last executing test programs: 31.384549909s ago: executing program 4 (id=668): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0009000000ff0600000600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x4, 0x100) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000400)=ANY=[@ANYBLOB=' \x00'], 0x6) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f00000006c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000700)=0x2c) chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x171804, 0x88) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="97000000000f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x11, 0x2000, 0x65, 0xfff, 0x2, 0x6c, 0x7, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x0, 0x24, 0x3, 0xa, [{@multicast2}, {@remote}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x6}, {@multicast1, 0x524}, {@multicast2, 0x2}]}, @ssrr={0x89, 0x0, 0xe2, [@local, @multicast1]}]}}, "2d1461b33c69089e"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0920000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000fdffffff7babf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0f1ffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.347374779s ago: executing program 4 (id=669): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x8, 0x0, 0x0, 0x7fff0000}]}) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@caif=@util, &(0x7f00000000c0)=0x80) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000140), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) msgsnd(0x0, &(0x7f0000002cc0)={0x1}, 0x8, 0x800) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 31.256724607s ago: executing program 4 (id=671): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) 31.189234617s ago: executing program 4 (id=672): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e20, 0x0, 0xa}, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x7}, {0x4}, 0x0, 0x6e6bbb, 0x0, 0x0, 0xab1bbbd38391201b, 0x2}}}, 0x128}}, 0x40000) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000004c0)={{r0, &(0x7f0000000180)='\x00', 0x25c000, &(0x7f00000001c0)={@_ha_fsid={[0x9, 0x6]}, {0x81, 0xfff9, 0x3, 0x4}}, 0x80000001, &(0x7f0000000280), &(0x7f00000002c0)=0xa}, 0x1, &(0x7f0000000400)=[{0x2, 0x8, &(0x7f0000000300)='max_batch_time', &(0x7f00000003c0)="6bf8c6f8f6a86739e47fd6d7477558dd2fae94167d7ea121becbfe2a4567f3d6965c5927", 0x24, 0x10}]}) move_mount(r0, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000540)='./file0/file0\x00', 0x30) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$eJzs3c9vFFUcAPDvTH/w21bFHyBoFY3EH4WWnwcvGE08aGKiB4yn2haCLFRpTYQQrR7waEi8G48m/gWe9GLUk4lXvRsSYriAGs2YmZ0py7JbWLp00f18klnem3nLvO/MvN037+1uA+hbY/lDErExIn6JiJF69toCY/V/rlw6O/3HpbPTSWTZa78nRbnLl85OV0Wr522oZ7KszK9psd9zb0ZM1Wqzp8r8roUT7+yaP33m2WMnpo7OHp09OXnw4N4924f3T+7rSpx5XJe3fjC3bctLb5x/Zfrw+bd++Cqv78Zye2McXbJurH50W3qiyzvrtU0N6WSwhxWhIwMRkZ+uoaL9j8RArFvaNhIvftzTygG3VZZlWav359JiBvyPJdHrGgC9Ub3R5/e/1bJKXY87wsVDEe8eqMd/pVzqWwYjLcsMNd3fdtNYRBxe/PPzfInbMw4BAHCNbw5FxDOt+n9p3N9Q7q5yDmU0Iu6OiHsi4t6I2BwR90UUZR+IiAc73H/zDMn1/Z/0wi0FdpPy/t9z5dzWUv/v76yIvzQ6UOY2FfEPJUeO1WZ3l8dkZwytyfMTy+zj2xd+/rTdtsb+X77k+6/6gnXphcGmAbqZqYWpFYa95OJHEVsHm+IvJFFN4yQRsSUitnb0P2dZWjxGHHvqy23tSt04/mV0YZ4p+yLiyfr5X4ym+CtJ2/nJiQP7J/ftWhu12d1/ZVlWXBXX+/Gnc6+22/+K4u+C/Pyvb77+C0vxjyZrI+ZPnzlezNfOR/MM8Q2d+/WTtvc0t3r9DyevF+nhct37UwsLpyYihpOXG9b/03SXW5abvHrl5PHv3NEq/rR4jauifSgi8ot4e0Q8HBGPlHV/NCIei4gdy8T//fOPv915/MuMyndRHv/Mjc5/NJ7/zhMDx7/7uvP4K/n531ukdpZrbub172YruJJjBwAAAP8VafEZ+CQdX0qn6fh4/TP8m2N9WpubX3j6yNx7J2fqn5UfjaG0Gv8caRgPnSjHhqv85NWhmSK/pxw3/mxgXZEfn56rzfQ4duh3G9q0/9xvA72uHXDb+b4W9C/tH/qX9g/9S/uH/qX9Q/9q1f4/7EE9gNXn/R/6l/YP/Uv7h/6l/UNfavvd+HRFX/mXWIVE+QsNix08q/pRiS7sPdLOnzUYPT1iSQc/DHHnJAa7XufyT3REuWZNy8K9e00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopn8DAAD//7kl5Go=") (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e20, 0x0, 0xa}, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x7}, {0x4}, 0x0, 0x6e6bbb, 0x0, 0x0, 0xab1bbbd38391201b, 0x2}}}, 0x128}}, 0x40000) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000004c0)={{r0, &(0x7f0000000180)='\x00', 0x25c000, &(0x7f00000001c0)={@_ha_fsid={[0x9, 0x6]}, {0x81, 0xfff9, 0x3, 0x4}}, 0x80000001, &(0x7f0000000280), &(0x7f00000002c0)=0xa}, 0x1, &(0x7f0000000400)=[{0x2, 0x8, &(0x7f0000000300)='max_batch_time', &(0x7f00000003c0)="6bf8c6f8f6a86739e47fd6d7477558dd2fae94167d7ea121becbfe2a4567f3d6965c5927", 0x24, 0x10}]}) (async) move_mount(r0, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000540)='./file0/file0\x00', 0x30) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) (async) 30.993676291s ago: executing program 4 (id=673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000004509010000000000ac00000000000000bf9800000000000056080000000000018500000007000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r11}, 0x20) 30.689422717s ago: executing program 4 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000c10000000000000007000000850000000f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70a000008000000b70300000000000085000000170000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x2, 0x4}) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) close(0x3) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x23}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async, rerun: 64) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendfile(r7, r6, 0x0, 0x100000000000ff) (async) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x3f, @empty}, 0x1c) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000597a4feb16e017701c560c80b2240a4cd328728eca703ebe6b036d83d9591c24964b74813d8cfc3161c80c83205587a8bc02def41ffde2e421c0360a58311520ceba96fb4888813d702131db6cd7dc3efb0a182efce8e"], 0x24}}, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r9) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) 30.640827079s ago: executing program 32 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000c10000000000000007000000850000000f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70a000008000000b70300000000000085000000170000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x2, 0x4}) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) close(0x3) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x23}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async, rerun: 64) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendfile(r7, r6, 0x0, 0x100000000000ff) (async) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x3f, @empty}, 0x1c) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000597a4feb16e017701c560c80b2240a4cd328728eca703ebe6b036d83d9591c24964b74813d8cfc3161c80c83205587a8bc02def41ffde2e421c0360a58311520ceba96fb4888813d702131db6cd7dc3efb0a182efce8e"], 0x24}}, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r9) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) 4.029423378s ago: executing program 5 (id=917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000005bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000006c00000095"], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) 2.863695891s ago: executing program 5 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mknodat(0xffffffffffffffff, 0x0, 0xe204, 0x4) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x47d, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) 2.699249794s ago: executing program 2 (id=931): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x6}, 0x28) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.9965667s ago: executing program 5 (id=934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002b00e67a09002dbd7000fedbdf25090000000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x2, 0x30, 0x2, 0x8, 0x0, 0xd9, 0x0}) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500050000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.98836755s ago: executing program 3 (id=935): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0920000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000fdffffff7babf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0f1ffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.94635999s ago: executing program 3 (id=937): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.915016466s ago: executing program 3 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xc0}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf250f000000080034000200000008000300", @ANYRES32=r4, @ANYBLOB="e8ff340009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r5, 0x804c4700, 0xfffffffffffffffe) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x6206, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000217f28)=""/215, 0xd7}], 0x1, 0x0) getuid() 1.596547915s ago: executing program 2 (id=939): syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0x1, 0x853, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x4382, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000180)=[0x3, 0x6002, 0xd, 0x6], &(0x7f00000001c0)=[0x0, 0x3ab, 0x3cf, 0x4, 0xbc9, 0x7ff, 0x9], &(0x7f0000000240)=[0x0, 0x7d, 0xec], &(0x7f0000000280)=[0xc, 0x8, 0x400]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x2e, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1.592924996s ago: executing program 5 (id=941): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x4007) sendfile(r0, r0, 0x0, 0xb) 1.480438178s ago: executing program 5 (id=944): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000600)=""/249, 0x0, 0xf9, 0x1, 0x75, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xffffff7a, 0x10000, 0x478, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r3, 0x1, 0x2, 0x5, 0xb}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000440)={0x6, 0x1b4, 0x3, 0x8, 0xc0, "84f4a245df4684fa26343c888265f666f1acfe", 0x7, 0x1}) ptrace(0x10, r4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r4, 0xffffffff, 0x200) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) 1.478736715s ago: executing program 1 (id=945): syz_usb_connect(0x5, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="120150027b331e10b80778818789010203010902360001070800050904360904036902ea09050808080009077f0905020f000401060209050e2bb9c861"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) 1.434806081s ago: executing program 0 (id=946): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a6d2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000000400)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000004c0)="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", 0x363) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) statfs(0x0, &(0x7f0000000440)=""/86) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20004804) setsockopt$sock_attach_bpf(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './gadget\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x36) write(r5, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) 963.365792ms ago: executing program 3 (id=947): r0 = memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b01a320"], 0xe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc003636190001002dbd70000000000000000000000000000000000000000000000000000000000000000000000a000000000012e607a8c1c11913ff60954b2e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e000000000000000100000001000000000000000000000000000000000000003d00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f00000000000000050000000000000002000000000000080100000000000000010000000000000044000500ffffffff000000000000000000000000000000003c00000002000000fe80000000000000000000000000003a06000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bca2000000000000a6020000f80e0000b803000008000000b70400000000000085000000330000009592fedf5d37ec907642815c7dd40850d3cd83a4f1bf4f0a98bbfefb61316ef1218fb2af599a25211526ded296e2d1ad178a55ef06976562fc5fcde5417f4ec9142a709ee1f4d0fb8f5c63c3d26ed0678302389774b5cbcf93ae55446833a4056c923f125dffae97a040f859700cd98b3fb378247eadfd42"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000640)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000680)="023e200dd3776395c349b4832c5b74972c0e39a9b8f5199a20ef6aaec5e09cb80677fb6b24ed8926745d726a2035bcbd9c2847b46f5800904b3dee03f6bb68", 0x3f}, {&(0x7f00000006c0)="54362a4ec6c2b42e8a6305ddbb2d4e62dd40804d9eb9e625", 0x18}, {&(0x7f0000000a00)="51d44e8c881512ba3c07d9e61e43c44094bb82c72c85c6b61f9d5a035daa40fae72692b89dc989cce1fa4340e0a0319309b6c54e2b1f3a49082fca3c8ff62e1c900cf65b6e908a4f8d350e5c38f365d6a79b4f0eea19f505bc4dfb1c235f8a872b4c99d2594e1dbf097a4097e3cbf3e2f0c9cc1ff6551d61265c66b85a9cf538a2edc64f676d3d463c12284730281c232bad7e372d448f685144ec346df61c4170f5a0e6f26674f1af2fb72975dcaca996e2a129deba7726bc53cd3e81aee27dcaf52cb1dd864df4ba50e7c31927cb67a0f902d14b1de5da8e2b166b87447a12", 0xe0}, {&(0x7f0000000c80)="d09b89ddff9d9454c860d3040a31abb5196aa7a9aaab127d5c341f0a5141a473f66a3f485241b56034660eb00643999b635a0ce1b3777b34e911767a615e8fc6bc87ad8a046d9fb5ee55a61db2c67386c4b36ea6eedb193e0ac8675ac391e814fd3bbc957dca64ac9f44dfcafb9f34feb6ab7928464e889740cb2a15f48857f4e9330c2f1be48ee3deeed17614dd1b533137bb4a7c8deebbbfe5ade01d538faac0f0f2e57ac5e92ed488c220f77139617c1a3601ec02a4657e8b985bc1299740be498a433effd285e48ede03f6cdafa8180a70147134", 0xd6}], 0x4, &(0x7f0000000dc0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x99}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x9ac1, 0x8, 0x4, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18, 0x84, 0x6, {0x6}}], 0xc0, 0x1}, {&(0x7f0000000e80)=@in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000ec0)="3c2b845261986c4c616c066d5b982fb9044ad66f0907556bcc31945acc44e80b550214e9596cf2b321ca799f6a81cbd0d7568b6790a959ac98e5068f108884d67b9e45db42e42e6a05019fa04f763e1032b1dac07c2965fe58c32e54c3ddc25d4a7c7962f8575b102c8b43931d0588c62144d24f0084e0f27568d1c9f62911e3051c2fd9617edb7c23be73e087593e2bea79787b71cff7e9d980554d8c42264412ef70ac188c17ccbc14c9abcb8c5454a3547a32c47fe1e00613e990a0a99071bdcd", 0xc2}, {&(0x7f0000000fc0)="bd6a440407e5bc476a62cfc05422386bf4c083b172df315153d137643d91a676596b026fb7397452f2f2c8ba1607e603b04f40e5f6eafa751647132183ba7e884b78af91f70540c721e756efcbebf35c6ffadf47c442e3b5e96cfccaccb2223575345133251f6d75c6273c29d85ba9d5fe9b78d9aa7f10", 0x77}], 0x2, &(0x7f00000014c0)=ANY=[@ANYBLOB="20000000000000008400000002000000e2240400070000000000e01f", @ANYRES32=0x0, @ANYBLOB="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"], 0x38, 0x48080}, {&(0x7f0000001140)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001180)="8e76ddaa32e9dac746ad4fc3", 0xc}, {&(0x7f00000011c0)="96711298d7456bc8b629080b74e19bac543d94f4ecdbadc3a4b779bc82faf6fbbc7ae53eac68ce6a03cacd0a3ba8384b81acdf9f36228d34524319f42a18e0d366de2831f7dbab8451312152438b1ce22fe731ee21a88d1c2f51931d1e448b8ebe722197c2d10034d798663a1e84d6c6478bdf5713a0d196f2a599", 0x7b}, {&(0x7f0000001240)="73e1365917f93b22d463", 0xa}, {&(0x7f0000001280)="47a3caa4036a2cece68d982d239f3be9deb287bb81cff9bbf1ad801093a7d88948cd9b4297ace5a9a91fa3cfd127a504f8c6af42b330ee00c1b2beceb88ed0b48f8f51a368dd25f111a832b04b00840b77e3becbf009a4e0a67e45a34a46d752c6110ff74b1ac88402c9438d17568eae37df2e702f6a4b9fa98e85f266042d450513f15eb25958cf5d1450a7631f11393497b875b9b1dd03b538be2bad4884a9ef2553c3ed24ce5eea5adc412fe8df46f1c9af89c0a4bfd8ca19af9dfe03492df3757f656c168d223a216788c31068fede660d36e86e84", 0xd7}], 0x4, &(0x7f00000013c0)=[@authinfo={0x18, 0x84, 0x6, {0xb}}], 0x18, 0x8}], 0x3, 0x4009040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) truncate(&(0x7f0000000240)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000580)={r5, &(0x7f0000000380)='GPL\x00', 0x4080, &(0x7f00000004c0)={@_ha_fsid={[0x1, 0x8]}, {0x0, 0x1, 0xea2, 0x6}}, 0x6, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x2}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000005c0)={r7, 0x603, 0x101, 0x81, 0x4, 0x80}, 0x14) 685.015207ms ago: executing program 1 (id=948): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0920000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000fdffffff7babf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0f1ffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 648.299882ms ago: executing program 1 (id=949): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 633.201926ms ago: executing program 1 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x58e, &(0x7f0000000100)={[{@errors_remount}, {@lazytime}, {@errors_remount}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@grpquota}, {@init_itable}]}, 0x1, 0x459, &(0x7f0000000240)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioprio_get$pid(0x3, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000005000000000000000011000000000000000000", @ANYRES64=r4, @ANYRES32=r4, @ANYRES64=r3], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x8, &(0x7f00000002c0)="51b0000000000000", &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) unshare(0x8020a00) getdents64(r5, 0xfffffffffffffffe, 0x29) 619.730295ms ago: executing program 2 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002b00e67a09002dbd7000fedbdf25090000000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x2, 0x30, 0x2, 0x8, 0x0, 0xd9, 0x0}) close(r2) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500050000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 594.270217ms ago: executing program 1 (id=952): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fsetxattr$smack_xattr_label(r2, &(0x7f0000000080)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G%') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) close(r0) 559.30426ms ago: executing program 5 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000007bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000006c00000095"], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) 415.199215ms ago: executing program 1 (id=954): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x20040040) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc493}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(r2, &(0x7f0000000400)='./sys/../file0\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ccgx-ucsi 0x', 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], &(0x7f0000000040)=""/233, 0x46, 0xe9, 0x6}, 0x28) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ipvlan1\x00', 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r6 = socket$inet(0x2, 0xa, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) getsockname(r6, 0x0, 0x0) 320.789655ms ago: executing program 2 (id=955): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000e9000000df7f00006e45000041"], 0x50) 320.245722ms ago: executing program 2 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500ffb80000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000003c00000095"], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) 317.663704ms ago: executing program 2 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xc0}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf250f000000080034000200000008000300", @ANYRES32=r4, @ANYBLOB="e8ff340009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r5, 0x804c4700, 0xfffffffffffffffe) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x6206, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000217f28)=""/215, 0xd7}], 0x1, 0x0) getuid() 170.989093ms ago: executing program 0 (id=958): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b8, 0xc0, 0x370, 0x1e0, 0x1e0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x600}, {0x1, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100]}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@conntrack2={{}, {{@ipv4=@private=0xa010102, [0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xff, 0x0, 0xffffffff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xffffff00], 0x3ff, 0x6d43, 0x33, 0x4e20, 0x4e24, 0x4e23, 0x4e23, 0x1801, 0x36f4}, 0x100, 0x900}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x140, 0xd, [0x11, 0x40, 0x6, 0x31, 0x19, 0x36, 0x24, 0x2f, 0x1b, 0x23, 0x5, 0x2, 0x21, 0xc, 0x21, 0x23], 0x1, 0x10, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x56f) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) 138.173606ms ago: executing program 0 (id=959): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0920000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000fdffffff7babf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0f1ffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 120.28145ms ago: executing program 3 (id=960): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 116.802601ms ago: executing program 0 (id=961): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) write(r0, &(0x7f0000000280)="efa7a9300c14788d777928a2202986383c1618967a7da6f5303a1d5fbcaacc177095b7cc253369d3dc0270f5bdaf8315b42555bce635d8944d655c107f01d07a9f1d2e27e9524cc228da8e754a153c80059054fba850910f9c107b0b419f1dfab0abdfcbc8e3", 0x66) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0x6, 0x7fc, 0x0, 0x0, 0xf, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000040c0)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x60, 0x0, 0x3, {{0x6, 0x2, 0xd, 0x714, 0x2, 0x2084, 0x7, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 52.915558ms ago: executing program 3 (id=962): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f02) r2 = fcntl$getown(r1, 0x9) prlimit64(r2, 0x3, &(0x7f00000000c0)={0xffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write(r0, &(0x7f0000000280)="eebd3e7bcabc34fdad9ecb4ce44963451ef9fa40ad25635792a91f3eb0257e62215bef196b1596844b27240f488faf697895289f180efc4bae15a742443ba4483939a4ce71c96a59a375a1662b529956e407a0be0b27e6994cefdb4c791a425e37aa377c28c81cbcbb69f1f16153c8ffe05097c2089835affe56cb8b91272fbdab923b1eff27a77cac4c0d6c4b192b1fbf50340412e819176c0f276b64ab4377832ff8dcfe7f89630f5cb2f8b7d5777d4aa5a3973f25fc016885e53868785e0c6cdf937b742670dce904", 0xca) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f02) (async) fcntl$getown(r1, 0x9) (async) prlimit64(r2, 0x3, &(0x7f00000000c0)={0xffff}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) write(r0, &(0x7f0000000280)="eebd3e7bcabc34fdad9ecb4ce44963451ef9fa40ad25635792a91f3eb0257e62215bef196b1596844b27240f488faf697895289f180efc4bae15a742443ba4483939a4ce71c96a59a375a1662b529956e407a0be0b27e6994cefdb4c791a425e37aa377c28c81cbcbb69f1f16153c8ffe05097c2089835affe56cb8b91272fbdab923b1eff27a77cac4c0d6c4b192b1fbf50340412e819176c0f276b64ab4377832ff8dcfe7f89630f5cb2f8b7d5777d4aa5a3973f25fc016885e53868785e0c6cdf937b742670dce904", 0xca) (async) 564.303µs ago: executing program 0 (id=963): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0xffffe000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e1d, 0x1, @mcast1={0xff, 0x5}, 0x8}, 0x7a) sendmsg$NFT_BATCH(r2, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x20000080) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7, 0x2ac, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8cff) 0s ago: executing program 0 (id=964): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fsetxattr$smack_xattr_label(r2, &(0x7f0000000080)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G%') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) close(r0) kernel console output (not intermixed with test programs): 0b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.268546][ T30] audit: type=1326 audit(55.260:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5642 comm="syz.4.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.274415][ T30] audit: type=1326 audit(55.260:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5642 comm="syz.4.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.274437][ T30] audit: type=1326 audit(55.260:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5642 comm="syz.4.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.274470][ T30] audit: type=1326 audit(55.260:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5642 comm="syz.4.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.276931][ T30] audit: type=1326 audit(55.260:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5642 comm="syz.4.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.277796][ T30] audit: type=1326 audit(55.260:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5642 comm="syz.4.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.277877][ T30] audit: type=1326 audit(55.260:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5642 comm="syz.4.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 55.907719][ T5663] loop3: detected capacity change from 0 to 512 [ 55.910315][ T5663] EXT4-fs: Ignoring removed nobh option [ 55.917280][ T5663] EXT4-fs (loop3): Test dummy encryption mode enabled [ 55.917308][ T5663] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.935957][ T5663] EXT4-fs (loop3): 1 truncate cleaned up [ 55.937300][ T5663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.959389][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.998689][ T5667] loop3: detected capacity change from 0 to 256 [ 56.152680][ T5678] loop2: detected capacity change from 0 to 512 [ 56.153065][ T5678] EXT4-fs: Ignoring removed nobh option [ 56.172793][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.184903][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.258850][ T5689] loop4: detected capacity change from 0 to 512 [ 56.266730][ T5689] EXT4-fs (loop4): Test dummy encryption mode enabled [ 56.283117][ T5689] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #11: comm syz.4.287: casefold flag without casefold feature [ 56.283139][ T5689] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.283476][ T5689] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.287: couldn't read orphan inode 11 (err -117) [ 56.283490][ T5689] loop4: lost filesystem error report for type 5 error -117 [ 56.287963][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 56.287981][ C0] EXT4-fs (loop4): initial error at time 56: ext4_orphan_get:1403: inode 11 [ 56.287999][ C0] EXT4-fs (loop4): last error at time 56: ext4_orphan_get:1408 [ 56.292256][ T5689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.340604][ T5702] ipt_REJECT: TCP_RESET invalid for non-tcp [ 57.909184][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.461541][ T5741] binder: 5740:5741 got transaction to context manager from process owning it [ 58.461570][ T5741] binder: 5740:5741 transaction call to 5740:0 failed 13/29201/-22, code 0 size 0-0 line 3243 [ 58.463574][ T4718] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.933524][ T5754] xt_bpf: check failed: parse error [ 58.982605][ T30] audit: type=1326 audit(58.970:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5755 comm="syz.1.310" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94379368 code=0x7ffc0000 [ 58.982698][ T30] audit: type=1326 audit(58.970:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5755 comm="syz.1.310" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94379368 code=0x7ffc0000 [ 59.272315][ T5764] loop3: detected capacity change from 0 to 2048 [ 59.390235][ T5764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.575741][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.577519][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.928110][ T4709] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 60.349381][ T5790] loop2: detected capacity change from 0 to 512 [ 60.360811][ T5790] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 60.370322][ T5790] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.319: casefold flag without casefold feature [ 60.370341][ T5790] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.370755][ T5790] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.319: couldn't read orphan inode 15 (err -117) [ 60.370770][ T5790] loop2: lost filesystem error report for type 5 error -117 [ 60.371680][ T5790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.436489][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.499008][ T4718] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.516632][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 60.516659][ T5805] tipc: Started in network mode [ 60.516671][ T5805] tipc: Node identity a690553b69b4, cluster identity 4711 [ 60.516844][ T5805] tipc: Enabled bearer , priority 10 [ 60.653143][ T4718] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.654727][ T4718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.654745][ T4718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 60.660902][ T4718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.660920][ T4718] usb 1-1: Product: syz [ 60.660929][ T4718] usb 1-1: Manufacturer: syz [ 60.660936][ T4718] usb 1-1: SerialNumber: syz [ 61.519024][ T4793] tipc: Node number set to 3475264827 [ 61.542046][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 61.542063][ T5842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 62.039782][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.081105][ T4718] cdc_ncm 1-1:1.0: bind() failure [ 62.100879][ T4718] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 62.106681][ T4718] usb 1-1: USB disconnect, device number 3 [ 62.670330][ T5891] loop2: detected capacity change from 0 to 512 [ 62.670698][ T5891] EXT4-fs: Ignoring removed nobh option [ 62.700303][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.700470][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.702354][ T5891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.781443][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.886506][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.886706][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.280448][ T5922] ip_tables: iptables: counters copy to user failed while replacing table [ 63.354029][ T5928] loop3: detected capacity change from 0 to 512 [ 63.357582][ T5928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.366025][ T5928] EXT4-fs (loop3): 1 truncate cleaned up [ 63.366576][ T5928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.415448][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.874827][ T5946] loop4: detected capacity change from 0 to 1024 [ 63.877599][ T5946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.885590][ T5946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 63.885633][ T5946] System zones: 0-1, 3-36 [ 63.887207][ T5946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.985477][ T5958] FAULT_INJECTION: forcing a failure. [ 63.985477][ T5958] name failslab, interval 1, probability 0, space 0, times 0 [ 63.985500][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.1.380 Not tainted syzkaller #0 PREEMPT [ 63.985513][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.985519][ T5958] Call trace: [ 63.985522][ T5958] show_stack+0x2c/0x3c (C) [ 63.985542][ T5958] __dump_stack+0x30/0x40 [ 63.985555][ T5958] dump_stack_lvl+0xd8/0x12c [ 63.985567][ T5958] dump_stack+0x1c/0x28 [ 63.985578][ T5958] should_fail_ex+0x41c/0x590 [ 63.985592][ T5958] should_failslab+0xc4/0x120 [ 63.985606][ T5958] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 63.985615][ T5958] __d_alloc+0x50/0x690 [ 63.985625][ T5958] d_alloc_pseudo+0x2c/0xd8 [ 63.985634][ T5958] alloc_path_pseudo+0xe8/0x1d4 [ 63.985643][ T5958] alloc_file_pseudo+0xb0/0x198 [ 63.985655][ T5958] sock_alloc_file+0xb4/0x1ac [ 63.985666][ T5958] __sys_socket+0x90/0xec [ 63.985676][ T5958] __arm64_sys_socket+0x84/0x9c [ 63.985686][ T5958] invoke_syscall+0x98/0x244 [ 63.985698][ T5958] el0_svc_common+0xec/0x23c [ 63.985710][ T5958] do_el0_svc+0x4c/0x5c [ 63.985721][ T5958] el0_svc+0x64/0x260 [ 63.985734][ T5958] el0t_64_sync_handler+0x44/0x104 [ 63.985745][ T5958] el0t_64_sync+0x198/0x19c [ 64.288254][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 64.288274][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 64.437864][ T5978] syz.3.388 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.511601][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.511660][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.709272][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.783006][ T5982] loop4: detected capacity change from 0 to 1024 [ 64.821058][ T5982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.826293][ T5982] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.390: lblock 3 mapped to illegal pblock 3 (length 3) [ 64.833814][ T5982] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 64.833838][ T5982] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.833838][ T5982] [ 64.853684][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.895203][ T5991] loop4: detected capacity change from 0 to 512 [ 64.910689][ T5991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.959520][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 64.959535][ T30] audit: type=1326 audit(64.950:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 64.959629][ T30] audit: type=1326 audit(64.950:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 64.960537][ T30] audit: type=1326 audit(64.950:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 64.960654][ T30] audit: type=1326 audit(64.950:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa0d79060 code=0x7ffc0000 [ 64.961566][ T30] audit: type=1326 audit(64.950:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa0d5c22c code=0x7ffc0000 [ 64.962425][ T30] audit: type=1326 audit(64.950:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffa0d7910c code=0x7ffc0000 [ 64.962678][ T30] audit: type=1326 audit(64.950:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa0d5c22c code=0x7ffc0000 [ 64.962692][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.963600][ T30] audit: type=1326 audit(64.950:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa0d78f90 code=0x7ffc0000 [ 64.963854][ T5999] loop2: detected capacity change from 0 to 512 [ 64.964028][ T30] audit: type=1326 audit(64.950:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa0d5c22c code=0x7ffc0000 [ 64.964410][ T30] audit: type=1326 audit(64.950:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.2.396" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa0d5c22c code=0x7ffc0000 [ 64.977431][ T5999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.074832][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.082551][ T6005] xt_hashlimit: size too large, truncated to 1048576 [ 65.126339][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.126541][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.280410][ T6023] binder: 6020:6023 tried to acquire reference to desc 0, got 1 instead [ 66.281040][ T6023] binder: release 6020:6023 transaction 25 out, still active [ 66.281055][ T6023] binder: undelivered TRANSACTION_COMPLETE [ 66.288485][ T4718] binder: send failed reply for transaction 18 to 6020:6023 [ 66.288541][ T4718] binder: undelivered TRANSACTION_COMPLETE [ 66.288551][ T4718] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.288581][ T4718] binder: send failed reply for transaction 25, target dead [ 66.364429][ T6028] netlink: 280 bytes leftover after parsing attributes in process `syz.1.407'. [ 66.511314][ T6046] loop4: detected capacity change from 0 to 1024 [ 66.511684][ T6046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.533092][ T6046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.633158][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.841821][ T6066] loop0: detected capacity change from 0 to 256 [ 67.240648][ T6081] vlan0: entered promiscuous mode [ 67.279146][ T1185] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.448222][ T1185] usb 1-1: Using ep0 maxpacket: 16 [ 67.451204][ T1185] usb 1-1: unable to get BOS descriptor or descriptor too short [ 67.451228][ T1185] usb 1-1: New USB device found, idVendor=07b8, idProduct=8178, bcdDevice=89.87 [ 67.452462][ T1185] usb 1-1: config 7 has an invalid interface number: 54 but max is 0 [ 67.452473][ T1185] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 67.452482][ T1185] usb 1-1: config 7 has no interface number 0 [ 67.452497][ T1185] usb 1-1: config 7 interface 54 altsetting 9 endpoint 0xE has an invalid bInterval 97, changing to 10 [ 67.452507][ T1185] usb 1-1: config 7 interface 54 altsetting 9 endpoint 0xE has invalid maxpacket 49337, setting to 1024 [ 67.452518][ T1185] usb 1-1: config 7 interface 54 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 67.452528][ T1185] usb 1-1: config 7 interface 54 has no altsetting 0 [ 67.454190][ T1185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.454204][ T1185] usb 1-1: Product: syz [ 67.454213][ T1185] usb 1-1: Manufacturer: syz [ 67.454219][ T1185] usb 1-1: SerialNumber: syz [ 67.663678][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 67.673018][ T1185] usbhid 1-1:7.54: couldn't find an input interrupt endpoint [ 67.674584][ T1185] usb 1-1: USB disconnect, device number 4 [ 68.004861][ T6118] loop4: detected capacity change from 0 to 512 [ 68.005392][ T6118] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.117879][ T6125] loop4: detected capacity change from 0 to 4096 [ 68.124749][ T6125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.131484][ T6125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.152372][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.201678][ T6131] loop4: detected capacity change from 0 to 256 [ 68.212828][ T6131] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 68.212846][ T6131] FAT-fs (loop4): Filesystem has been set read-only [ 68.214738][ T6133] loop0: detected capacity change from 0 to 512 [ 68.277837][ T6133] EXT4-fs error (device loop0): __ext4_fill_super:5621: inode #2: comm syz.0.447: iget: bogus i_mode (4000) [ 68.277872][ T6133] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 68.277972][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 68.277987][ C1] EXT4-fs (loop0): initial error at time 68: __ext4_fill_super:5621: inode 2 [ 68.278006][ C1] EXT4-fs (loop0): last error at time 68: __ext4_fill_super:5621: inode 2 [ 68.278253][ T6133] EXT4-fs (loop0): get root inode failed [ 68.278260][ T6133] EXT4-fs (loop0): mount failed [ 69.085032][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 69.111232][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 69.115375][ T6170] syzkaller0: entered promiscuous mode [ 69.115390][ T6170] syzkaller0: entered allmulticast mode [ 69.119821][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.119985][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.221324][ T6188] loop3: detected capacity change from 0 to 512 [ 69.221687][ T6188] EXT4-fs: Ignoring removed oldalloc option [ 69.221999][ T6188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.224869][ T6188] EXT4-fs (loop3): 1 truncate cleaned up [ 69.225369][ T6188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.250773][ T6190] loop2: detected capacity change from 0 to 512 [ 69.254188][ T6190] EXT4-fs: Ignoring removed i_version option [ 69.272301][ T6190] EXT4-fs error (device loop2): __ext4_iget:5592: inode #3: block 196608: comm syz.2.465: invalid block [ 69.272324][ T6190] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 69.272494][ T6190] EXT4-fs (loop2): Remounting filesystem read-only [ 69.272533][ T6190] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.272774][ T6190] EXT4-fs (loop2): mount failed [ 69.277959][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 69.277975][ C0] EXT4-fs (loop2): initial error at time 69: __ext4_iget:5592: inode 3: block 196608 [ 69.278001][ C0] EXT4-fs (loop2): last error at time 69: __ext4_iget:5592: inode 3: block 196608 [ 69.490712][ T6208] loop0: detected capacity change from 0 to 256 [ 69.525105][ T6190] loop2: detected capacity change from 0 to 32768 [ 69.540260][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.845856][ T6190] loop2: p1 p3 < > [ 69.876861][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.877041][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.931885][ T5036] udevd[5036]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.935442][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.961098][ T6221] netlink: 'syz.2.478': attribute type 1 has an invalid length. [ 69.961116][ T6221] netlink: 92 bytes leftover after parsing attributes in process `syz.2.478'. [ 70.229615][ T6252] binder: 6250:6252 tried to acquire reference to desc 0, got 1 instead [ 70.229754][ T6252] binder: 6250:6252 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 70.257630][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 70.257645][ T30] audit: type=1326 audit(70.240:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.257674][ T30] audit: type=1326 audit(70.240:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.257893][ T30] audit: type=1326 audit(70.240:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.259437][ T30] audit: type=1326 audit(70.240:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.259462][ T30] audit: type=1326 audit(70.240:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.259651][ T30] audit: type=1326 audit(70.240:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.259668][ T30] audit: type=1326 audit(70.250:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.259778][ T30] audit: type=1326 audit(70.250:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.259942][ T30] audit: type=1326 audit(70.250:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.494" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa0d79368 code=0x7ffc0000 [ 70.450414][ T6262] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.506483][ T4707] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.668272][ T6281] binder: 6280:6281 ioctl c00c620f 0 returned -14 [ 71.946419][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.978066][ T866] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.025806][ T6296] set_capacity_and_notify: 1 callbacks suppressed [ 72.025820][ T6296] loop4: detected capacity change from 0 to 256 [ 72.032048][ T6296] FAT-fs (loop4): bogus logical sector size 65529 [ 72.032077][ T6296] FAT-fs (loop4): Can't find a valid FAT filesystem [ 72.289327][ T6317] netlink: 156 bytes leftover after parsing attributes in process `syz.1.517'. [ 72.297125][ T6318] syz.0.516 (6318): /proc/6315/oom_adj is deprecated, please use /proc/6315/oom_score_adj instead. [ 72.327324][ T6321] overlay: ./file1 is not a directory [ 72.332330][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 72.393104][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.394647][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.890445][ T6337] tipc: Failed to remove unknown binding: 66,0,0/0:4118538879/4118538880 [ 72.959360][ T4718] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 73.392366][ T4718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.392397][ T4718] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 73.395178][ T4718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.395192][ T4718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.397334][ T4718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.397349][ T4718] usb 1-1: Product: syz [ 73.397356][ T4718] usb 1-1: Manufacturer: syz [ 73.397363][ T4718] usb 1-1: SerialNumber: syz [ 73.647420][ T4718] usb 1-1: USB disconnect, device number 5 [ 73.807831][ T6351] overlayfs: upper fs does not support tmpfile. [ 73.992401][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 74.201043][ T6378] loop3: detected capacity change from 0 to 1024 [ 74.233925][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.291519][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.349324][ T6391] tipc: Started in network mode [ 74.349348][ T6391] tipc: Node identity ac14140f, cluster identity 4711 [ 74.349744][ T6391] tipc: New replicast peer: 255.255.255.255 [ 74.350008][ T6391] tipc: Enabled bearer , priority 10 [ 74.446761][ T6399] bridge0: port 3(vlan2) entered blocking state [ 74.455264][ T6399] bridge0: port 3(vlan2) entered disabled state [ 74.455376][ T6399] vlan2: entered allmulticast mode [ 74.455387][ T6399] ip6gretap0: entered allmulticast mode [ 74.455932][ T6399] vlan2: entered promiscuous mode [ 74.455941][ T6399] ip6gretap0: entered promiscuous mode [ 74.510406][ T6403] loop2: detected capacity change from 0 to 1024 [ 74.515564][ T6403] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.521305][ T6403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 74.521342][ T6403] System zones: 0-1, 3-36 [ 74.522197][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.638370][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 74.790537][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 74.802474][ T24] usb 1-1: config index 0 descriptor too short (asked for 9, got 0) [ 74.802587][ T24] usb 1-1: can't read configurations, error -22 [ 74.928549][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 74.988151][ T6416] binder: 6415:6416 tried to acquire reference to desc 0, got 1 instead [ 74.988542][ T4718] binder: release 6415:6416 transaction 34 out, still active [ 74.988556][ T4718] binder: undelivered TRANSACTION_COMPLETE [ 74.999035][ T4718] binder: send failed reply for transaction 34, target dead [ 75.078726][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 75.080189][ T24] usb 1-1: config index 0 descriptor too short (asked for 9, got 0) [ 75.080204][ T24] usb 1-1: can't read configurations, error -22 [ 75.080372][ T24] usb usb1-port1: attempt power cycle [ 75.170109][ T6425] loop4: detected capacity change from 0 to 512 [ 75.173067][ T6425] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 3: comm syz.4.561: lblock 0 mapped to illegal pblock 3 (length 1) [ 75.173090][ T6425] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 75.177963][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 75.177982][ C1] EXT4-fs (loop4): initial error at time 75: ext4_map_blocks:790: inode 2: block 3 [ 75.178012][ C1] EXT4-fs (loop4): last error at time 75: ext4_map_blocks:790: inode 2: block 3 [ 75.180730][ T6425] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.561: error -EUCLEAN reading directory block [ 75.180938][ T6425] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 75.200510][ T6425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.213202][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.338640][ T6434] loop3: detected capacity change from 0 to 256 [ 75.641544][ T6435] random: crng reseeded on system resumption [ 75.677170][ T6435] Restarting kernel threads ... [ 75.677893][ T6435] Done restarting kernel threads. [ 75.689332][ T26] tipc: Node number set to 2886997007 [ 75.689378][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 76.146186][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 76.147183][ T24] usb 1-1: config index 0 descriptor too short (asked for 9, got 0) [ 76.147198][ T24] usb 1-1: can't read configurations, error -22 [ 76.185308][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.259821][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.260013][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.268061][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 76.289017][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 76.290050][ T24] usb 1-1: config index 0 descriptor too short (asked for 9, got 0) [ 76.290066][ T24] usb 1-1: can't read configurations, error -22 [ 76.290218][ T24] usb usb1-port1: unable to enumerate USB device [ 76.323038][ T6434] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 76.323059][ T6434] FAT-fs (loop3): Filesystem has been set read-only [ 76.390450][ T6447] loop3: detected capacity change from 0 to 512 [ 76.406981][ T6447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.423028][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.820129][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 77.240706][ T6469] xt_hashlimit: size too large, truncated to 1048576 [ 77.454379][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 77.500568][ T6473] bpf: Bad value for 'uid' [ 77.668464][ T6482] loop2: detected capacity change from 0 to 512 [ 77.673477][ T6482] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.702741][ T6482] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.579: Allocating blocks 41-42 which overlap fs metadata [ 77.702766][ T6482] loop2: lost filesystem error report for type 5 error -117 [ 77.703879][ T6482] EXT4-fs (loop2): Remounting filesystem read-only [ 77.703966][ T6482] Quota error (device loop2): write_blk: dquota write failed [ 77.703975][ T6482] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 77.704059][ T6482] Quota error (device loop2): write_blk: dquota write failed [ 77.704096][ T6482] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 77.704163][ T6482] EXT4-fs (loop2): 1 truncate cleaned up [ 77.704788][ T6482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.731325][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 78.034942][ T6490] loop3: detected capacity change from 0 to 128 [ 78.069149][ T6492] ip_tables: iptables: counters copy to user failed while replacing table [ 78.143933][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 78.371485][ T6500] overlayfs: failed to resolve './file1': -2 [ 78.853535][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.913752][ T6507] loop2: detected capacity change from 0 to 256 [ 78.919382][ T6507] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.931366][ T6507] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 78.931386][ T6507] FAT-fs (loop2): Filesystem has been set read-only [ 78.953190][ T6507] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 79.059473][ T30] audit: type=1326 audit(79.004:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.0.586" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf79368 code=0x7ffc0000 [ 79.059945][ T30] audit: type=1326 audit(79.004:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.0.586" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf79368 code=0x7ffc0000 [ 79.060934][ T30] audit: type=1326 audit(79.004:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.0.586" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf79368 code=0x7ffc0000 [ 79.060998][ T30] audit: type=1326 audit(79.004:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.0.586" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf79368 code=0x7ffc0000 [ 79.061909][ T30] audit: type=1326 audit(79.004:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.0.586" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9bf79368 code=0x7ffc0000 [ 79.062064][ T30] audit: type=1326 audit(79.004:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.0.586" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf79368 code=0x7ffc0000 [ 79.071010][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 79.535866][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 79.553907][ T6536] ucma_write: process 321 (syz.3.593) changed security contexts after opening file descriptor, this is not allowed. [ 79.807846][ T6543] loop3: detected capacity change from 0 to 128 [ 79.819604][ T6543] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.866701][ T4707] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.905320][ T6549] loop3: detected capacity change from 0 to 512 [ 79.915928][ T6549] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.596: missing EA_INODE flag [ 79.915950][ T6549] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 79.921137][ T6549] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.596: error while reading EA inode 12 err=-117 [ 79.921160][ T6549] loop3: lost filesystem error report for type 5 error -117 [ 79.921915][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 79.921928][ C0] EXT4-fs (loop3): initial error at time 79: ext4_xattr_inode_iget:437: inode 12 [ 79.921946][ C0] EXT4-fs (loop3): last error at time 79: ext4_xattr_inode_iget:442 [ 79.923265][ T6549] EXT4-fs (loop3): 1 orphan inode deleted [ 79.923826][ T6549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.950920][ T6553] netlink: 'syz.2.597': attribute type 29 has an invalid length. [ 80.019506][ T6553] loop5: detected capacity change from 0 to 7 [ 80.461041][ T6553] Dev loop5: unable to read RDB block 7 [ 80.461064][ T6553] loop5: unable to read partition table [ 80.461128][ T6553] loop5: partition table beyond EOD, truncated [ 80.465849][ T6553] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 80.485480][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 80.512469][ T6570] netlink: 'syz.1.599': attribute type 29 has an invalid length. [ 80.513417][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.629547][ T4342] Dev loop5: unable to read RDB block 7 [ 80.629569][ T4342] loop5: unable to read partition table [ 80.629631][ T4342] loop5: partition table beyond EOD, truncated [ 80.640502][ T6591] loop4: detected capacity change from 0 to 512 [ 80.655408][ T6601] tmpfs: Unknown parameter '`ol' [ 80.671291][ T6591] EXT4-fs error (device loop4): ext4_quota_enable:7260: inode #4: comm syz.4.604: casefold flag without casefold feature [ 80.671314][ T6591] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 80.671398][ T6591] EXT4-fs (loop4): Remounting filesystem read-only [ 80.671432][ T6591] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.671609][ T6591] EXT4-fs (loop4): mount failed [ 80.807018][ T6611] loop2: detected capacity change from 0 to 512 [ 80.807784][ T6611] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.819651][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.819833][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.821016][ T6611] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.609: Allocating blocks 41-42 which overlap fs metadata [ 80.821035][ T6611] loop2: lost filesystem error report for type 5 error -117 [ 80.822797][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.822813][ C0] EXT4-fs (loop2): initial error at time 80: ext4_mb_mark_diskspace_used:4223 [ 80.822826][ C0] EXT4-fs (loop2): last error at time 80: ext4_mb_mark_diskspace_used:4223 [ 80.824668][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 80.824859][ T6611] EXT4-fs (loop2): 1 truncate cleaned up [ 80.825328][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.887559][ T6624] netlink: zone id is out of range [ 80.887694][ T6624] netlink: del zone limit has 4 unknown bytes [ 80.889252][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 80.902351][ T4712] Bluetooth: hci0: ACL packet for unknown connection handle 6 [ 80.949207][ T6631] syzkaller0: entered promiscuous mode [ 80.949224][ T6631] syzkaller0: entered allmulticast mode [ 81.255653][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 81.681674][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.261311][ T4709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.265687][ T4709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.266507][ T4709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.266862][ T4709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.267208][ T4709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.513822][ T6690] loop4: detected capacity change from 0 to 512 [ 82.521819][ T6690] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.529539][ T6690] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.633: Allocating blocks 41-42 which overlap fs metadata [ 82.529560][ T6690] loop4: lost filesystem error report for type 5 error -117 [ 82.530587][ T6690] EXT4-fs (loop4): Remounting filesystem read-only [ 82.530749][ T6690] EXT4-fs (loop4): 1 truncate cleaned up [ 82.531219][ T6690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.620575][ T4709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.623050][ T4709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.624128][ T4709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.624527][ T4709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.624763][ T4709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.624987][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.625267][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.625379][ T6674] bridge_slave_0: entered allmulticast mode [ 82.655621][ T6674] bridge_slave_0: entered promiscuous mode [ 82.661726][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.662505][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.662589][ T6674] bridge_slave_1: entered allmulticast mode [ 82.664690][ T6674] bridge_slave_1: entered promiscuous mode [ 82.677523][ T6704] FAULT_INJECTION: forcing a failure. [ 82.677523][ T6704] name failslab, interval 1, probability 0, space 0, times 0 [ 82.677547][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.3.636 Not tainted syzkaller #0 PREEMPT [ 82.677559][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.677565][ T6704] Call trace: [ 82.677568][ T6704] show_stack+0x2c/0x3c (C) [ 82.677588][ T6704] __dump_stack+0x30/0x40 [ 82.677600][ T6704] dump_stack_lvl+0xd8/0x12c [ 82.677611][ T6704] dump_stack+0x1c/0x28 [ 82.677625][ T6704] should_fail_ex+0x41c/0x590 [ 82.677639][ T6704] should_failslab+0xc4/0x120 [ 82.677652][ T6704] __kmalloc_noprof+0x108/0x6c8 [ 82.677661][ T6704] fib6_info_alloc+0x38/0xf4 [ 82.677675][ T6704] ip6_route_info_create+0x11c/0x708 [ 82.677685][ T6704] ip6_route_add+0x60/0x1b4 [ 82.677695][ T6704] rt6_add_dflt_router+0x168/0x294 [ 82.677705][ T6704] ndisc_router_discovery+0x3110/0x34f8 [ 82.677715][ T6704] ndisc_rcv+0x40c/0x730 [ 82.677724][ T6704] icmpv6_rcv+0xf78/0x1864 [ 82.677735][ T6704] ip6_protocol_deliver_rcu+0x808/0x12e0 [ 82.677746][ T6704] ip6_input_finish+0x154/0x34c [ 82.677757][ T6704] NF_HOOK+0x308/0x398 [ 82.677766][ T6704] ip6_input+0x17c/0x29c [ 82.677776][ T6704] ip6_mc_input+0x5f8/0xb28 [ 82.677786][ T6704] ip6_rcv_finish+0x1e0/0x204 [ 82.677796][ T6704] NF_HOOK+0x308/0x398 [ 82.677806][ T6704] ipv6_rcv+0x9c/0xbc [ 82.677816][ T6704] __netif_receive_skb_one_core+0xc8/0x110 [ 82.677827][ T6704] __netif_receive_skb+0x34/0x128 [ 82.677839][ T6704] netif_receive_skb+0x1e0/0xad0 [ 82.677849][ T6704] tun_rx_batched+0x180/0x620 [ 82.677860][ T6704] tun_get_user+0x2330/0x36d0 [ 82.677869][ T6704] tun_chr_write_iter+0xfc/0x168 [ 82.677878][ T6704] vfs_write+0x51c/0xa0c [ 82.677891][ T6704] ksys_write+0x12c/0x228 [ 82.677903][ T6704] __arm64_sys_write+0x84/0x98 [ 82.677915][ T6704] invoke_syscall+0x98/0x244 [ 82.677927][ T6704] el0_svc_common+0xec/0x23c [ 82.677939][ T6704] do_el0_svc+0x4c/0x5c [ 82.677950][ T6704] el0_svc+0x64/0x260 [ 82.677962][ T6704] el0t_64_sync_handler+0x44/0x104 [ 82.677973][ T6704] el0t_64_sync+0x198/0x19c [ 82.678006][ T6704] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.688884][ T6674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.689764][ T6674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.714289][ T6674] team0: Port device team_slave_0 added [ 82.717764][ T4709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.722137][ T4709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.725875][ T4709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.726799][ T6674] team0: Port device team_slave_1 added [ 82.732932][ T4709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.737735][ T4709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.769372][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.769385][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.769400][ T6674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.770038][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.770046][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.770062][ T6674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.820107][ T6674] hsr_slave_0: entered promiscuous mode [ 82.820425][ T6674] hsr_slave_1: entered promiscuous mode [ 82.820623][ T6674] debugfs: 'hsr0' already exists in 'hsr' [ 82.820635][ T6674] Cannot create hsr debugfs directory [ 82.844081][ T12] vlan2: left allmulticast mode [ 82.844099][ T12] ip6gretap0: left allmulticast mode [ 82.844125][ T12] vlan2: left promiscuous mode [ 82.844134][ T12] ip6gretap0: left promiscuous mode [ 82.844670][ T12] bridge0: port 3(vlan2) entered disabled state [ 82.854317][ T12] bridge_slave_1: left allmulticast mode [ 82.854343][ T12] bridge_slave_1: left promiscuous mode [ 82.854424][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.855873][ T12] bridge_slave_0: left allmulticast mode [ 82.855884][ T12] bridge_slave_0: left promiscuous mode [ 82.855942][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.940807][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.979858][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.033409][ T12] bond0 (unregistering): Released all slaves [ 83.093114][ T6720] loop3: detected capacity change from 0 to 512 [ 83.095543][ T6720] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 84.074269][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.129433][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 84.284884][ T6759] loop4: detected capacity change from 0 to 512 [ 84.293441][ T6759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.301311][ T6759] EXT4-fs (loop4): 1 truncate cleaned up [ 84.301760][ T6759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.380929][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.643'. [ 84.458742][ T4712] Bluetooth: hci1: command tx timeout [ 84.558346][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.588460][ T12] hsr_slave_0: left promiscuous mode [ 84.589416][ T12] hsr_slave_1: left promiscuous mode [ 84.589755][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.590922][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.624882][ T6779] loop4: detected capacity change from 0 to 8 [ 84.661230][ T6779] SQUASHFS error: Failed to read block 0x4de: -5 [ 84.661245][ T6779] SQUASHFS error: Unable to read data cache entry [4de] [ 84.661251][ T6779] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 84.661382][ T6779] SQUASHFS error: Unable to read data cache entry [4de] [ 84.661388][ T6779] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 84.661418][ T6779] SQUASHFS error: Unable to read data cache entry [4de] [ 84.661423][ T6779] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 84.661440][ T6779] SQUASHFS error: Unable to read data cache entry [4de] [ 84.661445][ T6779] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 84.663558][ T6779] SQUASHFS error: Unable to read data cache entry [4de] [ 84.663567][ T6779] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 84.663645][ T6779] SQUASHFS error: Unable to read data cache entry [4de] [ 84.663652][ T6779] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 84.663673][ T6779] SQUASHFS error: Unable to read data cache entry [4de] [ 84.663678][ T6779] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 84.716361][ T12] team0 (unregistering): Port device team_slave_1 removed [ 84.720142][ T4712] Bluetooth: hci3: command tx timeout [ 84.723560][ T12] team0 (unregistering): Port device team_slave_0 removed [ 84.815366][ T6789] loop4: detected capacity change from 0 to 256 [ 84.817155][ T6789] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.819484][ T6789] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 84.819503][ T6789] FAT-fs (loop4): Filesystem has been set read-only [ 84.887638][ T4712] Bluetooth: hci4: command tx timeout [ 84.935885][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.935917][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.936000][ T6705] bridge_slave_0: entered allmulticast mode [ 84.936487][ T6705] bridge_slave_0: entered promiscuous mode [ 84.940717][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.940744][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.940806][ T6705] bridge_slave_1: entered allmulticast mode [ 84.941288][ T6705] bridge_slave_1: entered promiscuous mode [ 84.945269][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.945292][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.945348][ T6698] bridge_slave_0: entered allmulticast mode [ 84.946024][ T6698] bridge_slave_0: entered promiscuous mode [ 84.947346][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.947377][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.947431][ T6698] bridge_slave_1: entered allmulticast mode [ 84.947844][ T6698] bridge_slave_1: entered promiscuous mode [ 85.198259][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.199736][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.200694][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.211831][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.229239][ T6705] team0: Port device team_slave_0 added [ 85.229998][ T6705] team0: Port device team_slave_1 added [ 85.253021][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.253035][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.253047][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.253714][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.254882][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.254912][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.261357][ T6698] team0: Port device team_slave_0 added [ 85.262214][ T6698] team0: Port device team_slave_1 added [ 85.310872][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.310887][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.310904][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.324350][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.324362][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.324380][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.331936][ T6674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.338935][ T6674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.347717][ T6705] hsr_slave_0: entered promiscuous mode [ 85.348156][ T6705] hsr_slave_1: entered promiscuous mode [ 85.348356][ T6705] debugfs: 'hsr0' already exists in 'hsr' [ 85.348367][ T6705] Cannot create hsr debugfs directory [ 85.348532][ T6674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.351238][ T6674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.363351][ T6674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.365463][ T6674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.367552][ T6698] hsr_slave_0: entered promiscuous mode [ 85.367958][ T6698] hsr_slave_1: entered promiscuous mode [ 85.368185][ T6698] debugfs: 'hsr0' already exists in 'hsr' [ 85.368196][ T6698] Cannot create hsr debugfs directory [ 85.368703][ T6674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.370943][ T6674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.408197][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.503402][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.529018][ T6674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.541944][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.550277][ T6674] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.554350][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.554378][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.556446][ T243] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.556469][ T243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.604610][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.668787][ T6674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.694750][ T6674] veth0_vlan: entered promiscuous mode [ 85.702593][ T6674] veth1_vlan: entered promiscuous mode [ 85.784968][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.793183][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.819038][ T12] bond0 (unregistering): Released all slaves [ 85.851419][ T6674] veth0_macvtap: entered promiscuous mode [ 85.856948][ T6674] veth1_macvtap: entered promiscuous mode [ 85.859202][ T12] tipc: Disabling bearer [ 85.876374][ T12] tipc: Left network mode [ 85.878948][ T6674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.880751][ T6674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.931257][ T6848] loop4: detected capacity change from 0 to 512 [ 85.933606][ T6848] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.948505][ T6848] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.649: Allocating blocks 41-42 which overlap fs metadata [ 85.948584][ T6848] loop4: lost filesystem error report for type 5 error -117 [ 85.948732][ T6848] EXT4-fs (loop4): Remounting filesystem read-only [ 85.948771][ T6848] __quota_error: 38 callbacks suppressed [ 85.948778][ T6848] Quota error (device loop4): write_blk: dquota write failed [ 85.948785][ T6848] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 85.948920][ T6848] Quota error (device loop4): write_blk: dquota write failed [ 85.948951][ T6848] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 85.949010][ T6848] EXT4-fs (loop4): 1 truncate cleaned up [ 85.951199][ T6848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.024059][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.024235][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.024350][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.024495][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.027409][ T243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.027420][ T243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.039243][ T243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.039255][ T243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.438666][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 86.469939][ T12] hsr_slave_0: left promiscuous mode [ 86.470207][ T12] hsr_slave_1: left promiscuous mode [ 86.471084][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.471120][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.471572][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.471582][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.488016][ T12] veth1_macvtap: left promiscuous mode [ 86.488079][ T12] veth0_macvtap: left promiscuous mode [ 86.488158][ T12] veth1_vlan: left promiscuous mode [ 86.488179][ T12] veth0_vlan: left promiscuous mode [ 86.594104][ T4712] Bluetooth: hci1: command tx timeout [ 86.700822][ T6879] loop2: detected capacity change from 0 to 512 [ 86.704039][ T6879] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 86.924641][ T4712] Bluetooth: hci3: command tx timeout [ 87.093923][ T4712] Bluetooth: hci4: command tx timeout [ 87.527235][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.647913][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.659216][ T6885] loop3: detected capacity change from 0 to 512 [ 87.666555][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.722079][ T4824] kernel read not supported for file /9/net/pfkey (pid: 4824 comm: kworker/0:6) [ 87.726786][ T6885] loop3: detected capacity change from 0 to 512 [ 87.791675][ T6885] loop3: detected capacity change from 0 to 512 [ 87.827380][ T6892] netlink: 'syz.4.656': attribute type 50 has an invalid length. [ 87.831172][ T6885] loop3: detected capacity change from 0 to 512 [ 87.865310][ T6898] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.884838][ T6898] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 87.884859][ T6898] FAT-fs (loop2): Filesystem has been set read-only [ 88.394178][ T6885] set_capacity_and_notify: 6 callbacks suppressed [ 88.394192][ T6885] loop3: detected capacity change from 0 to 512 [ 88.460537][ T6885] loop3: detected capacity change from 0 to 512 [ 88.479022][ T6698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.482915][ T6698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.483392][ T6698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.498370][ T6698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.498766][ T6698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.505358][ T6698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.511665][ T6885] loop3: detected capacity change from 0 to 512 [ 88.513655][ T6698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.530256][ T6698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.578368][ T6705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.590849][ T6935] loop3: detected capacity change from 0 to 512 [ 88.607783][ T6935] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.622490][ T6935] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.663: Allocating blocks 41-42 which overlap fs metadata [ 88.622512][ T6935] loop3: lost filesystem error report for type 5 error -117 [ 88.622836][ T6935] EXT4-fs (loop3): Remounting filesystem read-only [ 88.623142][ T6935] Quota error (device loop3): write_blk: dquota write failed [ 88.623153][ T6935] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 88.624011][ T6935] Quota error (device loop3): write_blk: dquota write failed [ 88.624055][ T6935] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 88.624123][ T6935] EXT4-fs (loop3): 1 truncate cleaned up [ 88.626614][ T6935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.651767][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.655109][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.665530][ T6698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.665548][ T6698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.686140][ T6946] input: syz0 as /devices/virtual/input/input5 [ 88.706938][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.706966][ T5517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.708684][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.708707][ T5517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.742020][ T6705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.807331][ T4712] Bluetooth: hci1: command tx timeout [ 88.840521][ T6705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.881588][ T6963] loop4: detected capacity change from 0 to 256 [ 88.997560][ T6982] loop4: detected capacity change from 0 to 8 [ 88.997873][ T6705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.032562][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.071496][ T30] audit: type=1326 audit(88.713:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.4.669" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 89.071583][ T30] audit: type=1326 audit(88.713:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.4.669" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79368 code=0x7ffc0000 [ 89.096680][ T6698] veth0_vlan: entered promiscuous mode [ 89.131281][ T6698] veth1_vlan: entered promiscuous mode [ 89.151107][ T4712] Bluetooth: hci3: command tx timeout [ 89.170001][ T6990] netlink: 128 bytes leftover after parsing attributes in process `syz.2.670'. [ 89.180103][ T6698] veth0_macvtap: entered promiscuous mode [ 89.196751][ T6698] veth1_macvtap: entered promiscuous mode [ 89.254601][ T6999] loop4: detected capacity change from 0 to 512 [ 89.262798][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.274226][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.279117][ T5517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.279263][ T5517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.279337][ T5517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.279404][ T5517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.283127][ T6999] EXT4-fs (loop4): 1 truncate cleaned up [ 89.283542][ T6999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.334233][ T4712] Bluetooth: hci4: command tx timeout [ 89.354351][ T6705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.367946][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.370210][ T6705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.375028][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.386766][ T6705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.402033][ T4713] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /137/file0: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 89.402178][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.406588][ T5517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.406603][ T5517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.407147][ T6705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.420259][ T4713] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /137/file0/file0: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 89.431140][ T4713] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 89.433665][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.437120][ T4713] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 89.502762][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.502779][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.514279][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.556891][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.570797][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.578978][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.579021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.582930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.582953][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.604178][ T7027] loop3: detected capacity change from 0 to 8192 [ 89.652793][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.727709][ T1266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.821369][ T1266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.850195][ T4709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.853405][ T4709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.854188][ T4709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.854894][ T4709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.855350][ T4709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.948881][ T1266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.964593][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.003028][ T6705] veth0_vlan: entered promiscuous mode [ 90.005941][ T6705] veth1_vlan: entered promiscuous mode [ 90.029190][ T1266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.039777][ T6705] veth0_macvtap: entered promiscuous mode [ 90.042508][ T6705] veth1_macvtap: entered promiscuous mode [ 90.047824][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.062098][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.088966][ T5517] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.089961][ T1188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.089981][ T1188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.090005][ T1188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.160052][ T7069] fuse: Bad value for 'max_read' [ 90.182696][ T1266] bridge_slave_1: left allmulticast mode [ 90.182717][ T1266] bridge_slave_1: left promiscuous mode [ 90.182797][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.190117][ T1266] bridge_slave_0: left allmulticast mode [ 90.190138][ T1266] bridge_slave_0: left promiscuous mode [ 90.190207][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.199068][ T1266] tipc: Resetting bearer [ 90.243097][ T1266] tipc: Disabling bearer [ 90.273051][ T1266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.288354][ T1266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.314162][ T1266] bond0 (unregistering): Released all slaves [ 90.320301][ T6022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.320314][ T6022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.359950][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.359965][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.375565][ T1266] tipc: Left network mode [ 90.581659][ T7098] loop2: detected capacity change from 0 to 512 [ 90.588207][ T7098] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.606646][ T7098] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.685: Allocating blocks 41-42 which overlap fs metadata [ 90.606669][ T7098] loop2: lost filesystem error report for type 5 error -117 [ 90.607177][ T7098] EXT4-fs (loop2): Remounting filesystem read-only [ 90.607437][ T7098] EXT4-fs (loop2): 1 truncate cleaned up [ 90.610918][ T7098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.940758][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.940795][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.940891][ T7052] bridge_slave_0: entered allmulticast mode [ 90.941375][ T7052] bridge_slave_0: entered promiscuous mode [ 90.942195][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.942233][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.942289][ T7052] bridge_slave_1: entered allmulticast mode [ 90.942711][ T7052] bridge_slave_1: entered promiscuous mode [ 91.019479][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 91.026944][ T1266] hsr_slave_0: left promiscuous mode [ 91.028591][ T1266] hsr_slave_1: left promiscuous mode [ 91.028892][ T1266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.028904][ T1266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.029384][ T1266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.029394][ T1266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.047236][ T4712] Bluetooth: hci1: command tx timeout [ 91.047807][ T1266] veth1_macvtap: left promiscuous mode [ 91.047835][ T1266] veth0_macvtap: left promiscuous mode [ 91.047924][ T1266] veth1_vlan: left promiscuous mode [ 91.047961][ T1266] veth0_vlan: left promiscuous mode [ 91.198176][ T1266] team0 (unregistering): Port device team_slave_1 removed [ 91.203399][ T1266] team0 (unregistering): Port device team_slave_0 removed [ 91.293168][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.303847][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 91.310261][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.361870][ T7121] hsr_slave_1 (unregistering): left promiscuous mode [ 91.392801][ T4712] Bluetooth: hci3: command tx timeout [ 91.397721][ T7052] team0: Port device team_slave_0 added [ 91.405458][ T7052] team0: Port device team_slave_1 added [ 91.415315][ T7126] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 91.416115][ T7126] FAULT_INJECTION: forcing a failure. [ 91.416115][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.416130][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.1.691 Not tainted syzkaller #0 PREEMPT [ 91.416141][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.416146][ T7126] Call trace: [ 91.416149][ T7126] show_stack+0x2c/0x3c (C) [ 91.416170][ T7126] __dump_stack+0x30/0x40 [ 91.416184][ T7126] dump_stack_lvl+0xd8/0x12c [ 91.416195][ T7126] dump_stack+0x1c/0x28 [ 91.416206][ T7126] should_fail_ex+0x41c/0x590 [ 91.416219][ T7126] should_fail+0x14/0x24 [ 91.416231][ T7126] should_fail_usercopy+0x20/0x30 [ 91.416244][ T7126] arch_do_signal_or_restart+0x2e18/0x444c [ 91.416256][ T7126] exit_to_user_mode_loop+0x70/0x17c [ 91.416268][ T7126] el0_da+0x1a4/0x254 [ 91.416280][ T7126] el0t_64_sync_handler+0xd8/0x104 [ 91.416291][ T7126] el0t_64_sync+0x198/0x19c [ 91.437054][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.437068][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.437080][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.441595][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.441607][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.441621][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.500463][ T6674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.559024][ T7052] hsr_slave_0: entered promiscuous mode [ 91.566353][ T4712] Bluetooth: hci4: command tx timeout [ 91.567938][ T7052] hsr_slave_1: entered promiscuous mode [ 91.568196][ T7052] debugfs: 'hsr0' already exists in 'hsr' [ 91.568207][ T7052] Cannot create hsr debugfs directory [ 91.760388][ T7052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.764635][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.766933][ T7052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.776862][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.781416][ T7052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.787258][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.787774][ T7052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.796236][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.844412][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.860565][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.864839][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.864871][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.874165][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.874195][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.923561][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 91.934613][ T7164] loop2: detected capacity change from 0 to 256 [ 91.941985][ T7164] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.950919][ T7164] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.950939][ T7164] FAT-fs (loop2): Filesystem has been set read-only [ 91.972583][ T7170] FAULT_INJECTION: forcing a failure. [ 91.972583][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 91.972606][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.1.698 Not tainted syzkaller #0 PREEMPT [ 91.972618][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.972624][ T7170] Call trace: [ 91.972627][ T7170] show_stack+0x2c/0x3c (C) [ 91.972647][ T7170] __dump_stack+0x30/0x40 [ 91.972660][ T7170] dump_stack_lvl+0xd8/0x12c [ 91.972671][ T7170] dump_stack+0x1c/0x28 [ 91.972682][ T7170] should_fail_ex+0x41c/0x590 [ 91.972696][ T7170] should_failslab+0xc4/0x120 [ 91.972709][ T7170] kmem_cache_alloc_noprof+0x94/0x5d4 [ 91.972718][ T7170] sk_prot_alloc+0x60/0x1e8 [ 91.972727][ T7170] sk_alloc+0x44/0x3ac [ 91.972734][ T7170] __vsock_create+0x4c/0x7f0 [ 91.972748][ T7170] vsock_create+0x12c/0x38c [ 91.972755][ T7170] __sock_create+0x31c/0x670 [ 91.972765][ T7170] __sys_socket_create+0xc0/0x11c [ 91.972775][ T7170] __sys_socket+0x44/0xec [ 91.972784][ T7170] __arm64_sys_socket+0x84/0x9c [ 91.972794][ T7170] invoke_syscall+0x98/0x244 [ 91.972806][ T7170] el0_svc_common+0xec/0x23c [ 91.972817][ T7170] do_el0_svc+0x4c/0x5c [ 91.972828][ T7170] el0_svc+0x64/0x260 [ 91.972839][ T7170] el0t_64_sync_handler+0x44/0x104 [ 91.972851][ T7170] el0t_64_sync+0x198/0x19c [ 92.081984][ T4712] Bluetooth: hci2: command tx timeout [ 92.376823][ T7188] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.398429][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.399424][ T7188] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.701: Allocating blocks 41-42 which overlap fs metadata [ 92.399442][ T7188] loop3: lost filesystem error report for type 5 error -117 [ 92.399699][ T7188] EXT4-fs (loop3): Remounting filesystem read-only [ 92.399749][ T7188] __quota_error: 19 callbacks suppressed [ 92.399757][ T7188] Quota error (device loop3): write_blk: dquota write failed [ 92.399766][ T7188] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 92.399811][ T7188] Quota error (device loop3): write_blk: dquota write failed [ 92.399843][ T7188] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 92.399898][ T7188] EXT4-fs (loop3): 1 truncate cleaned up [ 92.400369][ T7188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.544253][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.820685][ T7052] veth0_vlan: entered promiscuous mode [ 92.829592][ T7052] veth1_vlan: entered promiscuous mode [ 92.840791][ T7052] veth0_macvtap: entered promiscuous mode [ 92.844644][ T7052] veth1_macvtap: entered promiscuous mode [ 92.853222][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.857935][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.872622][ T5517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.892714][ T1266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.906532][ T243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.906548][ T243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.925527][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.925559][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.925721][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.925730][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.947729][ T7218] FAULT_INJECTION: forcing a failure. [ 92.947729][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 92.947750][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.0.703 Not tainted syzkaller #0 PREEMPT [ 92.947761][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.947767][ T7218] Call trace: [ 92.947770][ T7218] show_stack+0x2c/0x3c (C) [ 92.947791][ T7218] __dump_stack+0x30/0x40 [ 92.947803][ T7218] dump_stack_lvl+0xd8/0x12c [ 92.947814][ T7218] dump_stack+0x1c/0x28 [ 92.947825][ T7218] should_fail_ex+0x41c/0x590 [ 92.947838][ T7218] should_failslab+0xc4/0x120 [ 92.947851][ T7218] kmem_cache_alloc_noprof+0x94/0x5d4 [ 92.947860][ T7218] do_getname+0x48/0x234 [ 92.947868][ T7218] __arm64_sys_mknodat+0xa8/0xe8 [ 92.947879][ T7218] invoke_syscall+0x98/0x244 [ 92.947894][ T7218] el0_svc_common+0xec/0x23c [ 92.947906][ T7218] do_el0_svc+0x4c/0x5c [ 92.947917][ T7218] el0_svc+0x64/0x260 [ 92.947929][ T7218] el0t_64_sync_handler+0x44/0x104 [ 92.947940][ T7218] el0t_64_sync+0x198/0x19c [ 93.014519][ T7221] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 93.187686][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.199984][ T7243] FAULT_INJECTION: forcing a failure. [ 93.199984][ T7243] name fail_futex, interval 1, probability 0, space 0, times 1 [ 93.200018][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.5.708 Not tainted syzkaller #0 PREEMPT [ 93.200031][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.200036][ T7243] Call trace: [ 93.200039][ T7243] show_stack+0x2c/0x3c (C) [ 93.200060][ T7243] __dump_stack+0x30/0x40 [ 93.200072][ T7243] dump_stack_lvl+0xd8/0x12c [ 93.200084][ T7243] dump_stack+0x1c/0x28 [ 93.200094][ T7243] should_fail_ex+0x41c/0x590 [ 93.200107][ T7243] should_fail+0x14/0x24 [ 93.200119][ T7243] get_futex_key+0x1ec/0x12b0 [ 93.200130][ T7243] futex_wake+0x10c/0x594 [ 93.200141][ T7243] do_futex+0x2c4/0x378 [ 93.200151][ T7243] __arm64_sys_futex+0x2e4/0x418 [ 93.200162][ T7243] invoke_syscall+0x98/0x244 [ 93.200174][ T7243] el0_svc_common+0xec/0x23c [ 93.200185][ T7243] do_el0_svc+0x4c/0x5c [ 93.200196][ T7243] el0_svc+0x64/0x260 [ 93.200208][ T7243] el0t_64_sync_handler+0x44/0x104 [ 93.200219][ T7243] el0t_64_sync+0x198/0x19c [ 93.305013][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.355793][ T7252] faux_driver vgem: [drm] Unknown color mode 135167; guessing buffer size. [ 93.417623][ T7258] dvmrp5: entered allmulticast mode [ 93.431922][ T7267] FAULT_INJECTION: forcing a failure. [ 93.431922][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 93.431953][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.5.713 Not tainted syzkaller #0 PREEMPT [ 93.431970][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.431976][ T7267] Call trace: [ 93.431979][ T7267] show_stack+0x2c/0x3c (C) [ 93.432008][ T7267] __dump_stack+0x30/0x40 [ 93.432021][ T7267] dump_stack_lvl+0xd8/0x12c [ 93.432033][ T7267] dump_stack+0x1c/0x28 [ 93.432044][ T7267] should_fail_ex+0x41c/0x590 [ 93.432058][ T7267] should_failslab+0xc4/0x120 [ 93.432071][ T7267] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 93.432080][ T7267] kstrdup+0x50/0x104 [ 93.432089][ T7267] __request_module+0x2f0/0x794 [ 93.432099][ T7267] crypto_alg_mod_lookup+0x88/0x3fc [ 93.432111][ T7267] crypto_add_alg+0x20c/0x350 [ 93.432121][ T7267] crypto_user_rcv_msg+0x448/0x510 [ 93.432131][ T7267] netlink_rcv_skb+0x238/0x414 [ 93.432143][ T7267] crypto_netlink_rcv+0x3c/0x54 [ 93.432152][ T7267] netlink_unicast+0x600/0x7f8 [ 93.432162][ T7267] netlink_sendmsg+0x648/0x948 [ 93.432172][ T7267] __sock_sendmsg+0xc8/0x17c [ 93.432182][ T7267] ____sys_sendmsg+0x3d0/0x6c8 [ 93.432193][ T7267] ___sys_sendmsg+0x198/0x224 [ 93.432203][ T7267] __sys_sendmsg+0x158/0x204 [ 93.432213][ T7267] __arm64_sys_sendmsg+0x88/0x9c [ 93.432223][ T7267] invoke_syscall+0x98/0x244 [ 93.432235][ T7267] el0_svc_common+0xec/0x23c [ 93.432247][ T7267] do_el0_svc+0x4c/0x5c [ 93.432258][ T7267] el0_svc+0x64/0x260 [ 93.432270][ T7267] el0t_64_sync_handler+0x44/0x104 [ 93.432281][ T7267] el0t_64_sync+0x198/0x19c [ 93.445648][ T7270] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.457163][ T7271] tipc: Can't bind to reserved service type 0 [ 93.541103][ T7271] @0Ù: renamed from bond_slave_1 (while UP) [ 94.044886][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.5.723'. [ 94.148334][ T7304] set_capacity_and_notify: 2 callbacks suppressed [ 94.148348][ T7304] loop5: detected capacity change from 0 to 4096 [ 94.148636][ T7304] ext4: Unknown parameter './file1' [ 94.385202][ T4712] Bluetooth: hci2: command tx timeout [ 94.515683][ T7317] syz.1.730 (7317): drop_caches: 0 [ 94.608526][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.084863][ T7354] loop2: detected capacity change from 0 to 512 [ 95.105612][ T7354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.120833][ T7354] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted [ 95.138025][ T6674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.433212][ T7379] loop2: detected capacity change from 0 to 512 [ 95.441678][ T7379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 95.441717][ T7379] System zones: 1-12 [ 95.443693][ T7379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.748: missing EA_INODE flag [ 95.443717][ T7379] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.443877][ T7379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.748: error while reading EA inode 12 err=-117 [ 95.443893][ T7379] loop2: lost filesystem error report for type 5 error -117 [ 95.444022][ T7379] EXT4-fs (loop2): 1 orphan inode deleted [ 95.444490][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.513170][ T7379] xt_hashlimit: size too large, truncated to 1048576 [ 95.626493][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 95.635182][ T6674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.661418][ T7390] syzkaller0: entered promiscuous mode [ 95.661438][ T7390] syzkaller0: entered allmulticast mode [ 96.148017][ T7406] loop2: detected capacity change from 0 to 8 [ 96.582432][ T4712] Bluetooth: hci2: command tx timeout [ 96.596597][ T7424] loop5: detected capacity change from 0 to 2048 [ 96.649383][ T7424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.121324][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 97.494657][ T7423] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 97.495647][ T7423] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.495662][ T7423] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.495662][ T7423] [ 97.495670][ T7423] EXT4-fs (loop5): Total free blocks count 0 [ 97.495676][ T7423] EXT4-fs (loop5): Free/Dirty block details [ 97.495692][ T7423] EXT4-fs (loop5): free_blocks=4096 [ 97.495708][ T7423] EXT4-fs (loop5): dirty_blocks=64 [ 97.495714][ T7423] EXT4-fs (loop5): Block reservation details [ 97.495719][ T7423] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 97.544503][ T243] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 97.592413][ T7454] loop5: detected capacity change from 0 to 512 [ 97.633687][ T7454] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 97.633709][ T7454] FAT-fs (loop5): Filesystem has been set read-only [ 97.704742][ T7460] loop2: detected capacity change from 0 to 128 [ 97.717834][ T7460] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.754930][ T7462] fuse: Unknown parameter '' [ 97.822124][ T7463] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 98.116470][ T7470] syzkaller0: entered promiscuous mode [ 98.116489][ T7470] syzkaller0: entered allmulticast mode [ 98.126947][ T6674] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.227067][ T7473] loop2: detected capacity change from 0 to 1024 [ 98.231269][ T7473] EXT4-fs: Ignoring removed bh option [ 98.251746][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.515868][ T6674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.611851][ T7487] loop3: detected capacity change from 0 to 2048 [ 98.705232][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.952863][ T4712] Bluetooth: hci2: command tx timeout [ 99.471351][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 99.573991][ T7486] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 99.577332][ T7486] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.577354][ T7486] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.577354][ T7486] [ 99.577363][ T7486] EXT4-fs (loop3): Total free blocks count 0 [ 99.577370][ T7486] EXT4-fs (loop3): Free/Dirty block details [ 99.577377][ T7486] EXT4-fs (loop3): free_blocks=4096 [ 99.577385][ T7486] EXT4-fs (loop3): dirty_blocks=64 [ 99.577390][ T7486] EXT4-fs (loop3): Block reservation details [ 99.577396][ T7486] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 99.914533][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 99.979991][ T7522] loop5: detected capacity change from 0 to 128 [ 99.995307][ T7522] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.061467][ T7052] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.114659][ T54] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 100.159923][ T7532] loop5: detected capacity change from 0 to 1024 [ 100.160394][ T7532] EXT4-fs: Ignoring removed bh option [ 100.231985][ T7532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.629341][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.662889][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 100.690095][ T7547] syzkaller0: entered promiscuous mode [ 100.690113][ T7547] syzkaller0: entered allmulticast mode [ 101.456265][ T7571] loop5: detected capacity change from 0 to 8 [ 101.467860][ T7573] FAULT_INJECTION: forcing a failure. [ 101.467860][ T7573] name failslab, interval 1, probability 0, space 0, times 0 [ 101.467881][ T7573] CPU: 1 UID: 0 PID: 7573 Comm: syz.3.799 Not tainted syzkaller #0 PREEMPT [ 101.467893][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.467900][ T7573] Call trace: [ 101.467903][ T7573] show_stack+0x2c/0x3c (C) [ 101.467925][ T7573] __dump_stack+0x30/0x40 [ 101.467939][ T7573] dump_stack_lvl+0xd8/0x12c [ 101.467951][ T7573] dump_stack+0x1c/0x28 [ 101.467962][ T7573] should_fail_ex+0x41c/0x590 [ 101.467976][ T7573] should_failslab+0xc4/0x120 [ 101.467995][ T7573] __kmalloc_cache_noprof+0x94/0x5fc [ 101.468004][ T7573] vicodec_open+0xe8/0x9a0 [ 101.468017][ T7573] v4l2_open+0x198/0x338 [ 101.468025][ T7573] chrdev_open+0x398/0x3e8 [ 101.468037][ T7573] do_dentry_open+0x5c4/0xfc0 [ 101.468049][ T7573] vfs_open+0x44/0x2dc [ 101.468060][ T7573] path_openat+0x1084/0x18f4 [ 101.468070][ T7573] do_file_open+0x1c8/0x2e8 [ 101.468080][ T7573] do_sys_openat2+0x114/0x1e8 [ 101.468092][ T7573] do_sys_open+0xb0/0xe0 [ 101.468103][ T7573] __arm64_sys_openat+0xa8/0xc4 [ 101.468115][ T7573] invoke_syscall+0x98/0x244 [ 101.468128][ T7573] el0_svc_common+0xec/0x23c [ 101.468139][ T7573] do_el0_svc+0x4c/0x5c [ 101.468150][ T7573] el0_svc+0x64/0x260 [ 101.468162][ T7573] el0t_64_sync_handler+0x44/0x104 [ 101.468174][ T7573] el0t_64_sync+0x198/0x19c [ 101.501028][ T7575] loop3: detected capacity change from 0 to 2048 [ 101.529531][ T7575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.599493][ T7580] loop5: detected capacity change from 0 to 2048 [ 101.637921][ T7580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 101.655028][ T7580] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.803: bg 0: block 240: padding at end of block bitmap is not set [ 101.683619][ T7580] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 101.683645][ T7580] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.683645][ T7580] [ 101.683654][ T7580] EXT4-fs (loop5): Total free blocks count 0 [ 101.683661][ T7580] EXT4-fs (loop5): Free/Dirty block details [ 101.683680][ T7580] EXT4-fs (loop5): free_blocks=0 [ 101.683696][ T7580] EXT4-fs (loop5): dirty_blocks=16 [ 101.683703][ T7580] EXT4-fs (loop5): Block reservation details [ 101.683709][ T7580] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 102.539544][ T4801] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 102.728711][ T4801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.728743][ T4801] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 102.731863][ T4801] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 102.745466][ T4801] usb 1-1: string descriptor 0 read error: -22 [ 102.745521][ T4801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.888859][ T7574] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 102.891390][ T7574] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.891402][ T7574] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.891402][ T7574] [ 102.891410][ T7574] EXT4-fs (loop3): Total free blocks count 0 [ 102.891416][ T7574] EXT4-fs (loop3): Free/Dirty block details [ 102.891423][ T7574] EXT4-fs (loop3): free_blocks=4096 [ 102.891431][ T7574] EXT4-fs (loop3): dirty_blocks=64 [ 102.891436][ T7574] EXT4-fs (loop3): Block reservation details [ 102.891442][ T7574] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 102.990485][ T1207] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 103.103733][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 103.152647][ T7612] FAULT_INJECTION: forcing a failure. [ 103.152647][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 103.152670][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.3.813 Not tainted syzkaller #0 PREEMPT [ 103.152685][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.152691][ T7612] Call trace: [ 103.152694][ T7612] show_stack+0x2c/0x3c (C) [ 103.152715][ T7612] __dump_stack+0x30/0x40 [ 103.152727][ T7612] dump_stack_lvl+0xd8/0x12c [ 103.152739][ T7612] dump_stack+0x1c/0x28 [ 103.152749][ T7612] should_fail_ex+0x41c/0x590 [ 103.152763][ T7612] should_failslab+0xc4/0x120 [ 103.152776][ T7612] kmem_cache_alloc_noprof+0x94/0x5d4 [ 103.152785][ T7612] security_file_alloc+0x3c/0x300 [ 103.152796][ T7612] init_file+0x90/0x28c [ 103.152804][ T7612] alloc_empty_file+0x80/0x1cc [ 103.152812][ T7612] alloc_file+0x58/0x98 [ 103.152820][ T7612] alloc_file_pseudo+0xe0/0x198 [ 103.152829][ T7612] __shmem_file_setup+0x210/0x284 [ 103.152841][ T7612] shmem_file_setup+0x40/0x54 [ 103.152852][ T7612] memfd_alloc_file+0x9c/0x2f0 [ 103.152863][ T7612] __arm64_sys_memfd_create+0x318/0x3ec [ 103.152873][ T7612] invoke_syscall+0x98/0x244 [ 103.152885][ T7612] el0_svc_common+0xec/0x23c [ 103.152896][ T7612] do_el0_svc+0x4c/0x5c [ 103.152907][ T7612] el0_svc+0x64/0x260 [ 103.152919][ T7612] el0t_64_sync_handler+0x44/0x104 [ 103.152931][ T7612] el0t_64_sync+0x198/0x19c [ 103.998127][ T7634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.998142][ T7634] IPv6: NLM_F_CREATE should be set when creating new route [ 104.330157][ T7641] loop3: detected capacity change from 0 to 512 [ 104.330163][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.822'. [ 104.332395][ T7641] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.355484][ T7641] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.820: Allocating blocks 41-42 which overlap fs metadata [ 104.355507][ T7641] loop3: lost filesystem error report for type 5 error -117 [ 104.356131][ T7641] EXT4-fs (loop3): Remounting filesystem read-only [ 104.356208][ T7641] Quota error (device loop3): write_blk: dquota write failed [ 104.356218][ T7641] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 104.356268][ T7641] Quota error (device loop3): write_blk: dquota write failed [ 104.356309][ T7641] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 104.357577][ T7641] EXT4-fs (loop3): 1 truncate cleaned up [ 104.359237][ T7641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.460222][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.497860][ T7657] FAULT_INJECTION: forcing a failure. [ 104.497860][ T7657] name failslab, interval 1, probability 0, space 0, times 0 [ 104.497885][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.3.826 Not tainted syzkaller #0 PREEMPT [ 104.497899][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.497906][ T7657] Call trace: [ 104.497909][ T7657] show_stack+0x2c/0x3c (C) [ 104.497930][ T7657] __dump_stack+0x30/0x40 [ 104.497943][ T7657] dump_stack_lvl+0xd8/0x12c [ 104.497954][ T7657] dump_stack+0x1c/0x28 [ 104.497965][ T7657] should_fail_ex+0x41c/0x590 [ 104.497985][ T7657] should_failslab+0xc4/0x120 [ 104.497999][ T7657] kmem_cache_alloc_noprof+0x94/0x5d4 [ 104.498008][ T7657] do_getname+0x48/0x234 [ 104.498017][ T7657] getname_flags+0x2c/0x3c [ 104.498025][ T7657] do_sys_openat2+0xd0/0x1e8 [ 104.498038][ T7657] do_sys_open+0xb0/0xe0 [ 104.498049][ T7657] __arm64_sys_openat+0xa8/0xc4 [ 104.498060][ T7657] invoke_syscall+0x98/0x244 [ 104.498073][ T7657] el0_svc_common+0xec/0x23c [ 104.498084][ T7657] do_el0_svc+0x4c/0x5c [ 104.498095][ T7657] el0_svc+0x64/0x260 [ 104.498107][ T7657] el0t_64_sync_handler+0x44/0x104 [ 104.498118][ T7657] el0t_64_sync+0x198/0x19c [ 104.633574][ T7666] FAULT_INJECTION: forcing a failure. [ 104.633574][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 104.633598][ T7666] CPU: 0 UID: 0 PID: 7666 Comm: syz.5.829 Not tainted syzkaller #0 PREEMPT [ 104.633607][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.633612][ T7666] Call trace: [ 104.633616][ T7666] show_stack+0x2c/0x3c (C) [ 104.633634][ T7666] __dump_stack+0x30/0x40 [ 104.633644][ T7666] dump_stack_lvl+0xd8/0x12c [ 104.633653][ T7666] dump_stack+0x1c/0x28 [ 104.633662][ T7666] should_fail_ex+0x41c/0x590 [ 104.633674][ T7666] should_failslab+0xc4/0x120 [ 104.633684][ T7666] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 104.633693][ T7666] kvasprintf+0x110/0x1e4 [ 104.633703][ T7666] kasprintf+0xe8/0x13c [ 104.633712][ T7666] keyctl_describe_key+0x1b0/0x5b8 [ 104.633721][ T7666] __arm64_sys_keyctl+0x29c/0x3e8 [ 104.633729][ T7666] invoke_syscall+0x98/0x244 [ 104.633739][ T7666] el0_svc_common+0xec/0x23c [ 104.633748][ T7666] do_el0_svc+0x4c/0x5c [ 104.633757][ T7666] el0_svc+0x64/0x260 [ 104.633767][ T7666] el0t_64_sync_handler+0x44/0x104 [ 104.633776][ T7666] el0t_64_sync+0x198/0x19c [ 104.634661][ T7666] Injecting memory failure for pfn 0x21910f at process virtual address 0x20ff7000 [ 104.639093][ T7666] Memory failure: 0x21910f: unhandlable page. [ 104.639112][ T7666] Memory failure: 0x21910f: recovery action for reserved kernel page: Ignored [ 104.640201][ T7666] FAULT_INJECTION: forcing a failure. [ 104.640201][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 104.640218][ T7666] CPU: 0 UID: 0 PID: 7666 Comm: syz.5.829 Not tainted syzkaller #0 PREEMPT [ 104.640230][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.640236][ T7666] Call trace: [ 104.640240][ T7666] show_stack+0x2c/0x3c (C) [ 104.640257][ T7666] __dump_stack+0x30/0x40 [ 104.640267][ T7666] dump_stack_lvl+0xd8/0x12c [ 104.640277][ T7666] dump_stack+0x1c/0x28 [ 104.640286][ T7666] should_fail_ex+0x41c/0x590 [ 104.640297][ T7666] should_failslab+0xc4/0x120 [ 104.640308][ T7666] kmem_cache_alloc_noprof+0x94/0x5d4 [ 104.640316][ T7666] alloc_empty_file+0x6c/0x1cc [ 104.640324][ T7666] path_openat+0x78/0x18f4 [ 104.640332][ T7666] do_file_open+0x1c8/0x2e8 [ 104.640341][ T7666] do_sys_openat2+0x114/0x1e8 [ 104.640350][ T7666] do_sys_open+0xb0/0xe0 [ 104.640359][ T7666] __arm64_sys_openat+0xa8/0xc4 [ 104.640368][ T7666] invoke_syscall+0x98/0x244 [ 104.640378][ T7666] el0_svc_common+0xec/0x23c [ 104.640387][ T7666] do_el0_svc+0x4c/0x5c [ 104.640396][ T7666] el0_svc+0x64/0x260 [ 104.640406][ T7666] el0t_64_sync_handler+0x44/0x104 [ 104.640415][ T7666] el0t_64_sync+0x198/0x19c [ 104.641341][ T7666] Injecting memory failure for pfn 0x21910f at process virtual address 0x20ff7000 [ 104.644516][ T7666] Memory failure: 0x21910f: Sending SIGBUS to syz.5.829:7666 due to hardware memory corruption [ 104.644630][ T7666] Memory failure: 0x21910f: recovery action for already poisoned page: Failed [ 105.118632][ T1058] usb 1-1: USB disconnect, device number 10 [ 105.256494][ T7697] loop2: detected capacity change from 0 to 8 [ 105.272637][ T7697] SQUASHFS error: Unable to read directory block [631:26] [ 105.274512][ T7697] SQUASHFS error: Failed to read block 0x6e6: -5 [ 105.274523][ T7697] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 105.274530][ T7697] SQUASHFS error: read_indexes: reading block [6e4:0] [ 105.275498][ T7697] overlayfs: failed to resolve './bus': -2 [ 105.362338][ T7710] loop2: detected capacity change from 0 to 512 [ 105.373292][ T7710] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.395350][ T7710] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.837: Allocating blocks 41-42 which overlap fs metadata [ 105.395373][ T7710] loop2: lost filesystem error report for type 5 error -117 [ 105.396141][ T7710] EXT4-fs (loop2): Remounting filesystem read-only [ 105.396228][ T7710] Quota error (device loop2): write_blk: dquota write failed [ 105.396241][ T7710] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 105.396289][ T7710] Quota error (device loop2): write_blk: dquota write failed [ 105.396324][ T7710] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.396383][ T7710] EXT4-fs (loop2): 1 truncate cleaned up [ 105.398082][ T7710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.416656][ T1058] kernel read not supported for file /98/net (pid: 1058 comm: kworker/1:2) [ 105.517762][ T6674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.563266][ T7724] loop2: detected capacity change from 0 to 256 [ 105.565996][ T7724] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.568143][ T7724] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 105.568161][ T7724] FAT-fs (loop2): Filesystem has been set read-only [ 105.615558][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 106.101480][ T7732] netlink: 920 bytes leftover after parsing attributes in process `syz.5.842'. [ 106.303006][ T7733] netlink: 5 bytes leftover after parsing attributes in process `syz.5.842'. [ 106.303024][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.842'. [ 106.781541][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.781718][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.843880][ T7760] loop2: detected capacity change from 0 to 7 [ 107.844826][ T7760] Dev loop2: unable to read RDB block 7 [ 107.844842][ T7760] loop2: unable to read partition table [ 107.844902][ T7760] loop2: partition table beyond EOD, truncated [ 107.844911][ T7760] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.867796][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 107.902134][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'. [ 107.933095][ T7771] loop2: detected capacity change from 0 to 512 [ 107.947018][ T7771] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.972127][ T7771] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.850: Allocating blocks 41-42 which overlap fs metadata [ 107.972151][ T7771] loop2: lost filesystem error report for type 5 error -117 [ 107.972396][ T7771] EXT4-fs (loop2): Remounting filesystem read-only [ 107.972445][ T7771] Quota error (device loop2): write_blk: dquota write failed [ 107.972456][ T7771] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 107.972582][ T7771] EXT4-fs (loop2): 1 truncate cleaned up [ 107.973057][ T7771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.075064][ T7774] syzkaller0: entered promiscuous mode [ 108.075084][ T7774] syzkaller0: entered allmulticast mode [ 108.075249][ T6674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.379311][ T7787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.854'. [ 108.485696][ T7814] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 108.608796][ T7822] Injecting memory failure for pfn 0x13d547 at process virtual address 0x20000000 [ 108.641540][ T7822] Memory failure: 0x13d547: unhandlable page. [ 108.641561][ T7822] Memory failure: 0x13d547: recovery action for get hwpoison page: Ignored [ 108.714772][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.857'. [ 108.714984][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.857'. [ 108.720989][ T7827] loop5: detected capacity change from 0 to 601 [ 108.721357][ T7827] ext4: Unknown parameter 'À' [ 108.723066][ T7835] loop2: detected capacity change from 0 to 256 [ 108.729298][ T7835] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.733669][ T7835] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 108.733699][ T7835] FAT-fs (loop2): Filesystem has been set read-only [ 108.897048][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.898149][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.362024][ T7904] mmap: syz.3.863 (7904) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.373212][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.374183][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.375276][ T7904] warning: `syz.3.863' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.515148][ T7922] loop5: detected capacity change from 0 to 512 [ 109.519421][ T7922] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.534418][ T7922] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.864: Allocating blocks 41-42 which overlap fs metadata [ 109.534439][ T7922] loop5: lost filesystem error report for type 5 error -117 [ 109.534676][ T7922] EXT4-fs (loop5): Remounting filesystem read-only [ 109.534897][ T7922] EXT4-fs (loop5): 1 truncate cleaned up [ 109.535499][ T7922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.563485][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.695815][ T7936] FAULT_INJECTION: forcing a failure. [ 109.695815][ T7936] name failslab, interval 1, probability 0, space 0, times 0 [ 109.695838][ T7936] CPU: 0 UID: 0 PID: 7936 Comm: syz.1.866 Not tainted syzkaller #0 PREEMPT [ 109.695851][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.695857][ T7936] Call trace: [ 109.695861][ T7936] show_stack+0x2c/0x3c (C) [ 109.695883][ T7936] __dump_stack+0x30/0x40 [ 109.695897][ T7936] dump_stack_lvl+0xd8/0x12c [ 109.695909][ T7936] dump_stack+0x1c/0x28 [ 109.695920][ T7936] should_fail_ex+0x41c/0x590 [ 109.695936][ T7936] should_failslab+0xc4/0x120 [ 109.695950][ T7936] __kmalloc_noprof+0x108/0x6c8 [ 109.695959][ T7936] security_prepare_creds+0x60/0x35c [ 109.695970][ T7936] prepare_creds+0x500/0x7d0 [ 109.695989][ T7936] lookup_user_key+0x284/0xd4c [ 109.696000][ T7936] __arm64_sys_add_key+0x34c/0x43c [ 109.696014][ T7936] invoke_syscall+0x98/0x244 [ 109.696031][ T7936] el0_svc_common+0xec/0x23c [ 109.696043][ T7936] do_el0_svc+0x4c/0x5c [ 109.696054][ T7936] el0_svc+0x64/0x260 [ 109.696066][ T7936] el0t_64_sync_handler+0x44/0x104 [ 109.696078][ T7936] el0t_64_sync+0x198/0x19c [ 109.742155][ T7944] syzkaller0: entered promiscuous mode [ 109.742174][ T7944] syzkaller0: entered allmulticast mode [ 109.805638][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 109.831154][ T7951] loop2: detected capacity change from 0 to 2048 [ 109.874533][ T7951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.606558][ T7985] tmpfs: Unknown parameter 'huga' [ 110.663439][ T7985] loop5: detected capacity change from 0 to 512 [ 110.664189][ T7985] EXT4-fs (loop5): Test dummy encryption mode enabled [ 110.676782][ T7985] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.873: inode has both inline data and extents flags [ 110.676803][ T7985] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.676948][ T7985] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.873: couldn't read orphan inode 15 (err -117) [ 110.676982][ T7985] loop5: lost filesystem error report for type 5 error -117 [ 110.678386][ T7985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.698281][ T7950] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 110.698341][ T7950] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.698352][ T7950] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.698352][ T7950] [ 110.698359][ T7950] EXT4-fs (loop2): Total free blocks count 0 [ 110.698365][ T7950] EXT4-fs (loop2): Free/Dirty block details [ 110.698372][ T7950] EXT4-fs (loop2): free_blocks=4096 [ 110.698379][ T7950] EXT4-fs (loop2): dirty_blocks=64 [ 110.698385][ T7950] EXT4-fs (loop2): Block reservation details [ 110.698390][ T7950] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 110.699011][ T7985] fscrypt: AES-256-XTS using blk-crypto-fallback [ 110.782913][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.814001][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 110.829502][ T7991] loop5: detected capacity change from 0 to 512 [ 110.844659][ T7991] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.858239][ T7991] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.875: Allocating blocks 41-42 which overlap fs metadata [ 110.858261][ T7991] loop5: lost filesystem error report for type 5 error -117 [ 110.860553][ T7991] EXT4-fs (loop5): Remounting filesystem read-only [ 110.860617][ T7991] __quota_error: 6 callbacks suppressed [ 110.860624][ T7991] Quota error (device loop5): write_blk: dquota write failed [ 110.860633][ T7991] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 110.860683][ T7991] Quota error (device loop5): write_blk: dquota write failed [ 110.860716][ T7991] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 110.860776][ T7991] EXT4-fs (loop5): 1 truncate cleaned up [ 110.885710][ T7991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.909820][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.945185][ T8000] syzkaller0: entered promiscuous mode [ 110.945205][ T8000] syzkaller0: entered allmulticast mode [ 111.205675][ T8008] netlink: 920 bytes leftover after parsing attributes in process `syz.2.880'. [ 111.380537][ T8009] netlink: 5 bytes leftover after parsing attributes in process `syz.2.880'. [ 111.380558][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 111.907219][ T8014] syzkaller0: entered promiscuous mode [ 111.908234][ T8014] syzkaller0: entered allmulticast mode [ 112.056853][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.884'. [ 112.623518][ T8054] loop2: detected capacity change from 0 to 256 [ 112.631934][ T8054] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.635249][ T8054] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 112.635267][ T8054] FAT-fs (loop2): Filesystem has been set read-only [ 113.117481][ T8066] syzkaller0: entered promiscuous mode [ 113.117500][ T8066] syzkaller0: entered allmulticast mode [ 113.196481][ T8070] netlink: 920 bytes leftover after parsing attributes in process `syz.3.894'. [ 113.368839][ T8071] netlink: 5 bytes leftover after parsing attributes in process `syz.3.894'. [ 113.368861][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 113.515008][ T8081] dvmrp0: entered allmulticast mode [ 114.053380][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 114.078908][ T8098] FAULT_INJECTION: forcing a failure. [ 114.078908][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 114.078928][ T8098] CPU: 1 UID: 0 PID: 8098 Comm: syz.2.905 Not tainted syzkaller #0 PREEMPT [ 114.078938][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 114.078943][ T8098] Call trace: [ 114.078946][ T8098] show_stack+0x2c/0x3c (C) [ 114.078966][ T8098] __dump_stack+0x30/0x40 [ 114.078978][ T8098] dump_stack_lvl+0xd8/0x12c [ 114.078988][ T8098] dump_stack+0x1c/0x28 [ 114.079005][ T8098] should_fail_ex+0x41c/0x590 [ 114.079018][ T8098] should_failslab+0xc4/0x120 [ 114.079031][ T8098] __kmalloc_noprof+0x108/0x6c8 [ 114.079040][ T8098] tomoyo_encode2+0x10c/0x330 [ 114.079052][ T8098] tomoyo_encode+0x34/0x50 [ 114.079060][ T8098] tomoyo_realpath_from_path+0x488/0x4dc [ 114.079070][ T8098] tomoyo_path_number_perm+0x1f0/0x500 [ 114.079079][ T8098] tomoyo_file_ioctl+0x2c/0x3c [ 114.079088][ T8098] security_file_ioctl+0xdc/0x2b0 [ 114.079096][ T8098] __arm64_sys_ioctl+0xb0/0x1cc [ 114.079107][ T8098] invoke_syscall+0x98/0x244 [ 114.079117][ T8098] el0_svc_common+0xec/0x23c [ 114.079126][ T8098] do_el0_svc+0x4c/0x5c [ 114.079135][ T8098] el0_svc+0x64/0x260 [ 114.079146][ T8098] el0t_64_sync_handler+0x44/0x104 [ 114.079155][ T8098] el0t_64_sync+0x198/0x19c [ 114.079168][ T8098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.221800][ T8115] loop2: detected capacity change from 0 to 2048 [ 115.257049][ T8115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.535103][ T8111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.535834][ T8111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.535854][ T8111] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.537888][ T8111] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.539470][ T8111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.539490][ T8111] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.540882][ T8111] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.541926][ T8111] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.541947][ T8111] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.545671][ T8111] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.556755][ T8111] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.556776][ T8111] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.564481][ T8111] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.831760][ T8127] loop5: detected capacity change from 0 to 2048 [ 115.914163][ T8127] loop5: p1 < > p4 < > [ 116.217182][ T8114] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 116.217254][ T8114] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 116.217265][ T8114] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.217265][ T8114] [ 116.217272][ T8114] EXT4-fs (loop2): Total free blocks count 0 [ 116.217278][ T8114] EXT4-fs (loop2): Free/Dirty block details [ 116.217285][ T8114] EXT4-fs (loop2): free_blocks=4096 [ 116.217293][ T8114] EXT4-fs (loop2): dirty_blocks=64 [ 116.217299][ T8114] EXT4-fs (loop2): Block reservation details [ 116.217304][ T8114] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 116.298487][ T8152] syzkaller0: entered promiscuous mode [ 116.298506][ T8152] syzkaller0: entered allmulticast mode [ 116.317559][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'. [ 116.317803][ T8156] FAULT_INJECTION: forcing a failure. [ 116.317803][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 116.317821][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.5.916 Not tainted syzkaller #0 PREEMPT [ 116.317835][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 116.317841][ T8156] Call trace: [ 116.317844][ T8156] show_stack+0x2c/0x3c (C) [ 116.317868][ T8156] __dump_stack+0x30/0x40 [ 116.317881][ T8156] dump_stack_lvl+0xd8/0x12c [ 116.317893][ T8156] dump_stack+0x1c/0x28 [ 116.317905][ T8156] should_fail_ex+0x41c/0x590 [ 116.317918][ T8156] should_failslab+0xc4/0x120 [ 116.317932][ T8156] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 116.317941][ T8156] __d_alloc+0x50/0x690 [ 116.317950][ T8156] d_alloc_pseudo+0x2c/0xd8 [ 116.317959][ T8156] alloc_path_pseudo+0xe8/0x1d4 [ 116.317968][ T8156] alloc_file_pseudo+0xb0/0x198 [ 116.317982][ T8156] sock_alloc_file+0xb4/0x1ac [ 116.317993][ T8156] __sys_socket+0x90/0xec [ 116.318002][ T8156] __arm64_sys_socket+0x84/0x9c [ 116.318012][ T8156] invoke_syscall+0x98/0x244 [ 116.318024][ T8156] el0_svc_common+0xec/0x23c [ 116.318036][ T8156] do_el0_svc+0x4c/0x5c [ 116.318047][ T8156] el0_svc+0x64/0x260 [ 116.318060][ T8156] el0t_64_sync_handler+0x44/0x104 [ 116.318071][ T8156] el0t_64_sync+0x198/0x19c [ 116.499488][ T54] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 116.604368][ T8167] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 116.604922][ T8167] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 116.611258][ T8167] rdma_op 000000001a698a3f conn xmit_rdma 0000000000000000 [ 116.633504][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 117.081725][ T8183] loop3: detected capacity change from 0 to 256 [ 117.082917][ T8183] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.091834][ T8183] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.091850][ T8183] FAT-fs (loop3): Filesystem has been set read-only [ 117.611310][ T8194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.630877][ T8197] loop3: detected capacity change from 0 to 512 [ 117.631404][ T8194] FAULT_INJECTION: forcing a failure. [ 117.631404][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 117.631422][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.5.927 Not tainted syzkaller #0 PREEMPT [ 117.631435][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.631441][ T8194] Call trace: [ 117.631444][ T8194] show_stack+0x2c/0x3c (C) [ 117.631464][ T8194] __dump_stack+0x30/0x40 [ 117.631477][ T8194] dump_stack_lvl+0xd8/0x12c [ 117.631489][ T8194] dump_stack+0x1c/0x28 [ 117.631500][ T8194] should_fail_ex+0x41c/0x590 [ 117.631515][ T8194] should_failslab+0xc4/0x120 [ 117.631529][ T8194] __kmalloc_noprof+0x108/0x6c8 [ 117.631538][ T8194] handler_new_ref+0x1dc/0x804 [ 117.631547][ T8194] v4l2_ctrl_new+0xe6c/0x1238 [ 117.631555][ T8194] v4l2_ctrl_new_std+0x1fc/0x2a0 [ 117.631563][ T8194] handler_new_ref+0x1b0/0x804 [ 117.631571][ T8194] v4l2_ctrl_new+0xe6c/0x1238 [ 117.631578][ T8194] v4l2_ctrl_new_std+0x1fc/0x2a0 [ 117.631586][ T8194] vicodec_open+0x1e8/0x9a0 [ 117.631598][ T8194] v4l2_open+0x198/0x338 [ 117.631606][ T8194] chrdev_open+0x398/0x3e8 [ 117.631617][ T8194] do_dentry_open+0x5c4/0xfc0 [ 117.631629][ T8194] vfs_open+0x44/0x2dc [ 117.631640][ T8194] path_openat+0x1084/0x18f4 [ 117.631650][ T8194] do_file_open+0x1c8/0x2e8 [ 117.631660][ T8194] do_sys_openat2+0x114/0x1e8 [ 117.631671][ T8194] do_sys_open+0xb0/0xe0 [ 117.631683][ T8194] __arm64_sys_openat+0xa8/0xc4 [ 117.631694][ T8194] invoke_syscall+0x98/0x244 [ 117.631707][ T8194] el0_svc_common+0xec/0x23c [ 117.631718][ T8194] do_el0_svc+0x4c/0x5c [ 117.631729][ T8194] el0_svc+0x64/0x260 [ 117.631742][ T8194] el0t_64_sync_handler+0x44/0x104 [ 117.631753][ T8194] el0t_64_sync+0x198/0x19c [ 117.683936][ T8197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.694793][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.695319][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.733565][ T4709] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.733609][ T4709] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.733855][ T4709] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.733879][ T4709] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.733971][ T4712] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.401663][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.471093][ T8219] syzkaller0: entered promiscuous mode [ 118.471113][ T8219] syzkaller0: entered allmulticast mode [ 118.522714][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 118.876545][ T8242] overlayfs: failed to resolve './file0': -2 [ 118.896075][ T8242] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 118.896525][ T8242] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 118.951109][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.952562][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.446441][ T4712] Bluetooth: hci0: unexpected event for opcode 0x20a3 [ 119.987631][ T4711] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.987659][ T4711] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.987676][ T4711] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.987766][ T4712] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.092124][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 120.116096][ T8284] syz.1.954 uses obsolete (PF_INET,SOCK_PACKET) [ 120.523289][ T8301] [ 120.523849][ T8301] ====================================================== [ 120.525479][ T8301] WARNING: possible circular locking dependency detected [ 120.527043][ T8301] syzkaller #0 Tainted: G L [ 120.528413][ T8301] ------------------------------------------------------ [ 120.529917][ T8301] syz.0.964/8301 is trying to acquire lock: [ 120.531196][ T8301] ffff0000d7d161e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x58c/0xa24 [ 120.533718][ T8301] [ 120.533718][ T8301] but task is already holding lock: [ 120.535281][ T8301] ffff0000f8b6d9e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1d8/0x51c [ 120.537223][ T8301] [ 120.537223][ T8301] which lock already depends on the new lock. [ 120.537223][ T8301] [ 120.539393][ T8301] [ 120.539393][ T8301] the existing dependency chain (in reverse order) is: [ 120.541280][ T8301] [ 120.541280][ T8301] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 120.542980][ T8301] lock_sock_nested+0x58/0x110 [ 120.544136][ T8301] smc_listen_out+0xe0/0x3b4 [ 120.545247][ T8301] smc_listen_work+0x410/0xe7c [ 120.546392][ T8301] process_scheduled_works+0x91c/0x1250 [ 120.547705][ T8301] worker_thread+0x798/0xbd0 [ 120.548809][ T8301] kthread+0x304/0x3d4 [ 120.549790][ T8301] ret_from_fork+0x10/0x20 [ 120.550853][ T8301] [ 120.550853][ T8301] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 120.553078][ T8301] __lock_acquire+0x1660/0x2b48 [ 120.554259][ T8301] lock_acquire+0x150/0x370 [ 120.555325][ T8301] __flush_work+0x594/0xa24 [ 120.556376][ T8301] __cancel_work_sync+0xc8/0x144 [ 120.557549][ T8301] cancel_work_sync+0x24/0x38 [ 120.558659][ T8301] smc_clcsock_release+0x64/0xe8 [ 120.559820][ T8301] __smc_release+0x514/0x698 [ 120.560943][ T8301] smc_close_non_accepted+0xd8/0x254 [ 120.562218][ T8301] smc_close_active+0x7e4/0x9d0 [ 120.563364][ T8301] __smc_release+0x90/0x698 [ 120.564435][ T8301] smc_release+0x248/0x51c [ 120.565488][ T8301] __sock_release+0xa0/0x1d4 [ 120.566587][ T8301] sock_close+0x24/0x38 [ 120.567592][ T8301] __fput+0x338/0x74c [ 120.568531][ T8301] fput_close_sync+0x10c/0x278 [ 120.569663][ T8301] __arm64_sys_close+0x80/0x110 [ 120.570852][ T8301] invoke_syscall+0x98/0x244 [ 120.572010][ T8301] el0_svc_common+0xec/0x23c [ 120.573143][ T8301] do_el0_svc+0x4c/0x5c [ 120.574200][ T8301] el0_svc+0x64/0x260 [ 120.575187][ T8301] el0t_64_sync_handler+0x44/0x104 [ 120.576426][ T8301] el0t_64_sync+0x198/0x19c [ 120.577493][ T8301] [ 120.577493][ T8301] other info that might help us debug this: [ 120.577493][ T8301] [ 120.579668][ T8301] Possible unsafe locking scenario: [ 120.579668][ T8301] [ 120.581234][ T8301] CPU0 CPU1 [ 120.582370][ T8301] ---- ---- [ 120.583531][ T8301] lock(sk_lock-AF_SMC/1); [ 120.584493][ T8301] lock((work_completion)(&new_smc->smc_listen_work)); [ 120.586554][ T8301] lock(sk_lock-AF_SMC/1); [ 120.588059][ T8301] lock((work_completion)(&new_smc->smc_listen_work)); [ 120.589526][ T8301] [ 120.589526][ T8301] *** DEADLOCK *** [ 120.589526][ T8301] [ 120.591241][ T8301] locks held by syz.0.964/8301: 3, last CPU#0: [ 120.592566][ T8301] #0: ffff0000dab324c0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 120.594970][ T8301] #1: ffff0000f8b6d9e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1d8/0x51c [ 120.597109][ T8301] #2: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x108/0xa24 [ 120.599172][ T8301] [ 120.599172][ T8301] stack backtrace: [ 120.600449][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.0.964 Tainted: G L syzkaller #0 PREEMPT [ 120.602661][ T8301] Tainted: [L]=SOFTLOCKUP [ 120.603574][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 120.605736][ T8301] Call trace: [ 120.606450][ T8301] show_stack+0x2c/0x3c (C) [ 120.607464][ T8301] __dump_stack+0x30/0x40 [ 120.608389][ T8301] dump_stack_lvl+0xd8/0x12c [ 120.609382][ T8301] dump_stack+0x1c/0x28 [ 120.610278][ T8301] print_circular_bug+0x328/0x330 [ 120.611357][ T8301] check_noncircular+0x158/0x174 [ 120.612437][ T8301] __lock_acquire+0x1660/0x2b48 [ 120.613495][ T8301] lock_acquire+0x150/0x370 [ 120.614477][ T8301] __flush_work+0x594/0xa24 [ 120.615467][ T8301] __cancel_work_sync+0xc8/0x144 [ 120.616538][ T8301] cancel_work_sync+0x24/0x38 [ 120.617546][ T8301] smc_clcsock_release+0x64/0xe8 [ 120.618639][ T8301] __smc_release+0x514/0x698 [ 120.619662][ T8301] smc_close_non_accepted+0xd8/0x254 [ 120.620789][ T8301] smc_close_active+0x7e4/0x9d0 [ 120.621820][ T8301] __smc_release+0x90/0x698 [ 120.622794][ T8301] smc_release+0x248/0x51c [ 120.623768][ T8301] __sock_release+0xa0/0x1d4 [ 120.624732][ T8301] sock_close+0x24/0x38 [ 120.625642][ T8301] __fput+0x338/0x74c [ 120.626508][ T8301] fput_close_sync+0x10c/0x278 [ 120.627550][ T8301] __arm64_sys_close+0x80/0x110 [ 120.628614][ T8301] invoke_syscall+0x98/0x244 [ 120.629620][ T8301] el0_svc_common+0xec/0x23c [ 120.630612][ T8301] do_el0_svc+0x4c/0x5c [ 120.631514][ T8301] el0_svc+0x64/0x260 [ 120.632389][ T8301] el0t_64_sync_handler+0x44/0x104 [ 120.633486][ T8301] el0t_64_sync+0x198/0x19c [ 122.241756][ T4712] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.241770][ T4709] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.241784][ T4711] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.241796][ T4709] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.351700][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.351731][ T1597] ieee802154 phy1 wpan1: encryption failed: -22