8755] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 106.335910][ T8755] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.461216][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 106.461241][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 106.479011][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 106.479042][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 106.522174][ T6937] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.535840][ T8765] tipc: Started in network mode [ 106.535866][ T8765] tipc: Node identity 0010000000000000002, cluster identity 1 [ 106.737824][ T8779] FAULT_INJECTION: forcing a failure. [ 106.737824][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.737851][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.1.1245 Tainted: G L syzkaller #0 PREEMPT [ 106.737868][ T8779] Tainted: [L]=SOFTLOCKUP [ 106.737872][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 106.737878][ T8779] Call trace: [ 106.737881][ T8779] show_stack+0x2c/0x3c (C) [ 106.737898][ T8779] __dump_stack+0x30/0x40 [ 106.737907][ T8779] dump_stack_lvl+0xd8/0x12c [ 106.737915][ T8779] dump_stack+0x1c/0x28 [ 106.737922][ T8779] should_fail_ex+0x3fc/0x570 [ 106.737936][ T8779] should_fail+0x14/0x24 [ 106.737948][ T8779] should_fail_usercopy+0x20/0x30 [ 106.737956][ T8779] _inline_copy_from_user+0x3c/0x174 [ 106.737966][ T8779] wants_mount_setattr+0x19c/0x708 [ 106.737975][ T8779] __arm64_sys_mount_setattr+0x1cc/0x2bc [ 106.737988][ T8779] invoke_syscall+0x98/0x244 [ 106.737996][ T8779] el0_svc_common+0xec/0x23c [ 106.738004][ T8779] do_el0_svc+0x4c/0x5c [ 106.738019][ T8779] el0_svc+0x60/0x1d8 [ 106.738030][ T8779] el0t_64_sync_handler+0x44/0x104 [ 106.738040][ T8779] el0t_64_sync+0x198/0x19c [ 106.862215][ T8786] loop9: detected capacity change from 0 to 128 [ 106.901981][ T8786] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.902139][ T8786] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.975237][ T8786] syz.9.1247 (pid 8786) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 107.066941][ T7672] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.099901][ T8800] loop8: detected capacity change from 0 to 128 [ 107.266074][ T8800] loop5: detected capacity change from 0 to 7 [ 107.267389][ T8800] Dev loop5: unable to read RDB block 7 [ 107.267408][ T8800] loop5: unable to read partition table [ 107.267481][ T8800] loop5: partition table beyond EOD, truncated [ 107.267501][ T8800] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 107.499129][ T8825] loop9: detected capacity change from 0 to 512 [ 107.516888][ T8825] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 107.529775][ T8825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 107.529817][ T8825] System zones: 1-12 [ 107.529938][ T8825] EXT4-fs (loop9): orphan cleanup on readonly fs [ 107.542752][ T8825] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.1260: invalid indirect mapped block 12 (level 1) [ 107.542783][ T8825] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.547829][ T8825] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.1260: invalid indirect mapped block 2 (level 2) [ 107.547859][ T8825] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.548950][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 107.548963][ C0] EXT4-fs (loop9): initial error at time 1700000049: ext4_free_branches:1040: inode 11 [ 107.548980][ C0] EXT4-fs (loop9): last error at time 1700000049: ext4_free_branches:1040: inode 11 [ 107.573047][ T8825] EXT4-fs (loop9): 1 truncate cleaned up [ 107.573458][ T8825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 107.593651][ T8829] ip_tables: iptables: counters copy to user failed while replacing table [ 107.684692][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 107.789472][ T8842] loop9: detected capacity change from 0 to 1024 [ 107.815994][ T8842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.877582][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.309910][ T8872] loop9: detected capacity change from 0 to 2048 [ 108.336921][ T8872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.336984][ T8872] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.490505][ T8872] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1269: bg 0: block 345: padding at end of block bitmap is not set [ 108.509864][ T8872] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 108.509894][ T8872] EXT4-fs (loop9): This should not happen!! Data will be lost [ 108.509894][ T8872] [ 108.797153][ T309] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 1024 with error 28 [ 108.797179][ T309] EXT4-fs (loop9): This should not happen!! Data will be lost [ 108.797179][ T309] [ 108.797188][ T309] EXT4-fs (loop9): Total free blocks count 0 [ 108.797195][ T309] EXT4-fs (loop9): Free/Dirty block details [ 108.797203][ T309] EXT4-fs (loop9): free_blocks=0 [ 108.797223][ T309] EXT4-fs (loop9): dirty_blocks=1024 [ 108.797230][ T309] EXT4-fs (loop9): Block reservation details [ 108.937633][ T8905] loop9: detected capacity change from 0 to 256 [ 108.964486][ T8906] loop7: detected capacity change from 0 to 128 [ 108.973099][ T8906] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.977003][ T8906] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.085335][ T543] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.162962][ T8915] loop7: detected capacity change from 0 to 512 [ 109.187144][ T8915] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 109.187168][ T8915] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 109.223066][ T8915] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.1281: bg 0: block 104: invalid block bitmap [ 109.223100][ T8915] loop7: lost filesystem error report for type 5 error -117 [ 109.227839][ T8915] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 109.227857][ T8915] loop7: lost filesystem error report for type 5 error -117 [ 109.229889][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 109.229904][ C0] EXT4-fs (loop7): initial error at time 1700000051: ext4_validate_block_bitmap:436 [ 109.229923][ C0] EXT4-fs (loop7): last error at time 1700000051: ext4_mb_clear_bb:6678 [ 109.232552][ T8915] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.1281: invalid indirect mapped block 1 (level 1) [ 109.232573][ T8915] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.262453][ T8915] EXT4-fs (loop7): 1 truncate cleaned up [ 109.262851][ T8915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.293775][ T8920] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.440209][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.503366][ T8929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.521983][ T8929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.881149][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1293'. [ 110.059650][ T8965] loop1: detected capacity change from 0 to 512 [ 110.120012][ T8965] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.1298: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 110.120053][ T8965] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.124833][ T8965] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1298: couldn't read orphan inode 11 (err -117) [ 110.124859][ T8965] loop1: lost filesystem error report for type 5 error -117 [ 110.129169][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 110.129190][ C0] EXT4-fs (loop1): initial error at time 1700000052: ext4_ext_check_inode:521: inode 11 [ 110.129207][ C0] EXT4-fs (loop1): last error at time 1700000052: ext4_orphan_get:1409 [ 110.141170][ T8965] EXT4-fs (loop1): 1 truncate cleaned up [ 110.141586][ T8965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.296096][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.371519][ T8984] FAULT_INJECTION: forcing a failure. [ 110.371519][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 110.371541][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.0.1302 Tainted: G L syzkaller #0 PREEMPT [ 110.371554][ T8984] Tainted: [L]=SOFTLOCKUP [ 110.371558][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 110.371563][ T8984] Call trace: [ 110.371566][ T8984] show_stack+0x2c/0x3c (C) [ 110.371583][ T8984] __dump_stack+0x30/0x40 [ 110.371592][ T8984] dump_stack_lvl+0xd8/0x12c [ 110.371600][ T8984] dump_stack+0x1c/0x28 [ 110.371608][ T8984] should_fail_ex+0x3fc/0x570 [ 110.371622][ T8984] should_failslab+0xc4/0x120 [ 110.371631][ T8984] __kmalloc_cache_noprof+0x94/0x5fc [ 110.371641][ T8984] __v4l2_subdev_state_alloc+0x68/0x2f8 [ 110.371652][ T8984] subdev_open+0xa8/0x318 [ 110.371659][ T8984] v4l2_open+0x198/0x338 [ 110.371670][ T8984] chrdev_open+0x398/0x3e8 [ 110.371682][ T8984] do_dentry_open+0x5bc/0xfb4 [ 110.371694][ T8984] vfs_open_consume+0x54/0x2ec [ 110.371706][ T8984] path_openat+0x1098/0x1910 [ 110.371717][ T8984] do_file_open+0x1c8/0x2e8 [ 110.371728][ T8984] do_sys_openat2+0x114/0x1ec [ 110.371736][ T8984] do_sys_open+0xb0/0xe0 [ 110.371743][ T8984] __arm64_sys_openat+0xa8/0xc4 [ 110.371751][ T8984] invoke_syscall+0x98/0x244 [ 110.371759][ T8984] el0_svc_common+0xec/0x23c [ 110.371767][ T8984] do_el0_svc+0x4c/0x5c [ 110.371775][ T8984] el0_svc+0x60/0x1d8 [ 110.371786][ T8984] el0t_64_sync_handler+0x44/0x104 [ 110.371796][ T8984] el0t_64_sync+0x198/0x19c [ 110.579796][ T8994] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.754252][ T9001] syz.8.1310: attempt to access beyond end of device [ 110.754252][ T9001] loop8: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 110.754322][ T9001] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 324) [ 110.754333][ T9001] FAT-fs (loop8): Filesystem has been set read-only [ 110.754347][ T9001] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 324) [ 111.573532][ T9048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.614573][ T9048] EXT4-fs: Ignoring removed oldalloc option [ 111.614595][ T9048] EXT4-fs: Ignoring removed oldalloc option [ 111.614604][ T9048] EXT4-fs: Ignoring removed oldalloc option [ 111.627162][ T9048] EXT4-fs: Mount option(s) incompatible with ext3 [ 111.744834][ T9058] FAULT_INJECTION: forcing a failure. [ 111.744834][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.744859][ T9058] CPU: 0 UID: 0 PID: 9058 Comm: syz.7.1331 Tainted: G L syzkaller #0 PREEMPT [ 111.744872][ T9058] Tainted: [L]=SOFTLOCKUP [ 111.744876][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 111.744882][ T9058] Call trace: [ 111.744885][ T9058] show_stack+0x2c/0x3c (C) [ 111.744901][ T9058] __dump_stack+0x30/0x40 [ 111.744910][ T9058] dump_stack_lvl+0xd8/0x12c [ 111.744918][ T9058] dump_stack+0x1c/0x28 [ 111.744926][ T9058] should_fail_ex+0x3fc/0x570 [ 111.744940][ T9058] should_fail+0x14/0x24 [ 111.744952][ T9058] should_fail_usercopy+0x20/0x30 [ 111.744961][ T9058] __arm64_sys_openat2+0x19c/0x404 [ 111.744970][ T9058] invoke_syscall+0x98/0x244 [ 111.744978][ T9058] el0_svc_common+0xec/0x23c [ 111.744986][ T9058] do_el0_svc+0x4c/0x5c [ 111.744994][ T9058] el0_svc+0x60/0x1d8 [ 111.745005][ T9058] el0t_64_sync_handler+0x44/0x104 [ 111.745021][ T9058] el0t_64_sync+0x198/0x19c [ 112.220616][ T9092] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1340'. [ 112.416520][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 112.427162][ T9113] set_capacity_and_notify: 2 callbacks suppressed [ 112.427178][ T9113] loop8: detected capacity change from 0 to 512 [ 112.435672][ T9113] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 112.435690][ T9113] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 112.450561][ T9113] EXT4-fs (loop8): 1 truncate cleaned up [ 112.450978][ T9113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.515249][ T9113] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 13: comm syz.8.1346: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 112.520475][ T9113] EXT4-fs (loop8): Remounting filesystem read-only [ 112.525783][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.567736][ T9121] loop0: detected capacity change from 0 to 512 [ 112.604694][ T7186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.607770][ T9116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.942604][ T9132] syzkaller1: entered promiscuous mode [ 112.942621][ T9132] syzkaller1: entered allmulticast mode [ 112.946009][ T9135] loop1: detected capacity change from 0 to 128 [ 112.985365][ T9135] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.006627][ T9135] ext4 filesystem being mounted at /319/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.091655][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.140952][ T9145] FAULT_INJECTION: forcing a failure. [ 113.140952][ T9145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.140978][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.9.1360 Tainted: G L syzkaller #0 PREEMPT [ 113.140991][ T9145] Tainted: [L]=SOFTLOCKUP [ 113.140995][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 113.141001][ T9145] Call trace: [ 113.141004][ T9145] show_stack+0x2c/0x3c (C) [ 113.141025][ T9145] __dump_stack+0x30/0x40 [ 113.141034][ T9145] dump_stack_lvl+0xd8/0x12c [ 113.141043][ T9145] dump_stack+0x1c/0x28 [ 113.141051][ T9145] should_fail_ex+0x3fc/0x570 [ 113.141065][ T9145] should_fail_alloc_page+0xec/0x10c [ 113.141074][ T9145] prepare_alloc_pages+0x194/0x484 [ 113.141083][ T9145] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 113.141093][ T9145] alloc_pages_mpol+0x1fc/0x3d0 [ 113.141103][ T9145] alloc_frozen_pages_noprof+0xc4/0x10c [ 113.141113][ T9145] alloc_pages_noprof+0x30/0x148 [ 113.141123][ T9145] __pte_alloc+0x40/0x1c4 [ 113.141133][ T9145] walk_pgd_range+0xa8c/0x1850 [ 113.141145][ T9145] __walk_page_range+0x150/0x60c [ 113.141156][ T9145] walk_page_range_vma_unsafe+0x2c0/0x368 [ 113.141169][ T9145] madvise_vma_behavior+0x317c/0x3b3c [ 113.141181][ T9145] madvise_walk_vmas+0x934/0xbd0 [ 113.141193][ T9145] madvise_do_behavior+0x5f0/0x7c0 [ 113.141205][ T9145] do_madvise+0x28c/0x2f0 [ 113.141216][ T9145] __arm64_sys_madvise+0xac/0xc8 [ 113.141228][ T9145] invoke_syscall+0x98/0x244 [ 113.141237][ T9145] el0_svc_common+0xec/0x23c [ 113.141244][ T9145] do_el0_svc+0x4c/0x5c [ 113.141252][ T9145] el0_svc+0x60/0x1d8 [ 113.141262][ T9145] el0t_64_sync_handler+0x44/0x104 [ 113.141273][ T9145] el0t_64_sync+0x198/0x19c [ 113.255379][ T9150] tap0: tun_chr_ioctl cmd 1074025676 [ 113.255398][ T9150] tap0: owner set to 0 [ 113.312573][ T9159] FAULT_INJECTION: forcing a failure. [ 113.312573][ T9159] name failslab, interval 1, probability 0, space 0, times 0 [ 113.312600][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.7.1366 Tainted: G L syzkaller #0 PREEMPT [ 113.312613][ T9159] Tainted: [L]=SOFTLOCKUP [ 113.312617][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 113.312624][ T9159] Call trace: [ 113.312626][ T9159] show_stack+0x2c/0x3c (C) [ 113.312643][ T9159] __dump_stack+0x30/0x40 [ 113.312652][ T9159] dump_stack_lvl+0xd8/0x12c [ 113.312660][ T9159] dump_stack+0x1c/0x28 [ 113.312668][ T9159] should_fail_ex+0x3fc/0x570 [ 113.312682][ T9159] should_failslab+0xc4/0x120 [ 113.312690][ T9159] kmem_cache_alloc_noprof+0x94/0x5d4 [ 113.312699][ T9159] security_inode_alloc+0x40/0x304 [ 113.312709][ T9159] inode_init_always_gfp+0x704/0xb20 [ 113.312721][ T9159] alloc_inode+0x9c/0x198 [ 113.312733][ T9159] new_inode+0x20/0x50 [ 113.312744][ T9159] devpts_fill_super+0x278/0x4a8 [ 113.312757][ T9159] get_tree_super+0xb8/0x148 [ 113.312768][ T9159] get_tree_nodev+0x2c/0x3c [ 113.312778][ T9159] devpts_get_tree+0x28/0x38 [ 113.312790][ T9159] vfs_get_tree+0x90/0x28c [ 113.312800][ T9159] fc_mount+0x24/0xac [ 113.312811][ T9159] do_new_mount+0x2a4/0x538 [ 113.312826][ T9159] path_mount+0x5f0/0xa88 [ 113.312838][ T9159] do_mount+0xe8/0x148 [ 113.312850][ T9159] __arm64_sys_mount+0x33c/0x388 [ 113.312862][ T9159] invoke_syscall+0x98/0x244 [ 113.312871][ T9159] el0_svc_common+0xec/0x23c [ 113.312879][ T9159] do_el0_svc+0x4c/0x5c [ 113.312886][ T9159] el0_svc+0x60/0x1d8 [ 113.312897][ T9159] el0t_64_sync_handler+0x44/0x104 [ 113.312907][ T9159] el0t_64_sync+0x198/0x19c [ 113.313994][ T9159] devpts: Unable to alloc inode for ptmx node [ 113.475909][ T9166] loop7: detected capacity change from 0 to 4096 [ 113.560473][ T9166] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.599328][ T9166] EXT4-fs (loop7): shut down requested (0) [ 113.681767][ T9179] loop8: detected capacity change from 0 to 1024 [ 113.706501][ T9179] EXT4-fs: Ignoring removed bh option [ 113.714119][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.718908][ T9179] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 113.761230][ T9179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.980977][ T7186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.073873][ T9203] FAULT_INJECTION: forcing a failure. [ 114.073873][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 114.073898][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.7.1382 Tainted: G L syzkaller #0 PREEMPT [ 114.073912][ T9203] Tainted: [L]=SOFTLOCKUP [ 114.073916][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 114.073921][ T9203] Call trace: [ 114.073924][ T9203] show_stack+0x2c/0x3c (C) [ 114.073941][ T9203] __dump_stack+0x30/0x40 [ 114.073950][ T9203] dump_stack_lvl+0xd8/0x12c [ 114.073958][ T9203] dump_stack+0x1c/0x28 [ 114.073966][ T9203] should_fail_ex+0x3fc/0x570 [ 114.073979][ T9203] should_failslab+0xc4/0x120 [ 114.073989][ T9203] kmem_cache_alloc_noprof+0x94/0x5d4 [ 114.073998][ T9203] do_getname+0x48/0x234 [ 114.074008][ T9203] __arm64_sys_unlinkat+0xa8/0x108 [ 114.074025][ T9203] invoke_syscall+0x98/0x244 [ 114.074034][ T9203] el0_svc_common+0xec/0x23c [ 114.074042][ T9203] do_el0_svc+0x4c/0x5c [ 114.074050][ T9203] el0_svc+0x60/0x1d8 [ 114.074061][ T9203] el0t_64_sync_handler+0x44/0x104 [ 114.074071][ T9203] el0t_64_sync+0x198/0x19c [ 114.373944][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1388'. [ 114.453731][ T9235] FAULT_INJECTION: forcing a failure. [ 114.453731][ T9235] name failslab, interval 1, probability 0, space 0, times 0 [ 114.453753][ T9235] CPU: 0 UID: 0 PID: 9235 Comm: syz.0.1390 Tainted: G L syzkaller #0 PREEMPT [ 114.453766][ T9235] Tainted: [L]=SOFTLOCKUP [ 114.453769][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 114.453775][ T9235] Call trace: [ 114.453778][ T9235] show_stack+0x2c/0x3c (C) [ 114.453794][ T9235] __dump_stack+0x30/0x40 [ 114.453803][ T9235] dump_stack_lvl+0xd8/0x12c [ 114.453811][ T9235] dump_stack+0x1c/0x28 [ 114.453818][ T9235] should_fail_ex+0x3fc/0x570 [ 114.453832][ T9235] should_failslab+0xc4/0x120 [ 114.453841][ T9235] kmem_cache_alloc_noprof+0x94/0x5d4 [ 114.453851][ T9235] mas_alloc_nodes+0x234/0x2d8 [ 114.453860][ T9235] mas_preallocate+0x43c/0x6e8 [ 114.453868][ T9235] __split_vma+0x298/0x85c [ 114.453879][ T9235] vma_modify+0x9cc/0x1d78 [ 114.453890][ T9235] vma_modify_name+0x22c/0x2d4 [ 114.453902][ T9235] madvise_vma_behavior+0xfe0/0x3b3c [ 114.453914][ T9235] madvise_walk_vmas+0x4d0/0xbd0 [ 114.453926][ T9235] set_anon_vma_name+0x37c/0x3dc [ 114.453938][ T9235] __arm64_sys_prctl+0xe5c/0x13c0 [ 114.453950][ T9235] invoke_syscall+0x98/0x244 [ 114.453958][ T9235] el0_svc_common+0xec/0x23c [ 114.453966][ T9235] do_el0_svc+0x4c/0x5c [ 114.453974][ T9235] el0_svc+0x60/0x1d8 [ 114.453984][ T9235] el0t_64_sync_handler+0x44/0x104 [ 114.453994][ T9235] el0t_64_sync+0x198/0x19c [ 114.524393][ T1107] kernel read not supported for file /video7 (pid: 1107 comm: kworker/0:2) [ 114.574658][ T9234] team0: Port device team_slave_0 removed [ 114.905103][ T9257] loop9: detected capacity change from 0 to 8192 [ 114.991233][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991233][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991334][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991703][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991703][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991716][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991736][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991736][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991747][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991765][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991765][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991775][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991792][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991792][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991802][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991819][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991819][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991829][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991845][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991845][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991855][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991871][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991871][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991882][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991898][ T9257] syz.9.1394: attempt to access beyond end of device [ 114.991898][ T9257] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.991908][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 114.991926][ T9257] Buffer I/O error on dev loop9, logical block 57847, async page read [ 115.151480][ T9282] gadgetfs: bound to dummy_udc driver [ 115.185854][ T9285] loop0: detected capacity change from 0 to 512 [ 115.206543][ T9285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.206605][ T9285] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.243463][ T9285] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 115.253804][ T9285] EXT4-fs (loop0): Remounting filesystem read-only [ 115.288143][ T7874] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.400168][ T1107] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 115.400918][ C0] gadgetfs: connected [ 115.401610][ T1107] gadgetfs: disconnected [ 115.426550][ T9292] loop8: detected capacity change from 0 to 256 [ 115.544020][ T9267] overlayfs: statfs failed on './file0' [ 115.565829][ T9298] .: renamed from bond0 (while UP) [ 116.005000][ T9318] netlink: 'syz.7.1416': attribute type 1 has an invalid length. [ 116.066690][ T9318] bond1: entered promiscuous mode [ 116.066726][ T9318] bond1: entered allmulticast mode [ 116.066921][ T9318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.459537][ T9348] tmpfs: Using encoding : utf8-12.1.0 [ 116.706236][ T9368] FAULT_INJECTION: forcing a failure. [ 116.706236][ T9368] name failslab, interval 1, probability 0, space 0, times 0 [ 116.706263][ T9368] CPU: 0 UID: 0 PID: 9368 Comm: syz.0.1437 Tainted: G L syzkaller #0 PREEMPT [ 116.706280][ T9368] Tainted: [L]=SOFTLOCKUP [ 116.706284][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 116.706289][ T9368] Call trace: [ 116.706293][ T9368] show_stack+0x2c/0x3c (C) [ 116.706309][ T9368] __dump_stack+0x30/0x40 [ 116.706318][ T9368] dump_stack_lvl+0xd8/0x12c [ 116.706326][ T9368] dump_stack+0x1c/0x28 [ 116.706333][ T9368] should_fail_ex+0x3fc/0x570 [ 116.706347][ T9368] should_failslab+0xc4/0x120 [ 116.706356][ T9368] __kmalloc_cache_noprof+0x94/0x5fc [ 116.706365][ T9368] newseg+0x26c/0x904 [ 116.706376][ T9368] ipcget+0x900/0xc20 [ 116.706383][ T9368] __arm64_sys_shmget+0x128/0x17c [ 116.706394][ T9368] invoke_syscall+0x98/0x244 [ 116.706402][ T9368] el0_svc_common+0xec/0x23c [ 116.706410][ T9368] do_el0_svc+0x4c/0x5c [ 116.706418][ T9368] el0_svc+0x60/0x1d8 [ 116.706428][ T9368] el0t_64_sync_handler+0x44/0x104 [ 116.706438][ T9368] el0t_64_sync+0x198/0x19c [ 117.114907][ T9396] FAULT_INJECTION: forcing a failure. [ 117.114907][ T9396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.114930][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: syz.0.1451 Tainted: G L syzkaller #0 PREEMPT [ 117.114944][ T9396] Tainted: [L]=SOFTLOCKUP [ 117.114948][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 117.114954][ T9396] Call trace: [ 117.114957][ T9396] show_stack+0x2c/0x3c (C) [ 117.114974][ T9396] __dump_stack+0x30/0x40 [ 117.114983][ T9396] dump_stack_lvl+0xd8/0x12c [ 117.114991][ T9396] dump_stack+0x1c/0x28 [ 117.114998][ T9396] should_fail_ex+0x3fc/0x570 [ 117.115018][ T9396] should_fail+0x14/0x24 [ 117.115030][ T9396] should_fail_usercopy+0x20/0x30 [ 117.115039][ T9396] _inline_copy_from_user+0x3c/0x174 [ 117.115051][ T9396] __sys_bpf+0x1b4/0x840 [ 117.115061][ T9396] __arm64_sys_bpf+0xd0/0xec [ 117.115071][ T9396] invoke_syscall+0x98/0x244 [ 117.115080][ T9396] el0_svc_common+0xec/0x23c [ 117.115088][ T9396] do_el0_svc+0x4c/0x5c [ 117.115095][ T9396] el0_svc+0x60/0x1d8 [ 117.115106][ T9396] el0t_64_sync_handler+0x44/0x104 [ 117.115116][ T9396] el0t_64_sync+0x198/0x19c [ 117.258705][ T9407] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1455'. [ 117.260091][ T9408] FAULT_INJECTION: forcing a failure. [ 117.260091][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 117.260111][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.1.1453 Tainted: G L syzkaller #0 PREEMPT [ 117.260124][ T9408] Tainted: [L]=SOFTLOCKUP [ 117.260128][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 117.260133][ T9408] Call trace: [ 117.260137][ T9408] show_stack+0x2c/0x3c (C) [ 117.260153][ T9408] __dump_stack+0x30/0x40 [ 117.260163][ T9408] dump_stack_lvl+0xd8/0x12c [ 117.260170][ T9408] dump_stack+0x1c/0x28 [ 117.260178][ T9408] should_fail_ex+0x3fc/0x570 [ 117.260192][ T9408] should_failslab+0xc4/0x120 [ 117.260201][ T9408] kmem_cache_alloc_noprof+0x94/0x5d4 [ 117.260211][ T9408] security_inode_alloc+0x40/0x304 [ 117.260220][ T9408] inode_init_always_gfp+0x704/0xb20 [ 117.260232][ T9408] alloc_inode+0x9c/0x198 [ 117.260244][ T9408] new_inode+0x20/0x50 [ 117.260256][ T9408] shmem_get_inode+0xac/0x7d8 [ 117.260268][ T9408] shmem_mknod+0x140/0x2f8 [ 117.260276][ T9408] shmem_mkdir+0x40/0x84 [ 117.260283][ T9408] vfs_mkdir+0x2ec/0x4cc [ 117.260294][ T9408] filename_mkdirat+0x228/0x420 [ 117.260306][ T9408] __arm64_sys_mkdirat+0x9c/0xc0 [ 117.260317][ T9408] invoke_syscall+0x98/0x244 [ 117.260325][ T9408] el0_svc_common+0xec/0x23c [ 117.260333][ T9408] do_el0_svc+0x4c/0x5c [ 117.260341][ T9408] el0_svc+0x60/0x1d8 [ 117.260351][ T9408] el0t_64_sync_handler+0x44/0x104 [ 117.260361][ T9408] el0t_64_sync+0x198/0x19c [ 117.355043][ T30] audit: type=1326 audit(1700000059.440:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9402 comm="syz.9.1454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4579728 code=0x0 [ 127.048912][ T1619] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.060712][ T1619] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.378282][ C0] sched: DL replenish lagged too much [ 150.890555][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 32s! [ 150.890593][ C0] Showing busy workqueues and worker pools: [ 150.890598][ C0] workqueue events: flags=0x100