last executing test programs: 29m28.544300065s ago: executing program 32 (id=125): bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x89, 0x0, 0xee00}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x9, 0x33, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f00000002c0)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@test_dummy_encryption}, {@nodelalloc}, {@nojournal_checksum}, {@delalloc}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r4, 0x0) 6m27.554808657s ago: executing program 33 (id=6177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$addseals(r2, 0x409, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000180), 0x4, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x0, 0x0, &(0x7f0000000880)}) 6m24.426415721s ago: executing program 4 (id=6190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$addseals(r2, 0x409, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000180), 0x4, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x0, 0x0, &(0x7f0000000880)}) 6m23.558327041s ago: executing program 4 (id=6193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 6m22.483072977s ago: executing program 4 (id=6197): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x5, 0x8ffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], &(0x7f0000001380), 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$nl_netfilter(0x10, 0x3, 0xc) 6m20.900885384s ago: executing program 0 (id=6201): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x300, 0x187) 6m20.366476787s ago: executing program 0 (id=6202): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) 6m20.319414357s ago: executing program 4 (id=6203): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m19.647214643s ago: executing program 4 (id=6205): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1, r8, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000200)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, 0x0, 0x20000080) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8) 6m18.441259562s ago: executing program 0 (id=6208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$addseals(r1, 0x409, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$media(&(0x7f0000000180), 0x4, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x0, 0x0, &(0x7f0000000880)}) 6m16.850429289s ago: executing program 4 (id=6210): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x5, 0x8ffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], &(0x7f0000001380), 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$nl_netfilter(0x10, 0x3, 0xc) 6m16.061721628s ago: executing program 34 (id=6210): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x5, 0x8ffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], &(0x7f0000001380), 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$nl_netfilter(0x10, 0x3, 0xc) 6m16.055995658s ago: executing program 0 (id=6212): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m15.497889381s ago: executing program 0 (id=6213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 6m15.463168132s ago: executing program 1 (id=6214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x4c}}, 0x0) 6m14.918176275s ago: executing program 1 (id=6215): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) 6m14.796196468s ago: executing program 0 (id=6216): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48010) semctl$SETALL(0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80, 0x0, 0x0, 0xf9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xf266, r5}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 6m14.24803254s ago: executing program 35 (id=6216): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48010) semctl$SETALL(0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80, 0x0, 0x0, 0xf9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xf266, r5}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 6m12.903622192s ago: executing program 1 (id=6218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$addseals(r1, 0x409, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$media(&(0x7f0000000180), 0x4, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x0, 0x0, &(0x7f0000000880)}) 6m11.050783175s ago: executing program 1 (id=6219): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m10.800709712s ago: executing program 1 (id=6220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 6m9.034327243s ago: executing program 1 (id=6221): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 6m8.518212035s ago: executing program 36 (id=6221): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 6m4.818852122s ago: executing program 5 (id=6179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000001c0)={0x0, 0xfffffd10, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) 6m3.817636316s ago: executing program 5 (id=6223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) 6m1.822027533s ago: executing program 5 (id=6224): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 6m1.579436919s ago: executing program 5 (id=6225): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m1.236666637s ago: executing program 5 (id=6226): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5m57.650166191s ago: executing program 5 (id=6227): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) 5m56.997578907s ago: executing program 37 (id=6227): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) 4m36.745452656s ago: executing program 7 (id=6508): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) 4m36.16288734s ago: executing program 7 (id=6510): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x4000, 0x4, 0x401, 0x13, r2, r3, 0x1000, '\x00', 0x6, 0x7, 0x0, 0x2, {0x40, 0x9}, {0x4000000000006, 0xfffffffa}, {0x5, 0xc}, {0x29, 0x9fc}, 0x1, 0x6, 0x1, 0x7}}}}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x0, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50) 4m35.020862267s ago: executing program 7 (id=6518): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) 4m33.964550662s ago: executing program 7 (id=6524): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x300, 0x187) 4m33.078383973s ago: executing program 7 (id=6531): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x7}, "b961f83dcf343bc2", "dc2f65963275f02f3af64bfd04e29ec3", "2138d0bd", "db45c50af93f440d"}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff0200"/52], 0x340a) 4m31.282019885s ago: executing program 7 (id=6542): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 4m30.132472182s ago: executing program 38 (id=6542): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 4m8.374147315s ago: executing program 6 (id=6631): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001dc0)=@newtfilter={0x150, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x124, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x114, 0x5, {0x2, 0x0, 0x10, 0xfffa, 0xb060, 0x1ff, 0x5, 0x9, [{0x8, 0x2, 0x6, 0x1000}, {0x6, 0x917f, 0x27c7, 0x4}, {0x6, 0x9c, 0x5, 0x5}, {0x8, 0xfffffffa, 0x40c, 0x4}, {0x9, 0x1000, 0x0, 0xc}, {0x1, 0x3}, {0x4, 0x7f, 0x2, 0x25}, {0x5, 0x10, 0x0, 0x6}, {0xe34800, 0x3ff, 0x8}, {0x6, 0x40, 0x6, 0x7}, {0x101, 0x0, 0x5, 0x15}, {0x5, 0x4000, 0x10001, 0x2}, {0x8, 0xc, 0x4, 0x7}, {0x7, 0x3800, 0xfffffff2, 0x4}, {0x3ff, 0x9, 0x8, 0xff}, {0x1000, 0x171a, 0x81, 0x80000001}]}}]}}]}, 0x150}}, 0x0) 4m7.438123817s ago: executing program 6 (id=6634): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m6.02957912s ago: executing program 6 (id=6640): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x8, 0x0, 0x132, 0x4000}) 4m5.693055078s ago: executing program 6 (id=6642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 4m5.458237993s ago: executing program 6 (id=6644): syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) inotify_init1(0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x80000) socket(0x10, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_setup(0x2301, &(0x7f0000000440)={0x0, 0x8273, 0x800, 0x5, 0xa8}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 4m4.950264515s ago: executing program 6 (id=6647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4m4.043082956s ago: executing program 39 (id=6647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 14.287095779s ago: executing program 8 (id=7489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) 12.503491445s ago: executing program 8 (id=7495): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x5, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], &(0x7f0000001380), 0x1, r7}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$vcsa(0x0, 0x1, 0x44c40) r9 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r9, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.993989351s ago: executing program 2 (id=7500): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 9.192689121s ago: executing program 9 (id=7502): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex$unlock_wake_list64(&(0x7f0000000000)=0x4, 0x281, 0xc53, 0x0, 0xfffffffffffffffe, 0x7fff) r0 = syz_open_dev$dri(&(0x7f0000003cc0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000900)={[{@abort}, {@jqfmt_vfsold}, {@lazytime}, {@test_dummy_encryption_v1}, {@nodiscard}, {@noquota}], [{@context={'context', 0x3d, 'root'}}]}, 0x3, 0x438, &(0x7f0000000200)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000044) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0x113, &(0x7f00000007c0)={@remote, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x3a, 0x4, 0x2, 0x23, 0x1, 0x67, 0x2, 0x2, 0x11, 0xd7, @private=0xa010102, @empty, {[@timestamp={0x44, 0x10, 0x28, 0x0, 0x1, [0x8, 0x7fffffff, 0x6]}, @rr={0x7, 0x7, 0x7b, [@multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x82, 0x3, 0x0, [{@local}, {@loopback, 0xffffffff}, {@rand_addr=0x64010101, 0x7f}, {@multicast2, 0x4}, {@remote, 0xb405}]}, @ssrr={0x89, 0xf, 0x9e, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x7, 0x3, 0x5, [{@broadcast, 0x9}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty}, {@local, 0x1}, {@multicast2, 0x8}, {@local, 0xffffffb2}, {@multicast2, 0x3}, {@local, 0x80000000}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x6, [{@private=0xa010100, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@remote, 0x8000}, {@rand_addr=0x64010102, 0xefa}, {@empty, 0x10000}, {@rand_addr=0x64010101, 0x1}]}]}}, 'q'}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 8.47608095s ago: executing program 9 (id=7503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) 7.597990313s ago: executing program 8 (id=7504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) 7.140670085s ago: executing program 2 (id=7505): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x99ff, 0x7, "8003e3ffff072000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xf, &(0x7f0000001140)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000facb2d"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 7.140387655s ago: executing program 9 (id=7506): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000e6ff00000000", @ANYRES32, @ANYBLOB="0000000000000000340012800b00010067656e657673106500002400028005000a000000000005000300050000000510090001000000050004005b000000f4c6882bbcc8d95b1b3adb8ccf5a1e986304514944afa96e"], 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080016000200000004"], 0x24}, 0x1, 0x0, 0x0, 0xc00c0}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f0000000140)={'bridge_slave_1\x00', @ifru_map={0x90, 0x2, 0x7f, 0x80, 0x5, 0x62}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x8, 0xfff1}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newchain={0x3c, 0x64, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {0xffff}, {0xfff3, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xe, 0xc6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44894) r9 = socket(0x2, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r11, 0x1, 0x0, &(0x7f0000000380)={r12, r13/1000+10000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 6.270514677s ago: executing program 8 (id=7507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@metacopy_off}]}) cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x7fffffff}, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setreuid(0x0, 0xee01) mmap$IORING_OFF_CQ_RING(0x0, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mlockall(0x1) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xf, 0xfffffff0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000) openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) 6.042937683s ago: executing program 3 (id=7508): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 5.823115459s ago: executing program 3 (id=7509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000001c0)={0x0, 0xfffffd10, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) 5.585624595s ago: executing program 9 (id=7510): ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x475, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016001000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r5, @ANYBLOB="14000600fe8000"/19], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, 0x0, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d61804000000c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503", 0xbd}, {&(0x7f0000000400)="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", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df43", 0xbb}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {0x0}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b52cd19a01844", 0x6a}, {&(0x7f0000001700)="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", 0xfd}], 0x5}}], 0x2, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r8, 0x9) close(r3) socket$nl_route(0x10, 0x3, 0x0) 5.460631439s ago: executing program 2 (id=7511): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex$unlock_wake_list64(&(0x7f0000000000)=0x4, 0x281, 0xc53, 0x0, 0xfffffffffffffffe, 0x7fff) r0 = syz_open_dev$dri(&(0x7f0000003cc0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000900)={[{@abort}, {@jqfmt_vfsold}, {@lazytime}, {@test_dummy_encryption_v1}, {@nodiscard}, {@noquota}], [{@context={'context', 0x3d, 'root'}}]}, 0x3, 0x438, &(0x7f0000000200)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000044) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0x113, &(0x7f00000007c0)={@remote, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x3a, 0x4, 0x2, 0x23, 0x1, 0x67, 0x2, 0x2, 0x11, 0xd7, @private=0xa010102, @empty, {[@timestamp={0x44, 0x10, 0x28, 0x0, 0x1, [0x8, 0x7fffffff, 0x6]}, @rr={0x7, 0x7, 0x7b, [@multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x82, 0x3, 0x0, [{@local}, {@loopback, 0xffffffff}, {@rand_addr=0x64010101, 0x7f}, {@multicast2, 0x4}, {@remote, 0xb405}]}, @ssrr={0x89, 0xf, 0x9e, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x7, 0x3, 0x5, [{@broadcast, 0x9}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty}, {@local, 0x1}, {@multicast2, 0x8}, {@local, 0xffffffb2}, {@multicast2, 0x3}, {@local, 0x80000000}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x6, [{@private=0xa010100, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@remote, 0x8000}, {@rand_addr=0x64010102, 0xefa}, {@empty, 0x10000}, {@rand_addr=0x64010101, 0x1}]}]}}, 'q'}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 4.831606085s ago: executing program 8 (id=7512): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x5, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], &(0x7f0000001380), 0x1, r7}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$vcsa(0x0, 0x1, 0x44c40) r9 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r9, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.883710429s ago: executing program 3 (id=7513): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.881286159s ago: executing program 2 (id=7514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) 3.608638106s ago: executing program 3 (id=7515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) 3.035148482s ago: executing program 9 (id=7516): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 2.31293309s ago: executing program 2 (id=7517): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 2.281969981s ago: executing program 3 (id=7518): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000e6ff00000000", @ANYRES32, @ANYBLOB="0000000000000000340012800b00010067656e657673106500002400028005000a000000000005000300050000000510090001000000050004005b000000f4c6882bbcc8d95b1b3adb8ccf5a1e986304514944afa96e"], 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008001600020000000400068004"], 0x24}, 0x1, 0x0, 0x0, 0xc00c0}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f0000000140)={'bridge_slave_1\x00', @ifru_map={0x90, 0x2, 0x7f, 0x80, 0x5, 0x62}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x8, 0xfff1}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newchain={0x3c, 0x64, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {0xffff}, {0xfff3, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xe, 0xc6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44894) r9 = socket(0x2, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r11, 0x1, 0x0, &(0x7f0000000380)={r12, r13/1000+10000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.332802065s ago: executing program 2 (id=7519): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x14, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x1, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x41000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xb, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x0, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x6, 0x6, 0xe, 0x5, 0x5, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c586, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x6611, 0x10000, 0xff7ffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0x4000b3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x7, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x801092, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8, 0x44, 0x409, 0x6, 0x4, 0x5, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xb, 0x5, 0x101, 0xf, 0xffffffa3, 0x133, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.252661098s ago: executing program 9 (id=7520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@metacopy_off}]}) cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x7fffffff}, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setreuid(0x0, 0xee01) mmap$IORING_OFF_CQ_RING(0x0, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mlockall(0x1) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xf, 0xfffffff0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000) openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) 802.20359ms ago: executing program 8 (id=7521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000001c0)={0x0, 0xfffffd10, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) 0s ago: executing program 3 (id=7522): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex$unlock_wake_list64(&(0x7f0000000000)=0x4, 0x281, 0xc53, 0x0, 0xfffffffffffffffe, 0x7fff) r0 = syz_open_dev$dri(&(0x7f0000003cc0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000900)={[{@abort}, {@jqfmt_vfsold}, {@lazytime}, {@test_dummy_encryption_v1}, {@nodiscard}, {@noquota}], [{@context={'context', 0x3d, 'root'}}]}, 0x3, 0x438, &(0x7f0000000200)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000044) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0x113, &(0x7f00000007c0)={@remote, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x3a, 0x4, 0x2, 0x23, 0x1, 0x67, 0x2, 0x2, 0x11, 0xd7, @private=0xa010102, @empty, {[@timestamp={0x44, 0x10, 0x28, 0x0, 0x1, [0x8, 0x7fffffff, 0x6]}, @rr={0x7, 0x7, 0x7b, [@multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x82, 0x3, 0x0, [{@local}, {@loopback, 0xffffffff}, {@rand_addr=0x64010101, 0x7f}, {@multicast2, 0x4}, {@remote, 0xb405}]}, @ssrr={0x89, 0xf, 0x9e, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x7, 0x3, 0x5, [{@broadcast, 0x9}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty}, {@local, 0x1}, {@multicast2, 0x8}, {@local, 0xffffffb2}, {@multicast2, 0x3}, {@local, 0x80000000}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x6, [{@private=0xa010100, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@remote, 0x8000}, {@rand_addr=0x64010102, 0xefa}, {@empty, 0x10000}, {@rand_addr=0x64010101, 0x1}]}]}}, 'q'}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): mapped block 2683928664 (level 1) [ 1683.649469][T28755] EXT4-fs (loop9): 1 truncate cleaned up [ 1683.677022][T28755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.940255][T28779] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6750'. [ 1684.060730][T28786] loop3: detected capacity change from 0 to 128 [ 1684.082422][T28786] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1684.109320][ T27] audit: type=1800 audit(1788383329.953:14): pid=28755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6745" name="file0" dev="loop9" ino=13 res=0 errno=0 [ 1684.160934][T28786] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1684.291394][T26522] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.623493][T28795] FAULT_INJECTION: forcing a failure. [ 1684.623493][T28795] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.681464][T28795] CPU: 0 PID: 28795 Comm: syz.2.6754 Not tainted syzkaller #0 [ 1684.689022][T28795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1684.699135][T28795] Call Trace: [ 1684.702460][T28795] [ 1684.705438][T28795] dump_stack_lvl+0x18c/0x250 [ 1684.710173][T28795] ? show_regs_print_info+0x20/0x20 [ 1684.715429][T28795] ? load_image+0x420/0x420 [ 1684.719995][T28795] ? __might_sleep+0xe0/0xe0 [ 1684.724649][T28795] ? __lock_acquire+0x7d80/0x7d80 [ 1684.729741][T28795] should_fail_ex+0x394/0x4c0 [ 1684.734491][T28795] should_failslab+0x9/0x20 [ 1684.739054][T28795] slab_pre_alloc_hook+0x59/0x300 [ 1684.744172][T28795] kmem_cache_alloc+0x5a/0x2c0 [ 1684.749002][T28795] ? security_inode_alloc+0x34/0x110 [ 1684.754353][T28795] security_inode_alloc+0x34/0x110 [ 1684.759529][T28795] inode_init_always+0x914/0xc90 [ 1684.764524][T28795] new_inode_pseudo+0x95/0x1d0 [ 1684.769334][T28795] __sock_create+0x12d/0x940 [ 1684.773969][T28795] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1684.780014][T28795] __sys_socket+0xd7/0x1b0 [ 1684.784488][T28795] __x64_sys_socket+0x7a/0x90 [ 1684.789218][T28795] do_syscall_64+0x55/0xb0 [ 1684.793693][T28795] ? clear_bhb_loop+0x40/0x90 [ 1684.798431][T28795] ? clear_bhb_loop+0x40/0x90 [ 1684.803165][T28795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.809111][T28795] RIP: 0033:0x7f18d2d9e159 [ 1684.813572][T28795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.833230][T28795] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1684.841707][T28795] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1684.849733][T28795] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1684.857759][T28795] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1684.865789][T28795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1684.873813][T28795] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1684.881855][T28795] [ 1684.917372][T28800] binder: BINDER_SET_CONTEXT_MGR already set [ 1684.945679][T28800] binder: 28797:28800 ioctl 4018620d 200000004a80 returned -16 [ 1684.987305][T28795] socket: no more sockets [ 1685.083187][T28759] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1685.290826][T28807] netlink: 'syz.8.6756': attribute type 4 has an invalid length. [ 1685.309502][T28807] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6756'. [ 1685.530031][T28815] fuse: Bad value for 'group_id' [ 1687.634897][T23310] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1687.807435][T28849] FAULT_INJECTION: forcing a failure. [ 1687.807435][T28849] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.928783][T28851] FAULT_INJECTION: forcing a failure. [ 1687.928783][T28851] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.942293][T28851] CPU: 1 PID: 28851 Comm: syz.2.6768 Not tainted syzkaller #0 [ 1687.949820][T28851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1687.960012][T28851] Call Trace: [ 1687.963337][T28851] [ 1687.966316][T28851] dump_stack_lvl+0x18c/0x250 [ 1687.971054][T28851] ? show_regs_print_info+0x20/0x20 [ 1687.976399][T28851] ? load_image+0x420/0x420 [ 1687.980951][T28851] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1687.987083][T28851] ? lock_chain_count+0x20/0x20 [ 1687.992021][T28851] should_fail_ex+0x394/0x4c0 [ 1687.996766][T28851] should_failslab+0x9/0x20 [ 1688.001347][T28851] slab_pre_alloc_hook+0x59/0x300 [ 1688.006439][T28851] kmem_cache_alloc_node+0x5e/0x310 [ 1688.011694][T28851] ? __alloc_skb+0x103/0x2c0 [ 1688.016345][T28851] __alloc_skb+0x103/0x2c0 [ 1688.020834][T28851] tipc_buf_acquire+0x2b/0xe0 [ 1688.025650][T28851] tipc_named_publish+0x266/0x760 [ 1688.030742][T28851] tipc_nametbl_publish+0xee/0x1f0 [ 1688.035908][T28851] tipc_sk_publish+0x1cc/0x430 [ 1688.040734][T28851] ? __lock_acquire+0x7d80/0x7d80 [ 1688.045812][T28851] ? tipc_sk_withdraw+0x640/0x640 [ 1688.050879][T28851] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 1688.056583][T28851] ? tipc_nametbl_build_group+0x482/0x4c0 [ 1688.062452][T28851] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 1688.068146][T28851] tipc_sk_join+0x3b0/0x6a0 [ 1688.072719][T28851] ? __tipc_sendstream+0x1290/0x1290 [ 1688.078076][T28851] tipc_setsockopt+0x73f/0x990 [ 1688.082906][T28851] ? tipc_shutdown+0x4d0/0x4d0 [ 1688.087732][T28851] ? __fget_files+0x28/0x460 [ 1688.094141][T28851] ? aa_sock_opt_perm+0x74/0x100 [ 1688.099694][T28851] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1688.105316][T28851] ? security_socket_setsockopt+0x7e/0xa0 [ 1688.113796][T28851] ? tipc_shutdown+0x4d0/0x4d0 [ 1688.118637][T28851] do_sock_setsockopt+0x175/0x1a0 [ 1688.123723][T28851] ? __fdget+0x180/0x210 [ 1688.128039][T28851] __x64_sys_setsockopt+0x182/0x200 [ 1688.133306][T28851] do_syscall_64+0x55/0xb0 [ 1688.137785][T28851] ? clear_bhb_loop+0x40/0x90 [ 1688.142518][T28851] ? clear_bhb_loop+0x40/0x90 [ 1688.147263][T28851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.153215][T28851] RIP: 0033:0x7f18d2d9e159 [ 1688.157682][T28851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.177357][T28851] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1688.185839][T28851] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1688.193868][T28851] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 1688.201885][T28851] RBP: 00007f18d2e35024 R08: 0000000000000010 R09: 0000000000000000 [ 1688.209920][T28851] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1688.217943][T28851] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1688.225989][T28851] [ 1688.229173][T28851] tipc: Publication distribution failure [ 1688.252984][T28849] CPU: 1 PID: 28849 Comm: syz.8.6767 Not tainted syzkaller #0 [ 1688.260539][T28849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1688.270657][T28849] Call Trace: [ 1688.273984][T28849] [ 1688.276956][T28849] dump_stack_lvl+0x18c/0x250 [ 1688.281699][T28849] ? show_regs_print_info+0x20/0x20 [ 1688.286953][T28849] ? load_image+0x420/0x420 [ 1688.291507][T28849] ? __lock_acquire+0x7d80/0x7d80 [ 1688.296628][T28849] should_fail_ex+0x394/0x4c0 [ 1688.301381][T28849] should_failslab+0x9/0x20 [ 1688.305943][T28849] slab_pre_alloc_hook+0x59/0x300 [ 1688.311035][T28849] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1688.316209][T28849] ? sock_alloc_inode+0x28/0xc0 [ 1688.321125][T28849] sock_alloc_inode+0x28/0xc0 [ 1688.325891][T28849] ? sockfs_init_fs_context+0xb0/0xb0 [ 1688.331323][T28849] new_inode_pseudo+0x63/0x1d0 [ 1688.336148][T28849] __sock_create+0x12d/0x940 [ 1688.340782][T28849] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1688.346830][T28849] __sys_socket+0xd7/0x1b0 [ 1688.351306][T28849] __x64_sys_socket+0x7a/0x90 [ 1688.356035][T28849] do_syscall_64+0x55/0xb0 [ 1688.360517][T28849] ? clear_bhb_loop+0x40/0x90 [ 1688.365251][T28849] ? clear_bhb_loop+0x40/0x90 [ 1688.369981][T28849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.375926][T28849] RIP: 0033:0x7fa79d59e159 [ 1688.380386][T28849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.400078][T28849] RSP: 002b:00007fa79e444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1688.408553][T28849] RAX: ffffffffffffffda RBX: 00007fa79d825fa0 RCX: 00007fa79d59e159 [ 1688.416577][T28849] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1688.424604][T28849] RBP: 00007fa79d635024 R08: 0000000000000000 R09: 0000000000000000 [ 1688.432658][T28849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1688.440851][T28849] R13: 00007fa79d826038 R14: 00007fa79d825fa0 R15: 00007ffd0ae6ea48 [ 1688.448890][T28849] [ 1688.534280][T28854] binder: BINDER_SET_CONTEXT_MGR already set [ 1688.563230][T28854] binder: 28853:28854 ioctl 4018620d 200000004a80 returned -16 [ 1688.833443][T28849] socket: no more sockets [ 1689.324455][T28862] netlink: 'syz.9.6770': attribute type 4 has an invalid length. [ 1689.332311][T28862] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6770'. [ 1689.436826][T28864] fuse: Bad value for 'group_id' [ 1689.501795][T28870] FAULT_INJECTION: forcing a failure. [ 1689.501795][T28870] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.526230][T28870] CPU: 0 PID: 28870 Comm: syz.2.6772 Not tainted syzkaller #0 [ 1689.533774][T28870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1689.543879][T28870] Call Trace: [ 1689.547206][T28870] [ 1689.550183][T28870] dump_stack_lvl+0x18c/0x250 [ 1689.554925][T28870] ? show_regs_print_info+0x20/0x20 [ 1689.560189][T28870] ? load_image+0x420/0x420 [ 1689.564749][T28870] ? __might_sleep+0xe0/0xe0 [ 1689.569395][T28870] ? __lock_acquire+0x7d80/0x7d80 [ 1689.574487][T28870] should_fail_ex+0x394/0x4c0 [ 1689.579227][T28870] should_failslab+0x9/0x20 [ 1689.583794][T28870] slab_pre_alloc_hook+0x59/0x300 [ 1689.588884][T28870] kmem_cache_alloc+0x5a/0x2c0 [ 1689.593795][T28870] ? __kernfs_new_node+0xe5/0x7f0 [ 1689.598890][T28870] __kernfs_new_node+0xe5/0x7f0 [ 1689.603841][T28870] ? kernfs_new_node+0x260/0x260 [ 1689.608855][T28870] ? up_write+0x1be/0x410 [ 1689.613239][T28870] kernfs_new_node+0x14c/0x260 [ 1689.618073][T28870] __kernfs_create_file+0x4b/0x2e0 [ 1689.623237][T28870] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1689.628670][T28870] internal_create_group+0x431/0xd10 [ 1689.634014][T28870] ? kernfs_add_one+0x149/0x6b0 [ 1689.638954][T28870] ? sysfs_create_group+0x20/0x20 [ 1689.644108][T28870] ? up_write+0x1be/0x410 [ 1689.648515][T28870] sysfs_create_groups+0x59/0x120 [ 1689.653619][T28870] device_add_attrs+0xdf/0x830 [ 1689.658479][T28870] ? device_add_class_symlinks+0x240/0x240 [ 1689.664393][T28870] ? device_add_class_symlinks+0x21f/0x240 [ 1689.670274][T28870] device_add+0x51a/0xc40 [ 1689.674676][T28870] netdev_register_kobject+0x188/0x320 [ 1689.680295][T28870] register_netdevice+0x12aa/0x1ba0 [ 1689.685577][T28870] ? kvmalloc_node+0x70/0x180 [ 1689.690334][T28870] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1689.696823][T28870] ? __asan_memset+0x22/0x40 [ 1689.701481][T28870] ? alloc_netdev_mqs+0xba3/0x1040 [ 1689.706659][T28870] ? __asan_memcpy+0x40/0x70 [ 1689.711323][T28870] vif_add+0x5d5/0x1380 [ 1689.715637][T28870] ? copy_from_sockptr+0x60/0x60 [ 1689.720642][T28870] ? __might_fault+0xaa/0x120 [ 1689.725385][T28870] ? __lock_acquire+0x7d80/0x7d80 [ 1689.730462][T28870] ? mark_lock+0x94/0x320 [ 1689.734851][T28870] ? ip_mroute_setsockopt+0x12f/0x1040 [ 1689.740519][T28870] ip_mroute_setsockopt+0xef4/0x1040 [ 1689.745882][T28870] ? ipmr_rule_default+0x80/0x80 [ 1689.750903][T28870] ? __might_sleep+0xe0/0xe0 [ 1689.755565][T28870] do_ip_setsockopt+0xd40/0x2d50 [ 1689.760568][T28870] ? ip_sock_set_pktinfo+0x30/0x30 [ 1689.765911][T28870] ? aa_sk_perm+0x83c/0x970 [ 1689.770486][T28870] ? __fget_files+0x28/0x460 [ 1689.775144][T28870] ? aa_af_perm+0x330/0x330 [ 1689.779716][T28870] ? __fget_files+0x28/0x460 [ 1689.784366][T28870] ? aa_sock_opt_perm+0x74/0x100 [ 1689.789415][T28870] ip_setsockopt+0x61/0x110 [ 1689.793980][T28870] ? sock_common_recvmsg+0x190/0x190 [ 1689.799330][T28870] do_sock_setsockopt+0x175/0x1a0 [ 1689.804406][T28870] ? __fdget+0x180/0x210 [ 1689.808740][T28870] __x64_sys_setsockopt+0x182/0x200 [ 1689.814019][T28870] do_syscall_64+0x55/0xb0 [ 1689.818487][T28870] ? clear_bhb_loop+0x40/0x90 [ 1689.823217][T28870] ? clear_bhb_loop+0x40/0x90 [ 1689.827948][T28870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1689.833905][T28870] RIP: 0033:0x7f18d2d9e159 [ 1689.838371][T28870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.858040][T28870] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1689.866518][T28870] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1689.874630][T28870] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 1689.882652][T28870] RBP: 00007f18d2e35024 R08: 0000000000000010 R09: 0000000000000000 [ 1689.890680][T28870] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1689.898707][T28870] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1689.906749][T28870] [ 1692.412628][T28911] netlink: 'syz.9.6782': attribute type 4 has an invalid length. [ 1692.421503][T28911] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6782'. [ 1693.180847][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1693.256787][T28926] fuse: Bad value for 'group_id' [ 1695.154010][T28959] netlink: 'syz.9.6792': attribute type 4 has an invalid length. [ 1695.161821][T28959] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6792'. [ 1695.296686][T26822] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1696.645275][T28993] netlink: 'syz.3.6801': attribute type 1 has an invalid length. [ 1697.510258][T26830] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1697.566663][T29029] netlink: 'syz.8.6808': attribute type 4 has an invalid length. [ 1697.585453][T29029] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6808'. [ 1698.315408][T29025] Process accounting resumed [ 1698.455277][T29045] syzkaller1: entered promiscuous mode [ 1698.462088][T29045] syzkaller1: entered allmulticast mode [ 1699.215886][T28923] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1700.120245][T29074] loop2: detected capacity change from 0 to 256 [ 1700.452228][T29077] netlink: 'syz.8.6820': attribute type 4 has an invalid length. [ 1700.462350][T29077] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6820'. [ 1700.496617][T29079] nbd0: detected capacity change from 0 to 618483679232 [ 1700.563720][T12920] block nbd0: Receive control failed (result -104) [ 1700.846226][T29087] ucma_write: process 465 (syz.9.6825) changed security contexts after opening file descriptor, this is not allowed. [ 1700.964864][T29091] FAULT_INJECTION: forcing a failure. [ 1700.964864][T29091] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1701.020017][T29091] CPU: 1 PID: 29091 Comm: syz.9.6826 Not tainted syzkaller #0 [ 1701.027559][T29091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1701.037670][T29091] Call Trace: [ 1701.040994][T29091] [ 1701.043960][T29091] dump_stack_lvl+0x18c/0x250 [ 1701.048697][T29091] ? netlink_getsockopt+0x590/0x590 [ 1701.053946][T29091] ? show_regs_print_info+0x20/0x20 [ 1701.059199][T29091] ? load_image+0x420/0x420 [ 1701.063783][T29091] ? __asan_memcpy+0x40/0x70 [ 1701.068444][T29091] ? sock_write_iter+0x316/0x420 [ 1701.073459][T29091] should_fail_ex+0x394/0x4c0 [ 1701.078202][T29091] get_futex_key+0x136/0x1030 [ 1701.082927][T29091] ? common_file_perm+0x198/0x1f0 [ 1701.088007][T29091] ? futex_setup_timer+0xc0/0xc0 [ 1701.092995][T29091] ? do_iter_write+0x990/0xc50 [ 1701.097827][T29091] futex_wake+0x127/0x4f0 [ 1701.102211][T29091] ? __asan_memset+0x22/0x40 [ 1701.106856][T29091] ? futex_wake_mark+0x150/0x150 [ 1701.111855][T29091] ? fput+0x154/0x1a0 [ 1701.115887][T29091] do_futex+0x35d/0x3e0 [ 1701.120072][T29091] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1701.126008][T29091] __se_sys_futex+0x3a9/0x440 [ 1701.130726][T29091] ? __x64_sys_futex+0xf0/0xf0 [ 1701.135518][T29091] ? __x64_sys_futex+0x21/0xf0 [ 1701.140319][T29091] do_syscall_64+0x55/0xb0 [ 1701.144773][T29091] ? clear_bhb_loop+0x40/0x90 [ 1701.149478][T29091] ? clear_bhb_loop+0x40/0x90 [ 1701.154188][T29091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.160113][T29091] RIP: 0033:0x7ff57019e159 [ 1701.164574][T29091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.184209][T29091] RSP: 002b:00007ff5710a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1701.192654][T29091] RAX: ffffffffffffffda RBX: 00007ff570425fa8 RCX: 00007ff57019e159 [ 1701.200650][T29091] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff570425fac [ 1701.208641][T29091] RBP: 00007ff570425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1701.216640][T29091] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1701.224633][T29091] R13: 00007ff570426038 R14: 00007fff2b1cf450 R15: 00007fff2b1cf538 [ 1701.232644][T29091] [ 1701.813072][T29004] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1702.795077][T29126] netlink: 'syz.8.6835': attribute type 4 has an invalid length. [ 1702.813754][T29126] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6835'. [ 1703.934144][T29008] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1703.950044][T29143] FAULT_INJECTION: forcing a failure. [ 1703.950044][T29143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1703.993658][T29143] CPU: 0 PID: 29143 Comm: syz.9.6843 Not tainted syzkaller #0 [ 1704.001209][T29143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1704.011324][T29143] Call Trace: [ 1704.014658][T29143] [ 1704.017632][T29143] dump_stack_lvl+0x18c/0x250 [ 1704.022374][T29143] ? show_regs_print_info+0x20/0x20 [ 1704.027626][T29143] ? load_image+0x420/0x420 [ 1704.032180][T29143] ? __lock_acquire+0x7d80/0x7d80 [ 1704.037259][T29143] ? verify_lock_unused+0x140/0x140 [ 1704.042518][T29143] should_fail_ex+0x394/0x4c0 [ 1704.047262][T29143] prepare_alloc_pages+0x1e1/0x5b0 [ 1704.052438][T29143] __alloc_pages+0x134/0x460 [ 1704.057088][T29143] ? zone_statistics+0x170/0x170 [ 1704.062087][T29143] ? mt_find+0x169/0x640 [ 1704.066420][T29143] ? handle_mm_fault+0xe6/0x4a50 [ 1704.071424][T29143] ? __lock_acquire+0x7d80/0x7d80 [ 1704.076522][T29143] __folio_alloc+0x10/0x20 [ 1704.080999][T29143] vma_alloc_folio+0x474/0x8f0 [ 1704.085830][T29143] ? handle_mm_fault+0xe6/0x4a50 [ 1704.090829][T29143] handle_mm_fault+0x1ab6/0x4a50 [ 1704.095820][T29143] ? handle_mm_fault+0xe6/0x4a50 [ 1704.100088][T29146] Bluetooth: MGMT ver 1.22 [ 1704.100838][T29143] ? numa_migrate_prep+0x350/0x350 [ 1704.110466][T29143] ? find_vma+0x134/0x1b0 [ 1704.114863][T29143] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1704.120210][T29143] do_user_addr_fault+0x736/0x12d0 [ 1704.125404][T29143] exc_page_fault+0x64/0x100 [ 1704.130058][T29143] asm_exc_page_fault+0x26/0x30 [ 1704.134971][T29143] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1704.140839][T29143] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1704.160506][T29143] RSP: 0018:ffffc90004f77bb0 EFLAGS: 00050206 [ 1704.166634][T29143] RAX: ffffffff8433ce01 RBX: 0000000000001000 RCX: 0000000000000238 [ 1704.174658][T29143] RDX: 0000000000000000 RSI: ffff88801e646dc8 RDI: 000020000001d000 [ 1704.182685][T29143] RBP: ffffc90004f77cf0 R08: ffff88801e646fff R09: 1ffff11003cc8dff [ 1704.190715][T29143] R10: dffffc0000000000 R11: ffffed1003cc8e00 R12: 000020000001d238 [ 1704.198743][T29143] R13: ffff88801e646000 R14: 000020000001c238 R15: ffff88801e646000 [ 1704.206781][T29143] ? _copy_from_user+0xd1/0xe0 [ 1704.211617][T29143] _copy_to_user+0x85/0xa0 [ 1704.216099][T29143] pagemap_read+0x4e4/0x790 [ 1704.220697][T29143] ? wake_up_q+0xca/0x100 [ 1704.225094][T29143] ? clear_refs_write+0xa20/0xa20 [ 1704.230180][T29143] ? common_file_perm+0x198/0x1f0 [ 1704.235303][T29143] ? fsnotify_perm+0x271/0x5e0 [ 1704.240134][T29143] ? clear_refs_write+0xa20/0xa20 [ 1704.245250][T29143] vfs_read+0x298/0x990 [ 1704.249475][T29143] ? kernel_read+0x1e0/0x1e0 [ 1704.254141][T29143] ? __fget_files+0x28/0x460 [ 1704.258805][T29143] ? __fget_files+0x3fc/0x460 [ 1704.263594][T29143] ? __fdget+0x180/0x210 [ 1704.267898][T29143] ? __x64_sys_pread64+0xf7/0x220 [ 1704.273010][T29143] __x64_sys_pread64+0x198/0x220 [ 1704.278023][T29143] ? ksys_pread64+0x1c0/0x1c0 [ 1704.282773][T29143] ? lockdep_hardirqs_on+0x98/0x150 [ 1704.288041][T29143] do_syscall_64+0x55/0xb0 [ 1704.292510][T29143] ? clear_bhb_loop+0x40/0x90 [ 1704.297336][T29143] ? clear_bhb_loop+0x40/0x90 [ 1704.302070][T29143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.308023][T29143] RIP: 0033:0x7ff57019e159 [ 1704.312614][T29143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.332288][T29143] RSP: 002b:00007ff5710a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1704.340768][T29143] RAX: ffffffffffffffda RBX: 00007ff570425fa0 RCX: 00007ff57019e159 [ 1704.348799][T29143] RDX: 0000000000019000 RSI: 000020000001a240 RDI: 0000000000000004 [ 1704.356838][T29143] RBP: 00007ff570235024 R08: 0000000000000000 R09: 0000000000000000 [ 1704.364865][T29143] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000000 [ 1704.372894][T29143] R13: 00007ff570426038 R14: 00007ff570425fa0 R15: 00007fff2b1cf538 [ 1704.380952][T29143] [ 1705.398796][T29161] loop8: detected capacity change from 0 to 256 [ 1705.406604][T29161] FAT-fs (loop8): Unrecognized mount option "shortname=winmt" or missing value [ 1705.421600][T29164] netlink: 'syz.9.6847': attribute type 4 has an invalid length. [ 1705.429623][T29164] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6847'. [ 1707.208553][T29184] fuse: Unknown parameter 'grou00000000000000000000' [ 1707.578773][T29200] FAULT_INJECTION: forcing a failure. [ 1707.578773][T29200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1707.646106][T29202] netlink: 'syz.3.6857': attribute type 4 has an invalid length. [ 1707.654037][T29202] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6857'. [ 1707.713887][T29200] CPU: 1 PID: 29200 Comm: syz.2.6858 Not tainted syzkaller #0 [ 1707.721439][T29200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1707.731543][T29200] Call Trace: [ 1707.734877][T29200] [ 1707.737854][T29200] dump_stack_lvl+0x18c/0x250 [ 1707.742615][T29200] ? show_regs_print_info+0x20/0x20 [ 1707.747877][T29200] ? load_image+0x420/0x420 [ 1707.752430][T29200] ? __might_fault+0xaa/0x120 [ 1707.757155][T29200] ? __lock_acquire+0x7d80/0x7d80 [ 1707.762239][T29200] should_fail_ex+0x394/0x4c0 [ 1707.766971][T29200] _copy_to_user+0x2f/0xa0 [ 1707.771436][T29200] finalize_log+0xe4/0x160 [ 1707.775902][T29200] ? btf_parse_struct_metas+0xde0/0xde0 [ 1707.781505][T29200] ? btf_check_type_tags+0x674/0x680 [ 1707.786854][T29200] btf_new_fd+0x757/0x9e0 [ 1707.791246][T29200] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1707.796417][T29200] ? capable+0x88/0xe0 [ 1707.800552][T29200] __sys_bpf+0x670/0x890 [ 1707.804853][T29200] ? bpf_link_show_fdinfo+0x390/0x390 [ 1707.810294][T29200] ? lock_chain_count+0x20/0x20 [ 1707.815210][T29200] __x64_sys_bpf+0x7c/0x90 [ 1707.819675][T29200] do_syscall_64+0x55/0xb0 [ 1707.824141][T29200] ? clear_bhb_loop+0x40/0x90 [ 1707.828873][T29200] ? clear_bhb_loop+0x40/0x90 [ 1707.833608][T29200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1707.839653][T29200] RIP: 0033:0x7f18d2d9e159 [ 1707.844118][T29200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.863773][T29200] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1707.872237][T29200] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1707.880254][T29200] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1707.888294][T29200] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1707.896319][T29200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1707.904353][T29200] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1707.912390][T29200] [ 1707.915507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.469875][T29204] loop9: detected capacity change from 0 to 4096 [ 1708.528459][T29204] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1708.606345][T29204] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1708.973387][T26522] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1709.246109][T29226] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1709.375331][ T61] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1709.388033][T29230] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6863'. [ 1709.432634][T29226] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1709.468152][T29233] fuse: Unknown parameter 'grou00000000000000000000' [ 1710.695652][T29261] netlink: 'syz.2.6871': attribute type 4 has an invalid length. [ 1710.703693][T29261] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6871'. [ 1711.787964][T29274] fuse: Unknown parameter 'grou00000000000000000000' [ 1712.243111][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1713.714953][T29297] FAULT_INJECTION: forcing a failure. [ 1713.714953][T29297] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.854837][T29297] CPU: 0 PID: 29297 Comm: syz.8.6880 Not tainted syzkaller #0 [ 1713.862394][T29297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1713.872509][T29297] Call Trace: [ 1713.875841][T29297] [ 1713.878842][T29297] dump_stack_lvl+0x18c/0x250 [ 1713.883593][T29297] ? show_regs_print_info+0x20/0x20 [ 1713.888845][T29297] ? load_image+0x420/0x420 [ 1713.893400][T29297] ? __might_sleep+0xe0/0xe0 [ 1713.898045][T29297] ? __lock_acquire+0x7d80/0x7d80 [ 1713.903133][T29297] should_fail_ex+0x394/0x4c0 [ 1713.907885][T29297] should_failslab+0x9/0x20 [ 1713.912445][T29297] slab_pre_alloc_hook+0x59/0x300 [ 1713.917538][T29297] ? __register_sysctl_table+0xa15/0x1210 [ 1713.923318][T29297] ? __register_sysctl_table+0xa2c/0x1210 [ 1713.929088][T29297] ? __register_sysctl_table+0xa2c/0x1210 [ 1713.934876][T29297] __kmem_cache_alloc_node+0x53/0x250 [ 1713.940314][T29297] ? __rwlock_init+0x150/0x150 [ 1713.945149][T29297] ? __register_sysctl_table+0xa2c/0x1210 [ 1713.950963][T29297] __kmalloc+0xa7/0x240 [ 1713.955211][T29297] __register_sysctl_table+0xa2c/0x1210 [ 1713.960822][T29297] setup_mq_sysctls+0x4da/0x570 [ 1713.965730][T29297] copy_ipcs+0x327/0x500 [ 1713.970039][T29297] create_new_namespaces+0x212/0x700 [ 1713.975414][T29297] unshare_nsproxy_namespaces+0x11a/0x160 [ 1713.981202][T29297] ksys_unshare+0x4fa/0x8f0 [ 1713.985770][T29297] ? sighand_ctor+0x50/0x50 [ 1713.990326][T29297] ? lock_chain_count+0x20/0x20 [ 1713.995238][T29297] ? syscall_enter_from_user_mode+0x25/0x80 [ 1714.001216][T29297] __x64_sys_unshare+0x38/0x40 [ 1714.006038][T29297] do_syscall_64+0x55/0xb0 [ 1714.010503][T29297] ? clear_bhb_loop+0x40/0x90 [ 1714.015264][T29297] ? clear_bhb_loop+0x40/0x90 [ 1714.019997][T29297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.025949][T29297] RIP: 0033:0x7fa79d59e159 [ 1714.030414][T29297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.050078][T29297] RSP: 002b:00007fa79e444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1714.058587][T29297] RAX: ffffffffffffffda RBX: 00007fa79d825fa0 RCX: 00007fa79d59e159 [ 1714.066609][T29297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 1714.074633][T29297] RBP: 00007fa79d635024 R08: 0000000000000000 R09: 0000000000000000 [ 1714.082646][T29297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1714.090671][T29297] R13: 00007fa79d826038 R14: 00007fa79d825fa0 R15: 00007ffd0ae6ea48 [ 1714.098717][T29297] [ 1714.260109][T29304] netlink: 'syz.9.6881': attribute type 4 has an invalid length. [ 1714.268283][T29304] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6881'. [ 1714.568098][T29297] sysctl could not get directory: /fs -12 [ 1715.074298][T29314] fuse: Unknown parameter 'group_i00000000000000000000' [ 1715.189188][T29311] loop9: detected capacity change from 0 to 4096 [ 1715.211601][T29311] EXT4-fs: Ignoring removed mblk_io_submit option [ 1715.257146][T29311] EXT4-fs: Ignoring removed nobh option [ 1715.300992][T29311] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1715.393398][T29311] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.147433][T26522] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.441988][T28920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1717.972325][T29359] fuse: Unknown parameter 'group_i00000000000000000000' [ 1718.154853][T29360] netlink: 'syz.3.6892': attribute type 4 has an invalid length. [ 1718.163178][T29360] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6892'. [ 1719.096636][T28921] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1719.524385][T29387] loop9: detected capacity change from 0 to 512 [ 1719.547094][T29387] EXT4-fs: Invalid want_extra_isize 5 [ 1720.261134][T28493] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1720.670955][T29391] fuse: Unknown parameter 'group_i00000000000000000000' [ 1721.085382][T29405] netlink: 'syz.3.6905': attribute type 4 has an invalid length. [ 1721.093502][T29405] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1722.855422][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1723.102558][T29428] FAULT_INJECTION: forcing a failure. [ 1723.102558][T29428] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.139253][ T27] audit: type=1800 audit(1788383368.983:15): pid=29426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6921" name="idVendor" dev="configfs" ino=99939 res=0 errno=0 [ 1723.201042][T29428] CPU: 0 PID: 29428 Comm: syz.3.6913 Not tainted syzkaller #0 [ 1723.208595][T29428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1723.218720][T29428] Call Trace: [ 1723.222065][T29428] [ 1723.225045][T29428] dump_stack_lvl+0x18c/0x250 [ 1723.229778][T29428] ? show_regs_print_info+0x20/0x20 [ 1723.235039][T29428] ? load_image+0x420/0x420 [ 1723.239616][T29428] ? __might_sleep+0xe0/0xe0 [ 1723.244291][T29428] ? __lock_acquire+0x7d80/0x7d80 [ 1723.249388][T29428] should_fail_ex+0x394/0x4c0 [ 1723.254149][T29428] should_failslab+0x9/0x20 [ 1723.258755][T29428] slab_pre_alloc_hook+0x59/0x300 [ 1723.263866][T29428] ? d_instantiate+0x6f/0x90 [ 1723.268545][T29428] kmem_cache_alloc+0x5a/0x2c0 [ 1723.273376][T29428] ? alloc_empty_file+0x9e/0x1d0 [ 1723.278379][T29428] alloc_empty_file+0x9e/0x1d0 [ 1723.283212][T29428] alloc_file+0x5b/0x600 [ 1723.287523][T29428] alloc_file_pseudo+0x184/0x210 [ 1723.292519][T29428] ? fput+0x1a0/0x1a0 [ 1723.296556][T29428] ? _raw_spin_unlock+0x28/0x40 [ 1723.301483][T29428] anon_inode_getfd+0xca/0x1c0 [ 1723.306322][T29428] btf_new_fd+0x848/0x9e0 [ 1723.310722][T29428] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1723.315900][T29428] ? capable+0x88/0xe0 [ 1723.320030][T29428] __sys_bpf+0x670/0x890 [ 1723.324320][T29428] ? bpf_link_show_fdinfo+0x390/0x390 [ 1723.329770][T29428] ? lock_chain_count+0x20/0x20 [ 1723.334687][T29428] __x64_sys_bpf+0x7c/0x90 [ 1723.339153][T29428] do_syscall_64+0x55/0xb0 [ 1723.343639][T29428] ? clear_bhb_loop+0x40/0x90 [ 1723.348374][T29428] ? clear_bhb_loop+0x40/0x90 [ 1723.353559][T29428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.359524][T29428] RIP: 0033:0x7fb08ff9e159 [ 1723.363993][T29428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.383747][T29428] RSP: 002b:00007fb090f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1723.392271][T29428] RAX: ffffffffffffffda RBX: 00007fb090225fa0 RCX: 00007fb08ff9e159 [ 1723.400305][T29428] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1723.408336][T29428] RBP: 00007fb090035024 R08: 0000000000000000 R09: 0000000000000000 [ 1723.416360][T29428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1723.424382][T29428] R13: 00007fb090226038 R14: 00007fb090225fa0 R15: 00007ffd3bb4e9e8 [ 1723.432441][T29428] [ 1723.680179][T29439] fuse: Unknown parameter 'group_id00000000000000000000' [ 1724.448829][T29453] tipc: Enabling of bearer rejected, failed to enable media [ 1724.534651][T29456] netlink: 'syz.8.6920': attribute type 4 has an invalid length. [ 1724.542553][T29456] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6920'. [ 1725.322603][T29459] loop3: detected capacity change from 0 to 512 [ 1725.463485][T29459] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1725.471896][T29459] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1725.518655][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1725.520739][T29459] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1725.592908][T29459] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1725.670970][T29459] EXT4-fs error (device loop3): __ext4_iget:5079: inode #16: block 127754: comm syz.3.6923: invalid block [ 1725.743448][T29459] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.6923: couldn't read orphan inode 16 (err -117) [ 1725.763737][T29459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1725.837818][T29473] loop2: detected capacity change from 0 to 512 [ 1725.923166][T29473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1725.965706][T28357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.975073][T29473] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1726.129531][T29473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1726.161086][T29473] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 1726.187870][T29473] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1726.187870][T29473] [ 1726.208889][T29473] EXT4-fs (loop2): Total free blocks count 0 [ 1726.223698][T29473] EXT4-fs (loop2): Free/Dirty block details [ 1726.240686][T29473] EXT4-fs (loop2): free_blocks=65280 [ 1726.250807][T29473] EXT4-fs (loop2): dirty_blocks=32 [ 1726.260872][T29473] EXT4-fs (loop2): Block reservation details [ 1726.281160][T29473] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 1726.401190][T27917] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.498523][T29485] fuse: Unknown parameter 'group_id00000000000000000000' [ 1726.639978][T29488] FAULT_INJECTION: forcing a failure. [ 1726.639978][T29488] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.752966][T29488] CPU: 0 PID: 29488 Comm: syz.2.6927 Not tainted syzkaller #0 [ 1726.760601][T29488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1726.770709][T29488] Call Trace: [ 1726.774052][T29488] [ 1726.777038][T29488] dump_stack_lvl+0x18c/0x250 [ 1726.781785][T29488] ? show_regs_print_info+0x20/0x20 [ 1726.787043][T29488] ? load_image+0x420/0x420 [ 1726.791609][T29488] ? __might_sleep+0xe0/0xe0 [ 1726.796261][T29488] ? __lock_acquire+0x7d80/0x7d80 [ 1726.801354][T29488] should_fail_ex+0x394/0x4c0 [ 1726.806098][T29488] should_failslab+0x9/0x20 [ 1726.810671][T29488] slab_pre_alloc_hook+0x59/0x300 [ 1726.815792][T29488] ? d_instantiate+0x6f/0x90 [ 1726.820436][T29488] kmem_cache_alloc+0x5a/0x2c0 [ 1726.825267][T29488] ? alloc_empty_file+0x9e/0x1d0 [ 1726.830293][T29488] alloc_empty_file+0x9e/0x1d0 [ 1726.835117][T29488] alloc_file+0x5b/0x600 [ 1726.839431][T29488] alloc_file_pseudo+0x184/0x210 [ 1726.844429][T29488] ? fput+0x1a0/0x1a0 [ 1726.848470][T29488] ? _raw_spin_unlock+0x28/0x40 [ 1726.853392][T29488] anon_inode_getfd+0xca/0x1c0 [ 1726.858229][T29488] btf_new_fd+0x848/0x9e0 [ 1726.862635][T29488] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1726.867820][T29488] ? capable+0x88/0xe0 [ 1726.871960][T29488] __sys_bpf+0x670/0x890 [ 1726.876257][T29488] ? bpf_link_show_fdinfo+0x390/0x390 [ 1726.881724][T29488] ? lock_chain_count+0x20/0x20 [ 1726.886640][T29488] __x64_sys_bpf+0x7c/0x90 [ 1726.891106][T29488] do_syscall_64+0x55/0xb0 [ 1726.895559][T29488] ? clear_bhb_loop+0x40/0x90 [ 1726.900292][T29488] ? clear_bhb_loop+0x40/0x90 [ 1726.905003][T29488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1726.910923][T29488] RIP: 0033:0x7f18d2d9e159 [ 1726.915374][T29488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.935016][T29488] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1726.943470][T29488] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1726.951474][T29488] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1726.959473][T29488] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1726.967559][T29488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1726.975555][T29488] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1726.983570][T29488] [ 1727.506718][T29501] netlink: 'syz.3.6932': attribute type 4 has an invalid length. [ 1727.514672][T29501] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6932'. [ 1728.239060][T29509] vlan1: entered allmulticast mode [ 1728.265066][T29509] veth0_vlan: entered allmulticast mode [ 1728.301006][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1728.602177][T29519] fuse: Unknown parameter 'group_id00000000000000000000' [ 1729.460250][T29543] netlink: 'syz.3.6945': attribute type 4 has an invalid length. [ 1729.468772][T29543] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6945'. [ 1730.350390][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.640726][T29557] fuse: Bad value for 'user_id' [ 1730.703942][T29001] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1730.876400][T29560] syzkaller1: entered allmulticast mode [ 1730.990701][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 30 seconds [ 1731.607920][T29583] netlink: 'syz.2.6955': attribute type 4 has an invalid length. [ 1731.615895][T29583] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6955'. [ 1733.266124][T29599] fuse: Bad value for 'user_id' [ 1733.633493][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1734.020345][T29614] FAULT_INJECTION: forcing a failure. [ 1734.020345][T29614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.403418][T29614] CPU: 1 PID: 29614 Comm: syz.9.6965 Not tainted syzkaller #0 [ 1734.410980][T29614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1734.421108][T29614] Call Trace: [ 1734.424437][T29614] [ 1734.427410][T29614] dump_stack_lvl+0x18c/0x250 [ 1734.432152][T29614] ? show_regs_print_info+0x20/0x20 [ 1734.437414][T29614] ? load_image+0x420/0x420 [ 1734.441973][T29614] ? __lock_acquire+0x7d80/0x7d80 [ 1734.447075][T29614] ? __virt_addr_valid+0x10c/0x380 [ 1734.452253][T29614] should_fail_ex+0x394/0x4c0 [ 1734.456995][T29614] _copy_from_user+0x2f/0xe0 [ 1734.461641][T29614] load_msg+0x28a/0x380 [ 1734.465875][T29614] do_msgrcv+0x279/0x13d0 [ 1734.470283][T29614] ? do_msgrcv+0x13d0/0x13d0 [ 1734.474951][T29614] ? ksys_msgrcv+0x40/0x40 [ 1734.479432][T29614] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1734.485471][T29614] ? lock_chain_count+0x20/0x20 [ 1734.490384][T29614] ? lockdep_hardirqs_on+0x98/0x150 [ 1734.495647][T29614] ? __x64_sys_msgrcv+0x20/0xd0 [ 1734.500567][T29614] do_syscall_64+0x55/0xb0 [ 1734.505052][T29614] ? clear_bhb_loop+0x40/0x90 [ 1734.509806][T29614] ? clear_bhb_loop+0x40/0x90 [ 1734.514550][T29614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.520624][T29614] RIP: 0033:0x7ff57019e159 [ 1734.525087][T29614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.544755][T29614] RSP: 002b:00007ff5710a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 1734.553234][T29614] RAX: ffffffffffffffda RBX: 00007ff570425fa0 RCX: 00007ff57019e159 [ 1734.561275][T29614] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000 [ 1734.569314][T29614] RBP: 00007ff570235024 R08: 0000000000004800 R09: 0000000000000000 [ 1734.577342][T29614] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1734.585366][T29614] R13: 00007ff570426038 R14: 00007ff570425fa0 R15: 00007fff2b1cf538 [ 1734.593446][T29614] [ 1734.656686][T29624] netlink: 'syz.8.6966': attribute type 4 has an invalid length. [ 1735.016551][T29624] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6966'. [ 1735.734538][T29637] fuse: Bad value for 'user_id' [ 1735.879760][T29010] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1736.772968][T29664] netlink: 'syz.2.6977': attribute type 4 has an invalid length. [ 1736.791522][T29664] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6977'. [ 1737.590482][T29670] loop2: detected capacity change from 0 to 128 [ 1737.700637][T29670] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1737.738548][T29670] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.957594][T27917] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1738.123486][T29683] fuse: Bad value for 'fd' [ 1738.257010][T29010] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1739.531767][T29714] netlink: 'syz.2.6989': attribute type 4 has an invalid length. [ 1739.550832][T29714] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6989'. [ 1739.649705][T12920] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1739.660378][T12920] CPU: 1 PID: 12920 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1739.668077][T12920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1739.678176][T12920] Workqueue: hci2 hci_rx_work [ 1739.683010][T12920] Call Trace: [ 1739.686330][T12920] [ 1739.689304][T12920] dump_stack_lvl+0x18c/0x250 [ 1739.694048][T12920] ? show_regs_print_info+0x20/0x20 [ 1739.699299][T12920] ? load_image+0x420/0x420 [ 1739.703883][T12920] sysfs_create_dir_ns+0x26e/0x2a0 [ 1739.709046][T12920] ? __lock_acquire+0x7d80/0x7d80 [ 1739.714119][T12920] ? sysfs_warn_dup+0xa0/0xa0 [ 1739.718868][T12920] ? do_raw_spin_unlock+0x121/0x230 [ 1739.724138][T12920] kobject_add_internal+0x617/0xc90 [ 1739.729410][T12920] kobject_add+0x164/0x240 [ 1739.733887][T12920] ? preempt_schedule_thunk+0x1a/0x30 [ 1739.739351][T12920] ? kobject_init+0x1d0/0x1d0 [ 1739.744093][T12920] ? get_device_parent+0x366/0x390 [ 1739.749264][T12920] device_add+0x3fa/0xc40 [ 1739.753657][T12920] hci_conn_add_sysfs+0xd5/0x1e0 [ 1739.758772][T12920] le_conn_complete_evt+0xe9f/0x1480 [ 1739.764128][T12920] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1739.770448][T12920] ? lockdep_hardirqs_on+0x98/0x150 [ 1739.775729][T12920] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1739.781436][T12920] ? skb_pull_data+0xf0/0x1f0 [ 1739.786177][T12920] hci_le_conn_complete_evt+0x187/0x440 [ 1739.791788][T12920] ? hci_remote_host_features_evt+0x150/0x150 [ 1739.797911][T12920] hci_event_packet+0x7b4/0x1280 [ 1739.802928][T12920] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1739.808638][T12920] ? bis_list+0x290/0x290 [ 1739.813040][T12920] ? kcov_remote_start+0x1b7/0x810 [ 1739.818208][T12920] ? hci_send_to_monitor+0xd7/0x4f0 [ 1739.823468][T12920] hci_rx_work+0x43a/0xd60 [ 1739.827943][T12920] ? process_scheduled_works+0x975/0x1600 [ 1739.833717][T12920] process_scheduled_works+0xa60/0x1600 [ 1739.839346][T12920] ? worker_attach_to_pool+0x370/0x370 [ 1739.844878][T12920] ? assign_work+0x3cc/0x5d0 [ 1739.849534][T12920] worker_thread+0xa5e/0xfe0 [ 1739.854201][T12920] ? _raw_spin_unlock+0x40/0x40 [ 1739.859100][T12920] ? __kthread_parkme+0x71/0x1c0 [ 1739.864099][T12920] kthread+0x2fa/0x390 [ 1739.868215][T12920] ? pr_cont_work+0x550/0x550 [ 1739.872947][T12920] ? kthread_blkcg+0xd0/0xd0 [ 1739.877589][T12920] ret_from_fork+0x48/0x80 [ 1739.882056][T12920] ? kthread_blkcg+0xd0/0xd0 [ 1739.886689][T12920] ret_from_fork_asm+0x11/0x20 [ 1739.891521][T12920] [ 1739.988286][T12920] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1740.004838][T12920] Bluetooth: hci2: failed to register connection device [ 1740.591908][T29729] fuse: Bad value for 'fd' [ 1740.897889][T29011] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1740.909562][T29702] mount: server not responding, timed out [ 1742.571658][T29762] netlink: 'syz.9.6999': attribute type 4 has an invalid length. [ 1742.579553][T29762] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6999'. [ 1743.370163][T29774] fuse: Bad value for 'fd' [ 1743.698972][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1745.221382][T29806] netlink: 'syz.2.7010': attribute type 4 has an invalid length. [ 1745.240367][T29806] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7010'. [ 1746.175002][T29816] fuse: Bad value for 'fd' [ 1746.429824][T29790] mount: server not responding, timed out [ 1746.658152][T28920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1746.920184][T29831] loop3: detected capacity change from 0 to 4096 [ 1747.024547][T29831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.283156][T29838] netlink: 'syz.2.7019': attribute type 4 has an invalid length. [ 1747.291013][T29838] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7019'. [ 1748.007500][T28357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.106501][T29855] Unsupported ieee802154 address type: 0 [ 1749.322536][T29858] fuse: Bad value for 'fd' [ 1750.011231][T28761] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1751.713545][T29883] netlink: 'syz.9.7032': attribute type 4 has an invalid length. [ 1751.733444][T29883] netlink: 17 bytes leftover after parsing attributes in process `syz.9.7032'. [ 1752.278176][T29898] Unsupported ieee802154 address type: 0 [ 1752.489812][T29905] fuse: Bad value for 'fd' [ 1752.932690][T20607] Bluetooth: hci3: command 0x0406 tx timeout [ 1753.458116][ T3533] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1753.648155][T29922] loop3: detected capacity change from 0 to 256 [ 1754.895835][T29938] netlink: 'syz.8.7045': attribute type 4 has an invalid length. [ 1754.905022][T29938] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7045'. [ 1755.802335][T29952] Unsupported ieee802154 address type: 0 [ 1755.941425][T29957] fuse: Invalid rootmode [ 1756.216345][T28920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1756.982258][T29984] netlink: 'syz.3.7057': attribute type 4 has an invalid length. [ 1757.001386][T29984] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1757.819925][T12920] Bluetooth: hci2: ISO packet too small [ 1759.115405][T30023] fuse: Invalid rootmode [ 1759.156883][T29001] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1759.745573][T30036] Unsupported ieee802154 address type: 0 [ 1759.988795][T30042] netlink: 'syz.3.7068': attribute type 4 has an invalid length. [ 1759.997098][T30042] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7068'. [ 1760.845860][T30054] fuse: Invalid rootmode [ 1761.084910][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 60 seconds [ 1761.209466][T29012] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1761.323965][T30067] Unsupported ieee802154 address type: 0 [ 1761.588479][T30074] FAULT_INJECTION: forcing a failure. [ 1761.588479][T30074] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.622137][T30074] CPU: 0 PID: 30074 Comm: syz.2.7082 Not tainted syzkaller #0 [ 1761.629689][T30074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1761.639807][T30074] Call Trace: [ 1761.643126][T30074] [ 1761.646099][T30074] dump_stack_lvl+0x18c/0x250 [ 1761.650838][T30074] ? show_regs_print_info+0x20/0x20 [ 1761.656094][T30074] ? load_image+0x420/0x420 [ 1761.660650][T30074] ? __lock_acquire+0x7d80/0x7d80 [ 1761.665731][T30074] should_fail_ex+0x394/0x4c0 [ 1761.670470][T30074] should_failslab+0x9/0x20 [ 1761.675032][T30074] slab_pre_alloc_hook+0x59/0x300 [ 1761.680122][T30074] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1761.685290][T30074] ? new_inode_pseudo+0x82/0x1d0 [ 1761.690285][T30074] new_inode_pseudo+0x82/0x1d0 [ 1761.695109][T30074] alloc_anon_inode+0x1e/0x2f0 [ 1761.699929][T30074] anon_inode_make_secure_inode+0x99/0x160 [ 1761.705842][T30074] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 1761.711357][T30074] ? _raw_spin_unlock+0x28/0x40 [ 1761.716273][T30074] __se_sys_memfd_secret+0xcd/0x300 [ 1761.721560][T30074] do_syscall_64+0x55/0xb0 [ 1761.726025][T30074] ? clear_bhb_loop+0x40/0x90 [ 1761.730757][T30074] ? clear_bhb_loop+0x40/0x90 [ 1761.735489][T30074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.741457][T30074] RIP: 0033:0x7f18d2d9e159 [ 1761.745915][T30074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.765576][T30074] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 1761.774048][T30074] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1761.782073][T30074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 1761.790092][T30074] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1761.798110][T30074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.806130][T30074] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1761.814163][T30074] [ 1762.595069][T30081] fuse: Bad value for 'rootmode' [ 1762.954439][T28761] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1763.038671][T30100] Unsupported ieee802154 address type: 0 [ 1763.825862][T30121] FAULT_INJECTION: forcing a failure. [ 1763.825862][T30121] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.917402][T30121] CPU: 0 PID: 30121 Comm: syz.3.7096 Not tainted syzkaller #0 [ 1763.924958][T30121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1763.935067][T30121] Call Trace: [ 1763.938401][T30121] [ 1763.941396][T30121] dump_stack_lvl+0x18c/0x250 [ 1763.946141][T30121] ? show_regs_print_info+0x20/0x20 [ 1763.951408][T30121] ? load_image+0x420/0x420 [ 1763.956010][T30121] ? __lock_acquire+0x7d80/0x7d80 [ 1763.961115][T30121] should_fail_ex+0x394/0x4c0 [ 1763.965863][T30121] should_failslab+0x9/0x20 [ 1763.970445][T30121] slab_pre_alloc_hook+0x59/0x300 [ 1763.975546][T30121] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1763.980720][T30121] ? __d_alloc+0x31/0x710 [ 1763.985092][T30121] ? read_lock_is_recursive+0x20/0x20 [ 1763.990509][T30121] __d_alloc+0x31/0x710 [ 1763.994695][T30121] ? hashlen_string+0x54/0x110 [ 1763.999493][T30121] d_alloc_name+0xbb/0x320 [ 1764.003943][T30121] ? down_write+0x16e/0x200 [ 1764.008487][T30121] ? d_alloc_pseudo+0x70/0x70 [ 1764.013207][T30121] proc_setup_self+0xaf/0x2c0 [ 1764.017932][T30121] ? _raw_spin_unlock+0x28/0x40 [ 1764.022815][T30121] proc_fill_super+0x4ee/0x730 [ 1764.027622][T30121] ? proc_reconfigure+0x370/0x370 [ 1764.032709][T30121] get_tree_nodev+0xb5/0x140 [ 1764.037337][T30121] vfs_get_tree+0x8c/0x280 [ 1764.041786][T30121] do_new_mount+0x24a/0xa40 [ 1764.046346][T30121] __se_sys_mount+0x2e7/0x3d0 [ 1764.051060][T30121] ? __x64_sys_mount+0xc0/0xc0 [ 1764.055858][T30121] ? lockdep_hardirqs_on+0x98/0x150 [ 1764.061095][T30121] ? __x64_sys_mount+0x20/0xc0 [ 1764.065893][T30121] do_syscall_64+0x55/0xb0 [ 1764.070342][T30121] ? clear_bhb_loop+0x40/0x90 [ 1764.075056][T30121] ? clear_bhb_loop+0x40/0x90 [ 1764.079769][T30121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1764.085727][T30121] RIP: 0033:0x7fb08ff9e159 [ 1764.090167][T30121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.109802][T30121] RSP: 002b:00007fb090f55028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1764.118250][T30121] RAX: ffffffffffffffda RBX: 00007fb090225fa0 RCX: 00007fb08ff9e159 [ 1764.126254][T30121] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 1764.134258][T30121] RBP: 00007fb090035024 R08: 0000000000000000 R09: 0000000000000000 [ 1764.142274][T30121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1764.150740][T30121] R13: 00007fb090226038 R14: 00007fb090225fa0 R15: 00007ffd3bb4e9e8 [ 1764.158807][T30121] [ 1764.179411][T30121] proc_fill_super: can't allocate /proc/self [ 1764.194826][T30124] fuse: Bad value for 'rootmode' [ 1764.942635][T30131] FAULT_INJECTION: forcing a failure. [ 1764.942635][T30131] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.964821][T30133] FAULT_INJECTION: forcing a failure. [ 1764.964821][T30133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.978226][T30131] CPU: 0 PID: 30131 Comm: syz.2.7098 Not tainted syzkaller #0 [ 1764.985874][T30131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1764.995983][T30131] Call Trace: [ 1764.999314][T30131] [ 1765.002289][T30131] dump_stack_lvl+0x18c/0x250 [ 1765.007027][T30131] ? show_regs_print_info+0x20/0x20 [ 1765.012277][T30131] ? load_image+0x420/0x420 [ 1765.016830][T30131] ? __lock_acquire+0x7d80/0x7d80 [ 1765.021899][T30131] ? __lock_acquire+0x1262/0x7d80 [ 1765.026984][T30131] ? is_dynamic_key+0x260/0x260 [ 1765.031907][T30131] should_fail_ex+0x394/0x4c0 [ 1765.036664][T30131] should_failslab+0x9/0x20 [ 1765.041273][T30131] slab_pre_alloc_hook+0x59/0x300 [ 1765.046378][T30131] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1765.051746][T30131] ? __d_alloc+0x31/0x710 [ 1765.056145][T30131] __d_alloc+0x31/0x710 [ 1765.060361][T30131] d_alloc_parallel+0xe0/0x1590 [ 1765.065273][T30131] ? __asan_memset+0x22/0x40 [ 1765.069983][T30131] ? lockdep_init_map_type+0x9c/0x8e0 [ 1765.075414][T30131] ? lockdep_softirqs_off+0x440/0x440 [ 1765.080831][T30131] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1765.085982][T30131] ? __init_waitqueue_head+0xa8/0x140 [ 1765.091401][T30131] __lookup_slow+0x138/0x400 [ 1765.096024][T30131] ? lookup_one_len+0x2e0/0x2e0 [ 1765.100909][T30131] ? generic_permission+0x1ed/0x590 [ 1765.106155][T30131] ? down_read+0x1ac/0x2e0 [ 1765.110610][T30131] lookup_slow+0x53/0x70 [ 1765.114890][T30131] link_path_walk+0x97c/0xe40 [ 1765.119611][T30131] ? handle_lookup_down+0x130/0x130 [ 1765.124855][T30131] path_openat+0x291/0x3270 [ 1765.129407][T30131] ? do_sys_openat2+0xda/0x1d0 [ 1765.134202][T30131] ? __x64_sys_openat+0x139/0x160 [ 1765.139269][T30131] ? verify_lock_unused+0x140/0x140 [ 1765.144511][T30131] ? do_filp_open+0x430/0x430 [ 1765.149233][T30131] do_filp_open+0x1f2/0x430 [ 1765.153776][T30131] ? vfs_tmpfile+0x620/0x620 [ 1765.158403][T30131] ? noop_direct_IO+0x20/0x20 [ 1765.163118][T30131] ? _raw_spin_unlock+0x28/0x40 [ 1765.167995][T30131] ? alloc_fd+0x590/0x640 [ 1765.172363][T30131] do_sys_openat2+0x134/0x1d0 [ 1765.177082][T30131] ? do_sys_open+0xe0/0xe0 [ 1765.181536][T30131] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1765.187554][T30131] ? lock_chain_count+0x20/0x20 [ 1765.192443][T30131] __x64_sys_openat+0x139/0x160 [ 1765.197332][T30131] do_syscall_64+0x55/0xb0 [ 1765.201783][T30131] ? clear_bhb_loop+0x40/0x90 [ 1765.206498][T30131] ? clear_bhb_loop+0x40/0x90 [ 1765.211210][T30131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.217173][T30131] RIP: 0033:0x7f18d2d5e98e [ 1765.221634][T30131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1765.241309][T30131] RSP: 002b:00007f18d3bc8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1765.249774][T30131] RAX: ffffffffffffffda RBX: 00007f18d3bc96c0 RCX: 00007f18d2d5e98e [ 1765.257788][T30131] RDX: 0000000000000002 RSI: 00007f18d3bc8f90 RDI: ffffffffffffff9c [ 1765.265807][T30131] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1765.273824][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.281824][T30131] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1765.289840][T30131] [ 1765.393279][T30133] CPU: 0 PID: 30133 Comm: syz.3.7099 Not tainted syzkaller #0 [ 1765.400847][T30133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1765.410956][T30133] Call Trace: [ 1765.414290][T30133] [ 1765.417272][T30133] dump_stack_lvl+0x18c/0x250 [ 1765.422016][T30133] ? show_regs_print_info+0x20/0x20 [ 1765.427266][T30133] ? load_image+0x420/0x420 [ 1765.431853][T30133] ? __might_fault+0xaa/0x120 [ 1765.436590][T30133] ? __lock_acquire+0x7d80/0x7d80 [ 1765.441679][T30133] should_fail_ex+0x394/0x4c0 [ 1765.446435][T30133] _copy_from_user+0x2f/0xe0 [ 1765.451117][T30133] __sys_bpf+0x23e/0x890 [ 1765.455416][T30133] ? bpf_link_show_fdinfo+0x390/0x390 [ 1765.460863][T30133] ? lock_chain_count+0x20/0x20 [ 1765.465796][T30133] __x64_sys_bpf+0x7c/0x90 [ 1765.470274][T30133] do_syscall_64+0x55/0xb0 [ 1765.474751][T30133] ? clear_bhb_loop+0x40/0x90 [ 1765.479500][T30133] ? clear_bhb_loop+0x40/0x90 [ 1765.484232][T30133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.490182][T30133] RIP: 0033:0x7fb08ff9e159 [ 1765.494647][T30133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.514402][T30133] RSP: 002b:00007fb090f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1765.522887][T30133] RAX: ffffffffffffffda RBX: 00007fb090225fa0 RCX: 00007fb08ff9e159 [ 1765.530917][T30133] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1765.538942][T30133] RBP: 00007fb090035024 R08: 0000000000000000 R09: 0000000000000000 [ 1765.546968][T30133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.554991][T30133] R13: 00007fb090226038 R14: 00007fb090225fa0 R15: 00007ffd3bb4e9e8 [ 1765.563030][T30133] [ 1765.674297][T29279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1765.922048][T30144] Unsupported ieee802154 address type: 0 [ 1766.194812][T30154] fuse: Bad value for 'rootmode' [ 1767.281346][T30167] FAULT_INJECTION: forcing a failure. [ 1767.281346][T30167] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1767.371509][T30167] CPU: 1 PID: 30167 Comm: syz.2.7109 Not tainted syzkaller #0 [ 1767.379058][T30167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1767.389192][T30167] Call Trace: [ 1767.392515][T30167] [ 1767.395499][T30167] dump_stack_lvl+0x18c/0x250 [ 1767.400236][T30167] ? show_regs_print_info+0x20/0x20 [ 1767.405488][T30167] ? load_image+0x420/0x420 [ 1767.410037][T30167] ? get_user_pages_fast_only+0xa0/0xa0 [ 1767.415652][T30167] should_fail_ex+0x394/0x4c0 [ 1767.420397][T30167] get_futex_key+0x16f/0x1030 [ 1767.425130][T30167] ? futex_setup_timer+0xc0/0xc0 [ 1767.430124][T30167] futex_wake_op+0x1e8/0xd40 [ 1767.434770][T30167] ? wake_up_q+0xca/0x100 [ 1767.439158][T30167] ? futex_wake+0x4f0/0x4f0 [ 1767.443714][T30167] ? futex_wake+0x42a/0x4f0 [ 1767.448271][T30167] ? futex_wake_mark+0x150/0x150 [ 1767.453258][T30167] ? __lock_acquire+0x7d80/0x7d80 [ 1767.458330][T30167] ? file_end_write+0x159/0x250 [ 1767.463241][T30167] ? vfs_write+0x5de/0x9a0 [ 1767.467721][T30167] do_futex+0x385/0x3e0 [ 1767.471931][T30167] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1767.477877][T30167] __se_sys_futex+0x3a9/0x440 [ 1767.482607][T30167] ? __x64_sys_futex+0xf0/0xf0 [ 1767.487423][T30167] ? __x64_sys_futex+0x21/0xf0 [ 1767.492241][T30167] do_syscall_64+0x55/0xb0 [ 1767.496711][T30167] ? clear_bhb_loop+0x40/0x90 [ 1767.501443][T30167] ? clear_bhb_loop+0x40/0x90 [ 1767.506169][T30167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1767.512130][T30167] RIP: 0033:0x7f18d2d9e159 [ 1767.516592][T30167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.536261][T30167] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1767.544735][T30167] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1767.552758][T30167] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 1767.560773][T30167] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000034fffffd [ 1767.568789][T30167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1767.576806][T30167] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1767.584842][T30167] [ 1767.619982][T30170] loop8: detected capacity change from 0 to 512 [ 1767.632077][T30170] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1767.677496][T30170] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.7110: inode has both inline data and extents flags [ 1767.766032][T30170] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.7110: couldn't read orphan inode 15 (err -117) [ 1767.905445][T30170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1768.038601][T30183] Unsupported ieee802154 address type: 0 [ 1768.124428][T29279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1768.161950][T26393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1768.305140][T30187] fuse: Unknown parameter 'use00000000000000000000' [ 1770.473951][T30218] FAULT_INJECTION: forcing a failure. [ 1770.473951][T30218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.512930][T30218] CPU: 1 PID: 30218 Comm: syz.3.7123 Not tainted syzkaller #0 [ 1770.520478][T30218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1770.530589][T30218] Call Trace: [ 1770.533914][T30218] [ 1770.536893][T30218] dump_stack_lvl+0x18c/0x250 [ 1770.541635][T30218] ? show_regs_print_info+0x20/0x20 [ 1770.547010][T30218] ? load_image+0x420/0x420 [ 1770.551583][T30218] ? __might_fault+0xaa/0x120 [ 1770.556302][T30218] ? __lock_acquire+0x7d80/0x7d80 [ 1770.561402][T30218] should_fail_ex+0x394/0x4c0 [ 1770.566127][T30218] _copy_from_user+0x2f/0xe0 [ 1770.570754][T30218] __sys_bpf+0x23e/0x890 [ 1770.575039][T30218] ? bpf_link_show_fdinfo+0x390/0x390 [ 1770.580453][T30218] ? lock_chain_count+0x20/0x20 [ 1770.585343][T30218] __x64_sys_bpf+0x7c/0x90 [ 1770.589794][T30218] do_syscall_64+0x55/0xb0 [ 1770.594241][T30218] ? clear_bhb_loop+0x40/0x90 [ 1770.598949][T30218] ? clear_bhb_loop+0x40/0x90 [ 1770.603660][T30218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1770.609581][T30218] RIP: 0033:0x7fb08ff9e159 [ 1770.614021][T30218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.633660][T30218] RSP: 002b:00007fb090f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1770.642102][T30218] RAX: ffffffffffffffda RBX: 00007fb090225fa0 RCX: 00007fb08ff9e159 [ 1770.650105][T30218] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1770.658103][T30218] RBP: 00007fb090035024 R08: 0000000000000000 R09: 0000000000000000 [ 1770.666104][T30218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.674109][T30218] R13: 00007fb090226038 R14: 00007fb090225fa0 R15: 00007ffd3bb4e9e8 [ 1770.682119][T30218] [ 1770.737460][T30221] Unsupported ieee802154 address type: 0 [ 1771.013595][T30227] fuse: Unknown parameter 'use00000000000000000000' [ 1771.144503][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1771.384736][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7127'. [ 1775.208590][T30265] FAULT_INJECTION: forcing a failure. [ 1775.208590][T30265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.283335][T30265] CPU: 0 PID: 30265 Comm: syz.8.7135 Not tainted syzkaller #0 [ 1775.290896][T30265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1775.300999][T30265] Call Trace: [ 1775.304324][T30265] [ 1775.307324][T30265] dump_stack_lvl+0x18c/0x250 [ 1775.312075][T30265] ? show_regs_print_info+0x20/0x20 [ 1775.317349][T30265] ? load_image+0x420/0x420 [ 1775.321933][T30265] ? __might_fault+0xaa/0x120 [ 1775.326663][T30265] ? __lock_acquire+0x7d80/0x7d80 [ 1775.331746][T30265] should_fail_ex+0x394/0x4c0 [ 1775.336493][T30265] _copy_from_user+0x2f/0xe0 [ 1775.341131][T30265] __sys_bpf+0x23e/0x890 [ 1775.345442][T30265] ? bpf_link_show_fdinfo+0x390/0x390 [ 1775.350892][T30265] ? lock_chain_count+0x20/0x20 [ 1775.355807][T30265] __x64_sys_bpf+0x7c/0x90 [ 1775.360279][T30265] do_syscall_64+0x55/0xb0 [ 1775.364757][T30265] ? clear_bhb_loop+0x40/0x90 [ 1775.369495][T30265] ? clear_bhb_loop+0x40/0x90 [ 1775.374236][T30265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1775.380187][T30265] RIP: 0033:0x7fa79d59e159 [ 1775.384659][T30265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.404323][T30265] RSP: 002b:00007fa79e444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1775.412792][T30265] RAX: ffffffffffffffda RBX: 00007fa79d825fa0 RCX: 00007fa79d59e159 [ 1775.420806][T30265] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1775.428823][T30265] RBP: 00007fa79d635024 R08: 0000000000000000 R09: 0000000000000000 [ 1775.436840][T30265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.444851][T30265] R13: 00007fa79d826038 R14: 00007fa79d825fa0 R15: 00007ffd0ae6ea48 [ 1775.452888][T30265] [ 1776.262547][T30274] fuse: Unknown parameter 'use00000000000000000000' [ 1776.332654][T29279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1777.957875][T30302] fuse: Unknown parameter 'user_i00000000000000000000' [ 1778.042931][T30306] geneve1: entered promiscuous mode [ 1778.053265][T30305] FAULT_INJECTION: forcing a failure. [ 1778.053265][T30305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.074745][T30306] FAULT_INJECTION: forcing a failure. [ 1778.074745][T30306] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.088756][T30306] CPU: 0 PID: 30306 Comm: syz.3.7146 Not tainted syzkaller #0 [ 1778.096282][T30306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1778.106389][T30306] Call Trace: [ 1778.109715][T30306] [ 1778.112687][T30306] dump_stack_lvl+0x18c/0x250 [ 1778.117436][T30306] ? show_regs_print_info+0x20/0x20 [ 1778.122693][T30306] ? load_image+0x420/0x420 [ 1778.127255][T30306] ? rt6_nlmsg_size+0xd0/0x490 [ 1778.132094][T30306] ? __lock_acquire+0x7d80/0x7d80 [ 1778.137179][T30306] should_fail_ex+0x394/0x4c0 [ 1778.141961][T30306] should_failslab+0x9/0x20 [ 1778.146524][T30306] slab_pre_alloc_hook+0x59/0x300 [ 1778.151616][T30306] ? rt6_nlmsg_size+0x40a/0x490 [ 1778.156522][T30306] ? atomic_notifier_call_chain+0x26/0x180 [ 1778.162390][T30306] kmem_cache_alloc_node+0x5e/0x310 [ 1778.167667][T30306] ? __alloc_skb+0x103/0x2c0 [ 1778.172353][T30306] __alloc_skb+0x103/0x2c0 [ 1778.176833][T30306] inet6_rt_notify+0xb4/0x240 [ 1778.181561][T30306] fib6_del+0x10e4/0x1590 [ 1778.185946][T30306] ? fib6_del+0x671/0x1590 [ 1778.190436][T30306] ? fib6_locate_1+0x6b0/0x6b0 [ 1778.195259][T30306] ? mark_lock+0x94/0x320 [ 1778.199667][T30306] ? fib6_ifdown+0x2b9/0x4b0 [ 1778.204330][T30306] fib6_clean_node+0x290/0x540 [ 1778.209154][T30306] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1778.215367][T30306] ? node_free_rcu+0x30/0x30 [ 1778.220002][T30306] ? fib6_walk_continue+0x2f9/0x8d0 [ 1778.225272][T30306] fib6_walk_continue+0x67f/0x8d0 [ 1778.230380][T30306] fib6_walk+0x149/0x270 [ 1778.234684][T30306] __fib6_clean_all+0x27e/0x3e0 [ 1778.239598][T30306] ? __fib6_clean_all+0xb2/0x3e0 [ 1778.244594][T30306] ? rt6_sync_down_dev+0x160/0x160 [ 1778.249770][T30306] ? fib6_clean_all+0x30/0x30 [ 1778.254509][T30306] ? node_free_rcu+0x30/0x30 [ 1778.259157][T30306] ? rt6_sync_down_dev+0x160/0x160 [ 1778.264350][T30306] rt6_disable_ip+0x12a/0x860 [ 1778.269105][T30306] ? tee_netdev_event+0x42c/0x440 [ 1778.274309][T30306] ? fib6_ifdown+0x4b0/0x4b0 [ 1778.278966][T30306] ? rcu_is_watching+0x15/0xb0 [ 1778.283798][T30306] ? trace_contention_end+0x39/0xe0 [ 1778.289075][T30306] addrconf_ifdown+0x160/0x18a0 [ 1778.294021][T30306] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1778.299719][T30306] ? mutex_unlock+0x10/0x10 [ 1778.304292][T30306] ? addrconf_cleanup+0x1e0/0x1e0 [ 1778.309389][T30306] addrconf_notify+0x6c6/0x1010 [ 1778.314307][T30306] notifier_call_chain+0x18f/0x380 [ 1778.319488][T30306] __dev_notify_flags+0x16f/0x310 [ 1778.324573][T30306] ? __dev_change_flags+0x6a0/0x6a0 [ 1778.329832][T30306] ? __dev_change_flags+0x4d2/0x6a0 [ 1778.335090][T30306] ? dev_get_flags+0x1c0/0x1c0 [ 1778.339920][T30306] dev_change_flags+0xde/0x1a0 [ 1778.344743][T30306] do_setlink+0xb69/0x3f40 [ 1778.349236][T30306] ? arch_stack_walk+0x160/0x190 [ 1778.354234][T30306] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1778.360434][T30306] ? stack_trace_save+0xaa/0x100 [ 1778.365419][T30306] ? stack_trace_snprint+0xf0/0xf0 [ 1778.370618][T30306] ? __nla_validate+0x50/0x50 [ 1778.375385][T30306] ? validate_linkmsg+0x719/0x910 [ 1778.380458][T30306] rtnl_newlink+0x1848/0x2170 [ 1778.385203][T30306] ? rtnl_newlink+0x431/0x2170 [ 1778.390039][T30306] ? rtnl_setlink+0x4e0/0x4e0 [ 1778.394772][T30306] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1778.401021][T30306] ? rtnl_setlink+0x4e0/0x4e0 [ 1778.405744][T30306] rtnetlink_rcv_msg+0x843/0xf90 [ 1778.410741][T30306] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1778.415918][T30306] ? rtnetlink_bind+0x80/0x80 [ 1778.420653][T30306] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1778.426691][T30306] ? lock_chain_count+0x20/0x20 [ 1778.431586][T30306] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1778.437008][T30306] ? lockdep_hardirqs_on+0x98/0x150 [ 1778.442252][T30306] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1778.447676][T30306] ? _local_bh_enable+0xa0/0xa0 [ 1778.452606][T30306] ? __dev_queue_xmit+0x272/0x37e0 [ 1778.457784][T30306] ? __dev_queue_xmit+0x1329/0x37e0 [ 1778.463078][T30306] ? __dev_queue_xmit+0x272/0x37e0 [ 1778.468291][T30306] ? ref_tracker_free+0x686/0x830 [ 1778.473379][T30306] netlink_rcv_skb+0x235/0x4c0 [ 1778.478195][T30306] ? rtnetlink_bind+0x80/0x80 [ 1778.482931][T30306] ? netlink_ack+0x1160/0x1160 [ 1778.487759][T30306] ? __lock_acquire+0x7d80/0x7d80 [ 1778.492849][T30306] ? netlink_deliver_tap+0x2e/0x1b0 [ 1778.498108][T30306] netlink_unicast+0x7b1/0x930 [ 1778.502941][T30306] netlink_sendmsg+0x8d0/0xbf0 [ 1778.507762][T30306] ? netlink_getsockopt+0x590/0x590 [ 1778.513010][T30306] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1778.518615][T30306] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1778.523952][T30306] ? security_socket_sendmsg+0x80/0xa0 [ 1778.529455][T30306] ? netlink_getsockopt+0x590/0x590 [ 1778.534740][T30306] ____sys_sendmsg+0x61b/0x980 [ 1778.539615][T30306] ? __asan_memset+0x22/0x40 [ 1778.544264][T30306] ? __sys_sendmsg_sock+0x30/0x30 [ 1778.549350][T30306] ? __import_iovec+0x5f2/0x850 [ 1778.554288][T30306] ? import_iovec+0x73/0xa0 [ 1778.558867][T30306] ___sys_sendmsg+0x2a6/0x360 [ 1778.563613][T30306] ? __sys_sendmsg+0x2b0/0x2b0 [ 1778.568492][T30306] __se_sys_sendmsg+0x1d0/0x2c0 [ 1778.573399][T30306] ? __x64_sys_sendmsg+0x80/0x80 [ 1778.578489][T30306] ? lockdep_hardirqs_on+0x98/0x150 [ 1778.583758][T30306] do_syscall_64+0x55/0xb0 [ 1778.588232][T30306] ? clear_bhb_loop+0x40/0x90 [ 1778.592967][T30306] ? clear_bhb_loop+0x40/0x90 [ 1778.597703][T30306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1778.603686][T30306] RIP: 0033:0x7fb08ff9e159 [ 1778.608154][T30306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.627840][T30306] RSP: 002b:00007fb090f55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1778.636313][T30306] RAX: ffffffffffffffda RBX: 00007fb090225fa0 RCX: 00007fb08ff9e159 [ 1778.644324][T30306] RDX: 0000000002000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1778.652346][T30306] RBP: 00007fb090035024 R08: 0000000000000000 R09: 0000000000000000 [ 1778.660385][T30306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1778.668417][T30306] R13: 00007fb090226038 R14: 00007fb090225fa0 R15: 00007ffd3bb4e9e8 [ 1778.676550][T30306] [ 1778.679612][T30305] CPU: 1 PID: 30305 Comm: syz.2.7145 Not tainted syzkaller #0 [ 1778.687161][T30305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1778.697270][T30305] Call Trace: [ 1778.700599][T30305] [ 1778.703585][T30305] dump_stack_lvl+0x18c/0x250 [ 1778.708329][T30305] ? show_regs_print_info+0x20/0x20 [ 1778.713581][T30305] ? load_image+0x420/0x420 [ 1778.718135][T30305] ? __might_fault+0xaa/0x120 [ 1778.722866][T30305] ? __lock_acquire+0x7d80/0x7d80 [ 1778.727957][T30305] should_fail_ex+0x394/0x4c0 [ 1778.732701][T30305] _copy_from_user+0x2f/0xe0 [ 1778.737352][T30305] __sys_bpf+0x23e/0x890 [ 1778.741650][T30305] ? bpf_link_show_fdinfo+0x390/0x390 [ 1778.747092][T30305] ? lock_chain_count+0x20/0x20 [ 1778.752016][T30305] __x64_sys_bpf+0x7c/0x90 [ 1778.756486][T30305] do_syscall_64+0x55/0xb0 [ 1778.760974][T30305] ? clear_bhb_loop+0x40/0x90 [ 1778.765708][T30305] ? clear_bhb_loop+0x40/0x90 [ 1778.770423][T30305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1778.776353][T30305] RIP: 0033:0x7f18d2d9e159 [ 1778.780813][T30305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.800452][T30305] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1778.808900][T30305] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1778.816907][T30305] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1778.824905][T30305] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1778.832907][T30305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1778.840910][T30305] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1778.848923][T30305] [ 1779.263006][ T3533] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1779.721160][T30330] loop9: detected capacity change from 0 to 4096 [ 1779.740942][T30334] FAULT_INJECTION: forcing a failure. [ 1779.740942][T30334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.764132][T30330] EXT4-fs: inline encryption not supported [ 1779.781100][T30334] CPU: 0 PID: 30334 Comm: syz.2.7154 Not tainted syzkaller #0 [ 1779.788668][T30334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1779.798782][T30334] Call Trace: [ 1779.802109][T30334] [ 1779.805090][T30334] dump_stack_lvl+0x18c/0x250 [ 1779.809834][T30334] ? show_regs_print_info+0x20/0x20 [ 1779.815103][T30334] ? load_image+0x420/0x420 [ 1779.819675][T30334] ? __might_fault+0xaa/0x120 [ 1779.824411][T30334] ? __lock_acquire+0x7d80/0x7d80 [ 1779.829493][T30334] ? __virt_addr_valid+0x10c/0x380 [ 1779.834671][T30334] should_fail_ex+0x394/0x4c0 [ 1779.839415][T30334] _copy_to_user+0x2f/0xa0 [ 1779.843899][T30334] bpf_verifier_vlog+0x4e6/0x840 [ 1779.848912][T30334] __btf_verifier_log+0xe3/0x140 [ 1779.853925][T30334] ? btf_check_sec_info+0x350/0x350 [ 1779.859190][T30334] ? __lock_acquire+0x7d80/0x7d80 [ 1779.864264][T30334] ? __virt_addr_valid+0x10c/0x380 [ 1779.869423][T30334] ? btf_parse_hdr+0x1f0/0x700 [ 1779.874224][T30334] btf_parse_hdr+0x3ee/0x700 [ 1779.878875][T30334] btf_new_fd+0x397/0x9e0 [ 1779.883262][T30334] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1779.888421][T30334] ? capable+0x88/0xe0 [ 1779.892589][T30334] __sys_bpf+0x670/0x890 [ 1779.896874][T30334] ? bpf_link_show_fdinfo+0x390/0x390 [ 1779.902288][T30334] ? lock_chain_count+0x20/0x20 [ 1779.907172][T30334] __x64_sys_bpf+0x7c/0x90 [ 1779.911617][T30334] do_syscall_64+0x55/0xb0 [ 1779.916064][T30334] ? clear_bhb_loop+0x40/0x90 [ 1779.920790][T30334] ? clear_bhb_loop+0x40/0x90 [ 1779.925496][T30334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1779.931420][T30334] RIP: 0033:0x7f18d2d9e159 [ 1779.935868][T30334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.955510][T30334] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1779.963963][T30334] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1779.971960][T30334] RDX: 0000000000000028 RSI: 0000200000000d80 RDI: 0000000000000012 [ 1779.979979][T30334] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1779.987986][T30334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1779.995988][T30334] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1780.004010][T30334] [ 1780.082944][T30330] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1780.103348][T30330] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1780.164193][T30330] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1780.193293][T30330] System zones: 0-5 [ 1780.255300][T30330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.497255][T26522] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1781.689771][T30352] fuse: Unknown parameter 'user_i00000000000000000000' [ 1781.868693][T30357] FAULT_INJECTION: forcing a failure. [ 1781.868693][T30357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.905462][T30357] CPU: 0 PID: 30357 Comm: syz.9.7158 Not tainted syzkaller #0 [ 1781.913014][T30357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1781.923126][T30357] Call Trace: [ 1781.926457][T30357] [ 1781.929438][T30357] dump_stack_lvl+0x18c/0x250 [ 1781.934189][T30357] ? show_regs_print_info+0x20/0x20 [ 1781.939457][T30357] ? load_image+0x420/0x420 [ 1781.944032][T30357] ? __might_fault+0xaa/0x120 [ 1781.948771][T30357] ? __lock_acquire+0x7d80/0x7d80 [ 1781.953898][T30357] should_fail_ex+0x394/0x4c0 [ 1781.958663][T30357] _copy_from_user+0x2f/0xe0 [ 1781.963335][T30357] __sys_bpf+0x23e/0x890 [ 1781.967638][T30357] ? bpf_link_show_fdinfo+0x390/0x390 [ 1781.973099][T30357] ? lock_chain_count+0x20/0x20 [ 1781.978022][T30357] __x64_sys_bpf+0x7c/0x90 [ 1781.982500][T30357] do_syscall_64+0x55/0xb0 [ 1781.986970][T30357] ? clear_bhb_loop+0x40/0x90 [ 1781.991705][T30357] ? clear_bhb_loop+0x40/0x90 [ 1781.996469][T30357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1782.002412][T30357] RIP: 0033:0x7ff57019e159 [ 1782.006873][T30357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.026532][T30357] RSP: 002b:00007ff5710a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1782.034983][T30357] RAX: ffffffffffffffda RBX: 00007ff570425fa0 RCX: 00007ff57019e159 [ 1782.042993][T30357] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1782.051017][T30357] RBP: 00007ff570235024 R08: 0000000000000000 R09: 0000000000000000 [ 1782.059030][T30357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1782.067051][T30357] R13: 00007ff570426038 R14: 00007ff570425fa0 R15: 00007fff2b1cf538 [ 1782.075078][T30357] [ 1782.317407][T30361] loop2: detected capacity change from 0 to 8192 [ 1782.490800][T30367] loop9: detected capacity change from 0 to 512 [ 1782.525250][T30367] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1782.846299][T26826] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1783.341583][T30383] loop9: detected capacity change from 0 to 256 [ 1783.513276][T30389] FAULT_INJECTION: forcing a failure. [ 1783.513276][T30389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1783.588591][T30389] CPU: 0 PID: 30389 Comm: syz.8.7166 Not tainted syzkaller #0 [ 1783.596146][T30389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1783.606255][T30389] Call Trace: [ 1783.609583][T30389] [ 1783.612553][T30389] dump_stack_lvl+0x18c/0x250 [ 1783.617290][T30389] ? show_regs_print_info+0x20/0x20 [ 1783.622546][T30389] ? load_image+0x420/0x420 [ 1783.627103][T30389] ? __might_fault+0xaa/0x120 [ 1783.631833][T30389] ? __lock_acquire+0x7d80/0x7d80 [ 1783.636907][T30389] should_fail_ex+0x394/0x4c0 [ 1783.641735][T30389] _copy_from_user+0x2f/0xe0 [ 1783.646385][T30389] do_ip6t_set_ctl+0x6b0/0xe10 [ 1783.651220][T30389] ? ip6t_unregister_table_exit+0x230/0x230 [ 1783.657171][T30389] ? __lock_acquire+0x7d80/0x7d80 [ 1783.662256][T30389] ? rcu_is_watching+0x15/0xb0 [ 1783.667075][T30389] ? trace_contention_end+0x39/0xe0 [ 1783.672345][T30389] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1783.678049][T30389] ? mutex_unlock+0x10/0x10 [ 1783.682624][T30389] nf_setsockopt+0x263/0x280 [ 1783.687279][T30389] rawv6_setsockopt+0x276/0x5d0 [ 1783.692373][T30389] ? raw6_destroy+0x30/0x30 [ 1783.696944][T30389] ? __fget_files+0x28/0x460 [ 1783.701593][T30389] ? aa_sock_opt_perm+0x74/0x100 [ 1783.706581][T30389] ? sock_common_setsockopt+0x36/0xc0 [ 1783.712001][T30389] ? sock_common_recvmsg+0x190/0x190 [ 1783.717349][T30389] do_sock_setsockopt+0x175/0x1a0 [ 1783.722430][T30389] ? __fdget+0x180/0x210 [ 1783.726733][T30389] __x64_sys_setsockopt+0x182/0x200 [ 1783.732000][T30389] do_syscall_64+0x55/0xb0 [ 1783.736465][T30389] ? clear_bhb_loop+0x40/0x90 [ 1783.741217][T30389] ? clear_bhb_loop+0x40/0x90 [ 1783.745969][T30389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1783.751939][T30389] RIP: 0033:0x7fa79d59e159 [ 1783.756488][T30389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1783.776249][T30389] RSP: 002b:00007fa79e444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1783.784722][T30389] RAX: ffffffffffffffda RBX: 00007fa79d825fa0 RCX: 00007fa79d59e159 [ 1783.792743][T30389] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 1783.800763][T30389] RBP: 00007fa79d635024 R08: 00000000000002d8 R09: 0000000000000000 [ 1783.808778][T30389] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 1783.816808][T30389] R13: 00007fa79d826038 R14: 00007fa79d825fa0 R15: 00007ffd0ae6ea48 [ 1783.824841][T30389] [ 1784.739433][T30404] fuse: Unknown parameter 'user_i00000000000000000000' [ 1784.981628][T30402] FAULT_INJECTION: forcing a failure. [ 1784.981628][T30402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.385515][T30402] CPU: 1 PID: 30402 Comm: syz.2.7169 Not tainted syzkaller #0 [ 1785.393067][T30402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.403166][T30402] Call Trace: [ 1785.406488][T30402] [ 1785.409453][T30402] dump_stack_lvl+0x18c/0x250 [ 1785.414191][T30402] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1785.419888][T30402] ? show_regs_print_info+0x20/0x20 [ 1785.425136][T30402] ? load_image+0x420/0x420 [ 1785.429719][T30402] should_fail_ex+0x394/0x4c0 [ 1785.434466][T30402] _copy_from_user+0x2f/0xe0 [ 1785.439103][T30402] __sys_bpf+0x23e/0x890 [ 1785.443400][T30402] ? bpf_link_show_fdinfo+0x390/0x390 [ 1785.448834][T30402] ? lock_chain_count+0x20/0x20 [ 1785.453746][T30402] __x64_sys_bpf+0x7c/0x90 [ 1785.458219][T30402] do_syscall_64+0x55/0xb0 [ 1785.462681][T30402] ? clear_bhb_loop+0x40/0x90 [ 1785.467405][T30402] ? clear_bhb_loop+0x40/0x90 [ 1785.472134][T30402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1785.478075][T30402] RIP: 0033:0x7f18d2d9e159 [ 1785.482531][T30402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.502184][T30402] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1785.510665][T30402] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1785.518682][T30402] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1785.526697][T30402] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1785.534714][T30402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1785.542724][T30402] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1785.550773][T30402] [ 1785.754270][T29012] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1788.275557][T30439] fuse: Unknown parameter 'user_id00000000000000000000' [ 1788.675834][T30450] FAULT_INJECTION: forcing a failure. [ 1788.675834][T30450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.723280][T30450] CPU: 1 PID: 30450 Comm: syz.8.7182 Not tainted syzkaller #0 [ 1788.730816][T30450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1788.740907][T30450] Call Trace: [ 1788.744219][T30450] [ 1788.747177][T30450] dump_stack_lvl+0x18c/0x250 [ 1788.751896][T30450] ? show_regs_print_info+0x20/0x20 [ 1788.757132][T30450] ? load_image+0x420/0x420 [ 1788.761669][T30450] ? __might_fault+0xaa/0x120 [ 1788.766395][T30450] ? __lock_acquire+0x7d80/0x7d80 [ 1788.771453][T30450] should_fail_ex+0x394/0x4c0 [ 1788.776174][T30450] _copy_from_user+0x2f/0xe0 [ 1788.780815][T30450] __sys_bpf+0x23e/0x890 [ 1788.785112][T30450] ? bpf_link_show_fdinfo+0x390/0x390 [ 1788.790531][T30450] ? lock_chain_count+0x20/0x20 [ 1788.795518][T30450] __x64_sys_bpf+0x7c/0x90 [ 1788.799970][T30450] do_syscall_64+0x55/0xb0 [ 1788.804424][T30450] ? clear_bhb_loop+0x40/0x90 [ 1788.809133][T30450] ? clear_bhb_loop+0x40/0x90 [ 1788.813841][T30450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1788.819764][T30450] RIP: 0033:0x7fa79d59e159 [ 1788.824209][T30450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.843864][T30450] RSP: 002b:00007fa79e444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1788.852324][T30450] RAX: ffffffffffffffda RBX: 00007fa79d825fa0 RCX: 00007fa79d59e159 [ 1788.860358][T30450] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1788.868386][T30450] RBP: 00007fa79d635024 R08: 0000000000000000 R09: 0000000000000000 [ 1788.876393][T30450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1788.884398][T30450] R13: 00007fa79d826038 R14: 00007fa79d825fa0 R15: 00007ffd0ae6ea48 [ 1788.892409][T30450] [ 1789.737196][T30461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.745104][T30461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.791862][T29278] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1790.068431][T30468] FAULT_INJECTION: forcing a failure. [ 1790.068431][T30468] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.117326][T30468] CPU: 1 PID: 30468 Comm: syz.8.7186 Not tainted syzkaller #0 [ 1790.124895][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1790.135003][T30468] Call Trace: [ 1790.138329][T30468] [ 1790.141312][T30468] dump_stack_lvl+0x18c/0x250 [ 1790.146064][T30468] ? show_regs_print_info+0x20/0x20 [ 1790.151321][T30468] ? load_image+0x420/0x420 [ 1790.155883][T30468] ? __might_sleep+0xe0/0xe0 [ 1790.160539][T30468] ? __lock_acquire+0x7d80/0x7d80 [ 1790.165628][T30468] should_fail_ex+0x394/0x4c0 [ 1790.170382][T30468] should_failslab+0x9/0x20 [ 1790.174958][T30468] slab_pre_alloc_hook+0x59/0x300 [ 1790.180051][T30468] ? sock_update_netprioidx+0x4e/0x390 [ 1790.185588][T30468] kmem_cache_alloc+0x5a/0x2c0 [ 1790.190421][T30468] ? kcm_create+0x11b/0x550 [ 1790.195075][T30468] kcm_create+0x11b/0x550 [ 1790.199467][T30468] __sock_create+0x49e/0x940 [ 1790.204123][T30468] __sys_socket+0xd7/0x1b0 [ 1790.208604][T30468] __x64_sys_socket+0x7a/0x90 [ 1790.213338][T30468] do_syscall_64+0x55/0xb0 [ 1790.217855][T30468] ? clear_bhb_loop+0x40/0x90 [ 1790.222594][T30468] ? clear_bhb_loop+0x40/0x90 [ 1790.227334][T30468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.233291][T30468] RIP: 0033:0x7fa79d59e159 [ 1790.237762][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.257430][T30468] RSP: 002b:00007fa79e444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1790.265918][T30468] RAX: ffffffffffffffda RBX: 00007fa79d825fa0 RCX: 00007fa79d59e159 [ 1790.273951][T30468] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 1790.281973][T30468] RBP: 00007fa79d635024 R08: 0000000000000000 R09: 0000000000000000 [ 1790.290002][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.298030][T30468] R13: 00007fa79d826038 R14: 00007fa79d825fa0 R15: 00007ffd0ae6ea48 [ 1790.306073][T30468] [ 1790.402241][T30470] loop3: detected capacity change from 0 to 4096 [ 1790.533970][T30470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1790.792154][T28357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.012256][T30485] fuse: Unknown parameter 'user_id00000000000000000000' [ 1791.057839][T29278] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1791.144781][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 90 seconds [ 1791.185712][T30490] FAULT_INJECTION: forcing a failure. [ 1791.185712][T30490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.199137][T30490] CPU: 0 PID: 30490 Comm: syz.2.7191 Not tainted syzkaller #0 [ 1791.206674][T30490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1791.216798][T30490] Call Trace: [ 1791.220125][T30490] [ 1791.223092][T30490] dump_stack_lvl+0x18c/0x250 [ 1791.227832][T30490] ? show_regs_print_info+0x20/0x20 [ 1791.233084][T30490] ? load_image+0x420/0x420 [ 1791.237639][T30490] ? __might_fault+0xaa/0x120 [ 1791.242371][T30490] ? __lock_acquire+0x7d80/0x7d80 [ 1791.247451][T30490] should_fail_ex+0x394/0x4c0 [ 1791.252201][T30490] _copy_from_user+0x2f/0xe0 [ 1791.256849][T30490] __sys_bpf+0x23e/0x890 [ 1791.261148][T30490] ? bpf_link_show_fdinfo+0x390/0x390 [ 1791.266605][T30490] ? lock_chain_count+0x20/0x20 [ 1791.271532][T30490] __x64_sys_bpf+0x7c/0x90 [ 1791.275999][T30490] do_syscall_64+0x55/0xb0 [ 1791.280507][T30490] ? clear_bhb_loop+0x40/0x90 [ 1791.285246][T30490] ? clear_bhb_loop+0x40/0x90 [ 1791.289980][T30490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1791.295927][T30490] RIP: 0033:0x7f18d2d9e159 [ 1791.300393][T30490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.320058][T30490] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1791.328531][T30490] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1791.336554][T30490] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1791.344565][T30490] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1791.352580][T30490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1791.360598][T30490] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1791.368630][T30490] [ 1791.794010][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.986930][T30512] Unsupported ieee802154 address type: 0 [ 1794.511667][T30523] fuse: Unknown parameter 'user_id00000000000000000000' [ 1795.030680][T30528] FAULT_INJECTION: forcing a failure. [ 1795.030680][T30528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.052194][T30528] CPU: 0 PID: 30528 Comm: syz.2.7202 Not tainted syzkaller #0 [ 1795.059738][T30528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1795.069857][T30528] Call Trace: [ 1795.073178][T30528] [ 1795.076140][T30528] dump_stack_lvl+0x18c/0x250 [ 1795.080864][T30528] ? show_regs_print_info+0x20/0x20 [ 1795.086115][T30528] ? load_image+0x420/0x420 [ 1795.090664][T30528] ? __might_fault+0xaa/0x120 [ 1795.095387][T30528] ? __lock_acquire+0x7d80/0x7d80 [ 1795.100465][T30528] should_fail_ex+0x394/0x4c0 [ 1795.105193][T30528] _copy_from_user+0x2f/0xe0 [ 1795.109816][T30528] __sys_bpf+0x23e/0x890 [ 1795.114091][T30528] ? bpf_link_show_fdinfo+0x390/0x390 [ 1795.119503][T30528] ? lock_chain_count+0x20/0x20 [ 1795.124393][T30528] __x64_sys_bpf+0x7c/0x90 [ 1795.128836][T30528] do_syscall_64+0x55/0xb0 [ 1795.133323][T30528] ? clear_bhb_loop+0x40/0x90 [ 1795.138037][T30528] ? clear_bhb_loop+0x40/0x90 [ 1795.142763][T30528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.148720][T30528] RIP: 0033:0x7f18d2d9e159 [ 1795.153183][T30528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.172833][T30528] RSP: 002b:00007f18d3bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1795.181279][T30528] RAX: ffffffffffffffda RBX: 00007f18d3025fa0 RCX: 00007f18d2d9e159 [ 1795.189291][T30528] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1795.197292][T30528] RBP: 00007f18d2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1795.205326][T30528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.213426][T30528] R13: 00007f18d3026038 R14: 00007f18d3025fa0 R15: 00007ffe13d67de8 [ 1795.221465][T30528] [ 1795.387801][T26826] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1796.731614][T30551] Unsupported ieee802154 address type: 0 [ 1797.431478][T30569] fuse: Bad value for 'fd' [ 1797.544292][T30576] FAULT_INJECTION: forcing a failure. [ 1797.544292][T30576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.592700][T30576] CPU: 0 PID: 30576 Comm: syz.3.7212 Not tainted syzkaller #0 [ 1797.600278][T30576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1797.610395][T30576] Call Trace: [ 1797.613729][T30576] [ 1797.616706][T30576] dump_stack_lvl+0x18c/0x250 [ 1797.621451][T30576] ? show_regs_print_info+0x20/0x20 [ 1797.626713][T30576] ? load_image+0x420/0x420 [ 1797.631282][T30576] ? __might_fault+0xaa/0x120 [ 1797.636028][T30576] ? __lock_acquire+0x7d80/0x7d80 [ 1797.641110][T30576] should_fail_ex+0x394/0x4c0 [ 1797.645856][T30576] _copy_from_user+0x2f/0xe0 [ 1797.650511][T30576] __sys_bpf+0x23e/0x890 [ 1797.654813][T30576] ? bpf_link_show_fdinfo+0x390/0x390 [ 1797.660261][T30576] ? lock_chain_count+0x20/0x20 [ 1797.665190][T30576] __x64_sys_bpf+0x7c/0x90 [ 1797.669676][T30576] do_syscall_64+0x55/0xb0 [ 1797.674170][T30576] ? clear_bhb_loop+0x40/0x90 [ 1797.678914][T30576] ? clear_bhb_loop+0x40/0x90 [ 1797.683653][T30576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1797.689614][T30576] RIP: 0033:0x7fb08ff9e159 [ 1797.694099][T30576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.713761][T30576] RSP: 002b:00007fb090f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1797.722249][T30576] RAX: ffffffffffffffda RBX: 00007fb090225fa0 RCX: 00007fb08ff9e159 [ 1797.730304][T30576] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1797.738340][T30576] RBP: 00007fb090035024 R08: 0000000000000000 R09: 0000000000000000 [ 1797.746373][T30576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.754401][T30576] R13: 00007fb090226038 R14: 00007fb090225fa0 R15: 00007ffd3bb4e9e8 [ 1797.762446][T30576] [ 1798.028027][T26826] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1798.344095][T30597] Unsupported ieee802154 address type: 0 [ 1799.683890][T30619] fuse: Bad value for 'fd' [ 1799.873404][T30623] FAULT_INJECTION: forcing a failure. [ 1799.873404][T30623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.912933][T30623] CPU: 0 PID: 30623 Comm: syz.8.7223 Not tainted syzkaller #0 [ 1799.920487][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1799.930593][T30623] Call Trace: [ 1799.933927][T30623] [ 1799.936902][T30623] dump_stack_lvl+0x18c/0x250 [ 1799.941675][T30623] ? show_regs_print_info+0x20/0x20 [ 1799.946927][T30623] ? load_image+0x420/0x420 [ 1799.951482][T30623] ? __might_fault+0xaa/0x120 [ 1799.956219][T30623] ? __lock_acquire+0x7d80/0x7d80 [ 1799.961312][T30623] should_fail_ex+0x394/0x4c0 [ 1799.966060][T30623] _copy_from_user+0x2f/0xe0 [ 1799.970706][T30623] __sys_bpf+0x23e/0x890 [ 1799.975011][T30623] ? bpf_link_show_fdinfo+0x390/0x390 [ 1799.980451][T30623] ? lock_chain_count+0x20/0x20 [ 1799.985374][T30623] __x64_sys_bpf+0x7c/0x90 [ 1799.989853][T30623] do_syscall_64+0x55/0xb0 [ 1799.994332][T30623] ? clear_bhb_loop+0x40/0x90 [ 1799.999059][T30623] ? clear_bhb_loop+0x40/0x90 [ 1800.003795][T30623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1800.009741][T30623] RIP: 0033:0x7fa79d59e159 [ 1800.014215][T30623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.033873][T30623] RSP: 002b:00007fa79e444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1800.042346][T30623] RAX: ffffffffffffffda RBX: 00007fa79d825fa0 RCX: 00007fa79d59e159 [ 1800.050371][T30623] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1800.058393][T30623] RBP: 00007fa79d635024 R08: 0000000000000000 R09: 0000000000000000 [ 1800.066446][T30623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1800.074474][T30623] R13: 00007fa79d826038 R14: 00007fa79d825fa0 R15: 00007ffd0ae6ea48 [ 1800.082518][T30623] [ 1800.085729][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.352885][T28924] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1800.575496][T30631] loop2: detected capacity change from 0 to 512 [ 1800.659732][T30631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1800.710733][T30631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1800.747311][T30631] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1801.711835][T27917] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1801.944118][T30646] fuse: Bad value for 'fd' [ 1802.380704][T28920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1802.582046][T30659] FAULT_INJECTION: forcing a failure. [ 1802.582046][T30659] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1802.624294][T30659] CPU: 0 PID: 30659 Comm: syz.9.7237 Not tainted syzkaller #0 [ 1802.631851][T30659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1802.641965][T30659] Call Trace: [ 1802.645290][T30659] [ 1802.648259][T30659] dump_stack_lvl+0x18c/0x250 [ 1802.653005][T30659] ? show_regs_print_info+0x20/0x20 [ 1802.658265][T30659] ? load_image+0x420/0x420 [ 1802.662857][T30659] ? stack_trace_save+0xaa/0x100 [ 1802.667937][T30659] should_fail_ex+0x394/0x4c0 [ 1802.672683][T30659] get_futex_key+0x136/0x1030 [ 1802.677435][T30659] ? futex_setup_timer+0xc0/0xc0 [ 1802.682436][T30659] futex_wake+0x127/0x4f0 [ 1802.686818][T30659] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1802.692862][T30659] ? futex_wake_mark+0x150/0x150 [ 1802.697866][T30659] ? lockdep_hardirqs_on+0x98/0x150 [ 1802.703141][T30659] do_futex+0x35d/0x3e0 [ 1802.707347][T30659] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1802.713334][T30659] __se_sys_futex+0x3a9/0x440 [ 1802.718085][T30659] ? __x64_sys_futex+0xf0/0xf0 [ 1802.722920][T30659] ? __x64_sys_futex+0x21/0xf0 [ 1802.727738][T30659] do_syscall_64+0x55/0xb0 [ 1802.732205][T30659] ? clear_bhb_loop+0x40/0x90 [ 1802.736938][T30659] ? clear_bhb_loop+0x40/0x90 [ 1802.741698][T30659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1802.747651][T30659] RIP: 0033:0x7ff57019e159 [ 1802.752118][T30659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.771779][T30659] RSP: 002b:00007ff5710a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1802.780231][T30659] RAX: ffffffffffffffda RBX: 00007ff570425fa8 RCX: 00007ff57019e159 [ 1802.788240][T30659] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff570425fac [ 1802.796240][T30659] RBP: 00007ff570425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1802.804251][T30659] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1802.812243][T30659] R13: 00007ff570426038 R14: 00007fff2b1cf450 R15: 00007fff2b1cf538 [ 1802.820266][T30659] [ 1802.823356][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.886686][T30660] bond1: option arp_interval: invalid value (18446744073709551611) [ 1802.942346][T30660] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1802.987958][T30660] bond1 (unregistering): Released all slaves [ 1803.116845][T30664] loop8: detected capacity change from 0 to 512 [ 1803.156541][T30664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1803.222113][T30664] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1803.264886][T30664] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1804.518928][T30674] fuse: Unknown parameter '0x0000000000000003' [ 1804.836415][T26393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.580913][T26826] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1807.221584][T30712] fuse: Unknown parameter '0x0000000000000003' [ 1807.334850][T30715] FAULT_INJECTION: forcing a failure. [ 1807.334850][T30715] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.362526][T30715] CPU: 1 PID: 30715 Comm: syz.2.7252 Not tainted syzkaller #0 [ 1807.370083][T30715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1807.380191][T30715] Call Trace: [ 1807.383521][T30715] [ 1807.386502][T30715] dump_stack_lvl+0x18c/0x250 [ 1807.391240][T30715] ? show_regs_print_info+0x20/0x20 [ 1807.396521][T30715] ? load_image+0x420/0x420 [ 1807.401085][T30715] ? __might_sleep+0xe0/0xe0 [ 1807.405739][T30715] ? __lock_acquire+0x7d80/0x7d80 [ 1807.410821][T30715] should_fail_ex+0x394/0x4c0 [ 1807.415558][T30715] should_failslab+0x9/0x20 [ 1807.420121][T30715] slab_pre_alloc_hook+0x59/0x300 [ 1807.425213][T30715] kmem_cache_alloc+0x5a/0x2c0 [ 1807.430032][T30715] ? getname_kernel+0x5a/0x2f0 [ 1807.434908][T30715] getname_kernel+0x5a/0x2f0 [ 1807.439567][T30715] do_coredump+0x1c5b/0x24a0 [ 1807.444222][T30715] ? nfs_stat_to_errno+0x170/0x170 [ 1807.449406][T30715] ? lock_chain_count+0x20/0x20 [ 1807.454321][T30715] ? _raw_spin_unlock_irq+0x23/0x50 [ 1807.459563][T30715] ? lockdep_hardirqs_on+0x98/0x150 [ 1807.464930][T30715] get_signal+0x10da/0x1390 [ 1807.469510][T30715] arch_do_signal_or_restart+0xc2/0x7b0 [ 1807.475120][T30715] ? _raw_spin_unlock+0x40/0x40 [ 1807.480022][T30715] ? get_sigframe_size+0x20/0x20 [ 1807.485022][T30715] ? __send_signal_locked+0xb42/0xe00 [ 1807.490466][T30715] ? exit_to_user_mode_loop+0x3b/0x110 [ 1807.495991][T30715] exit_to_user_mode_loop+0x70/0x110 [ 1807.501334][T30715] exit_to_user_mode_prepare+0xee/0x180 [ 1807.506940][T30715] syscall_exit_to_user_mode+0x1a/0x50 [ 1807.512460][T30715] do_syscall_64+0x61/0xb0 [ 1807.516923][T30715] ? clear_bhb_loop+0x40/0x90 [ 1807.521653][T30715] ? clear_bhb_loop+0x40/0x90 [ 1807.526408][T30715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1807.532351][T30715] RIP: 0033:0x7f18d2d9e159 [ 1807.536831][T30715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.556494][T30715] RSP: 002b:00007f18d3bc90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1807.564969][T30715] RAX: 00000000000000ca RBX: 00007f18d3025fa8 RCX: 00007f18d2d9e159 [ 1807.572997][T30715] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18d3025fac [ 1807.581022][T30715] RBP: 00007f18d3025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1807.589064][T30715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.597094][T30715] R13: 00007f18d3026038 R14: 00007ffe13d67d00 R15: 00007ffe13d67de8 [ 1807.605154][T30715] [ 1808.467869][T30704] loop8: detected capacity change from 0 to 256 [ 1808.515078][T30704] FAT-fs (loop8): Unrecognized mount option "shortname=winmt" or missing value [ 1808.791281][T29012] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1810.834751][T30762] fuse: Unknown parameter '0x0000000000000003' [ 1811.432433][T29001] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1813.360199][T30804] fuse: Unknown parameter '0x0000000000000003' [ 1814.311476][T28920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1814.641648][T30823] tipc: Failed to obtain node identity [ 1814.662933][T30823] tipc: Enabling of bearer rejected, failed to enable media [ 1815.925900][T30841] fuse: Unknown parameter '0x0000000000000003' [ 1817.547179][T26826] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1817.643942][T30868] cgroup: No subsys list or none specified [ 1818.635111][T30881] fuse: Unknown parameter '0x0000000000000003' [ 1820.273965][T28761] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1820.728276][T30919] loop8: detected capacity change from 0 to 512 [ 1820.802210][T30919] EXT4-fs: inline encryption not supported [ 1820.813210][T30919] ext4: Unknown parameter 'appraise_type' [ 1820.887410][T30094] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1821.842001][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 120 seconds [ 1822.026047][T30932] fuse: Unknown parameter 'fd0x0000000000000003' [ 1823.439921][T28920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1823.938703][T30965] loop3: detected capacity change from 0 to 512 [ 1824.069353][T30965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1824.284958][T30965] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1824.822908][T30965] capability: warning: `syz.3.7315' uses 32-bit capabilities (legacy support in use) [ 1825.114036][T30979] fuse: Unknown parameter 'fd0x0000000000000003' [ 1825.163549][T28357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1827.087561][T29001] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1828.329731][T31022] syzkaller0: entered promiscuous mode [ 1828.346571][T31022] syzkaller0: entered allmulticast mode [ 1828.594371][T31027] syzkaller0: entered promiscuous mode [ 1828.613682][T31027] syzkaller0: entered allmulticast mode [ 1828.652123][T31027] tipc: Enabled bearer , priority 0 [ 1828.675499][T31026] tipc: Resetting bearer [ 1828.814483][T31026] tipc: Disabling bearer [ 1829.032467][T31038] fuse: Unknown parameter 'fd0x0000000000000003' [ 1830.428031][T29279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1830.699747][T31060] loop2: detected capacity change from 0 to 8 [ 1832.511219][T31086] tipc: Enabling of bearer rejected, failed to enable media [ 1833.686278][T29278] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1835.138795][T31122] tipc: Enabling of bearer rejected, failed to enable media [ 1836.015546][T29279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1837.052715][T31159] tipc: Enabling of bearer rejected, failed to enable media [ 1838.686679][ T3533] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1840.714947][T31218] loop3: detected capacity change from 0 to 128 [ 1842.375272][T28761] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1842.386471][T31240] syzkaller0: entered promiscuous mode [ 1842.421707][T31240] syzkaller0: entered allmulticast mode [ 1845.374108][T28920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1845.505877][T31296] loop8: detected capacity change from 0 to 128 [ 1845.689392][T31299] syzkaller0: entered promiscuous mode [ 1845.702966][T31299] syzkaller0: entered allmulticast mode [ 1847.576418][T31335] loop9: detected capacity change from 0 to 512 [ 1847.601736][T31335] ext3: Unknown parameter 'context' [ 1848.210700][T31342] hub 8-0:1.0: USB hub found [ 1848.215817][T31342] hub 8-0:1.0: 1 port detected [ 1848.410361][T31349] input: syz1 as /devices/virtual/input/input18 [ 1848.667088][T31350] hub 8-0:1.0: USB hub found [ 1848.744749][T31350] hub 8-0:1.0: 1 port detected [ 1851.518720][T31384] loop9: detected capacity change from 0 to 512 [ 1851.544224][T31384] ext3: Unknown parameter 'context' [ 1851.578742][T31381] syzkaller0: entered promiscuous mode [ 1851.607576][T31381] syzkaller0: entered allmulticast mode [ 1851.644694][T31389] hub 8-0:1.0: USB hub found [ 1851.649659][T31389] hub 8-0:1.0: 1 port detected [ 1851.969042][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 150 seconds [ 1853.234405][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.471656][T31420] loop9: detected capacity change from 0 to 512 [ 1854.676422][T31420] ext3: Unknown parameter 'context' [ 1855.330954][T31427] input: syz1 as /devices/virtual/input/input19 [ 1855.636225][T31432] hub 8-0:1.0: USB hub found [ 1855.641219][T31432] hub 8-0:1.0: 1 port detected [ 1859.314026][T31472] loop9: detected capacity change from 0 to 512 [ 1859.321418][T31472] ext3: Unknown parameter 'context' [ 1859.844074][T31479] hub 8-0:1.0: USB hub found [ 1859.849180][T31479] hub 8-0:1.0: 1 port detected [ 1862.750136][T31537] loop8: detected capacity change from 0 to 512 [ 1862.842005][T31537] ext3: Unknown parameter 'context' [ 1862.903573][T30094] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1863.052364][T31542] hub 8-0:1.0: USB hub found [ 1863.057473][T31542] hub 8-0:1.0: 1 port detected [ 1863.782108][T31555] hub 8-0:1.0: USB hub found [ 1863.788111][T31555] hub 8-0:1.0: 1 port detected [ 1863.879291][T31557] input: syz1 as /devices/virtual/input/input20 [ 1864.532998][T31566] binder: 31565:31566 ioctl c0306201 0 returned -14 [ 1864.605167][T31567] binder: 31565:31567 ioctl c0306201 0 returned -14 [ 1864.634225][T31567] binder: 31565:31567 ioctl 3b88 0 returned -22 [ 1865.071290][T31578] overlayfs: missing 'lowerdir' [ 1866.176849][T31591] loop2: detected capacity change from 0 to 256 [ 1866.486755][T31593] loop9: detected capacity change from 0 to 1024 [ 1866.670713][T31593] EXT4-fs: Ignoring removed bh option [ 1867.041308][T31593] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1867.405523][T26522] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1867.563025][T31611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7455'. [ 1867.592190][T31610] loop3: detected capacity change from 0 to 512 [ 1867.616646][T31611] ip6gre1: entered promiscuous mode [ 1867.621987][T31611] ip6gre1: entered allmulticast mode [ 1867.634013][T31610] ext3: Unknown parameter 'context' [ 1867.639907][T31570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1867.829161][T31613] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1867.911618][T31613] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1867.986642][T31613] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1869.565192][T31637] overlayfs: missing 'lowerdir' [ 1869.965115][T31650] hub 8-0:1.0: USB hub found [ 1869.970163][T31650] hub 8-0:1.0: 1 port detected [ 1870.228892][T31655] loop2: detected capacity change from 0 to 1024 [ 1870.321397][T31655] EXT4-fs: Ignoring removed bh option [ 1870.410977][T31655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1870.454289][T31659] hub 8-0:1.0: USB hub found [ 1870.472944][T31659] hub 8-0:1.0: 1 port detected [ 1870.728629][T27917] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1871.302252][T31670] loop3: detected capacity change from 0 to 512 [ 1871.351256][T31670] ext3: Unknown parameter 'context' [ 1874.448698][T31691] input: syz1 as /devices/virtual/input/input21 [ 1874.640464][T31694] binder: 31693:31694 ioctl c0306201 0 returned -14 [ 1874.740714][T31699] binder: 31693:31699 ioctl c0306201 0 returned -14 [ 1874.750728][T31699] binder: 31693:31699 ioctl 3b88 0 returned -22 [ 1874.794877][T31700] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1874.803411][T31700] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1874.833392][T31700] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1874.926722][T31709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7472'. [ 1874.995647][T31709] ip6gre1: entered promiscuous mode [ 1875.032149][T31709] ip6gre1: entered allmulticast mode [ 1875.611122][T31717] loop8: detected capacity change from 0 to 1024 [ 1875.654075][T31717] EXT4-fs: Ignoring removed bh option [ 1875.752113][T31717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1876.029099][T31726] hub 8-0:1.0: USB hub found [ 1876.034170][T31726] hub 8-0:1.0: 1 port detected [ 1876.088580][T26393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1876.781431][T31733] loop2: detected capacity change from 0 to 512 [ 1876.789086][T31733] ext3: Unknown parameter 'context' [ 1877.597433][T31742] overlayfs: missing 'lowerdir' [ 1879.080676][T31763] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1879.115175][T31763] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1879.137710][T31765] hub 8-0:1.0: USB hub found [ 1879.161111][T31763] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1879.199745][T31765] hub 8-0:1.0: 1 port detected [ 1879.274028][T31769] loop9: detected capacity change from 0 to 1024 [ 1879.310315][T31769] EXT4-fs: Ignoring removed bh option [ 1879.409760][T31769] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1880.238579][T31788] hub 8-0:1.0: USB hub found [ 1880.243631][T31788] hub 8-0:1.0: 1 port detected [ 1880.535868][T31791] input: syz1 as /devices/virtual/input/input22 [ 1880.976912][T26522] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1881.365861][T31805] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7487'. [ 1882.024560][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 180 seconds [ 1882.057971][T31805] ip6gre1: entered promiscuous mode [ 1882.142549][T31805] ip6gre1: entered allmulticast mode [ 1882.369798][T31813] binder: 31812:31813 ioctl c0306201 0 returned -14 [ 1882.446115][T31814] binder: 31812:31814 ioctl c0306201 0 returned -14 [ 1882.471925][T31814] binder: 31812:31814 ioctl 3b88 0 returned -22 [ 1883.050314][T31820] loop9: detected capacity change from 0 to 512 [ 1883.078635][T31820] ext3: Unknown parameter 'context' [ 1883.971419][T31829] overlayfs: missing 'workdir' [ 1884.218894][T31838] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1884.227663][T31838] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1884.236678][T31838] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1885.015252][T31835] loop8: detected capacity change from 0 to 1024 [ 1885.088909][T31835] EXT4-fs: Ignoring removed bh option [ 1885.225410][T31835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1885.254919][T31852] hub 8-0:1.0: USB hub found [ 1885.262915][T31852] hub 8-0:1.0: 1 port detected [ 1885.813806][T31865] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7498'. [ 1886.426972][T31865] ip6gre2: entered promiscuous mode [ 1886.579114][T31865] ip6gre2: entered allmulticast mode [ 1886.783544][T31877] hub 8-0:1.0: USB hub found [ 1886.809324][T31877] hub 8-0:1.0: 1 port detected [ 1887.461544][T31886] loop9: detected capacity change from 0 to 512 [ 1887.503990][T31886] ext3: Unknown parameter 'context' [ 1887.586982][T30094] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1887.884168][T31891] input: syz1 as /devices/virtual/input/input23 [ 1888.133663][T31897] binder: 31895:31897 ioctl c0306201 0 returned -14 [ 1888.209256][T31898] binder: 31895:31898 ioctl c0306201 0 returned -14 [ 1888.219548][T31898] binder: 31895:31898 ioctl 3b88 0 returned -22 [ 1888.854867][T26393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1890.004630][T31914] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1890.062938][T31914] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1890.118361][T31914] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1890.335234][T31925] overlayfs: missing 'workdir' [ 1890.564252][T31929] hub 8-0:1.0: USB hub found [ 1890.569381][T31929] hub 8-0:1.0: 1 port detected [ 1891.578951][T31940] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7510'. [ 1891.611585][T31939] loop2: detected capacity change from 0 to 512 [ 1891.669608][T31940] ip6gre3: entered promiscuous mode [ 1891.729576][T31939] ext3: Unknown parameter 'context' [ 1892.317336][T31940] ip6gre3: entered allmulticast mode [ 1892.370205][T31945] netlink: 'syz.3.7509': attribute type 4 has an invalid length. [ 1892.378324][T31945] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7509'. [ 1892.623889][T31951] binder: 31950:31951 ioctl c0306201 0 returned -14 [ 1892.662359][T31949] loop8: detected capacity change from 0 to 1024 [ 1892.708654][T31949] EXT4-fs: Ignoring removed bh option [ 1892.724235][T31954] binder: 31950:31954 ioctl c0306201 0 returned -14 [ 1892.747907][T31954] binder: 31950:31954 ioctl 3b88 0 returned -22 [ 1892.837217][T31949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1894.350962][T31985] hub 8-0:1.0: USB hub found [ 1894.356677][T31985] hub 8-0:1.0: 1 port detected [ 1894.908105][T31987] hub 8-0:1.0: USB hub found [ 1894.914480][T31987] hub 8-0:1.0: 1 port detected [ 1895.210540][T31988] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1895.271786][T31988] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1895.323416][T31988] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1895.374765][T31998] overlayfs: missing 'workdir' [ 1895.615085][T26393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1896.700884][T32006] loop3: detected capacity change from 0 to 512 [ 1896.758225][T32006] ext3: Unknown parameter 'context' [ 1896.884044][T32013] netlink: 'syz.8.7521': attribute type 4 has an invalid length. [ 1896.891894][T32013] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7521'. [ 1897.003011][T30094] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1897.929869][T32024] input: syz1 as /devices/virtual/input/input24 [ 1897.937714][T32026] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7524'. [ 1897.973332][T32025] binder: 32022:32025 ioctl c0306201 0 returned -14 [ 1897.997251][T32026] ip6gre1: entered promiscuous mode [ 1898.027066][T32026] ip6gre1: entered allmulticast mode [ 1898.038173][T32028] binder: 32022:32028 ioctl c0306201 0 returned -14 [ 1898.127280][T32032] binder: 32022:32032 ioctl 3b88 0 returned -22 [ 1900.155359][T32051] hub 8-0:1.0: USB hub found [ 1900.195343][T32051] hub 8-0:1.0: 1 port detected [ 1900.217181][T32059] loop9: detected capacity change from 0 to 1024 [ 1900.274203][T32059] EXT4-fs: Ignoring removed bh option [ 1900.419067][T32059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1900.620537][T32067] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1900.629764][T32067] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1900.657440][T32067] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1901.387769][T12920] Bluetooth: hci2: command 0x0406 tx timeout [ 1902.021183][T26522] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1905.126733][ T5140] udevd[5140]: worker [28484] /devices/virtual/block/nbd0 timeout; kill it [ 1905.137977][ T5140] udevd[5140]: seq 35086 '/devices/virtual/block/nbd0' killed [ 1912.111154][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 210 seconds [ 1914.670606][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1942.183036][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 240 seconds [ 1972.263483][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 270 seconds [ 1976.111316][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2002.343400][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 300 seconds [ 2032.428604][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 330 seconds [ 2037.557326][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2062.503731][ T56] block nbd0: Possible stuck request ffff8880220f0000: control (read@0,4096B). Runtime 360 seconds [ 2065.703081][ T28] INFO: task udevd:28484 blocked for more than 143 seconds. [ 2065.710543][ T28] Not tainted syzkaller #0 [ 2065.716660][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2065.725782][ T28] task:udevd state:D stack:24232 pid:28484 ppid:5140 flags:0x00004006 [ 2065.735242][ T28] Call Trace: [ 2065.738562][ T28] [ 2065.741546][ T28] __schedule+0x15ae/0x4660 [ 2065.746266][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2065.751185][ T28] ? asan.module_dtor+0x20/0x20 [ 2065.756200][ T28] ? mark_lock+0x94/0x320 [ 2065.760575][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2065.765817][ T28] ? lock_chain_count+0x20/0x20 [ 2065.770742][ T28] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2065.775923][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2065.781621][ T28] schedule+0xbd/0x170 [ 2065.787479][ T28] io_schedule+0x80/0xd0 [ 2065.791814][ T28] folio_wait_bit_common+0x881/0xfa0 [ 2065.797619][ T28] ? folio_wait_bit+0x30/0x30 [ 2065.802364][ T28] ? _compound_head+0x120/0x120 [ 2065.807470][ T28] ? filemap_add_folio+0x190/0x3d0 [ 2065.812644][ T28] ? __filemap_get_folio+0x71e/0xbe0 [ 2065.819500][ T28] ? blkdev_writepage+0x30/0x30 [ 2065.824796][ T28] do_read_cache_folio+0x1c0/0x7f0 [ 2065.829968][ T28] ? blkdev_writepage+0x30/0x30 [ 2065.835543][ T28] read_part_sector+0xd2/0x350 [ 2065.840381][ T28] adfspart_check_POWERTEC+0x93/0xed0 [ 2065.846156][ T28] ? adfspart_check_ADFS+0x620/0x620 [ 2065.851493][ T28] ? put_partition+0x360/0x360 [ 2065.856992][ T28] ? alloc_pages+0x4e1/0x740 [ 2065.861635][ T28] bdev_disk_changed+0x755/0x1450 [ 2065.867105][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 2065.872454][ T28] ? _atomic_dec_and_lock+0x93/0x120 [ 2065.878224][ T28] ? iput+0x33f/0x900 [ 2065.882254][ T28] blkdev_get_whole+0x30d/0x390 [ 2065.888680][ T28] blkdev_get_by_dev+0x3a9/0x610 [ 2065.894011][ T28] blkdev_open+0x14e/0x360 [ 2065.898494][ T28] do_dentry_open+0x880/0x14b0 [ 2065.904034][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 2065.908711][ T28] path_openat+0x284f/0x3270 [ 2065.913859][ T28] ? do_sys_openat2+0xda/0x1d0 [ 2065.918667][ T28] ? __x64_sys_openat+0x139/0x160 [ 2065.924251][ T28] ? verify_lock_unused+0x140/0x140 [ 2065.929521][ T28] ? do_filp_open+0x430/0x430 [ 2065.934724][ T28] do_filp_open+0x1f2/0x430 [ 2065.939298][ T28] ? vfs_tmpfile+0x620/0x620 [ 2065.944520][ T28] ? _raw_spin_unlock+0x28/0x40 [ 2065.949580][ T28] ? alloc_fd+0x590/0x640 [ 2065.954411][ T28] do_sys_openat2+0x134/0x1d0 [ 2065.959167][ T28] ? do_sys_open+0xe0/0xe0 [ 2065.964089][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2065.970150][ T28] ? lock_chain_count+0x20/0x20 [ 2065.975621][ T28] __x64_sys_openat+0x139/0x160 [ 2065.980566][ T28] do_syscall_64+0x55/0xb0 [ 2065.985885][ T28] ? clear_bhb_loop+0x40/0x90 [ 2065.992019][ T28] ? clear_bhb_loop+0x40/0x90 [ 2065.996922][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2066.003317][ T28] RIP: 0033:0x7f37714a7407 [ 2066.007819][ T28] RSP: 002b:00007fff48bca230 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2066.017096][ T28] RAX: ffffffffffffffda RBX: 00007f3771bf6880 RCX: 00007f37714a7407 [ 2066.025531][ T28] RDX: 00000000000a0800 RSI: 00005555f4d97430 RDI: ffffffffffffff9c [ 2066.034740][ T28] RBP: 00005555f4d96910 R08: 0000000000000000 R09: 0000000000000000 [ 2066.043057][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00005555f4db3f10 [ 2066.051099][ T28] R13: 00005555f4dae410 R14: 0000000000000000 R15: 00005555f4db3f10 [ 2066.059679][ T28] [ 2066.063104][ T28] [ 2066.063104][ T28] Showing all locks held in the system: [ 2066.070873][ T28] 1 lock held by khungtaskd/28: [ 2066.077352][ T28] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2066.087639][ T28] 2 locks held by getty/5533: [ 2066.098040][ T28] #0: ffff8880316aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2066.108410][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 2066.119459][ T28] 1 lock held by udevd/28484: [ 2066.124687][ T28] #0: ffff88802208a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2066.136433][ T28] [ 2066.138808][ T28] ============================================= [ 2066.138808][ T28] [ 2066.147629][ T28] NMI backtrace for cpu 1 [ 2066.152019][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2066.159258][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2066.169351][ T28] Call Trace: [ 2066.172693][ T28] [ 2066.175667][ T28] dump_stack_lvl+0x18c/0x250 [ 2066.180415][ T28] ? __wake_up_klogd+0xd9/0x100 [ 2066.185330][ T28] ? show_regs_print_info+0x20/0x20 [ 2066.190669][ T28] ? load_image+0x420/0x420 [ 2066.195238][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2066.200231][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2066.206447][ T28] ? load_image+0x420/0x420 [ 2066.210995][ T28] ? wq_watchdog_touch+0xef/0x170 [ 2066.216082][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2066.222211][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2066.228251][ T28] watchdog+0xf59/0xfa0 [ 2066.232459][ T28] ? watchdog+0x1e1/0xfa0 [ 2066.236852][ T28] kthread+0x2fa/0x390 [ 2066.240966][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2066.246044][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2066.250695][ T28] ret_from_fork+0x48/0x80 [ 2066.255180][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2066.259812][ T28] ret_from_fork_asm+0x11/0x20 [ 2066.264642][ T28] [ 2066.268823][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2066.274274][ C0] NMI backtrace for cpu 0 [ 2066.274286][ C0] CPU: 0 PID: 3533 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 2066.274304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2066.274315][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2066.274341][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 2066.274366][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 7c 0d 05 0d 48 89 de 5b e9 c3 b0 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 80 35 7c 7e 65 8b 15 81 35 7c 7e 81 e2 00 01 ff 00 74 [ 2066.274381][ C0] RSP: 0018:ffffc9000cc575c8 EFLAGS: 00000246 [ 2066.274395][ C0] RAX: ffffffff81eaf827 RBX: dffffc0000000000 RCX: ffff88802dfa1e00 [ 2066.274409][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2066.274419][ C0] RBP: 1ffffd40002ba881 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 2066.274432][ C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: dead000000000100 [ 2066.274450][ C0] R13: dffffc0000000000 R14: ffffea00015d4400 R15: ffffea00015d4408 [ 2066.274464][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2066.274479][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2066.274495][ C0] CR2: 000055f6b28cc660 CR3: 000000002f7be000 CR4: 00000000003506f0 [ 2066.274510][ C0] Call Trace: [ 2066.274516][ C0] [ 2066.274522][ C0] __page_table_check_zero+0x67/0x4b0 [ 2066.274549][ C0] get_page_from_freelist+0x2181/0x22a0 [ 2066.274569][ C0] ? arch_stack_walk+0x16e/0x190 [ 2066.274597][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 2066.274629][ C0] __alloc_pages+0x1f0/0x460 [ 2066.274647][ C0] ? zone_statistics+0x170/0x170 [ 2066.274668][ C0] ? alloc_pages+0x4e1/0x740 [ 2066.274687][ C0] alloc_slab_page+0x5d/0x180 [ 2066.274706][ C0] new_slab+0x87/0x2d0 [ 2066.274722][ C0] ___slab_alloc+0xc5c/0x12f0 [ 2066.274739][ C0] ? __alloc_skb+0x138/0x2c0 [ 2066.274763][ C0] __kmem_cache_alloc_node+0x11f/0x250 [ 2066.274788][ C0] ? __alloc_skb+0x138/0x2c0 [ 2066.274807][ C0] ? __alloc_skb+0x138/0x2c0 [ 2066.274823][ C0] __kmalloc_node_track_caller+0xa4/0x230 [ 2066.274849][ C0] ? rcu_is_watching+0x15/0xb0 [ 2066.274873][ C0] ? __alloc_skb+0x138/0x2c0 [ 2066.274890][ C0] kmalloc_reserve+0x116/0x240 [ 2066.274910][ C0] __alloc_skb+0x138/0x2c0 [ 2066.274930][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 2066.274955][ C0] ? process_scheduled_works+0x975/0x1600 [ 2066.274986][ C0] process_scheduled_works+0xa60/0x1600 [ 2066.275023][ C0] ? worker_attach_to_pool+0x370/0x370 [ 2066.275049][ C0] ? assign_work+0x3cc/0x5d0 [ 2066.275073][ C0] worker_thread+0xa5e/0xfe0 [ 2066.275101][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2066.275117][ C0] ? __kthread_parkme+0x71/0x1c0 [ 2066.275138][ C0] kthread+0x2fa/0x390 [ 2066.275154][ C0] ? pr_cont_work+0x550/0x550 [ 2066.275176][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2066.275193][ C0] ret_from_fork+0x48/0x80 [ 2066.275213][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2066.275231][ C0] ret_from_fork_asm+0x11/0x20 [ 2066.275267][ C0] [ 2066.578840][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2066.585737][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2066.592970][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2066.603066][ T28] Call Trace: [ 2066.606381][ T28] [ 2066.609350][ T28] dump_stack_lvl+0x18c/0x250 [ 2066.614087][ T28] ? show_regs_print_info+0x20/0x20 [ 2066.619352][ T28] ? load_image+0x420/0x420 [ 2066.623888][ T28] panic+0x2ca/0x720 [ 2066.627820][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2066.632353][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 2066.637928][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 2066.643336][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2066.649526][ T28] watchdog+0xf98/0xfa0 [ 2066.653739][ T28] ? watchdog+0x1e1/0xfa0 [ 2066.658107][ T28] kthread+0x2fa/0x390 [ 2066.662195][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2066.667251][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2066.671868][ T28] ret_from_fork+0x48/0x80 [ 2066.676312][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2066.680927][ T28] ret_from_fork_asm+0x11/0x20 [ 2066.685730][ T28] [ 2066.688911][ T28] Kernel Offset: disabled [ 2066.693243][ T28] Rebooting in 86400 seconds..