last executing test programs: 18.341958738s ago: executing program 2 (id=3318): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) tkill(0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x802, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r4, 0x0, 0x3, &(0x7f0000000b80), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6f, 0x20, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x7, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xfd, 0x0, 0x1, {0x8, 0x25, 0x1, 0x0, 0x3c, 0xc, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x10, 0x8c, 0x4e, {0x8, 0x25, 0x1, 0x4, 0x1, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14.521371919s ago: executing program 3 (id=3345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 ha', 0x4d) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) 14.48644989s ago: executing program 3 (id=3346): r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) 14.48613415s ago: executing program 3 (id=3347): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14.356134632s ago: executing program 2 (id=3349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 14.288842793s ago: executing program 2 (id=3350): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(0x0, 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 13.992955457s ago: executing program 3 (id=3352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 13.067880092s ago: executing program 2 (id=3356): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.051614803s ago: executing program 0 (id=3357): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r5, 0x0, 0x38f9, 0x0) write(r3, &(0x7f0000000040), 0xffffff4a) 12.967021854s ago: executing program 3 (id=3359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c0860000000000001800128008000100677470000c0002"], 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) 12.111910908s ago: executing program 4 (id=3361): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 12.111483958s ago: executing program 0 (id=3362): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4], 0x20) 12.100654818s ago: executing program 4 (id=3363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 11.173501013s ago: executing program 4 (id=3364): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000b7a3a4902b6dc062072266774aed1d9c462f5cc173e8aec78e0a76fd8bb3fd009709d0cecb75cdea910ae03e09ab4065c13e2c8ee41783b6e9b7b47deac56cace43d2ab5ff8759f06c4c", @ANYRES32], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e01") 11.133710993s ago: executing program 4 (id=3365): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) shutdown(r1, 0x0) 11.114293054s ago: executing program 0 (id=3366): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x1, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r2, r0, 0x80000) 11.012437285s ago: executing program 0 (id=3367): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x0, 0x2}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xd0, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xc}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xa, 0xa, 0xc, 0xb, 0xf, 0xc, 0x8, 0x6, 0xa, 0xe, 0x10, 0x7, 0x4, 0x3, 0x2, 0x2], 0x0, [0xc, 0xe, 0x5, 0x4000, 0x6, 0x6, 0xc5c, 0x0, 0xe949, 0x401, 0xfc00, 0x7, 0x8b2, 0x2, 0x7, 0xf], [0x3, 0x7, 0xfffe, 0x400, 0x1, 0x0, 0x3, 0x8, 0x3, 0x1, 0x8, 0x200, 0x7, 0x8, 0x9, 0x9]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x10, 0x10, 0x8, 0x9, 0x1, 0x10, 0x2, 0x1, 0xd, 0x8, 0xa, 0xa, 0xc, 0x10, 0xa, 0x4], 0x0, [0x9, 0x8000, 0x8, 0x6, 0x3, 0x0, 0x4, 0xfff, 0x81, 0x100, 0x7, 0x7, 0x7, 0x938f, 0x6, 0x4], [0x1, 0x6, 0x4, 0x8, 0x4, 0xfff3, 0x100, 0x8, 0x0, 0xd, 0x9, 0xa3, 0x8, 0xc79, 0x800, 0x31]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x25fb8c91}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3e, 0x4, 0x0, 0x2, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0xff, 0x6, 0x7, 0x2, 0x7fffffff, 0x4, 0x3}}, {0xa, 0x2, [0x8001, 0x4, 0x0]}}, {{0x1c, 0x1, {0x6, 0x6, 0x3, 0x3, 0x2, 0x66ea05ef, 0x1}}, {0x4}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 10.963424546s ago: executing program 0 (id=3368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) 10.180179898s ago: executing program 4 (id=3369): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.791721027s ago: executing program 1 (id=3377): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4], 0x20) 6.853048271s ago: executing program 1 (id=3378): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x1, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r2, r0, 0x80000) 6.781758552s ago: executing program 1 (id=3379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 ha', 0x4d) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) 6.722178533s ago: executing program 1 (id=3380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000"], 0x340a) 498.013363ms ago: executing program 3 (id=3381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) ioctl(r4, 0x8b1a, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xe4ee, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) 420.574564ms ago: executing program 0 (id=3382): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) shutdown(r1, 0x0) 387.347214ms ago: executing program 2 (id=3383): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c4}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 52.30333ms ago: executing program 1 (id=3384): mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 51.624999ms ago: executing program 4 (id=3385): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 512.57µs ago: executing program 1 (id=3386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 0s ago: executing program 2 (id=3387): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") kernel console output (not intermixed with test programs): ffffa8d79368 code=0x7ffc0000 [ 518.801059][ T27] audit: type=1326 audit(487.890:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.2697" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d79368 code=0x7ffc0000 [ 518.808957][ T27] audit: type=1326 audit(487.890:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.2697" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d79368 code=0x7ffc0000 [ 518.813299][ T27] audit: type=1326 audit(487.890:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.2697" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa8d79368 code=0x7ffc0000 [ 518.817651][ T27] audit: type=1326 audit(487.909:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.2697" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d79368 code=0x7ffc0000 [ 518.819360][T13692] device gre1 entered promiscuous mode [ 518.860942][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.862913][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.940531][T13699] FAULT_INJECTION: forcing a failure. [ 518.940531][T13699] name failslab, interval 1, probability 0, space 0, times 0 [ 518.943430][T13699] CPU: 1 PID: 13699 Comm: syz.2.2705 Not tainted syzkaller #0 [ 518.944815][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 518.946709][T13699] Call trace: [ 518.947292][T13699] dump_backtrace+0x1c4/0x1f0 [ 518.948135][T13699] show_stack+0x2c/0x3c [ 518.948898][T13699] __dump_stack+0x30/0x40 [ 518.949712][T13699] dump_stack_lvl+0xf4/0x15c [ 518.950572][T13699] dump_stack+0x1c/0x5c [ 518.951315][T13699] should_fail_ex+0x3cc/0x524 [ 518.952147][T13699] __should_failslab+0xc0/0x11c [ 518.953008][T13699] should_failslab+0x10/0x28 [ 518.953775][T13699] __kmem_cache_alloc_node+0x7c/0x318 [ 518.954686][T13699] kmalloc_trace+0x48/0x94 [ 518.955386][T13699] alloc_mnt_ns+0xc0/0x3b4 [ 518.956109][T13699] __arm64_sys_fsmount+0x528/0x8c4 [ 518.956952][T13699] invoke_syscall+0x98/0x290 [ 518.957711][T13699] el0_svc_common+0x13c/0x258 [ 518.958446][T13699] do_el0_svc+0x5c/0x134 [ 518.959200][T13699] el0_svc+0x58/0x128 [ 518.959889][T13699] el0t_64_sync_handler+0x84/0xf0 [ 518.960752][T13699] el0t_64_sync+0x18c/0x190 [ 519.816436][T13723] FAULT_INJECTION: forcing a failure. [ 519.816436][T13723] name fail_futex, interval 1, probability 0, space 0, times 0 [ 519.818945][T13723] CPU: 0 PID: 13723 Comm: syz.4.2715 Not tainted syzkaller #0 [ 519.820274][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 519.822160][T13723] Call trace: [ 519.822772][T13723] dump_backtrace+0x1c4/0x1f0 [ 519.823650][T13723] show_stack+0x2c/0x3c [ 519.824410][T13723] __dump_stack+0x30/0x40 [ 519.825198][T13723] dump_stack_lvl+0xf4/0x15c [ 519.825986][T13723] dump_stack+0x1c/0x5c [ 519.826699][T13723] should_fail_ex+0x3cc/0x524 [ 519.827533][T13723] should_fail+0x14/0x24 [ 519.828291][T13723] get_futex_key+0x904/0xfb0 [ 519.829130][T13723] futex_wait_setup+0xbc/0x320 [ 519.829976][T13723] futex_wait+0x164/0x424 [ 519.830747][T13723] do_futex+0x2e8/0x340 [ 519.831451][T13723] __arm64_sys_futex+0x390/0x414 [ 519.832295][T13723] invoke_syscall+0x98/0x290 [ 519.833178][T13723] el0_svc_common+0x13c/0x258 [ 519.834015][T13723] do_el0_svc+0x5c/0x134 [ 519.834777][T13723] el0_svc+0x58/0x128 [ 519.835479][T13723] el0t_64_sync_handler+0x84/0xf0 [ 519.836374][T13723] el0t_64_sync+0x18c/0x190 [ 519.842980][ T6635] usb 1-1: USB disconnect, device number 22 [ 520.566052][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.568969][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.817013][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2722'. [ 520.900361][T13750] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 520.996572][T13758] FAULT_INJECTION: forcing a failure. [ 520.996572][T13758] name failslab, interval 1, probability 0, space 0, times 0 [ 520.998712][T13758] CPU: 0 PID: 13758 Comm: syz.2.2729 Not tainted syzkaller #0 [ 520.999967][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 521.001712][T13758] Call trace: [ 521.002287][T13758] dump_backtrace+0x1c4/0x1f0 [ 521.003044][T13758] show_stack+0x2c/0x3c [ 521.003764][T13758] __dump_stack+0x30/0x40 [ 521.004503][T13758] dump_stack_lvl+0xf4/0x15c [ 521.005351][T13758] dump_stack+0x1c/0x5c [ 521.006052][T13758] should_fail_ex+0x3cc/0x524 [ 521.006886][T13758] __should_failslab+0xc0/0x11c [ 521.007720][T13758] should_failslab+0x10/0x28 [ 521.008476][T13758] __kmem_cache_alloc_node+0x7c/0x318 [ 521.009354][T13758] __kmalloc_node_track_caller+0xb8/0x174 [ 521.010420][T13758] kmemdup+0x5c/0x98 [ 521.011079][T13758] key_alloc+0x2b0/0xdec [ 521.011864][T13758] keyring_alloc+0x68/0xe0 [ 521.012622][T13758] join_session_keyring+0x120/0x3e0 [ 521.013499][T13758] lookup_user_key+0x3f8/0xf94 [ 521.014264][T13758] __arm64_sys_add_key+0x3d4/0x520 [ 521.015143][T13758] invoke_syscall+0x98/0x290 [ 521.015926][T13758] el0_svc_common+0x13c/0x258 [ 521.016694][T13758] do_el0_svc+0x5c/0x134 [ 521.017441][T13758] el0_svc+0x58/0x128 [ 521.018145][T13758] el0t_64_sync_handler+0x84/0xf0 [ 521.019015][T13758] el0t_64_sync+0x18c/0x190 [ 521.191135][T13772] FAULT_INJECTION: forcing a failure. [ 521.191135][T13772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.202284][T13772] CPU: 0 PID: 13772 Comm: syz.2.2735 Not tainted syzkaller #0 [ 521.203680][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 521.205390][T13772] Call trace: [ 521.205910][T13772] dump_backtrace+0x1c4/0x1f0 [ 521.206724][T13772] show_stack+0x2c/0x3c [ 521.207437][T13772] __dump_stack+0x30/0x40 [ 521.208150][T13772] dump_stack_lvl+0xf4/0x15c [ 521.208959][T13772] dump_stack+0x1c/0x5c [ 521.209710][T13772] should_fail_ex+0x3cc/0x524 [ 521.210503][T13772] should_fail+0x14/0x24 [ 521.211255][T13772] should_fail_usercopy+0x20/0x30 [ 521.212171][T13772] copy_from_bpfptr+0x84/0x1d8 [ 521.212970][T13772] __sys_bpf+0x1f8/0x660 [ 521.213710][T13772] __arm64_sys_bpf+0x80/0x98 [ 521.214528][T13772] invoke_syscall+0x98/0x290 [ 521.215341][T13772] el0_svc_common+0x13c/0x258 [ 521.216167][T13772] do_el0_svc+0x5c/0x134 [ 521.216928][T13772] el0_svc+0x58/0x128 [ 521.217640][T13772] el0t_64_sync_handler+0x84/0xf0 [ 521.218539][T13772] el0t_64_sync+0x18c/0x190 [ 521.256707][T13778] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 521.401014][T13790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.403325][T13790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.459188][T13794] loop0: detected capacity change from 0 to 128 [ 521.460735][T13794] FAT-fs (loop0): Unrecognized mount option "0x00000000000000000x0000000000000000" or missing value [ 521.506830][T13796] netlink: 'syz.1.2747': attribute type 9 has an invalid length. [ 521.508407][T13796] netlink: 'syz.1.2747': attribute type 6 has an invalid length. [ 521.713219][T13794] loop0: detected capacity change from 0 to 32768 [ 521.798430][T13806] input: syz1 as /devices/virtual/input/input43 [ 522.033843][T13794] loop0: p1 < > p3 p4 < > [ 522.038867][T13794] loop0: p3 size 50361344 extends beyond EOD, truncated [ 522.159671][T12402] udevd[12402]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 522.163753][T13163] udevd[13163]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 522.164182][T12854] udevd[12854]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 522.167253][T13812] fuse: Bad value for 'fd' [ 522.210650][T13816] FAULT_INJECTION: forcing a failure. [ 522.210650][T13816] name fail_futex, interval 1, probability 0, space 0, times 0 [ 522.512059][T13816] CPU: 1 PID: 13816 Comm: syz.1.2754 Not tainted syzkaller #0 [ 522.513409][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 522.515217][T13816] Call trace: [ 522.515801][T13816] dump_backtrace+0x1c4/0x1f0 [ 522.516682][T13816] show_stack+0x2c/0x3c [ 522.517440][T13816] __dump_stack+0x30/0x40 [ 522.518236][T13816] dump_stack_lvl+0xf4/0x15c [ 522.519071][T13816] dump_stack+0x1c/0x5c [ 522.519823][T13816] should_fail_ex+0x3cc/0x524 [ 522.520687][T13816] should_fail+0x14/0x24 [ 522.521431][T13816] get_futex_key+0x904/0xfb0 [ 522.522255][T13816] futex_wait_setup+0xbc/0x320 [ 522.523027][T13816] futex_wait+0x164/0x424 [ 522.523816][T13816] do_futex+0x2e8/0x340 [ 522.524636][T13816] __arm64_sys_futex+0x390/0x414 [ 522.525495][T13816] invoke_syscall+0x98/0x290 [ 522.526288][T13816] el0_svc_common+0x13c/0x258 [ 522.527045][T13816] do_el0_svc+0x5c/0x134 [ 522.527815][T13816] el0_svc+0x58/0x128 [ 522.528495][T13816] el0t_64_sync_handler+0x84/0xf0 [ 522.529409][T13816] el0t_64_sync+0x18c/0x190 [ 522.606443][T13829] FAULT_INJECTION: forcing a failure. [ 522.606443][T13829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.608838][T13829] CPU: 0 PID: 13829 Comm: syz.1.2759 Not tainted syzkaller #0 [ 522.610250][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 522.612266][T13829] Call trace: [ 522.612917][T13829] dump_backtrace+0x1c4/0x1f0 [ 522.613793][T13829] show_stack+0x2c/0x3c [ 522.614567][T13829] __dump_stack+0x30/0x40 [ 522.615340][T13829] dump_stack_lvl+0xf4/0x15c [ 522.616171][T13829] dump_stack+0x1c/0x5c [ 522.616925][T13829] should_fail_ex+0x3cc/0x524 [ 522.617745][T13829] should_fail+0x14/0x24 [ 522.618506][T13829] should_fail_usercopy+0x20/0x30 [ 522.619350][T13829] copy_from_bpfptr+0x84/0x1d8 [ 522.620146][T13829] __sys_bpf+0x1f8/0x660 [ 522.620816][T13829] __arm64_sys_bpf+0x80/0x98 [ 522.621608][T13829] invoke_syscall+0x98/0x290 [ 522.622340][T13829] el0_svc_common+0x13c/0x258 [ 522.623149][T13829] do_el0_svc+0x5c/0x134 [ 522.623920][T13829] el0_svc+0x58/0x128 [ 522.624593][T13829] el0t_64_sync_handler+0x84/0xf0 [ 522.625432][T13829] el0t_64_sync+0x18c/0x190 [ 522.701055][T13840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.703630][T13840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.319190][T13852] input: syz1 as /devices/virtual/input/input44 [ 523.640032][T13857] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 523.717033][T13869] FAULT_INJECTION: forcing a failure. [ 523.717033][T13869] name failslab, interval 1, probability 0, space 0, times 0 [ 523.719505][T13869] CPU: 1 PID: 13869 Comm: syz.0.2775 Not tainted syzkaller #0 [ 523.720823][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 523.722685][T13869] Call trace: [ 523.723327][T13869] dump_backtrace+0x1c4/0x1f0 [ 523.724139][T13869] show_stack+0x2c/0x3c [ 523.724868][T13869] __dump_stack+0x30/0x40 [ 523.725627][T13869] dump_stack_lvl+0xf4/0x15c [ 523.726473][T13869] dump_stack+0x1c/0x5c [ 523.727261][T13869] should_fail_ex+0x3cc/0x524 [ 523.728059][T13869] __should_failslab+0xc0/0x11c [ 523.728969][T13869] should_failslab+0x10/0x28 [ 523.729817][T13869] kmem_cache_alloc+0x88/0x310 [ 523.730707][T13869] security_inode_alloc+0x38/0x11c [ 523.731674][T13869] inode_init_always+0x6c8/0xb28 [ 523.732564][T13869] new_inode_pseudo+0x7c/0x1cc [ 523.733443][T13869] __sock_create+0x138/0x8a8 [ 523.734185][T13869] __sys_socket+0xc0/0x1b0 [ 523.734974][T13869] __arm64_sys_socket+0x7c/0x94 [ 523.735806][T13869] invoke_syscall+0x98/0x290 [ 523.736616][T13869] el0_svc_common+0x13c/0x258 [ 523.737370][T13869] do_el0_svc+0x5c/0x134 [ 523.738125][T13869] el0_svc+0x58/0x128 [ 523.738834][T13869] el0t_64_sync_handler+0x84/0xf0 [ 523.739716][T13869] el0t_64_sync+0x18c/0x190 [ 523.755611][T13869] socket: no more sockets [ 523.758662][T13869] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 523.768935][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2776'. [ 523.807368][T13874] loop0: detected capacity change from 0 to 2048 [ 523.831395][T13874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 524.284379][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.287571][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.590837][T13902] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 524.732119][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 524.739273][T13911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.742787][T13911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.744790][T13911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.746476][T13911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.749600][T13911] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 524.751003][T13911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.786240][T13917] 9pnet_fd: Insufficient options for proto=fd [ 524.799719][T13914] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 524.807406][T13914] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 525.021100][T13910] chnl_net:caif_netlink_parms(): no params data found [ 525.131768][T13910] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.133626][T13910] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.135580][T13910] device bridge_slave_0 entered promiscuous mode [ 525.137815][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.140656][T13910] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.142477][T13910] device bridge_slave_1 entered promiscuous mode [ 525.150189][T13910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.152883][T13910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.160778][T13910] team0: Port device team_slave_0 added [ 525.162559][T13910] team0: Port device team_slave_1 added [ 525.168594][T13910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.169718][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.173699][T13910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.176167][T13910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.177468][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.181940][T13910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.294434][T13910] device hsr_slave_0 entered promiscuous mode [ 525.347083][T13910] device hsr_slave_1 entered promiscuous mode [ 525.378755][ T5809] wlan1: Trigger new scan to find an IBSS to join [ 525.389288][T13910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.391366][T13910] Cannot create hsr debugfs directory [ 525.723318][ T5832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.777753][T13949] loop1: detected capacity change from 0 to 2048 [ 525.792869][T13949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 525.858128][ T5832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.893868][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.895146][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.245962][ T5832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.345485][ T5832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.375327][T13968] sctp: [Deprecated]: syz.0.2805 (pid 13968) Use of int in max_burst socket option deprecated. [ 526.375327][T13968] Use struct sctp_assoc_value instead [ 526.390931][T13972] overlayfs: missing 'lowerdir' [ 526.483468][T13976] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 526.650565][T13993] device syzkaller0 entered promiscuous mode [ 526.687571][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 526.725193][T13993] tipc: Started in network mode [ 526.728254][T13993] tipc: Node identity 9ae986b5615, cluster identity 4711 [ 526.729700][T13993] tipc: Enabled bearer , priority 0 [ 526.744626][T13993] tipc: Resetting bearer [ 526.918156][ T4331] Bluetooth: hci5: command 0x0409 tx timeout [ 527.011827][T13991] tipc: Resetting bearer [ 527.100293][T13991] tipc: Disabling bearer [ 527.373907][T14011] FAULT_INJECTION: forcing a failure. [ 527.373907][T14011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 527.376121][T14011] CPU: 1 PID: 14011 Comm: syz.2.2817 Not tainted syzkaller #0 [ 527.377353][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 527.378962][T14011] Call trace: [ 527.379484][T14011] dump_backtrace+0x1c4/0x1f0 [ 527.380217][T14011] show_stack+0x2c/0x3c [ 527.380875][T14011] __dump_stack+0x30/0x40 [ 527.381640][T14011] dump_stack_lvl+0xf4/0x15c [ 527.382444][T14011] dump_stack+0x1c/0x5c [ 527.383141][T14011] should_fail_ex+0x3cc/0x524 [ 527.383885][T14011] should_fail+0x14/0x24 [ 527.384586][T14011] get_futex_key+0x904/0xfb0 [ 527.385407][T14011] futex_wake+0x10c/0x458 [ 527.386148][T14011] do_futex+0x2c4/0x340 [ 527.386876][T14011] __arm64_sys_futex+0x390/0x414 [ 527.387757][T14011] invoke_syscall+0x98/0x290 [ 527.388560][T14011] el0_svc_common+0x13c/0x258 [ 527.389382][T14011] do_el0_svc+0x5c/0x134 [ 527.390120][T14011] el0_svc+0x58/0x128 [ 527.390836][T14011] el0t_64_sync_handler+0x84/0xf0 [ 527.391728][T14011] el0t_64_sync+0x18c/0x190 [ 527.396911][T14013] overlayfs: missing 'lowerdir' [ 527.670319][T13910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 527.710782][T13910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 527.731693][T13910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 527.792516][T14043] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 527.811920][T13910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 527.978267][T13910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.983451][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 527.985658][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 527.995757][T13910] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.316696][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 528.318763][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 528.320809][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.322099][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.323702][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 528.326838][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 528.329095][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.330550][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.332643][T14055] overlayfs: missing 'lowerdir' [ 528.337363][T14057] FAULT_INJECTION: forcing a failure. [ 528.337363][T14057] name fail_futex, interval 1, probability 0, space 0, times 0 [ 528.339539][T14057] CPU: 0 PID: 14057 Comm: syz.3.2830 Not tainted syzkaller #0 [ 528.340932][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 528.342549][T14057] Call trace: [ 528.343078][T14057] dump_backtrace+0x1c4/0x1f0 [ 528.343889][T14057] show_stack+0x2c/0x3c [ 528.344589][T14057] __dump_stack+0x30/0x40 [ 528.345334][T14057] dump_stack_lvl+0xf4/0x15c [ 528.346112][T14057] dump_stack+0x1c/0x5c [ 528.346858][T14057] should_fail_ex+0x3cc/0x524 [ 528.347680][T14057] should_fail+0x14/0x24 [ 528.348427][T14057] get_futex_key+0x904/0xfb0 [ 528.348937][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 528.349212][T14057] futex_wake+0x10c/0x458 [ 528.351302][T14057] do_futex+0x2c4/0x340 [ 528.352016][T14057] __arm64_sys_futex+0x390/0x414 [ 528.352883][T14057] invoke_syscall+0x98/0x290 [ 528.353707][T14057] el0_svc_common+0x13c/0x258 [ 528.354528][T14057] do_el0_svc+0x5c/0x134 [ 528.355219][T14057] el0_svc+0x58/0x128 [ 528.355914][T14057] el0t_64_sync_handler+0x84/0xf0 [ 528.356839][T14057] el0t_64_sync+0x18c/0x190 [ 528.359055][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 528.363349][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 528.370104][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 528.378775][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 528.388685][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 528.399651][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 528.421834][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 528.430133][T13910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.432404][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 528.468318][T14062] FAULT_INJECTION: forcing a failure. [ 528.468318][T14062] name failslab, interval 1, probability 0, space 0, times 0 [ 528.470558][T14062] CPU: 0 PID: 14062 Comm: syz.3.2832 Not tainted syzkaller #0 [ 528.471693][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 528.473247][T14062] Call trace: [ 528.473771][T14062] dump_backtrace+0x1c4/0x1f0 [ 528.474502][T14062] show_stack+0x2c/0x3c [ 528.475152][T14062] __dump_stack+0x30/0x40 [ 528.475853][T14062] dump_stack_lvl+0xf4/0x15c [ 528.476637][T14062] dump_stack+0x1c/0x5c [ 528.477248][T14062] should_fail_ex+0x3cc/0x524 [ 528.478010][T14062] __should_failslab+0xc0/0x11c [ 528.478791][T14062] should_failslab+0x10/0x28 [ 528.479561][T14062] slab_pre_alloc_hook+0x6c/0x31c [ 528.480429][T14062] kmem_cache_alloc_lru+0x60/0x284 [ 528.481334][T14062] sock_alloc_inode+0x2c/0xcc [ 528.482148][T14062] new_inode_pseudo+0x68/0x1cc [ 528.483006][T14062] __sock_create+0x138/0x8a8 [ 528.483841][T14062] __sys_socket+0xc0/0x1b0 [ 528.484650][T14062] __arm64_sys_socket+0x7c/0x94 [ 528.485490][T14062] invoke_syscall+0x98/0x290 [ 528.486314][T14062] el0_svc_common+0x13c/0x258 [ 528.487131][T14062] do_el0_svc+0x5c/0x134 [ 528.487887][T14062] el0_svc+0x58/0x128 [ 528.488550][T14062] el0t_64_sync_handler+0x84/0xf0 [ 528.489397][T14062] el0t_64_sync+0x18c/0x190 [ 528.495470][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 528.497091][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 528.498594][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 528.500735][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 528.523350][T14062] socket: no more sockets [ 528.528008][T14062] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 528.629344][ T4652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.701316][T14084] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 528.732730][T14089] FAULT_INJECTION: forcing a failure. [ 528.732730][T14089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.735550][T14089] CPU: 0 PID: 14089 Comm: syz.2.2842 Not tainted syzkaller #0 [ 528.736950][T14089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 528.738661][T14089] Call trace: [ 528.739208][T14089] dump_backtrace+0x1c4/0x1f0 [ 528.739993][T14089] show_stack+0x2c/0x3c [ 528.740679][T14089] __dump_stack+0x30/0x40 [ 528.741435][T14089] dump_stack_lvl+0xf4/0x15c [ 528.742180][T14089] dump_stack+0x1c/0x5c [ 528.742871][T14089] should_fail_ex+0x3cc/0x524 [ 528.743684][T14089] should_fail+0x14/0x24 [ 528.744407][T14089] should_fail_usercopy+0x20/0x30 [ 528.745273][T14089] strncpy_from_user+0x48/0x59c [ 528.746047][T14089] __arm64_sys_add_key+0x14c/0x520 [ 528.746908][T14089] invoke_syscall+0x98/0x290 [ 528.747655][T14089] el0_svc_common+0x13c/0x258 [ 528.748419][T14089] do_el0_svc+0x5c/0x134 [ 528.749164][T14089] el0_svc+0x58/0x128 [ 528.749908][T14089] el0t_64_sync_handler+0x84/0xf0 [ 528.750815][T14089] el0t_64_sync+0x18c/0x190 [ 529.081579][T14098] device syzkaller0 entered promiscuous mode [ 529.094798][T14093] tipc: Started in network mode [ 529.095971][T14093] tipc: Node identity 6ad7d0d7f958, cluster identity 4711 [ 529.097316][T14093] tipc: Enabled bearer , priority 0 [ 529.105577][T14093] tipc: Resetting bearer [ 529.112826][T14092] tipc: Resetting bearer [ 529.141782][ T4346] Bluetooth: hci5: command 0x041b tx timeout [ 529.177834][T14092] tipc: Disabling bearer [ 529.194767][T14103] loop0: detected capacity change from 0 to 2048 [ 529.271187][T14103] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 529.332822][T14109] device syzkaller0 entered promiscuous mode [ 529.524603][T14115] FAULT_INJECTION: forcing a failure. [ 529.524603][T14115] name failslab, interval 1, probability 0, space 0, times 0 [ 529.529887][T14115] CPU: 0 PID: 14115 Comm: syz.3.2848 Not tainted syzkaller #0 [ 529.531027][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 529.532741][T14115] Call trace: [ 529.533249][T14115] dump_backtrace+0x1c4/0x1f0 [ 529.534028][T14115] show_stack+0x2c/0x3c [ 529.534771][T14115] __dump_stack+0x30/0x40 [ 529.535528][T14115] dump_stack_lvl+0xf4/0x15c [ 529.536321][T14115] dump_stack+0x1c/0x5c [ 529.537022][T14115] should_fail_ex+0x3cc/0x524 [ 529.537870][T14115] __should_failslab+0xc0/0x11c [ 529.538728][T14115] should_failslab+0x10/0x28 [ 529.539488][T14115] kmem_cache_alloc+0x88/0x310 [ 529.540261][T14115] security_inode_alloc+0x38/0x11c [ 529.541126][T14115] inode_init_always+0x6c8/0xb28 [ 529.542085][T14115] new_inode_pseudo+0x7c/0x1cc [ 529.542981][T14115] __sock_create+0x138/0x8a8 [ 529.543861][T14115] __sys_socket+0xc0/0x1b0 [ 529.544671][T14115] __arm64_sys_socket+0x7c/0x94 [ 529.545561][T14115] invoke_syscall+0x98/0x290 [ 529.546353][T14115] el0_svc_common+0x13c/0x258 [ 529.547176][T14115] do_el0_svc+0x5c/0x134 [ 529.547938][T14115] el0_svc+0x58/0x128 [ 529.548597][T14115] el0t_64_sync_handler+0x84/0xf0 [ 529.549530][T14115] el0t_64_sync+0x18c/0x190 [ 529.561716][T14115] socket: no more sockets [ 529.564088][T14115] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 529.638094][ T4380] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 529.681563][T14124] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 529.703853][T14126] FAULT_INJECTION: forcing a failure. [ 529.703853][T14126] name fail_futex, interval 1, probability 0, space 0, times 0 [ 529.706289][T14126] CPU: 0 PID: 14126 Comm: syz.3.2853 Not tainted syzkaller #0 [ 529.707491][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 529.709163][T14126] Call trace: [ 529.709723][T14126] dump_backtrace+0x1c4/0x1f0 [ 529.710474][T14126] show_stack+0x2c/0x3c [ 529.711223][T14126] __dump_stack+0x30/0x40 [ 529.711899][T14126] dump_stack_lvl+0xf4/0x15c [ 529.712643][T14126] dump_stack+0x1c/0x5c [ 529.713348][T14126] should_fail_ex+0x3cc/0x524 [ 529.714145][T14126] should_fail+0x14/0x24 [ 529.714857][T14126] get_futex_key+0x904/0xfb0 [ 529.715574][T14126] futex_wake+0x10c/0x458 [ 529.716262][T14126] do_futex+0x2c4/0x340 [ 529.716998][T14126] __arm64_sys_futex+0x390/0x414 [ 529.717854][T14126] invoke_syscall+0x98/0x290 [ 529.718593][T14126] el0_svc_common+0x13c/0x258 [ 529.719411][T14126] do_el0_svc+0x5c/0x134 [ 529.720146][T14126] el0_svc+0x58/0x128 [ 529.720842][T14126] el0t_64_sync_handler+0x84/0xf0 [ 529.721735][T14126] el0t_64_sync+0x18c/0x190 [ 529.830245][ T4380] usb 1-1: unable to get BOS descriptor or descriptor too short [ 529.832627][ T4380] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 529.836818][ T4380] usb 1-1: string descriptor 0 read error: -22 [ 529.837794][ T4380] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 529.839181][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.846926][ T4380] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 529.856951][T13910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.866182][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 529.867657][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 529.873560][ T4380] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 529.903705][T12854] udevd[12854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.001555][ T6038] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 530.389599][ T5832] device hsr_slave_0 left promiscuous mode [ 530.435705][ T5832] device hsr_slave_1 left promiscuous mode [ 530.499098][T14154] FAULT_INJECTION: forcing a failure. [ 530.499098][T14154] name failslab, interval 1, probability 0, space 0, times 0 [ 530.504737][T14154] CPU: 1 PID: 14154 Comm: syz.3.2862 Not tainted syzkaller #0 [ 530.506048][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 530.507772][T14154] Call trace: [ 530.508341][T14154] dump_backtrace+0x1c4/0x1f0 [ 530.509119][T14154] show_stack+0x2c/0x3c [ 530.509837][T14154] __dump_stack+0x30/0x40 [ 530.510595][T14154] dump_stack_lvl+0xf4/0x15c [ 530.511402][T14154] dump_stack+0x1c/0x5c [ 530.512136][T14154] should_fail_ex+0x3cc/0x524 [ 530.512938][T14154] __should_failslab+0xc0/0x11c [ 530.513805][T14154] should_failslab+0x10/0x28 [ 530.514598][T14154] slab_pre_alloc_hook+0x6c/0x31c [ 530.515466][T14154] kmem_cache_alloc_lru+0x60/0x284 [ 530.516355][T14154] sock_alloc_inode+0x2c/0xcc [ 530.517180][T14154] new_inode_pseudo+0x68/0x1cc [ 530.517984][T14154] __sock_create+0x138/0x8a8 [ 530.518788][T14154] __sys_socket+0xc0/0x1b0 [ 530.519565][T14154] __arm64_sys_socket+0x7c/0x94 [ 530.520388][T14154] invoke_syscall+0x98/0x290 [ 530.521127][T14154] el0_svc_common+0x13c/0x258 [ 530.521966][T14154] do_el0_svc+0x5c/0x134 [ 530.522731][T14154] el0_svc+0x58/0x128 [ 530.523435][T14154] el0t_64_sync_handler+0x84/0xf0 [ 530.524325][T14154] el0t_64_sync+0x18c/0x190 [ 530.528539][T14154] socket: no more sockets [ 530.530247][T14154] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 530.531987][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.532069][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.535421][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.536638][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.538196][ T5832] device bridge_slave_1 left promiscuous mode [ 530.540356][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.560648][T14156] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 530.597409][ T5832] device bridge_slave_0 left promiscuous mode [ 530.598818][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.603511][ T4380] usb 1-1: USB disconnect, device number 23 [ 530.632121][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 530.657137][T14161] overlayfs: missing 'workdir' [ 530.766974][ T5832] device veth1_macvtap left promiscuous mode [ 530.768450][ T5832] device veth0_macvtap left promiscuous mode [ 530.769521][ T5832] device veth1_vlan left promiscuous mode [ 530.770687][ T5832] device veth0_vlan left promiscuous mode [ 530.920018][ T5832] bond1 (unregistering): (slave veth5): Releasing active interface [ 530.922024][ T5832] bond1 (unregistering): (slave veth5): the permanent HWaddr of slave - da:bf:47:6c:fa:57 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 531.365456][ T4331] Bluetooth: hci5: command 0x040f tx timeout [ 531.741303][ T5832] bond1 (unregistering): (slave dummy0): Releasing active interface [ 531.783058][ T5832] bond1 (unregistering): Released all slaves [ 533.599700][ T4346] Bluetooth: hci5: command 0x0419 tx timeout [ 533.933281][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 534.114836][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 534.285102][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.531446][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.166680][ T5832] bond0 (unregistering): Released all slaves [ 536.499948][T13910] device veth0_vlan entered promiscuous mode [ 536.503229][T13910] device veth1_vlan entered promiscuous mode [ 536.505370][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 536.507214][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 536.508921][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 536.510381][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.518516][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.520449][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.522120][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.565024][T13910] device veth0_macvtap entered promiscuous mode [ 536.567375][T13910] device veth1_macvtap entered promiscuous mode [ 536.571093][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.573193][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.574840][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 536.576888][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 536.579773][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.581517][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.585922][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.587588][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.589065][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.590688][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.592258][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.594813][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.597251][T13910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.599805][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.601762][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.603506][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.612745][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.615812][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.617855][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.619922][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.621598][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.624841][T13910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.634904][T14186] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 536.641025][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 536.642886][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 536.647781][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.652064][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.659023][T13910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.688951][T13910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.690787][T13910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.692415][T13910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.726449][T14190] loop0: detected capacity change from 0 to 2048 [ 536.730767][T14194] overlayfs: missing 'workdir' [ 536.782848][T14190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 536.804800][ T4652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.806370][ T4652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.810098][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 536.836291][T14205] FAULT_INJECTION: forcing a failure. [ 536.836291][T14205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.843200][ T4652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.844685][ T4652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.848803][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.856497][T14205] CPU: 0 PID: 14205 Comm: syz.2.2877 Not tainted syzkaller #0 [ 536.857765][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 536.859400][T14205] Call trace: [ 536.859963][T14205] dump_backtrace+0x1c4/0x1f0 [ 536.860742][T14205] show_stack+0x2c/0x3c [ 536.861476][T14205] __dump_stack+0x30/0x40 [ 536.862239][T14205] dump_stack_lvl+0xf4/0x15c [ 536.863046][T14205] dump_stack+0x1c/0x5c [ 536.863779][T14205] should_fail_ex+0x3cc/0x524 [ 536.864593][T14205] should_fail+0x14/0x24 [ 536.865397][T14205] should_fail_usercopy+0x20/0x30 [ 536.866252][T14205] strncpy_from_user+0x48/0x59c [ 536.867065][T14205] __arm64_sys_add_key+0x14c/0x520 [ 536.867967][T14205] invoke_syscall+0x98/0x290 [ 536.868801][T14205] el0_svc_common+0x13c/0x258 [ 536.869584][T14205] do_el0_svc+0x5c/0x134 [ 536.870303][T14205] el0_svc+0x58/0x128 [ 536.870982][T14205] el0t_64_sync_handler+0x84/0xf0 [ 536.871855][T14205] el0t_64_sync+0x18c/0x190 [ 537.035250][ T4346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 537.037627][ T4346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 537.039723][ T4346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 537.041607][ T4346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 537.046378][ T4346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 537.047949][ T4346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 537.110248][T14220] chnl_net:caif_netlink_parms(): no params data found [ 537.128606][ T4377] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 537.195232][T14228] input: syz1 as /devices/virtual/input/input45 [ 537.428587][T14220] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.430219][T14220] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.431903][T14220] device bridge_slave_0 entered promiscuous mode [ 537.435132][T14220] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.436491][T14220] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.445335][T14220] device bridge_slave_1 entered promiscuous mode [ 537.455516][T14220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.458722][T14220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.475513][T14220] team0: Port device team_slave_0 added [ 537.478935][T14220] team0: Port device team_slave_1 added [ 537.488689][T14220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.489970][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.507181][T14220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.523852][ T5657] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 537.555294][T14220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.556683][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.561335][T14220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.564318][T14231] device syzkaller0 entered promiscuous mode [ 537.626409][T14231] tipc: Enabled bearer , priority 0 [ 537.631964][ T4377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 537.635035][ T4377] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 537.641322][ T4377] usb 1-1: string descriptor 0 read error: -22 [ 537.642562][ T4377] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 537.644326][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.654184][ T4377] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 537.663199][ T4377] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 537.676186][T14220] device hsr_slave_0 entered promiscuous mode [ 537.681310][T14180] udevd[14180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.716290][T14220] device hsr_slave_1 entered promiscuous mode [ 537.758427][T14220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.759962][T14220] Cannot create hsr debugfs directory [ 537.761388][T14230] tipc: Resetting bearer [ 537.824278][T14230] tipc: Disabling bearer [ 537.903252][T14236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 537.949764][T14241] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 537.965386][T14220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.009525][T14245] FAULT_INJECTION: forcing a failure. [ 538.009525][T14245] name fail_futex, interval 1, probability 0, space 0, times 0 [ 538.011990][T14245] CPU: 0 PID: 14245 Comm: syz.3.2891 Not tainted syzkaller #0 [ 538.013200][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 538.014837][T14245] Call trace: [ 538.015468][T14245] dump_backtrace+0x1c4/0x1f0 [ 538.016326][T14245] show_stack+0x2c/0x3c [ 538.017062][T14245] __dump_stack+0x30/0x40 [ 538.017829][T14245] dump_stack_lvl+0xf4/0x15c [ 538.018607][T14245] dump_stack+0x1c/0x5c [ 538.019342][T14245] should_fail_ex+0x3cc/0x524 [ 538.020175][T14245] should_fail+0x14/0x24 [ 538.020872][T14245] get_futex_key+0x904/0xfb0 [ 538.021631][T14245] futex_wake+0x10c/0x458 [ 538.022339][T14245] do_futex+0x2c4/0x340 [ 538.023051][T14245] __arm64_sys_futex+0x390/0x414 [ 538.023921][T14245] invoke_syscall+0x98/0x290 [ 538.024725][T14245] el0_svc_common+0x13c/0x258 [ 538.025506][T14245] do_el0_svc+0x5c/0x134 [ 538.026269][T14245] el0_svc+0x58/0x128 [ 538.026911][T14245] el0t_64_sync_handler+0x84/0xf0 [ 538.027781][T14245] el0t_64_sync+0x18c/0x190 [ 538.275163][T14220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.278384][T14247] device syzkaller0 entered promiscuous mode [ 538.281992][T14247] tipc: Started in network mode [ 538.283243][T14247] tipc: Node identity 826c246b966a, cluster identity 4711 [ 538.284558][T14247] tipc: Enabled bearer , priority 0 [ 538.289662][T14247] tipc: Resetting bearer [ 538.302672][T14246] tipc: Resetting bearer [ 538.347077][T14246] tipc: Disabling bearer [ 538.349369][ T5832] tipc: Left network mode [ 538.401888][T14220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.430767][ T22] usb 1-1: USB disconnect, device number 24 [ 538.435696][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 538.721641][T14220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.959993][T14220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 539.022374][T14220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 539.125555][T14268] input: syz1 as /devices/virtual/input/input46 [ 539.277364][ T4346] Bluetooth: hci2: command 0x0409 tx timeout [ 539.449493][T14220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 539.496458][T14220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 539.535471][T14279] device syzkaller0 entered promiscuous mode [ 539.561169][T14281] Set syz1 is full, maxelem 1029 reached [ 539.617351][T14283] Set syz1 is full, maxelem 1029 reached [ 539.724933][T14291] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 539.804249][ T5832] device erspan0 left promiscuous mode [ 540.197889][ T5832] device gretap0 left promiscuous mode [ 540.213879][T14306] loop0: detected capacity change from 0 to 2048 [ 540.223510][T14306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 540.664119][T14220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.670536][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.672345][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.675369][T14220] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.678208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.680211][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.683913][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.685054][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.686683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.693514][T14314] device syzkaller0 entered promiscuous mode [ 540.696136][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.697929][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.700055][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.701385][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.761625][T14316] FAULT_INJECTION: forcing a failure. [ 540.761625][T14316] name failslab, interval 1, probability 0, space 0, times 0 [ 540.765928][T14316] CPU: 1 PID: 14316 Comm: syz.3.2915 Not tainted syzkaller #0 [ 540.767159][T14316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 540.768760][T14316] Call trace: [ 540.769299][T14316] dump_backtrace+0x1c4/0x1f0 [ 540.770079][T14316] show_stack+0x2c/0x3c [ 540.770806][T14316] __dump_stack+0x30/0x40 [ 540.771578][T14316] dump_stack_lvl+0xf4/0x15c [ 540.772307][T14316] dump_stack+0x1c/0x5c [ 540.773007][T14316] should_fail_ex+0x3cc/0x524 [ 540.773840][T14316] __should_failslab+0xc0/0x11c [ 540.774618][T14316] should_failslab+0x10/0x28 [ 540.775377][T14316] slab_pre_alloc_hook+0x6c/0x31c [ 540.776205][T14316] kmem_cache_alloc_lru+0x60/0x284 [ 540.777098][T14316] sock_alloc_inode+0x2c/0xcc [ 540.777921][T14316] new_inode_pseudo+0x68/0x1cc [ 540.778738][T14316] sock_create_lite+0xd0/0x3f8 [ 540.779570][T14316] __netlink_kernel_create+0xfc/0x6a4 [ 540.780512][T14316] rtnetlink_net_init+0xa8/0x134 [ 540.781386][T14316] ops_init+0x2b0/0x53c [ 540.782045][T14316] setup_net+0x494/0xb6c [ 540.782803][T14316] copy_net_ns+0x2b8/0x578 [ 540.783558][T14316] create_new_namespaces+0x30c/0x604 [ 540.784402][T14316] unshare_nsproxy_namespaces+0x108/0x160 [ 540.785329][T14316] ksys_unshare+0x3f0/0x70c [ 540.786113][T14316] __arm64_sys_unshare+0x3c/0x50 [ 540.786989][T14316] invoke_syscall+0x98/0x290 [ 540.787787][T14316] el0_svc_common+0x13c/0x258 [ 540.788595][T14316] do_el0_svc+0x5c/0x134 [ 540.789341][T14316] el0_svc+0x58/0x128 [ 540.790043][T14316] el0t_64_sync_handler+0x84/0xf0 [ 540.790930][T14316] el0t_64_sync+0x18c/0x190 [ 540.809116][T14220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.810941][T14220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.814363][T14314] tipc: Enabled bearer , priority 0 [ 540.820807][T14314] tipc: Resetting bearer [ 540.822004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.824206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.826348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.828746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.830654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 540.832919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.834870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 540.836985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 540.842245][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 540.844025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.845869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 540.849511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 540.851289][T14313] tipc: Resetting bearer [ 540.902102][T14313] tipc: Disabling bearer [ 541.034772][T14329] ip_tables: iptables: counters copy to user failed while replacing table [ 541.467971][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 541.619307][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 541.659464][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 541.661221][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.722802][T14220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.733025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 541.735010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.751882][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 541.754046][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.760029][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.766018][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.991849][ T4380] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 542.033413][T14220] device veth0_vlan entered promiscuous mode [ 542.037937][T14220] device veth1_vlan entered promiscuous mode [ 542.058209][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 542.060107][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 542.061709][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 542.063265][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.067392][T14220] device veth0_macvtap entered promiscuous mode [ 542.070194][T14220] device veth1_macvtap entered promiscuous mode [ 542.076614][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.082307][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.084211][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.090235][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.093332][T14362] ip_tables: iptables: counters copy to user failed while replacing table [ 542.096450][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.102950][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.106423][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.108640][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.110563][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.112587][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.115332][T14220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.159704][ T5832] device hsr_slave_0 left promiscuous mode [ 542.185295][ T4380] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 542.186627][ T4380] usb 1-1: config 0 has no interface number 0 [ 542.187605][ T4380] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.189410][ T4380] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 542.194168][ T4380] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 542.195901][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.197284][ T4380] usb 1-1: Product: syz [ 542.198006][ T4380] usb 1-1: Manufacturer: syz [ 542.198809][ T4380] usb 1-1: SerialNumber: syz [ 542.201097][ T4380] usb 1-1: config 0 descriptor?? [ 542.204173][ T4380] yurex 1-1:0.50: Could not submitting URB [ 542.205187][ T4380] yurex: probe of 1-1:0.50 failed with error -5 [ 542.216667][ T5832] device hsr_slave_1 left promiscuous mode [ 542.301880][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.303398][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.304855][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.306105][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.307588][ T5832] device bridge_slave_1 left promiscuous mode [ 542.308772][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.356200][ T5832] device bridge_slave_0 left promiscuous mode [ 542.357323][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.421246][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.423367][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.425661][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.427240][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.526561][ T5832] device veth1_macvtap left promiscuous mode [ 542.527753][ T5832] device veth0_macvtap left promiscuous mode [ 542.528836][ T5832] device veth1_vlan left promiscuous mode [ 542.529874][ T5832] device veth0_vlan left promiscuous mode [ 542.700739][ T5832] bond1 (unregistering): (slave veth7): Releasing active interface [ 542.702313][ T5832] bond1 (unregistering): (slave veth7): the permanent HWaddr of slave - ee:09:1a:f5:2a:dd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 543.479028][ T5832] bond1 (unregistering): (slave dummy0): Releasing active interface [ 543.521201][ T5832] bond1 (unregistering): Released all slaves [ 543.681645][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 544.621870][ T6038] wlan1: Trigger new scan to find an IBSS to join [ 544.920436][ T6635] usb 1-1: USB disconnect, device number 25 [ 545.596830][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 545.778309][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 545.904544][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 545.937097][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.162018][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.798277][ T5832] bond0 (unregistering): Released all slaves [ 547.878170][ T5657] wlan1: Trigger new scan to find an IBSS to join [ 548.112360][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.114032][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.115597][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.117288][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.120859][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.122508][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.124268][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.125994][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.127532][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.129870][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.131577][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.133404][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.135704][T14220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.138241][T14369] device syzkaller0 entered promiscuous mode [ 548.140668][T14372] tipc: Enabled bearer , priority 0 [ 548.142668][T14220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.144151][T14220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.145658][T14220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.147096][T14220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.164195][T14377] tipc: Resetting bearer [ 548.227555][T14364] tipc: Resetting bearer [ 548.234897][T14406] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 548.278403][T14364] tipc: Disabling bearer [ 548.327525][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.329305][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.370663][ T5180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.372180][ T5180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.674096][T14422] FAULT_INJECTION: forcing a failure. [ 548.674096][T14422] name fail_futex, interval 1, probability 0, space 0, times 0 [ 548.684116][T14422] CPU: 0 PID: 14422 Comm: syz.1.2943 Not tainted syzkaller #0 [ 548.685412][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 548.686990][T14422] Call trace: [ 548.687524][T14422] dump_backtrace+0x1c4/0x1f0 [ 548.688241][T14422] show_stack+0x2c/0x3c [ 548.688912][T14422] __dump_stack+0x30/0x40 [ 548.689556][T14422] dump_stack_lvl+0xf4/0x15c [ 548.690278][T14422] dump_stack+0x1c/0x5c [ 548.690961][T14422] should_fail_ex+0x3cc/0x524 [ 548.691726][T14422] should_fail+0x14/0x24 [ 548.692421][T14422] get_futex_key+0x904/0xfb0 [ 548.693268][T14422] futex_wake+0x10c/0x458 [ 548.694000][T14422] do_futex+0x2c4/0x340 [ 548.694681][T14422] __arm64_sys_futex+0x390/0x414 [ 548.695530][T14422] invoke_syscall+0x98/0x290 [ 548.696504][T14422] el0_svc_common+0x13c/0x258 [ 548.697510][T14422] do_el0_svc+0x5c/0x134 [ 548.698309][T14422] el0_svc+0x58/0x128 [ 548.698984][T14422] el0t_64_sync_handler+0x84/0xf0 [ 548.699926][T14422] el0t_64_sync+0x18c/0x190 [ 548.706286][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.709990][ T5180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.711388][ T5180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.715099][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 548.764503][T14424] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 549.043172][T14444] device syzkaller0 entered promiscuous mode [ 549.048607][T14444] tipc: Enabled bearer , priority 0 [ 549.095219][T14444] tipc: Resetting bearer [ 549.106005][T14443] tipc: Resetting bearer [ 549.169548][T14443] tipc: Disabling bearer [ 549.205281][T14448] device syzkaller0 entered promiscuous mode [ 549.246166][T14450] device syzkaller0 entered promiscuous mode [ 549.348829][T14450] tipc: Started in network mode [ 549.349855][T14450] tipc: Node identity ae2de39c8daf, cluster identity 4711 [ 549.351286][T14450] tipc: Enabled bearer , priority 0 [ 549.444962][T14452] tipc: Resetting bearer [ 549.486440][T14449] tipc: Resetting bearer [ 549.529192][T14449] tipc: Disabling bearer [ 549.791119][T14464] ip_tables: iptables: counters copy to user failed while replacing table [ 549.853438][T14468] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 550.125970][T14476] input: syz1 as /devices/virtual/input/input47 [ 550.541711][ T5657] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 551.036245][ T4401] wlan1: Trigger new scan to find an IBSS to join [ 551.037754][ T5809] wlan1: Creating new IBSS network, BSSID a2:e4:70:9f:51:13 [ 551.146702][T14488] fuse: Unknown parameter 'grou00000000000000000000' [ 551.291047][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.294183][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.296034][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.299911][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.301399][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 551.304150][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.969356][ T5809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.991109][T14493] chnl_net:caif_netlink_parms(): no params data found [ 552.097941][ T5809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.270127][ T5809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.633683][ T5809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.638127][T14493] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.639553][T14493] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.644162][T14493] device bridge_slave_0 entered promiscuous mode [ 552.654574][T14493] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.660355][T14493] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.670898][T14493] device bridge_slave_1 entered promiscuous mode [ 553.731103][ T4346] Bluetooth: hci4: command 0x0409 tx timeout [ 553.772430][T14493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.809172][T14524] fuse: Unknown parameter 'grou00000000000000000000' [ 553.811486][T14493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.820760][T14493] team0: Port device team_slave_0 added [ 553.823623][T14493] team0: Port device team_slave_1 added [ 553.829747][T14493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.831147][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.836217][T14493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.919273][T14533] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 553.931627][T14534] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 553.976326][T14493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.977598][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.981899][T14493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.218020][ T5180] wlan1: Trigger new scan to find an IBSS to join [ 554.372911][T14493] device hsr_slave_0 entered promiscuous mode [ 554.393605][T14493] device hsr_slave_1 entered promiscuous mode [ 554.435867][T14493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.438120][T14493] Cannot create hsr debugfs directory [ 554.440908][ T5809] tipc: Left network mode [ 554.443077][T14540] device syzkaller0 entered promiscuous mode [ 554.459782][T14540] tipc: Enabled bearer , priority 0 [ 554.481319][T14540] tipc: Resetting bearer [ 554.498742][T14539] tipc: Resetting bearer [ 554.553863][T14539] tipc: Disabling bearer [ 555.231522][T14572] Bluetooth: MGMT ver 1.22 [ 555.921832][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 556.574659][T14626] device syzkaller0 entered promiscuous mode [ 556.579217][T14626] tipc: Started in network mode [ 556.582574][T14626] tipc: Node identity 8a935f67f476, cluster identity 4711 [ 556.583925][T14626] tipc: Enabled bearer , priority 0 [ 556.595506][T14626] tipc: Resetting bearer [ 556.611740][T14623] tipc: Resetting bearer [ 556.678901][T14623] tipc: Disabling bearer [ 557.427198][T14650] input: syz1 as /devices/virtual/input/input48 [ 557.744887][T14653] device syzkaller0 entered promiscuous mode [ 558.054438][T14493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 558.105782][T14493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 558.136286][T14493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 558.197725][ T4346] Bluetooth: hci4: command 0x040f tx timeout [ 559.702149][ T5809] device hsr_slave_0 left promiscuous mode [ 559.752554][ T5809] device hsr_slave_1 left promiscuous mode [ 559.835021][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.836493][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.843102][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.844275][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.845795][ T5809] device bridge_slave_1 left promiscuous mode [ 559.847006][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.900394][ T5809] device bridge_slave_0 left promiscuous mode [ 559.903678][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.037754][ T5809] device veth1_macvtap left promiscuous mode [ 560.038992][ T5809] device veth0_macvtap left promiscuous mode [ 560.040139][ T5809] device veth1_vlan left promiscuous mode [ 560.041212][ T5809] device veth0_vlan left promiscuous mode [ 560.358273][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 562.223786][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 562.412613][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 562.582599][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.796391][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.840450][ T4652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.454162][ T5809] bond0 (unregistering): Released all slaves [ 564.775715][T14693] device syzkaller0 entered promiscuous mode [ 564.777555][T14493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 564.949441][T14493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.982910][T14493] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.985568][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.989379][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.001875][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.003599][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.005136][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.006296][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.015411][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 565.325122][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.909331][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.930994][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.932407][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.952833][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.956310][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.959546][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.963871][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.965780][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.970431][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.973784][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.985016][T14493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 565.986939][T14493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.993415][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.995115][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.996627][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.998247][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.014894][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 566.407401][T14768] FAULT_INJECTION: forcing a failure. [ 566.407401][T14768] name failslab, interval 1, probability 0, space 0, times 0 [ 566.411652][T14768] CPU: 1 PID: 14768 Comm: syz.2.3031 Not tainted syzkaller #0 [ 566.413083][T14768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 566.415019][T14768] Call trace: [ 566.415672][T14768] dump_backtrace+0x1c4/0x1f0 [ 566.416556][T14768] show_stack+0x2c/0x3c [ 566.417333][T14768] __dump_stack+0x30/0x40 [ 566.418117][T14768] dump_stack_lvl+0xf4/0x15c [ 566.418954][T14768] dump_stack+0x1c/0x5c [ 566.419704][T14768] should_fail_ex+0x3cc/0x524 [ 566.420552][T14768] __should_failslab+0xc0/0x11c [ 566.421446][T14768] should_failslab+0x10/0x28 [ 566.422223][T14768] kmem_cache_alloc_node+0x8c/0x344 [ 566.423166][T14768] __alloc_skb+0x128/0x728 [ 566.423947][T14768] __netlink_deliver_tap+0x2b0/0x6d8 [ 566.424899][T14768] netlink_deliver_tap+0x1ac/0x1b0 [ 566.425818][T14768] netlink_unicast+0x5e0/0x80c [ 566.426673][T14768] netlink_sendmsg+0x6f0/0x9d8 [ 566.427570][T14768] ____sys_sendmsg+0x588/0x90c [ 566.428442][T14768] __sys_sendmsg+0x288/0x374 [ 566.429290][T14768] __arm64_sys_sendmsg+0x80/0x94 [ 566.430224][T14768] invoke_syscall+0x98/0x290 [ 566.431097][T14768] el0_svc_common+0x13c/0x258 [ 566.431885][T14768] do_el0_svc+0x5c/0x134 [ 566.432623][T14768] el0_svc+0x58/0x128 [ 566.433274][T14768] el0t_64_sync_handler+0x84/0xf0 [ 566.434173][T14768] el0t_64_sync+0x18c/0x190 [ 566.520053][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 566.521596][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 566.819940][T14493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.876922][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 566.879112][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.906349][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 566.908321][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.910201][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.930393][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.938855][T14493] device veth0_vlan entered promiscuous mode [ 566.943604][T14493] device veth1_vlan entered promiscuous mode [ 566.958928][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 566.960564][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 566.962155][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 566.963917][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.968546][T14493] device veth0_macvtap entered promiscuous mode [ 566.971408][T14493] device veth1_macvtap entered promiscuous mode [ 567.037760][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 567.039616][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 567.341592][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.343439][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.345115][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.346796][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.348353][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.350180][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.351992][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.353742][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.356086][T14493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.358857][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.371817][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.373516][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.375205][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.376810][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.378482][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.380121][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.381881][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.384730][T14493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.386141][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 567.388122][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 567.389970][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.392024][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.399897][T14493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.401415][T14493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.402905][T14493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.414497][T14493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.492965][ T1652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.494454][ T1652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.495980][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 567.516020][ T1652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.517377][ T1652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.518796][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 567.594708][T14792] device syzkaller0 entered promiscuous mode [ 567.813512][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 567.816541][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 567.818320][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 567.819967][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 567.822161][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 567.823520][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 567.877119][T14801] chnl_net:caif_netlink_parms(): no params data found [ 567.896636][T14815] netlink: 'syz.0.3045': attribute type 10 has an invalid length. [ 568.007183][T14801] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.008556][T14801] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.010364][T14801] device bridge_slave_0 entered promiscuous mode [ 568.015579][T14801] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.674061][T14801] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.675878][T14801] device bridge_slave_1 entered promiscuous mode [ 568.683207][T14801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.686913][T14801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.698333][T14829] device-mapper: table: 248:1: zero-length target [ 568.701045][T14829] device-mapper: ioctl: error adding target to table [ 568.840944][T14801] team0: Port device team_slave_0 added [ 568.843110][T14801] team0: Port device team_slave_1 added [ 568.850205][T14801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.851682][T14801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.110592][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 570.128612][T14801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.139904][T14839] FAULT_INJECTION: forcing a failure. [ 570.139904][T14839] name failslab, interval 1, probability 0, space 0, times 0 [ 570.147187][T14801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.148379][T14801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.155920][T14839] CPU: 1 PID: 14839 Comm: syz.0.3050 Not tainted syzkaller #0 [ 570.157302][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 570.159009][T14839] Call trace: [ 570.159581][T14839] dump_backtrace+0x1c4/0x1f0 [ 570.160405][T14839] show_stack+0x2c/0x3c [ 570.161166][T14839] __dump_stack+0x30/0x40 [ 570.161774][T14801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.161965][T14839] dump_stack_lvl+0xf4/0x15c [ 570.164494][T14839] dump_stack+0x1c/0x5c [ 570.165281][T14839] should_fail_ex+0x3cc/0x524 [ 570.166157][T14839] __should_failslab+0xc0/0x11c [ 570.167077][T14839] should_failslab+0x10/0x28 [ 570.167874][T14839] __kmem_cache_alloc_node+0x7c/0x318 [ 570.168842][T14839] __kmalloc_node+0xc8/0x184 [ 570.169717][T14839] kvmalloc_node+0x88/0x1d4 [ 570.170526][T14839] rhashtable_init+0x3b0/0xa10 [ 570.171413][T14839] rhltable_init+0x28/0x80 [ 570.172216][T14839] nf_tables_newtable+0x58c/0x119c [ 570.173166][T14839] nfnetlink_rcv+0xc7c/0x1c54 [ 570.174021][T14839] netlink_unicast+0x5fc/0x80c [ 570.174917][T14839] netlink_sendmsg+0x6f0/0x9d8 [ 570.175793][T14839] ____sys_sendmsg+0x588/0x90c [ 570.176666][T14839] __sys_sendmsg+0x288/0x374 [ 570.177504][T14839] __arm64_sys_sendmsg+0x80/0x94 [ 570.178345][T14839] invoke_syscall+0x98/0x290 [ 570.179185][T14839] el0_svc_common+0x13c/0x258 [ 570.179977][T14839] do_el0_svc+0x5c/0x134 [ 570.180712][T14839] el0_svc+0x58/0x128 [ 570.181417][T14839] el0t_64_sync_handler+0x84/0xf0 [ 570.182271][T14839] el0t_64_sync+0x18c/0x190 [ 570.266508][T14801] device hsr_slave_0 entered promiscuous mode [ 570.301328][T14801] device hsr_slave_1 entered promiscuous mode [ 570.671299][T14801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.681144][T14801] Cannot create hsr debugfs directory [ 570.747389][T14857] device syzkaller0 entered promiscuous mode [ 571.103947][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.105857][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.331980][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 572.501559][T14872] syz.0.3060: attempt to access beyond end of device [ 572.501559][T14872] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 572.565313][T14801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.674822][T14872] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 572.676519][T14872] device-mapper: ioctl: error adding target to table [ 572.716707][T14801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.880330][T14801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.284794][T14801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.466831][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.469301][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.473757][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.479205][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.481670][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.483420][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.905125][T14801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 573.958853][T14801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 574.038415][T14801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 574.099104][T14801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 574.172877][T14801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.176858][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 574.178616][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 574.182269][T14801] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.185026][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 574.187048][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 574.188722][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.189892][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.195235][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.196942][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 574.198610][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 574.200087][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.201342][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.209151][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 574.211178][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 574.534778][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 574.537186][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 574.548059][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 574.551174][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 574.553096][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 574.556104][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 574.559741][ T5180] wlan1: Trigger new scan to find an IBSS to join [ 574.560078][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.562829][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 574.569040][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 574.570871][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 574.573980][T14801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 574.687340][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 574.688832][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 574.693245][T14801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.704576][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 574.706693][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 574.721062][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 574.756938][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 574.796952][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 574.815576][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.054245][T14801] device veth0_vlan entered promiscuous mode [ 575.081929][T14801] device veth1_vlan entered promiscuous mode [ 575.152108][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 575.153901][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 575.157554][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 575.159229][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 575.162522][T14801] device veth0_macvtap entered promiscuous mode [ 575.164503][T14919] device syzkaller0 entered promiscuous mode [ 575.168966][T14801] device veth1_macvtap entered promiscuous mode [ 575.172034][T14919] tipc: Enabled bearer , priority 0 [ 575.227260][T14919] tipc: Resetting bearer [ 575.230657][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.232508][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.237672][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.240521][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.242170][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.243830][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.245806][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.247754][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.249616][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.252459][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.255007][T14801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.256983][T14918] tipc: Resetting bearer [ 575.258748][T14927] fuse: Bad value for 'rootmode' [ 575.358495][T14918] tipc: Disabling bearer [ 575.361848][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 575.363563][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 575.365609][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 575.367298][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 575.370884][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.372852][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.374635][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.382385][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.384037][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.385851][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.387483][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.389893][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.391998][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.394068][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.397465][T14801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.401104][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 575.404174][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.508532][T14801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.510117][T14801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.511566][T14801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.532469][T14801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.547278][T14937] device syzkaller0 entered promiscuous mode [ 576.553104][T14937] tipc: Enabled bearer , priority 0 [ 576.590330][T14937] tipc: Resetting bearer [ 576.592553][T14935] tipc: Resetting bearer [ 576.694449][T14935] tipc: Disabling bearer [ 576.730420][T14948] FAULT_INJECTION: forcing a failure. [ 576.730420][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 576.732682][T14948] CPU: 1 PID: 14948 Comm: syz.2.3083 Not tainted syzkaller #0 [ 576.733944][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 576.735515][T14948] Call trace: [ 576.736032][T14948] dump_backtrace+0x1c4/0x1f0 [ 576.736831][T14948] show_stack+0x2c/0x3c [ 576.737574][T14948] __dump_stack+0x30/0x40 [ 576.738357][T14948] dump_stack_lvl+0xf4/0x15c [ 576.739163][T14948] dump_stack+0x1c/0x5c [ 576.739862][T14948] should_fail_ex+0x3cc/0x524 [ 576.740648][T14948] __should_failslab+0xc0/0x11c [ 576.741492][T14948] should_failslab+0x10/0x28 [ 576.742310][T14948] __kmem_cache_alloc_node+0x7c/0x318 [ 576.743194][T14948] __kmalloc_node+0xc8/0x184 [ 576.744002][T14948] kvmalloc_node+0x88/0x1d4 [ 576.744803][T14948] rhashtable_init+0x3b0/0xa10 [ 576.745665][T14948] rhltable_init+0x28/0x80 [ 576.746468][T14948] nf_tables_newtable+0x58c/0x119c [ 576.747308][T14948] nfnetlink_rcv+0xc7c/0x1c54 [ 576.748138][T14948] netlink_unicast+0x5fc/0x80c [ 576.748951][T14948] netlink_sendmsg+0x6f0/0x9d8 [ 576.749804][T14948] ____sys_sendmsg+0x588/0x90c [ 576.750643][T14948] __sys_sendmsg+0x288/0x374 [ 576.751465][T14948] __arm64_sys_sendmsg+0x80/0x94 [ 576.752343][T14948] invoke_syscall+0x98/0x290 [ 576.753166][T14948] el0_svc_common+0x13c/0x258 [ 576.754008][T14948] do_el0_svc+0x5c/0x134 [ 576.754753][T14948] el0_svc+0x58/0x128 [ 576.755415][T14948] el0t_64_sync_handler+0x84/0xf0 [ 576.756290][T14948] el0t_64_sync+0x18c/0x190 [ 576.771677][ T4652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.773053][ T4652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.774534][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 576.779069][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 576.787215][ T4652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.788657][ T4652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.790672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 576.842874][T14953] device syzkaller0 entered promiscuous mode [ 576.854318][ T3900] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 577.304856][ T3900] usb 1-1: unable to get BOS descriptor or descriptor too short [ 577.307174][ T3900] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 577.311289][ T3900] usb 1-1: string descriptor 0 read error: -22 [ 577.312377][ T3900] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 577.315314][ T3900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.320271][ T3900] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 577.329287][ T3900] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 577.346780][T14733] udevd[14733]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.909597][T14974] FAULT_INJECTION: forcing a failure. [ 577.909597][T14974] name failslab, interval 1, probability 0, space 0, times 0 [ 577.912045][T14974] CPU: 1 PID: 14974 Comm: syz.4.3090 Not tainted syzkaller #0 [ 577.913426][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 577.915153][T14974] Call trace: [ 577.915712][T14974] dump_backtrace+0x1c4/0x1f0 [ 577.916540][T14974] show_stack+0x2c/0x3c [ 577.917304][T14974] __dump_stack+0x30/0x40 [ 577.918048][T14974] dump_stack_lvl+0xf4/0x15c [ 577.918857][T14974] dump_stack+0x1c/0x5c [ 577.919534][T14974] should_fail_ex+0x3cc/0x524 [ 577.920376][T14974] __should_failslab+0xc0/0x11c [ 577.921265][T14974] should_failslab+0x10/0x28 [ 577.922043][T14974] __kmem_cache_alloc_node+0x7c/0x318 [ 577.922949][T14974] kmalloc_trace+0x48/0x94 [ 577.923725][T14974] nfnetlink_rcv+0xaac/0x1c54 [ 577.924517][T14974] netlink_unicast+0x5fc/0x80c [ 577.925332][T14974] netlink_sendmsg+0x6f0/0x9d8 [ 577.926114][T14974] ____sys_sendmsg+0x588/0x90c [ 577.926899][T14974] __sys_sendmsg+0x288/0x374 [ 577.927695][T14974] __arm64_sys_sendmsg+0x80/0x94 [ 577.928502][T14974] invoke_syscall+0x98/0x290 [ 577.929277][T14974] el0_svc_common+0x13c/0x258 [ 577.930077][T14974] do_el0_svc+0x5c/0x134 [ 577.930938][T14974] el0_svc+0x58/0x128 [ 577.931708][T14974] el0t_64_sync_handler+0x84/0xf0 [ 577.932585][T14974] el0t_64_sync+0x18c/0x190 [ 578.140756][T14986] device syzkaller0 entered promiscuous mode [ 578.286027][T14988] device syzkaller0 entered promiscuous mode [ 578.737538][ T22] usb 1-1: USB disconnect, device number 26 [ 578.751924][T14994] device syzkaller0 entered promiscuous mode [ 578.765040][T14994] tipc: Enabled bearer , priority 0 [ 578.822694][T14993] tipc: Resetting bearer [ 578.833672][ T5978] wlan1: Trigger new scan to find an IBSS to join [ 578.900388][T14993] tipc: Disabling bearer [ 579.023507][T15008] input: syz1 as /devices/virtual/input/input49 [ 579.405250][T15021] device syzkaller0 entered promiscuous mode [ 579.525824][T15026] Set syz1 is full, maxelem 1029 reached [ 580.001359][T15039] fuse: Unknown parameter 'user_i00000000000000000000' [ 580.117259][T15050] netlink: 'syz.4.3122': attribute type 10 has an invalid length. [ 580.127463][T15050] team0: Port device netdevsim0 added [ 580.142602][T15050] netlink: 'syz.4.3122': attribute type 10 has an invalid length. [ 580.200383][ T250] wlan1: Creating new IBSS network, BSSID d6:8c:d5:1c:d8:03 [ 580.499474][T15050] team0: Port device netdevsim0 removed [ 580.502020][T15050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 580.567296][T15056] device syzkaller0 entered promiscuous mode [ 581.209509][ T4750] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 581.297037][T15074] fuse: Unknown parameter 'user_i00000000000000000000' [ 581.376912][T15075] input: syz1 as /devices/virtual/input/input50 [ 582.106939][T15086] device syzkaller0 entered promiscuous mode [ 582.110395][T15086] tipc: Enabled bearer , priority 0 [ 582.151162][T15095] Set syz1 is full, maxelem 1029 reached [ 582.169107][T15085] tipc: Resetting bearer [ 582.201542][T15085] tipc: Disabling bearer [ 582.206640][T15097] device syzkaller0 entered promiscuous mode [ 582.209597][T15097] tipc: Enabled bearer , priority 0 [ 582.216901][T15097] tipc: Resetting bearer [ 582.219030][T15096] tipc: Resetting bearer [ 582.264260][T15096] tipc: Disabling bearer [ 582.353992][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.357727][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.369210][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.373340][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.376024][T13911] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 582.377464][T13911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.457963][T15101] chnl_net:caif_netlink_parms(): no params data found [ 582.476155][T15101] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.477755][T15101] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.479478][T15101] device bridge_slave_0 entered promiscuous mode [ 582.482032][T15101] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.484101][T15101] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.485888][T15101] device bridge_slave_1 entered promiscuous mode [ 582.502028][T15101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.504875][T15101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.514871][T15101] team0: Port device team_slave_0 added [ 582.517052][T15101] team0: Port device team_slave_1 added [ 582.525689][T15101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.527205][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.534063][T15101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.538269][T15113] fuse: Unknown parameter 'user_id00000000000000000000' [ 582.538292][T15101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.540876][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.545891][T15101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.606814][T15101] device hsr_slave_0 entered promiscuous mode [ 582.700499][T15101] device hsr_slave_1 entered promiscuous mode [ 582.927276][T15101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.023667][T15101] Cannot create hsr debugfs directory [ 583.107050][T15132] Set syz1 is full, maxelem 1029 reached [ 583.238415][T15137] input: syz1 as /devices/virtual/input/input51 [ 583.571616][T15141] fuse: Unknown parameter 'user_id00000000000000000000' [ 584.175120][T15155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.177711][T15155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.182097][T15155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.185051][T15155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.201262][T15101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.295471][ T4652] tipc: Left network mode [ 584.561982][T13911] Bluetooth: hci1: command 0x0409 tx timeout [ 584.649703][T15101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.734291][ T5180] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.914872][T15101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.405369][T15101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.430006][T15181] fuse: Unknown parameter 'user_id00000000000000000000' [ 585.483204][T15179] device syzkaller0 entered promiscuous mode [ 585.486786][T15179] tipc: Enabled bearer , priority 0 [ 585.549375][T15178] tipc: Resetting bearer [ 585.664645][T15188] input: syz1 as /devices/virtual/input/input52 [ 585.942102][T15178] tipc: Disabling bearer [ 586.068506][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.071208][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.076090][T15194] Set syz1 is full, maxelem 1029 reached [ 586.097830][T15195] device syzkaller0 entered promiscuous mode [ 586.399067][T15101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 586.526044][T15101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 586.681200][T15101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 586.785794][T13911] Bluetooth: hci1: command 0x041b tx timeout [ 586.798711][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.804003][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.806622][T15101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 586.825043][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.829654][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.593540][T15101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.608508][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 587.610740][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 587.651523][T15101] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.658638][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 587.660364][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 587.662186][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.663543][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.665266][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.672153][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 587.673968][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.675788][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.677171][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.682898][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 587.694813][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.070557][ T4652] device hsr_slave_0 left promiscuous mode [ 588.112209][ T4652] device hsr_slave_1 left promiscuous mode [ 588.196713][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.198013][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.199626][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.200955][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.202490][ T4652] device bridge_slave_1 left promiscuous mode [ 588.203588][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.243137][ T4652] device bridge_slave_0 left promiscuous mode [ 588.244346][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.346502][ T4652] device veth1_macvtap left promiscuous mode [ 588.347719][ T4652] device veth0_macvtap left promiscuous mode [ 588.348755][ T4652] device veth1_vlan left promiscuous mode [ 588.349702][ T4652] device veth0_vlan left promiscuous mode [ 588.962932][T15255] Bluetooth: MGMT ver 1.22 [ 589.009199][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 590.572430][ T4652] team0 (unregistering): Port device team_slave_1 removed [ 590.742909][ T4652] team0 (unregistering): Port device team_slave_0 removed [ 590.912934][ T4652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.126371][ T4652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.244128][T13911] Bluetooth: hci1: command 0x0419 tx timeout [ 591.575238][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.576420][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.688576][ T4652] bond0 (unregistering): Released all slaves [ 592.999375][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.001660][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.003605][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.008784][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.010675][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.016252][T15245] device syzkaller0 entered promiscuous mode [ 593.022497][T15262] tipc: Enabling of bearer rejected, failed to enable media [ 593.120869][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.122689][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.124193][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.126265][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 593.148376][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.564879][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 593.566344][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.571084][T15101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.590325][T15101] device veth0_vlan entered promiscuous mode [ 593.597182][T15101] device veth1_vlan entered promiscuous mode [ 593.605789][T15101] device veth0_macvtap entered promiscuous mode [ 593.609016][T15101] device veth1_macvtap entered promiscuous mode [ 593.614202][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.616148][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.618440][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.620470][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.623194][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.625213][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.636198][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.641878][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.643674][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.645627][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.648320][T15101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.652646][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 593.654636][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 593.656508][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 593.658263][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 593.661014][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 593.662740][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 593.664423][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 593.666057][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.667836][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 593.669495][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 593.675081][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 593.678415][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.680734][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.717858][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.719952][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.721747][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.723802][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.725649][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.727547][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.729262][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.731083][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.733656][T15101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.146191][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.148859][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.150486][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 594.153175][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 594.171274][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.179339][T15101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.182137][T15101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.185174][T15101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.186711][T15101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.190995][T15298] netlink: 'syz.2.3193': attribute type 10 has an invalid length. [ 594.203529][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.206128][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.210133][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.211856][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.212942][T15298] team0: Port device netdevsim0 added [ 594.236136][T15298] netlink: 'syz.2.3193': attribute type 10 has an invalid length. [ 594.266522][T15298] team0: Port device netdevsim0 removed [ 594.269228][T15298] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 594.282574][ T4750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.283991][ T4750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.285449][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 594.295362][ T4750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.296834][ T4750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.298329][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 594.571424][T15306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.573112][T15306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.120812][T15320] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 595.148677][T15320] team0: Port device netdevsim0 added [ 595.249379][T15322] FAULT_INJECTION: forcing a failure. [ 595.249379][T15322] name failslab, interval 1, probability 0, space 0, times 0 [ 595.258656][T15322] CPU: 1 PID: 15322 Comm: syz.1.3201 Not tainted syzkaller #0 [ 595.260184][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 595.262081][T15322] Call trace: [ 595.262694][T15322] dump_backtrace+0x1c4/0x1f0 [ 595.263511][T15322] show_stack+0x2c/0x3c [ 595.264211][T15322] __dump_stack+0x30/0x40 [ 595.264946][T15322] dump_stack_lvl+0xf4/0x15c [ 595.265708][T15322] dump_stack+0x1c/0x5c [ 595.266438][T15322] should_fail_ex+0x3cc/0x524 [ 595.267241][T15322] __should_failslab+0xc0/0x11c [ 595.268001][T15322] should_failslab+0x10/0x28 [ 595.268738][T15322] kmem_cache_alloc_node+0x8c/0x344 [ 595.269654][T15322] __alloc_skb+0x128/0x728 [ 595.270419][T15322] __netlink_deliver_tap+0x2b0/0x6d8 [ 595.271336][T15322] netlink_deliver_tap+0x1ac/0x1b0 [ 595.272224][T15322] netlink_unicast+0x5e0/0x80c [ 595.273003][T15322] netlink_sendmsg+0x6f0/0x9d8 [ 595.273759][T15322] ____sys_sendmsg+0x588/0x90c [ 595.274531][T15322] __sys_sendmsg+0x288/0x374 [ 595.275251][T15322] __arm64_sys_sendmsg+0x80/0x94 [ 595.276145][T15322] invoke_syscall+0x98/0x290 [ 595.276954][T15322] el0_svc_common+0x13c/0x258 [ 595.277812][T15322] do_el0_svc+0x5c/0x134 [ 595.278505][T15322] el0_svc+0x58/0x128 [ 595.279192][T15322] el0t_64_sync_handler+0x84/0xf0 [ 595.280077][T15322] el0t_64_sync+0x18c/0x190 [ 596.033144][T15333] device-mapper: table: 248:1: mirror: Unrecognised feature requested (-EINVAL) [ 596.047851][T15333] device-mapper: ioctl: error adding target to table [ 596.686705][T15348] device syzkaller0 entered promiscuous mode [ 598.058381][T15376] device syzkaller0 entered promiscuous mode [ 598.071054][T15378] device syzkaller0 entered promiscuous mode [ 598.075804][T15378] tipc: Started in network mode [ 598.076815][T15378] tipc: Node identity 2a7eedc7e05a, cluster identity 4711 [ 598.078228][T15378] tipc: Enabled bearer , priority 0 [ 598.080876][T15377] tipc: Resetting bearer [ 598.119671][T15377] tipc: Disabling bearer [ 598.251738][T15383] FAULT_INJECTION: forcing a failure. [ 598.251738][T15383] name failslab, interval 1, probability 0, space 0, times 0 [ 598.257658][T15383] CPU: 1 PID: 15383 Comm: syz.0.3224 Not tainted syzkaller #0 [ 598.259104][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 598.260871][T15383] Call trace: [ 598.261442][T15383] dump_backtrace+0x1c4/0x1f0 [ 598.262242][T15383] show_stack+0x2c/0x3c [ 598.263000][T15383] __dump_stack+0x30/0x40 [ 598.263807][T15383] dump_stack_lvl+0xf4/0x15c [ 598.264641][T15383] dump_stack+0x1c/0x5c [ 598.265354][T15383] should_fail_ex+0x3cc/0x524 [ 598.266122][T15383] __should_failslab+0xc0/0x11c [ 598.266950][T15383] should_failslab+0x10/0x28 [ 598.267667][T15383] kmem_cache_alloc+0x88/0x310 [ 598.268514][T15383] skb_clone+0x194/0x308 [ 598.269259][T15383] nfnetlink_rcv+0x3c8/0x1c54 [ 598.270049][T15383] netlink_unicast+0x5fc/0x80c [ 598.270866][T15383] netlink_sendmsg+0x6f0/0x9d8 [ 598.271686][T15383] ____sys_sendmsg+0x588/0x90c [ 598.272530][T15383] __sys_sendmsg+0x288/0x374 [ 598.273350][T15383] __arm64_sys_sendmsg+0x80/0x94 [ 598.274209][T15383] invoke_syscall+0x98/0x290 [ 598.274982][T15383] el0_svc_common+0x13c/0x258 [ 598.275737][T15383] do_el0_svc+0x5c/0x134 [ 598.276425][T15383] el0_svc+0x58/0x128 [ 598.277033][T15383] el0t_64_sync_handler+0x84/0xf0 [ 598.277870][T15383] el0t_64_sync+0x18c/0x190 [ 598.548507][T15391] ip_tables: iptables: counters copy to user failed while replacing table [ 599.313602][T15407] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(5) [ 599.319836][T15405] Set syz1 is full, maxelem 1029 reached [ 610.706279][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.708151][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.982699][T15458] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(5) [ 612.084076][T15477] socket: no more sockets [ 613.102096][T15476] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 613.103551][T15476] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 613.112405][T15476] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 613.116082][T15476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 613.133696][T15476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 613.143056][T15476] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 613.144671][T15476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 613.146024][T15476] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 613.152144][T15476] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 613.153666][T15476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 613.156053][T15476] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 613.174083][T15476] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 613.179427][T15476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 613.184417][T15476] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 613.190327][T15476] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 613.928845][T15493] device syzkaller0 entered promiscuous mode [ 614.434021][T13911] Bluetooth: hci5: command 0x0c1a tx timeout [ 614.556792][T15510] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 614.577591][T15509] device syzkaller0 entered promiscuous mode [ 614.624639][T14864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 615.265303][T13911] Bluetooth: hci2: command 0x0c1a tx timeout [ 615.350803][T13911] Bluetooth: hci0: command 0x0c1a tx timeout [ 615.350856][ T4346] Bluetooth: hci4: command 0x0c1a tx timeout [ 615.361676][T13911] Bluetooth: hci1: command 0x0c1a tx timeout [ 615.399651][T15528] device syzkaller0 entered promiscuous mode [ 615.816881][T15540] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 615.839797][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.842302][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.848070][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.850506][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.633759][T13911] Bluetooth: hci5: command 0x0406 tx timeout [ 616.814447][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.816215][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.488954][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 617.574932][T13911] Bluetooth: hci1: command 0x0406 tx timeout [ 617.574998][ T4331] Bluetooth: hci0: command 0x0406 tx timeout [ 617.576194][T13911] Bluetooth: hci4: command 0x0406 tx timeout [ 618.944432][T14864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 627.598164][T15568] tipc: Enabling of bearer rejected, failed to enable media [ 627.802352][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 627.804241][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'. [ 628.093382][T15606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.095995][T15606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.099810][T15606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.101558][T15606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.191537][T15652] ip_tables: iptables: counters copy to user failed while replacing table [ 631.326507][T15666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.328453][T15666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.332020][T15666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.334415][T15666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.535505][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 631.537537][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3308'. [ 632.258409][T15682] tipc: Enabled bearer , priority 0 [ 632.261550][T15682] tipc: Resetting bearer [ 632.381507][T15681] tipc: Disabling bearer [ 633.347838][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.350531][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.802151][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 634.392006][T15724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.406944][T15724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.411679][T15724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.425440][T15724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.474345][T15731] tipc: Enabled bearer , priority 0 [ 634.478729][T15731] tipc: Resetting bearer [ 634.597703][T15730] tipc: Disabling bearer [ 635.863673][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 635.865434][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 636.244864][T15773] tipc: Started in network mode [ 636.246026][T15773] tipc: Node identity 6e5c10d9e0c2, cluster identity 4711 [ 636.247315][T15773] tipc: Enabled bearer , priority 0 [ 636.252845][T15773] tipc: Resetting bearer [ 636.359076][T15772] tipc: Disabling bearer [ 636.388597][T15778] FAULT_INJECTION: forcing a failure. [ 636.388597][T15778] name failslab, interval 1, probability 0, space 0, times 0 [ 636.391833][T15778] CPU: 0 PID: 15778 Comm: syz.2.3349 Not tainted syzkaller #0 [ 636.393156][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 636.394897][T15778] Call trace: [ 636.395476][T15778] dump_backtrace+0x1c4/0x1f0 [ 636.396307][T15778] show_stack+0x2c/0x3c [ 636.397032][T15778] __dump_stack+0x30/0x40 [ 636.397798][T15778] dump_stack_lvl+0xf4/0x15c [ 636.398605][T15778] dump_stack+0x1c/0x5c [ 636.399334][T15778] should_fail_ex+0x3cc/0x524 [ 636.400153][T15778] __should_failslab+0xc0/0x11c [ 636.401043][T15778] should_failslab+0x10/0x28 [ 636.401875][T15778] __kmem_cache_alloc_node+0x7c/0x318 [ 636.402844][T15778] kmalloc_node_trace+0x44/0x90 [ 636.403718][T15778] blk_throtl_init+0xa8/0x424 [ 636.404555][T15778] blkcg_init_disk+0x394/0x480 [ 636.405353][T15778] __alloc_disk_node+0x234/0x438 [ 636.406225][T15778] __blk_alloc_disk+0x40/0xb8 [ 636.407057][T15778] dm_create+0x514/0xf48 [ 636.407798][T15778] dev_create+0xf4/0x25c [ 636.408579][T15778] dm_ctl_ioctl+0xaac/0xf1c [ 636.409383][T15778] __arm64_sys_ioctl+0x14c/0x1c8 [ 636.410274][T15778] invoke_syscall+0x98/0x290 [ 636.411080][T15778] el0_svc_common+0x13c/0x258 [ 636.411919][T15778] do_el0_svc+0x5c/0x134 [ 636.412668][T15778] el0_svc+0x58/0x128 [ 636.413370][T15778] el0t_64_sync_handler+0x84/0xf0 [ 636.414232][T15778] el0t_64_sync+0x18c/0x190 [ 636.762962][T15783] device syzkaller0 entered promiscuous mode [ 636.835876][T15786] tipc: Enabled bearer , priority 0 [ 636.852894][T15786] tipc: Resetting bearer [ 637.598719][T15785] tipc: Disabling bearer [ 637.765823][T15805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.767339][T15801] device syzkaller0 entered promiscuous mode [ 637.768562][T15805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.779501][T15805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.782486][T15805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.324587][T15815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.332867][T15815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.564194][T15827] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 641.975340][T15868] Set syz1 is full, maxelem 1029 reached [ 642.914550][T15873] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 647.769184][ T5832] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 650.185933][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 650.187512][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 650.221263][T15847] tipc: Enabling of bearer rejected, failed to enable media [ 650.675862][T15901] device syzkaller0 entered promiscuous mode [ 650.729348][T15906] FAULT_INJECTION: forcing a failure. [ 650.729348][T15906] name failslab, interval 1, probability 0, space 0, times 0 [ 650.731708][T15906] CPU: 1 PID: 15906 Comm: syz.2.3387 Not tainted syzkaller #0 [ 650.733012][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 650.734887][T15906] Call trace: [ 650.735473][T15906] dump_backtrace+0x1c4/0x1f0 [ 650.736329][T15906] show_stack+0x2c/0x3c [ 650.736991][T15906] __dump_stack+0x30/0x40 [ 650.737739][T15906] dump_stack_lvl+0xf4/0x15c [ 650.738475][T15906] dump_stack+0x1c/0x5c [ 650.739150][T15906] should_fail_ex+0x3cc/0x524 [ 650.739887][T15906] __should_failslab+0xc0/0x11c [ 650.740724][T15906] should_failslab+0x10/0x28 [ 650.741498][T15906] __kmem_cache_alloc_node+0x7c/0x318 [ 650.742450][T15906] kmalloc_trace+0x48/0x94 [ 650.743193][T15906] blk_iolatency_init+0x80/0x47c [ 650.743970][T15906] blkcg_init_disk+0x3b8/0x480 [ 650.744734][T15906] __alloc_disk_node+0x234/0x438 [ 650.745522][T15906] __blk_alloc_disk+0x40/0xb8 [ 650.746295][T15906] dm_create+0x514/0xf48 [ 650.747046][T15906] dev_create+0xf4/0x25c [ 650.747745][T15906] dm_ctl_ioctl+0xaac/0xf1c [ 650.748536][T15906] __arm64_sys_ioctl+0x14c/0x1c8 [ 650.749400][T15906] invoke_syscall+0x98/0x290 [ 650.750169][T15906] el0_svc_common+0x13c/0x258 [ 650.750972][T15906] do_el0_svc+0x5c/0x134 [ 650.751689][T15906] el0_svc+0x58/0x128 [ 650.752383][T15906] el0t_64_sync_handler+0x84/0xf0 [ 650.753261][T15906] el0t_64_sync+0x18c/0x190 [ 650.756155][T15906] [ 650.756616][T15906] ====================================================== [ 650.757867][T15906] WARNING: possible circular locking dependency detected [ 650.759033][T15906] syzkaller #0 Not tainted [ 650.759839][T15906] ------------------------------------------------------ [ 650.760993][T15906] syz.2.3387/15906 is trying to acquire lock: [ 650.762035][T15906] ffff0000f6b8b0a8 ((&sq->pending_timer)){+.-.}-{0:0}, at: __timer_delete_sync+0x78/0x21c [ 650.763824][T15906] [ 650.763824][T15906] but task is already holding lock: [ 650.765037][T15906] ffff80001c7e0a30 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x18c/0x54c [ 650.766617][T15906] [ 650.766617][T15906] which lock already depends on the new lock. [ 650.766617][T15906] [ 650.768412][T15906] [ 650.768412][T15906] the existing dependency chain (in reverse order) is: [ 650.769966][T15906] [ 650.769966][T15906] -> #2 (&blkcg->lock){....}-{2:2}: [ 650.771184][T15906] _raw_spin_lock+0x54/0x6c [ 650.772053][T15906] blkg_create+0x924/0x11c4 [ 650.772930][T15906] blkcg_init_disk+0x20c/0x480 [ 650.773853][T15906] __alloc_disk_node+0x234/0x438 [ 650.774786][T15906] __blk_alloc_disk+0x40/0xb8 [ 650.775629][T15906] brd_alloc+0x32c/0x6a4 [ 650.776467][T15906] brd_init+0x120/0x194 [ 650.777283][T15906] do_one_initcall+0x278/0x9f0 [ 650.778122][T15906] do_initcall_level+0x158/0x214 [ 650.779059][T15906] do_initcalls+0x58/0xac [ 650.779846][T15906] do_basic_setup+0x8c/0xa0 [ 650.780697][T15906] kernel_init_freeable+0x35c/0x4f0 [ 650.781677][T15906] kernel_init+0x24/0x1d8 [ 650.782521][T15906] ret_from_fork+0x10/0x20 [ 650.783374][T15906] [ 650.783374][T15906] -> #1 (&q->queue_lock){..-.}-{2:2}: [ 650.784563][T15906] _raw_spin_lock_irq+0x70/0x98 [ 650.785424][T15906] throtl_pending_timer_fn+0x100/0xe20 [ 650.786382][T15906] call_timer_fn+0x1b8/0x96c [ 650.787241][T15906] __run_timers+0x478/0x6d8 [ 650.788012][T15906] run_timer_softirq+0x7c/0x114 [ 650.788924][T15906] handle_softirqs+0x318/0xc90 [ 650.789778][T15906] __do_softirq+0x14/0x20 [ 650.790613][T15906] ____do_softirq+0x14/0x20 [ 650.791534][T15906] call_on_irq_stack+0x30/0x48 [ 650.792439][T15906] do_softirq_own_stack+0x20/0x2c [ 650.793401][T15906] __irq_exit_rcu+0x23c/0x430 [ 650.794334][T15906] irq_exit_rcu+0x14/0x84 [ 650.795147][T15906] el1_interrupt+0x38/0x54 [ 650.795983][T15906] el1h_64_irq_handler+0x18/0x24 [ 650.796924][T15906] el1h_64_irq+0x64/0x68 [ 650.797745][T15906] kasan_quarantine_put+0xd4/0x200 [ 650.798724][T15906] ____kasan_slab_free+0x154/0x1b0 [ 650.799692][T15906] __kasan_slab_free+0x18/0x28 [ 650.800607][T15906] slab_free_freelist_hook+0x16c/0x1e8 [ 650.801565][T15906] kmem_cache_free+0x118/0x318 [ 650.802467][T15906] pgtable_pte_page_dtor+0x58/0x1c8 [ 650.803457][T15906] free_pgd_range+0x4d0/0xb00 [ 650.804336][T15906] free_pgtables+0x2d8/0x348 [ 650.805201][T15906] exit_mmap+0x2a0/0x944 [ 650.805950][T15906] __mmput+0xe8/0x38c [ 650.806695][T15906] mmput+0x70/0xa8 [ 650.807415][T15906] exit_mm+0x20c/0x290 [ 650.808143][T15906] do_exit+0x4d0/0x19ac [ 650.808963][T15906] do_group_exit+0x198/0x238 [ 650.809857][T15906] get_signal+0x11f4/0x133c [ 650.810683][T15906] do_notify_resume+0x364/0x2c84 [ 650.811628][T15906] el0_svc+0x98/0x128 [ 650.812404][T15906] el0t_64_sync_handler+0x84/0xf0 [ 650.813372][T15906] el0t_64_sync+0x18c/0x190 [ 650.814207][T15906] [ 650.814207][T15906] -> #0 ((&sq->pending_timer)){+.-.}-{0:0}: [ 650.815584][T15906] __lock_acquire+0x2808/0x6634 [ 650.816427][T15906] lock_acquire+0x20c/0x638 [ 650.817255][T15906] __timer_delete_sync+0xa0/0x21c [ 650.818188][T15906] timer_delete_sync+0x24/0x34 [ 650.819045][T15906] throtl_pd_free+0x20/0x48 [ 650.819930][T15906] blkcg_deactivate_policy+0x318/0x54c [ 650.820913][T15906] blk_throtl_exit+0x9c/0x13c [ 650.821763][T15906] blkcg_init_disk+0x3d8/0x480 [ 650.822648][T15906] __alloc_disk_node+0x234/0x438 [ 650.823595][T15906] __blk_alloc_disk+0x40/0xb8 [ 650.824522][T15906] dm_create+0x514/0xf48 [ 650.825334][T15906] dev_create+0xf4/0x25c [ 650.826140][T15906] dm_ctl_ioctl+0xaac/0xf1c [ 650.826934][T15906] __arm64_sys_ioctl+0x14c/0x1c8 [ 650.827840][T15906] invoke_syscall+0x98/0x290 [ 650.828618][T15906] el0_svc_common+0x13c/0x258 [ 650.829413][T15906] do_el0_svc+0x5c/0x134 [ 650.830212][T15906] el0_svc+0x58/0x128 [ 650.830990][T15906] el0t_64_sync_handler+0x84/0xf0 [ 650.831878][T15906] el0t_64_sync+0x18c/0x190 [ 650.832773][T15906] [ 650.832773][T15906] other info that might help us debug this: [ 650.832773][T15906] [ 650.834448][T15906] Chain exists of: [ 650.834448][T15906] (&sq->pending_timer) --> &q->queue_lock --> &blkcg->lock [ 650.834448][T15906] [ 650.836763][T15906] Possible unsafe locking scenario: [ 650.836763][T15906] [ 650.838015][T15906] CPU0 CPU1 [ 650.838941][T15906] ---- ---- [ 650.839823][T15906] lock(&blkcg->lock); [ 650.840560][T15906] lock(&q->queue_lock); [ 650.841888][T15906] lock(&blkcg->lock); [ 650.842982][T15906] lock((&sq->pending_timer)); [ 650.843873][T15906] [ 650.843873][T15906] *** DEADLOCK *** [ 650.843873][T15906] [ 650.845305][T15906] 2 locks held by syz.2.3387/15906: [ 650.846286][T15906] #0: ffff0000cf7ed5b8 (&q->queue_lock){..-.}-{2:2}, at: blkcg_deactivate_policy+0xe4/0x54c [ 650.847906][T15906] #1: ffff80001c7e0a30 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x18c/0x54c [ 650.849696][T15906] [ 650.849696][T15906] stack backtrace: [ 650.850715][T15906] CPU: 1 PID: 15906 Comm: syz.2.3387 Not tainted syzkaller #0 [ 650.851930][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 650.853512][T15906] Call trace: [ 650.854115][T15906] dump_backtrace+0x1c4/0x1f0 [ 650.854865][T15906] show_stack+0x2c/0x3c [ 650.855565][T15906] __dump_stack+0x30/0x40 [ 650.856324][T15906] dump_stack_lvl+0xf4/0x15c [ 650.857114][T15906] dump_stack+0x1c/0x5c [ 650.857880][T15906] print_circular_bug+0x148/0x1b0 [ 650.858679][T15906] check_noncircular+0x264/0x2f8 [ 650.859472][T15906] __lock_acquire+0x2808/0x6634 [ 650.860322][T15906] lock_acquire+0x20c/0x638 [ 650.861056][T15906] __timer_delete_sync+0xa0/0x21c [ 650.861937][T15906] timer_delete_sync+0x24/0x34 [ 650.862757][T15906] throtl_pd_free+0x20/0x48 [ 650.863563][T15906] blkcg_deactivate_policy+0x318/0x54c [ 650.864459][T15906] blk_throtl_exit+0x9c/0x13c [ 650.865260][T15906] blkcg_init_disk+0x3d8/0x480 [ 650.866079][T15906] __alloc_disk_node+0x234/0x438 [ 650.866966][T15906] __blk_alloc_disk+0x40/0xb8 [ 650.867787][T15906] dm_create+0x514/0xf48 [ 650.868519][T15906] dev_create+0xf4/0x25c [ 650.869267][T15906] dm_ctl_ioctl+0xaac/0xf1c [ 650.870067][T15906] __arm64_sys_ioctl+0x14c/0x1c8 [ 650.870927][T15906] invoke_syscall+0x98/0x290 [ 650.871725][T15906] el0_svc_common+0x13c/0x258 [ 650.872554][T15906] do_el0_svc+0x5c/0x134 [ 650.873315][T15906] el0_svc+0x58/0x128 [ 650.873976][T15906] el0t_64_sync_handler+0x84/0xf0 [ 650.874783][T15906] el0t_64_sync+0x18c/0x190 [ 652.650357][ T4401] wlan1: Trigger new scan to find an IBSS to join [ 653.153038][ T4401] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 657.258518][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.259759][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.942426][ T5657] wlan1: Trigger new scan to find an IBSS to join [ 658.990120][ T4750] wlan1: Creating new IBSS network, BSSID c6:00:fc:7c:33:8c [ 659.481732][ T4346] Bluetooth: hci5: command 0x0406 tx timeout