last executing test programs: 1m41.128765942s ago: executing program 3 (id=587): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000006120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 1m41.066154212s ago: executing program 3 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = dup3(r3, r2, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000000c0)=0x2, &(0x7f00000001c0)=0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c80), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002780)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) tkill(r0, 0x3e) ppoll(0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) writev(0xffffffffffffffff, &(0x7f0000009640)=[{&(0x7f0000007640)="d5", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x1, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1m37.997158828s ago: executing program 3 (id=595): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe213}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x5, 0x3c, &(0x7f0000000400)=""/60, 0x40f00, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x2, 0xd, 0xa}, {0x1, 0x3, 0x10, 0x7}, {0x2, 0x1, 0x8, 0x7}, {0x0, 0x2, 0x8, 0x9}, {0x2, 0x4, 0xf, 0x6}], 0x10, 0x359}, 0x94) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005500)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10004}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x6d255a6a1175572c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0xa, '\x00', 0x0, r1, 0x4, 0x4, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0x9, &(0x7f00000006c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r6}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r9, r7, 0x12, 0x2}, 0x10) 1m37.714097018s ago: executing program 3 (id=599): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (rerun: 64) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="757365722e7266646e6fe4af12b65a03cd1bb7133e9fd2188d924b1a96439cbaf3a829a6d636c9785fd3222a4f744b543347984dde9e510cf588cd71e82815f2dce7607f407e0f6204bcd24825c13a7b5556b4d3ac9e"], 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) (async, rerun: 64) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) (rerun: 64) 1m37.508676605s ago: executing program 3 (id=603): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc010}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x8000}}], 0x2, 0x0) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") 1m35.983699873s ago: executing program 3 (id=626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@delchain={0x58, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0x1}, {0xffe0, 0xf}, {0x2, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xada5}, @TCA_RATE={0x6, 0x5, {0x78, 0xf4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r5 = dup(r0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x10000a0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100), 0x1000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) fstat(r7, 0x0) write$FUSE_DIRENT(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="f6ffffffd9ffffff", @ANYRES64=0x0], 0x10) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x4c8800, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1m35.940047955s ago: executing program 32 (id=626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@delchain={0x58, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0x1}, {0xffe0, 0xf}, {0x2, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xada5}, @TCA_RATE={0x6, 0x5, {0x78, 0xf4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r5 = dup(r0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x10000a0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100), 0x1000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) fstat(r7, 0x0) write$FUSE_DIRENT(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="f6ffffffd9ffffff", @ANYRES64=0x0], 0x10) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x4c8800, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5.62845863s ago: executing program 0 (id=1634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 5.606815398s ago: executing program 0 (id=1635): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r5, {0xd, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000002ac0)=""/4112, 0x1010}, {&(0x7f0000006d40)=""/211, 0xd3}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000002dac86c1dbb049380000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70200000000000085000000250000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.040995488s ago: executing program 0 (id=1644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.872487693s ago: executing program 1 (id=1652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x400, 0x12) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000000c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.861654971s ago: executing program 1 (id=1653): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1001) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) 2.808815733s ago: executing program 1 (id=1654): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) ioctl$OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f0000000080)=0x2) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0xfffffff8, 0xfffffffc}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x925f}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x20, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000140)=0x286, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r9, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="a9", 0x5e0}], 0x1}, 0x20008110) 2.414231039s ago: executing program 0 (id=1656): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$kcm(0xa, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.356318935s ago: executing program 0 (id=1658): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = getpid() syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000037c0)=[{{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x8000}}], 0x1, 0x0) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") 2.140842604s ago: executing program 5 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x8054) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2.059647995s ago: executing program 5 (id=1663): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$invalidate(0x15, r1) (async) keyctl$invalidate(0x15, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0x44, 0x59}, 0x0, &(0x7f0000000140)="e02ba0a2f79f118f94cd17e6bdb9eea78bd78d7b31d558e44a11e119b267d524592e34fbddecf37780d60138e1bd9fc2370d3cdd6e4fc8185819d7d13669dd0d28cb8005", &(0x7f00000001c0)=""/89) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="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", 0x1000, r1) (async) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="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", 0x1000, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setgroups(0x1, &(0x7f0000001300)=[r5]) r6 = add_key$user(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x3}, &(0x7f00000013c0)="bf718f3acf19d4a204ddc42e9a9a35190cda9909a21ca497ffbdcf523deb2e1c6c8407d2b8a797661cd9d3f9dc2d54af435094412e9689aaabe58f4c6d4f3c7595af58e26e96c7348ae04500ae04ce169e09cdefc410fcee1cc25afde1c745b88f20969cf2833f18d5ee15f54bdcd4143d04a8216334b7729f8e8a7ae3d6f540bc49be0104da8c00b27a12b004bca4c519eb18b5ecd5cb516c4d4c04f7346f0123eef6e40192c438eda26f9c1a5016d5f3d18745401d273c8d9078ae2574b840bf88189cfa8cf4c81196b6b0391a04e9971fcd05926e997bfba2b16eea09216818824a3d5a44e5d90b65b5a2bc2bfb9cf6094dbb", 0xf4, 0xffffffffffffffff) add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r7 = add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f00000014c0)='pkcs7_test\x00', &(0x7f0000001500)={'syz', 0x0}, r7) (async) keyctl$search(0xa, r6, &(0x7f00000014c0)='pkcs7_test\x00', &(0x7f0000001500)={'syz', 0x0}, r7) newfstatat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r10 = add_key$user(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x1}, &(0x7f0000001700)="406edfdbafca2c75f043014d7009a40081ca7cdfe6d0f60d3e1a21c4a9c13e6254d35952cc468b8463dd6050867b24e04a2588a356cab3da7de253565e5c151be42bf280e55a6030442c5d3c4dc997a8ac1001c8fca0b88e2b929e917bb3b1fa6c78b71474a89b4254f7fdb9b391902a7c8fc30d610e955c635a9b467a3929de2bda1697d049f40b466bd4cd8bd1f25a51624e5cb3dd427ccc74", 0x9a, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r10, &(0x7f0000002940)=[{&(0x7f00000017c0)="6a91ef4502a1a89ded38105053b93c6dc9d81febac9e792706c11a45616da117a1f26f58376147be13e3432867a80b645b38874c9e697d403ba6b992e06d1234f7380ac61df9ab4b195d35fbd072334efa0983c3c572d41bfa3b707853b6412e7025bedfdd9e06", 0x67}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="e63ee368ed94b6545898b5e81eb6c3baec42172c3ec81ecbbf0a75bfed5e5b2ff4e03ee8cd4ce19768a92dad37474278614e86872ce4019ef489c34a7214f5f9d6b8ae7adb6c560306a1931d59a39d779038f378f2fbc6adc70145feb5b823f4f45f8716873596d394a90626f379cbbec71ec0c998ed10f72e420ed8974029a822d252a843d8b0bc0680dc21ea763e3a7662c425597f320f505cdea31b3253fa983d36e713a24b37068aa67649edd2d0e0e4332aba8638850fd21ecba09bcc64a96c3e88c8e9802b", 0xc8}], 0x3, r1) getgroups(0x1, &(0x7f0000002980)=[r9]) newfstatat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0), 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_xen(&(0x7f00000029c0), &(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40), 0x80000, &(0x7f0000002b40)={'trans=xen,', {[{@noextend}, {@access_user}, {@cache_loose}, {@fscache}, {@noxattr}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_lt={'uid<', r8}}, {@subj_role={'subj_role', 0x3d, 'pkcs7_test\x00'}}, {@euid_lt={'euid<', r4}}, {@dont_measure}, {@fowner_lt={'fowner<', r4}}, {@fowner_gt={'fowner>', r11}}]}}) (async) mount$9p_xen(&(0x7f00000029c0), &(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40), 0x80000, &(0x7f0000002b40)={'trans=xen,', {[{@noextend}, {@access_user}, {@cache_loose}, {@fscache}, {@noxattr}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_lt={'uid<', r8}}, {@subj_role={'subj_role', 0x3d, 'pkcs7_test\x00'}}, {@euid_lt={'euid<', r4}}, {@dont_measure}, {@fowner_lt={'fowner<', r4}}, {@fowner_gt={'fowner>', r11}}]}}) keyctl$get_persistent(0x16, r8, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000002c40)='uid<', &(0x7f0000002c80)) symlinkat(&(0x7f0000002cc0)='./file0\x00', r3, &(0x7f0000002d00)='./file0\x00') (async) symlinkat(&(0x7f0000002cc0)='./file0\x00', r3, &(0x7f0000002d00)='./file0\x00') lsetxattr$security_ima(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80), &(0x7f0000002dc0)=@ng={0x4, 0x5, "ca6cead7ccb05ddce91910e0e935"}, 0x10, 0x3) (async) lsetxattr$security_ima(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80), &(0x7f0000002dc0)=@ng={0x4, 0x5, "ca6cead7ccb05ddce91910e0e935"}, 0x10, 0x3) add_key$fscrypt_v1(&(0x7f0000002e00), &(0x7f0000002e40)={'fscrypt:', @desc3}, &(0x7f0000002e80)={0x0, "04e59e89ca0b4e3f7593b67518269d37ca9483e0c04fc4fe041901b6ce7752acd01560bb986fd264bd2958501384c55cf64bcd295db508546ff444f1d0a2348b", 0x32}, 0x48, r7) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000002f00)={{0x1, 0x1, 0x18, r3, {0x1, 0x6}}, './file0\x00'}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002f40)={r6, 0x1000, 0xef}, &(0x7f0000002f80)={'enc=', 'pkcs1', ' hash=', {'sha224-avx\x00'}}, &(0x7f0000003000)="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", &(0x7f0000004000)="81402c25c3577a788ace771edb31ab7911e91d9f2d71ade2dcbcaaad1861ebadd630aa754eb96a977c14a3ea43b9ff48c39509ad0bfaa2404dbcd47ee3a1776b5ce1532b868a6529acf88622b5ebc0a0ea54760f615c8917c4a15d0be8f3ffda211b5802085302a8049c6e7b853dd528ae0f23921ca6f15321ac15b1f03194f93857baf08645e37e002ad3a9ecad15f47506ea5a785cd4e6f6aed696c796e1d40e4897ab216295c8519d93b5bc122f5eb40084346c889e87840207506e1a81a9be79ccd2454f73cbc34a8567f31ce09d57a625297c5e2a06e08f9a6a9d5f2b5a3e019f5923162a9db6c1bbaf5c91c9") (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002f40)={r6, 0x1000, 0xef}, &(0x7f0000002f80)={'enc=', 'pkcs1', ' hash=', {'sha224-avx\x00'}}, &(0x7f0000003000)="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", &(0x7f0000004000)="81402c25c3577a788ace771edb31ab7911e91d9f2d71ade2dcbcaaad1861ebadd630aa754eb96a977c14a3ea43b9ff48c39509ad0bfaa2404dbcd47ee3a1776b5ce1532b868a6529acf88622b5ebc0a0ea54760f615c8917c4a15d0be8f3ffda211b5802085302a8049c6e7b853dd528ae0f23921ca6f15321ac15b1f03194f93857baf08645e37e002ad3a9ecad15f47506ea5a785cd4e6f6aed696c796e1d40e4897ab216295c8519d93b5bc122f5eb40084346c889e87840207506e1a81a9be79ccd2454f73cbc34a8567f31ce09d57a625297c5e2a06e08f9a6a9d5f2b5a3e019f5923162a9db6c1bbaf5c91c9") ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000004100)={0x23f, 0x3, {0xffffffffffffffff}, {r8}, 0x87c6, 0x8}) sched_setscheduler(r14, 0x0, &(0x7f0000004140)=0x3) socket(0x29, 0x1, 0x0) keyctl$search(0xa, r2, &(0x7f0000004180)='.dead\x00', &(0x7f00000041c0)={'syz', 0x2}, r1) setresgid(r12, 0xee01, r9) ioctl$UI_DEV_CREATE(r13, 0x5501) ioctl$DRM_IOCTL_MODE_ADDFB2(r13, 0xc06864b8, &(0x7f0000004380)={0x0, 0x3, 0x8, 0x7fffffff, 0x3, [], [0x8cb, 0x80, 0x8000, 0x4], [0x1, 0x10001, 0x2, 0x8], [0x8, 0x7d1, 0x8]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r13, 0xc06864b8, &(0x7f0000004380)={0x0, 0x3, 0x8, 0x7fffffff, 0x3, [], [0x8cb, 0x80, 0x8000, 0x4], [0x1, 0x10001, 0x2, 0x8], [0x8, 0x7d1, 0x8]}) 1.966301362s ago: executing program 5 (id=1664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0}, 0x50) 1.676784551s ago: executing program 5 (id=1665): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001600)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x0, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {0x80}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x6}, {0xfffc}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfd}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x80, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {0x5}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) (async) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = memfd_secret(0x80000) timerfd_gettime(r2, 0x0) (async) mremap(&(0x7f0000a47000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.574667663s ago: executing program 5 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1d0, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1a0, 0x2, {{0x3, 0x8000003, 0x6361, 0x6, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x40, 0x2, "8146f6a6ee1c8d62136af8dc8394e9efc01623f47305e2aa035255d7b90f90d79e77f7f06104fd9dcf02f3442b4140c1f91503518ed64051fe9d58db"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x4}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0xc8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfff, 0x4, 0x4, 0xffffffff, 0x1e87}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0x6, 0x8, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7f, 0x7, 0x9, 0x307f3c25}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd4, 0x5, 0x6, 0x401, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x67, 0x0, 0x6, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0xffff0000, 0xffff8000, 0x817}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x100, 0x3, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x0, 0x40, 0x6}}]}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x2, 0x81, 0x9, 0x7188}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1ff, 0x1e2e, 0x32e, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x6, 0xff, 0x10000}}]}]}}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.514293702s ago: executing program 0 (id=1668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c65705f69643d000100", @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x105810, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) setresuid(0xee01, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRESDEC=0x0]) r3 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_READ_MULTISHOT={0x31, 0x34, 0x0, @fd, 0x3, 0x0, 0x0, 0x2, 0x0, {0x1, 0x0, 0x9, '\x00', 0x0}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x1015000, 0x800, 0xffffffff, 0x1}, 0x20) write$evdev(r7, &(0x7f0000000440)=[{{0x0, 0x2710}, 0x1f, 0x6, 0x7c25}, {{}, 0x14, 0x2, 0x4}, {{0x77359400}, 0x3, 0x7f80, 0x3ff}], 0x48) read$FUSE(r2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r9, r9, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x200064, &(0x7f00000006c0)=ANY=[@ANYBLOB='huge=advise,gid=', @ANYRESHEX=0x0, @ANYBLOB=',grpquota_block_hardlimit=m5,huge=within_size,defcontext=root,func=FILE_CHECK,context=user_u,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c6170707261e7e1aca392333708194202b8c86244a25f6809d33bd929c0b955926c3e2b22abf09f2c8146837f07db860bb9da335c0a4916e0d8a015849bb948e1cd79e9cbc6e0573b2edda9b60b9cee641ab59dfebea586d83ff31d65b3b578b00aebb2f1c3209ee5ebe0ab811c92bc3d81a0a7fc4f1ab12fe15793addcd438dd3209c02931fddf8bf1fc8b73c8931b329c0129c8bc83a615b6"]) close(r10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x8, 0x10, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff1, 0x4}, {0xfff3, 0xf}, {0xffe0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) 1.42887451s ago: executing program 2 (id=1670): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000040)=@raw=[@exit, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x101, 0xf9, &(0x7f00000000c0)=""/249, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x3, 0x7f, 0x7fff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x5, 0x1, 0x10, 0x5}, {0x1, 0x1, 0x2, 0xa}, {0x7, 0x1, 0x2}, {0x5, 0x4, 0x9, 0x8}, {0x4, 0x2, 0x8}, {0x2, 0x2, 0x5, 0x6}], 0x10, 0x2e}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x40}, [@jmp={0x5, 0x1, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.428380228s ago: executing program 2 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)) sendmmsg$inet(r1, &(0x7f0000002480)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000280)="8753bf932c61573b3c337d6344b0c0485ab9cdf171bc0e13b3e590d6611402469b046a76e1563156dd7cbc608d1c56bc743d1cc18d944b4fafc7eb5658bc2bb6a6edd0822708e677a6a609d50920196bdded6152255ffb5be825a9e2d715ee8f096ccf73482e7af3ba73ee5da5e9979846c19949205acf", 0x77}, {&(0x7f0000000300)="8d9cf0d89e55009b56d0b325ed70244d5c3380469c8fa332a0d54f3e33425ca3414d1b0ae130b9e22dce19f5115c261a19c108144b892a611bf41a9effcd1596aa3f31fe8ff0276c9cf23585f68f760e26905c01d70727554b617dff0c388a7650865506111e1cad424f32ced64d20d00c32fde733c33eef62499dabd265cbbf100d79f7499247466c020e98b5d3cfb49bb5ba74f4fe79e4aa26cedc6c80584599d73ca16ae53d466b63f2b07ffe6835410a8ca2749f077c76770aade369f48558e4955d24bb7644f709a4d7", 0xcc}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x893}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}}, {{&(0x7f0000000700)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000800)="5879c6db34bf492ce8a57c0282bc3788c6c62f3e17b35f60f232c92762bde970bccc", 0x22}, {&(0x7f0000000900)="ca42dee2364ab2f8d07a371340492fadc5a3febf853e25826678a607e887f7761d5f53b8d9bb6ee7d0a37a1524cc7bc17033a9ae489815563cee919031c38480055df01380743cce88a940ae4e59fda128bfd463fb370c6d167ba281f4f19cdb419a270d07f0b1b9a90bcf1f103145b5aefedb5bb2729ecd3688f238e860857c8f99f6fe226f64fb1173ca255ca3ea584dd35198d2f47908334b09", 0x9b}, {&(0x7f00000009c0)="a0c602b4682976e77a5e1e489902331740287143e2a220c8862d2f0bbe30691a9090ad79631e1b8a51c1e1ba851e64cefe60745606a05105120535c8699415baa2978c0b538c798831601548c5c0edccf21b08db87d35cc28fe160e6425665a4209759ded0a496ebe76d2094c1fe94bc0174b843348555f5ff8b7a832ad11804d64dca2c4d34ffcfacf0f9a3c60dfcd5aa9882ef7065b11496f3a7013a5fa5daa861d7204ebce4201afc88ef7482c8bb90e27b73e0f561f3d4a06efc2c2756141ea3a79b3f7af70c9ccf434c1c2b01782ee571e228e09362eaa9f23a70bfd175b32c387902f6d21f218ddd87ff", 0xed}, {&(0x7f0000000ac0)}], 0x4}}, {{&(0x7f0000000d00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d40)="1709a13d034e34a02ae7dc5243250e13e682df93944660ac6fe4db339ccd4185a2f5b82f656b636e1a6e190dc9837468948603e3a60ee2e4f05e51f200b7274d53742185143095d08f6eb9f9610bbb85d342c7351cff532511e8923bae00e468c7030763dda6a9559e8264a2fffcdd4c1c877ba71f2e5e01bd157f24d86ce76871f995fb813f4a7151c5b6ae3e6032cec1aec14fa0c5275d7103e2c9188261063becef45b217e1d73203985b36d116c7dc83fa814bddb7156a87cb81c1718ef179e0305468207d7b715b270f7be2d752dc7bc0ac96418727a8597452e5c702044fa4125d1ca90850ea659ea19e02", 0xee}], 0x1, &(0x7f0000000ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}], 0x60}}, {{&(0x7f0000000f40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002400)}}], 0x4, 0x4004050) 1.190242985s ago: executing program 4 (id=1674): socket$kcm(0x2, 0xa, 0x2) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x81, 0x4, 0x0, {0x5, 0x4, 0x0, 0x38, 0x8000, 0x68, 0x3, 0x2, 0x0, 0x3, @multicast1, @multicast1}}}}}}, 0x0) 1.188661848s ago: executing program 4 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x12, &(0x7f0000000200)={@remote, @random="6a2ddcf6177a", @val={@void, {0x806, 0x1, 0x1, 0x1}}, {@generic={0x6006}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101040, 0x836d9fb164f927b3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x451, 0x8001008, r1, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1.110682816s ago: executing program 4 (id=1676): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x17c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}]}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x3, 0xfffff03c}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x10180, 0x0) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xec, &(0x7f0000001d40)=""/236, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x10, r4}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@deltfilter={0x64, 0x2d, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {0x6, 0x4}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FD={0x8, 0x6, r9}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000180)={0x0, @generic={0x28, "152692029dcaa515cbc818a9fa97"}, @sco={0x1f, @none}, @tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x3}}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='hsr0\x00', 0x1d3, 0xfffffffffffffffc, 0x1}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.109813481s ago: executing program 1 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./bus\x00', 0x4, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f00000020c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x800000002, 0x800000000000208, 0x8000000, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000003, 0x6]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) 898.067234ms ago: executing program 1 (id=1678): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = getpid() syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000037c0)=[{{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x8000}}], 0x1, 0x0) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") 573.321578ms ago: executing program 2 (id=1679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x8, 0x18, [0x2, 0x2, 0x9, 0xe56], &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003080101360000000000000000000000060002480000000005000300ff000000040004"], 0x28}}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, &(0x7f0000000200)) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x6180, r0}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000020101030000000000000000000000000600124000040000140005800f0001006e657462696f732d6e7300001400198008000100103362ebb95652042700000008000740000000091c0019800800020000000000080001008800000008000180"], 0xa8}}, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691122000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) syz_emit_ethernet(0xe7, &(0x7f0000000500)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@llc={0x4, {@snap={0xab, 0x0, '2\"', "051717", 0x884c, "fea718f7c1c7c91e776fc4eb6cb932d8f277296f22ba66c030ca61875606049026ec1b13380ca3ca9ddde4b12027ef51e36029f98cf81eeae1195ceb48f4f1cce50a81e72abc252403451afb7d3ef91b715ed01700748e977cf26f374cedc9d93abc1d689bbbfd5a19516cd48efd181fe3c505643bed131e61cc6ae60c151652cbe3318ec2a2fc7d0abff44e8a34d0feb81e6d52d8e787b50f9e43c368676027cf4fec6157d6d6fd8066a58e01222f6bb66b6c14a1c64c37ec229a3ead17860736726fe57cc7c6bd8cf7c28ead908795"}}}}}, &(0x7f0000000600)={0x0, 0x4, [0x512, 0xebb, 0x836, 0xf99]}) 476.752032ms ago: executing program 2 (id=1680): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$kcm(0xa, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x2, 0x80002, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 467.642813ms ago: executing program 2 (id=1681): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket(0x2b, 0x1, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000, 0xfffffffffffffffb}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000000), 0x0) (fail_nth: 2) 388.062624ms ago: executing program 2 (id=1682): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) io_setup(0x8, &(0x7f0000004200)=0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x30, 0x2, "", [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x183, 0x6, 0x1, {0x22, 0x5b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x5, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x81, 0x7f}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x80, 0x6, 0xb6, 0xff, 0xf4}, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x430}}, {0xd9, &(0x7f0000000480)=@string={0xd9, 0x3, "fca65ac11538a898ca4e1d6ba5dd54f97189af99e11de05fe205169242e28a88a1e5e1bc446e6e4fd7786ade0a39caa5aa3ab26085b9b7eec8510620de8a53cd3255c76190a4ed84524807161e3c9230e075610787b95b0c1b155b86c4af13ca0c7314c818395c02b5746a9f90a36becc5261acf153a8a18e7dcb28c43931a96c8028f6b1c66e8d7b988d72c35be9f203dee7ee186430c5d011be9b3f99c8c51ca6e6ceed2d20d67427a1dce62c3c3dc22616e64e3a23fb0976856c9cdf109eaf2040e8d6fa38efc2aa51fe02141de2de66280f39a1a88"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc1a}}, {0x8e, &(0x7f00000005c0)=@string={0x8e, 0x3, "35a2e0402693ff8ae93513273dac4aa812be8aa87db6d1136ac2ada13964a624a978912080b89e096b4a260909d365af56df04360cc8c5f2bdbfa3bcbd7d46b780f6c22cefda391ba0bbaafa36223d34f75ef4117586b095975ae4f681c17179d8eef3fb00ef28fab362464b443d7e7eb3435e10ed7181cef06ac75a8ebe0594f974403643f2e2df961981dd"}}, {0xd1, &(0x7f0000000680)=@string={0xd1, 0x3, "f575eb038106eeb3b71e59f8f24251cd1d1f0ece15cb45ded7d6e763030772aeff96d2b5a4d6cf2bb5df5c0278fd3b1c25f5d355a198028144b2273843cd438f20ed58fd2ce91de9808bf78074ee9270af1c94970caeecf5a58eb1f46d63803136487dba9697324957adc03c815410e3b7be07f056c78380dee64063d282314e40188e48d8a441517efe962023f1cc78b0b923cf1cee0751fa45c2a8d129ed97c9df3ccc00cb7890a5f18ee3a6da26084118f64ef908aa3f15cb57ae62a18ca584d56fc26fe04d5d8daca7ce1b0c8d"}}]}) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r1 = socket(0x23, 0x80805, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x84bf95c0ba3f1090, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 76.386021ms ago: executing program 4 (id=1683): mount$9p_virtio(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000300), 0x10000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=virtio\f\x00']) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 75.970627ms ago: executing program 4 (id=1684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8054) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 30.374971ms ago: executing program 5 (id=1685): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="814f6c0d4e831b5c1367d339ef294ff93090a2b525a1f51ebef4cd6163bb06d1dc42885f1cdb1187058652f81d57cc105502d3fd52a679b12bff75964f1b1f4b2a4780a2eda6902c78b6458128cd9b18c19bbb18977546cddfce3a23708257d8f943f3270469e4264de9b8694a27f55563115ebfd3930d48de8b2a56be", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25090000002000038014000200627269646765300000000000000000000800010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) r3 = fsmount(r0, 0x0, 0x3) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="300000006800010000000000fdffffff020004000400000008000500", @ANYRES32=r5, @ANYBLOB="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"], 0x30}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c00000010000100000000000000000004000000", @ANYRES32=r11, @ANYBLOB="00140000000000004c0012800b00010067656e65766500003c00028008000200e0"], 0x6c}, 0x1, 0x2, 0x0, 0x4800}, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000440), 0x10) listen(r12, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@nodelalloc}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") connect$vsock_stream(r13, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) writev(r13, &(0x7f00000001c0), 0x0) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, 0x0, 0x0) 29.798458ms ago: executing program 4 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=ANY=[], 0x20, 0x4000040}, 0x20000805) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r2 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) unshare(0x4000400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffffff, 0x0, 0x20) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r5, 0xee00, 0xee01) 0s ago: executing program 1 (id=1687): landlock_create_ruleset(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$eJzs3c9qY1UcB/DfzZ820UWycCVCL+jCVWl9ghapIBYEJQt1ocWmIE0otBDwD8aufAKfwFfwNdyIL+ADOMxuuihzh5vcpJnJTUs606bMfD6b/jjnfO/9nZOErnLz3Xv948OTs6PzX/6LRiOJyk7sxEUS7ajExG9R6t9H5eMAwAN3kWXxOBtbL11RX5CsVe60MQDgzsz+/191LwDA/fjyq68/293f3/siTRsR/d8HnSTGf8fzu0fxQ/SiG1vRisuIbGpcf/Lp/l7U0lw7PugPB5082f/27+L6u/9HjPLb0Yp2eX47HZvJDwederxV3H+nF93P/4xWvFOe/6gkH521+PD9mf43oxX/fB8n0YvDordJ/tftNP04++PJz9/ko3k+GQ4669N1xerqvb4wAAAAAAAAAAAAAAAAAAAAAAC81jbTqfbzz9+pXo7mN+fmk9n8oucDDWeez7OVpmlWpK6uX4t3a1Fbza4BAAAAAAAAAAAAAAAAAADgYTn78afjg16ve1parBerrltTVky+1l8yFU+XuM6NxcayqagWrfWSiOXuVS+SNy+ulk7FwsNs5v10T5Na5COVWxz4fJFMR5qzUxsxvlc+0hwXMyMv/aI0YlRMtnp8kMQNqUbZm2Su+GvpfrL5t18j32h5au3FkWaxg5LFzWvuvvb2rY4uay2YSiKiPj3M669Tf3Ufq9EnBQAAAAAAAAAAAAAAAAAAuGdXX/otmTxfQUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAJXv/+/RDEswovWZNW8qEUxsuItAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AZ4FgAA//8YB15i") socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x201, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) kernel console output (not intermixed with test programs): capacity change from 0 to 1024 [ 63.977453][ T5898] ext4: Unknown parameter 'fowner>00000000000000000000' [ 64.037000][ T5907] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 64.063984][ T5911] loop2: detected capacity change from 0 to 512 [ 64.075666][ T5911] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.303: bg 0: block 127: padding at end of block bitmap is not set [ 64.075712][ T5911] loop2: lost filesystem error report for type 5 error -117 [ 64.075961][ T5911] EXT4-fs (loop2): Remounting filesystem read-only [ 64.076035][ T5911] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.2.303: cleanup dec ref error -28 [ 64.076090][ T5911] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 64.076114][ T5911] EXT4-fs (loop2): 1 orphan inode deleted [ 64.078221][ T5911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.107646][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.318832][ T5933] loop3: detected capacity change from 0 to 128 [ 64.325528][ T5933] FAT-fs (loop3): data area starts beyond volume (36 > 11) [ 64.325586][ T5933] FAT-fs (loop3): Can't find a valid FAT filesystem [ 64.423604][ T30] audit: type=1400 audit(64.390:3): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lo" requested=w pid=5919 comm="syz.2.305" name="file0" dev="tmpfs" ino=260 [ 64.508925][ T24] cfg80211: failed to load regulatory.db [ 64.653272][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.672846][ T5941] evm: overlay not supported [ 64.839229][ T5953] loop1: detected capacity change from 0 to 256 [ 65.047337][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 65.060050][ T5955] overlayfs: failed to resolve './bus': -2 [ 65.587158][ T5969] loop2: detected capacity change from 0 to 512 [ 65.596066][ T5969] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.612954][ T5969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.635769][ T5969] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 65.644965][ T5969] EXT4-fs (loop2): Remounting filesystem read-only [ 65.740368][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.128688][ T5983] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.150948][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.285806][ T5983] netlink: 260 bytes leftover after parsing attributes in process `syz.2.326'. [ 66.294248][ T5983] fuse: Unknown parameter 'rootrS՚1ood' [ 66.405417][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.090445][ T5805] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 67.696720][ T30] audit: type=1326 audit(67.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 67.703672][ T30] audit: type=1326 audit(67.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 67.711263][ T30] audit: type=1326 audit(67.680:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 67.720439][ T30] audit: type=1326 audit(67.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 67.725739][ T30] audit: type=1326 audit(67.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 67.725780][ T30] audit: type=1326 audit(67.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 67.725803][ T30] audit: type=1326 audit(67.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 67.739441][ T30] audit: type=1326 audit(67.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8ed79fd8 code=0x7ffc0000 [ 67.744018][ T30] audit: type=1326 audit(67.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff8ed5aeac code=0x7ffc0000 [ 67.749729][ T30] audit: type=1326 audit(67.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.3.332" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff8ed5aeac code=0x7ffc0000 [ 67.898658][ T6018] netlink: 'syz.4.336': attribute type 6 has an invalid length. [ 67.965828][ T6021] trusted_key: encrypted_key: insufficient parameters specified [ 68.196082][ T6037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 68.836901][ T866] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.044836][ T866] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 69.044875][ T866] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.044902][ T866] usb 1-1: config 1 interface 0 has no altsetting 0 [ 69.056194][ T866] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 69.056222][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.056244][ T866] usb 1-1: Product: а [ 69.056255][ T866] usb 1-1: Manufacturer: Ⰺ [ 69.056266][ T866] usb 1-1: SerialNumber: ꛼셚㠕風今欝凜襱馯ᷡ忠ע鈖袊볡湄佮磗㤊ꗊ㪪悲릅凈 諞쵓唲懇꒐蓭䡒ᘇ㰞を痠ݡ릇౛ᔛ虛꿄쨓猌젔㤘ɜ璵齪ꎐ⛅켚㨕ᢊ貲鍃阚ˈ殏昜ퟨ袹ⳗ븵₟䎆崌ᬁ돩鳹册滊틒服穂츝썢愢摮ꋣ뀿梗쥖Ӳ贎ꍯﲎꔪ䄡ⷞ拦᪚ [ 69.530423][ T6068] binder: 6061:6068 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 69.534688][ T6068] binder: 6068 RLIMIT_NICE not set [ 69.734117][ T866] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 69.791268][ T866] usb 1-1: USB disconnect, device number 3 [ 70.336839][ T6094] syzkaller0: entered promiscuous mode [ 70.336881][ T6094] syzkaller0: entered allmulticast mode [ 70.394893][ T6089] set_capacity_and_notify: 1 callbacks suppressed [ 70.395143][ T6089] loop2: detected capacity change from 0 to 128 [ 70.483095][ T6103] syzkaller0: entered promiscuous mode [ 70.484315][ T6103] syzkaller0: entered allmulticast mode [ 74.117162][ T6142] loop1: detected capacity change from 0 to 256 [ 75.172530][ T6142] workqueue: Failed to create a rescuer kthread for wq "dio/loop1": -EINTR [ 75.956095][ T6172] loop2: detected capacity change from 0 to 512 [ 75.960033][ T6172] FAT-fs (loop2): bogus number of FAT sectors [ 75.962357][ T6172] FAT-fs (loop2): Can't find a valid FAT filesystem [ 77.027995][ T6211] tipc: Started in network mode [ 77.029108][ T6211] tipc: Node identity , cluster identity 4711 [ 77.030571][ T6211] tipc: Failed to obtain node identity [ 77.032210][ T6211] tipc: Enabling of bearer rejected, failed to enable media [ 77.060643][ T6217] netlink: 56 bytes leftover after parsing attributes in process `syz.0.398'. [ 77.106671][ T6222] loop2: detected capacity change from 0 to 512 [ 77.113451][ T6222] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.120745][ T6222] EXT4-fs (loop2): 1 truncate cleaned up [ 77.122645][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.267436][ T6241] binder: 6239:6241 ioctl c018620b 0 returned -14 [ 77.271267][ T6241] binder: 6239:6241 ioctl c018620c 20000040 returned -22 [ 77.300401][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.408'. [ 77.331255][ T6250] syzkaller0: entered promiscuous mode [ 77.331290][ T6250] syzkaller0: entered allmulticast mode [ 77.738441][ T6258] netlink: 'syz.0.412': attribute type 4 has an invalid length. [ 77.741165][ T6258] netlink: 'syz.0.412': attribute type 4 has an invalid length. [ 77.792333][ T6265] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.414'. [ 77.910515][ T6272] netlink: 56 bytes leftover after parsing attributes in process `syz.4.417'. [ 78.175715][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.290998][ T6289] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.291069][ T6289] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 78.327634][ T6292] loop2: detected capacity change from 0 to 512 [ 78.348392][ T6292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.374188][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.417570][ T6300] netlink: 100 bytes leftover after parsing attributes in process `syz.2.425'. [ 78.636561][ T6321] loop1: detected capacity change from 0 to 128 [ 78.645262][ T6321] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.722597][ T6325] netlink: 'syz.0.433': attribute type 4 has an invalid length. [ 79.211738][ T6342] loop3: detected capacity change from 0 to 512 [ 79.214308][ T6342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.220069][ T6342] EXT4-fs (loop3): 1 truncate cleaned up [ 79.223599][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.227722][ T6342] EXT4-fs (loop3): shut down requested (1) [ 79.240340][ T6342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.458152][ T6357] loop2: detected capacity change from 0 to 512 [ 79.459719][ T6357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.734547][ T6357] EXT4-fs (loop2): 1 truncate cleaned up [ 79.737866][ T6357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.778241][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.878914][ T6362] FAULT_INJECTION: forcing a failure. [ 79.878914][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.878953][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.2.445 Tainted: G L syzkaller #0 PREEMPT [ 79.878969][ T6362] Tainted: [L]=SOFTLOCKUP [ 79.878974][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 79.878979][ T6362] Call trace: [ 79.878983][ T6362] show_stack+0x2c/0x3c (C) [ 79.879004][ T6362] __dump_stack+0x30/0x40 [ 79.879015][ T6362] dump_stack_lvl+0xd8/0x12c [ 79.879025][ T6362] dump_stack+0x1c/0x28 [ 79.879034][ T6362] should_fail_ex+0x41c/0x590 [ 79.879045][ T6362] should_fail+0x14/0x24 [ 79.879054][ T6362] should_fail_usercopy+0x20/0x30 [ 79.879064][ T6362] simple_read_from_buffer+0xc4/0x238 [ 79.879075][ T6362] proc_fail_nth_read+0x1a8/0x248 [ 79.879083][ T6362] vfs_read+0x230/0x8c8 [ 79.879093][ T6362] ksys_read+0x12c/0x228 [ 79.879103][ T6362] __arm64_sys_read+0x7c/0x90 [ 79.879109][ T6362] invoke_syscall+0x98/0x244 [ 79.879120][ T6362] el0_svc_common+0xec/0x23c [ 79.879129][ T6362] do_el0_svc+0x4c/0x5c [ 79.879138][ T6362] el0_svc+0x64/0x260 [ 79.879149][ T6362] el0t_64_sync_handler+0x48/0x148 [ 79.879158][ T6362] el0t_64_sync+0x198/0x19c [ 79.935949][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.176601][ T6374] loop2: detected capacity change from 0 to 8192 [ 81.475398][ T6410] loop2: detected capacity change from 0 to 512 [ 81.505979][ T6410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.759483][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.736864][ T6430] fuse: fd is not a fuse device [ 82.837067][ T6436] sock: sock_timestamping_bind_phc: sock not bind to device [ 82.850191][ T866] kernel read not supported for file [fscontext] (pid: 866 comm: kworker/1:2) [ 82.958345][ T6446] Illegal XDP return value 153 on prog (id 66) dev N/A, expect packet loss! [ 83.425010][ T6457] FAULT_INJECTION: forcing a failure. [ 83.425010][ T6457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.425050][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.3.469 Tainted: G L syzkaller #0 PREEMPT [ 83.425067][ T6457] Tainted: [L]=SOFTLOCKUP [ 83.425071][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 83.425077][ T6457] Call trace: [ 83.425081][ T6457] show_stack+0x2c/0x3c (C) [ 83.425102][ T6457] __dump_stack+0x30/0x40 [ 83.425117][ T6457] dump_stack_lvl+0xd8/0x12c [ 83.425127][ T6457] dump_stack+0x1c/0x28 [ 83.425137][ T6457] should_fail_ex+0x41c/0x590 [ 83.425148][ T6457] should_fail+0x14/0x24 [ 83.425157][ T6457] should_fail_usercopy+0x20/0x30 [ 83.425167][ T6457] tty_tiocgicount+0xdc/0x22c [ 83.425177][ T6457] tty_ioctl+0x244/0xd50 [ 83.425184][ T6457] __arm64_sys_ioctl+0x14c/0x1c4 [ 83.425195][ T6457] invoke_syscall+0x98/0x244 [ 83.425205][ T6457] el0_svc_common+0xec/0x23c [ 83.425215][ T6457] do_el0_svc+0x4c/0x5c [ 83.425224][ T6457] el0_svc+0x64/0x260 [ 83.425234][ T6457] el0t_64_sync_handler+0x48/0x148 [ 83.425243][ T6457] el0t_64_sync+0x198/0x19c [ 83.813674][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 85.333034][ T6488] netlink: 104 bytes leftover after parsing attributes in process `syz.0.482'. [ 85.534307][ T6509] binder: 6507:6509 tried to acquire reference to desc 0, got 1 instead [ 85.534891][ T6509] binder: 6507:6509 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.534904][ T6509] binder: 6509 RLIMIT_NICE not set [ 85.535279][ T9] binder: undelivered TRANSACTION_COMPLETE [ 85.898197][ T6528] netlink: 1032 bytes leftover after parsing attributes in process `syz.3.498'. [ 85.910624][ T6528] loop3: detected capacity change from 0 to 512 [ 87.098613][ T6554] gretap0: entered promiscuous mode [ 87.100492][ T6554] macsec1: entered promiscuous mode [ 87.100619][ T6554] macsec1: entered allmulticast mode [ 87.100637][ T6554] gretap0: entered allmulticast mode [ 87.104110][ T6554] gretap0: left allmulticast mode [ 87.107246][ T6554] gretap0: left promiscuous mode [ 87.206701][ T6569] fuse: Unknown parameter '0000000000000000001000000000000000000010 [ 87.206701][ T6569] ' [ 87.209296][ T6569] loop2: detected capacity change from 0 to 512 [ 88.753662][ T6604] loop2: detected capacity change from 0 to 1024 [ 88.843577][ T6604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.052389][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.887255][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 89.891023][ T6638] loop2: detected capacity change from 0 to 256 [ 90.053149][ T6640] loop3: detected capacity change from 0 to 8192 [ 90.075332][ T6640] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.187435][ T6642] overlayfs: failed to clone upperpath [ 90.383723][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 90.674929][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 91.742600][ T6679] binder: 6669:6679 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.742652][ T6679] binder: 6679 RLIMIT_NICE not set [ 91.742669][ T6679] binder: 6669:6679 ioctl c0306201 20000040 returned -14 [ 91.750891][ T6685] loop3: detected capacity change from 0 to 4096 [ 91.753476][ T6685] EXT4-fs: Ignoring removed bh option [ 91.762028][ T6685] EXT4-fs (loop3): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 91.766615][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.117534][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.359255][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 92.359291][ T30] audit: type=1326 audit(92.330:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x0 [ 92.635891][ T6721] loop2: detected capacity change from 0 to 512 [ 92.636320][ T6721] EXT4-fs: inline encryption not supported [ 92.671799][ T6721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.787302][ T6728] Cannot find del_set index 2 as target [ 92.814251][ T6721] EXT4-fs (loop2): 1 truncate cleaned up [ 92.815267][ T6721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.651370][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 93.653116][ T6734] netlink: 'syz.4.569': attribute type 7 has an invalid length. [ 93.655559][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.569'. [ 95.922457][ T6764] loop3: detected capacity change from 0 to 128 [ 96.514272][ T6770] loop3: detected capacity change from 0 to 256 [ 96.518069][ T6770] vfat: Deprecated parameter 'posix' [ 96.518090][ T6770] FAT-fs: "posix" option is obsolete, not supported now [ 97.192471][ T6783] tipc: Started in network mode [ 97.195085][ T6783] tipc: Node identity ff0108000000000000000000e1db6e66, cluster identity 4711 [ 97.197023][ T6783] tipc: Enabling of bearer rejected, failed to enable media [ 97.623907][ T6800] loop1: detected capacity change from 0 to 1024 [ 97.630554][ T6800] EXT4-fs: Ignoring removed oldalloc option [ 97.630614][ T6800] EXT4-fs: Ignoring removed bh option [ 97.633552][ T6800] EXT4-fs: test_dummy_encryption requires encrypt feature [ 97.818425][ T6803] loop3: detected capacity change from 0 to 128 [ 97.821259][ T6803] EXT4-fs: Ignoring removed nobh option [ 99.122889][ T6803] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.171961][ T6809] loop1: detected capacity change from 0 to 1024 [ 99.191286][ T30] audit: type=1326 audit(99.160:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.191331][ T30] audit: type=1326 audit(99.160:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.191602][ T30] audit: type=1326 audit(99.160:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.191641][ T30] audit: type=1326 audit(99.160:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.192112][ T30] audit: type=1326 audit(99.160:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=45 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.192130][ T30] audit: type=1326 audit(99.160:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.192146][ T30] audit: type=1326 audit(99.160:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.192160][ T30] audit: type=1326 audit(99.160:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.192175][ T30] audit: type=1326 audit(99.160:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.195921][ T30] audit: type=1326 audit(99.170:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8ed77fe8 code=0x7ffc0000 [ 99.280456][ T6809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.608259][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.624422][ T4718] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.849085][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.872337][ T6835] loop3: detected capacity change from 0 to 512 [ 100.927487][ T6835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.958527][ T6841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.997484][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.997724][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.997887][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.998041][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.998195][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.998345][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.998496][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.998661][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.998817][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 100.998973][ T4718] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '.' [ 101.050819][ T6848] loop2: detected capacity change from 0 to 1024 [ 101.067217][ T6848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.086570][ T6857] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 101.086605][ T6857] PKCS7: Only support pkcs7_signedData type [ 101.103900][ T6859] loop1: detected capacity change from 0 to 512 [ 101.114397][ T6859] EXT4-fs (loop1): failed to initialize system zone (-117) [ 101.117875][ T6859] EXT4-fs (loop1): mount failed [ 101.131679][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 101.151062][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.608'. [ 101.190684][ T6868] syzkaller0: entered promiscuous mode [ 101.191819][ T6868] syzkaller0: entered allmulticast mode [ 101.213240][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 101.331865][ T6880] netlink: 'syz.0.615': attribute type 3 has an invalid length. [ 102.260586][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.338155][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.346397][ T4959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.407369][ T6901] syzkaller0: entered promiscuous mode [ 102.408549][ T6901] syzkaller0: entered allmulticast mode [ 102.472466][ T4959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.661838][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.664278][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.668963][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.674289][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.676133][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.894409][ T6940] loop2: detected capacity change from 0 to 512 [ 103.077036][ T4959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.151439][ T4959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.178372][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.178590][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.178680][ T6922] bridge_slave_0: entered allmulticast mode [ 103.179127][ T6922] bridge_slave_0: entered promiscuous mode [ 103.185705][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.185768][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.185885][ T6922] bridge_slave_1: entered allmulticast mode [ 103.186346][ T6922] bridge_slave_1: entered promiscuous mode [ 103.189854][ T6963] loop1: detected capacity change from 0 to 1024 [ 103.202180][ T6963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.205394][ T6963] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.635: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.209713][ T6963] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 103.209760][ T6963] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.209760][ T6963] [ 103.212331][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.220611][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.239499][ T6922] team0: Port device team_slave_0 added [ 103.241770][ T6922] team0: Port device team_slave_1 added [ 103.251686][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.253258][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.254698][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.255410][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.255418][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.255434][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.287126][ T6922] hsr_slave_0: entered promiscuous mode [ 103.287951][ T6922] hsr_slave_1: entered promiscuous mode [ 103.288744][ T6922] debugfs: 'hsr0' already exists in 'hsr' [ 103.288756][ T6922] Cannot create hsr debugfs directory [ 103.406374][ T4959] bridge_slave_1: left allmulticast mode [ 103.406436][ T4959] bridge_slave_1: left promiscuous mode [ 103.407029][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.413914][ T4959] bridge_slave_0: left allmulticast mode [ 103.417325][ T4959] bridge_slave_0: left promiscuous mode [ 103.418788][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.468444][ T6977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.637'. [ 103.542075][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 103.554024][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.923429][ T4959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.931319][ T7000] loop1: detected capacity change from 0 to 512 [ 103.934305][ T7000] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.975762][ T4959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.010263][ T7000] loop1: detected capacity change from 0 to 803 [ 104.011406][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.021758][ T4959] bond0 (unregistering): Released all slaves [ 104.036746][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 104.070943][ T6922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.148751][ T7008] fuse: Unknown parameter 'group_i00000000000000000000' [ 104.162259][ T7000] loop1: detected capacity change from 0 to 801 [ 104.162574][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.190079][ T6922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.190464][ T6922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.202169][ T6922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.206426][ T6922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.237166][ T6922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.262763][ T7017] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 104.262790][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.262858][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 104.264343][ T7020] vhci_hcd: connection closed [ 104.266166][ T3548] vhci_hcd vhci_hcd.2: stop threads [ 104.266180][ T3548] vhci_hcd vhci_hcd.2: release socket [ 104.266192][ T3548] vhci_hcd vhci_hcd.2: disconnect device [ 104.276292][ T7000] loop1: detected capacity change from 0 to 801 [ 104.277968][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.285471][ T7000] loop1: detected capacity change from 0 to 801 [ 104.287084][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.311836][ T6922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.316642][ T6922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.337047][ T7000] loop1: detected capacity change from 0 to 801 [ 104.337352][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.357214][ T7000] loop1: detected capacity change from 0 to 801 [ 104.359298][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.384276][ T7000] loop1: detected capacity change from 0 to 801 [ 104.388822][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.440011][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.452774][ T7000] vfat: Unknown parameter 'shortGPL' [ 104.473857][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 104.489509][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.492952][ T4720] Bluetooth: hci4: unexpected subevent 0x0e length: 32 > 15 [ 104.493669][ T4720] Bluetooth: hci4: Unable to find connection for dst b3:f0:f3:00:00:00 sid 0x00 [ 104.576788][ T4959] hsr_slave_0: left promiscuous mode [ 104.581690][ T4959] hsr_slave_1: left promiscuous mode [ 104.583235][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.585915][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.587944][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.589413][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.599687][ T4959] veth1_macvtap: left promiscuous mode [ 104.601470][ T4959] veth0_macvtap: left promiscuous mode [ 104.602863][ T4959] veth1_vlan: left promiscuous mode [ 104.604739][ T4959] veth0_vlan: left promiscuous mode [ 104.720604][ T4959] team0 (unregistering): Port device team_slave_1 removed [ 104.731980][ T4959] team0 (unregistering): Port device team_slave_0 removed [ 104.760324][ T7062] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.794647][ T4720] Bluetooth: hci3: command tx timeout [ 104.936722][ T7064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.656'. [ 104.947134][ T7064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.656'. [ 104.949329][ T7064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.656'. [ 104.975970][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.986366][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.986418][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.006940][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.006993][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.250875][ T7081] fuse: fd is not a fuse device [ 105.447332][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.476988][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 105.537177][ T7115] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 105.586486][ T7122] FAULT_INJECTION: forcing a failure. [ 105.586486][ T7122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.586522][ T7122] CPU: 1 UID: 0 PID: 7122 Comm: syz.1.670 Tainted: G L syzkaller #0 PREEMPT [ 105.586538][ T7122] Tainted: [L]=SOFTLOCKUP [ 105.586542][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 105.586548][ T7122] Call trace: [ 105.586551][ T7122] show_stack+0x2c/0x3c (C) [ 105.586572][ T7122] __dump_stack+0x30/0x40 [ 105.586583][ T7122] dump_stack_lvl+0xd8/0x12c [ 105.586592][ T7122] dump_stack+0x1c/0x28 [ 105.586601][ T7122] should_fail_ex+0x41c/0x590 [ 105.586612][ T7122] should_fail_alloc_page+0xec/0x10c [ 105.586621][ T7122] prepare_alloc_pages+0x194/0x4a4 [ 105.586629][ T7122] __alloc_frozen_pages_noprof+0x134/0x320 [ 105.586642][ T7122] alloc_pages_mpol+0x1ec/0x3c0 [ 105.586651][ T7122] folio_alloc_mpol_noprof+0x4c/0x248 [ 105.586660][ T7122] vma_alloc_folio_noprof+0x100/0x1dc [ 105.586669][ T7122] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 105.586680][ T7122] folio_prealloc+0x3c/0x1b0 [ 105.586688][ T7122] do_pte_missing+0x1bcc/0x2a24 [ 105.586696][ T7122] handle_mm_fault+0x15a4/0x253c [ 105.586703][ T7122] __get_user_pages+0x8ec/0x2134 [ 105.586712][ T7122] __gup_longterm_locked+0xa14/0xffc [ 105.586720][ T7122] gup_fast_fallback+0x1d54/0x204c [ 105.586729][ T7122] pin_user_pages_fast+0x6c/0xa8 [ 105.586738][ T7122] iov_iter_extract_pages+0x194/0x37c [ 105.586746][ T7122] rds_info_getsockopt+0x20c/0x494 [ 105.586755][ T7122] rds_getsockopt+0x254/0x420 [ 105.586765][ T7122] do_sock_getsockopt+0x488/0x720 [ 105.586774][ T7122] __sys_getsockopt+0xfc/0x168 [ 105.586782][ T7122] __arm64_sys_getsockopt+0xc0/0xdc [ 105.586791][ T7122] invoke_syscall+0x98/0x244 [ 105.586801][ T7122] el0_svc_common+0xec/0x23c [ 105.586810][ T7122] do_el0_svc+0x4c/0x5c [ 105.586820][ T7122] el0_svc+0x64/0x260 [ 105.586829][ T7122] el0t_64_sync_handler+0x48/0x148 [ 105.586839][ T7122] el0t_64_sync+0x198/0x19c [ 105.623406][ T7125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.624205][ T7125] bond1: (slave bond2): making interface the new active one [ 105.625510][ T7125] bond1: (slave bond2): Enslaving as an active interface with an up link [ 105.652840][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 105.658212][ T7115] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 105.666850][ T7115] bond3 (unregistering): Released all slaves [ 105.722199][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 105.793782][ T6922] veth0_vlan: entered promiscuous mode [ 105.805919][ T6922] veth1_vlan: entered promiscuous mode [ 105.842973][ T6922] veth0_macvtap: entered promiscuous mode [ 105.844085][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 105.866603][ T7152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.882623][ T7152] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 105.887972][ T6922] veth1_macvtap: entered promiscuous mode [ 105.891154][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 105.903120][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.910321][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.916099][ T7162] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 105.916123][ T7162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.916184][ T7162] vhci_hcd vhci_hcd.0: Device attached [ 105.922268][ T4720] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 105.922324][ T7163] vhci_hcd: connection closed [ 105.922599][ T3776] vhci_hcd vhci_hcd.0: stop threads [ 105.922617][ T3776] vhci_hcd vhci_hcd.0: release socket [ 105.922641][ T3776] vhci_hcd vhci_hcd.0: disconnect device [ 105.927843][ T3776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.927895][ T3776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.927922][ T3776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.927943][ T3776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.003146][ T7167] netlink: 'syz.1.678': attribute type 21 has an invalid length. [ 106.036515][ T7169] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.087158][ T7167] netlink: 'syz.1.678': attribute type 4 has an invalid length. [ 106.087191][ T7167] netlink: 'syz.1.678': attribute type 3 has an invalid length. [ 106.231820][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.231835][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.261067][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.261086][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.795948][ T7180] __nla_validate_parse: 2 callbacks suppressed [ 106.797725][ T7180] netlink: 64 bytes leftover after parsing attributes in process `syz.0.680'. [ 106.799702][ T7181] netlink: 64 bytes leftover after parsing attributes in process `syz.0.680'. [ 106.824672][ T4720] Bluetooth: hci3: command tx timeout [ 106.924467][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'. [ 106.957934][ T7192] ip6_vti0: entered allmulticast mode [ 106.977984][ T7191] ip6_vti0: left allmulticast mode [ 107.069896][ T7202] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.912705][ T7202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.004389][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.173674][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.693'. [ 108.437317][ T7247] FAULT_INJECTION: forcing a failure. [ 108.437317][ T7247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.440141][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.5.699 Tainted: G L syzkaller #0 PREEMPT [ 108.440165][ T7247] Tainted: [L]=SOFTLOCKUP [ 108.440169][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 108.440175][ T7247] Call trace: [ 108.440179][ T7247] show_stack+0x2c/0x3c (C) [ 108.440206][ T7247] __dump_stack+0x30/0x40 [ 108.440219][ T7247] dump_stack_lvl+0xd8/0x12c [ 108.440230][ T7247] dump_stack+0x1c/0x28 [ 108.440239][ T7247] should_fail_ex+0x41c/0x590 [ 108.440250][ T7247] should_fail+0x14/0x24 [ 108.440259][ T7247] should_fail_usercopy+0x20/0x30 [ 108.440269][ T7247] copy_folio_from_iter_atomic+0x384/0x1518 [ 108.440278][ T7247] generic_perform_write+0x4bc/0x7a4 [ 108.440286][ T7247] shmem_file_write_iter+0x10c/0x134 [ 108.440294][ T7247] vfs_write+0x51c/0xa0c [ 108.440305][ T7247] ksys_write+0x12c/0x228 [ 108.440311][ T7247] __arm64_sys_write+0x7c/0x90 [ 108.440318][ T7247] invoke_syscall+0x98/0x244 [ 108.440328][ T7247] el0_svc_common+0xec/0x23c [ 108.440337][ T7247] do_el0_svc+0x4c/0x5c [ 108.440346][ T7247] el0_svc+0x64/0x260 [ 108.440357][ T7247] el0t_64_sync_handler+0x48/0x148 [ 108.440366][ T7247] el0t_64_sync+0x198/0x19c [ 108.466867][ T7247] set_capacity_and_notify: 5 callbacks suppressed [ 108.468517][ T7247] loop5: detected capacity change from 0 to 512 [ 109.044721][ T4720] Bluetooth: hci3: command tx timeout [ 109.063673][ T7247] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.699: bg 0: block 127: padding at end of block bitmap is not set [ 109.063711][ T7247] loop5: lost filesystem error report for type 5 error -117 [ 109.063918][ T7247] EXT4-fs (loop5): Remounting filesystem read-only [ 109.063992][ T7247] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.5.699: cleanup dec ref error -28 [ 109.064047][ T7247] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 109.064073][ T7247] EXT4-fs (loop5): 1 orphan inode deleted [ 109.064478][ T7247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.381285][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.487467][ T7255] syz_tun: entered allmulticast mode [ 109.498123][ T7254] syz_tun: left allmulticast mode [ 109.500853][ T7261] loop1: detected capacity change from 0 to 128 [ 109.505749][ T7261] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 109.507225][ T7261] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.421452][ T4807] IPVS: starting estimator thread 0... [ 110.505402][ T7279] IPVS: using max 61 ests per chain, 146400 per kthread [ 111.510679][ T4720] Bluetooth: hci3: command tx timeout [ 111.887067][ T7303] loop1: detected capacity change from 0 to 128 [ 111.916084][ T7303] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.850436][ T7324] netlink: 80 bytes leftover after parsing attributes in process `syz.2.724'. [ 112.925582][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.014619][ T7328] process 'syz.2.724' launched './file1' with NULL argv: empty string added [ 113.274135][ T7333] netlink: 'syz.5.728': attribute type 4 has an invalid length. [ 113.282668][ T7333] bridge_slave_0: left allmulticast mode [ 113.284179][ T7333] bridge_slave_0: left promiscuous mode [ 113.287230][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.292494][ T7333] bridge_slave_1: left allmulticast mode [ 113.293705][ T7333] bridge_slave_1: left promiscuous mode [ 113.296011][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.303216][ T7333] bond0: (slave bond_slave_0): Releasing backup interface [ 113.337357][ T7333] bond0: (slave bond_slave_1): Releasing backup interface [ 113.342523][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 113.342553][ T30] audit: type=1326 audit(113.310:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.4.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x0 [ 113.411916][ T7333] team0: Port device team_slave_0 removed [ 113.417127][ T7333] team0: Port device team_slave_1 removed [ 113.418699][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.420309][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.423115][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.423698][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.504889][ T7346] netlink: 84 bytes leftover after parsing attributes in process `syz.5.728'. [ 113.513830][ T7333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.524335][ T7335] team0: Mode changed to "broadcast" [ 113.526502][ T7337] vlan0: entered promiscuous mode [ 113.553091][ T7345] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4710] was attempted by ""[7345] [ 113.553622][ T7345] overlayfs: missing 'lowerdir' [ 114.407298][ T7337] team0: Port device vlan0 added [ 114.424104][ T7342] tipc: Started in network mode [ 114.424165][ T7342] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 114.426026][ T7342] tipc: Enabled bearer , priority 0 [ 115.430384][ T4359] tipc: Node number set to 11578026 [ 115.752451][ T7375] syzkaller0: entered promiscuous mode [ 115.757001][ T7375] syzkaller0: entered allmulticast mode [ 115.833679][ T7375] binder: 7372:7375 ioctl c0306201 20000080 returned -14 [ 115.835858][ T11] binder: undelivered freeze notification, 0000000000000000 [ 115.866371][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 116.730310][ T7397] loop2: detected capacity change from 0 to 4096 [ 116.734338][ T7397] EXT4-fs: inline encryption not supported [ 116.743490][ T7397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.743525][ T7397] EXT4-fs (loop2): Test dummy encryption mode enabled [ 116.753773][ T7397] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 116.753843][ T7397] System zones: 0-5 [ 116.768923][ T7397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.857921][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.875447][ T7403] loop1: detected capacity change from 0 to 1024 [ 117.035668][ T7403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.248859][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.969331][ T7424] syzkaller0: entered promiscuous mode [ 117.969367][ T7424] syzkaller0: entered allmulticast mode [ 118.057248][ T7447] loop5: detected capacity change from 0 to 512 [ 118.920714][ T7469] loop5: detected capacity change from 0 to 8192 [ 119.512809][ T7469] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.609270][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 119.831985][ T7496] syzkaller0: entered promiscuous mode [ 119.833554][ T7496] syzkaller0: entered allmulticast mode [ 119.865583][ T4720] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 119.865664][ T4720] Bluetooth: hci0: Injecting HCI hardware error event [ 119.866305][ T4720] Bluetooth: hci0: hardware error 0x00 [ 120.058024][ T7523] loop1: detected capacity change from 0 to 512 [ 120.062268][ T7523] EXT4-fs: Ignoring removed nobh option [ 120.080037][ T7523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.193373][ T7533] fuse: Bad value for 'user_id' [ 120.193402][ T7533] fuse: Bad value for 'user_id' [ 120.257344][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.207436][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.780'. [ 121.207471][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.780'. [ 121.207497][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.780'. [ 121.404448][ T7578] loop2: detected capacity change from 0 to 512 [ 121.483384][ T7578] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 121.483900][ T7578] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #11: comm syz.2.784: corrupted inode contents [ 121.483927][ T7578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.487469][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 121.487483][ C0] EXT4-fs (loop2): initial error at time 121: mb_free_blocks:2049: inode 11: block 64 [ 121.487508][ C0] EXT4-fs (loop2): last error at time 121: ext4_do_update_inode:5742: inode 11 [ 121.510164][ T7578] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #11: comm syz.2.784: mark_inode_dirty error [ 121.510217][ T7578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.515381][ T7578] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.784: invalid indirect mapped block 1 (level 1) [ 121.515417][ T7578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.519689][ T7578] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #11: comm syz.2.784: corrupted inode contents [ 121.519724][ T7578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.204698][ T4720] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.424742][ T7597] netlink: 'syz.1.792': attribute type 6 has an invalid length. [ 122.445488][ T7578] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 122.445535][ T7578] loop2: lost filesystem error report for type 5 error -117 [ 122.448873][ T7578] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #11: comm syz.2.784: corrupted inode contents [ 122.448916][ T7578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.453234][ T7578] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.784: mark_inode_dirty error [ 122.470000][ T7578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.496352][ T7578] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 122.496392][ T7578] loop2: lost filesystem error report for type 5 error -117 [ 122.780215][ T7578] EXT4-fs (loop2): 1 truncate cleaned up [ 122.790654][ T7578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.920429][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.526452][ T3548] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.529299][ T3548] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.536684][ T3548] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.538609][ T3548] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.643301][ T7639] loop5: detected capacity change from 0 to 8192 [ 124.727952][ T7647] syzkaller0: entered promiscuous mode [ 124.729121][ T7647] syzkaller0: entered allmulticast mode [ 124.737020][ T7646] syz_tun: entered allmulticast mode [ 124.985864][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.797'. [ 125.148248][ T4807] IPVS: starting estimator thread 0... [ 125.234881][ T7660] IPVS: using max 47 ests per chain, 112800 per kthread [ 125.317945][ T7658] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 125.322153][ T7656] binder: 7655:7656 ioctl 4018620d 0 returned -22 [ 125.325030][ T7656] binder: 7655:7656 ioctl c0306201 0 returned -14 [ 125.377943][ T7658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.380197][ T7658] bond3: (slave bond4): making interface the new active one [ 125.390218][ T7658] bond3: (slave bond4): Enslaving as an active interface with an up link [ 125.400282][ T7658] loop1: detected capacity change from 0 to 128 [ 125.410086][ T7658] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.476683][ T7658] syz.1.808 (pid 7658) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 125.509428][ T7658] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 125.516145][ T7658] bond5 (unregistering): Released all slaves [ 125.947961][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.397364][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.441960][ T7689] syz_tun: entered allmulticast mode [ 126.658222][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.658409][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.802305][ T7698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.809341][ T7698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.894963][ T7708] Bluetooth: MGMT ver 1.23 [ 127.789328][ T7712] loop2: detected capacity change from 0 to 256 [ 127.896665][ T7715] loop5: detected capacity change from 0 to 4096 [ 128.121855][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.825'. [ 128.165220][ T5519] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.165271][ T5519] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.165302][ T5519] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.165322][ T5519] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.614196][ T7721] input: syz1 as /devices/virtual/input/input5 [ 128.634908][ T7723] 9p: Bad value for 'rfdno' [ 128.679489][ T7727] loop2: detected capacity change from 0 to 512 [ 128.681384][ T7727] EXT4-fs: inline encryption not supported [ 128.747315][ T7727] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 128.747605][ T7727] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.830: invalid indirect mapped block 2683928664 (level 1) [ 128.747757][ T7727] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 128.748735][ T7727] EXT4-fs (loop2): 1 truncate cleaned up [ 128.749301][ T7727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.927266][ T7735] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.830: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 129.577559][ T7741] loop5: detected capacity change from 0 to 512 [ 129.641464][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.651440][ T7743] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 129.651478][ T7743] netlink: 5 bytes leftover after parsing attributes in process `syz.1.833'. [ 129.671411][ T7741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.701286][ T7743] loop1: detected capacity change from 0 to 128 [ 129.735749][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.740064][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'. [ 129.839798][ T7753] loop1: detected capacity change from 0 to 1024 [ 129.855910][ T7753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.989889][ T7767] loop5: detected capacity change from 0 to 256 [ 129.990858][ T7767] vfat: Unexpected value for 'rodir' [ 130.028436][ T7772] loop5: detected capacity change from 0 to 1024 [ 130.214656][ T7772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.591868][ T7784] fuse: fd is not a fuse device [ 130.596936][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.692929][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.734723][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 130.939412][ T7790] netlink: 'syz.4.850': attribute type 7 has an invalid length. [ 131.009118][ T7807] loop1: detected capacity change from 0 to 128 [ 131.014709][ T7807] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 131.014742][ T7807] FAT-fs (loop1): Can't find a valid FAT filesystem [ 131.117620][ T7809] loop5: detected capacity change from 0 to 4096 [ 131.395630][ T7809] EXT4-fs (loop5): Test dummy encryption mode enabled [ 131.940205][ T7809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.124509][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.251583][ T7834] loop5: detected capacity change from 0 to 1024 [ 132.262869][ T7839] loop2: detected capacity change from 0 to 512 [ 132.264503][ T7839] EXT4-fs: Ignoring removed oldalloc option [ 132.267219][ T7839] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.529016][ T7839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.530080][ T7834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.550908][ T7839] EXT4-fs (loop2): shut down requested (2) [ 132.612997][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.801856][ T7851] netlink: 'syz.1.868': attribute type 2 has an invalid length. [ 132.804696][ T7851] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 132.815325][ T7851] macsec0: entered allmulticast mode [ 132.816628][ T7851] bond0: entered allmulticast mode [ 132.819095][ T7851] bond_slave_0: entered allmulticast mode [ 132.819158][ T7851] bond_slave_1: entered allmulticast mode [ 132.823773][ T7851] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 133.077937][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.314450][ T30] audit: type=1326 audit(133.280:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.319860][ T30] audit: type=1326 audit(133.290:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.324551][ T30] audit: type=1326 audit(133.290:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.369151][ T30] audit: type=1326 audit(133.300:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.373710][ T30] audit: type=1326 audit(133.300:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.378206][ T30] audit: type=1326 audit(133.300:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.382759][ T30] audit: type=1326 audit(133.300:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.387211][ T30] audit: type=1326 audit(133.300:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.391592][ T30] audit: type=1326 audit(133.300:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.396026][ T30] audit: type=1326 audit(133.300:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.5.880" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x50000 [ 133.872711][ T7895] syzkaller0: entered promiscuous mode [ 133.873879][ T7895] syzkaller0: entered allmulticast mode [ 135.419026][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.422023][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.633711][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 135.686342][ T7943] bond5 (unregistering): Released all slaves [ 135.931217][ T7959] loop1: detected capacity change from 0 to 1024 [ 135.937962][ T7959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.410283][ T7971] syz_tun: entered allmulticast mode [ 136.434879][ T7969] syz_tun: left allmulticast mode [ 136.533000][ T7972] loop5: detected capacity change from 0 to 8192 [ 136.546656][ T7975] loop2: detected capacity change from 0 to 128 [ 136.547019][ T7975] ext4: Unknown parameter 'fowner<18446744073709551615' [ 136.916352][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.243711][ T7996] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 137.341263][ T8001] loop5: detected capacity change from 0 to 1024 [ 137.348695][ T8001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.453534][ T8008] overlayfs: failed to clone upperpath [ 137.648428][ T8025] loop2: detected capacity change from 0 to 8192 [ 137.708848][ T8034] syz_tun: entered allmulticast mode [ 137.724839][ T8033] syz_tun: left allmulticast mode [ 137.950935][ T8049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.940'. [ 137.950970][ T8049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.940'. [ 137.950997][ T8049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.940'. [ 138.041509][ T8056] overlayfs: failed to clone upperpath [ 138.159171][ T8070] syz_tun: entered allmulticast mode [ 138.177281][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.185451][ T8068] syz_tun: left allmulticast mode [ 138.219967][ T8075] netlink: 'syz.5.952': attribute type 13 has an invalid length. [ 138.242674][ T8078] binder: 8077:8078 ioctl 4018620d 20000100 returned -22 [ 138.311100][ T8081] sch_tbf: burst 408 is lower than device syzkaller0 mtu (1500) ! [ 138.323481][ T8083] vlan2: entered allmulticast mode [ 138.323521][ T8083] bond0: entered allmulticast mode [ 138.323798][ T8083] bond_slave_0: entered allmulticast mode [ 138.323819][ T8083] bond_slave_1: entered allmulticast mode [ 138.326391][ T8083] bridge0: port 3(vlan2) entered blocking state [ 138.326821][ T8083] bridge0: port 3(vlan2) entered disabled state [ 138.331079][ T8083] vlan2: entered promiscuous mode [ 138.331122][ T8083] bond0: entered promiscuous mode [ 138.331133][ T8083] bond_slave_0: entered promiscuous mode [ 138.331224][ T8083] bond_slave_1: entered promiscuous mode [ 138.331697][ T8083] bridge0: port 3(vlan2) entered blocking state [ 138.331731][ T8083] bridge0: port 3(vlan2) entered forwarding state [ 138.393577][ T8087] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 138.450374][ T8096] loop2: detected capacity change from 0 to 1024 [ 138.462234][ T8096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.595212][ T8113] netlink: 'syz.0.969': attribute type 3 has an invalid length. [ 138.595247][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 138.595605][ T8113] netlink: 'syz.0.969': attribute type 3 has an invalid length. [ 138.595626][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 138.669803][ T8123] loop5: detected capacity change from 0 to 4096 [ 138.679148][ T8110] 9p: Bad value for 'wfdno' [ 138.680849][ T8123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.682945][ T8123] EXT4-fs (loop5): Test dummy encryption mode enabled [ 138.696294][ T8123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.962508][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.085418][ T8146] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.166573][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 139.325212][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.390541][ T8178] netlink: 'syz.0.994': attribute type 9 has an invalid length. [ 139.698010][ T8202] loop5: detected capacity change from 0 to 1024 [ 139.709078][ T8202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.773791][ T8209] fuse: Bad value for 'fd' [ 140.430004][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 140.529083][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.714709][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 140.865686][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.865719][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.870314][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 140.870342][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.870365][ T9] usb 1-1: SerialNumber: syz [ 140.904399][ T8249] loop5: detected capacity change from 0 to 8192 [ 140.941250][ T8249] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.625217][ T8261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 141.625243][ T8261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.625774][ T8261] vhci_hcd vhci_hcd.0: Device attached [ 141.786811][ T8268] syzkaller0: entered promiscuous mode [ 141.786847][ T8268] syzkaller0: entered allmulticast mode [ 141.874091][ T8262] vhci_hcd: connection closed [ 141.875058][ T866] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 141.878521][ T8263] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 141.880357][ T3548] vhci_hcd vhci_hcd.1: stop threads [ 141.881893][ T3548] vhci_hcd vhci_hcd.1: release socket [ 141.883981][ T3548] vhci_hcd vhci_hcd.1: disconnect device [ 141.895777][ T8271] loop5: detected capacity change from 0 to 1024 [ 141.902288][ T8271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.767124][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.813967][ T8286] loop2: detected capacity change from 0 to 256 [ 142.814420][ T8286] vfat: Unknown parameter 'uni_1' [ 142.849817][ T8289] binder: tried to use weak ref as strong ref [ 142.849858][ T8289] binder: 8287:8289 Acquire 1 refcount change on invalid ref 0 ret -22 [ 142.850766][ T8289] binder: 8287:8289 got transaction to invalid handle, 1 [ 142.850778][ T8289] binder: 8287:8289 cannot find target node [ 142.850791][ T8289] binder: 8287:8289 transaction async to 0:0 failed 26/29201/-22, code 0 size 120-24 line 3252 [ 142.854975][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.858382][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.858552][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.905398][ T8292] FAULT_INJECTION: forcing a failure. [ 142.905398][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.905442][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.2.1028 Tainted: G L syzkaller #0 PREEMPT [ 142.905455][ T8292] Tainted: [L]=SOFTLOCKUP [ 142.905459][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 142.905466][ T8292] Call trace: [ 142.905469][ T8292] show_stack+0x2c/0x3c (C) [ 142.905488][ T8292] __dump_stack+0x30/0x40 [ 142.905500][ T8292] dump_stack_lvl+0xd8/0x12c [ 142.905510][ T8292] dump_stack+0x1c/0x28 [ 142.905519][ T8292] should_fail_ex+0x41c/0x590 [ 142.905532][ T8292] should_fail+0x14/0x24 [ 142.905541][ T8292] should_fail_usercopy+0x20/0x30 [ 142.905551][ T8292] _inline_copy_from_user+0x3c/0x174 [ 142.905561][ T8292] copy_msghdr_from_user+0xb8/0x194 [ 142.905570][ T8292] ___sys_sendmsg+0x14c/0x224 [ 142.905579][ T8292] __sys_sendmsg+0x158/0x204 [ 142.905587][ T8292] __arm64_sys_sendmsg+0x80/0x94 [ 142.905595][ T8292] invoke_syscall+0x98/0x244 [ 142.905606][ T8292] el0_svc_common+0xec/0x23c [ 142.905615][ T8292] do_el0_svc+0x4c/0x5c [ 142.905630][ T8292] el0_svc+0x64/0x260 [ 142.905645][ T8292] el0t_64_sync_handler+0x48/0x148 [ 142.905655][ T8292] el0t_64_sync+0x198/0x19c [ 142.993461][ T5032] IPVS: starting estimator thread 0... [ 142.995613][ T8298] IPVS: rr: FWM 3 0x00000003 - no destination available [ 143.094718][ T8299] IPVS: using max 60 ests per chain, 144000 per kthread [ 143.161292][ T8309] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 143.164455][ T8309] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 143.165091][ T8309] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 143.165745][ T8309] fuse: Bad value for 'user_id' [ 143.165754][ T8309] fuse: Bad value for 'user_id' [ 143.330642][ T8315] loop2: detected capacity change from 0 to 512 [ 143.336337][ T8315] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1035: inode has both inline data and extents flags [ 143.336587][ T8315] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.339342][ T8315] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1035: couldn't read orphan inode 15 (err -117) [ 143.339383][ T8315] loop2: lost filesystem error report for type 5 error -117 [ 143.342261][ T8315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.403684][ T30] kauditd_printk_skb: 14068 callbacks suppressed [ 143.405908][ T30] audit: type=1326 audit(143.370:14243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.0.1009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4977fe8 code=0x7fc00000 [ 143.417391][ T5032] usb 1-1: USB disconnect, device number 4 [ 144.024454][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.072721][ T8334] IPVS: rr: FWM 3 0x00000003 - no destination available [ 144.076846][ T8335] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1042'. [ 144.091904][ T8338] overlayfs: failed to clone upperpath [ 144.156776][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 144.198478][ T8347] loop1: detected capacity change from 0 to 512 [ 144.200092][ T8347] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1046: corrupted in-inode xattr: invalid ea_ino [ 144.200334][ T8347] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.200465][ T8347] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1046: couldn't read orphan inode 15 (err -117) [ 144.200479][ T8347] loop1: lost filesystem error report for type 5 error -117 [ 144.201033][ T8347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.230811][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.597723][ T8372] loop5: detected capacity change from 0 to 256 [ 145.007462][ T8377] fuse: fd is not a fuse device [ 145.010933][ T8377] overlayfs: failed to resolve './bus': -2 [ 145.190225][ T8389] fuse: fd is not a fuse device [ 145.833683][ T8405] loop5: detected capacity change from 0 to 512 [ 145.836093][ T8405] EXT4-fs: inline encryption not supported [ 145.841043][ T8405] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 145.844915][ T8405] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1069: invalid indirect mapped block 2683928664 (level 1) [ 145.844962][ T8405] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 145.848585][ T8405] EXT4-fs (loop5): 1 truncate cleaned up [ 145.851822][ T8405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.036783][ T8408] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1803188595: comm syz.5.1069: invalid block [ 146.040562][ T8408] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1069: invalid indirect mapped block 2054779762 (level 0) [ 146.122042][ T8410] loop1: detected capacity change from 0 to 512 [ 146.138579][ T8410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.159252][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.200841][ T8414] loop1: detected capacity change from 0 to 128 [ 146.204928][ T8414] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 146.204954][ T8414] FAT-fs (loop1): Can't find a valid FAT filesystem [ 146.344167][ T8427] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1077'. [ 146.779413][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.872650][ T8436] loop5: detected capacity change from 0 to 2048 [ 146.924729][ T8436] Alternate GPT is invalid, using primary GPT. [ 146.926453][ T8436] loop5: p1 p2 p3 [ 146.984743][ T866] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 147.120457][ T8444] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 147.127038][ T8444] bond5: entered promiscuous mode [ 147.127234][ T8444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.132508][ T8444] ipvlan2: entered allmulticast mode [ 147.132542][ T8444] bond5: entered allmulticast mode [ 147.139545][ T8444] bond5: (slave bridge1): making interface the new active one [ 147.139578][ T8444] bridge1: entered promiscuous mode [ 147.139770][ T8444] bridge1: entered allmulticast mode [ 147.141031][ T8444] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 147.166366][ T8447] loop1: detected capacity change from 0 to 1024 [ 147.168329][ T8447] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 147.168365][ T8447] EXT4-fs (loop1): group descriptors corrupted! [ 147.169678][ T8447] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 147.203896][ T8449] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1084'. [ 147.353054][ T8449] netlink: 'syz.4.1084': attribute type 17 has an invalid length. [ 147.353084][ T8449] netlink: 'syz.4.1084': attribute type 16 has an invalid length. [ 147.353309][ T8449] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1084'. [ 147.698355][ T8481] loop1: detected capacity change from 0 to 1024 [ 147.721426][ T8481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.257884][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 148.257917][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 148.476417][ T8513] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 148.498708][ T8515] fuse: fd is not a fuse device [ 148.533565][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.553991][ T8519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1109'. [ 148.581597][ T8524] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 148.629670][ T8530] loop1: detected capacity change from 0 to 512 [ 148.634689][ T8530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.636987][ T8530] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 148.653634][ T8532] i2c i2c-0: new_device: Can't parse I2C address [ 149.294778][ T8551] sit0: entered promiscuous mode [ 149.294877][ T8551] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 149.294887][ T8551] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1121'. [ 149.381972][ T8556] syzkaller0: entered promiscuous mode [ 149.382002][ T8556] syzkaller0: entered allmulticast mode [ 149.543542][ T8566] team0: Device vxcan3 is of different type [ 150.106479][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 150.170176][ T8583] loop2: detected capacity change from 0 to 8 [ 150.174486][ T8583] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 150.174516][ T8583] unable to read xattr id index table [ 150.180864][ T8583] SQUASHFS error: zlib decompression failed, data probably corrupt [ 150.180898][ T8583] SQUASHFS error: Failed to read block 0x9b: -5 [ 150.180907][ T8583] SQUASHFS error: Unable to read metadata cache entry [99] [ 150.180915][ T8583] SQUASHFS error: Unable to read inode 0x127 [ 150.623096][ T8622] fuse: Bad value for 'fd' [ 150.921117][ T8627] loop1: detected capacity change from 0 to 8192 [ 150.967202][ T8627] loop1: p1 p2 p4[EZD] [ 150.969464][ T8627] loop1: p4 start 201326592 is beyond EOD, truncated [ 151.043700][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 151.063222][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 151.066894][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 151.811589][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 151.880024][ T8642] team0: Port device team_slave_0 removed [ 151.884350][ T8646] loop5: detected capacity change from 0 to 2048 [ 151.896025][ T8646] EXT4-fs: Ignoring removed oldalloc option [ 151.977108][ T8646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.050042][ T8643] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 152.055829][ T8643] EXT4-fs (loop5): Remounting filesystem read-only [ 152.056000][ T8643] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 152.083402][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.181808][ T8666] loop1: detected capacity change from 0 to 4096 [ 152.185503][ T8666] EXT4-fs (loop1): Test dummy encryption mode enabled [ 152.187724][ T8666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.272462][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.339223][ T8677] loop5: detected capacity change from 0 to 256 [ 153.253059][ T8692] syzkaller0: entered promiscuous mode [ 153.253097][ T8692] syzkaller0: entered allmulticast mode [ 153.521222][ T8701] loop1: detected capacity change from 0 to 256 [ 153.521717][ T8701] vfat: Deprecated parameter 'posix' [ 153.521742][ T8701] FAT-fs: "posix" option is obsolete, not supported now [ 153.635764][ T4724] Bluetooth: hci4: command 0x0406 tx timeout [ 153.635812][ T4724] Bluetooth: hci2: command 0x0406 tx timeout [ 154.145454][ T4730] Bluetooth: hci1: command 0x0406 tx timeout [ 154.296685][ T8710] netlink: 'syz.5.1179': attribute type 5 has an invalid length. [ 154.300007][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'. [ 154.470028][ T8719] loop1: detected capacity change from 0 to 1024 [ 154.595172][ T8719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.072867][ T8744] netlink: 'syz.2.1188': attribute type 13 has an invalid length. [ 156.105052][ T8744] sch_tbf: burst 408 is lower than device syzkaller0 mtu (1500) ! [ 156.109594][ T8743] loop5: detected capacity change from 0 to 4096 [ 156.133247][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.162782][ T8743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.174623][ T8743] ucma_write: process 252 (syz.5.1189) changed security contexts after opening file descriptor, this is not allowed. [ 156.216925][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.267263][ T8757] syzkaller0: entered promiscuous mode [ 156.267297][ T8757] syzkaller0: entered allmulticast mode [ 156.312372][ T8765] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.363171][ T8766] tipc: Resetting bearer [ 156.367733][ T8766] tipc: Disabling bearer [ 156.370242][ T8766] team0 (unregistering): Failed to send port change of device vlan0 via netlink (err -105) [ 156.370409][ T8766] team0 (unregistering): Port device vlan0 removed [ 156.424387][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 157.645480][ T30] audit: type=1326 audit(157.620:14244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.656023][ T30] audit: type=1326 audit(157.620:14245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.874522][ T30] audit: type=1326 audit(157.840:14246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.4.1210" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.874864][ T30] audit: type=1326 audit(157.840:14247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.4.1210" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.875608][ T30] audit: type=1326 audit(157.850:14248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.876029][ T30] audit: type=1326 audit(157.850:14249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.876517][ T30] audit: type=1326 audit(157.850:14250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.876534][ T30] audit: type=1326 audit(157.850:14251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.4.1210" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.876694][ T30] audit: type=1326 audit(157.850:14252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.876867][ T30] audit: type=1326 audit(157.850:14253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.4.1210" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7ffc0000 [ 157.959823][ T8817] syz_tun: entered allmulticast mode [ 157.968023][ T8816] syz_tun: left allmulticast mode [ 158.014835][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 158.017651][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 158.587465][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 158.592268][ T8833] xt_hashlimit: size too large, truncated to 1048576 [ 158.609533][ T8835] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 158.613670][ T8835] loop5: detected capacity change from 0 to 256 [ 158.787896][ T8852] ip6_vti0: entered allmulticast mode [ 158.815139][ T8851] ip6_vti0: left allmulticast mode [ 158.912394][ T8855] syzkaller0: entered promiscuous mode [ 158.912432][ T8855] syzkaller0: entered allmulticast mode [ 159.370145][ T8886] loop2: detected capacity change from 0 to 4096 [ 159.380407][ T8886] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.390723][ T8886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.415794][ T8886] FAULT_INJECTION: forcing a failure. [ 159.415794][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 159.415835][ T8886] CPU: 1 UID: 0 PID: 8886 Comm: syz.2.1234 Tainted: G L syzkaller #0 PREEMPT [ 159.415853][ T8886] Tainted: [L]=SOFTLOCKUP [ 159.415858][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 159.415863][ T8886] Call trace: [ 159.415867][ T8886] show_stack+0x2c/0x3c (C) [ 159.415888][ T8886] __dump_stack+0x30/0x40 [ 159.415898][ T8886] dump_stack_lvl+0xd8/0x12c [ 159.415908][ T8886] dump_stack+0x1c/0x28 [ 159.415917][ T8886] should_fail_ex+0x41c/0x590 [ 159.415928][ T8886] should_failslab+0xc4/0x120 [ 159.415936][ T8886] kmem_cache_alloc_noprof+0x94/0x5d8 [ 159.415945][ T8886] __es_insert_extent+0x1f4/0xa9c [ 159.415954][ T8886] ext4_es_cache_extent+0x228/0x7f8 [ 159.415962][ T8886] ext4_ext_map_blocks+0xb70/0x4954 [ 159.415970][ T8886] ext4_map_query_blocks+0x110/0x79c [ 159.415977][ T8886] ext4_map_blocks+0x3e4/0xc08 [ 159.415983][ T8886] _ext4_get_block+0x194/0x3e8 [ 159.415990][ T8886] ext4_get_block+0x4c/0x60 [ 159.415997][ T8886] ext4_block_write_begin+0x648/0x1070 [ 159.416004][ T8886] ext4_write_begin+0x8a0/0x1510 [ 159.416012][ T8886] generic_perform_write+0x23c/0x7a4 [ 159.416020][ T8886] ext4_buffered_write_iter+0xd0/0x2ec [ 159.416029][ T8886] ext4_file_write_iter+0x1dc/0x134c [ 159.416037][ T8886] do_iter_readv_writev+0x48c/0x6f8 [ 159.416045][ T8886] vfs_iter_write+0x1f8/0x4d4 [ 159.416051][ T8886] backing_file_write_iter+0x454/0x6d4 [ 159.416062][ T8886] ovl_write_iter+0x218/0x2c0 [ 159.416071][ T8886] do_iter_readv_writev+0x48c/0x6f8 [ 159.416078][ T8886] vfs_writev+0x2a8/0x630 [ 159.416085][ T8886] do_writev+0x134/0x2a8 [ 159.416092][ T8886] __arm64_sys_writev+0x80/0x94 [ 159.416098][ T8886] invoke_syscall+0x98/0x244 [ 159.416108][ T8886] el0_svc_common+0xec/0x23c [ 159.416118][ T8886] do_el0_svc+0x4c/0x5c [ 159.416127][ T8886] el0_svc+0x64/0x260 [ 159.416137][ T8886] el0t_64_sync_handler+0x48/0x148 [ 159.416146][ T8886] el0t_64_sync+0x198/0x19c [ 159.485037][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.552212][ T8895] loop2: detected capacity change from 0 to 1024 [ 159.561344][ T8895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.472903][ T8903] syzkaller0: entered promiscuous mode [ 160.475253][ T8903] syzkaller0: entered allmulticast mode [ 160.597535][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.832992][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 160.903882][ T8926] netlink: 'syz.5.1243': attribute type 22 has an invalid length. [ 160.903917][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1243'. [ 160.936234][ T8928] netlink: 'syz.5.1243': attribute type 22 has an invalid length. [ 160.937916][ T8928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1243'. [ 161.254489][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1247'. [ 161.649080][ T8937] binder: 8936:8937 tried to acquire reference to desc 0, got 1 instead [ 161.649364][ T8937] binder: 8936:8937 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 161.649376][ T8937] binder: 8937 RLIMIT_NICE not set [ 161.649388][ T8937] binder: undelivered transaction 31, put_user failed [ 161.649401][ T8937] binder: 8936:8937 ioctl c0306201 20000180 returned -14 [ 161.649583][ T4807] binder: undelivered TRANSACTION_COMPLETE [ 161.732927][ T8943] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 161.738086][ T8943] netlink: 147896 bytes leftover after parsing attributes in process `syz.2.1252'. [ 161.739959][ T8943] netlink: zone id is out of range [ 161.741150][ T8943] netlink: zone id is out of range [ 161.742297][ T8943] netlink: zone id is out of range [ 161.743660][ T8943] netlink: zone id is out of range [ 161.745103][ T8943] netlink: zone id is out of range [ 161.746293][ T8943] netlink: zone id is out of range [ 161.747954][ T8943] netlink: zone id is out of range [ 161.749080][ T8943] netlink: zone id is out of range [ 161.750338][ T8943] netlink: zone id is out of range [ 161.751461][ T8943] netlink: zone id is out of range [ 161.778796][ T8941] loop1: detected capacity change from 0 to 8192 [ 161.791807][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 162.230141][ T8964] bond6: option resend_igmp: invalid value (4099) [ 162.230178][ T8964] bond6: option resend_igmp: allowed values 0 - 255 [ 162.236179][ T8964] bond6 (unregistering): Released all slaves [ 162.269053][ T8967] syzkaller0: entered promiscuous mode [ 162.269146][ T8967] syzkaller0: entered allmulticast mode [ 162.464230][ T8972] loop1: detected capacity change from 0 to 8192 [ 162.467023][ T8972] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.904823][ T8983] SET target dimension over the limit! [ 163.918843][ T9023] loop5: detected capacity change from 0 to 1024 [ 163.945013][ T9023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.964693][ T4720] Bluetooth: hci1: command 0x0406 tx timeout [ 164.020024][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 164.021490][ T30] audit: type=1326 audit(163.990:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9001 comm="syz.4.1270" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d377fe8 code=0x7fc00000 [ 164.296698][ T9036] netlink: 'syz.4.1278': attribute type 1 has an invalid length. [ 164.299163][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1278'. [ 165.533524][ T9052] loop2: detected capacity change from 0 to 8192 [ 165.545622][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.618714][ T9052] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.725208][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 165.804809][ T9071] IPVS: Unknown mcast interface: pimreg0 [ 165.963250][ T9076] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 166.023915][ T9076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.026300][ T9076] bond3: (slave bond4): making interface the new active one [ 166.026462][ T9076] bond3: (slave bond4): Enslaving as an active interface with an up link [ 166.042379][ T866] IPVS: starting estimator thread 0... [ 166.056283][ T9076] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 166.059642][ T9076] bond5 (unregistering): Released all slaves [ 166.083899][ T9087] loop5: detected capacity change from 0 to 1024 [ 166.093491][ T9085] loop2: detected capacity change from 0 to 512 [ 166.095458][ T9085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.095474][ T9085] EXT4-fs (loop2): bad geometry: first data block 2147483649 is beyond end of filesystem (256) [ 166.128221][ T9087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.134652][ T9083] IPVS: using max 44 ests per chain, 105600 per kthread [ 166.369827][ T9109] loop1: detected capacity change from 0 to 8192 [ 166.427012][ T9109] loop1: p1 p2 p3 [ 166.427978][ T9109] loop1: partition table partially beyond EOD, truncated [ 166.428609][ T9109] loop1: p1 start 51379968 is beyond EOD, truncated [ 166.433968][ T9109] loop1: p3 size 100663552 extends beyond EOD, truncated [ 166.528578][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 166.530902][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 166.851635][ T9117] loop2: detected capacity change from 0 to 256 [ 166.863302][ T9117] FAULT_INJECTION: forcing a failure. [ 166.863302][ T9117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.863345][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.2.1303 Tainted: G L syzkaller #0 PREEMPT [ 166.863359][ T9117] Tainted: [L]=SOFTLOCKUP [ 166.863363][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 166.863370][ T9117] Call trace: [ 166.863374][ T9117] show_stack+0x2c/0x3c (C) [ 166.863396][ T9117] __dump_stack+0x30/0x40 [ 166.863409][ T9117] dump_stack_lvl+0xd8/0x12c [ 166.863419][ T9117] dump_stack+0x1c/0x28 [ 166.863429][ T9117] should_fail_ex+0x41c/0x590 [ 166.863442][ T9117] should_fail_alloc_page+0xec/0x10c [ 166.863451][ T9117] prepare_alloc_pages+0x194/0x4a4 [ 166.863460][ T9117] __alloc_frozen_pages_noprof+0x134/0x320 [ 166.863468][ T9117] alloc_pages_mpol+0x1ec/0x3c0 [ 166.863477][ T9117] folio_alloc_mpol_noprof+0x4c/0x248 [ 166.863485][ T9117] vma_alloc_folio_noprof+0x100/0x1dc [ 166.863494][ T9117] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 166.863504][ T9117] folio_prealloc+0x3c/0x1b0 [ 166.863511][ T9117] do_pte_missing+0x1bcc/0x2a24 [ 166.863519][ T9117] handle_mm_fault+0x15a4/0x253c [ 166.863526][ T9117] do_page_fault+0x4b0/0xb88 [ 166.863535][ T9117] do_translation_fault+0xc4/0x114 [ 166.863544][ T9117] do_mem_abort+0x70/0x194 [ 166.863552][ T9117] el1_abort+0x50/0x74 [ 166.863563][ T9117] el1h_64_sync_handler+0xdc/0x130 [ 166.863572][ T9117] el1h_64_sync+0x6c/0x70 [ 166.863579][ T9117] filldir64+0x280/0x620 (P) [ 166.863590][ T9117] __fat_readdir+0xd6c/0x1210 [ 166.863598][ T9117] fat_readdir+0x54/0x64 [ 166.863604][ T9117] iterate_dir+0x290/0x458 [ 166.863614][ T9117] __arm64_sys_getdents64+0x11c/0x308 [ 166.863624][ T9117] invoke_syscall+0x98/0x244 [ 166.863634][ T9117] el0_svc_common+0xec/0x23c [ 166.863651][ T9117] do_el0_svc+0x4c/0x5c [ 166.863660][ T9117] el0_svc+0x64/0x260 [ 166.863670][ T9117] el0t_64_sync_handler+0x48/0x148 [ 166.863679][ T9117] el0t_64_sync+0x198/0x19c [ 167.158347][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.213544][ T9121] syzkaller0: entered promiscuous mode [ 167.213584][ T9121] syzkaller0: entered allmulticast mode [ 167.217459][ T9123] binder: 9122:9123 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 167.217486][ T9123] binder: 9123 RLIMIT_NICE not set [ 167.541984][ T9127] loop1: detected capacity change from 0 to 256 [ 167.624472][ T9131] netlink: 'syz.1.1309': attribute type 21 has an invalid length. [ 167.630347][ T9131] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1309'. [ 167.748027][ T9133] fuse: fd is not a fuse device [ 168.066517][ T9140] loop5: detected capacity change from 0 to 4096 [ 168.073680][ T9140] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.079516][ T9140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.102628][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.109883][ T9149] loop2: detected capacity change from 0 to 128 [ 168.117663][ T9149] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.169110][ T4960] Bluetooth: hci5: Frame reassembly failed (-84) [ 168.173371][ T4960] Bluetooth: hci6: Frame reassembly failed (-84) [ 168.189926][ T9161] binder: 9151:9161 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 168.192676][ T9161] binder: 9161 RLIMIT_NICE not set [ 168.243392][ T9164] binder: 9151:9164 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 168.850622][ T9179] loop1: detected capacity change from 0 to 8192 [ 168.937154][ T4712] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.962792][ T9181] syzkaller0: entered promiscuous mode [ 168.962824][ T9181] syzkaller0: entered allmulticast mode [ 169.037360][ T9183] net_ratelimit: 17 callbacks suppressed [ 169.038728][ T9183] IPVS: rr: FWM 3 0x00000003 - no destination available [ 169.076435][ T9186] netlink: 532 bytes leftover after parsing attributes in process `syz.2.1329'. [ 169.241457][ T9198] syzkaller0: entered promiscuous mode [ 169.242670][ T9198] syzkaller0: entered allmulticast mode [ 169.258722][ T9200] netlink: 'syz.4.1335': attribute type 46 has an invalid length. [ 169.281619][ T9202] netlink: 'syz.4.1336': attribute type 34 has an invalid length. [ 169.281659][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 169.839906][ T9202] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 169.896228][ T9219] syzkaller0: entered promiscuous mode [ 169.898989][ T9219] syzkaller0: entered allmulticast mode [ 170.185682][ T4719] Bluetooth: hci6: command 0x1003 tx timeout [ 170.187589][ T4719] Bluetooth: hci5: command 0x1003 tx timeout [ 170.189647][ T4713] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 170.194975][ T4720] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 170.329874][ T9245] loop1: detected capacity change from 0 to 256 [ 170.460858][ T866] IPVS: starting estimator thread 0... [ 170.614819][ T9260] IPVS: using max 52 ests per chain, 124800 per kthread [ 171.342453][ T9273] syzkaller0: entered promiscuous mode [ 171.342490][ T9273] syzkaller0: entered allmulticast mode [ 171.541548][ T15] Bluetooth: hci6: Frame reassembly failed (-84) [ 172.105730][ T9312] FAULT_INJECTION: forcing a failure. [ 172.105730][ T9312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.106824][ T9312] CPU: 0 UID: 0 PID: 9312 Comm: syz.1.1373 Tainted: G L syzkaller #0 PREEMPT [ 172.106848][ T9312] Tainted: [L]=SOFTLOCKUP [ 172.106852][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 172.106857][ T9312] Call trace: [ 172.106860][ T9312] show_stack+0x2c/0x3c (C) [ 172.106881][ T9312] __dump_stack+0x30/0x40 [ 172.106892][ T9312] dump_stack_lvl+0xd8/0x12c [ 172.106902][ T9312] dump_stack+0x1c/0x28 [ 172.106911][ T9312] should_fail_ex+0x41c/0x590 [ 172.106922][ T9312] should_fail+0x14/0x24 [ 172.106932][ T9312] should_fail_usercopy+0x20/0x30 [ 172.106942][ T9312] simple_read_from_buffer+0xc4/0x238 [ 172.106952][ T9312] proc_fail_nth_read+0x1a8/0x248 [ 172.106960][ T9312] vfs_read+0x230/0x8c8 [ 172.106970][ T9312] ksys_read+0x12c/0x228 [ 172.106980][ T9312] __arm64_sys_read+0x7c/0x90 [ 172.106986][ T9312] invoke_syscall+0x98/0x244 [ 172.106996][ T9312] el0_svc_common+0xec/0x23c [ 172.107006][ T9312] do_el0_svc+0x4c/0x5c [ 172.107015][ T9312] el0_svc+0x64/0x260 [ 172.107025][ T9312] el0t_64_sync_handler+0x48/0x148 [ 172.107034][ T9312] el0t_64_sync+0x198/0x19c [ 172.139639][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 172.146899][ T9314] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.152112][ T9314] bond6 (unregistering): Released all slaves [ 172.367914][ T9329] binder: 9328:9329 tried to acquire reference to desc 0, got 1 instead [ 172.369658][ T9329] binder: 9328:9329 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 172.369695][ T9329] binder: 9329 RLIMIT_NICE not set [ 172.720157][ T9339] fuse: fd is not a fuse device [ 172.895742][ T9338] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 172.991570][ T9345] lo: Caught tx_queue_len zero misconfig [ 172.996111][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 172.996140][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'. [ 172.996437][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 172.996449][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'. [ 173.550161][ T4720] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.550510][ T4720] Bluetooth: hci6: command 0x1003 tx timeout [ 173.550554][ T4730] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 173.629030][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1393'. [ 173.884912][ T4841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 173.967052][ T9369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1395'. [ 174.093261][ T4841] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 174.093298][ T4841] usb 1-1: config 1 interface 0 has no altsetting 0 [ 174.095899][ T4841] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 174.095912][ T4841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.095921][ T4841] usb 1-1: Product: а [ 174.095927][ T4841] usb 1-1: Manufacturer: Ⰺ [ 174.095933][ T4841] usb 1-1: SerialNumber: ꛼셚㠕風今欝凜襱馯ᷡ忠ע鈖袊볡湄佮磗㤊ꗊ㪪悲릅凈 諞쵓唲懇꒐蓭䡒ᘇ㰞を痠ݡ릇౛ᔛ虛꿄쨓猌젔㤘ɜ璵齪ꎐ⛅켚㨕ᢊ貲鍃阚ˈ殏昜ퟨ袹ⳗ븵₟䎆崌ᬁ돩鳹册滊틒服穂츝썢愢摮ꋣ뀿梗쥖Ӳ贎ꍯﲎꔪ䄡ⷞ拦᪚ [ 174.114687][ T30] audit: type=1326 audit(174.070:14296): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=9381 comm="syz.2.1399" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82377fe8 code=0x0 [ 174.593360][ T9402] loop2: detected capacity change from 0 to 512 [ 174.595843][ T9402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.605860][ T9402] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1407: invalid indirect mapped block 4294967295 (level 0) [ 174.608815][ T9402] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 174.610301][ T9402] EXT4-fs (loop2): Remounting filesystem read-only [ 174.613624][ T9402] EXT4-fs (loop2): 1 orphan inode deleted [ 174.614814][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 174.614831][ C1] EXT4-fs (loop2): initial error at time 174: ext4_free_branches:1023: inode 16 [ 174.614848][ C1] EXT4-fs (loop2): last error at time 174: ext4_free_branches:1023: inode 16 [ 174.619749][ T9402] EXT4-fs (loop2): 1 truncate cleaned up [ 174.622727][ T9402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.631096][ T9402] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #2: comm syz.2.1407: directory missing '..' [ 174.663484][ T4841] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 174.676689][ T4841] usb 1-1: USB disconnect, device number 5 [ 174.685628][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.148933][ T9423] loop1: detected capacity change from 0 to 2048 [ 175.153806][ T9423] EXT4-fs: Ignoring removed oldalloc option [ 175.172270][ T9423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.191731][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.697378][ T9448] overlayfs: failed lookup in lower (newroot/117, name='bus', err=-40): overlapping layers [ 175.699581][ T9447] overlayfs: failed lookup in lower (newroot/117, name='file0', err=-40): overlapping layers [ 175.752645][ T9453] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 175.752679][ T9453] overlayfs: missing 'lowerdir' [ 175.821951][ T9464] binder: 9463:9464 tried to acquire reference to desc 0, got 1 instead [ 175.822130][ T9464] binder: 9463:9464 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 175.822142][ T9464] binder: 9464 RLIMIT_NICE not set [ 176.123128][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 176.314353][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.491501][ T24] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 176.491545][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 176.497930][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 176.497959][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.497983][ T24] usb 1-1: Product: а [ 176.497996][ T24] usb 1-1: Manufacturer: Ⰺ [ 176.498007][ T24] usb 1-1: SerialNumber: ꛼셚㠕風今欝凜襱馯ᷡ忠ע鈖袊볡湄佮磗㤊ꗊ㪪悲릅凈 諞쵓唲懇꒐蓭䡒ᘇ㰞を痠ݡ릇౛ᔛ虛꿄쨓猌젔㤘ɜ璵齪ꎐ⛅켚㨕ᢊ貲鍃阚ˈ殏昜ퟨ袹ⳗ븵₟䎆崌ᬁ돩鳹册滊틒服穂츝썢愢摮ꋣ뀿梗쥖Ӳ贎ꍯﲎꔪ䄡ⷞ拦᪚ [ 177.040262][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 177.050621][ T24] usb 1-1: USB disconnect, device number 6 [ 177.055351][ T9506] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 177.086502][ T9510] syz_tun: entered allmulticast mode [ 177.124954][ T9509] syz_tun: left allmulticast mode [ 177.873868][ T9523] binder: 9522:9523 got transaction to invalid handle, 1 [ 177.873903][ T9523] binder: 9522:9523 cannot find target node [ 177.873932][ T9523] binder: 9522:9523 transaction async to 0:0 failed 46/29201/-22, code 0 size 72-0 line 3252 [ 177.874269][ T9523] binder: 9522:9523 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 177.874282][ T9523] binder: 9523 RLIMIT_NICE not set [ 178.359085][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1460'. [ 178.478428][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.480644][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.703693][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 178.834447][ T9561] syzkaller0: entered promiscuous mode [ 178.834478][ T9561] syzkaller0: entered allmulticast mode [ 179.008955][ T9576] loop1: detected capacity change from 0 to 4096 [ 179.013860][ T9576] EXT4-fs (loop1): Test dummy encryption mode enabled [ 179.020386][ T9576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.038713][ T9576] FAULT_INJECTION: forcing a failure. [ 179.038713][ T9576] name failslab, interval 1, probability 0, space 0, times 0 [ 179.042185][ T9576] CPU: 1 UID: 0 PID: 9576 Comm: syz.1.1474 Tainted: G L syzkaller #0 PREEMPT [ 179.042215][ T9576] Tainted: [L]=SOFTLOCKUP [ 179.042219][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 179.042225][ T9576] Call trace: [ 179.042229][ T9576] show_stack+0x2c/0x3c (C) [ 179.042257][ T9576] __dump_stack+0x30/0x40 [ 179.042270][ T9576] dump_stack_lvl+0xd8/0x12c [ 179.042281][ T9576] dump_stack+0x1c/0x28 [ 179.042290][ T9576] should_fail_ex+0x41c/0x590 [ 179.042301][ T9576] should_failslab+0xc4/0x120 [ 179.042310][ T9576] __kmalloc_noprof+0x108/0x6b8 [ 179.042318][ T9576] ext4_find_extent+0x134/0x74c [ 179.042326][ T9576] ext4_ext_map_blocks+0x24c/0x4954 [ 179.042334][ T9576] ext4_map_create_blocks+0x100/0x4a0 [ 179.042342][ T9576] ext4_map_blocks+0x520/0xc08 [ 179.042348][ T9576] _ext4_get_block+0x194/0x3e8 [ 179.042355][ T9576] ext4_get_block+0x4c/0x60 [ 179.042362][ T9576] ext4_block_write_begin+0x648/0x1070 [ 179.042369][ T9576] ext4_write_begin+0x8a0/0x1510 [ 179.042377][ T9576] generic_perform_write+0x23c/0x7a4 [ 179.042385][ T9576] ext4_buffered_write_iter+0xd0/0x2ec [ 179.042394][ T9576] ext4_file_write_iter+0x1dc/0x134c [ 179.042402][ T9576] do_iter_readv_writev+0x48c/0x6f8 [ 179.042410][ T9576] vfs_iter_write+0x1f8/0x4d4 [ 179.042417][ T9576] backing_file_write_iter+0x454/0x6d4 [ 179.042428][ T9576] ovl_write_iter+0x218/0x2c0 [ 179.042437][ T9576] do_iter_readv_writev+0x48c/0x6f8 [ 179.042444][ T9576] vfs_writev+0x2a8/0x630 [ 179.042451][ T9576] do_writev+0x134/0x2a8 [ 179.042458][ T9576] __arm64_sys_writev+0x80/0x94 [ 179.042464][ T9576] invoke_syscall+0x98/0x244 [ 179.042474][ T9576] el0_svc_common+0xec/0x23c [ 179.042484][ T9576] do_el0_svc+0x4c/0x5c [ 179.042493][ T9576] el0_svc+0x64/0x260 [ 179.042503][ T9576] el0t_64_sync_handler+0x48/0x148 [ 179.042512][ T9576] el0t_64_sync+0x198/0x19c [ 179.111119][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.391089][ T9592] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 179.507732][ T9602] loop1: detected capacity change from 0 to 8192 [ 179.512335][ T9602] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.668057][ T9607] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.868404][ T9616] binder: 9615:9616 got transaction to invalid handle, 1 [ 179.868439][ T9616] binder: 9615:9616 cannot find target node [ 179.868468][ T9616] binder: 9615:9616 transaction async to 0:0 failed 50/29201/-22, code 0 size 72-0 line 3252 [ 179.868634][ T9616] binder: 9615:9616 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 179.868651][ T9616] binder: 9616 RLIMIT_NICE not set [ 180.010228][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.012306][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.682913][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 180.719810][ T9652] netlink: 'syz.0.1503': attribute type 3 has an invalid length. [ 181.278024][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 181.286365][ T9666] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.391329][ T9670] loop2: detected capacity change from 0 to 8192 [ 181.444393][ T9670] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.664230][ T9683] binder: tried to use weak ref as strong ref [ 181.665726][ T9683] binder: 9679:9683 Acquire 1 refcount change on invalid ref 0 ret -22 [ 181.668388][ T9683] binder: 9679:9683 got transaction to invalid handle, 1 [ 181.669879][ T9683] binder: 9679:9683 cannot find target node [ 181.942478][ T9683] binder: 9679:9683 transaction async to 0:0 failed 53/29201/-22, code 0 size 72-0 line 3252 [ 181.955996][ T9686] binder: 9679:9686 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 181.958996][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.995002][ T9688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.997062][ T9688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.526006][ T9706] input: syz0 as /devices/virtual/input/input10 [ 182.567116][ T9706] netlink: 147896 bytes leftover after parsing attributes in process `syz.2.1519'. [ 182.567165][ T9706] netlink: zone id is out of range [ 182.567175][ T9706] netlink: zone id is out of range [ 182.567234][ T9706] netlink: zone id is out of range [ 182.567239][ T9706] netlink: zone id is out of range [ 182.567244][ T9706] netlink: zone id is out of range [ 182.567249][ T9706] netlink: zone id is out of range [ 182.567253][ T9706] netlink: zone id is out of range [ 182.567258][ T9706] netlink: zone id is out of range [ 182.567280][ T9706] netlink: zone id is out of range [ 182.651664][ T9721] xt_TCPMSS: Only works on TCP SYN packets [ 182.652130][ T9723] binder: 9722:9723 cannot find target node [ 182.773617][ T9730] netlink: 'syz.1.1528': attribute type 10 has an invalid length. [ 182.773829][ T9730] veth0_vlan: left promiscuous mode [ 182.774396][ T9730] team0: Device veth0_vlan failed to register rx_handler [ 183.291868][ T9752] netlink: 'syz.5.1533': attribute type 39 has an invalid length. [ 183.466145][ T9759] loop2: detected capacity change from 0 to 4096 [ 183.467727][ T9759] ext2: Unknown parameter 'fsmagic' [ 183.592993][ T9765] binder_user_error: 6 callbacks suppressed [ 183.593038][ T9765] binder: tried to use weak ref as strong ref [ 183.593047][ T9765] binder: 9764:9765 Acquire 1 refcount change on invalid ref 0 ret -22 [ 183.593232][ T9765] binder: 9764:9765 got transaction to invalid handle, 1 [ 183.593241][ T9765] binder_debug: 2 callbacks suppressed [ 183.593246][ T9765] binder: 9764:9765 cannot find target node [ 183.593259][ T9765] binder: 9764:9765 transaction async to 0:0 failed 59/29201/-22, code 0 size 72-0 line 3252 [ 183.598621][ T9765] binder: 9764:9765 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 183.598642][ T9765] binder: 9765 RLIMIT_NICE not set [ 183.600250][ T4807] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.630712][ T9767] FAULT_INJECTION: forcing a failure. [ 183.630712][ T9767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.633701][ T9767] CPU: 1 UID: 0 PID: 9767 Comm: syz.1.1539 Tainted: G L syzkaller #0 PREEMPT [ 183.633720][ T9767] Tainted: [L]=SOFTLOCKUP [ 183.633724][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 183.633729][ T9767] Call trace: [ 183.633733][ T9767] show_stack+0x2c/0x3c (C) [ 183.633755][ T9767] __dump_stack+0x30/0x40 [ 183.633766][ T9767] dump_stack_lvl+0xd8/0x12c [ 183.633776][ T9767] dump_stack+0x1c/0x28 [ 183.633786][ T9767] should_fail_ex+0x41c/0x590 [ 183.633797][ T9767] should_fail+0x14/0x24 [ 183.633806][ T9767] should_fail_usercopy+0x20/0x30 [ 183.633817][ T9767] _inline_copy_from_user+0x3c/0x174 [ 183.633827][ T9767] copy_msghdr_from_user+0xb8/0x194 [ 183.633836][ T9767] ___sys_sendmsg+0x14c/0x224 [ 183.633845][ T9767] __sys_sendmsg+0x158/0x204 [ 183.633853][ T9767] __arm64_sys_sendmsg+0x80/0x94 [ 183.633861][ T9767] invoke_syscall+0x98/0x244 [ 183.633871][ T9767] el0_svc_common+0xec/0x23c [ 183.633881][ T9767] do_el0_svc+0x4c/0x5c [ 183.633890][ T9767] el0_svc+0x64/0x260 [ 183.633900][ T9767] el0t_64_sync_handler+0x48/0x148 [ 183.633909][ T9767] el0t_64_sync+0x198/0x19c [ 184.937412][ T9826] loop2: detected capacity change from 0 to 8192 [ 184.938229][ T9826] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.952627][ T9825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1558'. [ 185.124146][ T9834] fuse: Bad value for 'fd' [ 185.186911][ T9837] binder: 9836:9837 ioctl 4018620d 0 returned -22 [ 185.189299][ T9837] binder: 9836:9837 ioctl c0306201 0 returned -14 [ 187.790928][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.884825][ T9896] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1585'. [ 187.976884][ T9901] binder: tried to use weak ref as strong ref [ 187.976917][ T9901] binder: 9900:9901 Acquire 1 refcount change on invalid ref 0 ret -22 [ 187.977087][ T9901] binder: 9900:9901 got transaction to invalid handle, 1 [ 187.977096][ T9901] binder: 9900:9901 cannot find target node [ 187.977109][ T9901] binder: 9900:9901 transaction async to 0:0 failed 62/29201/-22, code 0 size 72-0 line 3252 [ 187.977295][ T4841] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.022077][ T9907] loop1: detected capacity change from 0 to 512 [ 188.022474][ T9907] EXT4-fs: quotafile must be on filesystem root [ 188.023720][ T9904] loop5: detected capacity change from 0 to 8192 [ 188.050884][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 188.066366][ T9904] loop5: p1 p2 p3 [ 188.066400][ T9904] loop5: partition table partially beyond EOD, truncated [ 188.066489][ T9904] loop5: p1 start 51379968 is beyond EOD, truncated [ 188.066954][ T9904] loop5: p3 size 100663552 extends beyond EOD, truncated [ 188.120197][ T9911] lo: Caught tx_queue_len zero misconfig [ 188.120319][ T9911] sch_fq: defrate 0 ignored. [ 188.195039][ T9916] FAULT_INJECTION: forcing a failure. [ 188.195039][ T9916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.197591][ T9916] CPU: 1 UID: 0 PID: 9916 Comm: syz.5.1593 Tainted: G L syzkaller #0 PREEMPT [ 188.197610][ T9916] Tainted: [L]=SOFTLOCKUP [ 188.197614][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 188.197620][ T9916] Call trace: [ 188.197624][ T9916] show_stack+0x2c/0x3c (C) [ 188.197649][ T9916] __dump_stack+0x30/0x40 [ 188.197663][ T9916] dump_stack_lvl+0xd8/0x12c [ 188.197675][ T9916] dump_stack+0x1c/0x28 [ 188.197686][ T9916] should_fail_ex+0x41c/0x590 [ 188.197698][ T9916] should_fail+0x14/0x24 [ 188.197708][ T9916] should_fail_usercopy+0x20/0x30 [ 188.197719][ T9916] _inline_copy_from_user+0x3c/0x174 [ 188.197727][ T9916] kstrtouint_from_user+0xcc/0x174 [ 188.197735][ T9916] proc_fail_nth_write+0x9c/0x234 [ 188.197743][ T9916] vfs_write+0x2a4/0xa0c [ 188.197754][ T9916] ksys_write+0x12c/0x228 [ 188.197760][ T9916] __arm64_sys_write+0x7c/0x90 [ 188.197767][ T9916] invoke_syscall+0x98/0x244 [ 188.197777][ T9916] el0_svc_common+0xec/0x23c [ 188.197787][ T9916] do_el0_svc+0x4c/0x5c [ 188.197796][ T9916] el0_svc+0x64/0x260 [ 188.197806][ T9916] el0t_64_sync_handler+0x48/0x148 [ 188.197816][ T9916] el0t_64_sync+0x198/0x19c [ 188.228756][ T9914] loop2: detected capacity change from 0 to 4096 [ 188.351393][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 188.354253][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 188.451402][ T9927] fuse: Unknown parameter '0x0000000000000003' [ 188.600039][ T9937] binder: tried to use weak ref as strong ref [ 188.601361][ T9937] binder: 9936:9937 Acquire 1 refcount change on invalid ref 0 ret -22 [ 188.603244][ T9937] binder: 9936:9937 got transaction to invalid handle, 1 [ 188.604710][ T9937] binder: 9936:9937 cannot find target node [ 188.604739][ T9937] binder: 9936:9937 transaction async to 0:0 failed 65/29201/-22, code 0 size 72-0 line 3252 [ 188.605516][ T4807] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.695723][ T9944] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 188.695744][ T9944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.700613][ T9944] vhci_hcd vhci_hcd.0: Device attached [ 188.702889][ T9945] vhci_hcd: connection closed [ 188.704083][ T1199] vhci_hcd vhci_hcd.5: stop threads [ 188.704116][ T1199] vhci_hcd vhci_hcd.5: release socket [ 188.704133][ T1199] vhci_hcd vhci_hcd.5: disconnect device [ 189.015683][ T9955] tipc: Cannot configure node identity twice [ 190.099357][ T9965] fuse: Unknown parameter '0x0000000000000003' [ 190.167393][ T9963] mmap: syz.0.1605 (9963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.175652][ T9973] FAULT_INJECTION: forcing a failure. [ 190.175652][ T9973] name failslab, interval 1, probability 0, space 0, times 0 [ 190.175689][ T9973] CPU: 1 UID: 0 PID: 9973 Comm: syz.1.1608 Tainted: G L syzkaller #0 PREEMPT [ 190.175706][ T9973] Tainted: [L]=SOFTLOCKUP [ 190.175711][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 190.175717][ T9973] Call trace: [ 190.175721][ T9973] show_stack+0x2c/0x3c (C) [ 190.175743][ T9973] __dump_stack+0x30/0x40 [ 190.175754][ T9973] dump_stack_lvl+0xd8/0x12c [ 190.175764][ T9973] dump_stack+0x1c/0x28 [ 190.175773][ T9973] should_fail_ex+0x41c/0x590 [ 190.175784][ T9973] should_failslab+0xc4/0x120 [ 190.175793][ T9973] __kvmalloc_node_noprof+0x160/0x7d8 [ 190.175801][ T9973] vmemdup_user+0x38/0xe0 [ 190.175810][ T9973] map_get_next_key+0x1a0/0x590 [ 190.175818][ T9973] __sys_bpf+0x4b4/0x8c8 [ 190.175825][ T9973] __arm64_sys_bpf+0xc8/0xe4 [ 190.175835][ T9973] invoke_syscall+0x98/0x244 [ 190.175845][ T9973] el0_svc_common+0xec/0x23c [ 190.175854][ T9973] do_el0_svc+0x4c/0x5c [ 190.175864][ T9973] el0_svc+0x64/0x260 [ 190.175874][ T9973] el0t_64_sync_handler+0x48/0x148 [ 190.175883][ T9973] el0t_64_sync+0x198/0x19c [ 190.459055][ T9992] syzkaller0: entered promiscuous mode [ 190.465059][ T9992] syzkaller0: entered allmulticast mode [ 191.349536][T10004] fuse: Unknown parameter '0x0000000000000003' [ 192.149981][T10010] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1622'. [ 192.214507][T10012] loop5: detected capacity change from 0 to 128 [ 192.221385][T10012] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.258808][ T6922] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.315616][T10018] loop2: detected capacity change from 0 to 128 [ 192.317524][T10018] FAT-fs (loop2): data area starts beyond volume (36 > 6) [ 192.317557][T10018] FAT-fs (loop2): Can't find a valid FAT filesystem [ 192.964116][T10037] fuse: Unknown parameter '0x0000000000000003' [ 194.534930][T10060] overlayfs: missing 'lowerdir' [ 194.537461][T10068] syzkaller0: entered promiscuous mode [ 194.537497][T10068] syzkaller0: entered allmulticast mode [ 195.568805][T10079] fuse: Unknown parameter '0x0000000000000003' [ 196.099142][T10084] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 196.121836][T10096] syzkaller0: entered promiscuous mode [ 196.122547][T10096] syzkaller0: entered allmulticast mode [ 196.542037][T10124] loop2: detected capacity change from 0 to 8192 [ 196.942816][T10136] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 197.052173][T10144] fuse: Bad value for 'fd' [ 197.056363][T10144] fuse: Bad value for 'user_id' [ 197.056397][T10144] fuse: Bad value for 'user_id' [ 197.361804][T10157] syzkaller0: entered promiscuous mode [ 197.361844][T10157] syzkaller0: entered allmulticast mode [ 197.374438][T10171] bridge0: port 3(syz_tun) entered blocking state [ 197.375279][T10171] bridge0: port 3(syz_tun) entered disabled state [ 197.375553][T10171] syz_tun: entered allmulticast mode [ 197.376807][T10171] syz_tun: entered promiscuous mode [ 197.377143][T10171] bridge0: port 3(syz_tun) entered blocking state [ 197.377183][T10171] bridge0: port 3(syz_tun) entered forwarding state [ 197.383085][T10171] overlayfs: failed to clone upperpath [ 197.526850][T10179] loop1: detected capacity change from 0 to 8192 [ 197.818063][T10187] loop1: detected capacity change from 0 to 8192 [ 197.837814][T10187] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.118550][T10193] FAULT_INJECTION: forcing a failure. [ 198.118550][T10193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.118585][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.2.1681 Tainted: G L syzkaller #0 PREEMPT [ 198.118600][T10193] Tainted: [L]=SOFTLOCKUP [ 198.118605][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 198.118610][T10193] Call trace: [ 198.118613][T10193] show_stack+0x2c/0x3c (C) [ 198.118633][T10193] __dump_stack+0x30/0x40 [ 198.118650][T10193] dump_stack_lvl+0xd8/0x12c [ 198.118660][T10193] dump_stack+0x1c/0x28 [ 198.118670][T10193] should_fail_ex+0x41c/0x590 [ 198.118682][T10193] should_fail+0x14/0x24 [ 198.118692][T10193] should_fail_usercopy+0x20/0x30 [ 198.118702][T10193] _inline_copy_from_user+0x3c/0x188 [ 198.118711][T10193] core_sys_select+0x468/0x9e4 [ 198.118717][T10193] __arm64_sys_pselect6+0x2e8/0x394 [ 198.118724][T10193] invoke_syscall+0x98/0x244 [ 198.118737][T10193] el0_svc_common+0xec/0x23c [ 198.118747][T10193] do_el0_svc+0x4c/0x5c [ 198.118756][T10193] el0_svc+0x64/0x260 [ 198.118767][T10193] el0t_64_sync_handler+0x48/0x148 [ 198.118776][T10193] el0t_64_sync+0x198/0x19c [ 198.198147][T10195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.200973][T10195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.555481][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1685'. [ 198.559771][T10206] loop1: detected capacity change from 0 to 256 [ 198.563263][T10201] netlink: 'syz.5.1685': attribute type 1 has an invalid length. [ 198.563310][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1685'. [ 198.567360][T10201] loop5: detected capacity change from 0 to 512 [ 198.576447][T10206] vfat: Deprecated parameter 'posix' [ 198.576482][T10206] FAT-fs: "posix" option is obsolete, not supported now [ 198.593037][T10201] [ 198.594757][T10201] ====================================================== [ 198.596168][T10201] WARNING: possible circular locking dependency detected [ 198.597563][T10201] syzkaller #0 Tainted: G L [ 198.598748][T10201] ------------------------------------------------------ [ 198.600117][T10201] syz.5.1685/10201 is trying to acquire lock: [ 198.601241][T10201] ffff00010de76c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 198.603198][T10201] [ 198.603198][T10201] but task is already holding lock: [ 198.604526][T10201] ffff0000f1dd67e0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 198.606469][T10201] [ 198.606469][T10201] which lock already depends on the new lock. [ 198.606469][T10201] [ 198.608375][T10201] [ 198.608375][T10201] the existing dependency chain (in reverse order) is: [ 198.609979][T10201] [ 198.609979][T10201] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 198.611406][T10201] down_write+0x50/0xc0 [ 198.612281][T10201] ext4_destroy_inline_data+0x30/0x114 [ 198.613370][T10201] ext4_do_writepages+0x3e4/0x3bc0 [ 198.614358][T10201] ext4_writepages+0x198/0x2dc [ 198.615291][T10201] do_writepages+0x284/0x47c [ 198.616183][T10201] filemap_writeback+0x230/0x2bc [ 198.617096][T10201] file_write_and_wait_range+0xb0/0x138 [ 198.618166][T10201] mmb_fsync_noflush+0x80/0x1bc [ 198.619135][T10201] ext4_sync_file+0x37c/0xf20 [ 198.620037][T10201] vfs_fsync_range+0x120/0x140 [ 198.620937][T10201] ext4_buffered_write_iter+0x24c/0x2ec [ 198.621956][T10201] ext4_file_write_iter+0x1dc/0x134c [ 198.623021][T10201] do_iter_readv_writev+0x48c/0x6f8 [ 198.624050][T10201] vfs_writev+0x2a8/0x630 [ 198.624954][T10201] do_pwritev+0x11c/0x224 [ 198.625815][T10201] __arm64_sys_pwritev2+0xdc/0x110 [ 198.626777][T10201] invoke_syscall+0x98/0x244 [ 198.627677][T10201] el0_svc_common+0xec/0x23c [ 198.628584][T10201] do_el0_svc+0x4c/0x5c [ 198.629379][T10201] el0_svc+0x64/0x260 [ 198.630161][T10201] el0t_64_sync_handler+0x48/0x148 [ 198.631138][T10201] el0t_64_sync+0x198/0x19c [ 198.632000][T10201] [ 198.632000][T10201] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 198.633479][T10201] __lock_acquire+0x17c0/0x2ebc [ 198.634346][T10201] lock_acquire+0x140/0x364 [ 198.635200][T10201] percpu_down_read_internal+0x5c/0x294 [ 198.636209][T10201] ext4_writepages+0x170/0x2dc [ 198.637115][T10201] do_writepages+0x284/0x47c [ 198.637989][T10201] __writeback_single_inode+0x140/0x1880 [ 198.639086][T10201] writeback_single_inode+0x400/0xb20 [ 198.640129][T10201] write_inode_now+0x170/0x208 [ 198.641043][T10201] iput+0x7cc/0xc2c [ 198.641836][T10201] ext4_xattr_block_set+0x1b1c/0x21e8 [ 198.642857][T10201] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 198.643961][T10201] __ext4_expand_extra_isize+0x2a4/0x378 [ 198.645008][T10201] __ext4_mark_inode_dirty+0x394/0x828 [ 198.646028][T10201] ext4_evict_inode+0x798/0xfb8 [ 198.646971][T10201] evict+0x4c0/0x74c [ 198.647749][T10201] iput+0x8f0/0xc2c [ 198.648504][T10201] ext4_process_orphan+0x24c/0x2c0 [ 198.649498][T10201] ext4_orphan_cleanup+0x7d4/0xd20 [ 198.650460][T10201] ext4_fill_super+0x4628/0x4e14 [ 198.651394][T10201] get_tree_bdev_flags+0x388/0x43c [ 198.652358][T10201] get_tree_bdev+0x2c/0x3c [ 198.653280][T10201] ext4_get_tree+0x28/0x38 [ 198.654143][T10201] vfs_get_tree+0x90/0x28c [ 198.655029][T10201] fc_mount+0x24/0xac [ 198.655782][T10201] do_new_mount+0x2a4/0x538 [ 198.656647][T10201] path_mount+0x5f0/0xa88 [ 198.657463][T10201] do_mount+0xe8/0x148 [ 198.658275][T10201] __arm64_sys_mount+0x334/0x380 [ 198.659226][T10201] invoke_syscall+0x98/0x244 [ 198.660072][T10201] el0_svc_common+0xec/0x23c [ 198.660941][T10201] do_el0_svc+0x4c/0x5c [ 198.661721][T10201] el0_svc+0x64/0x260 [ 198.662478][T10201] el0t_64_sync_handler+0x48/0x148 [ 198.663445][T10201] el0t_64_sync+0x198/0x19c [ 198.664285][T10201] [ 198.664285][T10201] other info that might help us debug this: [ 198.664285][T10201] [ 198.666052][T10201] Possible unsafe locking scenario: [ 198.666052][T10201] [ 198.667392][T10201] CPU0 CPU1 [ 198.668350][T10201] ---- ---- [ 198.669240][T10201] lock(&ei->xattr_sem); [ 198.669998][T10201] lock(&sbi->s_writepages_rwsem); [ 198.671317][T10201] lock(&ei->xattr_sem); [ 198.672556][T10201] rlock(&sbi->s_writepages_rwsem); [ 198.673441][T10201] [ 198.673441][T10201] *** DEADLOCK *** [ 198.673441][T10201] [ 198.674820][T10201] 3 locks held by syz.5.1685/10201: [ 198.675700][T10201] #0: ffff00010de720d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 198.677473][T10201] #1: ffff00010de72640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 198.679132][T10201] #2: ffff0000f1dd67e0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 198.680967][T10201] [ 198.680967][T10201] stack backtrace: [ 198.682028][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.5.1685 Tainted: G L syzkaller #0 PREEMPT [ 198.683892][T10201] Tainted: [L]=SOFTLOCKUP [ 198.684651][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 198.686510][T10201] Call trace: [ 198.687089][T10201] show_stack+0x2c/0x3c (C) [ 198.687882][T10201] __dump_stack+0x30/0x40 [ 198.688674][T10201] dump_stack_lvl+0xd8/0x12c [ 198.689483][T10201] dump_stack+0x1c/0x28 [ 198.690198][T10201] print_circular_bug+0x328/0x330 [ 198.691063][T10201] check_noncircular+0x158/0x174 [ 198.691969][T10201] __lock_acquire+0x17c0/0x2ebc [ 198.692799][T10201] lock_acquire+0x140/0x364 [ 198.693519][T10201] percpu_down_read_internal+0x5c/0x294 [ 198.694435][T10201] ext4_writepages+0x170/0x2dc [ 198.695287][T10201] do_writepages+0x284/0x47c [ 198.696080][T10201] __writeback_single_inode+0x140/0x1880 [ 198.697080][T10201] writeback_single_inode+0x400/0xb20 [ 198.698074][T10201] write_inode_now+0x170/0x208 [ 198.698930][T10201] iput+0x7cc/0xc2c [ 198.699594][T10201] ext4_xattr_block_set+0x1b1c/0x21e8 [ 198.700577][T10201] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 198.701640][T10201] __ext4_expand_extra_isize+0x2a4/0x378 [ 198.702657][T10201] __ext4_mark_inode_dirty+0x394/0x828 [ 198.703544][T10201] ext4_evict_inode+0x798/0xfb8 [ 198.704420][T10201] evict+0x4c0/0x74c [ 198.705135][T10201] iput+0x8f0/0xc2c [ 198.705783][T10201] ext4_process_orphan+0x24c/0x2c0 [ 198.706693][T10201] ext4_orphan_cleanup+0x7d4/0xd20 [ 198.707586][T10201] ext4_fill_super+0x4628/0x4e14 [ 198.708403][T10201] get_tree_bdev_flags+0x388/0x43c [ 198.709290][T10201] get_tree_bdev+0x2c/0x3c [ 198.710036][T10201] ext4_get_tree+0x28/0x38 [ 198.710803][T10201] vfs_get_tree+0x90/0x28c [ 198.711570][T10201] fc_mount+0x24/0xac [ 198.712308][T10201] do_new_mount+0x2a4/0x538 [ 198.713098][T10201] path_mount+0x5f0/0xa88 [ 198.713833][T10201] do_mount+0xe8/0x148 [ 198.714543][T10201] __arm64_sys_mount+0x334/0x380 [ 198.715384][T10201] invoke_syscall+0x98/0x244 [ 198.716177][T10201] el0_svc_common+0xec/0x23c [ 198.717020][T10201] do_el0_svc+0x4c/0x5c [ 198.717734][T10201] el0_svc+0x64/0x260 [ 198.718426][T10201] el0t_64_sync_handler+0x48/0x148 [ 198.719279][T10201] el0t_64_sync+0x198/0x19c [ 198.775029][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1685: iget: bad extra_isize 58 (inode size 256) [ 198.775065][T10201] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.775222][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1685: error while reading EA inode 11 err=-117 [ 198.775242][T10201] loop5: lost filesystem error report for type 5 error -117 [ 198.775375][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1685: iget: bad extra_isize 58 (inode size 256) [ 198.775392][T10201] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.775501][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1685: error while reading EA inode 11 err=-117 [ 198.775517][T10201] loop5: lost filesystem error report for type 5 error -117 [ 198.775617][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1685: iget: bad extra_isize 58 (inode size 256) [ 198.775633][T10201] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 198.775751][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1685: error while reading EA inode 18 err=-117 [ 198.775766][T10201] loop5: lost filesystem error report for type 5 error -117 [ 198.775867][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1685: iget: bad extra_isize 58 (inode size 256) [ 198.775882][T10201] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 198.775984][T10201] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1685: error while reading EA inode 18 err=-117 [ 198.776009][T10201] loop5: lost filesystem error report for type 5 error -117 [ 198.776140][T10201] EXT4-fs (loop5): 1 orphan inode deleted [ 198.776367][T10201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.004993][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.