last executing test programs: 3m20.148197355s ago: executing program 32 (id=909): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) clock_settime(0x17, &(0x7f0000000240)) 2m5.892304791s ago: executing program 5 (id=1778): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305", 0xe) 2m5.800775656s ago: executing program 5 (id=1781): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2m2.58155256s ago: executing program 33 (id=1824): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305", 0xe) 2m2.571248921s ago: executing program 5 (id=1826): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000bc0), &(0x7f0000000b80)='./file1\x00', 0x120800c, 0x0, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/88, 0x58) 2m2.458872319s ago: executing program 5 (id=1830): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 2m2.344327218s ago: executing program 5 (id=1835): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x65) 2m1.764354442s ago: executing program 5 (id=1841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) r2 = socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) listen(r2, 0x204) listen(r2, 0xfffffffd) socket$inet(0xa, 0x801, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m1.660451639s ago: executing program 34 (id=1841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) r2 = socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) listen(r2, 0x204) listen(r2, 0xfffffffd) socket$inet(0xa, 0x801, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m41.001273581s ago: executing program 6 (id=1947): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a3020") 1m40.94668551s ago: executing program 6 (id=1948): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r0, 0x0, 0x7ffff000) 1m40.843538827s ago: executing program 6 (id=1949): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 1m40.773191119s ago: executing program 6 (id=1951): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@bsdgroups}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001240)="$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") getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') statfs(&(0x7f0000004040)='./mnt\x00', &(0x7f0000004080)=""/58) 1m40.268037941s ago: executing program 6 (id=1953): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0240330007000000186a00000900000000000000030000006e06383ebcf370487139b5876d23262bce8f4fd585659e22c09f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0}]) 1m39.347794721s ago: executing program 6 (id=1958): socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, 0x0, &(0x7f0000000280), 0x800004, 0x0) fchdir(r3) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x12}) r4 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") 1m39.257918546s ago: executing program 35 (id=1958): socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, 0x0, &(0x7f0000000280), 0x800004, 0x0) fchdir(r3) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x12}) r4 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk") 1m17.191492667s ago: executing program 7 (id=2066): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400000200000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0xea60, @ANYBLOB="0400004001"], 0x48}}, 0x0) 1m17.127328237s ago: executing program 7 (id=2067): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r4}) 1m17.100495582s ago: executing program 7 (id=2068): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r0, 0x0, 0x7ffff000) 1m16.991700999s ago: executing program 7 (id=2072): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@bsdgroups}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001240)="$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") getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') statfs(&(0x7f0000004040)='./mnt\x00', &(0x7f0000004080)=""/58) 1m16.830996395s ago: executing program 7 (id=2080): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0), 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 1m15.922665703s ago: executing program 7 (id=2111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 1m14.447038473s ago: executing program 3 (id=2127): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x4, 0xfffffffffffffffb, 0x0, 0x84, 0x2, 0x0, [{0xfffffffffffffffd, 0x5, 0x1, '\x00', 0x1}, {0x1937e000000000, 0x6, 0x7, '\x00', 0x400}]}) 1m14.364284527s ago: executing program 3 (id=2128): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@bsdgroups}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001240)="$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") add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') statfs(&(0x7f0000004040)='./mnt\x00', &(0x7f0000004080)=""/58) 1m14.28167211s ago: executing program 3 (id=2129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0) 1m14.246966186s ago: executing program 3 (id=2130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r0, 0x0, 0x7ffff000) 1m14.219684091s ago: executing program 3 (id=2131): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000180)=""/88, 0x58) 1m12.094825907s ago: executing program 8 (id=2138): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x4, 0xfffffffffffffffb, 0x0, 0x84, 0x2, 0x0, [{0xfffffffffffffffd, 0x5, 0x1, '\x00', 0x1}, {0x1937e000000000, 0x6, 0x7, '\x00', 0x400}]}) 1m12.030791477s ago: executing program 8 (id=2139): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@bsdgroups}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001240)="$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") add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') statfs(&(0x7f0000004040)='./mnt\x00', &(0x7f0000004080)=""/58) 1m11.944029741s ago: executing program 8 (id=2140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0) 1m11.898860988s ago: executing program 8 (id=2141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r0, 0x0, 0x7ffff000) 1m11.82437136s ago: executing program 8 (id=2142): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) 1m0.156383709s ago: executing program 36 (id=2111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 59.752200705s ago: executing program 3 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0) 59.627866546s ago: executing program 37 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0) 59.583859922s ago: executing program 8 (id=2155): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x4000094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f1, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "5f62c2f72f85c340cb0ff369e1a45608"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 59.566898865s ago: executing program 38 (id=2155): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x4000094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f1, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "5f62c2f72f85c340cb0ff369e1a45608"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 12.375175006s ago: executing program 2 (id=2536): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r4}) 1.759368414s ago: executing program 2 (id=2539): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 1.190215646s ago: executing program 4 (id=2714): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) 1.132223116s ago: executing program 4 (id=2716): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000), 0x8) 1.022228173s ago: executing program 1 (id=2719): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, 0x0) 972.247212ms ago: executing program 1 (id=2720): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4001c00) 888.326585ms ago: executing program 2 (id=2722): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfdff, 0x2, 0xf5ff}, 0x10) 844.342493ms ago: executing program 2 (id=2725): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 775.482994ms ago: executing program 1 (id=2727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 723.639632ms ago: executing program 1 (id=2728): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@bsdgroups}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001240)="$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") getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') statfs(0x0, &(0x7f0000004080)=""/58) 722.452933ms ago: executing program 0 (id=2729): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x2, @pix_mp={0xfffffff8, 0xb, 0x31303553, 0x8, 0x5, [{0xd, 0x2e5}, {0x0, 0x1}, {0x0, 0x5}, {0x33, 0x8}, {0x3000, 0x401}, {0x6, 0x10000}, {0x1, 0xfffffffe}, {0x0, 0x23}], 0x1, 0x0, 0x4, 0x2, 0x3}}) 704.776015ms ago: executing program 2 (id=2730): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0xfffffffffffffffe) 668.005771ms ago: executing program 2 (id=2732): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 667.234982ms ago: executing program 0 (id=2733): r0 = syz_open_dev$vcsa(0x0, 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x4300}, {&(0x7f0000000900), 0x4000}], 0xe) 607.583471ms ago: executing program 1 (id=2734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000006"], 0x4a) 585.422805ms ago: executing program 9 (id=2735): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfdff, 0x2, 0xf5ff}, 0x10) 512.040077ms ago: executing program 0 (id=2736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x143, 0x2) sendfile(r1, r1, 0x0, 0x2000000000007) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x10) sendmmsg(r1, &(0x7f0000008d80), 0x0, 0x81) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000540)={0x1, [0x0]}, &(0x7f0000000580)=0x8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r0, 0x2, 0xfffffffffffffffe) setpriority(0x2, r4, 0x8001) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x74, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 492.30251ms ago: executing program 9 (id=2737): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 483.104001ms ago: executing program 0 (id=2738): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000"], 0x5d74}, 0x1, 0x0, 0x0, 0x400c810}, 0xc860) 395.848166ms ago: executing program 9 (id=2739): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x23, 0x4, 0xb) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x23, 0x61}}}}, [@key_params, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cc}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x5c}}, 0x8800) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 315.378529ms ago: executing program 9 (id=2740): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 272.037566ms ago: executing program 0 (id=2741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x9c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x9c}}, 0x804) 271.161366ms ago: executing program 4 (id=2742): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 236.190382ms ago: executing program 4 (id=2743): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 144.265936ms ago: executing program 1 (id=2744): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@bsdgroups}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001240)="$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") getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') statfs(&(0x7f0000004040)='./mnt\x00', 0x0) 127.368839ms ago: executing program 39 (id=2744): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@bsdgroups}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001240)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') statfs(&(0x7f0000004040)='./mnt\x00', 0x0) 123.283ms ago: executing program 0 (id=2746): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 103.486143ms ago: executing program 9 (id=2747): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 24.262566ms ago: executing program 4 (id=2748): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfdff, 0x2, 0xf5ff}, 0x10) 13.255378ms ago: executing program 9 (id=2749): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 0s ago: executing program 4 (id=2750): gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:01.0\n', 0xd) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, &(0x7f0000000240)='driver_override\x00', 0x1, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000340)='bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='0000:00:01.0\n', 0xd) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004, @thr={&(0x7f0000000000)="416c2a4251b4ff3b96ad187820eb", &(0x7f0000000080)}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0xbc9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): NGE): vxcan0: link becomes ready [ 209.465359][T10067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.467177][T10067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.469586][T10067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.471345][T10067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.472954][T10067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.474641][T10067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.491691][T10067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.493254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.495150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.501469][T10067] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.502897][T10067] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.504547][T10067] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.506284][T10067] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.594334][ T5533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.595678][ T5533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.597111][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.615671][ T5533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.616997][ T5533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.624914][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.637896][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.640342][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.642134][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.643701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.645870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.648201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.655098][T10125] device veth0_vlan entered promiscuous mode [ 209.679174][T10357] loop3: detected capacity change from 0 to 512 [ 209.695838][T10125] device veth1_vlan entered promiscuous mode [ 209.732162][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.733973][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.735646][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.741230][T10357] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 209.741483][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.742765][T10357] System zones: 0-2, 18-18, 34-34 [ 209.747262][T10125] device veth0_macvtap entered promiscuous mode [ 209.755265][T10125] device veth1_macvtap entered promiscuous mode [ 209.768866][T10357] EXT4-fs (loop3): 1 orphan inode deleted [ 209.771135][T10357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.791917][T10067] EXT4-fs (loop3): unmounting filesystem. [ 209.914669][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.916588][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.919639][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.921582][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.923521][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.925634][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.927984][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.930143][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.930928][T10376] Soft offlining pfn 0x13de7d at process virtual address 0x20000000 [ 209.932789][T10125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.936620][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.938510][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.940180][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.942136][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.943963][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.946154][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.948379][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.950470][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.952301][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.952920][T10376] Soft offlining pfn 0x138b4e at process virtual address 0x20001000 [ 209.954413][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.957954][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.960876][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.275652][T10125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.279661][T10376] Soft offlining pfn 0x13ff3b at process virtual address 0x20002000 [ 210.287866][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.290348][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.297179][T10125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.301639][T10125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.303276][T10125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.304871][T10125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.339026][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.340523][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.364733][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.375471][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.377090][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.386657][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.656762][T10408] loop8: detected capacity change from 0 to 1024 [ 210.664817][T10408] EXT4-fs: Ignoring removed bh option [ 210.671761][T10410] loop7: detected capacity change from 0 to 512 [ 210.695488][T10408] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 210.755532][T10125] EXT4-fs (loop8): unmounting filesystem. [ 210.764065][T10410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 210.765872][T10410] System zones: 0-2, 18-18, 34-34 [ 210.768628][T10410] EXT4-fs (loop7): 1 orphan inode deleted [ 210.769843][T10410] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 210.790548][ T7075] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.798526][ T9444] EXT4-fs (loop7): unmounting filesystem. [ 210.819056][T10419] netlink: 'syz.0.2009': attribute type 4 has an invalid length. [ 210.921749][T10429] Soft offlining pfn 0x210db1 at process virtual address 0x20000000 [ 210.939179][ T7075] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.944578][T10429] Memory failure: 0x210db1: unhandlable page. [ 211.033462][T10449] loop3: detected capacity change from 0 to 512 [ 211.051587][T10449] EXT4-fs (loop3): Test dummy encryption mode enabled [ 211.074019][T10449] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.2021: inode has both inline data and extents flags [ 211.076311][T10449] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2021: couldn't read orphan inode 15 (err -117) [ 211.078671][T10447] loop7: detected capacity change from 0 to 1024 [ 211.079399][T10449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.084489][T10447] EXT4-fs: Ignoring removed bh option [ 211.088523][T10452] loop8: detected capacity change from 0 to 512 [ 211.099852][ T7075] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.104191][T10452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 211.105854][T10452] System zones: 0-2, 18-18, 34-34 [ 211.111265][T10452] EXT4-fs (loop8): 1 orphan inode deleted [ 211.112521][T10452] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 211.418902][T10125] EXT4-fs (loop8): unmounting filesystem. [ 211.426311][T10447] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 211.433313][T10067] EXT4-fs (loop3): unmounting filesystem. [ 211.459586][ T9444] EXT4-fs (loop7): unmounting filesystem. [ 211.474028][ T7075] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.511756][T10462] device syzkaller0 entered promiscuous mode [ 211.538769][T10469] netlink: 'syz.8.2025': attribute type 4 has an invalid length. [ 211.660030][T10477] Soft offlining pfn 0x210db1 at process virtual address 0x20000000 [ 211.665547][T10477] Memory failure: 0x210db1: unhandlable page. [ 211.692251][T10481] loop7: detected capacity change from 0 to 512 [ 211.742186][T10481] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 211.743705][T10481] System zones: 0-2, 18-18, 34-34 [ 211.764384][T10481] EXT4-fs (loop7): 1 orphan inode deleted [ 211.765454][T10481] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 211.820613][ T9444] EXT4-fs (loop7): unmounting filesystem. [ 212.008375][T10524] Soft offlining pfn 0x210db1 at process virtual address 0x20000000 [ 212.021698][T10524] Memory failure: 0x210db1: unhandlable page. [ 212.063401][T10516] netlink: 'syz.7.2041': attribute type 4 has an invalid length. [ 212.374029][T10570] netlink: 'syz.8.2058': attribute type 4 has an invalid length. [ 212.396256][T10574] loop7: detected capacity change from 0 to 1024 [ 212.416823][T10574] EXT4-fs: Ignoring removed bh option [ 212.509142][T10583] FAULT_INJECTION: forcing a failure. [ 212.509142][T10583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.512091][T10583] CPU: 0 PID: 10583 Comm: syz.8.2061 Not tainted syzkaller #0 [ 212.513543][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 212.515606][T10583] Call trace: [ 212.516298][T10583] dump_backtrace+0x1c4/0x1f0 [ 212.517206][T10583] show_stack+0x2c/0x3c [ 212.517993][T10583] __dump_stack+0x30/0x40 [ 212.518818][T10583] dump_stack_lvl+0xf4/0x15c [ 212.519666][T10583] dump_stack+0x1c/0x5c [ 212.520479][T10583] should_fail_ex+0x3cc/0x524 [ 212.521386][T10583] should_fail+0x14/0x24 [ 212.522187][T10583] should_fail_usercopy+0x20/0x30 [ 212.523139][T10583] copyin+0x2c/0x148 [ 212.523879][T10583] _copy_from_iter+0x404/0xf98 [ 212.524782][T10583] bcm_tx_setup+0x5a8/0x1704 [ 212.525607][T10583] bcm_sendmsg+0x3a8/0x5e0 [ 212.526392][T10583] ____sys_sendmsg+0x588/0x90c [ 212.527245][T10583] __sys_sendmsg+0x288/0x374 [ 212.528115][T10583] __arm64_sys_sendmsg+0x80/0x94 [ 212.529042][T10583] invoke_syscall+0x98/0x290 [ 212.529910][T10583] el0_svc_common+0x13c/0x258 [ 212.530784][T10583] do_el0_svc+0x5c/0x134 [ 212.531519][T10583] el0_svc+0x58/0x128 [ 212.532213][T10583] el0t_64_sync_handler+0x84/0xf0 [ 212.533102][T10583] el0t_64_sync+0x18c/0x190 [ 212.540435][T10574] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 212.594228][ T9444] EXT4-fs (loop7): unmounting filesystem. [ 212.882341][T10609] fuse: Bad value for 'fd' [ 212.948847][T10620] netlink: 'syz.8.2073': attribute type 4 has an invalid length. [ 212.952042][T10618] loop7: detected capacity change from 0 to 1024 [ 212.964252][T10618] EXT4-fs: Ignoring removed bh option [ 213.005010][T10618] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 213.018107][T10618] Could not find key with description: [syz] [ 213.022622][T10618] process_request_key_err: No key [ 213.023597][T10618] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 213.036059][T10618] One or more global auth toks could not properly register; rc = [-2] [ 213.042148][T10618] Error parsing options; rc = [-2] [ 213.095150][ T9444] EXT4-fs (loop7): unmounting filesystem. [ 213.152207][T10640] fuse: Bad value for 'fd' [ 213.398058][T10674] Could not find key with description: [syz] [ 213.399320][T10674] process_request_key_err: No key [ 213.400238][T10674] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 213.402641][T10674] One or more global auth toks could not properly register; rc = [-2] [ 213.404150][T10674] Error parsing options; rc = [-2] [ 213.488187][T10684] device-mapper: table: 248:1: : unknown target type [ 213.489667][T10684] device-mapper: ioctl: error adding target to table [ 213.526732][T10693] fuse: Bad value for 'fd' [ 213.564555][T10677] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 213.603694][T10700] loop8: detected capacity change from 0 to 512 [ 213.614638][T10700] EXT4-fs (loop8): Test dummy encryption mode enabled [ 213.621454][T10700] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.2098: inode has both inline data and extents flags [ 213.624322][T10700] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2098: couldn't read orphan inode 15 (err -117) [ 213.631270][T10700] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 213.700765][T10125] EXT4-fs (loop8): unmounting filesystem. [ 213.765112][T10714] Could not find key with description: [syz] [ 213.766214][T10714] process_request_key_err: No key [ 213.767127][T10714] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 213.792609][T10714] One or more global auth toks could not properly register; rc = [-2] [ 213.798793][T10714] Error parsing options; rc = [-2] [ 214.010759][ T4335] Bluetooth: hci0: command 0x0405 tx timeout [ 214.164447][T10755] netlink: 'syz.0.2113': attribute type 4 has an invalid length. [ 214.214659][T10749] device syzkaller0 entered promiscuous mode [ 214.291269][ T7075] device hsr_slave_0 left promiscuous mode [ 214.302131][T10769] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 214.303858][T10769] System zones: 0-2, 18-18, 34-34 [ 214.306346][T10769] EXT4-fs (loop3): 1 orphan inode deleted [ 214.308127][T10769] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.326702][T10067] EXT4-fs (loop3): unmounting filesystem. [ 214.332212][ T7075] device hsr_slave_1 left promiscuous mode [ 214.375933][T10780] EXT4-fs: Ignoring removed bh option [ 214.396829][T10780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.397641][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.400407][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.402435][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.403999][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.406149][ T7075] device bridge_slave_1 left promiscuous mode [ 214.408770][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.413972][T10780] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 214.417022][T10780] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 214.420024][T10780] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 214.422328][T10780] One or more global auth toks could not properly register; rc = [-22] [ 214.423956][T10780] Error parsing options; rc = [-22] [ 214.428182][ T7075] device bridge_slave_0 left promiscuous mode [ 214.430533][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.443959][T10067] EXT4-fs (loop3): unmounting filesystem. [ 214.535732][T10794] EXT4-fs (loop3): Test dummy encryption mode enabled [ 214.545763][T10794] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.2120: inode has both inline data and extents flags [ 214.551888][T10794] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2120: couldn't read orphan inode 15 (err -117) [ 214.554729][T10794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.567728][ T7075] device veth1_macvtap left promiscuous mode [ 214.571205][ T7075] device veth0_macvtap left promiscuous mode [ 214.573495][ T7075] device veth1_vlan left promiscuous mode [ 214.575322][ T7075] device veth0_vlan left promiscuous mode [ 214.577177][T10067] EXT4-fs (loop3): unmounting filesystem. [ 215.482670][T10810] set_capacity_and_notify: 3 callbacks suppressed [ 215.482682][T10810] loop3: detected capacity change from 0 to 512 [ 215.493868][T10810] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 215.495371][T10810] System zones: 0-2, 18-18, 34-34 [ 215.498092][T10810] EXT4-fs (loop3): 1 orphan inode deleted [ 215.499171][T10810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.514001][T10067] EXT4-fs (loop3): unmounting filesystem. [ 215.543185][T10814] loop3: detected capacity change from 0 to 1024 [ 215.544777][T10814] EXT4-fs: Ignoring removed bh option [ 215.587197][T10814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.605172][T10814] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 215.607226][T10814] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 215.618666][T10814] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 215.620624][T10814] One or more global auth toks could not properly register; rc = [-22] [ 215.622130][T10814] Error parsing options; rc = [-22] [ 215.636840][T10067] EXT4-fs (loop3): unmounting filesystem. [ 216.619799][ T7075] team0 (unregistering): Port device team_slave_1 removed [ 216.758611][T10724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.784450][ T7075] team0 (unregistering): Port device team_slave_0 removed [ 216.877090][T10827] binder: 10826:10827 ioctl c0306201 0 returned -14 [ 216.978528][ T7075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.167877][ T7075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.831941][T10836] loop8: detected capacity change from 0 to 512 [ 217.870318][T10836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 217.871836][T10836] System zones: 0-2, 18-18, 34-34 [ 217.873943][T10836] EXT4-fs (loop8): 1 orphan inode deleted [ 217.875006][T10836] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 217.895937][T10125] EXT4-fs (loop8): unmounting filesystem. [ 217.920961][T10841] loop8: detected capacity change from 0 to 1024 [ 217.938045][T10841] EXT4-fs: Ignoring removed bh option [ 217.949238][T10841] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 217.955063][T10841] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 217.956829][T10841] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 217.959904][T10841] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 217.961985][T10841] One or more global auth toks could not properly register; rc = [-22] [ 217.963566][T10841] Error parsing options; rc = [-22] [ 217.976171][T10125] EXT4-fs (loop8): unmounting filesystem. [ 218.569401][ T7075] bond0 (unregistering): Released all slaves [ 229.855983][ T4335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.858626][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.860346][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.861979][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.863988][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.865337][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.040990][T10859] binder: 10858:10859 ioctl c0306201 0 returned -14 [ 230.301993][T10851] chnl_net:caif_netlink_parms(): no params data found [ 230.369097][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.370733][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.372500][T10851] device bridge_slave_0 entered promiscuous mode [ 230.375049][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.376507][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.381024][T10851] device bridge_slave_1 entered promiscuous mode [ 230.401745][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.423937][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.451258][T10851] team0: Port device team_slave_0 added [ 230.453377][T10851] team0: Port device team_slave_1 added [ 230.465839][ T4345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.743203][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.744370][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.748888][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.751085][ T4345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.751346][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.753573][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.755825][ T4345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.758200][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.768799][ T4345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.770703][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.772377][ T4345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.807126][T10851] device hsr_slave_0 entered promiscuous mode [ 230.810799][ T4345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.814207][ T4345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.816334][ T4345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.819116][ T4345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.820930][ T4345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.822433][ T4345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.838417][T10851] device hsr_slave_1 entered promiscuous mode [ 231.100690][T10903] chnl_net:caif_netlink_parms(): no params data found [ 231.927387][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 232.067123][T10851] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 232.100967][T10910] chnl_net:caif_netlink_parms(): no params data found [ 232.270463][ T7075] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.274065][T10851] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 232.308837][T10851] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 232.359051][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.360524][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.362507][T10903] device bridge_slave_0 entered promiscuous mode [ 232.429889][ T7075] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.432627][T10851] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 232.439822][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.441080][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.442638][T10903] device bridge_slave_1 entered promiscuous mode [ 232.600196][ T7075] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.611586][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.613232][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.614903][T10910] device bridge_slave_0 entered promiscuous mode [ 232.619385][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.808242][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 232.888399][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 232.922541][T10910] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.923924][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.925653][T10910] device bridge_slave_1 entered promiscuous mode [ 232.968939][ T7075] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.974395][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.986895][T10910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.001102][T10910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.014637][T10903] team0: Port device team_slave_0 added [ 233.019202][T10903] team0: Port device team_slave_1 added [ 233.025233][T10910] team0: Port device team_slave_0 added [ 233.031034][T10910] team0: Port device team_slave_1 added [ 233.034892][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.036121][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.041440][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.062346][T10910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.064078][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.074702][T10910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.079350][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.080839][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.086238][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.101764][T10910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.103104][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.111776][T10910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.129045][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.268901][T10910] device hsr_slave_0 entered promiscuous mode [ 233.318505][T10910] device hsr_slave_1 entered promiscuous mode [ 233.367372][T10910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.368758][T10910] Cannot create hsr debugfs directory [ 233.428716][T10903] device hsr_slave_0 entered promiscuous mode [ 233.448330][T10903] device hsr_slave_1 entered promiscuous mode [ 233.487462][T10903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.488956][T10903] Cannot create hsr debugfs directory [ 233.493469][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.530655][ T7075] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.542654][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.544348][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.609824][ T7075] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.625579][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.627409][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.628868][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.630108][ T5533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.631622][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.633368][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.634886][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.636196][ T5533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.638200][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.639974][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.642211][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.643998][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.646523][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.652127][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.712540][ T7075] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.715746][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.718822][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.840988][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.842848][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.845705][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.847975][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.888631][ T7075] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.896690][T11040] FAULT_INJECTION: forcing a failure. [ 233.896690][T11040] name failslab, interval 1, probability 0, space 0, times 0 [ 233.903420][T11040] CPU: 1 PID: 11040 Comm: syz.0.2169 Not tainted syzkaller #0 [ 233.904662][T11040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 233.906311][T11040] Call trace: [ 233.906834][T11040] dump_backtrace+0x1c4/0x1f0 [ 233.907607][T11040] show_stack+0x2c/0x3c [ 233.908382][T11040] __dump_stack+0x30/0x40 [ 233.909192][T11040] dump_stack_lvl+0xf4/0x15c [ 233.910053][T11040] dump_stack+0x1c/0x5c [ 233.910837][T11040] should_fail_ex+0x3cc/0x524 [ 233.911708][T11040] __should_failslab+0xc0/0x11c [ 233.912616][T11040] should_failslab+0x10/0x28 [ 233.913473][T11040] __kmem_cache_alloc_node+0x7c/0x318 [ 233.914466][T11040] __kmalloc+0xc4/0x180 [ 233.915352][T11040] __register_sysctl_table+0xd4/0xc88 [ 233.916506][T11040] register_net_sysctl+0x31c/0x364 [ 233.917618][T11040] neigh_sysctl_register+0x8e0/0x9bc [ 233.918745][T11040] addrconf_sysctl_register+0xb4/0x194 [ 233.919874][T11040] ipv6_add_dev+0xa08/0xeec [ 233.920804][T11040] addrconf_notify+0x504/0xc98 [ 233.921765][T11040] raw_notifier_call_chain+0xd8/0x168 [ 233.922916][T11040] call_netdevice_notifiers+0x110/0x198 [ 233.924023][T11040] register_netdevice+0x11c4/0x1650 [ 233.925088][T11040] tun_set_iff+0x624/0xb84 [ 233.925934][T11040] __tun_chr_ioctl+0x780/0x1dac [ 233.926893][T11040] tun_chr_ioctl+0x38/0x4c [ 233.927777][T11040] __arm64_sys_ioctl+0x14c/0x1c8 [ 233.928726][T11040] invoke_syscall+0x98/0x290 [ 233.929586][T11040] el0_svc_common+0x13c/0x258 [ 233.930519][T11040] do_el0_svc+0x5c/0x134 [ 233.931334][T11040] el0_svc+0x58/0x128 [ 233.932117][T11040] el0t_64_sync_handler+0x84/0xf0 [ 233.933049][T11040] el0t_64_sync+0x18c/0x190 [ 233.943852][T10851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.944914][T11044] fuse: Bad value for 'fd' [ 234.033393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.034857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.039320][T10851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.153478][ T7075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.269404][ T7075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.276810][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.280814][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.288899][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.290784][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.294501][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.296252][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.315650][T10851] device veth0_vlan entered promiscuous mode [ 234.359351][ T7075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.363449][T10851] device veth1_vlan entered promiscuous mode [ 234.387970][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.391701][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.393309][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.394830][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.402818][T10851] device veth0_macvtap entered promiscuous mode [ 234.405655][T10851] device veth1_macvtap entered promiscuous mode [ 234.450729][ T7075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.455940][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 234.464211][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.466179][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.473087][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.474941][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.476611][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.481969][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.483678][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.485465][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.488556][T10851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.490156][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.492062][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.493808][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.495633][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.551584][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.553642][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.555365][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.557154][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.560762][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.562581][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.564281][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.566115][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.573325][T10851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.575249][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.576825][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.582620][T10851] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.584083][T10851] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.585710][T10851] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.590680][T10851] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.634420][ T1752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.635757][ T1752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.637233][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.708338][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.709703][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.711724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.025390][ T4335] Bluetooth: hci1: command 0x041b tx timeout [ 235.026503][ T4335] Bluetooth: hci3: command 0x041b tx timeout [ 235.532878][T11141] FAULT_INJECTION: forcing a failure. [ 235.532878][T11141] name failslab, interval 1, probability 0, space 0, times 0 [ 235.535434][T11141] CPU: 1 PID: 11141 Comm: syz.0.2178 Not tainted syzkaller #0 [ 235.536689][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 235.538604][T11141] Call trace: [ 235.539240][T11141] dump_backtrace+0x1c4/0x1f0 [ 235.540107][T11141] show_stack+0x2c/0x3c [ 235.540922][T11141] __dump_stack+0x30/0x40 [ 235.541747][T11141] dump_stack_lvl+0xf4/0x15c [ 235.542615][T11141] dump_stack+0x1c/0x5c [ 235.543387][T11141] should_fail_ex+0x3cc/0x524 [ 235.544245][T11141] __should_failslab+0xc0/0x11c [ 235.545160][T11141] should_failslab+0x10/0x28 [ 235.546026][T11141] kmem_cache_alloc_node+0x8c/0x344 [ 235.547009][T11141] __alloc_skb+0x128/0x728 [ 235.547850][T11141] tipc_buf_acquire+0x34/0xe8 [ 235.548761][T11141] tipc_named_publish+0x1fc/0x638 [ 235.549693][T11141] tipc_nametbl_publish+0xe8/0x1e4 [ 235.550600][T11141] tipc_sk_publish+0x17c/0x384 [ 235.551498][T11141] tipc_sk_join+0x2d4/0x508 [ 235.552359][T11141] tipc_setsockopt+0x3b8/0x7a8 [ 235.553276][T11141] __sys_setsockopt+0x2fc/0x50c [ 235.554212][T11141] __arm64_sys_setsockopt+0xc0/0xdc [ 235.555210][T11141] invoke_syscall+0x98/0x290 [ 235.556093][T11141] el0_svc_common+0x13c/0x258 [ 235.556979][T11141] do_el0_svc+0x5c/0x134 [ 235.557785][T11141] el0_svc+0x58/0x128 [ 235.558561][T11141] el0t_64_sync_handler+0x84/0xf0 [ 235.559565][T11141] el0t_64_sync+0x18c/0x190 [ 235.560447][T11141] tipc: Publication distribution failure [ 236.191325][T11158] FAULT_INJECTION: forcing a failure. [ 236.191325][T11158] name fail_futex, interval 1, probability 0, space 0, times 0 [ 236.193569][T11158] CPU: 1 PID: 11158 Comm: syz.9.2180 Not tainted syzkaller #0 [ 236.194809][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 236.196421][T11158] Call trace: [ 236.196911][T11158] dump_backtrace+0x1c4/0x1f0 [ 236.197725][T11158] show_stack+0x2c/0x3c [ 236.198480][T11158] __dump_stack+0x30/0x40 [ 236.199272][T11158] dump_stack_lvl+0xf4/0x15c [ 236.200091][T11158] dump_stack+0x1c/0x5c [ 236.200850][T11158] should_fail_ex+0x3cc/0x524 [ 236.201736][T11158] should_fail+0x14/0x24 [ 236.202544][T11158] get_futex_key+0x904/0xfb0 [ 236.203415][T11158] futex_wait_setup+0xbc/0x320 [ 236.204278][T11158] futex_wait+0x164/0x424 [ 236.205087][T11158] do_futex+0x2e8/0x340 [ 236.205923][T11158] __arm64_sys_futex+0x390/0x414 [ 236.206816][T11158] invoke_syscall+0x98/0x290 [ 236.207666][T11158] el0_svc_common+0x13c/0x258 [ 236.208451][T11158] do_el0_svc+0x5c/0x134 [ 236.209197][T11158] el0_svc+0x58/0x128 [ 236.209898][T11158] el0t_64_sync_handler+0x84/0xf0 [ 236.210790][T11158] el0t_64_sync+0x18c/0x190 [ 236.734218][T11191] loop9: detected capacity change from 0 to 512 [ 236.766568][T11191] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 236.854576][T10851] EXT4-fs (loop9): unmounting filesystem. [ 236.973422][T11201] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 236.976690][T11201] sl0: header compression turned on [ 237.047666][ T4345] Bluetooth: hci3: command 0x040f tx timeout [ 237.048868][ T4345] Bluetooth: hci1: command 0x040f tx timeout [ 238.103916][T11227] FAULT_INJECTION: forcing a failure. [ 238.103916][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 238.106234][T11227] CPU: 1 PID: 11227 Comm: syz.9.2188 Not tainted syzkaller #0 [ 238.107738][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 238.109850][T11227] Call trace: [ 238.110531][T11227] dump_backtrace+0x1c4/0x1f0 [ 238.111544][T11227] show_stack+0x2c/0x3c [ 238.112342][T11227] __dump_stack+0x30/0x40 [ 238.113157][T11227] dump_stack_lvl+0xf4/0x15c [ 238.114133][T11227] dump_stack+0x1c/0x5c [ 238.114988][T11227] should_fail_ex+0x3cc/0x524 [ 238.115939][T11227] __should_failslab+0xc0/0x11c [ 238.116909][T11227] should_failslab+0x10/0x28 [ 238.117821][T11227] kmem_cache_alloc_node+0x8c/0x344 [ 238.118893][T11227] __alloc_skb+0x128/0x728 [ 238.119768][T11227] tipc_buf_acquire+0x34/0xe8 [ 238.120693][T11227] tipc_named_publish+0x1fc/0x638 [ 238.121703][T11227] tipc_nametbl_publish+0xe8/0x1e4 [ 238.122743][T11227] tipc_sk_publish+0x17c/0x384 [ 238.123768][T11227] tipc_sk_join+0x2d4/0x508 [ 238.124711][T11227] tipc_setsockopt+0x3b8/0x7a8 [ 238.125637][T11227] __sys_setsockopt+0x2fc/0x50c [ 238.126581][T11227] __arm64_sys_setsockopt+0xc0/0xdc [ 238.127602][T11227] invoke_syscall+0x98/0x290 [ 238.128500][T11227] el0_svc_common+0x13c/0x258 [ 238.129338][T11227] do_el0_svc+0x5c/0x134 [ 238.130130][T11227] el0_svc+0x58/0x128 [ 238.130856][T11227] el0t_64_sync_handler+0x84/0xf0 [ 238.131789][T11227] el0t_64_sync+0x18c/0x190 [ 238.132632][T11227] tipc: Publication distribution failure [ 238.522612][T11271] fuse: Bad value for 'fd' [ 239.157630][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 239.159064][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 240.694821][T10903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.018876][T10903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.070296][T10903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.118551][T10903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.222952][T10910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.550082][T10910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.588552][T10910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.640473][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.668398][T10910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.723146][ T7075] device hsr_slave_0 left promiscuous mode [ 241.757595][ T7075] device hsr_slave_1 left promiscuous mode [ 241.867453][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.868796][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.870975][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.872314][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.873984][ T7075] device bridge_slave_1 left promiscuous mode [ 241.875159][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.917906][ T7075] device bridge_slave_0 left promiscuous mode [ 241.919156][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.962683][ T7075] device hsr_slave_0 left promiscuous mode [ 241.997913][ T7075] device hsr_slave_1 left promiscuous mode [ 242.097388][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.099464][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.101208][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.102579][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.104186][ T7075] device bridge_slave_1 left promiscuous mode [ 242.105363][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.138415][ T7075] device bridge_slave_0 left promiscuous mode [ 242.139680][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.179586][ T7075] device hsr_slave_0 left promiscuous mode [ 242.217488][ T7075] device hsr_slave_1 left promiscuous mode [ 242.300567][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.302002][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.303640][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.304873][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.306380][ T7075] device bridge_slave_1 left promiscuous mode [ 242.307740][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.347909][ T7075] device bridge_slave_0 left promiscuous mode [ 242.349143][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.487470][ T7075] device veth1_macvtap left promiscuous mode [ 242.488555][ T7075] device veth0_macvtap left promiscuous mode [ 242.489639][ T7075] device veth1_vlan left promiscuous mode [ 242.490743][ T7075] device veth0_vlan left promiscuous mode [ 242.577544][ T7075] device veth1_macvtap left promiscuous mode [ 242.578650][ T7075] device veth0_macvtap left promiscuous mode [ 242.579803][ T7075] device veth1_vlan left promiscuous mode [ 242.580857][ T7075] device veth0_vlan left promiscuous mode [ 242.667473][ T7075] device veth1_macvtap left promiscuous mode [ 242.668646][ T7075] device veth0_macvtap left promiscuous mode [ 242.669830][ T7075] device veth1_vlan left promiscuous mode [ 242.670886][ T7075] device veth0_vlan left promiscuous mode [ 245.030063][ T7075] team0 (unregistering): Port device team_slave_1 removed [ 245.248821][ T7075] team0 (unregistering): Port device team_slave_0 removed [ 245.427855][ T7075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.647863][ T7075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.208931][ T7075] bond0 (unregistering): Released all slaves [ 248.808227][ T2065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.810009][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.811061][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.620558][ T7075] team0 (unregistering): Port device team_slave_1 removed [ 249.818161][ T7075] team0 (unregistering): Port device team_slave_0 removed [ 249.998252][ T7075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.198910][ T7075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.769324][ T7075] bond0 (unregistering): Released all slaves [ 254.159787][ T7075] team0 (unregistering): Port device team_slave_1 removed [ 254.339779][ T7075] team0 (unregistering): Port device team_slave_0 removed [ 254.508140][ T7075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.728488][ T7075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.278319][ T7075] bond0 (unregistering): Released all slaves [ 256.592960][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.603633][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.605277][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.606867][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.608758][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.610408][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.611685][ T8953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.613229][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.614947][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.616558][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.617884][ T8953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.620050][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.631956][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.633915][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.638289][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.644089][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.645819][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.648462][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.654821][T10903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.656732][T10903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.659899][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.661639][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.663351][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.665119][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.666764][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.670422][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.708304][T10910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.725040][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.726623][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.735873][T10910] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.743757][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.745547][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.747068][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.748591][ T8953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.752638][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.758367][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.760239][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.761798][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.763064][ T7473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.766735][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.779517][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.780908][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.782191][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.785806][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.793170][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.795500][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.798512][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.814513][T10903] device veth0_vlan entered promiscuous mode [ 256.832416][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.834141][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.835862][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.838016][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.845926][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.860819][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.863986][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.865616][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.869557][T10903] device veth1_vlan entered promiscuous mode [ 256.875464][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.877205][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.879626][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.881306][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.893158][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.895034][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.899996][T10910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.904269][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.905950][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.914098][T10903] device veth0_macvtap entered promiscuous mode [ 256.918780][T10903] device veth1_macvtap entered promiscuous mode [ 256.924062][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.925878][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.929883][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.931784][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.934362][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.935757][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.937774][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.939264][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.948193][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.952990][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.954827][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.956471][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.961434][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.967137][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.971896][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.973854][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.977052][T10903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.982893][T10903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.984548][T10903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.986132][T10903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.042241][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.043705][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.045268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.053736][T10910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.058095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.059678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.072248][ T5533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.073667][ T5533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.075114][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.354211][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.366733][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.576002][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.579975][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.583100][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.587242][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.601052][T10910] device veth0_vlan entered promiscuous mode [ 257.605753][T10910] device veth1_vlan entered promiscuous mode [ 257.612817][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.627166][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.632543][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.636782][T10910] device veth0_macvtap entered promiscuous mode [ 257.642143][T10910] device veth1_macvtap entered promiscuous mode [ 257.661119][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.664176][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.666276][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.671810][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.673830][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.675928][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.679242][T10910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.681905][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.684088][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.686070][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.688881][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.690698][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.692819][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.695500][T10910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.699990][T10910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.701827][T10910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.703531][T10910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.705087][T10910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.752162][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.754168][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.755729][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.764192][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.767712][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.769810][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.777254][ T6577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.778868][ T6577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.962064][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.084484][ T8953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.086124][ T8953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.088984][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.333307][T11376] FAULT_INJECTION: forcing a failure. [ 258.333307][T11376] name failslab, interval 1, probability 0, space 0, times 0 [ 258.335790][T11376] CPU: 1 PID: 11376 Comm: syz.4.2199 Not tainted syzkaller #0 [ 258.337104][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 258.339074][T11376] Call trace: [ 258.339724][T11376] dump_backtrace+0x1c4/0x1f0 [ 258.340653][T11376] show_stack+0x2c/0x3c [ 258.341489][T11376] __dump_stack+0x30/0x40 [ 258.342333][T11376] dump_stack_lvl+0xf4/0x15c [ 258.343236][T11376] dump_stack+0x1c/0x5c [ 258.344017][T11376] should_fail_ex+0x3cc/0x524 [ 258.344877][T11376] __should_failslab+0xc0/0x11c [ 258.345776][T11376] should_failslab+0x10/0x28 [ 258.346609][T11376] kmem_cache_alloc_node+0x8c/0x344 [ 258.347506][T11376] __alloc_skb+0x128/0x728 [ 258.348264][T11376] tipc_buf_acquire+0x34/0xe8 [ 258.349129][T11376] tipc_named_publish+0x1fc/0x638 [ 258.350031][T11376] tipc_nametbl_publish+0xe8/0x1e4 [ 258.350946][T11376] tipc_sk_publish+0x17c/0x384 [ 258.351752][T11376] tipc_sk_join+0x2d4/0x508 [ 258.352557][T11376] tipc_setsockopt+0x3b8/0x7a8 [ 258.353404][T11376] __sys_setsockopt+0x2fc/0x50c [ 258.354296][T11376] __arm64_sys_setsockopt+0xc0/0xdc [ 258.355258][T11376] invoke_syscall+0x98/0x290 [ 258.356111][T11376] el0_svc_common+0x13c/0x258 [ 258.356968][T11376] do_el0_svc+0x5c/0x134 [ 258.357767][T11376] el0_svc+0x58/0x128 [ 258.358508][T11376] el0t_64_sync_handler+0x84/0xf0 [ 258.359455][T11376] el0t_64_sync+0x18c/0x190 [ 258.360336][T11376] tipc: Publication distribution failure [ 258.426421][T11387] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 258.431502][T11387] sl0: header compression turned on [ 259.923528][T11496] loop9: detected capacity change from 0 to 512 [ 259.936249][T11496] EXT4-fs (loop9): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 259.939161][T11496] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.941139][T11496] EXT4-fs (loop9): Couldn't mount because of unsupported optional features (fffc0000) [ 259.943041][T11496] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 259.976656][T11500] 9pnet_fd: Insufficient options for proto=fd [ 260.732648][T11549] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 261.435663][T11614] 9pnet_fd: Insufficient options for proto=fd [ 261.445857][T11618] loop1: detected capacity change from 0 to 512 [ 261.453168][T11618] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 261.455208][T11618] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.457091][T11618] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc0000) [ 261.459250][T11618] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 261.935239][T11636] 9pnet_fd: Insufficient options for proto=fd [ 262.107096][T11658] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 263.758519][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2267'. [ 265.325921][T11850] loop4: detected capacity change from 0 to 1024 [ 265.332054][T11850] EXT4-fs: Ignoring removed oldalloc option [ 265.333210][T11850] EXT4-fs: Ignoring removed orlov option [ 265.389258][T11861] binder: 11859:11861 unknown command 1074553620 [ 265.390527][T11861] binder: 11859:11861 ioctl c0306201 20000040 returned -22 [ 265.392258][T11850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 265.398718][T11850] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.2278: lblock 0 mapped to illegal pblock 0 (length 1) [ 265.405605][T11850] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 265.416046][T11850] EXT4-fs (loop4): This should not happen!! Data will be lost [ 265.416046][T11850] [ 265.438506][T11850] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.2278: lblock 0 mapped to illegal pblock 0 (length 1) [ 265.448197][T11850] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.2278: lblock 0 mapped to illegal pblock 0 (length 1) [ 265.470969][T10910] EXT4-fs (loop4): unmounting filesystem. [ 265.675477][T11894] loop4: detected capacity change from 0 to 512 [ 265.680163][T11894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.681624][T11894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.683221][T11894] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 265.706705][T11894] EXT4-fs (loop4): 1 truncate cleaned up [ 265.718146][T11894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 265.768053][T10910] EXT4-fs (loop4): unmounting filesystem. [ 266.206030][T11921] Illegal XDP return value 4205744223 on prog (id 93) dev N/A, expect packet loss! [ 266.283675][T11927] loop4: detected capacity change from 0 to 512 [ 266.635033][T11927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 266.716598][T11947] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2293: corrupted xattr block 33 [ 266.798743][T11957] FAULT_INJECTION: forcing a failure. [ 266.798743][T11957] name fail_futex, interval 1, probability 0, space 0, times 0 [ 266.801538][T11957] CPU: 0 PID: 11957 Comm: syz.1.2299 Not tainted syzkaller #0 [ 266.802899][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 266.804877][T11957] Call trace: [ 266.805545][T11957] dump_backtrace+0x1c4/0x1f0 [ 266.806450][T11957] show_stack+0x2c/0x3c [ 266.807263][T11957] __dump_stack+0x30/0x40 [ 266.808137][T11957] dump_stack_lvl+0xf4/0x15c [ 266.809017][T11957] dump_stack+0x1c/0x5c [ 266.809844][T11957] should_fail_ex+0x3cc/0x524 [ 266.810781][T11957] should_fail+0x14/0x24 [ 266.811551][T11957] get_futex_key+0x904/0xfb0 [ 266.812406][T11957] futex_wake+0x10c/0x458 [ 266.813214][T11957] do_futex+0x2c4/0x340 [ 266.813981][T11957] __arm64_sys_futex+0x390/0x414 [ 266.814917][T11957] invoke_syscall+0x98/0x290 [ 266.815760][T11957] el0_svc_common+0x13c/0x258 [ 266.816646][T11957] do_el0_svc+0x5c/0x134 [ 266.817448][T11957] el0_svc+0x58/0x128 [ 266.818207][T11957] el0t_64_sync_handler+0x84/0xf0 [ 266.819149][T11957] el0t_64_sync+0x18c/0x190 [ 266.867006][ T6577] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 266.876038][ T6577] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 266.882017][ T6577] EXT4-fs (loop4): This should not happen!! Data will be lost [ 266.882017][ T6577] [ 266.886056][ T6577] EXT4-fs (loop4): Total free blocks count 0 [ 266.889902][ T6577] EXT4-fs (loop4): Free/Dirty block details [ 266.894422][ T6577] EXT4-fs (loop4): free_blocks=65280 [ 266.895466][ T6577] EXT4-fs (loop4): dirty_blocks=3 [ 266.896300][ T6577] EXT4-fs (loop4): Block reservation details [ 266.899777][ T6577] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 266.905550][T10910] EXT4-fs (loop4): unmounting filesystem. [ 267.067639][ T4345] Bluetooth: hci1: command 0x0406 tx timeout [ 267.842933][T12040] binder: 12039:12040 unknown command 1074553620 [ 267.846429][T12040] binder: 12039:12040 ioctl c0306201 20000040 returned -22 [ 268.902326][T12140] FAULT_INJECTION: forcing a failure. [ 268.902326][T12140] name fail_futex, interval 1, probability 0, space 0, times 0 [ 268.905996][T12140] CPU: 0 PID: 12140 Comm: syz.1.2335 Not tainted syzkaller #0 [ 268.907503][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 268.909526][T12140] Call trace: [ 268.910163][T12140] dump_backtrace+0x1c4/0x1f0 [ 268.911074][T12140] show_stack+0x2c/0x3c [ 268.911899][T12140] __dump_stack+0x30/0x40 [ 268.912766][T12140] dump_stack_lvl+0xf4/0x15c [ 268.913654][T12140] dump_stack+0x1c/0x5c [ 268.914471][T12140] should_fail_ex+0x3cc/0x524 [ 268.915357][T12140] should_fail+0x14/0x24 [ 268.916164][T12140] get_futex_key+0x904/0xfb0 [ 268.917065][T12140] futex_wait_setup+0xbc/0x320 [ 268.918008][T12140] futex_wait+0x164/0x424 [ 268.918959][T12140] do_futex+0x2e8/0x340 [ 268.919827][T12140] __arm64_sys_futex+0x390/0x414 [ 268.920787][T12140] invoke_syscall+0x98/0x290 [ 268.921653][T12140] el0_svc_common+0x13c/0x258 [ 268.922536][T12140] do_el0_svc+0x5c/0x134 [ 268.923340][T12140] el0_svc+0x58/0x128 [ 268.924110][T12140] el0t_64_sync_handler+0x84/0xf0 [ 268.925066][T12140] el0t_64_sync+0x18c/0x190 [ 269.083016][T12149] hub 6-0:1.0: USB hub found [ 269.085112][T12149] hub 6-0:1.0: 8 ports detected [ 269.089308][T12149] FAULT_INJECTION: forcing a failure. [ 269.089308][T12149] name failslab, interval 1, probability 0, space 0, times 0 [ 269.091707][T12149] CPU: 0 PID: 12149 Comm: syz.0.2337 Not tainted syzkaller #0 [ 269.092995][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 269.094558][T12149] Call trace: [ 269.095070][T12149] dump_backtrace+0x1c4/0x1f0 [ 269.095822][T12149] show_stack+0x2c/0x3c [ 269.096480][T12149] __dump_stack+0x30/0x40 [ 269.097237][T12149] dump_stack_lvl+0xf4/0x15c [ 269.098033][T12149] dump_stack+0x1c/0x5c [ 269.098766][T12149] should_fail_ex+0x3cc/0x524 [ 269.099625][T12149] __should_failslab+0xc0/0x11c [ 269.100487][T12149] should_failslab+0x10/0x28 [ 269.101319][T12149] kmem_cache_alloc+0x88/0x310 [ 269.102188][T12149] __kernfs_new_node+0xec/0x5fc [ 269.103093][T12149] kernfs_new_node+0x120/0x230 [ 269.103940][T12149] __kernfs_create_file+0x60/0x2e0 [ 269.104848][T12149] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 269.105841][T12149] sysfs_merge_group+0x164/0x2ac [ 269.106738][T12149] dpm_sysfs_add+0xc8/0x26c [ 269.107574][T12149] device_add+0x678/0xe4c [ 269.108358][T12149] device_register+0x28/0x38 [ 269.109196][T12149] usb_hub_create_port_device+0x380/0x9f8 [ 269.110256][T12149] hub_probe+0x1d70/0x2cc4 [ 269.111068][T12149] usb_probe_interface+0x5a8/0xa30 [ 269.111970][T12149] really_probe+0x3a0/0xac4 [ 269.112816][T12149] __driver_probe_device+0x1c8/0x368 [ 269.113782][T12149] driver_probe_device+0x78/0x324 [ 269.114705][T12149] __device_attach_driver+0x28c/0x4c0 [ 269.115703][T12149] bus_for_each_drv+0x154/0x1e4 [ 269.116588][T12149] __device_attach+0x2a4/0x3d8 [ 269.117425][T12149] device_attach+0x24/0x34 [ 269.118236][T12149] proc_ioctl+0x3f4/0x750 [ 269.119034][T12149] proc_ioctl_default+0x174/0x1fc [ 269.119937][T12149] usbdev_ioctl+0xf50/0x1a94 [ 269.120769][T12149] __arm64_sys_ioctl+0x14c/0x1c8 [ 269.121672][T12149] invoke_syscall+0x98/0x290 [ 269.122503][T12149] el0_svc_common+0x13c/0x258 [ 269.123349][T12149] do_el0_svc+0x5c/0x134 [ 269.124124][T12149] el0_svc+0x58/0x128 [ 269.124864][T12149] el0t_64_sync_handler+0x84/0xf0 [ 269.125759][T12149] el0t_64_sync+0x18c/0x190 [ 269.130355][T12149] hub 6-0:1.0: couldn't create port8 device. [ 269.131993][T12149] hub 6-0:1.0: config failed, out of memory (err -12) [ 269.413133][T12165] fuse: Bad value for 'fd' [ 269.532950][T12188] FAULT_INJECTION: forcing a failure. [ 269.532950][T12188] name fail_futex, interval 1, probability 0, space 0, times 0 [ 269.541172][T12188] CPU: 1 PID: 12188 Comm: syz.0.2350 Not tainted syzkaller #0 [ 269.542603][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 269.544385][T12188] Call trace: [ 269.544974][T12188] dump_backtrace+0x1c4/0x1f0 [ 269.545824][T12188] show_stack+0x2c/0x3c [ 269.546587][T12188] __dump_stack+0x30/0x40 [ 269.547405][T12188] dump_stack_lvl+0xf4/0x15c [ 269.548228][T12188] dump_stack+0x1c/0x5c [ 269.548995][T12188] should_fail_ex+0x3cc/0x524 [ 269.549878][T12188] should_fail+0x14/0x24 [ 269.550668][T12188] get_futex_key+0x904/0xfb0 [ 269.551552][T12188] futex_wait_setup+0xbc/0x320 [ 269.552455][T12188] futex_wait+0x164/0x424 [ 269.553258][T12188] do_futex+0x2e8/0x340 [ 269.553966][T12188] __arm64_sys_futex+0x390/0x414 [ 269.554875][T12188] invoke_syscall+0x98/0x290 [ 269.555749][T12188] el0_svc_common+0x13c/0x258 [ 269.556638][T12188] do_el0_svc+0x5c/0x134 [ 269.557447][T12188] el0_svc+0x58/0x128 [ 269.558305][T12188] el0t_64_sync_handler+0x84/0xf0 [ 269.559336][T12188] el0t_64_sync+0x18c/0x190 [ 270.045359][T12212] fuse: Bad value for 'fd' [ 270.094579][T12224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2361'. [ 270.155123][T12219] hub 6-0:1.0: USB hub found [ 270.157200][T12219] hub 6-0:1.0: 8 ports detected [ 270.160823][T12219] FAULT_INJECTION: forcing a failure. [ 270.160823][T12219] name failslab, interval 1, probability 0, space 0, times 0 [ 270.163098][T12219] CPU: 0 PID: 12219 Comm: syz.4.2359 Not tainted syzkaller #0 [ 270.164347][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 270.166128][T12219] Call trace: [ 270.166729][T12219] dump_backtrace+0x1c4/0x1f0 [ 270.167590][T12219] show_stack+0x2c/0x3c [ 270.168349][T12219] __dump_stack+0x30/0x40 [ 270.169155][T12219] dump_stack_lvl+0xf4/0x15c [ 270.169970][T12219] dump_stack+0x1c/0x5c [ 270.170702][T12219] should_fail_ex+0x3cc/0x524 [ 270.171540][T12219] __should_failslab+0xc0/0x11c [ 270.172405][T12219] should_failslab+0x10/0x28 [ 270.173225][T12219] __kmem_cache_alloc_node+0x7c/0x318 [ 270.174208][T12219] __kmalloc+0xc4/0x180 [ 270.174946][T12219] usb_hcd_submit_urb+0x6c8/0x16c4 [ 270.175854][T12219] usb_submit_urb+0xe10/0x1510 [ 270.176683][T12219] usb_start_wait_urb+0x104/0x454 [ 270.177568][T12219] usb_control_msg+0x1e8/0x378 [ 270.178400][T12219] hub_power_on+0x18c/0x39c [ 270.179189][T12219] hub_activate+0x2f8/0x1684 [ 270.180017][T12219] hub_probe+0x1f38/0x2cc4 [ 270.180827][T12219] usb_probe_interface+0x5a8/0xa30 [ 270.181715][T12219] really_probe+0x3a0/0xac4 [ 270.182520][T12219] __driver_probe_device+0x1c8/0x368 [ 270.183463][T12219] driver_probe_device+0x78/0x324 [ 270.184369][T12219] __device_attach_driver+0x28c/0x4c0 [ 270.185334][T12219] bus_for_each_drv+0x154/0x1e4 [ 270.186191][T12219] __device_attach+0x2a4/0x3d8 [ 270.187046][T12219] device_attach+0x24/0x34 [ 270.187839][T12219] proc_ioctl+0x3f4/0x750 [ 270.188606][T12219] proc_ioctl_default+0x174/0x1fc [ 270.189496][T12219] usbdev_ioctl+0xf50/0x1a94 [ 270.190316][T12219] __arm64_sys_ioctl+0x14c/0x1c8 [ 270.191216][T12219] invoke_syscall+0x98/0x290 [ 270.192012][T12219] el0_svc_common+0x13c/0x258 [ 270.192872][T12219] do_el0_svc+0x5c/0x134 [ 270.193636][T12219] el0_svc+0x58/0x128 [ 270.194340][T12219] el0t_64_sync_handler+0x84/0xf0 [ 270.195247][T12219] el0t_64_sync+0x18c/0x190 [ 270.327448][ T4345] Bluetooth: hci3: command 0x0405 tx timeout [ 270.343999][T12263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2372'. [ 270.621065][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2384'. [ 271.173824][T12325] hub 6-0:1.0: USB hub found [ 271.174896][T12325] hub 6-0:1.0: 8 ports detected [ 271.176842][T12325] FAULT_INJECTION: forcing a failure. [ 271.176842][T12325] name failslab, interval 1, probability 0, space 0, times 0 [ 271.179150][T12325] CPU: 0 PID: 12325 Comm: syz.1.2393 Not tainted syzkaller #0 [ 271.180436][T12325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 271.182345][T12325] Call trace: [ 271.182974][T12325] dump_backtrace+0x1c4/0x1f0 [ 271.183870][T12325] show_stack+0x2c/0x3c [ 271.184653][T12325] __dump_stack+0x30/0x40 [ 271.185475][T12325] dump_stack_lvl+0xf4/0x15c [ 271.186332][T12325] dump_stack+0x1c/0x5c [ 271.187119][T12325] should_fail_ex+0x3cc/0x524 [ 271.188023][T12325] __should_failslab+0xc0/0x11c [ 271.188953][T12325] should_failslab+0x10/0x28 [ 271.189810][T12325] kmem_cache_alloc+0x88/0x310 [ 271.190674][T12325] __kernfs_new_node+0xec/0x5fc [ 271.191569][T12325] kernfs_new_node+0x120/0x230 [ 271.192435][T12325] __kernfs_create_file+0x60/0x2e0 [ 271.193369][T12325] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 271.194374][T12325] sysfs_merge_group+0x164/0x2ac [ 271.195284][T12325] dpm_sysfs_add+0xc8/0x26c [ 271.196130][T12325] device_add+0x678/0xe4c [ 271.196964][T12325] device_register+0x28/0x38 [ 271.197816][T12325] usb_hub_create_port_device+0x380/0x9f8 [ 271.198886][T12325] hub_probe+0x1d70/0x2cc4 [ 271.199709][T12325] usb_probe_interface+0x5a8/0xa30 [ 271.200668][T12325] really_probe+0x3a0/0xac4 [ 271.201475][T12325] __driver_probe_device+0x1c8/0x368 [ 271.202407][T12325] driver_probe_device+0x78/0x324 [ 271.203353][T12325] __device_attach_driver+0x28c/0x4c0 [ 271.204352][T12325] bus_for_each_drv+0x154/0x1e4 [ 271.205253][T12325] __device_attach+0x2a4/0x3d8 [ 271.206152][T12325] device_attach+0x24/0x34 [ 271.206967][T12325] proc_ioctl+0x3f4/0x750 [ 271.207813][T12325] proc_ioctl_default+0x174/0x1fc [ 271.208776][T12325] usbdev_ioctl+0xf50/0x1a94 [ 271.209653][T12325] __arm64_sys_ioctl+0x14c/0x1c8 [ 271.210620][T12325] invoke_syscall+0x98/0x290 [ 271.211469][T12325] el0_svc_common+0x13c/0x258 [ 271.212438][T12325] do_el0_svc+0x5c/0x134 [ 271.213376][T12325] el0_svc+0x58/0x128 [ 271.214263][T12325] el0t_64_sync_handler+0x84/0xf0 [ 271.215381][T12325] el0t_64_sync+0x18c/0x190 [ 271.216533][T12325] hub 6-0:1.0: couldn't create port8 device. [ 271.217739][T12325] hub 6-0:1.0: config failed, out of memory (err -12) [ 271.233075][T12344] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2399'. [ 271.597634][T12384] can0: slcan on ttyS3. [ 271.674805][T12385] capability: warning: `syz.1.2409' uses 32-bit capabilities (legacy support in use) [ 271.689366][T12384] can0 (unregistered): slcan off ttyS3. [ 271.835018][T12390] fuse: Bad value for 'fd' [ 271.840394][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2413'. [ 272.113643][T12433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2426'. [ 272.165615][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2429'. [ 272.402530][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2439'. [ 272.733406][T12541] netlink: 'syz.2.2453': attribute type 4 has an invalid length. [ 273.125687][T12563] loop4: detected capacity change from 0 to 512 [ 273.129168][T12563] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.132791][T12563] EXT4-fs (loop4): 1 truncate cleaned up [ 273.134104][T12563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.211284][T10910] EXT4-fs (loop4): unmounting filesystem. [ 273.461776][T12604] netlink: 'syz.9.2464': attribute type 4 has an invalid length. [ 273.821474][T12654] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 274.977096][T12739] fuse: Bad value for 'fd' [ 277.227728][T12904] can0: slcan on ttyS3. [ 277.548227][T12904] can0 (unregistered): slcan off ttyS3. [ 277.735564][ T4345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.739411][ T4345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.741441][ T4345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.743306][ T4345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.744886][ T4345] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.746450][ T4345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.805704][ T27] audit: type=1326 audit(277.790:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.811213][ T27] audit: type=1326 audit(277.800:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.826707][ T27] audit: type=1326 audit(277.800:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.864250][ T27] audit: type=1326 audit(277.800:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.916525][ T27] audit: type=1326 audit(277.800:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.921631][ T27] audit: type=1326 audit(277.800:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.928458][ T27] audit: type=1326 audit(277.800:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.932930][ T27] audit: type=1326 audit(277.800:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.945244][ T27] audit: type=1326 audit(277.800:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 277.954005][ T27] audit: type=1326 audit(277.800:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.1.2543" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab579368 code=0x7ffc0000 [ 278.159818][T12934] chnl_net:caif_netlink_parms(): no params data found [ 278.196045][T12979] hub 6-0:1.0: USB hub found [ 278.197196][T12979] hub 6-0:1.0: 8 ports detected [ 278.199804][T12979] FAULT_INJECTION: forcing a failure. [ 278.199804][T12979] name failslab, interval 1, probability 0, space 0, times 0 [ 278.202126][T12979] CPU: 0 PID: 12979 Comm: syz.4.2551 Not tainted syzkaller #0 [ 278.203443][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 278.205280][T12979] Call trace: [ 278.205892][T12979] dump_backtrace+0x1c4/0x1f0 [ 278.206798][T12979] show_stack+0x2c/0x3c [ 278.207517][T12979] __dump_stack+0x30/0x40 [ 278.208276][T12979] dump_stack_lvl+0xf4/0x15c [ 278.209110][T12979] dump_stack+0x1c/0x5c [ 278.209868][T12979] should_fail_ex+0x3cc/0x524 [ 278.210716][T12979] __should_failslab+0xc0/0x11c [ 278.211614][T12979] should_failslab+0x10/0x28 [ 278.212481][T12979] __kmem_cache_alloc_node+0x7c/0x318 [ 278.213699][T12979] kmalloc_trace+0x48/0x94 [ 278.214523][T12979] usb_control_msg+0x90/0x378 [ 278.215433][T12979] hub_power_on+0x18c/0x39c [ 278.216284][T12979] hub_activate+0x2f8/0x1684 [ 278.217156][T12979] hub_probe+0x1f38/0x2cc4 [ 278.217954][T12979] usb_probe_interface+0x5a8/0xa30 [ 278.218901][T12979] really_probe+0x3a0/0xac4 [ 278.219749][T12979] __driver_probe_device+0x1c8/0x368 [ 278.220736][T12979] driver_probe_device+0x78/0x324 [ 278.221670][T12979] __device_attach_driver+0x28c/0x4c0 [ 278.222651][T12979] bus_for_each_drv+0x154/0x1e4 [ 278.223554][T12979] __device_attach+0x2a4/0x3d8 [ 278.224440][T12979] device_attach+0x24/0x34 [ 278.225231][T12979] proc_ioctl+0x3f4/0x750 [ 278.226074][T12979] proc_ioctl_default+0x174/0x1fc [ 278.226988][T12979] usbdev_ioctl+0xf50/0x1a94 [ 278.227852][T12979] __arm64_sys_ioctl+0x14c/0x1c8 [ 278.228806][T12979] invoke_syscall+0x98/0x290 [ 278.229705][T12979] el0_svc_common+0x13c/0x258 [ 278.230586][T12979] do_el0_svc+0x5c/0x134 [ 278.231367][T12979] el0_svc+0x58/0x128 [ 278.232085][T12979] el0t_64_sync_handler+0x84/0xf0 [ 278.233026][T12979] el0t_64_sync+0x18c/0x190 [ 278.473188][ T7473] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.533638][T12934] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.535117][T12934] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.541423][T12934] device bridge_slave_0 entered promiscuous mode [ 278.591461][ T7473] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.595215][T12934] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.596939][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.599059][T12934] device bridge_slave_1 entered promiscuous mode [ 278.607073][T12934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.610402][T12934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.620902][T12934] team0: Port device team_slave_0 added [ 278.625233][T12934] team0: Port device team_slave_1 added [ 278.721212][ T4335] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 278.748691][ T7473] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.761392][T12934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.762823][T12934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.768319][T12934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.783705][T12934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.783719][T12934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.783741][T12934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.820977][ T7473] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.868856][T12934] device hsr_slave_0 entered promiscuous mode [ 278.888571][T12934] device hsr_slave_1 entered promiscuous mode [ 278.937730][T12934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.939091][T12934] Cannot create hsr debugfs directory [ 279.003795][T13051] fuse: Bad value for 'fd' [ 279.117178][T13061] loop9: detected capacity change from 0 to 1024 [ 279.119359][T13061] EXT4-fs: Ignoring removed bh option [ 279.134114][T13061] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 279.140364][T13061] Device name cannot be null; rc = [-22] [ 279.223597][T10851] EXT4-fs (loop9): unmounting filesystem. [ 279.310820][T13075] FAULT_INJECTION: forcing a failure. [ 279.310820][T13075] name failslab, interval 1, probability 0, space 0, times 0 [ 279.313408][T13075] CPU: 0 PID: 13075 Comm: syz.4.2579 Not tainted syzkaller #0 [ 279.314635][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 279.316419][T13075] Call trace: [ 279.317006][T13075] dump_backtrace+0x1c4/0x1f0 [ 279.317909][T13075] show_stack+0x2c/0x3c [ 279.318655][T13075] __dump_stack+0x30/0x40 [ 279.319418][T13075] dump_stack_lvl+0xf4/0x15c [ 279.320250][T13075] dump_stack+0x1c/0x5c [ 279.320997][T13075] should_fail_ex+0x3cc/0x524 [ 279.321853][T13075] __should_failslab+0xc0/0x11c [ 279.322733][T13075] should_failslab+0x10/0x28 [ 279.323521][T13075] kmem_cache_alloc+0x88/0x310 [ 279.324382][T13075] security_inode_alloc+0x38/0x11c [ 279.325329][T13075] inode_init_always+0x6c8/0xb28 [ 279.326255][T13075] new_inode_pseudo+0x7c/0x1cc [ 279.327108][T13075] __sock_create+0x138/0x8a8 [ 279.327960][T13075] __sys_socket+0xc0/0x1b0 [ 279.328787][T13075] __arm64_sys_socket+0x7c/0x94 [ 279.329663][T13075] invoke_syscall+0x98/0x290 [ 279.330508][T13075] el0_svc_common+0x13c/0x258 [ 279.331403][T13075] do_el0_svc+0x5c/0x134 [ 279.332192][T13075] el0_svc+0x58/0x128 [ 279.332938][T13075] el0t_64_sync_handler+0x84/0xf0 [ 279.333888][T13075] el0t_64_sync+0x18c/0x190 [ 279.334760][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.357664][T13075] socket: no more sockets [ 279.453412][T13087] loop9: detected capacity change from 0 to 1024 [ 279.468120][T13087] EXT4-fs: Ignoring removed bh option [ 279.491740][T13087] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 279.496934][T13087] Device name cannot be null; rc = [-22] [ 279.528712][T10851] EXT4-fs (loop9): unmounting filesystem. [ 279.650119][T13102] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2590'. [ 279.713639][T13109] FAULT_INJECTION: forcing a failure. [ 279.713639][T13109] name failslab, interval 1, probability 0, space 0, times 0 [ 279.716723][T13109] CPU: 1 PID: 13109 Comm: syz.1.2592 Not tainted syzkaller #0 [ 279.718238][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 279.720212][T13109] Call trace: [ 279.720863][T13109] dump_backtrace+0x1c4/0x1f0 [ 279.721826][T13109] show_stack+0x2c/0x3c [ 279.722686][T13109] __dump_stack+0x30/0x40 [ 279.723548][T13109] dump_stack_lvl+0xf4/0x15c [ 279.724481][T13109] dump_stack+0x1c/0x5c [ 279.725306][T13109] should_fail_ex+0x3cc/0x524 [ 279.726275][T13109] __should_failslab+0xc0/0x11c [ 279.727208][T13109] should_failslab+0x10/0x28 [ 279.728096][T13109] kmem_cache_alloc+0x88/0x310 [ 279.729102][T13109] security_inode_alloc+0x38/0x11c [ 279.730181][T13109] inode_init_always+0x6c8/0xb28 [ 279.731157][T13109] new_inode_pseudo+0x7c/0x1cc [ 279.732019][T13109] __sock_create+0x138/0x8a8 [ 279.732877][T13109] __sys_socket+0xc0/0x1b0 [ 279.733664][T13109] __arm64_sys_socket+0x7c/0x94 [ 279.734494][T13109] invoke_syscall+0x98/0x290 [ 279.735304][T13109] el0_svc_common+0x13c/0x258 [ 279.736125][T13109] do_el0_svc+0x5c/0x134 [ 279.736877][T13109] el0_svc+0x58/0x128 [ 279.737591][T13109] el0t_64_sync_handler+0x84/0xf0 [ 279.738502][T13109] el0t_64_sync+0x18c/0x190 [ 279.741644][T13109] socket: no more sockets [ 279.787590][T13116] loop9: detected capacity change from 0 to 1024 [ 279.800528][T13116] EXT4-fs: Ignoring removed bh option [ 279.829413][T13116] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 279.847679][ T4335] Bluetooth: hci5: command 0x0409 tx timeout [ 279.864241][T10851] EXT4-fs (loop9): unmounting filesystem. [ 280.371137][T13140] input: syz0 as /devices/virtual/input/input6 [ 280.406857][T13142] FAULT_INJECTION: forcing a failure. [ 280.406857][T13142] name failslab, interval 1, probability 0, space 0, times 0 [ 280.410010][T13142] CPU: 0 PID: 13142 Comm: syz.4.2604 Not tainted syzkaller #0 [ 280.411534][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 280.413430][T13142] Call trace: [ 280.414001][T13142] dump_backtrace+0x1c4/0x1f0 [ 280.414873][T13142] show_stack+0x2c/0x3c [ 280.415635][T13142] __dump_stack+0x30/0x40 [ 280.416469][T13142] dump_stack_lvl+0xf4/0x15c [ 280.417320][T13142] dump_stack+0x1c/0x5c [ 280.418116][T13142] should_fail_ex+0x3cc/0x524 [ 280.419011][T13142] __should_failslab+0xc0/0x11c [ 280.419934][T13142] should_failslab+0x10/0x28 [ 280.420797][T13142] slab_pre_alloc_hook+0x6c/0x31c [ 280.421754][T13142] kmem_cache_alloc_lru+0x60/0x284 [ 280.422728][T13142] sock_alloc_inode+0x2c/0xcc [ 280.423617][T13142] new_inode_pseudo+0x68/0x1cc [ 280.424521][T13142] __sock_create+0x138/0x8a8 [ 280.425414][T13142] __sys_socket+0xc0/0x1b0 [ 280.426215][T13142] __arm64_sys_socket+0x7c/0x94 [ 280.427096][T13142] invoke_syscall+0x98/0x290 [ 280.427924][T13142] el0_svc_common+0x13c/0x258 [ 280.428776][T13142] do_el0_svc+0x5c/0x134 [ 280.429547][T13142] el0_svc+0x58/0x128 [ 280.430254][T13142] el0t_64_sync_handler+0x84/0xf0 [ 280.431160][T13142] el0t_64_sync+0x18c/0x190 [ 280.465336][T13142] socket: no more sockets [ 280.523730][T13155] loop4: detected capacity change from 0 to 1024 [ 280.526102][T13155] EXT4-fs: Ignoring removed bh option [ 280.586576][T13155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 280.639564][T10910] EXT4-fs (loop4): unmounting filesystem. [ 280.815728][T13189] FAULT_INJECTION: forcing a failure. [ 280.815728][T13189] name failslab, interval 1, probability 0, space 0, times 0 [ 280.824787][T13189] CPU: 1 PID: 13189 Comm: syz.1.2617 Not tainted syzkaller #0 [ 280.826101][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 280.827954][T13189] Call trace: [ 280.828555][T13189] dump_backtrace+0x1c4/0x1f0 [ 280.829432][T13189] show_stack+0x2c/0x3c [ 280.830214][T13189] __dump_stack+0x30/0x40 [ 280.831049][T13189] dump_stack_lvl+0xf4/0x15c [ 280.831912][T13189] dump_stack+0x1c/0x5c [ 280.832700][T13189] should_fail_ex+0x3cc/0x524 [ 280.833606][T13189] __should_failslab+0xc0/0x11c [ 280.834532][T13189] should_failslab+0x10/0x28 [ 280.835390][T13189] kmem_cache_alloc+0x88/0x310 [ 280.836281][T13189] security_inode_alloc+0x38/0x11c [ 280.837274][T13189] inode_init_always+0x6c8/0xb28 [ 280.838219][T13189] new_inode_pseudo+0x7c/0x1cc [ 280.839110][T13189] __sock_create+0x138/0x8a8 [ 280.839975][T13189] __sys_socket+0xc0/0x1b0 [ 280.840811][T13189] __arm64_sys_socket+0x7c/0x94 [ 280.841705][T13189] invoke_syscall+0x98/0x290 [ 280.842581][T13189] el0_svc_common+0x13c/0x258 [ 280.843413][T13189] do_el0_svc+0x5c/0x134 [ 280.844198][T13189] el0_svc+0x58/0x128 [ 280.844962][T13189] el0t_64_sync_handler+0x84/0xf0 [ 280.845943][T13189] el0t_64_sync+0x18c/0x190 [ 280.861859][T13189] socket: no more sockets [ 280.901790][T13200] loop1: detected capacity change from 0 to 1024 [ 280.915338][T13200] EXT4-fs: Ignoring removed bh option [ 280.933995][T13200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 280.986166][T10903] EXT4-fs (loop1): unmounting filesystem. [ 281.015430][T13208] vivid-000: ================= START STATUS ================= [ 281.019920][T13209] FAULT_INJECTION: forcing a failure. [ 281.019920][T13209] name failslab, interval 1, probability 0, space 0, times 0 [ 281.025025][T13208] vivid-000: Test Pattern: 75% Colorbar [ 281.028657][T13209] CPU: 1 PID: 13209 Comm: syz.1.2622 Not tainted syzkaller #0 [ 281.029385][T13208] vivid-000: Fill Percentage of Frame: [ 281.030514][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 281.030530][T13209] Call trace: [ 281.030537][T13209] dump_backtrace+0x1c4/0x1f0 [ 281.030559][T13209] show_stack+0x2c/0x3c [ 281.031607][T13208] 100 [ 281.033528][T13209] __dump_stack+0x30/0x40 [ 281.033551][T13209] dump_stack_lvl+0xf4/0x15c [ 281.033560][T13209] dump_stack+0x1c/0x5c [ 281.033566][T13209] should_fail_ex+0x3cc/0x524 [ 281.034209][T13208] [ 281.035017][T13209] __should_failslab+0xc0/0x11c [ 281.035037][T13209] should_failslab+0x10/0x28 [ 281.035889][T13208] vivid-000: Horizontal Movement: [ 281.036241][T13209] slab_pre_alloc_hook+0x6c/0x31c [ 281.037112][T13208] No Movement [ 281.037858][T13209] kmem_cache_alloc_lru+0x60/0x284 [ 281.037879][T13209] proc_alloc_inode+0x2c/0xb8 [ 281.037891][T13209] new_inode_pseudo+0x68/0x1cc [ 281.037900][T13209] new_inode+0x38/0x174 [ 281.037906][T13209] proc_pid_make_inode+0x30/0x1a8 [ 281.037913][T13209] proc_pident_instantiate+0x6c/0x274 [ 281.037920][T13209] proc_pident_lookup+0x18c/0x268 [ 281.037927][T13209] proc_tgid_base_lookup+0x34/0x44 [ 281.037933][T13209] __lookup_slow+0x25c/0x38c [ 281.037939][T13209] lookup_slow+0x60/0x84 [ 281.037943][T13209] link_path_walk+0x818/0xcd8 [ 281.037949][T13209] path_openat+0x1c0/0x27a0 [ 281.037954][T13209] do_filp_open+0x198/0x38c [ 281.037959][T13209] do_sys_openat2+0x134/0x3fc [ 281.037964][T13209] __arm64_sys_openat+0x11c/0x150 [ 281.037969][T13209] invoke_syscall+0x98/0x290 [ 281.037976][T13209] el0_svc_common+0x13c/0x258 [ 281.037982][T13209] do_el0_svc+0x5c/0x134 [ 281.037988][T13209] el0_svc+0x58/0x128 [ 281.037994][T13209] el0t_64_sync_handler+0x84/0xf0 [ 281.038000][T13209] el0t_64_sync+0x18c/0x190 [ 281.071431][T13208] [ 281.071871][T13208] vivid-000: Vertical Movement: No Movement [ 281.072976][T13208] vivid-000: OSD Text Mode: All [ 281.073909][T13208] vivid-000: Show Border: false [ 281.074932][T13208] vivid-000: Show Square: false [ 281.075853][T13208] vivid-000: Sensor Flipped Horizontally: false [ 281.077136][T13208] vivid-000: Sensor Flipped Vertically: false [ 281.078753][T13208] vivid-000: Insert SAV Code in Image: false [ 281.080010][T13208] vivid-000: Insert EAV Code in Image: false [ 281.081319][T13208] vivid-000: Insert Video Guard Band: false [ 281.082537][T13208] vivid-000: Reduced Framerate: false [ 281.083533][T13208] vivid-000: Enable Capture Cropping: true [ 281.084867][T13208] vivid-000: Enable Capture Composing: true [ 281.086115][T13208] vivid-000: Enable Capture Scaler: true [ 281.089970][T13208] vivid-000: Timestamp Source: End of Frame [ 281.091072][T13208] vivid-000: Colorspace: sRGB [ 281.091913][T13208] vivid-000: Transfer Function: Default [ 281.092955][T13208] vivid-000: Y'CbCr Encoding: Default [ 281.093927][T13208] vivid-000: HSV Encoding: Hue 0-179 [ 281.095150][T13208] vivid-000: Quantization: Default [ 281.096691][T13208] vivid-000: Apply Alpha To Red Only: false [ 281.109418][T13208] vivid-000: Standard Aspect Ratio: 4x3 [ 281.110701][T13208] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 281.112678][T13208] vivid-000: DV Timings: 640x480p59 inactive [ 281.113896][T13208] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 281.115408][T13208] vivid-000: Maximum EDID Blocks: 2 [ 281.116426][T13208] vivid-000: Limited RGB Range (16-235): false [ 281.118099][T13208] vivid-000: Rx RGB Quantization Range: Automatic [ 281.119456][T13208] vivid-000: Power Present: 0x00000001 [ 281.120471][T13208] tpg source WxH: 320x180 (R'G'B) [ 281.121543][T13208] tpg field: 1 [ 281.122170][T13208] tpg crop: 320x180@0x0 [ 281.123100][T13208] tpg compose: 320x180@0x0 [ 281.123992][T13208] tpg colorspace: 3 [ 281.124890][T13208] tpg transfer function: 2/0 [ 281.125843][T13208] tpg quantization: 2/0 [ 281.126810][T13208] tpg RGB range: 0/2 [ 281.129444][T13208] vivid-000: ================== END STATUS ================== [ 281.220631][T12934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.252458][T12934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.252563][T13222] FAULT_INJECTION: forcing a failure. [ 281.252563][T13222] name failslab, interval 1, probability 0, space 0, times 0 [ 281.256275][T13222] CPU: 1 PID: 13222 Comm: syz.4.2629 Not tainted syzkaller #0 [ 281.257722][T13222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 281.259720][T13222] Call trace: [ 281.260355][T13222] dump_backtrace+0x1c4/0x1f0 [ 281.261256][T13222] show_stack+0x2c/0x3c [ 281.262057][T13222] __dump_stack+0x30/0x40 [ 281.262898][T13222] dump_stack_lvl+0xf4/0x15c [ 281.263784][T13222] dump_stack+0x1c/0x5c [ 281.264581][T13222] should_fail_ex+0x3cc/0x524 [ 281.265444][T13222] __should_failslab+0xc0/0x11c [ 281.266381][T13222] should_failslab+0x10/0x28 [ 281.267265][T13222] slab_pre_alloc_hook+0x6c/0x31c [ 281.268274][T13222] kmem_cache_alloc_lru+0x60/0x284 [ 281.269261][T13222] sock_alloc_inode+0x2c/0xcc [ 281.270136][T13222] new_inode_pseudo+0x68/0x1cc [ 281.271022][T13222] __sock_create+0x138/0x8a8 [ 281.271986][T13222] __sys_socket+0xc0/0x1b0 [ 281.272849][T13222] __arm64_sys_socket+0x7c/0x94 [ 281.273815][T13222] invoke_syscall+0x98/0x290 [ 281.274726][T13222] el0_svc_common+0x13c/0x258 [ 281.275661][T13222] do_el0_svc+0x5c/0x134 [ 281.276472][T13222] el0_svc+0x58/0x128 [ 281.277311][T13222] el0t_64_sync_handler+0x84/0xf0 [ 281.278355][T13222] el0t_64_sync+0x18c/0x190 [ 281.280306][T13222] socket: no more sockets [ 281.313149][T13227] loop4: detected capacity change from 0 to 1024 [ 281.315121][T13227] EXT4-fs: Ignoring removed bh option [ 281.327059][T13227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 281.349763][T12934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.436313][T12934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.453748][T10910] EXT4-fs (loop4): unmounting filesystem. [ 281.537132][T13245] hub 6-0:1.0: USB hub found [ 281.539131][T13245] hub 6-0:1.0: 8 ports detected [ 281.545801][T13245] FAULT_INJECTION: forcing a failure. [ 281.545801][T13245] name failslab, interval 1, probability 0, space 0, times 0 [ 281.548090][T13245] CPU: 1 PID: 13245 Comm: syz.4.2636 Not tainted syzkaller #0 [ 281.549332][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 281.550946][T13245] Call trace: [ 281.551479][T13245] dump_backtrace+0x1c4/0x1f0 [ 281.552288][T13245] show_stack+0x2c/0x3c [ 281.552923][T13245] __dump_stack+0x30/0x40 [ 281.553617][T13245] dump_stack_lvl+0xf4/0x15c [ 281.554347][T13245] dump_stack+0x1c/0x5c [ 281.554981][T13245] should_fail_ex+0x3cc/0x524 [ 281.555726][T13245] __should_failslab+0xc0/0x11c [ 281.556455][T13245] should_failslab+0x10/0x28 [ 281.557216][T13245] kmem_cache_alloc+0x88/0x310 [ 281.558099][T13245] __kernfs_new_node+0xec/0x5fc [ 281.559001][T13245] kernfs_new_node+0x120/0x230 [ 281.559897][T13245] __kernfs_create_file+0x60/0x2e0 [ 281.560818][T13245] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 281.561787][T13245] sysfs_merge_group+0x164/0x2ac [ 281.562636][T13245] dpm_sysfs_add+0xc8/0x26c [ 281.563425][T13245] device_add+0x678/0xe4c [ 281.564217][T13245] device_register+0x28/0x38 [ 281.565059][T13245] usb_hub_create_port_device+0x380/0x9f8 [ 281.566033][T13245] hub_probe+0x1d70/0x2cc4 [ 281.566820][T13245] usb_probe_interface+0x5a8/0xa30 [ 281.567772][T13245] really_probe+0x3a0/0xac4 [ 281.568594][T13245] __driver_probe_device+0x1c8/0x368 [ 281.569536][T13245] driver_probe_device+0x78/0x324 [ 281.570415][T13245] __device_attach_driver+0x28c/0x4c0 [ 281.571389][T13245] bus_for_each_drv+0x154/0x1e4 [ 281.572255][T13245] __device_attach+0x2a4/0x3d8 [ 281.573093][T13245] device_attach+0x24/0x34 [ 281.573851][T13245] proc_ioctl+0x3f4/0x750 [ 281.574606][T13245] proc_ioctl_default+0x174/0x1fc [ 281.575458][T13245] usbdev_ioctl+0xf50/0x1a94 [ 281.576274][T13245] __arm64_sys_ioctl+0x14c/0x1c8 [ 281.577142][T13245] invoke_syscall+0x98/0x290 [ 281.577969][T13245] el0_svc_common+0x13c/0x258 [ 281.578855][T13245] do_el0_svc+0x5c/0x134 [ 281.579639][T13245] el0_svc+0x58/0x128 [ 281.580408][T13245] el0t_64_sync_handler+0x84/0xf0 [ 281.581343][T13245] el0t_64_sync+0x18c/0x190 [ 281.582361][T13245] hub 6-0:1.0: couldn't create port8 device. [ 281.583389][T13245] hub 6-0:1.0: config failed, out of memory (err -12) [ 281.637551][T13256] FAULT_INJECTION: forcing a failure. [ 281.637551][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 281.639727][T13256] CPU: 1 PID: 13256 Comm: syz.0.2640 Not tainted syzkaller #0 [ 281.641148][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 281.642938][T13256] Call trace: [ 281.643536][T13256] dump_backtrace+0x1c4/0x1f0 [ 281.644396][T13256] show_stack+0x2c/0x3c [ 281.645142][T13256] __dump_stack+0x30/0x40 [ 281.645914][T13256] dump_stack_lvl+0xf4/0x15c [ 281.646777][T13256] dump_stack+0x1c/0x5c [ 281.647570][T13256] should_fail_ex+0x3cc/0x524 [ 281.648534][T13256] __should_failslab+0xc0/0x11c [ 281.649590][T13256] should_failslab+0x10/0x28 [ 281.650594][T13256] slab_pre_alloc_hook+0x6c/0x31c [ 281.651591][T13256] kmem_cache_alloc_lru+0x60/0x284 [ 281.652609][T13256] sock_alloc_inode+0x2c/0xcc [ 281.653531][T13256] new_inode_pseudo+0x68/0x1cc [ 281.654482][T13256] __sock_create+0x138/0x8a8 [ 281.655381][T13256] __sys_socket+0xc0/0x1b0 [ 281.656245][T13256] __arm64_sys_socket+0x7c/0x94 [ 281.657142][T13256] invoke_syscall+0x98/0x290 [ 281.658001][T13256] el0_svc_common+0x13c/0x258 [ 281.658874][T13256] do_el0_svc+0x5c/0x134 [ 281.659692][T13256] el0_svc+0x58/0x128 [ 281.660429][T13256] el0t_64_sync_handler+0x84/0xf0 [ 281.661367][T13256] el0t_64_sync+0x18c/0x190 [ 281.663506][T13256] socket: no more sockets [ 281.781589][T13262] loop9: detected capacity change from 0 to 1024 [ 281.806352][T13262] EXT4-fs: Ignoring removed bh option [ 281.849551][T13262] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 281.877575][ T7473] device hsr_slave_0 left promiscuous mode [ 281.887031][T10851] EXT4-fs (loop9): unmounting filesystem. [ 281.908158][ T7473] device hsr_slave_1 left promiscuous mode [ 281.927481][ T4345] Bluetooth: hci5: command 0x041b tx timeout [ 281.977575][ T7473] device bridge_slave_1 left promiscuous mode [ 281.979075][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.018085][ T7473] device bridge_slave_0 left promiscuous mode [ 282.019537][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.137496][ T7473] device veth1_macvtap left promiscuous mode [ 282.138788][ T7473] device veth0_macvtap left promiscuous mode [ 282.139942][ T7473] device veth1_vlan left promiscuous mode [ 282.141020][ T7473] device veth0_vlan left promiscuous mode [ 282.476493][T13285] FAULT_INJECTION: forcing a failure. [ 282.476493][T13285] name failslab, interval 1, probability 0, space 0, times 0 [ 282.479414][T13285] CPU: 0 PID: 13285 Comm: syz.1.2651 Not tainted syzkaller #0 [ 282.480736][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 282.482641][T13285] Call trace: [ 282.483267][T13285] dump_backtrace+0x1c4/0x1f0 [ 282.484157][T13285] show_stack+0x2c/0x3c [ 282.484954][T13285] __dump_stack+0x30/0x40 [ 282.485794][T13285] dump_stack_lvl+0xf4/0x15c [ 282.486682][T13285] dump_stack+0x1c/0x5c [ 282.487424][T13285] should_fail_ex+0x3cc/0x524 [ 282.488279][T13285] __should_failslab+0xc0/0x11c [ 282.489182][T13285] should_failslab+0x10/0x28 [ 282.490028][T13285] slab_pre_alloc_hook+0x6c/0x31c [ 282.490953][T13285] kmem_cache_alloc_lru+0x60/0x284 [ 282.491863][T13285] sock_alloc_inode+0x2c/0xcc [ 282.492759][T13285] new_inode_pseudo+0x68/0x1cc [ 282.493659][T13285] __sock_create+0x138/0x8a8 [ 282.494530][T13285] __sys_socket+0xc0/0x1b0 [ 282.495334][T13285] __arm64_sys_socket+0x7c/0x94 [ 282.496240][T13285] invoke_syscall+0x98/0x290 [ 282.497108][T13285] el0_svc_common+0x13c/0x258 [ 282.497999][T13285] do_el0_svc+0x5c/0x134 [ 282.498826][T13285] el0_svc+0x58/0x128 [ 282.499590][T13285] el0t_64_sync_handler+0x84/0xf0 [ 282.500521][T13285] el0t_64_sync+0x18c/0x190 [ 282.501429][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.505256][T13285] socket: no more sockets [ 282.586544][T13291] loop1: detected capacity change from 0 to 1024 [ 282.592823][T13291] EXT4-fs: Ignoring removed bh option [ 282.605986][T13291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 282.648462][T10903] EXT4-fs (loop1): unmounting filesystem. [ 283.768887][T13310] FAULT_INJECTION: forcing a failure. [ 283.768887][T13310] name failslab, interval 1, probability 0, space 0, times 0 [ 283.771431][T13310] CPU: 0 PID: 13310 Comm: syz.1.2661 Not tainted syzkaller #0 [ 283.772789][T13310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 283.774715][T13310] Call trace: [ 283.775360][T13310] dump_backtrace+0x1c4/0x1f0 [ 283.776249][T13310] show_stack+0x2c/0x3c [ 283.776995][T13310] __dump_stack+0x30/0x40 [ 283.777802][T13310] dump_stack_lvl+0xf4/0x15c [ 283.778698][T13310] dump_stack+0x1c/0x5c [ 283.779482][T13310] should_fail_ex+0x3cc/0x524 [ 283.780345][T13310] __should_failslab+0xc0/0x11c [ 283.781273][T13310] should_failslab+0x10/0x28 [ 283.782152][T13310] slab_pre_alloc_hook+0x6c/0x31c [ 283.783095][T13310] kmem_cache_alloc_lru+0x60/0x284 [ 283.784060][T13310] sock_alloc_inode+0x2c/0xcc [ 283.784928][T13310] new_inode_pseudo+0x68/0x1cc [ 283.785797][T13310] __sock_create+0x138/0x8a8 [ 283.786673][T13310] __sys_socket+0xc0/0x1b0 [ 283.787468][T13310] __arm64_sys_socket+0x7c/0x94 [ 283.788364][T13310] invoke_syscall+0x98/0x290 [ 283.789196][T13310] el0_svc_common+0x13c/0x258 [ 283.790052][T13310] do_el0_svc+0x5c/0x134 [ 283.790874][T13310] el0_svc+0x58/0x128 [ 283.791603][T13310] el0t_64_sync_handler+0x84/0xf0 [ 283.792531][T13310] el0t_64_sync+0x18c/0x190 [ 283.794079][T13310] socket: no more sockets [ 284.007516][ T4345] Bluetooth: hci5: command 0x040f tx timeout [ 284.320656][ T7473] team0 (unregistering): Port device team_slave_1 removed [ 284.499323][ T7473] team0 (unregistering): Port device team_slave_0 removed [ 284.685065][ T7473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.726608][T13318] loop1: detected capacity change from 0 to 1024 [ 284.733458][T13318] EXT4-fs: Ignoring removed bh option [ 284.744080][T13318] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 284.751196][T13318] Error parsing options; rc = [-22] [ 284.766421][T10903] EXT4-fs (loop1): unmounting filesystem. [ 284.888068][ T7473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.971826][T13338] FAULT_INJECTION: forcing a failure. [ 285.971826][T13338] name failslab, interval 1, probability 0, space 0, times 0 [ 285.974243][T13338] CPU: 1 PID: 13338 Comm: syz.1.2671 Not tainted syzkaller #0 [ 285.975603][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 285.977363][T13338] Call trace: [ 285.977988][T13338] dump_backtrace+0x1c4/0x1f0 [ 285.978871][T13338] show_stack+0x2c/0x3c [ 285.979629][T13338] __dump_stack+0x30/0x40 [ 285.980415][T13338] dump_stack_lvl+0xf4/0x15c [ 285.981286][T13338] dump_stack+0x1c/0x5c [ 285.982101][T13338] should_fail_ex+0x3cc/0x524 [ 285.982957][T13338] __should_failslab+0xc0/0x11c [ 285.983827][T13338] should_failslab+0x10/0x28 [ 285.984642][T13338] slab_pre_alloc_hook+0x6c/0x31c [ 285.985563][T13338] kmem_cache_alloc_lru+0x60/0x284 [ 285.986498][T13338] sock_alloc_inode+0x2c/0xcc [ 285.987396][T13338] new_inode_pseudo+0x68/0x1cc [ 285.988289][T13338] __sock_create+0x138/0x8a8 [ 285.989132][T13338] __sys_socket+0xc0/0x1b0 [ 285.989942][T13338] __arm64_sys_socket+0x7c/0x94 [ 285.990836][T13338] invoke_syscall+0x98/0x290 [ 285.991687][T13338] el0_svc_common+0x13c/0x258 [ 285.992525][T13338] do_el0_svc+0x5c/0x134 [ 285.993292][T13338] el0_svc+0x58/0x128 [ 285.994032][T13338] el0t_64_sync_handler+0x84/0xf0 [ 285.994946][T13338] el0t_64_sync+0x18c/0x190 [ 285.998380][T13338] socket: no more sockets [ 286.087422][ T4335] Bluetooth: hci5: command 0x0419 tx timeout [ 286.399250][ T7473] bond0 (unregistering): Released all slaves [ 286.703006][T12934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.733812][T12934] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.740268][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.742344][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.745223][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.747051][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.760577][T13347] loop9: detected capacity change from 0 to 1024 [ 286.762493][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.763748][ T8953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.774509][T13347] EXT4-fs: Ignoring removed bh option [ 286.804476][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.813567][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.815570][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.818200][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.819496][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.821229][T13347] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 286.834845][T13347] Error parsing options; rc = [-22] [ 286.836078][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.854458][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.892250][T12934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.894189][T12934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.906712][T10851] EXT4-fs (loop9): unmounting filesystem. [ 286.930726][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.933996][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.935813][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.946658][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.949683][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.952583][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.956868][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.966218][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.976040][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.980439][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.083595][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.085161][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.090372][T12934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.100799][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.103004][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.136570][T12934] device veth0_vlan entered promiscuous mode [ 287.140616][T12934] device veth1_vlan entered promiscuous mode [ 287.154565][T12934] device veth0_macvtap entered promiscuous mode [ 287.157196][T12934] device veth1_macvtap entered promiscuous mode [ 287.172668][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.174812][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.196051][T13389] hub 6-0:1.0: USB hub found [ 287.197533][T13389] hub 6-0:1.0: 8 ports detected [ 287.244514][T13392] binder: 13378:13392 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 287.461710][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.466245][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.468401][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.470339][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.486815][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.497023][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.500057][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.503987][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.511343][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.514558][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.521751][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.526097][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.534253][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.556262][T13399] loop4: detected capacity change from 0 to 1024 [ 287.562896][T13399] EXT4-fs: Ignoring removed bh option [ 287.568223][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.576515][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.590463][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.591360][T12934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.596805][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.596821][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.596831][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.596841][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.596850][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.596857][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.596864][T12934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.596870][T12934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.602574][T12934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.653233][T13399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 287.675290][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.676503][T13399] Error parsing options; rc = [-22] [ 287.677210][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.682808][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.684612][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.719135][T12934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.721273][T12934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.723138][T12934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.724903][T12934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.821129][T10910] EXT4-fs (loop4): unmounting filesystem. [ 288.001713][ T8953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.003310][ T8953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.004834][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.043571][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.045193][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.046738][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.178670][ T4345] Bluetooth: hci5: command 0x0405 tx timeout [ 288.203007][T13449] netlink: 'syz.4.2697': attribute type 4 has an invalid length. [ 288.335573][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2701'. [ 288.383572][T13475] loop4: detected capacity change from 0 to 512 [ 288.385773][T13475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.390753][T13475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.396492][T13475] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 288.414056][T13475] EXT4-fs (loop4): 1 truncate cleaned up [ 288.415420][T13475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.443958][T13475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2703'. [ 288.464730][T13475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2703'. [ 288.571899][T10910] EXT4-fs (loop4): unmounting filesystem. [ 288.668208][T13498] hub 6-0:1.0: USB hub found [ 288.669328][T13498] hub 6-0:1.0: 8 ports detected [ 288.733029][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2713'. [ 288.833729][T13526] 9pnet_fd: Insufficient options for proto=fd [ 289.111897][T13546] hub 6-0:1.0: USB hub found [ 289.112992][T13546] hub 6-0:1.0: 8 ports detected [ 289.181840][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2725'. [ 289.214991][T13561] loop1: detected capacity change from 0 to 1024 [ 289.220143][T13561] EXT4-fs: Ignoring removed bh option [ 289.250324][T13561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.262605][T13571] 9pnet_fd: Insufficient options for proto=fd [ 289.408134][T13586] hub 6-0:1.0: USB hub found [ 289.409118][T13586] hub 6-0:1.0: 8 ports detected [ 289.466189][T13599] FAULT_INJECTION: forcing a failure. [ 289.466189][T13599] name failslab, interval 1, probability 0, space 0, times 0 [ 289.493514][T13599] CPU: 0 PID: 13599 Comm: syz.0.2738 Not tainted syzkaller #0 [ 289.494980][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 289.496816][T13599] Call trace: [ 289.497426][T13599] dump_backtrace+0x1c4/0x1f0 [ 289.498296][T13599] show_stack+0x2c/0x3c [ 289.499054][T13599] __dump_stack+0x30/0x40 [ 289.499892][T13599] dump_stack_lvl+0xf4/0x15c [ 289.500748][T13599] dump_stack+0x1c/0x5c [ 289.501532][T13599] should_fail_ex+0x3cc/0x524 [ 289.502372][T13599] __should_failslab+0xc0/0x11c [ 289.503272][T13599] should_failslab+0x10/0x28 [ 289.504077][T13599] kmem_cache_alloc_node+0x8c/0x344 [ 289.505029][T13599] alloc_vmap_area+0x13c/0x169c [ 289.505936][T13599] __get_vm_area_node+0x178/0x31c [ 289.506887][T13599] __vmalloc_node_range+0x1d4/0xe70 [ 289.507838][T13599] vmalloc+0x9c/0xd4 [ 289.508560][T13599] netlink_sendmsg+0x4fc/0x9d8 [ 289.509546][T13599] ____sys_sendmsg+0x588/0x90c [ 289.510490][T13599] __sys_sendmsg+0x288/0x374 [ 289.511437][T13599] __arm64_sys_sendmsg+0x80/0x94 [ 289.512507][T13599] invoke_syscall+0x98/0x290 [ 289.513423][T13599] el0_svc_common+0x13c/0x258 [ 289.514396][T13599] do_el0_svc+0x5c/0x134 [ 289.515281][T13599] el0_svc+0x58/0x128 [ 289.516061][T13599] el0t_64_sync_handler+0x84/0xf0 [ 289.517120][T13599] el0t_64_sync+0x18c/0x190 [ 289.519142][T13599] syz.0.2738: vmalloc error: size 24256, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 289.522175][T13599] CPU: 0 PID: 13599 Comm: syz.0.2738 Not tainted syzkaller #0 [ 289.523638][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 289.525583][T13599] Call trace: [ 289.526218][T13599] dump_backtrace+0x1c4/0x1f0 [ 289.527135][T13599] show_stack+0x2c/0x3c [ 289.527949][T13599] __dump_stack+0x30/0x40 [ 289.528779][T13599] dump_stack_lvl+0xf4/0x15c [ 289.529656][T13599] dump_stack+0x1c/0x5c [ 289.530453][T13599] warn_alloc+0x214/0x324 [ 289.531279][T13599] __vmalloc_node_range+0x24c/0xe70 [ 289.532297][T13599] vmalloc+0x9c/0xd4 [ 289.533056][T13599] netlink_sendmsg+0x4fc/0x9d8 [ 289.533989][T13599] ____sys_sendmsg+0x588/0x90c [ 289.534863][T13599] __sys_sendmsg+0x288/0x374 [ 289.535711][T13599] __arm64_sys_sendmsg+0x80/0x94 [ 289.536787][T13599] invoke_syscall+0x98/0x290 [ 289.537764][T13599] el0_svc_common+0x13c/0x258 [ 289.538731][T13599] do_el0_svc+0x5c/0x134 [ 289.539575][T13599] el0_svc+0x58/0x128 [ 289.540357][T13599] el0t_64_sync_handler+0x84/0xf0 [ 289.541292][T13599] el0t_64_sync+0x18c/0x190 [ 289.545013][T13599] Mem-Info: [ 289.545666][T13599] active_anon:9981 inactive_anon:0 isolated_anon:0 [ 289.545666][T13599] active_file:12938 inactive_file:2460 isolated_file:0 [ 289.545666][T13599] unevictable:768 dirty:184 writeback:0 [ 289.545666][T13599] slab_reclaimable:20134 slab_unreclaimable:94626 [ 289.545666][T13599] mapped:32367 shmem:3949 pagetables:1010 [ 289.545666][T13599] sec_pagetables:0 bounce:0 [ 289.545666][T13599] kernel_misc_reclaimable:0 [ 289.545666][T13599] free:1431091 free_pcp:3956 free_cma:7360 [ 289.557129][T13599] Node 0 active_anon:39924kB inactive_anon:0kB active_file:51752kB inactive_file:9840kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:129468kB dirty:736kB writeback:0kB shmem:15796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9940kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no [ 289.564308][T13599] Node 0 DMA free:3076864kB boost:0kB min:20664kB low:25828kB high:30992kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 289.570646][T13599] lowmem_reserve[]: 0 0 3550 3550 3550 [ 289.571771][T13599] Node 0 Normal free:2647500kB boost:0kB min:24388kB low:30484kB high:36580kB reserved_highatomic:0KB active_anon:39924kB inactive_anon:0kB active_file:51752kB inactive_file:9840kB unevictable:3072kB writepending:736kB present:5242880kB managed:3639600kB mlocked:0kB bounce:0kB free_pcp:15352kB local_pcp:10516kB free_cma:0kB [ 289.578172][T13599] lowmem_reserve[]: 0 0 0 0 0 [ 289.579343][T13599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 289.582437][T13599] Node 0 Normal: 91*4kB (UM) 469*8kB (UME) 554*16kB (UME) 409*32kB (UME) 166*64kB (UME) 177*128kB (UME) 147*256kB (UME) 63*512kB (UME) 21*1024kB (UME) 7*2048kB (UME) 606*4096kB (UM) = 2647252kB [ 289.586349][T13599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.588598][T13599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 289.590485][T13599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 289.592684][T13599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 289.594897][T13599] 19342 total pagecache pages [ 289.596213][T13599] 0 pages in swap cache [ 289.603276][T13599] Free swap = 82244kB [ 289.605525][T13599] Total swap = 124996kB [ 289.606313][T13599] 2097152 pages RAM [ 289.610520][T13599] 0 pages HighMem/MovableOnly [ 289.611461][T13599] 417204 pages reserved [ 289.614655][T13599] 8192 pages cma reserved [ 289.615483][T13599] 69 pages hwpoisoned [ 289.710307][T13316] EXT4-fs (loop1): unmounting filesystem. [ 289.761661][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2740'. [ 289.763890][T13616] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 289.776915][T13616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.794636][T13622] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 289.938279][ T4345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.943707][ T4345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.946790][ T4345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.949217][ T4345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.950735][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.952157][ T4345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.981800][T13649] ------------[ cut here ]------------ [ 289.982985][T13649] WARNING: CPU: 1 PID: 13649 at drivers/virtio/virtio.c:335 virtio_dev_remove+0x174/0x194 [ 289.984535][T13649] Modules linked in: [ 289.985169][T13649] CPU: 1 PID: 13649 Comm: syz.4.2750 Not tainted syzkaller #0 [ 289.986357][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 289.987997][T13649] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 289.989396][T13649] pc : virtio_dev_remove+0x174/0x194 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.990412][T13649] lr : virtio_dev_remove+0x174/0x194 [ 289.991372][T13649] sp : ffff800021e27600 [ 289.992161][T13649] x29: ffff800021e27600 x28: ffff0000c46ac0d0 x27: ffff8000167fc980 [ 289.993652][T13649] x26: ffff0000c8f7c0f0 x25: 1fffe000191ef81e x24: 1fffe000191ef81d [ 289.995191][T13649] x23: 1fffe000191ef8a3 x22: dfff800000000000 x21: 00000000000000ff [ 289.996677][T13649] x20: ffff0000c8f7c518 x19: ffff0000c8f7c000 x18: 1fffe00033e6db7e [ 289.998373][T13649] x17: ffff8000153bd000 x16: ffff8000082dd284 x15: ffff8000089b7484 [ 290.000066][T13649] x14: 0000000000000001 x13: 1ffff00002b84dce x12: 0000000000080000 [ 290.001729][T13649] x11: 000000000002c43f x10: ffff80002beb5000 x9 : ffff80000b34970c [ 290.003368][T13649] x8 : 000000000002c440 x7 : ffff80000805a700 x6 : ffff80000805a910 [ 290.004973][T13649] x5 : ffff0000ecebff18 x4 : ffff800021e27320 x3 : 0000000000000000 [ 290.006565][T13649] x2 : 0000000000000006 x1 : 00000000000000ff x0 : 0000000000000000 [ 290.008170][T13649] Call trace: [ 290.008828][T13649] virtio_dev_remove+0x174/0x194 [ 290.009785][T13649] device_release_driver_internal+0x3d4/0x6e4 [ 290.010971][T13649] device_release_driver+0x28/0x38 [ 290.011987][T13649] bus_remove_device+0x294/0x384 [ 290.012953][T13649] device_del+0x580/0x990 [ 290.013809][T13649] device_unregister+0x2c/0xc8 [ 290.014784][T13649] unregister_virtio_device+0x38/0x78 [ 290.015767][T13649] virtio_pci_remove+0x7c/0xf4 [ 290.016628][T13649] pci_device_remove+0x9c/0x23c [ 290.017514][T13649] device_release_driver_internal+0x3d4/0x6e4 [ 290.018633][T13649] device_driver_detach+0x48/0x58 [ 290.019537][T13649] unbind_store+0x2a8/0x2b4 [ 290.020372][T13649] drv_attr_store+0x80/0xa4 [ 290.021199][T13649] sysfs_kf_write+0x1f8/0x274 [ 290.022071][T13649] kernfs_fop_write_iter+0x390/0x4b4 [ 290.023035][T13649] vfs_write+0x3c8/0x7c8 [ 290.023823][T13649] ksys_write+0x12c/0x228 [ 290.024609][T13649] __arm64_sys_write+0x7c/0x90 [ 290.025512][T13649] invoke_syscall+0x98/0x290 [ 290.026419][T13649] el0_svc_common+0x13c/0x258 [ 290.027321][T13649] do_el0_svc+0x5c/0x134 [ 290.028131][T13649] el0_svc+0x58/0x128 [ 290.028883][T13649] el0t_64_sync_handler+0x84/0xf0 [ 290.029787][T13649] el0t_64_sync+0x18c/0x190 [ 290.030585][T13649] irq event stamp: 1374 [ 290.031325][T13649] hardirqs last enabled at (1373): [] kasan_quarantine_put+0xc4/0x200 [ 290.033077][T13649] hardirqs last disabled at (1374): [] el1_dbg+0x24/0x80 [ 290.034630][T13649] softirqs last enabled at (966): [] handle_softirqs+0xb1c/0xc90 [ 290.036329][T13649] softirqs last disabled at (961): [] __do_softirq+0x14/0x20 [ 290.037937][T13649] ---[ end trace 0000000000000000 ]--- [ 290.171176][ T5533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.181670][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 290.393071][ T5533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.493313][ T5533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.599298][ T5533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.006355][ T5533] device hsr_slave_0 left promiscuous mode [ 293.047813][ T5533] device hsr_slave_1 left promiscuous mode [ 293.107673][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.109245][ T5533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.113797][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.115170][ T5533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.116812][ T5533] device bridge_slave_1 left promiscuous mode [ 293.118108][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.167920][ T5533] device bridge_slave_0 left promiscuous mode [ 293.169169][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.307465][ T5533] device veth1_macvtap left promiscuous mode [ 293.308731][ T5533] device veth0_macvtap left promiscuous mode [ 293.309988][ T5533] device veth1_vlan left promiscuous mode [ 293.311049][ T5533] device veth0_vlan left promiscuous mode [ 295.430666][ T5533] team0 (unregistering): Port device team_slave_1 removed [ 295.631698][ T5533] team0 (unregistering): Port device team_slave_0 removed [ 295.818913][ T5533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.021406][ T5533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.559460][ T5533] bond0 (unregistering): Released all slaves [ 299.950439][ T5533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0