last executing test programs: 1m47.632686319s ago: executing program 4 (id=36): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002300)}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x7d, &(0x7f0000001240)=ANY=[@ANYRES32=r2, @ANYBLOB="00fd0020e5a2e8d8b6262fc22f90e4aef4200b0af409d5a0cf7f9bab8831378cd2035f43b48d6e652ddab27c2308f22912089240068911d5b1e02c6e77946139e4dbef84a61fefd929cdb28670c6b1eff87937ebc85ce33dd63aa459c73714c15b97ba4819cbff6d615dabcc83a3619486a12603cb8461f7a89d48867fecac179777b24b6dced4a51eb008e08ab2d8322b521c7b83b94e3488c0c85d01f97b72a51c56530e5df1696ad089cb68b4cd38284e6d5c8eab3989a3bd02b7410b628f9ad17d55533f7b5327c17ca78e8094f55bef327c7126dfe6bceeb5e2d6625ae2e27397c8c927daea9fe41b8352547bdb9d3666ac49183467b66d3d5b560d649c46f9f39067cf37596482"], 0x8) 1m47.60905317s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x20, r0, 0x0) r2 = fanotify_init(0x1a, 0x800) fanotify_mark(r2, 0x441, 0x4800001a, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m45.986668643s ago: executing program 4 (id=41): r0 = fanotify_init(0x1a, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x40, 0x4000000a, r1, 0x0) r2 = inotify_init1(0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c00000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b000000000014001680100001800c0009004000eeff"], 0x3c}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6f8902e0b75d4f0d}]}}, &(0x7f00000002c0)=""/176, 0x2a, 0xb0, 0x1}, 0x20) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000740)={@broadcast, @remote}, 0xc) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726) fanotify_init(0x2, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r8) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000080), &(0x7f0000000840)=r8}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) fanotify_mark(0xffffffffffffffff, 0x400, 0x8, r5, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc488650a6281b627}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x10080040) r12 = fanotify_init(0x4, 0x101000) fanotify_mark(r12, 0x541, 0x40001019, r10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) 1m44.454622932s ago: executing program 4 (id=45): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}}, 0x20000005) 1m44.355067367s ago: executing program 4 (id=48): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_adjtime(0xa, &(0x7f00000002c0)) unshare(0x2a060400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 1m43.971521007s ago: executing program 4 (id=53): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "558b0a291e2254f77043f2aed4e723c4"}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000400010008000100000000000000000000000001000000000000"], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 1m43.875571441s ago: executing program 32 (id=53): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "558b0a291e2254f77043f2aed4e723c4"}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000400010008000100000000000000000000000001000000000000"], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 1m24.249330698s ago: executing program 5 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000025e40)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e00010c00020005000100000000002400028014000180080001007f00000108000200ac1e00010c000280050001000000000008000740000000001c0018"], 0x90}}, 0x0) 1m23.838070999s ago: executing program 5 (id=142): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x40, &(0x7f00000006c0)=""/171) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x1, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x400}, &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x200, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff, 0xb}, {0x2, 0xffff}, {0xd, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="f4ff0000040000000800008ec92d697fa7661200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r11}, 0x10, &(0x7f00000003c0)={&(0x7f0000000440)=@canfd={{0x1, 0x0, 0x1}, 0x2e, 0x0, 0x0, 0x0, "6927b691f285e31b428ce609c8e61b8610134fa453a1ceb301fcda95490e51da35c3ca845096908de794c2796a5c38377b38e3bbb6259e8e6bf188a29d746ae2"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x1004880e) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000140)={0x8, &(0x7f0000000040)=[{0x0, 0x1, 0xc, 0x3}, {0x7, 0x7f, 0x4, 0x1}, {0x0, 0x5, 0x9, 0xa1}, {0xfff7, 0x3, 0xe, 0x2}, {0x6, 0x6, 0x26}, {0x100, 0x9, 0x63, 0x40}, {0x8000, 0x40, 0x2, 0x9}, {0x0, 0x7, 0xef, 0x3}]}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0x4, 0x10, 0x2, 0x4, 0x8, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000) r12 = syz_io_uring_setup(0x566f, &(0x7f0000000300)={0x0, 0x2ceb, 0x2, 0x2, 0x15f}, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x51dc, &(0x7f0000000400)={0x0, 0xda90, 0x58927274a445240, 0x0, 0x2b9, 0x0, r12}, &(0x7f0000000480), &(0x7f00000004c0)) r13 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x7, 0x2, 0x9, 0xffffffff}]}, 0x10) sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m23.482913928s ago: executing program 5 (id=148): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c08d8cce44dda66d20053b4ab810100000000000000dfff1b140000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x10, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0xfffffffffffffffb, 0x6, 0xd, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x8}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x3504, 0x4, 0x0, 0x0, 0x7, 0xfffbfffc, 0x1002}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "5566e42c0a5c5b635cc78611b2c6cfc6103edcec30d530ede8488000124f4f80232d7c67a9670ef7388806a42b5f6d49fec2149e5491666bd746a5437ed4588d", 0x19}, 0x48, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r6}) r8 = add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f0000000280)={'fscrypt:', @auto=[0x37, 0x0, 0x0, 0x33, 0x61, 0x0, 0x0, 0x34, 0x31, 0x35, 0x34, 0x35, 0x0, 0x39, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x8018}, 0x48, r6) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r8, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x0, 0x3, 0x0, 0x800000}, 0x4, 0x6e6bb8}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x9}}]}, 0xc4}}, 0x8004) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/keycreate\x00') copy_file_range(r10, 0x0, r10, &(0x7f00000000c0)=0xffffffffffffff80, 0x10001, 0x0) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000340)={0x0, r10}) 1m23.344013534s ago: executing program 5 (id=152): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="f1ffffff", @ANYRES16=r1, @ANYBLOB="8fbf2bbd7000fcdbdf2516000000"], 0x14}}, 0x4000) r2 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") syz_io_uring_setup(0x10fb, &(0x7f0000000140)={0x0, 0xc3db, 0x800, 0x2, 0x1fc}, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) r6 = socket(0x23, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x34da, 0x83, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x68, 0x0, 0xd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x39, 0x3, 0xe}]}}}}}) r7 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) lseek(r5, 0xfffffffffffffffe, 0x1) socket(0xf, 0x1, 0x401) 1m22.379152374s ago: executing program 5 (id=160): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 2) 1m20.747972407s ago: executing program 5 (id=168): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0xffffffffffffffff, 0xee01) 1m20.657073903s ago: executing program 33 (id=168): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0xffffffffffffffff, 0xee01) 5.027896772s ago: executing program 6 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x5dc8, &(0x7f00000005c0)={0x0, 0xc52d, 0x40, 0x0, 0x277}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) 4.582668335s ago: executing program 0 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002000010000000000fbdbdf250a400000000000081a000300140001002001000000005e3e0000000000008b13a54f398e42481c02"], 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) 4.468224541s ago: executing program 3 (id=493): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) lseek(0xffffffffffffffff, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40186f40, 0x0) 4.123882669s ago: executing program 6 (id=495): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.10283513s ago: executing program 1 (id=496): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/192, &(0x7f0000000140)=""/92, 0x80e3001}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000100)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x809, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x1, 0x3, 0x5, 0x3}], 0x10, 0x18d}, 0x94) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) 3.099591842s ago: executing program 2 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 3.098913221s ago: executing program 0 (id=498): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$vcsn(0x0, 0x1000, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) fsopen(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 3.098686431s ago: executing program 3 (id=499): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x700, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) 2.984385717s ago: executing program 3 (id=500): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) syz_fuse_handle_req(r1, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x9, {0x6, 0x3, 0x0, 0x9d83, 0x2, 0x7, {0x4, 0xc9, 0x3dc, 0x7fff, 0x9, 0x77686271, 0xd, 0x7, 0x4, 0x4000, 0x8, 0x0, 0x0, 0xff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2.973234458s ago: executing program 2 (id=501): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 2.836041575s ago: executing program 1 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x40010002, 0x0, 0x0) 2.692515273s ago: executing program 6 (id=503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000", 0x4d}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) acct(0x0) chdir(0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x2, 0x1, 0x7, 0x2}) 2.691837643s ago: executing program 0 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) tgkill(0x0, r2, 0x27) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000680)) pipe2$9p(0x0, 0x84880) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)={[], [], 0x2f}) chroot(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) 2.255483775s ago: executing program 2 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.254844935s ago: executing program 3 (id=506): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x5, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "896df4", 0x44, 0x2f, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x4, 0x1, 0xfb, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x8, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x2, {0x45, 0x0, 0x0, 0x1a, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.118908282s ago: executing program 2 (id=507): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x28, r0, 0x801, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}}, 0x20000044) 1.184576989s ago: executing program 1 (id=508): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) 1.17707978s ago: executing program 1 (id=509): r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r3) 1.116734133s ago: executing program 6 (id=510): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0xc49, 0x1, 0x0, 0x0) 1.036678717s ago: executing program 6 (id=511): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', 0x0, 0xf0, 0x0) 1.036167487s ago: executing program 6 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$xdp(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00') r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/277, 0x115}, {&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f00000003c0)=""/184, 0xb8}, {0x0}, {0x0}], 0x5}, 0xf7d}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) 1.035715287s ago: executing program 0 (id=513): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d1) 1.024166328s ago: executing program 3 (id=514): shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 1.014068628s ago: executing program 2 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xc, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x8fe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x1, 0x406000, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x6}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 904.543004ms ago: executing program 1 (id=516): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x14, 0x105, 0x70bd24, 0x25dfdb7b, {0xf, 0x84}}, 0x14}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 904.025524ms ago: executing program 3 (id=517): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000170a010100000000bafe000000000200000a0900010073797a4492e8c5727c482c1b3026c312440f93300000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000020000100000000000000000002200000000000000000000005001500"], 0x5c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000ffffffffffce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0xc) 146.667573ms ago: executing program 0 (id=518): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0xb3d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe) 100.152305ms ago: executing program 2 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 544.35µs ago: executing program 0 (id=520): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 0s ago: executing program 1 (id=521): mlock(&(0x7f0000fed000/0x10000)=nil, 0x10000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0xb71, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x11) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f00", 0x1c}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400, 0x0, 0x1, 0x8, 0xe, 0x5}, 0x20) write(r0, &(0x7f0000000000)="38000000010025", 0x7) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040040) kernel console output (not intermixed with test programs): .230779][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.232059][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.232274][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.235810][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.237490][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.239427][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.241150][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.242914][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.246233][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.248497][ T4330] device veth0_macvtap entered promiscuous mode [ 35.251210][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.252706][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.256039][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.257580][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.262636][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.267491][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.269126][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.270953][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.272577][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.274660][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.277265][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.281950][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.283859][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.288420][ T4330] device veth1_macvtap entered promiscuous mode [ 35.289795][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.291307][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.292588][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.294879][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.297416][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.299019][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.300507][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.302345][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.305033][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.306696][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.308274][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.310076][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.312770][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.319554][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.321897][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.337184][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.339756][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.341762][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.346882][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.348543][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.350289][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.351951][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.354418][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.355320][ T4409] loop1: detected capacity change from 0 to 1024 [ 35.357355][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.361323][ T4319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.362566][ T4319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.364528][ T4319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.366003][ T4319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.372025][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.377578][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.383846][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.385762][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.392214][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.393785][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.399302][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.400927][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.412868][ T4409] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 35.418856][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.435156][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.436447][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.438118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.487739][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.499179][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.533586][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.539242][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.540485][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.542906][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.620392][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.621706][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.623122][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.693980][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 35.695018][ T4327] Bluetooth: hci0: command 0x041b tx timeout [ 35.696028][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 35.697031][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 35.698086][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 35.818001][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 35.925425][ T4417] loop2: detected capacity change from 0 to 32768 [ 35.939848][ T4417] (syz.2.7,4417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 35.946393][ T4417] (syz.2.7,4417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 36.533855][ T4417] JBD2: Ignoring recovery information on journal [ 36.538936][ T4414] loop0: detected capacity change from 0 to 32768 [ 36.582016][ T4414] XFS (loop0): Mounting V5 Filesystem [ 36.599202][ T4417] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 36.630067][ T4414] XFS (loop0): Ending clean mount [ 36.722826][ T4438] loop3: detected capacity change from 0 to 4096 [ 36.768652][ T4445] loop4: detected capacity change from 0 to 512 [ 36.778932][ T4438] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 36.779381][ T4324] XFS (loop0): Unmounting Filesystem [ 36.782678][ T4445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.785135][ T4445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.828864][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.11: bad orphan inode 131083 [ 36.841651][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.949827][ T4445] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.11: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 36.958308][ T4443] loop1: detected capacity change from 0 to 32768 [ 37.661191][ T4328] ocfs2: Unmounting device (7,2) on (node local) [ 37.675640][ T4445] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.11: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 37.699551][ T4443] XFS (loop1): Mounting V5 Filesystem [ 37.767433][ T4443] XFS (loop1): Starting recovery (logdev: internal) [ 37.773936][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 37.774936][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 37.775912][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 37.776800][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 37.777794][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 37.795519][ T4443] XFS (loop1): Ending recovery (logdev: internal) [ 37.865046][ T4319] EXT4-fs (loop4): unmounting filesystem. [ 38.395947][ T4471] loop4: detected capacity change from 0 to 4096 [ 38.419917][ T4320] XFS (loop1): Unmounting Filesystem [ 38.431552][ T4471] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 38.705682][ T4480] device bridge1 entered promiscuous mode [ 38.834463][ T4482] loop2: detected capacity change from 0 to 4096 [ 38.847345][ T4482] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 39.329095][ T4491] loop1: detected capacity change from 0 to 4096 [ 39.348373][ T4491] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 39.378750][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 39.854343][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 39.854366][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 39.856558][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 39.857734][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 39.858788][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 40.797362][ T4506] loop3: detected capacity change from 0 to 8192 [ 40.852299][ T4506] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 40.981613][ T4512] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 41.319171][ T4516] loop0: detected capacity change from 0 to 4096 [ 41.351994][ T4516] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 42.623226][ C1] sched: RT throttling activated [ 42.841852][ T4526] loop0: detected capacity change from 0 to 4096 [ 42.849328][ T4525] loop1: detected capacity change from 0 to 4096 [ 42.863130][ T4525] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 42.864413][ T4526] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 46.195091][ T4534] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 46.540112][ T4539] FAULT_INJECTION: forcing a failure. [ 46.540112][ T4539] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.542420][ T4539] CPU: 1 PID: 4539 Comm: syz.1.29 Not tainted syzkaller #0 [ 46.543688][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 46.545386][ T4539] Call trace: [ 46.545971][ T4539] dump_backtrace+0x1c0/0x1ec [ 46.546749][ T4539] show_stack+0x2c/0x3c [ 46.547478][ T4539] __dump_stack+0x30/0x40 [ 46.548191][ T4539] dump_stack_lvl+0xf4/0x15c [ 46.548932][ T4539] dump_stack+0x1c/0x5c [ 46.549606][ T4539] should_fail_ex+0x3c0/0x518 [ 46.550410][ T4539] should_fail+0x14/0x24 [ 46.550429][ T4533] loop3: detected capacity change from 0 to 32768 [ 46.551130][ T4539] should_fail_usercopy+0x20/0x30 [ 46.553027][ T4539] strncpy_from_user+0x48/0x578 [ 46.553872][ T4539] getname_flags+0xec/0x45c [ 46.554622][ T4539] getname+0x28/0x38 [ 46.555297][ T4539] do_sys_openat2+0xdc/0x3f4 [ 46.556077][ T4539] __arm64_sys_openat+0x118/0x14c [ 46.556909][ T4539] invoke_syscall+0x98/0x2b4 [ 46.557673][ T4539] el0_svc_common+0x138/0x258 [ 46.558054][ T4533] ======================================================= [ 46.558054][ T4533] WARNING: The mand mount option has been deprecated and [ 46.558054][ T4533] and is ignored by this kernel. Remove the mand [ 46.558054][ T4533] option from the mount to silence this warning. [ 46.558054][ T4533] ======================================================= [ 46.558410][ T4539] do_el0_svc+0x58/0x130 [ 46.564356][ T4539] el0_svc+0x58/0x128 [ 46.565068][ T4539] el0t_64_sync_handler+0x84/0xf0 [ 46.565903][ T4539] el0t_64_sync+0x18c/0x190 [ 46.582595][ T4533] *** Log Is Dirty ! *** [ 46.584863][ T4533] lmLogInit: exit(-22) [ 46.585879][ T4533] lmLogOpen: exit(-22) [ 46.587237][ T4533] jfs_mount_rw failed, return code = -22 [ 46.701870][ T4541] loop3: detected capacity change from 0 to 4096 [ 46.730837][ T4541] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 47.729064][ T4545] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 48.167509][ T4551] loop1: detected capacity change from 0 to 40427 [ 49.569663][ T4567] device syzkaller0 entered promiscuous mode [ 49.647579][ T4569] loop0: detected capacity change from 0 to 4096 [ 49.698432][ T4572] loop3: detected capacity change from 0 to 512 [ 49.875431][ T4572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.972209][ T4581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.976685][ T4581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.625778][ T4569] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 50.643384][ T4311] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.180464][ T4578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.191265][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 51.275660][ T4595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 51.283463][ T4595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.44'. [ 51.380221][ T4603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 51.381771][ T4603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.46'. [ 51.418836][ T4605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.49'. [ 51.718570][ T4609] loop1: detected capacity change from 0 to 32768 [ 51.743983][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 51.807508][ T4609] XFS (loop1): Mounting V5 Filesystem [ 51.834999][ T4609] XFS (loop1): Ending clean mount [ 51.838185][ T4609] XFS (loop1): Quotacheck needed: Please wait. [ 51.881271][ T4609] XFS (loop1): Quotacheck: Done. [ 51.915376][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.917227][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.919182][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.920906][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.922178][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.934400][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.951453][ T4320] XFS (loop1): Unmounting Filesystem [ 52.061531][ T4626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.116148][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.120568][ T4636] loop2: detected capacity change from 0 to 256 [ 52.143077][ T4636] FAT-fs (loop2): bogus number of FAT structure [ 52.144519][ T4636] FAT-fs (loop2): Can't find a valid FAT filesystem [ 52.197147][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 52.205223][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.284932][ T4642] ax25_connect(): syz.1.57 uses autobind, please contact jreuter@yaina.de [ 52.289870][ T4640] loop3: detected capacity change from 0 to 4096 [ 52.319355][ T4640] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 52.364641][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.388161][ T4652] FAULT_INJECTION: forcing a failure. [ 52.388161][ T4652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.390352][ T4652] CPU: 1 PID: 4652 Comm: syz.0.63 Not tainted syzkaller #0 [ 52.391592][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 52.393121][ T4652] Call trace: [ 52.393679][ T4652] dump_backtrace+0x1c0/0x1ec [ 52.394473][ T4652] show_stack+0x2c/0x3c [ 52.395236][ T4652] __dump_stack+0x30/0x40 [ 52.395943][ T4652] dump_stack_lvl+0xf4/0x15c [ 52.396736][ T4652] dump_stack+0x1c/0x5c [ 52.397499][ T4652] should_fail_ex+0x3c0/0x518 [ 52.398249][ T4652] should_fail+0x14/0x24 [ 52.398947][ T4652] should_fail_usercopy+0x20/0x30 [ 52.399784][ T4652] move_addr_to_kernel+0xa8/0x270 [ 52.400555][ T4652] copy_msghdr_from_user+0x3d4/0x4d0 [ 52.401399][ T4652] __sys_sendmmsg+0x314/0x834 [ 52.402195][ T4652] __arm64_sys_sendmmsg+0xa0/0xbc [ 52.403187][ T4652] invoke_syscall+0x98/0x2b4 [ 52.403967][ T4652] el0_svc_common+0x138/0x258 [ 52.404732][ T4652] do_el0_svc+0x58/0x130 [ 52.405441][ T4652] el0_svc+0x58/0x128 [ 52.406063][ T4652] el0t_64_sync_handler+0x84/0xf0 [ 52.406984][ T4652] el0t_64_sync+0x18c/0x190 [ 52.487364][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.494132][ T4627] chnl_net:caif_netlink_parms(): no params data found [ 53.208846][ T4662] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 53.211925][ T4662] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.218413][ T4627] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.224448][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.233142][ T4627] device bridge_slave_0 entered promiscuous mode [ 53.242512][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.243964][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.245541][ T4627] device bridge_slave_1 entered promiscuous mode [ 53.262574][ T4627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.278792][ T4627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.291349][ T4627] team0: Port device team_slave_0 added [ 53.299690][ T4627] team0: Port device team_slave_1 added [ 53.317771][ T4627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.320285][ T4627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.330233][ T4627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.338340][ T4627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.340749][ T4627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.359372][ T4627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.426321][ T4659] loop2: detected capacity change from 0 to 32768 [ 53.444842][ T4659] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.66 (4659) [ 53.459473][ T4668] process 'syz.1.68' launched '/dev/fd/3' with NULL argv: empty string added [ 53.574668][ T4659] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 53.576438][ T4659] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 53.577661][ T4659] BTRFS info (device loop2): enabling auto defrag [ 53.578741][ T4659] BTRFS info (device loop2): use zlib compression, level 3 [ 53.579898][ T4659] BTRFS info (device loop2): force clearing of disk cache [ 53.581551][ T4659] BTRFS info (device loop2): max_inline at 4096 [ 53.582458][ T4659] BTRFS info (device loop2): disabling free space tree [ 53.595757][ T4679] ax25_connect(): syz.3.71 uses autobind, please contact jreuter@yaina.de [ 53.614174][ T4627] device hsr_slave_0 entered promiscuous mode [ 53.633690][ T4627] device hsr_slave_1 entered promiscuous mode [ 53.675234][ T4627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.676526][ T4627] Cannot create hsr debugfs directory [ 53.766172][ T4709] FAULT_INJECTION: forcing a failure. [ 53.766172][ T4709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.768268][ T4709] CPU: 1 PID: 4709 Comm: syz.1.75 Not tainted syzkaller #0 [ 53.769422][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 53.770846][ T4709] Call trace: [ 53.771339][ T4709] dump_backtrace+0x1c0/0x1ec [ 53.772024][ T4709] show_stack+0x2c/0x3c [ 53.772696][ T4709] __dump_stack+0x30/0x40 [ 53.773333][ T4709] dump_stack_lvl+0xf4/0x15c [ 53.774000][ T4709] dump_stack+0x1c/0x5c [ 53.774685][ T4709] should_fail_ex+0x3c0/0x518 [ 53.775437][ T4709] should_fail+0x14/0x24 [ 53.776141][ T4709] should_fail_usercopy+0x20/0x30 [ 53.777026][ T4709] iovec_from_user+0xcc/0x5dc [ 53.777837][ T4709] __import_iovec+0x84/0x470 [ 53.778599][ T4709] import_iovec+0x88/0xa4 [ 53.779347][ T4709] copy_msghdr_from_user+0x344/0x4d0 [ 53.780306][ T4709] __sys_sendmsg+0x22c/0x374 [ 53.781053][ T4709] __arm64_sys_sendmsg+0x80/0x94 [ 53.781889][ T4709] invoke_syscall+0x98/0x2b4 [ 53.782629][ T4709] el0_svc_common+0x138/0x258 [ 53.783360][ T4709] do_el0_svc+0x58/0x130 [ 53.784015][ T4709] el0_svc+0x58/0x128 [ 53.784691][ T4709] el0t_64_sync_handler+0x84/0xf0 [ 53.785488][ T4709] el0t_64_sync+0x18c/0x190 [ 53.807744][ T4627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.816239][ T4659] BTRFS info (device loop2): enabling ssd optimizations [ 53.819636][ T4659] BTRFS info (device loop2): rebuilding free space tree [ 53.819882][ T4712] FAULT_INJECTION: forcing a failure. [ 53.819882][ T4712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.832302][ T4712] CPU: 0 PID: 4712 Comm: syz.3.76 Not tainted syzkaller #0 [ 53.833385][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 53.833530][ T4627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.834955][ T4712] Call trace: [ 53.836571][ T4712] dump_backtrace+0x1c0/0x1ec [ 53.837287][ T4712] show_stack+0x2c/0x3c [ 53.837941][ T4712] __dump_stack+0x30/0x40 [ 53.838611][ T4712] dump_stack_lvl+0xf4/0x15c [ 53.839410][ T4712] dump_stack+0x1c/0x5c [ 53.840064][ T4712] should_fail_ex+0x3c0/0x518 [ 53.840850][ T4712] should_fail+0x14/0x24 [ 53.841537][ T4712] should_fail_usercopy+0x20/0x30 [ 53.842210][ T4712] move_addr_to_kernel+0xa8/0x270 [ 53.842970][ T4712] copy_msghdr_from_user+0x3d4/0x4d0 [ 53.843874][ T4712] __sys_sendmsg+0x22c/0x374 [ 53.844792][ T4712] __arm64_sys_sendmsg+0x80/0x94 [ 53.845678][ T4712] invoke_syscall+0x98/0x2b4 [ 53.846465][ T4712] el0_svc_common+0x138/0x258 [ 53.847280][ T4712] do_el0_svc+0x58/0x130 [ 53.848128][ T4712] el0_svc+0x58/0x128 [ 53.848853][ T4712] el0t_64_sync_handler+0x84/0xf0 [ 53.849663][ T4712] el0t_64_sync+0x18c/0x190 [ 53.865606][ T4659] BTRFS info (device loop2): disabling free space tree [ 53.866830][ T4659] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 53.868664][ T4659] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 53.898457][ T4627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.901008][ T4328] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 53.938547][ T4717] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.939762][ T4627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.013299][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 54.082576][ T4728] ax25_connect(): syz.0.77 uses autobind, please contact jreuter@yaina.de [ 54.100062][ T4735] loop1: detected capacity change from 0 to 4096 [ 54.111755][ T4739] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 54.114144][ T4741] syz.2.79 uses obsolete (PF_INET,SOCK_PACKET) [ 54.119504][ T4735] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 54.163698][ T4311] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (4311) [ 54.300883][ T4755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 54.413373][ T4331] Bluetooth: hci3: command 0x0406 tx timeout [ 55.653084][ T4754] loop0: detected capacity change from 0 to 128 [ 55.663939][ T4754] ext4: Unknown parameter 'noacl' [ 55.766372][ T4772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.834244][ T4773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.900885][ T4774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.093315][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 56.174184][ T4313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.321780][ T4627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.379804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.381300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.384616][ T4627] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.397496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.399397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.400852][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.401951][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.417111][ T4780] FAULT_INJECTION: forcing a failure. [ 56.417111][ T4780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.419466][ T4780] CPU: 1 PID: 4780 Comm: syz.2.89 Not tainted syzkaller #0 [ 56.420665][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 56.422343][ T4780] Call trace: [ 56.422898][ T4780] dump_backtrace+0x1c0/0x1ec [ 56.423667][ T4780] show_stack+0x2c/0x3c [ 56.424355][ T4780] __dump_stack+0x30/0x40 [ 56.425128][ T4780] dump_stack_lvl+0xf4/0x15c [ 56.425949][ T4780] dump_stack+0x1c/0x5c [ 56.426687][ T4780] should_fail_ex+0x3c0/0x518 [ 56.427412][ T4780] should_fail+0x14/0x24 [ 56.428022][ T4780] should_fail_usercopy+0x20/0x30 [ 56.428718][ T4780] iovec_from_user+0xcc/0x5dc [ 56.429516][ T4780] __import_iovec+0x84/0x470 [ 56.430294][ T4780] import_iovec+0x88/0xa4 [ 56.430959][ T4780] copy_msghdr_from_user+0x344/0x4d0 [ 56.431848][ T4780] __sys_sendmsg+0x22c/0x374 [ 56.432611][ T4780] __arm64_sys_sendmsg+0x80/0x94 [ 56.433453][ T4780] invoke_syscall+0x98/0x2b4 [ 56.434204][ T4780] el0_svc_common+0x138/0x258 [ 56.435026][ T4780] do_el0_svc+0x58/0x130 [ 56.435841][ T4780] el0_svc+0x58/0x128 [ 56.436539][ T4780] el0t_64_sync_handler+0x84/0xf0 [ 56.437346][ T4780] el0t_64_sync+0x18c/0x190 [ 56.468042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.469734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.471269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.472830][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.474047][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.479616][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.482464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.491229][ T4627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.492875][ T4627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.514120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.516795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.518427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.520538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.522104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.534112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.535706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.543902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.545604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.547026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.575267][ T4778] loop1: detected capacity change from 0 to 32768 [ 56.584361][ T4778] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 56.634853][ T4311] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 56.661061][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c1749314: rx timeout, send abort [ 56.759956][ T27] audit: type=1326 audit(56.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.1.91" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b977128 code=0x0 [ 56.800354][ T4627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.807919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.809219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.863106][ T4807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.876568][ T4807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.937133][ T4814] loop0: detected capacity change from 0 to 1024 [ 56.945596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.947500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.965892][ T4814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.020617][ T4627] device veth0_vlan entered promiscuous mode [ 57.024873][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.026445][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.028565][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.030032][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.039337][ T4627] device veth1_vlan entered promiscuous mode [ 57.052473][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.054324][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.055742][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.057330][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.067607][ T4627] device veth0_macvtap entered promiscuous mode [ 57.070659][ T4627] device veth1_macvtap entered promiscuous mode [ 57.079827][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.081532][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.083871][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.085668][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.087301][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.089428][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.091045][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.092729][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.097692][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.099382][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.104448][ T4627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.107558][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.109654][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.111467][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.117236][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.119017][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.120698][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.122330][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.124182][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.125772][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.127484][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.129909][ T4627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.133114][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.135245][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.136781][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.140411][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.142080][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.144053][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.148582][ T4627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.150228][ T4627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.151752][ T4627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.158134][ T4627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.161498][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d52a2705: rx timeout, send abort [ 57.163127][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c1749314: abort rx timeout. Force session deactivation [ 57.192276][ T4830] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 57.297198][ T4832] loop2: detected capacity change from 0 to 32768 [ 57.374686][ T4834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'. [ 57.662958][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d52a2705: abort rx timeout. Force session deactivation [ 58.173437][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 58.360185][ T4842] loop1: detected capacity change from 0 to 256 [ 58.416593][ T4842] FAT-fs (loop1): Directory bread(block 64) failed [ 58.417745][ T4842] FAT-fs (loop1): Directory bread(block 65) failed [ 58.418772][ T4842] FAT-fs (loop1): Directory bread(block 66) failed [ 58.419801][ T4842] FAT-fs (loop1): Directory bread(block 67) failed [ 58.420898][ T4842] FAT-fs (loop1): Directory bread(block 68) failed [ 58.425463][ T4842] FAT-fs (loop1): Directory bread(block 69) failed [ 58.426641][ T4842] FAT-fs (loop1): Directory bread(block 70) failed [ 58.427701][ T4842] FAT-fs (loop1): Directory bread(block 71) failed [ 58.428848][ T4842] FAT-fs (loop1): Directory bread(block 72) failed [ 58.429885][ T4842] FAT-fs (loop1): Directory bread(block 73) failed [ 58.440793][ T4832] autofs4:pid:4832:autofs_fill_super: called with bogus options [ 58.467755][ T4849] loop3: detected capacity change from 0 to 64 [ 58.571310][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 58.995507][ T4852] loop2: detected capacity change from 0 to 32768 [ 59.019702][ T4852] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.022046][ T4852] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 59.024704][ T4852] BTRFS info (device loop2): enabling auto defrag [ 59.026439][ T4852] BTRFS info (device loop2): use zlib compression, level 3 [ 59.027629][ T4852] BTRFS info (device loop2): force clearing of disk cache [ 59.029265][ T4852] BTRFS info (device loop2): max_inline at 4096 [ 59.030603][ T4852] BTRFS info (device loop2): disabling free space tree [ 59.061610][ T55] device hsr_slave_0 left promiscuous mode [ 59.089281][ T55] device hsr_slave_1 left promiscuous mode [ 59.092567][ T4875] loop0: detected capacity change from 0 to 256 [ 59.103883][ T4875] FAT-fs (loop0): Unrecognized mount option "iocharsmail=0" or missing value [ 59.145195][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.145643][ T4313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.146442][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.158662][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.160021][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.161670][ T55] device bridge_slave_1 left promiscuous mode [ 59.163432][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.228758][ T4852] BTRFS info (device loop2): enabling ssd optimizations [ 59.230356][ T4852] BTRFS info (device loop2): rebuilding free space tree [ 59.236909][ T4852] BTRFS info (device loop2): disabling free space tree [ 59.238014][ T4852] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 59.239626][ T4852] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 59.257002][ T55] device bridge_slave_0 left promiscuous mode [ 59.258211][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.290845][ T4328] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.326237][ T4875] loop0: detected capacity change from 0 to 40427 [ 59.360739][ T4875] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 59.363710][ T55] device veth1_macvtap left promiscuous mode [ 59.365329][ T55] device veth0_macvtap left promiscuous mode [ 59.366682][ T55] device veth1_vlan left promiscuous mode [ 59.367700][ T55] device veth0_vlan left promiscuous mode [ 59.370417][ T4875] F2FS-fs (loop0): invalid crc value [ 59.377707][ T4875] F2FS-fs (loop0): Found nat_bits in checkpoint [ 59.404114][ T4311] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (4311) [ 59.460052][ T4875] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 59.470682][ T4903] FAULT_INJECTION: forcing a failure. [ 59.470682][ T4903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.474095][ T4903] CPU: 0 PID: 4903 Comm: syz.2.103 Not tainted syzkaller #0 [ 59.475295][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 59.476880][ T4903] Call trace: [ 59.477410][ T4903] dump_backtrace+0x1c0/0x1ec [ 59.478195][ T4903] show_stack+0x2c/0x3c [ 59.478899][ T4903] __dump_stack+0x30/0x40 [ 59.479665][ T4903] dump_stack_lvl+0xf4/0x15c [ 59.480395][ T4903] dump_stack+0x1c/0x5c [ 59.481191][ T4903] should_fail_ex+0x3c0/0x518 [ 59.481937][ T4903] should_fail+0x14/0x24 [ 59.482619][ T4903] should_fail_usercopy+0x20/0x30 [ 59.483454][ T4903] kstrtouint_from_user+0xe0/0x264 [ 59.484211][ T4903] proc_fail_nth_write+0x9c/0x234 [ 59.485006][ T4903] vfs_write+0x2a4/0x7f0 [ 59.485723][ T4903] ksys_write+0x12c/0x224 [ 59.486461][ T4903] __arm64_sys_write+0x7c/0x90 [ 59.487287][ T4903] invoke_syscall+0x98/0x2b4 [ 59.488072][ T4903] el0_svc_common+0x138/0x258 [ 59.488826][ T4903] do_el0_svc+0x58/0x130 [ 59.489533][ T4903] el0_svc+0x58/0x128 [ 59.490225][ T4903] el0t_64_sync_handler+0x84/0xf0 [ 59.491075][ T4903] el0t_64_sync+0x18c/0x190 [ 59.500147][ T4904] FAULT_INJECTION: forcing a failure. [ 59.500147][ T4904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.502207][ T4904] CPU: 0 PID: 4904 Comm: syz.3.104 Not tainted syzkaller #0 [ 59.503303][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 59.504837][ T4904] Call trace: [ 59.505352][ T4904] dump_backtrace+0x1c0/0x1ec [ 59.506077][ T4904] show_stack+0x2c/0x3c [ 59.506738][ T4904] __dump_stack+0x30/0x40 [ 59.507423][ T4904] dump_stack_lvl+0xf4/0x15c [ 59.508108][ T4904] dump_stack+0x1c/0x5c [ 59.508776][ T4904] should_fail_ex+0x3c0/0x518 [ 59.509581][ T4904] should_fail+0x14/0x24 [ 59.510295][ T4904] should_fail_usercopy+0x20/0x30 [ 59.511100][ T4904] iovec_from_user+0xcc/0x5dc [ 59.511910][ T4904] __import_iovec+0x84/0x470 [ 59.512691][ T4904] import_iovec+0x88/0xa4 [ 59.513482][ T4904] copy_msghdr_from_user+0x344/0x4d0 [ 59.514413][ T4904] __sys_sendmsg+0x22c/0x374 [ 59.515168][ T4904] __arm64_sys_sendmsg+0x80/0x94 [ 59.515956][ T4904] invoke_syscall+0x98/0x2b4 [ 59.516735][ T4904] el0_svc_common+0x138/0x258 [ 59.517489][ T4904] do_el0_svc+0x58/0x130 [ 59.518191][ T4904] el0_svc+0x58/0x128 [ 59.518792][ T4904] el0t_64_sync_handler+0x84/0xf0 [ 59.519629][ T4904] el0t_64_sync+0x18c/0x190 [ 59.975410][ T4324] syz-executor: attempt to access beyond end of device [ 59.975410][ T4324] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.253291][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 61.625549][ T55] team0 (unregistering): Port device team_slave_1 removed [ 61.814808][ T55] team0 (unregistering): Port device team_slave_0 removed [ 61.985194][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.184271][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.794369][ T55] bond0 (unregistering): Released all slaves [ 64.116179][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.117563][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.135136][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.181281][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.182679][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.193342][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.249697][ T4924] loop1: detected capacity change from 0 to 1024 [ 64.251645][ T4922] netlink: 'syz.3.106': attribute type 7 has an invalid length. [ 64.504883][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.505971][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.984468][ T4944] device syzkaller0 entered promiscuous mode [ 66.129967][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 66.493125][ T4958] loop0: detected capacity change from 0 to 8192 [ 66.560945][ T4958] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 66.652520][ T4965] FAULT_INJECTION: forcing a failure. [ 66.652520][ T4965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.655341][ T4965] CPU: 1 PID: 4965 Comm: syz.3.117 Not tainted syzkaller #0 [ 66.656445][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 66.658156][ T4965] Call trace: [ 66.658692][ T4965] dump_backtrace+0x1c0/0x1ec [ 66.659405][ T4965] show_stack+0x2c/0x3c [ 66.660069][ T4965] __dump_stack+0x30/0x40 [ 66.660875][ T4965] dump_stack_lvl+0xf4/0x15c [ 66.661640][ T4965] dump_stack+0x1c/0x5c [ 66.662402][ T4965] should_fail_ex+0x3c0/0x518 [ 66.663277][ T4965] should_fail+0x14/0x24 [ 66.663985][ T4965] should_fail_usercopy+0x20/0x30 [ 66.664883][ T4965] iovec_from_user+0xcc/0x5dc [ 66.665729][ T4965] __import_iovec+0x84/0x470 [ 66.666572][ T4965] import_iovec+0x88/0xa4 [ 66.667318][ T4965] copy_msghdr_from_user+0x344/0x4d0 [ 66.668144][ T4965] __sys_sendmsg+0x22c/0x374 [ 66.668861][ T4965] __arm64_sys_sendmsg+0x80/0x94 [ 66.669631][ T4965] invoke_syscall+0x98/0x2b4 [ 66.670428][ T4965] el0_svc_common+0x138/0x258 [ 66.671190][ T4965] do_el0_svc+0x58/0x130 [ 66.672015][ T4965] el0_svc+0x58/0x128 [ 66.672724][ T4965] el0t_64_sync_handler+0x84/0xf0 [ 66.673524][ T4965] el0t_64_sync+0x18c/0x190 [ 66.848579][ T4979] loop2: detected capacity change from 0 to 1024 [ 67.388897][ T4916] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.514609][ T4987] loop2: detected capacity change from 0 to 64 [ 67.540048][ T4969] device gretap0 entered promiscuous mode [ 67.541119][ T4969] device vlan2 entered promiscuous mode [ 68.227804][ T4986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.231967][ T4986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.657593][ T5007] loop3: detected capacity change from 0 to 4096 [ 68.675843][ T5007] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 68.705554][ T5029] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 68.762925][ T5031] loop2: detected capacity change from 0 to 1024 [ 68.775738][ T5033] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 71.317773][ T14] cfg80211: failed to load regulatory.db [ 71.412356][ T5049] loop2: detected capacity change from 0 to 8192 [ 71.432452][ T5049] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 71.590547][ T5061] loop1: detected capacity change from 0 to 512 [ 71.602402][ T5067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.139'. [ 71.604128][ T5067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.139'. [ 71.618557][ T5061] ext4: Unknown parameter 'nouser_xattr' [ 71.944215][ T5069] FAULT_INJECTION: forcing a failure. [ 71.944215][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.946419][ T5069] CPU: 1 PID: 5069 Comm: syz.3.141 Not tainted syzkaller #0 [ 71.947616][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 71.949286][ T5069] Call trace: [ 71.949820][ T5069] dump_backtrace+0x1c0/0x1ec [ 71.950628][ T5069] show_stack+0x2c/0x3c [ 71.951341][ T5069] __dump_stack+0x30/0x40 [ 71.952080][ T5069] dump_stack_lvl+0xf4/0x15c [ 71.952828][ T5069] dump_stack+0x1c/0x5c [ 71.953589][ T5069] should_fail_ex+0x3c0/0x518 [ 71.954385][ T5069] should_fail+0x14/0x24 [ 71.955066][ T5069] should_fail_usercopy+0x20/0x30 [ 71.955892][ T5069] iovec_from_user+0xcc/0x5dc [ 71.956716][ T5069] __import_iovec+0x84/0x470 [ 71.957512][ T5069] import_iovec+0x88/0xa4 [ 71.958208][ T5069] copy_msghdr_from_user+0x344/0x4d0 [ 71.959059][ T5069] __sys_sendmmsg+0x314/0x834 [ 71.959835][ T5069] __arm64_sys_sendmmsg+0xa0/0xbc [ 71.960690][ T5069] invoke_syscall+0x98/0x2b4 [ 71.961363][ T5069] el0_svc_common+0x138/0x258 [ 71.962064][ T5069] do_el0_svc+0x58/0x130 [ 71.962738][ T5069] el0_svc+0x58/0x128 [ 71.963422][ T5069] el0t_64_sync_handler+0x84/0xf0 [ 71.964335][ T5069] el0t_64_sync+0x18c/0x190 [ 71.972462][ T5056] loop0: detected capacity change from 0 to 32768 [ 71.977977][ T5056] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 72.062518][ T4917] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.188471][ T5094] loop0: detected capacity change from 0 to 1024 [ 72.320960][ T5099] FAULT_INJECTION: forcing a failure. [ 72.320960][ T5099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.323168][ T5099] CPU: 1 PID: 5099 Comm: syz.2.149 Not tainted syzkaller #0 [ 72.324410][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 72.326046][ T5099] Call trace: [ 72.326599][ T5099] dump_backtrace+0x1c0/0x1ec [ 72.327372][ T5099] show_stack+0x2c/0x3c [ 72.328103][ T5099] __dump_stack+0x30/0x40 [ 72.328839][ T5099] dump_stack_lvl+0xf4/0x15c [ 72.329562][ T5099] dump_stack+0x1c/0x5c [ 72.329646][ T5106] FAULT_INJECTION: forcing a failure. [ 72.329646][ T5106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.330212][ T5099] should_fail_ex+0x3c0/0x518 [ 72.333066][ T5099] should_fail+0x14/0x24 [ 72.333702][ T5099] should_fail_usercopy+0x20/0x30 [ 72.334499][ T5099] move_addr_to_kernel+0xa8/0x270 [ 72.335398][ T5099] copy_msghdr_from_user+0x3d4/0x4d0 [ 72.336343][ T5099] __sys_sendmsg+0x22c/0x374 [ 72.337092][ T5099] __arm64_sys_sendmsg+0x80/0x94 [ 72.337968][ T5099] invoke_syscall+0x98/0x2b4 [ 72.338777][ T5099] el0_svc_common+0x138/0x258 [ 72.339472][ T5099] do_el0_svc+0x58/0x130 [ 72.340189][ T5099] el0_svc+0x58/0x128 [ 72.340900][ T5099] el0t_64_sync_handler+0x84/0xf0 [ 72.341823][ T5099] el0t_64_sync+0x18c/0x190 [ 72.347863][ T5106] CPU: 0 PID: 5106 Comm: syz.3.150 Not tainted syzkaller #0 [ 72.349115][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 72.350617][ T5106] Call trace: [ 72.351163][ T5106] dump_backtrace+0x1c0/0x1ec [ 72.351923][ T5106] show_stack+0x2c/0x3c [ 72.352560][ T5106] __dump_stack+0x30/0x40 [ 72.353314][ T5106] dump_stack_lvl+0xf4/0x15c [ 72.354134][ T5106] dump_stack+0x1c/0x5c [ 72.354848][ T5106] should_fail_ex+0x3c0/0x518 [ 72.355590][ T5106] should_fail+0x14/0x24 [ 72.356262][ T5106] should_fail_usercopy+0x20/0x30 [ 72.357067][ T5106] strncpy_from_user+0x48/0x578 [ 72.357876][ T5106] bpf_prog_load+0x180/0x12d4 [ 72.358708][ T5106] __sys_bpf+0x494/0x660 [ 72.359412][ T5106] __arm64_sys_bpf+0x80/0x98 [ 72.360138][ T5106] invoke_syscall+0x98/0x2b4 [ 72.360903][ T5106] el0_svc_common+0x138/0x258 [ 72.361654][ T5106] do_el0_svc+0x58/0x130 [ 72.362323][ T5106] el0_svc+0x58/0x128 [ 72.362955][ T5106] el0t_64_sync_handler+0x84/0xf0 [ 72.363760][ T5106] el0t_64_sync+0x18c/0x190 [ 72.410955][ T5111] loop5: detected capacity change from 0 to 256 [ 72.481966][ T5117] loop3: detected capacity change from 0 to 128 [ 72.539983][ T5117] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 72.675404][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 72.855282][ T5132] loop3: detected capacity change from 0 to 8192 [ 72.862281][ T5136] loop2: detected capacity change from 0 to 1024 [ 72.863583][ T5132] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 72.969679][ T5128] loop0: detected capacity change from 0 to 32768 [ 73.004869][ T5128] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 73.396657][ T5145] loop2: detected capacity change from 0 to 4096 [ 73.411596][ T5145] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 73.568990][ T4917] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 74.907406][ T5091] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.909823][ T5091] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 74.911246][ T5091] REISERFS (device loop1): using ordered data mode [ 74.911577][ T5168] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 74.923306][ T5091] reiserfs: using flush barriers [ 74.926772][ T5091] REISERFS (device loop1): journal params: device loop1, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.930670][ T5091] REISERFS (device loop1): checking transaction log (loop1) [ 74.936591][ T5168] device syz_tun entered promiscuous mode [ 74.941123][ T5168] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 74.950053][ T5175] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 74.992884][ T5175] team0: Device vxcan1 is of different type [ 75.241568][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.244356][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.245995][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.247984][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.404593][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.407270][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.582447][ T5170] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.164 (5170) [ 75.603292][ T5170] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 75.605175][ T5170] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 75.613436][ T5170] BTRFS info (device loop0): using free space tree [ 75.623448][ T5185] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 75.625233][ T5185] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 75.628686][ T5185] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 75.630604][ T5185] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 75.640573][ T5185] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 75.649047][ T5185] ntfs: volume version 3.1. [ 75.657471][ T5185] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 75.659453][ T5185] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 75.662126][ T5185] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 75.665034][ T5185] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 75.669342][ T5185] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 75.725724][ T5012] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.865027][ T5012] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.885857][ T5170] BTRFS info (device loop0): enabling ssd optimizations [ 75.947905][ T5012] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.037715][ T5221] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 76.064669][ T5012] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.128017][ T4324] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 76.570971][ T5186] chnl_net:caif_netlink_parms(): no params data found [ 76.730437][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.734171][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.744319][ T4892] libceph: connect (1)[c::]:6789 error -101 [ 76.744317][ T5186] device bridge_slave_0 entered promiscuous mode [ 76.746678][ T4892] libceph: mon0 (1)[c::]:6789 connect error [ 76.753767][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.754878][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.756453][ T5186] device bridge_slave_1 entered promiscuous mode [ 76.772807][ T5239] ceph: No mds server is up or the cluster is laggy [ 76.828110][ T5253] FAULT_INJECTION: forcing a failure. [ 76.828110][ T5253] name failslab, interval 1, probability 0, space 0, times 1 [ 76.830164][ T5253] CPU: 1 PID: 5253 Comm: syz.2.179 Not tainted syzkaller #0 [ 76.831312][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 76.832942][ T5253] Call trace: [ 76.833440][ T5253] dump_backtrace+0x1c0/0x1ec [ 76.834149][ T5253] show_stack+0x2c/0x3c [ 76.834764][ T5253] __dump_stack+0x30/0x40 [ 76.835426][ T5253] dump_stack_lvl+0xf4/0x15c [ 76.836121][ T5253] dump_stack+0x1c/0x5c [ 76.836751][ T5253] should_fail_ex+0x3c0/0x518 [ 76.837474][ T5253] __should_failslab+0xc0/0x120 [ 76.838248][ T5253] should_failslab+0x10/0x28 [ 76.838964][ T5253] __kmem_cache_alloc_node+0x7c/0x314 [ 76.839829][ T5253] kmalloc_trace+0x48/0x94 [ 76.840497][ T5253] ceph_create_client+0x7c/0x2c4 [ 76.841250][ T5253] ceph_get_tree+0x19c/0x112c [ 76.841948][ T5253] vfs_get_tree+0x90/0x274 [ 76.842589][ T5253] vfs_fsconfig_locked+0x1e0/0x374 [ 76.843423][ T5253] __arm64_sys_fsconfig+0x634/0x784 [ 76.844327][ T5253] invoke_syscall+0x98/0x2b4 [ 76.845142][ T5253] el0_svc_common+0x138/0x258 [ 76.845924][ T5253] do_el0_svc+0x58/0x130 [ 76.846616][ T5253] el0_svc+0x58/0x128 [ 76.847273][ T5253] el0t_64_sync_handler+0x84/0xf0 [ 76.848103][ T5253] el0t_64_sync+0x18c/0x190 [ 77.017386][ T4892] libceph: connect (1)[c::]:6789 error -101 [ 77.051395][ T4892] libceph: mon0 (1)[c::]:6789 connect error [ 77.053922][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.147803][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.157157][ T5186] team0: Port device team_slave_0 added [ 77.159473][ T5186] team0: Port device team_slave_1 added [ 77.193044][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.194759][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.199078][ T5186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.414277][ T5091] REISERFS (device loop1): Using rupasov hash to sort names [ 77.500650][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 77.864877][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.866157][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.870319][ T5186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.894161][ T5091] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 77.984835][ T5186] device hsr_slave_0 entered promiscuous mode [ 78.035090][ T5186] device hsr_slave_1 entered promiscuous mode [ 78.083386][ T5186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.085575][ T5186] Cannot create hsr debugfs directory [ 78.110598][ T5287] set_capacity_and_notify: 4 callbacks suppressed [ 78.110606][ T5287] loop2: detected capacity change from 0 to 65536 [ 78.127993][ T5287] XFS (loop2): Mounting V5 Filesystem [ 78.187741][ T5287] XFS (loop2): Ending clean mount [ 78.210692][ T5287] futex_wake_op: syz.2.186 tries to shift op by -1; fix this program [ 78.217485][ T5287] futex_wake_op: syz.2.186 tries to shift op by -1; fix this program [ 78.223191][ T5300] loop0: detected capacity change from 0 to 512 [ 78.300729][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.329048][ T5300] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.188: Failed to acquire dquot type 0 [ 78.334333][ T5307] FAULT_INJECTION: forcing a failure. [ 78.334333][ T5307] name failslab, interval 1, probability 0, space 0, times 0 [ 78.336947][ T5307] CPU: 0 PID: 5307 Comm: syz.1.187 Not tainted syzkaller #0 [ 78.338161][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.339703][ T5307] Call trace: [ 78.340226][ T5307] dump_backtrace+0x1c0/0x1ec [ 78.340971][ T5307] show_stack+0x2c/0x3c [ 78.341626][ T5307] __dump_stack+0x30/0x40 [ 78.342361][ T5307] dump_stack_lvl+0xf4/0x15c [ 78.343121][ T5307] dump_stack+0x1c/0x5c [ 78.343776][ T5307] should_fail_ex+0x3c0/0x518 [ 78.344526][ T5307] __should_failslab+0xc0/0x120 [ 78.345294][ T5307] should_failslab+0x10/0x28 [ 78.346114][ T5307] __kmem_cache_alloc_node+0x7c/0x314 [ 78.347014][ T5307] __kmalloc+0xd8/0x178 [ 78.347676][ T5307] tomoyo_encode+0x26c/0x49c [ 78.348378][ T5307] tomoyo_realpath_from_path+0x480/0x4d4 [ 78.349207][ T5307] tomoyo_path_number_perm+0x1c8/0x550 [ 78.350135][ T5307] tomoyo_file_ioctl+0x2c/0x3c [ 78.350950][ T5307] security_file_ioctl+0x80/0xbc [ 78.351795][ T5307] __arm64_sys_ioctl+0xa8/0x1c8 [ 78.352550][ T5307] invoke_syscall+0x98/0x2b4 [ 78.353268][ T5307] el0_svc_common+0x138/0x258 [ 78.354001][ T5307] do_el0_svc+0x58/0x130 [ 78.354653][ T5307] el0_svc+0x58/0x128 [ 78.355346][ T5307] el0t_64_sync_handler+0x84/0xf0 [ 78.356152][ T5307] el0t_64_sync+0x18c/0x190 [ 78.399809][ T5304] loop3: detected capacity change from 0 to 8192 [ 78.404256][ T5304] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 78.423479][ T5307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.444650][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 78.553000][ T5186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.784987][ T5186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.883949][ T5186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.968029][ T4328] XFS (loop2): Unmounting Filesystem [ 79.221136][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 79.225669][ T5320] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 79.243581][ T5186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.533366][ T4327] Bluetooth: hci0: command 0x041b tx timeout [ 79.747804][ T5344] netlink: 'syz.1.195': attribute type 13 has an invalid length. [ 79.756290][ T5350] loop0: detected capacity change from 0 to 64 [ 79.767780][ T5350] hfs: bad allocation block size 0 [ 79.769350][ T5350] hfs: can't find a HFS filesystem on dev loop0 [ 79.791263][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.810133][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.812270][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.931218][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.937359][ T5186] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.284998][ T5378] input: syz0 as /devices/virtual/input/input2 [ 80.449172][ T5355] netlink: 'syz.0.196': attribute type 13 has an invalid length. [ 81.062665][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.068444][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.070002][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.306012][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.307684][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.309173][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.310768][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.312199][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.313435][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.316568][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.319981][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.321675][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.323243][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.324338][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.549789][ T5386] loop3: detected capacity change from 0 to 512 [ 81.613421][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 81.654477][ T5386] EXT4-fs: Mount option(s) incompatible with ext3 [ 82.007109][ T5410] loop2: detected capacity change from 0 to 512 [ 82.168364][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.170648][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.179467][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.184615][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.191450][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.197246][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.199990][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.205171][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.206714][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.208221][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.211295][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.217261][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.276707][ T5012] device hsr_slave_0 left promiscuous mode [ 82.304039][ T5012] device hsr_slave_1 left promiscuous mode [ 82.363410][ T5012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.364772][ T5012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.366658][ T5012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.367952][ T5012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.369396][ T5012] device bridge_slave_1 left promiscuous mode [ 82.371474][ T5012] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.392863][ T5418] loop3: detected capacity change from 0 to 32768 [ 82.404171][ T5418] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 82.424169][ T5012] device bridge_slave_0 left promiscuous mode [ 82.425383][ T5012] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.449320][ T4916] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 82.456837][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 82.856359][ T5012] device veth1_macvtap left promiscuous mode [ 82.857485][ T5012] device veth0_macvtap left promiscuous mode [ 82.858655][ T5012] device veth1_vlan left promiscuous mode [ 82.859697][ T5012] device veth0_vlan left promiscuous mode [ 82.931940][ T5434] rdma_op 000000001051c355 conn xmit_rdma 0000000000000000 [ 82.940761][ T5415] loop2: detected capacity change from 0 to 131072 [ 82.972407][ T5415] F2FS-fs (loop2): invalid crc value [ 82.997258][ T5415] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.026837][ T5415] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.082305][ T5445] syz.2.205 (pid 5445) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 83.694366][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 84.097151][ T5454] loop1: detected capacity change from 0 to 256 [ 84.122280][ T5454] FAT-fs (loop1): Directory bread(block 64) failed [ 84.123653][ T5454] FAT-fs (loop1): Directory bread(block 65) failed [ 84.124760][ T5454] FAT-fs (loop1): Directory bread(block 66) failed [ 84.125886][ T5454] FAT-fs (loop1): Directory bread(block 67) failed [ 84.127007][ T5454] FAT-fs (loop1): Directory bread(block 68) failed [ 84.128079][ T5454] FAT-fs (loop1): Directory bread(block 69) failed [ 84.129207][ T5454] FAT-fs (loop1): Directory bread(block 70) failed [ 84.130410][ T5454] FAT-fs (loop1): Directory bread(block 71) failed [ 84.131497][ T5454] FAT-fs (loop1): Directory bread(block 72) failed [ 84.132557][ T5454] FAT-fs (loop1): Directory bread(block 73) failed [ 85.106553][ T5012] team0 (unregistering): Port device team_slave_1 removed [ 85.264734][ T5012] team0 (unregistering): Port device team_slave_0 removed [ 85.434345][ T5012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.634156][ T5012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.115146][ T5012] bond0 (unregistering): Released all slaves [ 87.458303][ T5415] device bridge1 entered promiscuous mode [ 87.487885][ T5186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.492684][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.494094][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.078397][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.080084][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.083931][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.085702][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.087513][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.089225][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.092699][ T5186] device veth0_vlan entered promiscuous mode [ 88.109292][ T5186] device veth1_vlan entered promiscuous mode [ 88.130808][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.132528][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.135669][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.137484][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.141507][ T5186] device veth0_macvtap entered promiscuous mode [ 88.160794][ T5186] device veth1_macvtap entered promiscuous mode [ 88.173125][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.178341][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.182292][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.185375][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.189129][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.193061][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.196902][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.199012][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.204465][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.207683][ T5470] loop3: detected capacity change from 0 to 32768 [ 88.209164][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.211002][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.212716][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.217486][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.220508][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.222287][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.224960][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.226861][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.228685][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.236653][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.238770][ T5470] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 88.238787][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.242307][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.247866][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.268771][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.270536][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.285028][ T5186] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.289785][ T5186] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.301300][ T5186] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.303755][ T5186] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.350718][ T5481] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 88.473756][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.475090][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.484952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.590829][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.592281][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.596316][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.859944][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 88.861828][ T5527] loop6: detected capacity change from 0 to 32768 [ 88.877698][ T5527] XFS: noattr2 mount option is deprecated. [ 88.880822][ T5527] XFS: attr2 mount option is deprecated. [ 88.950450][ T5527] XFS (loop6): attr2 and noattr2 cannot both be specified. [ 89.310249][ T4338] Bluetooth: hci0: unexpected cc 0x0402 length: 61 > 1 [ 89.311636][ T4338] Bluetooth: hci0: Ignoring error of Inquiry Cancel command [ 89.376806][ T5561] loop0: detected capacity change from 0 to 2048 [ 89.395301][ T5561] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 89.581210][ T5579] FAULT_INJECTION: forcing a failure. [ 89.581210][ T5579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.583523][ T5579] CPU: 0 PID: 5579 Comm: syz.2.229 Not tainted syzkaller #0 [ 89.584688][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 89.586428][ T5579] Call trace: [ 89.587012][ T5579] dump_backtrace+0x1c0/0x1ec [ 89.587870][ T5579] show_stack+0x2c/0x3c [ 89.588638][ T5579] __dump_stack+0x30/0x40 [ 89.589351][ T5579] dump_stack_lvl+0xf4/0x15c [ 89.590113][ T5579] dump_stack+0x1c/0x5c [ 89.590786][ T5579] should_fail_ex+0x3c0/0x518 [ 89.591516][ T5579] should_fail+0x14/0x24 [ 89.592223][ T5579] should_fail_usercopy+0x20/0x30 [ 89.593081][ T5579] iovec_from_user+0xcc/0x5dc [ 89.593872][ T5579] __import_iovec+0x84/0x470 [ 89.594643][ T5579] import_iovec+0x88/0xa4 [ 89.595381][ T5579] copy_msghdr_from_user+0x344/0x4d0 [ 89.596296][ T5579] __sys_sendmsg+0x22c/0x374 [ 89.597040][ T5579] __arm64_sys_sendmsg+0x80/0x94 [ 89.597843][ T5579] invoke_syscall+0x98/0x2b4 [ 89.598595][ T5579] el0_svc_common+0x138/0x258 [ 89.599356][ T5579] do_el0_svc+0x58/0x130 [ 89.600031][ T5579] el0_svc+0x58/0x128 [ 89.600607][ T5579] el0t_64_sync_handler+0x84/0xf0 [ 89.601378][ T5579] el0t_64_sync+0x18c/0x190 [ 89.611018][ T5576] geneve1: Caught tx_queue_len zero misconfig [ 89.679397][ T5582] loop6: detected capacity change from 0 to 256 [ 89.725282][ T5582] FAT-fs (loop6): Unrecognized mount option "iocha)\rset=iso8859-5" or missing value [ 89.725886][ T5586] loop0: detected capacity change from 0 to 256 [ 89.765512][ T5586] FAT-fs (loop0): Directory bread(block 64) failed [ 89.772709][ T5586] FAT-fs (loop0): Directory bread(block 65) failed [ 89.781697][ T5586] FAT-fs (loop0): Directory bread(block 66) failed [ 89.782771][ T5586] FAT-fs (loop0): Directory bread(block 67) failed [ 89.785228][ T5481] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.791802][ T5586] FAT-fs (loop0): Directory bread(block 68) failed [ 89.792876][ T5586] FAT-fs (loop0): Directory bread(block 69) failed [ 89.862427][ T5586] FAT-fs (loop0): Directory bread(block 70) failed [ 89.863578][ T5586] FAT-fs (loop0): Directory bread(block 71) failed [ 89.864245][ T5571] loop3: detected capacity change from 0 to 32768 [ 89.864671][ T5586] FAT-fs (loop0): Directory bread(block 72) failed [ 89.866629][ T5586] FAT-fs (loop0): Directory bread(block 73) failed [ 89.867345][ T5571] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 89.916045][ T5457] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.051294][ T5601] device geneve2 entered promiscuous mode [ 90.326599][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 90.599216][ T5618] FAULT_INJECTION: forcing a failure. [ 90.599216][ T5618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.602611][ T5618] CPU: 1 PID: 5618 Comm: syz.3.235 Not tainted syzkaller #0 [ 90.603837][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 90.605446][ T5618] Call trace: [ 90.605993][ T5618] dump_backtrace+0x1c0/0x1ec [ 90.606788][ T5618] show_stack+0x2c/0x3c [ 90.607496][ T5618] __dump_stack+0x30/0x40 [ 90.608242][ T5618] dump_stack_lvl+0xf4/0x15c [ 90.608982][ T5618] dump_stack+0x1c/0x5c [ 90.609693][ T5618] should_fail_ex+0x3c0/0x518 [ 90.610438][ T5618] should_fail+0x14/0x24 [ 90.611054][ T5618] should_fail_usercopy+0x20/0x30 [ 90.611860][ T5618] iovec_from_user+0xcc/0x5dc [ 90.612571][ T5618] __import_iovec+0x84/0x470 [ 90.613258][ T5618] import_iovec+0x88/0xa4 [ 90.613905][ T5618] copy_msghdr_from_user+0x344/0x4d0 [ 90.614714][ T5618] __sys_sendmsg+0x22c/0x374 [ 90.615406][ T5618] __arm64_sys_sendmsg+0x80/0x94 [ 90.616169][ T5618] invoke_syscall+0x98/0x2b4 [ 90.616855][ T5618] el0_svc_common+0x138/0x258 [ 90.617619][ T5618] do_el0_svc+0x58/0x130 [ 90.618316][ T5618] el0_svc+0x58/0x128 [ 90.618922][ T5618] el0t_64_sync_handler+0x84/0xf0 [ 90.619706][ T5618] el0t_64_sync+0x18c/0x190 [ 90.914296][ T5644] loop3: detected capacity change from 0 to 1024 [ 90.994560][ T5645] loop0: detected capacity change from 0 to 8192 [ 91.005782][ T5645] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 91.147344][ T5588] loop1: detected capacity change from 0 to 131072 [ 91.153867][ T5588] F2FS-fs (loop1): Unrecognized mount option "+4<ŭfq*i51lO=wۇM`&oD.FH/r, priority 10 [ 92.467818][ T5693] tipc: Enabled bearer , priority 10 [ 92.508303][ T5481] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 94.154872][ T5712] device syzkaller0 entered promiscuous mode [ 94.522265][ T5721] loop0: detected capacity change from 0 to 8192 [ 94.563850][ T5721] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 95.387811][ T5230] tipc: Node number set to 2886997007 [ 95.627472][ T5720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.035435][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 96.637747][ T5782] loop6: detected capacity change from 0 to 32768 [ 96.649307][ T5782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.263 (5782) [ 96.671049][ T5782] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.672848][ T5782] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 96.677752][ T5765] loop3: detected capacity change from 0 to 32768 [ 96.680252][ T5782] BTRFS info (device loop6): setting nodatasum [ 96.681271][ T5782] BTRFS info (device loop6): force zlib compression, level 3 [ 97.013071][ T5765] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 97.017375][ T5782] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 97.018998][ T5782] BTRFS info (device loop6): use lzo compression, level 0 [ 97.020086][ T5782] BTRFS info (device loop6): turning on flush-on-commit [ 97.022820][ T5782] BTRFS info (device loop6): enabling auto defrag [ 97.036281][ T5782] BTRFS info (device loop6): max_inline at 4096 [ 97.039573][ T5782] BTRFS info (device loop6): using free space tree [ 97.138065][ T5457] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 97.461394][ T5782] BTRFS info (device loop6): enabling ssd optimizations [ 97.566245][ T5833] loop2: detected capacity change from 0 to 4096 [ 97.582314][ T5833] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.842670][ T5872] loop0: detected capacity change from 0 to 32768 [ 98.856466][ T5872] find_entry called with index >= next_index [ 98.857650][ T5872] find_entry called with index >= next_index [ 98.858657][ T5872] find_entry called with index >= next_index [ 98.859639][ T5872] find_entry called with index >= next_index [ 98.860588][ T5872] find_entry called with index >= next_index [ 98.861446][ T5872] add_index: next_index = 0. Resetting! [ 98.862303][ T5872] find_entry called with index >= next_index [ 98.864504][ T5872] find_entry called with index >= next_index [ 98.865420][ T5872] find_entry called with index >= next_index [ 98.869298][ T5872] non-latin1 character 0x3ff found in JFS file name [ 98.870567][ T5872] mount with iocharset=utf8 to access [ 99.015208][ T5874] loop0: detected capacity change from 0 to 32768 [ 99.037582][ T5762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.071067][ T5874] find_entry called with index >= next_index [ 99.072085][ T5874] find_entry called with index >= next_index [ 99.073122][ T5874] find_entry called with index >= next_index [ 99.083085][ T5186] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.085435][ T5874] find_entry called with index >= next_index [ 99.086358][ T5874] find_entry called with index >= next_index [ 99.087311][ T5874] add_index: next_index = 0. Resetting! [ 99.088174][ T5874] find_entry called with index >= next_index [ 99.089142][ T5874] find_entry called with index >= next_index [ 99.090118][ T5874] find_entry called with index >= next_index [ 99.132039][ T5874] non-latin1 character 0x3ff found in JFS file name [ 99.133199][ T5874] mount with iocharset=utf8 to access [ 99.149211][ T5876] loop3: detected capacity change from 0 to 8192 [ 99.215773][ T5876] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 99.276826][ T5888] loop2: detected capacity change from 0 to 256 [ 99.305419][ T5888] FAT-fs (loop2): Directory bread(block 64) failed [ 99.306593][ T5888] FAT-fs (loop2): Directory bread(block 65) failed [ 99.307733][ T5888] FAT-fs (loop2): Directory bread(block 66) failed [ 99.308892][ T5888] FAT-fs (loop2): Directory bread(block 67) failed [ 99.318724][ T5888] FAT-fs (loop2): Directory bread(block 68) failed [ 99.319798][ T5888] FAT-fs (loop2): Directory bread(block 69) failed [ 99.323590][ T5888] FAT-fs (loop2): Directory bread(block 70) failed [ 99.325702][ T5888] FAT-fs (loop2): Directory bread(block 71) failed [ 99.326717][ T5888] FAT-fs (loop2): Directory bread(block 72) failed [ 99.327790][ T5888] FAT-fs (loop2): Directory bread(block 73) failed [ 99.333206][ T5890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.691317][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.275'. [ 100.231156][ T5911] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 100.240327][ T5911] exFAT-fs (nullb0): invalid boot record signature [ 100.241536][ T5911] exFAT-fs (nullb0): failed to read boot sector [ 100.242493][ T5911] exFAT-fs (nullb0): failed to recognize exfat type [ 100.307290][ T5902] loop0: detected capacity change from 0 to 32768 [ 100.325765][ T5902] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 100.376546][ T5481] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 100.410229][ T5915] binder: 5914:5915 tried to acquire reference to desc 0, got 1 instead [ 100.426709][ T5915] binder: 5914:5915 got reply transaction with bad transaction stack, transaction 5 has target 5914:0 [ 100.436335][ T5915] binder: 5914:5915 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2961 [ 100.447262][ T1964] binder: release 5914:5915 transaction 5 out, still active [ 100.448930][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 100.450229][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.472732][ T1964] binder: send failed reply for transaction 5, target dead [ 100.588932][ T5913] loop3: detected capacity change from 0 to 32768 [ 100.633871][ T5927] binder: 5926:5927 tried to acquire reference to desc 0, got 1 instead [ 100.636069][ T5927] binder: 5926:5927 got transaction with invalid data ptr [ 100.638052][ T5927] binder: 5926:5927 transaction call to 5926:0 failed 11/29201/-14, size 72-48 line 3333 [ 100.657618][ T5927] bridge0: port 3(ipvlan2) entered blocking state [ 100.658925][ T5927] bridge0: port 3(ipvlan2) entered disabled state [ 100.686526][ T5931] loop2: detected capacity change from 0 to 4096 [ 100.694597][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.707380][ T5931] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.765998][ T5925] loop0: detected capacity change from 0 to 32768 [ 100.796952][ T5934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.804393][ T5925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.282 (5925) [ 100.827282][ T5925] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.828888][ T5925] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 100.830205][ T5925] BTRFS info (device loop0): force clearing of disk cache [ 100.831453][ T5925] BTRFS info (device loop0): force zlib compression, level 3 [ 100.832787][ T5925] BTRFS info (device loop0): enabling auto defrag [ 100.848579][ T5925] BTRFS info (device loop0): max_inline at 0 [ 100.849545][ T5925] BTRFS info (device loop0): enabling disk space caching [ 101.063393][ T5925] BTRFS info (device loop0): disk space caching is enabled [ 102.062984][ T5925] BTRFS info (device loop0): enabling ssd optimizations [ 102.064717][ T5925] BTRFS info (device loop0): rebuilding free space tree [ 102.070588][ T5925] BTRFS info (device loop0): disabling free space tree [ 102.072354][ T5925] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.077896][ T5925] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.081644][ T5962] binder: 5959:5962 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 102.082926][ T5962] binder: 5959:5962 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 102.100618][ T5962] binder: 5959:5962 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 102.102113][ T5962] binder: 5959:5962 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.107997][ T5962] binder: 5962 RLIMIT_NICE not set [ 102.116306][ T5962] loop6: detected capacity change from 0 to 128 [ 102.126111][ T5962] binder: 5959:5962 got transaction to invalid handle, 1 [ 102.127318][ T5962] binder: 5962:5959 cannot find target node [ 102.129427][ T5962] binder: 5959:5962 transaction call to 0:0 failed 18/29201/-22, size 0-0 line 3045 [ 102.133813][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.192226][ T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 102.315707][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'. [ 102.397867][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 102.397881][ T27] audit: type=1326 audit(102.380:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f77128 code=0x7fc00000 [ 102.428687][ T5979] binder: BINDER_SET_CONTEXT_MGR already set [ 102.430005][ T5979] binder: 5971:5979 ioctl 4018620d 20004a80 returned -16 [ 102.508714][ T27] audit: type=1326 audit(102.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff86e1a81c code=0x7fc00000 [ 102.803631][ T5968] loop1: detected capacity change from 0 to 32768 [ 102.853741][ T5968] XFS (loop1): Mounting V5 Filesystem [ 102.904231][ T5968] XFS (loop1): Ending clean mount [ 102.992192][ T4320] XFS (loop1): Unmounting Filesystem [ 103.049632][ T5990] loop2: detected capacity change from 0 to 512 [ 103.099754][ T5481] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.200381][ T5994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.205141][ T5996] loop3: detected capacity change from 0 to 512 [ 103.206556][ T5996] EXT4-fs: Ignoring removed nobh option [ 103.209878][ T5996] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.243837][ T5996] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.248183][ T5996] EXT4-fs (loop3): 1 truncate cleaned up [ 103.249098][ T5996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.390181][ T5992] loop2: detected capacity change from 0 to 32768 [ 103.405963][ T5992] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.296 (5992) [ 103.409360][ T5992] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 103.411177][ T5992] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 103.412747][ T5992] BTRFS info (device loop2): using free space tree [ 103.429929][ T6005] loop1: detected capacity change from 0 to 512 [ 103.436411][ T6005] EXT4-fs: Ignoring removed nobh option [ 103.439232][ T6005] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.460269][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 103.490616][ T6005] EXT4-fs (loop1): 1 truncate cleaned up [ 103.491612][ T6005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.551609][ T6005] FAULT_INJECTION: forcing a failure. [ 103.551609][ T6005] name failslab, interval 1, probability 0, space 0, times 0 [ 103.553890][ T6005] CPU: 1 PID: 6005 Comm: syz.1.295 Not tainted syzkaller #0 [ 103.555016][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 103.556792][ T6005] Call trace: [ 103.557385][ T6005] dump_backtrace+0x1c0/0x1ec [ 103.558227][ T6005] show_stack+0x2c/0x3c [ 103.558962][ T6005] __dump_stack+0x30/0x40 [ 103.559715][ T6005] dump_stack_lvl+0xf4/0x15c [ 103.560514][ T6005] dump_stack+0x1c/0x5c [ 103.561259][ T6005] should_fail_ex+0x3c0/0x518 [ 103.562047][ T6005] __should_failslab+0xc0/0x120 [ 103.562915][ T6005] should_failslab+0x10/0x28 [ 103.563700][ T6005] __kmem_cache_alloc_node+0x7c/0x314 [ 103.564667][ T6005] __kmalloc+0xd8/0x178 [ 103.565285][ T6005] tomoyo_encode+0x26c/0x49c [ 103.566037][ T6005] tomoyo_realpath_from_path+0x480/0x4d4 [ 103.566943][ T6005] tomoyo_path_number_perm+0x1c8/0x550 [ 103.567863][ T6005] tomoyo_file_ioctl+0x2c/0x3c [ 103.568713][ T6005] security_file_ioctl+0x80/0xbc [ 103.569557][ T6005] __arm64_sys_ioctl+0xa8/0x1c8 [ 103.570341][ T6005] invoke_syscall+0x98/0x2b4 [ 103.571115][ T6005] el0_svc_common+0x138/0x258 [ 103.571920][ T6005] do_el0_svc+0x58/0x130 [ 103.572662][ T6005] el0_svc+0x58/0x128 [ 103.573355][ T6005] el0t_64_sync_handler+0x84/0xf0 [ 103.574150][ T6005] el0t_64_sync+0x18c/0x190 [ 103.578365][ T6005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.609712][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 104.945234][ T6025] device syzkaller0 entered promiscuous mode [ 105.203004][ T5992] BTRFS info (device loop2): enabling ssd optimizations [ 105.351821][ T4324] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.397045][ T6043] set_capacity_and_notify: 1 callbacks suppressed [ 105.397056][ T6043] loop1: detected capacity change from 0 to 512 [ 105.399573][ T6043] EXT4-fs: Ignoring removed nobh option [ 105.458273][ T6043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.490909][ T6043] EXT4-fs (loop1): 1 truncate cleaned up [ 105.491940][ T6043] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.564915][ T6043] FAULT_INJECTION: forcing a failure. [ 105.564915][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.567218][ T6043] CPU: 1 PID: 6043 Comm: syz.1.302 Not tainted syzkaller #0 [ 105.568420][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 105.570084][ T6043] Call trace: [ 105.570701][ T6043] dump_backtrace+0x1c0/0x1ec [ 105.571472][ T6043] show_stack+0x2c/0x3c [ 105.572194][ T6043] __dump_stack+0x30/0x40 [ 105.572893][ T6043] dump_stack_lvl+0xf4/0x15c [ 105.573646][ T6043] dump_stack+0x1c/0x5c [ 105.574391][ T6043] should_fail_ex+0x3c0/0x518 [ 105.575182][ T6043] should_fail+0x14/0x24 [ 105.575886][ T6043] should_fail_usercopy+0x20/0x30 [ 105.576707][ T6043] strncpy_from_user+0x48/0x578 [ 105.577483][ T6043] getname_flags+0xec/0x45c [ 105.578190][ T6043] user_path_at_empty+0x40/0x84 [ 105.578947][ T6043] do_sys_truncate+0xb4/0x1b4 [ 105.579713][ T6043] __arm64_sys_truncate+0x5c/0x70 [ 105.580485][ T6043] invoke_syscall+0x98/0x2b4 [ 105.581226][ T6043] el0_svc_common+0x138/0x258 [ 105.581982][ T6043] do_el0_svc+0x58/0x130 [ 105.582671][ T6043] el0_svc+0x58/0x128 [ 105.583323][ T6043] el0t_64_sync_handler+0x84/0xf0 [ 105.584205][ T6043] el0t_64_sync+0x18c/0x190 [ 105.695348][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 106.364023][ T5992] netlink: 'syz.2.296': attribute type 10 has an invalid length. [ 106.388317][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.401960][ T6018] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 106.408479][ T5992] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.539062][ T4328] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 106.731655][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 106.741043][ T6065] loop0: detected capacity change from 0 to 8192 [ 106.758524][ T6079] binder: 6078:6079 got transaction to invalid handle, 1 [ 106.759579][ T6079] binder: 6079:6078 cannot find target node [ 106.760491][ T6079] binder: 6078:6079 transaction call to 0:0 failed 21/29201/-22, size 0-0 line 3045 [ 106.770552][ T5877] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.834419][ T6082] loop2: detected capacity change from 0 to 1024 [ 106.836271][ T6082] EXT4-fs: Ignoring removed orlov option [ 106.861992][ T6065] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 106.874074][ T6084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.200300][ T6082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.219479][ T6082] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 107.263954][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 107.673750][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 107.696144][ T6104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.754270][ T6104] device macvlan2 entered promiscuous mode [ 108.270883][ T6110] loop1: detected capacity change from 0 to 32768 [ 108.504222][ T6128] loop3: detected capacity change from 0 to 256 [ 109.140152][ T6110] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 109.170847][ T6110] JBD2: Ignoring recovery information on journal [ 109.233190][ T6117] loop2: detected capacity change from 0 to 256 [ 109.247468][ T6110] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 109.256602][ T6117] exfat: Deprecated parameter 'utf8' [ 109.289908][ T6117] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 109.349187][ T6139] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 109.350785][ T6139] netlink: 'syz.0.318': attribute type 2 has an invalid length. [ 109.351972][ T6139] netlink: 'syz.0.318': attribute type 2 has an invalid length. [ 109.353660][ T6139] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 109.770266][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 109.994337][ T6152] FAULT_INJECTION: forcing a failure. [ 109.994337][ T6152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.996425][ T6152] CPU: 0 PID: 6152 Comm: syz.3.319 Not tainted syzkaller #0 [ 109.997640][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 109.999371][ T6152] Call trace: [ 110.000005][ T6152] dump_backtrace+0x1c0/0x1ec [ 110.000749][ T6152] show_stack+0x2c/0x3c [ 110.001415][ T6152] __dump_stack+0x30/0x40 [ 110.002136][ T6152] dump_stack_lvl+0xf4/0x15c [ 110.002847][ T6152] dump_stack+0x1c/0x5c [ 110.003506][ T6152] should_fail_ex+0x3c0/0x518 [ 110.004266][ T6152] should_fail+0x14/0x24 [ 110.004946][ T6152] should_fail_usercopy+0x20/0x30 [ 110.005781][ T6152] strncpy_from_user+0x48/0x578 [ 110.006535][ T6152] bpf_prog_load+0x180/0x12d4 [ 110.007284][ T6152] __sys_bpf+0x494/0x660 [ 110.007906][ T6152] __arm64_sys_bpf+0x80/0x98 [ 110.008638][ T6152] invoke_syscall+0x98/0x2b4 [ 110.009430][ T6152] el0_svc_common+0x138/0x258 [ 110.010260][ T6152] do_el0_svc+0x58/0x130 [ 110.011054][ T6152] el0_svc+0x58/0x128 [ 110.011741][ T6152] el0t_64_sync_handler+0x84/0xf0 [ 110.012577][ T6152] el0t_64_sync+0x18c/0x190 [ 110.322011][ T6158] loop2: detected capacity change from 0 to 1024 [ 110.327306][ T6158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.327638][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 110.341764][ T6159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.427925][ T6158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.752404][ T6168] loop0: detected capacity change from 0 to 8192 [ 110.793829][ T6168] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 110.809725][ T6173] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.321: lblock 3 mapped to illegal pblock 3 (length 2) [ 111.347005][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 111.423609][ T6200] loop2: detected capacity change from 0 to 512 [ 111.438882][ T6200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.579269][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 111.605213][ T6213] Bluetooth: MGMT ver 1.22 [ 111.689660][ T6197] loop1: detected capacity change from 0 to 256 [ 111.691207][ T6197] exfat: Deprecated parameter 'utf8' [ 111.714665][ T6220] loop0: detected capacity change from 0 to 8192 [ 111.716850][ T6220] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 111.717161][ T6223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.718796][ T6220] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 111.877415][ T6225] FAULT_INJECTION: forcing a failure. [ 111.877415][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.879558][ T6225] CPU: 1 PID: 6225 Comm: syz.2.331 Not tainted syzkaller #0 [ 111.880796][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 111.882377][ T6225] Call trace: [ 111.882894][ T6225] dump_backtrace+0x1c0/0x1ec [ 111.883695][ T6225] show_stack+0x2c/0x3c [ 111.884426][ T6225] __dump_stack+0x30/0x40 [ 111.885217][ T6225] dump_stack_lvl+0xf4/0x15c [ 111.885984][ T6225] dump_stack+0x1c/0x5c [ 111.886692][ T6225] should_fail_ex+0x3c0/0x518 [ 111.887481][ T6225] should_fail+0x14/0x24 [ 111.888170][ T6225] should_fail_usercopy+0x20/0x30 [ 111.888982][ T6225] __arm64_sys_memfd_create+0x15c/0x45c [ 111.889930][ T6225] invoke_syscall+0x98/0x2b4 [ 111.890760][ T6225] el0_svc_common+0x138/0x258 [ 111.891480][ T6225] do_el0_svc+0x58/0x130 [ 111.892279][ T6225] el0_svc+0x58/0x128 [ 111.892999][ T6225] el0t_64_sync_handler+0x84/0xf0 [ 111.893835][ T6225] el0t_64_sync+0x18c/0x190 [ 112.462705][ T6220] REISERFS (device loop0): using ordered data mode [ 112.463941][ T6220] reiserfs: using flush barriers [ 112.468613][ T6197] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 112.471393][ T6220] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.486983][ T6197] FAULT_INJECTION: forcing a failure. [ 112.486983][ T6197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.488973][ T6197] CPU: 1 PID: 6197 Comm: syz.1.326 Not tainted syzkaller #0 [ 112.490258][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 112.491868][ T6197] Call trace: [ 112.492413][ T6197] dump_backtrace+0x1c0/0x1ec [ 112.493169][ T6197] show_stack+0x2c/0x3c [ 112.493852][ T6197] __dump_stack+0x30/0x40 [ 112.494503][ T6197] dump_stack_lvl+0xf4/0x15c [ 112.495271][ T6197] dump_stack+0x1c/0x5c [ 112.496081][ T6197] should_fail_ex+0x3c0/0x518 [ 112.496831][ T6197] should_fail+0x14/0x24 [ 112.497535][ T6197] should_fail_usercopy+0x20/0x30 [ 112.498341][ T6197] strncpy_from_user+0x48/0x578 [ 112.499048][ T6197] getname_flags+0xec/0x45c [ 112.499727][ T6197] getname+0x28/0x38 [ 112.500341][ T6197] do_sys_openat2+0xdc/0x3f4 [ 112.501137][ T6197] __arm64_sys_openat+0x118/0x14c [ 112.501990][ T6197] invoke_syscall+0x98/0x2b4 [ 112.502753][ T6197] el0_svc_common+0x138/0x258 [ 112.503528][ T6197] do_el0_svc+0x58/0x130 [ 112.504291][ T6197] el0_svc+0x58/0x128 [ 112.504921][ T6197] el0t_64_sync_handler+0x84/0xf0 [ 112.505762][ T6197] el0t_64_sync+0x18c/0x190 [ 112.520899][ T6220] REISERFS (device loop0): checking transaction log (loop0) [ 112.528497][ T6220] REISERFS (device loop0): Using r5 hash to sort names [ 112.532936][ T6220] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 112.776752][ T6230] loop3: detected capacity change from 0 to 256 [ 112.856112][ T5969] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.875464][ T6234] loop1: detected capacity change from 0 to 128 [ 112.876397][ T6232] loop2: detected capacity change from 0 to 8192 [ 112.883573][ T6232] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 112.903359][ T6239] FAULT_INJECTION: forcing a failure. [ 112.903359][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.915240][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 112.916709][ T6239] CPU: 1 PID: 6239 Comm: syz.3.341 Not tainted syzkaller #0 [ 112.918039][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 112.919748][ T6239] Call trace: [ 112.920359][ T6239] dump_backtrace+0x1c0/0x1ec [ 112.921164][ T6239] show_stack+0x2c/0x3c [ 112.921916][ T6239] __dump_stack+0x30/0x40 [ 112.922682][ T6239] dump_stack_lvl+0xf4/0x15c [ 112.923517][ T6239] dump_stack+0x1c/0x5c [ 112.924233][ T6239] should_fail_ex+0x3c0/0x518 [ 112.925026][ T6239] should_fail+0x14/0x24 [ 112.925720][ T6239] should_fail_usercopy+0x20/0x30 [ 112.926535][ T6239] __arm64_sys_memfd_create+0x15c/0x45c [ 112.927584][ T6239] invoke_syscall+0x98/0x2b4 [ 112.928406][ T6239] el0_svc_common+0x138/0x258 [ 112.929186][ T6239] do_el0_svc+0x58/0x130 [ 112.929988][ T6239] el0_svc+0x58/0x128 [ 112.930680][ T6239] el0t_64_sync_handler+0x84/0xf0 [ 112.931523][ T6239] el0t_64_sync+0x18c/0x190 [ 113.462884][ T6250] loop3: detected capacity change from 0 to 32768 [ 113.468826][ T6250] XFS (loop3): Mounting V5 Filesystem [ 113.502113][ T6250] XFS (loop3): Ending clean mount [ 113.525520][ T6250] XFS (loop3): Quotacheck needed: Please wait. [ 113.562156][ T6250] XFS (loop3): Quotacheck: Done. [ 113.582845][ T4330] XFS (loop3): Unmounting Filesystem [ 113.586669][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.6.345'. [ 113.722253][ T6267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.784146][ T6270] loop2: detected capacity change from 0 to 512 [ 113.785579][ T6270] EXT4-fs: Ignoring removed nobh option [ 113.816918][ T6264] loop1: detected capacity change from 0 to 40427 [ 113.819163][ T6270] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.828677][ T6264] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 113.832576][ T6270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.349: casefold flag without casefold feature [ 113.836125][ T6264] F2FS-fs (loop1): invalid crc value [ 113.866382][ T6270] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.349: error while reading EA inode 11 err=-117 [ 113.874752][ T6270] EXT4-fs (loop2): 1 orphan inode deleted [ 113.875740][ T6270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.879224][ T6264] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.910773][ T6270] FAULT_INJECTION: forcing a failure. [ 113.910773][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.912877][ T6270] CPU: 1 PID: 6270 Comm: syz.2.349 Not tainted syzkaller #0 [ 113.914149][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 113.915827][ T6270] Call trace: [ 113.916336][ T6270] dump_backtrace+0x1c0/0x1ec [ 113.917061][ T6270] show_stack+0x2c/0x3c [ 113.917726][ T6270] __dump_stack+0x30/0x40 [ 113.918448][ T6270] dump_stack_lvl+0xf4/0x15c [ 113.919182][ T6270] dump_stack+0x1c/0x5c [ 113.920024][ T6270] should_fail_ex+0x3c0/0x518 [ 113.920847][ T6270] should_fail+0x14/0x24 [ 113.921580][ T6270] should_fail_usercopy+0x20/0x30 [ 113.922477][ T6270] iovec_from_user+0xcc/0x5dc [ 113.923267][ T6270] __import_iovec+0x84/0x470 [ 113.923989][ T6270] import_iovec+0x88/0xa4 [ 113.924680][ T6270] copy_msghdr_from_user+0x344/0x4d0 [ 113.925551][ T6270] __sys_sendmsg+0x22c/0x374 [ 113.926435][ T6270] __arm64_sys_sendmsg+0x80/0x94 [ 113.927288][ T6270] invoke_syscall+0x98/0x2b4 [ 113.928132][ T6270] el0_svc_common+0x138/0x258 [ 113.928882][ T6270] do_el0_svc+0x58/0x130 [ 113.929567][ T6270] el0_svc+0x58/0x128 [ 113.930191][ T6270] el0t_64_sync_handler+0x84/0xf0 [ 113.930950][ T6270] el0t_64_sync+0x18c/0x190 [ 113.936007][ T6264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.988192][ T4320] syz-executor: attempt to access beyond end of device [ 113.988192][ T4320] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.025073][ T6277] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 114.048341][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 115.439400][ T6303] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.451531][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 115.473293][ T6303] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.356: corrupted inode contents [ 115.482527][ T6303] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.356: mark_inode_dirty error [ 115.534287][ T6317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.536740][ T6303] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.356: corrupted inode contents [ 115.552796][ T6303] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.356: mark_inode_dirty error [ 115.937157][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 116.036703][ T6305] set_capacity_and_notify: 2 callbacks suppressed [ 116.036720][ T6305] loop3: detected capacity change from 0 to 32768 [ 116.053371][ T6305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.358 (6305) [ 116.158569][ T6305] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.160476][ T6305] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 116.162112][ T6305] BTRFS info (device loop3): setting nodatasum [ 116.167115][ T6305] BTRFS info (device loop3): force zlib compression, level 3 [ 116.168788][ T6305] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 116.176856][ T6305] BTRFS info (device loop3): use lzo compression, level 0 [ 116.178297][ T6305] BTRFS info (device loop3): turning on flush-on-commit [ 116.186849][ T6305] BTRFS info (device loop3): enabling auto defrag [ 116.189196][ T6305] BTRFS info (device loop3): max_inline at 4096 [ 116.194779][ T6305] BTRFS info (device loop3): using free space tree [ 116.283775][ T6362] loop1: detected capacity change from 0 to 512 [ 116.336718][ T6305] BTRFS info (device loop3): enabling ssd optimizations [ 116.338171][ T6367] FAULT_INJECTION: forcing a failure. [ 116.338171][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 116.344129][ T6367] CPU: 1 PID: 6367 Comm: syz.0.365 Not tainted syzkaller #0 [ 116.345344][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 116.347023][ T6367] Call trace: [ 116.347577][ T6367] dump_backtrace+0x1c0/0x1ec [ 116.348397][ T6367] show_stack+0x2c/0x3c [ 116.349112][ T6367] __dump_stack+0x30/0x40 [ 116.349801][ T6367] dump_stack_lvl+0xf4/0x15c [ 116.350549][ T6367] dump_stack+0x1c/0x5c [ 116.351208][ T6367] should_fail_ex+0x3c0/0x518 [ 116.351966][ T6367] __should_failslab+0xc0/0x120 [ 116.352757][ T6367] should_failslab+0x10/0x28 [ 116.353572][ T6367] kmem_cache_alloc+0x88/0x308 [ 116.354349][ T6367] ipmr_mfc_add+0x808/0x2888 [ 116.355027][ T6367] ip_mroute_setsockopt+0xa94/0xcf4 [ 116.355901][ T6367] do_ip_setsockopt+0x460/0x253c [ 116.356755][ T6367] ip_setsockopt+0x68/0x134 [ 116.357520][ T6367] raw_setsockopt+0xd8/0x288 [ 116.358279][ T6367] sock_common_setsockopt+0xb0/0xcc [ 116.359162][ T6367] __sys_setsockopt+0x2fc/0x50c [ 116.359954][ T6367] __arm64_sys_setsockopt+0xb8/0xd4 [ 116.360757][ T6367] invoke_syscall+0x98/0x2b4 [ 116.361616][ T6367] el0_svc_common+0x138/0x258 [ 116.362475][ T6367] do_el0_svc+0x58/0x130 [ 116.363215][ T6367] el0_svc+0x58/0x128 [ 116.363904][ T6367] el0t_64_sync_handler+0x84/0xf0 [ 116.364767][ T6367] el0t_64_sync+0x18c/0x190 [ 116.381905][ T6362] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 116.383775][ T6362] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 116.385301][ T6362] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.364: Failed to acquire dquot type 1 [ 116.392231][ T6362] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.364: corrupted inode contents [ 116.396004][ T6362] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #16: comm syz.1.364: mark_inode_dirty error [ 116.397967][ T6362] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.364: corrupted inode contents [ 116.400115][ T6362] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.364: mark_inode_dirty error [ 116.402236][ T6362] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.364: corrupted inode contents [ 116.407882][ T6362] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 116.409429][ T6362] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.364: corrupted inode contents [ 116.411606][ T6362] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.364: mark_inode_dirty error [ 116.425467][ T6362] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 116.430687][ T6362] EXT4-fs (loop1): 1 truncate cleaned up [ 116.431665][ T6362] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.492330][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 116.644531][ T4330] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.756578][ T6393] FAULT_INJECTION: forcing a failure. [ 116.756578][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.759086][ T6393] CPU: 0 PID: 6393 Comm: syz.3.370 Not tainted syzkaller #0 [ 116.760307][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 116.761966][ T6393] Call trace: [ 116.762490][ T6393] dump_backtrace+0x1c0/0x1ec [ 116.763242][ T6393] show_stack+0x2c/0x3c [ 116.763936][ T6393] __dump_stack+0x30/0x40 [ 116.764588][ T6393] dump_stack_lvl+0xf4/0x15c [ 116.765287][ T6393] dump_stack+0x1c/0x5c [ 116.765939][ T6393] should_fail_ex+0x3c0/0x518 [ 116.766716][ T6393] should_fail+0x14/0x24 [ 116.767423][ T6393] should_fail_usercopy+0x20/0x30 [ 116.768297][ T6393] iovec_from_user+0xcc/0x5dc [ 116.769123][ T6393] __import_iovec+0x84/0x470 [ 116.769935][ T6393] import_iovec+0x88/0xa4 [ 116.770717][ T6393] copy_msghdr_from_user+0x344/0x4d0 [ 116.771599][ T6393] __sys_sendmsg+0x22c/0x374 [ 116.772352][ T6393] __arm64_sys_sendmsg+0x80/0x94 [ 116.773166][ T6393] invoke_syscall+0x98/0x2b4 [ 116.773919][ T6393] el0_svc_common+0x138/0x258 [ 116.774638][ T6393] do_el0_svc+0x58/0x130 [ 116.775281][ T6393] el0_svc+0x58/0x128 [ 116.775916][ T6393] el0t_64_sync_handler+0x84/0xf0 [ 116.776788][ T6393] el0t_64_sync+0x18c/0x190 [ 117.004397][ T6386] loop2: detected capacity change from 0 to 65536 [ 117.017581][ T6386] XFS (loop2): Mounting V5 Filesystem [ 117.034447][ T6386] XFS (loop2): Ending clean mount [ 117.037685][ T6386] XFS (loop2): Quotacheck needed: Please wait. [ 117.065726][ T6386] XFS (loop2): Quotacheck: Done. [ 117.067603][ T6386] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 117.108780][ T4328] XFS (loop2): Unmounting Filesystem [ 117.129993][ T6423] loop0: detected capacity change from 0 to 32768 [ 117.135873][ T6423] (syz.0.372,6423,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 117.229504][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 117.858294][ T6452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.889951][ T6448] loop6: detected capacity change from 0 to 256 [ 118.020007][ T6460] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 118.029403][ T6458] loop3: detected capacity change from 0 to 8192 [ 118.052065][ T6458] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 118.636087][ T6486] FAULT_INJECTION: forcing a failure. [ 118.636087][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.638299][ T6486] CPU: 1 PID: 6486 Comm: syz.1.384 Not tainted syzkaller #0 [ 118.639625][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 118.641283][ T6486] Call trace: [ 118.641813][ T6486] dump_backtrace+0x1c0/0x1ec [ 118.642548][ T6486] show_stack+0x2c/0x3c [ 118.643254][ T6486] __dump_stack+0x30/0x40 [ 118.643964][ T6486] dump_stack_lvl+0xf4/0x15c [ 118.644660][ T6486] dump_stack+0x1c/0x5c [ 118.645372][ T6486] should_fail_ex+0x3c0/0x518 [ 118.646264][ T6486] should_fail+0x14/0x24 [ 118.647043][ T6486] should_fail_usercopy+0x20/0x30 [ 118.647941][ T6486] io_openat2_prep+0xf4/0x520 [ 118.648794][ T6486] io_submit_sqes+0x6e0/0x18cc [ 118.649626][ T6486] __arm64_sys_io_uring_enter+0x318/0x1db0 [ 118.650593][ T6486] invoke_syscall+0x98/0x2b4 [ 118.651381][ T6486] el0_svc_common+0x138/0x258 [ 118.652142][ T6486] do_el0_svc+0x58/0x130 [ 118.652861][ T6486] el0_svc+0x58/0x128 [ 118.653473][ T6486] el0t_64_sync_handler+0x84/0xf0 [ 118.654292][ T6486] el0t_64_sync+0x18c/0x190 [ 118.988330][ T6467] loop6: detected capacity change from 0 to 131072 [ 118.994335][ T6467] F2FS-fs (loop6): invalid crc value [ 118.998792][ T6467] F2FS-fs (loop6): Found nat_bits in checkpoint [ 119.009974][ T6467] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 119.021936][ T6467] F2FS-fs (loop6): access invalid blkaddr:11220996 [ 119.023122][ T6467] CPU: 0 PID: 6467 Comm: syz.6.382 Not tainted syzkaller #0 [ 119.024338][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 119.025991][ T6467] Call trace: [ 119.026540][ T6467] dump_backtrace+0x1c0/0x1ec [ 119.027316][ T6467] show_stack+0x2c/0x3c [ 119.027961][ T6467] __dump_stack+0x30/0x40 [ 119.028713][ T6467] dump_stack_lvl+0xf4/0x15c [ 119.029498][ T6467] dump_stack+0x1c/0x5c [ 119.030252][ T6467] f2fs_is_valid_blkaddr+0x9e4/0xf44 [ 119.031134][ T6467] sanity_check_extent_cache+0xfc/0x2e4 [ 119.032013][ T6467] f2fs_iget+0x2d38/0x46b8 [ 119.032747][ T6467] f2fs_lookup+0x3f0/0x8f4 [ 119.033471][ T6467] path_openat+0xc98/0x26bc [ 119.034209][ T6467] do_filp_open+0x194/0x384 [ 119.034936][ T6467] do_open_execat+0x130/0x604 [ 119.035691][ T6467] bprm_execve+0x464/0x1558 [ 119.036399][ T6467] do_execveat_common+0x648/0x7dc [ 119.037174][ T6467] __arm64_sys_execveat+0xd0/0xec [ 119.038033][ T6467] invoke_syscall+0x98/0x2b4 [ 119.038779][ T6467] el0_svc_common+0x138/0x258 [ 119.039565][ T6467] do_el0_svc+0x58/0x130 [ 119.040255][ T6467] el0_svc+0x58/0x128 [ 119.040959][ T6467] el0t_64_sync_handler+0x84/0xf0 [ 119.041786][ T6467] el0t_64_sync+0x18c/0x190 [ 119.043620][ T6467] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 11206659] is incorrect, run fsck to fix [ 125.943728][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944787][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.785757][ T6527] loop1: detected capacity change from 0 to 256 [ 141.086180][ T6527] FAT-fs (loop1): Directory bread(block 64) failed [ 141.088488][ T6527] FAT-fs (loop1): Directory bread(block 65) failed [ 141.090684][ T6527] FAT-fs (loop1): Directory bread(block 66) failed [ 141.092911][ T6527] FAT-fs (loop1): Directory bread(block 67) failed [ 141.096310][ T6527] FAT-fs (loop1): Directory bread(block 68) failed [ 141.098495][ T6527] FAT-fs (loop1): Directory bread(block 69) failed [ 141.100773][ T6527] FAT-fs (loop1): Directory bread(block 70) failed [ 141.102928][ T6527] FAT-fs (loop1): Directory bread(block 71) failed [ 141.108393][ T6527] FAT-fs (loop1): Directory bread(block 72) failed [ 141.110538][ T6527] FAT-fs (loop1): Directory bread(block 73) failed [ 141.655929][ T6527] netlink: 'syz.1.386': attribute type 39 has an invalid length. [ 141.750074][ T6536] loop0: detected capacity change from 0 to 32768 [ 142.572979][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 143.152070][ T27] audit: type=1326 audit(143.130:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.2.400" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9977128 code=0x0 [ 144.300814][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 144.302284][ T6610] netlink: 'syz.1.413': attribute type 7 has an invalid length. [ 144.303577][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 144.330971][ T6615] netlink: 'syz.2.414': attribute type 3 has an invalid length. [ 144.593339][ T6641] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 144.699333][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.703580][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.177204][ T6677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.440'. [ 145.808601][ T6703] 9pnet_fd: Insufficient options for proto=fd [ 146.924570][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.925938][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.244742][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.246288][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.770807][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.772987][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.209596][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.211170][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.264673][ T6743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.718446][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 151.350266][ T6821] lo speed is unknown, defaulting to 1000 [ 151.351982][ T6821] lo speed is unknown, defaulting to 1000 [ 151.356059][ T6821] lo speed is unknown, defaulting to 1000 [ 151.367747][ T6821] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 151.414502][ T6822] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 151.501875][ T6821] lo speed is unknown, defaulting to 1000 [ 151.505220][ T6821] lo speed is unknown, defaulting to 1000 [ 151.508019][ T6821] lo speed is unknown, defaulting to 1000 [ 151.510566][ T6821] lo speed is unknown, defaulting to 1000 [ 151.512589][ T6821] lo speed is unknown, defaulting to 1000 [ 151.514692][ T6821] lo speed is unknown, defaulting to 1000 [ 152.622980][ T6828] syz.1.496 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.625651][ T6828] ubi31: attaching mtd0 [ 152.627135][ T6828] ubi31: scanning is finished [ 152.627910][ T6828] ubi31: empty MTD device detected [ 152.671302][ T6828] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 152.672532][ T6828] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 152.673999][ T6828] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 152.675182][ T6828] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 152.676473][ T6828] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 152.677671][ T6828] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 152.679050][ T6828] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2896558620 [ 152.680777][ T6828] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 152.683696][ T6833] ubi31: background thread "ubi_bgt31d" started, PID 6833 [ 154.361956][ T6859] Cannot find del_set index 4 as target [ 154.702020][ T6865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.509'. [ 155.735981][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 156.371901][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.374347][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.376583][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.377824][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.538850][ T6895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.517'. [ 156.540539][ T6904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.658085][ T4338] ------------[ cut here ]------------ [ 156.659151][ T4338] WARNING: CPU: 1 PID: 4338 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x1fc/0x418 [ 156.660889][ T4338] Modules linked in: [ 156.661545][ T4338] CPU: 1 PID: 4338 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 156.662711][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 156.664148][ T4338] Workqueue: hci3 hci_conn_timeout [ 156.664947][ T4338] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 156.666243][ T4338] pc : hci_conn_timeout+0x1fc/0x418 [ 156.667130][ T4338] lr : hci_conn_timeout+0x1fc/0x418 [ 156.668027][ T4338] sp : ffff800020a47b30 [ 156.668773][ T4338] x29: ffff800020a47b30 x28: ffff0000d10db800 x27: ffff0000d4030330 [ 156.670171][ T4338] x26: ffff0000c087c818 x25: 1fffe0001810f903 x24: dfff800000000000 [ 156.671455][ T4338] x23: ffff0000c4bc6000 x22: dfff800000000000 x21: 00000000ffffffff [ 156.672812][ T4338] x20: ffff0000d4030000 x19: ffff0000d4030330 x18: ffff800011b8bf60 [ 156.674151][ T4338] x17: ffff800018349000 x16: ffff80000804309c x15: ffff800017e2a000 [ 156.675435][ T4338] x14: 0000000000000001 x13: 1fffe0001a806002 x12: 0000000000ff0100 [ 156.676764][ T4338] x11: ff00800010c0dfc8 x10: 0000000000000000 x9 : ffff800010c0dfc8 [ 156.677970][ T4338] x8 : ffff0000d5a61bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 156.679182][ T4338] x5 : ffff800018369d18 x4 : 0000000000000008 x3 : ffff800010c0de04 [ 156.680431][ T4338] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 156.681699][ T4338] Call trace: [ 156.682210][ T4338] hci_conn_timeout+0x1fc/0x418 [ 156.682971][ T4338] process_one_work+0x7f8/0x13a4 [ 156.683772][ T4338] worker_thread+0x8c4/0xfec [ 156.684571][ T4338] kthread+0x250/0x2d8 [ 156.685255][ T4338] ret_from_fork+0x10/0x20 [ 156.685952][ T4338] irq event stamp: 8648 [ 156.686601][ T4338] hardirqs last enabled at (8647): [] _raw_spin_unlock_irq+0x3c/0x90 [ 156.688184][ T4338] hardirqs last disabled at (8648): [] el1_dbg+0x24/0x80 [ 156.689441][ T4338] softirqs last enabled at (8484): [] local_bh_enable+0x10/0x34 [ 156.690829][ T4338] softirqs last disabled at (8482): [] local_bh_disable+0x10/0x34 [ 156.692414][ T4338] ---[ end trace 0000000000000000 ]--- [ 156.693359][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.733362][ T4338] Bluetooth: hci1: command 0x0406 tx timeout [ 158.733643][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 158.734312][ T4338] Bluetooth: hci4: command 0x0406 tx timeout