last executing test programs: 1m8.303309057s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0xfe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) 1m6.426644004s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) 1m5.247827124s ago: executing program 0 (id=23): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000080)) 50.186806511s ago: executing program 32 (id=23): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000080)) 6.97266106s ago: executing program 1 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) read$FUSE(r5, &(0x7f0000006780)={0x2020}, 0x2020) 6.122562648s ago: executing program 1 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 5.717946816s ago: executing program 2 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) write$hidraw(r5, &(0x7f00000005c0)='1234567', 0x7) 5.616467699s ago: executing program 2 (id=597): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r1) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000001780)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x30, 0x30, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x65, 0x65, 0x32, 0x66, 0x32, 0x64, 0x66, 0x39, 0x32, 0x38, 0x62, 0x57]}, &(0x7f0000000100)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 5.544313767s ago: executing program 5 (id=598): socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0x4bef, 0x200, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getpeername$l2tp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)=0x1) 5.413069808s ago: executing program 5 (id=599): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r1, &(0x7f0000000800)='transport=loop,nqn=t', 0x14) 5.371999066s ago: executing program 1 (id=600): r0 = syz_io_uring_setup(0x2ff7, &(0x7f0000000140)={0x0, 0x73ff, 0x0, 0x3, 0x105}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0xb611, 0xb170000], 0x2) 5.371651434s ago: executing program 2 (id=601): syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) socket$alg(0x26, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) getpid() r0 = syz_open_dev$vivid(&(0x7f0000000300), 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000340)={0xa, {0x80, 0x7fff, 0x7, 0x200}, {0xca, 0x7, 0x40000000, 0x3}, {0x1, 0x8}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 5.306599654s ago: executing program 1 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) accept4(r3, 0x0, 0x0, 0x0) 5.299182685s ago: executing program 5 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write(r0, &(0x7f0000000240)='p', 0x1) 5.220256767s ago: executing program 5 (id=606): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) 5.029651575s ago: executing program 3 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) write$hidraw(r5, &(0x7f00000005c0)='1234567', 0x7) 4.957892852s ago: executing program 3 (id=608): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000104c05d50300000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x3d, {0x3d, 0x0, "532d7b8a0acb33928a7bac3d361246f41a96fc6c849fe0b7aee9cccc3943669197dab525cef6e6658288c8f7da246fc0b72773b5a7b7962e71ef41"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.47639521s ago: executing program 2 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 4.432324238s ago: executing program 4 (id=612): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r1) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000001780)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x30, 0x30, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x65, 0x65, 0x32, 0x66, 0x32, 0x64, 0x66, 0x39, 0x32, 0x38, 0x62, 0x57]}, &(0x7f0000000100)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 4.356055845s ago: executing program 5 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 4.355831893s ago: executing program 4 (id=614): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x2, 0x80}) 4.342019155s ago: executing program 3 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r1, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 4.334281214s ago: executing program 1 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="68000000000905040000002000000000020000000900010089797a3000000000140002800600010000020000050002000600000008000500000000da14002c000480080001000000d794be485a1254c20100706f6c69637930000800020000000002080003000000001e", 0x6a}], 0x1}, 0x0) 4.262467215s ago: executing program 3 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 4.212065443s ago: executing program 5 (id=618): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)="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", 0xfd48, 0x90, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) 4.211781107s ago: executing program 1 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='offline', 0x7) 4.190146035s ago: executing program 4 (id=620): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000280)={@broadcast, @remote}, 0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x16, 0x0, @void}, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000140)=0x66, 0x4) 3.838114753s ago: executing program 3 (id=621): syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) socket$alg(0x26, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) getpid() r0 = syz_open_dev$vivid(&(0x7f0000000300), 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000340)={0xa, {0x80, 0x7fff, 0x7, 0x200}, {0xca, 0x7, 0x40000000, 0x3}, {0x1, 0x8}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 3.656717513s ago: executing program 2 (id=622): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) 3.588324472s ago: executing program 2 (id=623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000061005001800128008000100767469000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.588133863s ago: executing program 4 (id=624): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xa803) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x2007, "4744a83179e0ce10714825b601a5d6db15dfc756f0088ccd3701280e00d2241b", 0x2}) 3.525872535s ago: executing program 4 (id=625): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x0) 62.806082ms ago: executing program 3 (id=626): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r1) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000001780)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x30, 0x30, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x65, 0x65, 0x32, 0x66, 0x32, 0x64, 0x66, 0x39, 0x32, 0x38, 0x62, 0x57]}, &(0x7f0000000100)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 0s ago: executing program 4 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r1, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 28.073559][ T4697] cgroup: Unknown subsys name 'net' [ 28.223658][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.225018][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.365919][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.124656][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.125204][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.125636][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.134577][ T4720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.135327][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.135607][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.136169][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.136322][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.136638][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.136865][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.137218][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.137441][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.138817][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.139167][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.139260][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.142224][ T4716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.144862][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.145113][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.145536][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.146103][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.148434][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.148690][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.149397][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.150956][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.154662][ T4716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.540704][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.540758][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.540869][ T4708] bridge_slave_0: entered allmulticast mode [ 29.541348][ T4708] bridge_slave_0: entered promiscuous mode [ 29.547631][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.547659][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.547759][ T4708] bridge_slave_1: entered allmulticast mode [ 29.548388][ T4708] bridge_slave_1: entered promiscuous mode [ 29.583778][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.601513][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.601570][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.601633][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.601687][ T4709] bridge_slave_0: entered allmulticast mode [ 29.602582][ T4709] bridge_slave_0: entered promiscuous mode [ 29.624082][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.624154][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.624213][ T4709] bridge_slave_1: entered allmulticast mode [ 29.624625][ T4709] bridge_slave_1: entered promiscuous mode [ 29.658300][ T4708] team0: Port device team_slave_0 added [ 29.665030][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.668299][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.668355][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.668422][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.668474][ T4712] bridge_slave_0: entered allmulticast mode [ 29.668887][ T4712] bridge_slave_0: entered promiscuous mode [ 29.671673][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.671697][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.671767][ T4712] bridge_slave_1: entered allmulticast mode [ 29.673326][ T4712] bridge_slave_1: entered promiscuous mode [ 29.674221][ T4708] team0: Port device team_slave_1 added [ 29.680007][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.680016][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.680027][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.680998][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.681005][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.681018][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.683742][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.683768][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.683824][ T4719] bridge_slave_0: entered allmulticast mode [ 29.684239][ T4719] bridge_slave_0: entered promiscuous mode [ 29.685000][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.685018][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.685103][ T4719] bridge_slave_1: entered allmulticast mode [ 29.685522][ T4719] bridge_slave_1: entered promiscuous mode [ 29.693389][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.699722][ T4709] team0: Port device team_slave_0 added [ 29.700548][ T4709] team0: Port device team_slave_1 added [ 29.718704][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.730404][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.730416][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.730431][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.734284][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.735305][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.741458][ T4712] team0: Port device team_slave_0 added [ 29.743259][ T4712] team0: Port device team_slave_1 added [ 29.748141][ T4708] hsr_slave_0: entered promiscuous mode [ 29.748461][ T4708] hsr_slave_1: entered promiscuous mode [ 29.749361][ T4719] team0: Port device team_slave_0 added [ 29.753404][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.753415][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.753433][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.775796][ T4719] team0: Port device team_slave_1 added [ 29.790591][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.790660][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.790715][ T4714] bridge_slave_0: entered allmulticast mode [ 29.791152][ T4714] bridge_slave_0: entered promiscuous mode [ 29.801474][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.801486][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.801499][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.801863][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.801871][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.801883][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.805694][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.805773][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.805831][ T4714] bridge_slave_1: entered allmulticast mode [ 29.806287][ T4714] bridge_slave_1: entered promiscuous mode [ 29.809347][ T4709] hsr_slave_0: entered promiscuous mode [ 29.809657][ T4709] hsr_slave_1: entered promiscuous mode [ 29.809891][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 29.809932][ T4709] Cannot create hsr debugfs directory [ 29.810822][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.810829][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.810840][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.828602][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.841689][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.848649][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.848660][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.848675][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.860506][ T4714] team0: Port device team_slave_0 added [ 29.866675][ T4712] hsr_slave_0: entered promiscuous mode [ 29.867032][ T4712] hsr_slave_1: entered promiscuous mode [ 29.867242][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 29.867252][ T4712] Cannot create hsr debugfs directory [ 29.871022][ T4714] team0: Port device team_slave_1 added [ 29.887374][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.887386][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.887401][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.890430][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.890437][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.890452][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.897781][ T4719] hsr_slave_0: entered promiscuous mode [ 29.898068][ T4719] hsr_slave_1: entered promiscuous mode [ 29.898253][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 29.898262][ T4719] Cannot create hsr debugfs directory [ 29.976006][ T4714] hsr_slave_0: entered promiscuous mode [ 29.976357][ T4714] hsr_slave_1: entered promiscuous mode [ 29.976551][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 29.976561][ T4714] Cannot create hsr debugfs directory [ 30.003046][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.005627][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.011216][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.013256][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.013568][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.016007][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.021011][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.023772][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.049876][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.055757][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.064323][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.065352][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.069861][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.069908][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.070051][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.070080][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.079147][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.083418][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.083738][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.084766][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.084922][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.085896][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.086196][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.087420][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.095842][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.097241][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.097577][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.099679][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.125289][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.126378][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.126676][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.127623][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.133893][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.133930][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.134004][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.134040][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.138465][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.141054][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.141383][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.144691][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.145372][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.145406][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.145477][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.145507][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.177702][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.177737][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.177811][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.177839][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.181070][ T4714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.183884][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.184214][ T4714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.186269][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.198435][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.198640][ T4714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.199734][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.200018][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.200890][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.216840][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.217317][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.218508][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.218819][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.219975][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.220273][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.220540][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.220826][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.240782][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.246374][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.250302][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.251626][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.257646][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.257680][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.259332][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.259355][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.268643][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.268669][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.277198][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.277221][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.279911][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.291192][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.301323][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.304439][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.304466][ T1288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.310171][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.321649][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.321676][ T1288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.333869][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.341638][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.341654][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.359251][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.359267][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.368924][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.368960][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.369850][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.369873][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.376627][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.376653][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.376965][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.376990][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.381504][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.381517][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.595080][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.614527][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.631001][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.637060][ T4712] veth0_vlan: entered promiscuous mode [ 30.638882][ T4712] veth1_vlan: entered promiscuous mode [ 30.642002][ T4709] veth0_vlan: entered promiscuous mode [ 30.648157][ T4709] veth1_vlan: entered promiscuous mode [ 30.666043][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.676465][ T4714] veth0_vlan: entered promiscuous mode [ 30.679498][ T4714] veth1_vlan: entered promiscuous mode [ 30.686742][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.690969][ T4712] veth0_macvtap: entered promiscuous mode [ 30.706270][ T4712] veth1_macvtap: entered promiscuous mode [ 30.706757][ T4714] veth0_macvtap: entered promiscuous mode [ 30.708140][ T4714] veth1_macvtap: entered promiscuous mode [ 30.710571][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.711851][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.719457][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.720808][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.729851][ T4709] veth0_macvtap: entered promiscuous mode [ 30.731709][ T4709] veth1_macvtap: entered promiscuous mode [ 30.753928][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.770384][ T4708] veth0_vlan: entered promiscuous mode [ 30.775606][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.776254][ T1863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.785079][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.786344][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.786380][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.786407][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.787264][ T4708] veth1_vlan: entered promiscuous mode [ 30.832195][ T1383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.832262][ T1383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.832463][ T162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.845402][ T4708] veth0_macvtap: entered promiscuous mode [ 30.846871][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.846882][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.854087][ T1863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.854102][ T1863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.861035][ T4708] veth1_macvtap: entered promiscuous mode [ 30.868464][ T4719] veth0_vlan: entered promiscuous mode [ 30.873550][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.873563][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.880167][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.880182][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.880370][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.894034][ T4719] veth1_vlan: entered promiscuous mode [ 30.906417][ T1383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.906432][ T1383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.906495][ T4719] veth0_macvtap: entered promiscuous mode [ 30.907907][ T4719] veth1_macvtap: entered promiscuous mode [ 30.911326][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.914440][ T162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.914478][ T162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.914505][ T162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.914530][ T162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.921151][ T1383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.921162][ T1383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.923592][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.931922][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.933223][ T1383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.934339][ T1863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.934540][ T1863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.934642][ T1863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.943343][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.943435][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.943494][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.976483][ T4714] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.995498][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.995510][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.016426][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.016441][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.022970][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.054526][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.054541][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.080489][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.080504][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.162495][ T4904] gadgetfs: bound to dummy_udc driver [ 31.192728][ T4716] Bluetooth: hci3: command tx timeout [ 31.192824][ T4716] Bluetooth: hci4: command tx timeout [ 31.192888][ T4716] Bluetooth: hci0: command tx timeout [ 31.192949][ T4716] Bluetooth: hci2: command tx timeout [ 31.193009][ T4716] Bluetooth: hci1: command tx timeout [ 31.458432][ T4910] Bluetooth: MGMT ver 1.23 [ 31.471390][ T4915] FAULT_INJECTION: forcing a failure. [ 31.471390][ T4915] name failslab, interval 1, probability 0, space 0, times 1 [ 31.471409][ T4915] CPU: 1 UID: 0 PID: 4915 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT [ 31.471420][ T4915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.471426][ T4915] Call trace: [ 31.471429][ T4915] show_stack+0x2c/0x3c (C) [ 31.471450][ T4915] __dump_stack+0x30/0x40 [ 31.471462][ T4915] dump_stack_lvl+0xd8/0x12c [ 31.471473][ T4915] dump_stack+0x1c/0x28 [ 31.471484][ T4915] should_fail_ex+0x41c/0x590 [ 31.471497][ T4915] should_failslab+0xc4/0x120 [ 31.471510][ T4915] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 31.471520][ T4915] kmemdup_nul+0x48/0xfc [ 31.471529][ T4915] vfs_parse_fs_qstr+0x100/0x1cc [ 31.471538][ T4915] do_new_mount+0x21c/0x538 [ 31.471550][ T4915] path_mount+0x5f0/0xa88 [ 31.471560][ T4915] do_mount+0xe8/0x148 [ 31.471570][ T4915] __arm64_sys_mount+0x33c/0x388 [ 31.471581][ T4915] invoke_syscall+0x98/0x244 [ 31.471593][ T4915] el0_svc_common+0xec/0x23c [ 31.471605][ T4915] do_el0_svc+0x4c/0x5c [ 31.471616][ T4915] el0_svc+0x64/0x260 [ 31.471627][ T4915] el0t_64_sync_handler+0x44/0x104 [ 31.471638][ T4915] el0t_64_sync+0x198/0x19c [ 31.993143][ T4929] loop4: detected capacity change from 0 to 128 [ 32.612966][ T4934] loop3: detected capacity change from 0 to 256 [ 32.630588][ T4934] FAT-fs (loop3): data area starts beyond volume (32 > 0) [ 32.630619][ T4934] FAT-fs (loop3): Can't find a valid FAT filesystem [ 33.121825][ T4944] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 33.952327][ T4717] Bluetooth: hci1: command tx timeout [ 33.952358][ T4717] Bluetooth: hci2: command tx timeout [ 33.952377][ T4717] Bluetooth: hci0: command tx timeout [ 33.952393][ T4717] Bluetooth: hci4: command tx timeout [ 33.952409][ T4717] Bluetooth: hci3: command tx timeout [ 34.614985][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 34.646265][ T4950] tipc: Started in network mode [ 34.646286][ T4950] tipc: Node identity ac1414aa, cluster identity 4711 [ 34.646608][ T4950] tipc: New replicast peer: 172.20.20.187 [ 34.647463][ T4950] tipc: Enabled bearer , priority 10 [ 35.158660][ T4979] loop4: detected capacity change from 0 to 2048 [ 35.175351][ T4979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.375943][ T4985] Zero length message leads to an empty skb [ 35.771352][ T4989] random: crng reseeded on system resumption [ 35.772572][ T4820] tipc: Node number set to 2886997162 [ 35.889469][ T4989] Restarting kernel threads ... [ 35.890056][ T4989] Done restarting kernel threads. [ 36.614564][ T4716] Bluetooth: hci3: command tx timeout [ 36.614597][ T4716] Bluetooth: hci4: command tx timeout [ 36.614616][ T4716] Bluetooth: hci0: command tx timeout [ 36.614633][ T4716] Bluetooth: hci2: command tx timeout [ 36.614648][ T4716] Bluetooth: hci1: command tx timeout [ 36.634994][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.715888][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 37.963787][ T5017] can0: slcan on ttyS3. [ 38.142986][ T5017] can0 (unregistered): slcan off ttyS3. [ 38.351446][ T5021] loop2: detected capacity change from 0 to 512 [ 38.355142][ T5021] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.355167][ T5021] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.359475][ T5021] EXT4-fs (loop2): 1 truncate cleaned up [ 38.360155][ T5021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.652291][ T4717] Bluetooth: hci1: command tx timeout [ 38.652379][ T4717] Bluetooth: hci2: command tx timeout [ 38.652547][ T4717] Bluetooth: hci0: command tx timeout [ 38.652699][ T4717] Bluetooth: hci4: command tx timeout [ 38.652832][ T4717] Bluetooth: hci3: command tx timeout [ 38.780167][ T1288] IPVS: starting estimator thread 0... [ 38.873236][ T5028] IPVS: using max 59 ests per chain, 141600 per kthread [ 38.950055][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 39.124343][ T5052] Console: switching to colour dummy device 80x25 [ 39.385092][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.566844][ T5090] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 40.798064][ T5108] loop4: detected capacity change from 0 to 512 [ 40.801754][ T5108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 40.804784][ T5108] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 40.805647][ T5108] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.79: invalid indirect mapped block 2683928664 (level 1) [ 40.805716][ T5108] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.807745][ T5108] EXT4-fs (loop4): 1 truncate cleaned up [ 40.808264][ T5108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.827631][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.208818][ T5122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.209119][ T5122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.717541][ T5129] loop2: detected capacity change from 0 to 8 [ 41.725218][ T5129] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 41.725228][ T5129] unable to read xattr id index table [ 42.229267][ T5148] netlink: 48 bytes leftover after parsing attributes in process `syz.3.97'. [ 42.378652][ T5167] FAULT_INJECTION: forcing a failure. [ 42.378652][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 42.378672][ T5167] CPU: 1 UID: 0 PID: 5167 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT [ 42.378683][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.378688][ T5167] Call trace: [ 42.378691][ T5167] show_stack+0x2c/0x3c (C) [ 42.378716][ T5167] __dump_stack+0x30/0x40 [ 42.378735][ T5167] dump_stack_lvl+0xd8/0x12c [ 42.378747][ T5167] dump_stack+0x1c/0x28 [ 42.378758][ T5167] should_fail_ex+0x41c/0x590 [ 42.378772][ T5167] should_failslab+0xc4/0x120 [ 42.378786][ T5167] __kmalloc_cache_noprof+0x94/0x5fc [ 42.378795][ T5167] fuse_get_tree+0xc4/0x31c [ 42.378806][ T5167] vfs_get_tree+0x90/0x28c [ 42.378817][ T5167] fc_mount+0x24/0xac [ 42.378827][ T5167] do_new_mount+0x2a4/0x538 [ 42.378838][ T5167] path_mount+0x5f0/0xa88 [ 42.378848][ T5167] do_mount+0xe8/0x148 [ 42.378858][ T5167] __arm64_sys_mount+0x33c/0x388 [ 42.378870][ T5167] invoke_syscall+0x98/0x244 [ 42.378882][ T5167] el0_svc_common+0xec/0x23c [ 42.378894][ T5167] do_el0_svc+0x4c/0x5c [ 42.378905][ T5167] el0_svc+0x64/0x260 [ 42.378916][ T5167] el0t_64_sync_handler+0x44/0x104 [ 42.378927][ T5167] el0t_64_sync+0x198/0x19c [ 42.381212][ T5167] loop3: detected capacity change from 0 to 512 [ 42.408457][ T5167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.415443][ T5167] EXT4-fs (loop3): 1 truncate cleaned up [ 42.417140][ T5167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.428557][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.463230][ T5174] loop3: detected capacity change from 0 to 512 [ 42.463666][ T5174] EXT4-fs: Ignoring removed nobh option [ 42.464898][ T5174] EXT4-fs (loop3): can't mount with both data=journal and dax [ 42.472194][ T4716] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 42.624249][ T5178] netlink: 48 bytes leftover after parsing attributes in process `syz.4.109'. [ 42.872245][ T4717] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 42.872643][ T4717] Bluetooth: hci0: command 0x0c3a tx timeout [ 42.917463][ T5191] loop2: detected capacity change from 0 to 512 [ 42.959504][ T5191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 42.959749][ T5191] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 42.960033][ T5191] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.113: invalid indirect mapped block 2683928664 (level 1) [ 42.960048][ T5191] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.962095][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 42.962106][ C1] EXT4-fs (loop2): initial error at time 42: ext4_free_branches:1023: inode 13 [ 42.962124][ C1] EXT4-fs (loop2): last error at time 42: ext4_free_branches:1023: inode 13 [ 42.962711][ T5191] EXT4-fs (loop2): 1 truncate cleaned up [ 42.963194][ T5191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.996472][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.383741][ T5206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 43.383803][ T5206] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 43.385782][ T5206] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 43.386874][ T5206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.386955][ T5206] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.387920][ T5206] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.388968][ T5206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 43.388989][ T5206] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 43.389697][ T5206] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 43.390431][ T5206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.390453][ T5206] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.390871][ T5206] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.391660][ T5206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 43.391680][ T5206] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 43.397933][ T5206] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 43.780265][ T5215] ======================================================= [ 43.780265][ T5215] WARNING: The mand mount option has been deprecated and [ 43.780265][ T5215] and is ignored by this kernel. Remove the mand [ 43.780265][ T5215] option from the mount to silence this warning. [ 43.780265][ T5215] ======================================================= [ 43.789035][ T5215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.218470][ T5230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.125'. [ 45.177913][ T5247] loop3: detected capacity change from 0 to 8 [ 45.384157][ T5247] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 45.384172][ T5247] unable to read xattr id index table [ 45.432369][ T4720] Bluetooth: hci4: command 0x0c1a tx timeout [ 45.432416][ T4720] Bluetooth: hci3: command 0x0c1a tx timeout [ 45.432436][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 45.432454][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 45.989114][ T5277] syz.4.144 uses obsolete (PF_INET,SOCK_PACKET) [ 46.845392][ T5298] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 47.289575][ T5307] loop1: detected capacity change from 0 to 512 [ 47.295890][ T5307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 47.296524][ T5307] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 47.296704][ T5307] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.155: invalid indirect mapped block 2683928664 (level 1) [ 47.296718][ T5307] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.297341][ T5307] EXT4-fs (loop1): 1 truncate cleaned up [ 47.297811][ T5307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.326651][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.434216][ T5310] loop4: detected capacity change from 0 to 1024 [ 47.437173][ T5310] EXT4-fs: Ignoring removed i_version option [ 47.532225][ T4717] Bluetooth: hci1: command 0x0c1a tx timeout [ 47.532314][ T4717] Bluetooth: hci2: command 0x0c1a tx timeout [ 47.532378][ T4717] Bluetooth: hci3: command 0x0c1a tx timeout [ 47.533116][ T4717] Bluetooth: hci4: command 0x0c1a tx timeout [ 47.660094][ T5310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.660268][ T5310] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.752193][ T5310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.845649][ T4720] Bluetooth: hci4: unexpected event for opcode 0x202f [ 48.583076][ T5325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.160'. [ 48.792764][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.811042][ T5327] loop4: detected capacity change from 0 to 512 [ 48.812043][ T5327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.813653][ T5327] EXT4-fs (loop4): 1 truncate cleaned up [ 48.814105][ T5327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.223021][ T4717] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 49.223873][ T4717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 49.224128][ T4717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 49.224457][ T4717] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 49.224898][ T4717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 49.906730][ T4717] Bluetooth: hci2: command 0x0c1a tx timeout [ 49.906773][ T4720] Bluetooth: hci3: command 0x0c1a tx timeout [ 49.920972][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.979073][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 50.003034][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.097697][ T5362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.169'. [ 50.130743][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.135738][ T5367] FAULT_INJECTION: forcing a failure. [ 50.135738][ T5367] name failslab, interval 1, probability 0, space 0, times 0 [ 50.135758][ T5367] CPU: 1 UID: 0 PID: 5367 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT [ 50.135769][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.135775][ T5367] Call trace: [ 50.135778][ T5367] show_stack+0x2c/0x3c (C) [ 50.135799][ T5367] __dump_stack+0x30/0x40 [ 50.135813][ T5367] dump_stack_lvl+0xd8/0x12c [ 50.135824][ T5367] dump_stack+0x1c/0x28 [ 50.135835][ T5367] should_fail_ex+0x41c/0x590 [ 50.135850][ T5367] should_failslab+0xc4/0x120 [ 50.135865][ T5367] __kmalloc_cache_noprof+0x94/0x5fc [ 50.135876][ T5367] device_add+0xb4/0x9e0 [ 50.135887][ T5367] wakeup_source_sysfs_add+0x1b4/0x2a4 [ 50.135901][ T5367] wakeup_source_register+0x158/0x2fc [ 50.135912][ T5367] ep_create_wakeup_source+0xf4/0x240 [ 50.135926][ T5367] ep_insert+0xb88/0x1418 [ 50.135937][ T5367] do_epoll_ctl_file+0xa0c/0xbd4 [ 50.135948][ T5367] do_epoll_ctl+0xa0/0x140 [ 50.135959][ T5367] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 50.135970][ T5367] invoke_syscall+0x98/0x244 [ 50.135982][ T5367] el0_svc_common+0xec/0x23c [ 50.135994][ T5367] do_el0_svc+0x4c/0x5c [ 50.136005][ T5367] el0_svc+0x64/0x260 [ 50.136017][ T5367] el0t_64_sync_handler+0x44/0x104 [ 50.136027][ T5367] el0t_64_sync+0x198/0x19c [ 50.288875][ T5381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.311402][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.625686][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.625713][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.625777][ T5332] bridge_slave_0: entered allmulticast mode [ 50.626193][ T5332] bridge_slave_0: entered promiscuous mode [ 50.641914][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.642807][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.643130][ T5332] bridge_slave_1: entered allmulticast mode [ 50.643615][ T5332] bridge_slave_1: entered promiscuous mode [ 50.644775][ T5381] md/raid:md0: not clean -- starting background reconstruction [ 50.653570][ T5381] md/raid:md0: not enough operational devices (2/2 failed) [ 50.664645][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.671354][ T5332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.673423][ T5332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.688610][ T5332] team0: Port device team_slave_0 added [ 50.689513][ T5332] team0: Port device team_slave_1 added [ 50.704116][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.704127][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.704142][ T5332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.711188][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.711200][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.711211][ T5332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.748538][ T5332] hsr_slave_0: entered promiscuous mode [ 50.748937][ T5332] hsr_slave_1: entered promiscuous mode [ 50.749552][ T5332] debugfs: 'hsr0' already exists in 'hsr' [ 50.749564][ T5332] Cannot create hsr debugfs directory [ 50.825124][ T5381] md/raid:md0: failed to run raid set. [ 50.825138][ T5381] md: pers->run() failed ... [ 51.159909][ T61] bridge_slave_1: left allmulticast mode [ 51.159938][ T61] bridge_slave_1: left promiscuous mode [ 51.160284][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.175048][ T5410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.181'. [ 51.176229][ T5407] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 51.246549][ T61] bridge_slave_0: left allmulticast mode [ 51.246683][ T61] bridge_slave_0: left promiscuous mode [ 51.246794][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.273769][ T4720] Bluetooth: hci5: command tx timeout [ 51.610705][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.685438][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.023962][ T61] bond0 (unregistering): Released all slaves [ 52.032527][ T5407] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 52.055112][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 52.062464][ T5332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.074657][ T5332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.076997][ T5332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.086069][ T5332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.093951][ T5332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.107102][ T5332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.108197][ T5332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.113537][ T5332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.449195][ T5332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.507933][ T5332] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.509845][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.509876][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.527640][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.527671][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.539109][ T5474] loop1: detected capacity change from 0 to 131072 [ 52.554400][ T5474] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 52.554422][ T5474] device-mapper: ioctl: error adding target to table [ 52.568670][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.589553][ T5332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.607799][ T5479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 52.636786][ T61] hsr_slave_0: left promiscuous mode [ 52.637442][ T61] hsr_slave_1: left promiscuous mode [ 52.637767][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.637783][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.643448][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.643462][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.653615][ T61] veth1_macvtap: left promiscuous mode [ 52.653654][ T61] veth0_macvtap: left promiscuous mode [ 52.653703][ T61] veth1_vlan: left promiscuous mode [ 52.653759][ T61] veth0_vlan: left promiscuous mode [ 52.677896][ T5485] loop1: detected capacity change from 0 to 512 [ 52.681476][ T5485] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.706966][ T5485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.139100][ T26] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 53.140748][ T26] wiimote 0005:057E:0330.0001: New device registered [ 53.149660][ T5502] wiimote 0005:057E:0330.0001: Device removed [ 53.150969][ T61] team0 (unregistering): Port device team_slave_1 removed [ 53.164106][ T61] team0 (unregistering): Port device team_slave_0 removed [ 53.201399][ T5506] fido_id[5506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.259898][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.330013][ T5511] loop4: detected capacity change from 0 to 8 [ 53.340831][ T5511] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 53.340865][ T5511] unable to read xattr id index table [ 53.361864][ T4720] Bluetooth: hci5: command tx timeout [ 53.540148][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.645100][ T5520] syzkaller0: entered promiscuous mode [ 53.645117][ T5520] syzkaller0: entered allmulticast mode [ 53.670302][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.918324][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.064632][ T5332] veth0_vlan: entered promiscuous mode [ 54.070624][ T5332] veth1_vlan: entered promiscuous mode [ 54.085568][ T5332] veth0_macvtap: entered promiscuous mode [ 54.087164][ T5332] veth1_macvtap: entered promiscuous mode [ 54.091122][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.100065][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.114801][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.116090][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.116115][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.130793][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.130806][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.132271][ T1863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142673][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.142685][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.153324][ T4806] wiimote 0005:057E:0330.0001: detected device: Nintendo Wii Remote Plus (Gen 2) [ 54.169021][ T4806] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input3 [ 54.180172][ T4806] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input4 [ 54.181848][ T4806] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input2 [ 54.346988][ T5560] netlink: 48 bytes leftover after parsing attributes in process `syz.5.204'. [ 54.515104][ T5571] FAULT_INJECTION: forcing a failure. [ 54.515104][ T5571] name failslab, interval 1, probability 0, space 0, times 0 [ 54.515125][ T5571] CPU: 0 UID: 0 PID: 5571 Comm: syz.5.209 Not tainted syzkaller #0 PREEMPT [ 54.515136][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.515142][ T5571] Call trace: [ 54.515145][ T5571] show_stack+0x2c/0x3c (C) [ 54.515167][ T5571] __dump_stack+0x30/0x40 [ 54.515181][ T5571] dump_stack_lvl+0xd8/0x12c [ 54.515192][ T5571] dump_stack+0x1c/0x28 [ 54.515204][ T5571] should_fail_ex+0x41c/0x590 [ 54.515218][ T5571] should_failslab+0xc4/0x120 [ 54.515231][ T5571] __kmalloc_cache_noprof+0x94/0x5fc [ 54.515240][ T5571] get_device_parent+0x21c/0x350 [ 54.515251][ T5571] device_add+0x298/0x9e0 [ 54.515260][ T5571] wakeup_source_sysfs_add+0x1b4/0x2a4 [ 54.515273][ T5571] wakeup_source_register+0x158/0x2fc [ 54.515284][ T5571] ep_create_wakeup_source+0xf4/0x240 [ 54.515297][ T5571] ep_insert+0xb88/0x1418 [ 54.515308][ T5571] do_epoll_ctl_file+0xa0c/0xbd4 [ 54.515319][ T5571] do_epoll_ctl+0xa0/0x140 [ 54.515330][ T5571] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 54.515348][ T5571] invoke_syscall+0x98/0x244 [ 54.515360][ T5571] el0_svc_common+0xec/0x23c [ 54.515372][ T5571] do_el0_svc+0x4c/0x5c [ 54.515383][ T5571] el0_svc+0x64/0x260 [ 54.515394][ T5571] el0t_64_sync_handler+0x44/0x104 [ 54.515405][ T5571] el0t_64_sync+0x198/0x19c [ 55.299941][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 55.327658][ T5594] loop4: detected capacity change from 0 to 128 [ 55.330825][ T5594] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.433109][ T4720] Bluetooth: hci5: command tx timeout [ 55.504264][ T5603] loop2: detected capacity change from 0 to 2048 [ 55.528774][ T5603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.998841][ T5621] loop5: detected capacity change from 0 to 256 [ 56.044636][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.225'. [ 56.414555][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.415762][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.478465][ T5637] loop4: detected capacity change from 0 to 2048 [ 56.487340][ T5637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.332559][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.365556][ T5648] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.382050][ T5650] tipc: Started in network mode [ 57.382129][ T5650] tipc: Node identity ba719cb77a26, cluster identity 4711 [ 57.382245][ T5650] tipc: Enabled bearer , priority 0 [ 57.382563][ T5650] syzkaller0: entered promiscuous mode [ 57.382573][ T5650] syzkaller0: entered allmulticast mode [ 57.388533][ T5650] tipc: Resetting bearer [ 57.389735][ T5649] tipc: Resetting bearer [ 57.391935][ T5649] tipc: Disabling bearer [ 57.483695][ T5648] md: could not open device unknown-block(1,0). [ 57.512264][ T4720] Bluetooth: hci5: command tx timeout [ 57.539515][ T5662] loop4: detected capacity change from 0 to 2048 [ 57.554464][ T5662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.596510][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.707545][ T5680] random: crng reseeded on system resumption [ 59.890567][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.891338][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.200812][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.207234][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.259534][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.259731][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.342748][ T1383] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.342783][ T1383] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.342802][ T1383] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.342819][ T1383] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.386842][ T5722] loop3: detected capacity change from 0 to 512 [ 60.389533][ T5722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 60.389860][ T5722] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 60.390010][ T5722] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.257: invalid indirect mapped block 2683928664 (level 1) [ 60.390024][ T5722] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.390389][ T5722] EXT4-fs (loop3): 1 truncate cleaned up [ 60.390851][ T5722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.416828][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.603352][ T30] audit: type=1326 audit(60.570:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603378][ T30] audit: type=1326 audit(60.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603395][ T30] audit: type=1326 audit(60.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603409][ T30] audit: type=1326 audit(60.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603427][ T30] audit: type=1326 audit(60.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603442][ T30] audit: type=1326 audit(60.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603456][ T30] audit: type=1326 audit(60.570:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603470][ T30] audit: type=1326 audit(60.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603484][ T30] audit: type=1326 audit(60.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 60.603499][ T30] audit: type=1326 audit(60.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5734 comm="syz.3.262" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x7ffc0000 [ 61.471203][ T5768] GUP no longer grows the stack in syz.1.267 (5768): 20004000-2000a000 (20002000) [ 61.471222][ T5768] CPU: 1 UID: 0 PID: 5768 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT [ 61.471232][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.471238][ T5768] Call trace: [ 61.471240][ T5768] show_stack+0x2c/0x3c (C) [ 61.471259][ T5768] __dump_stack+0x30/0x40 [ 61.471272][ T5768] dump_stack_lvl+0xd8/0x12c [ 61.471284][ T5768] dump_stack+0x1c/0x28 [ 61.471295][ T5768] gup_vma_lookup+0x1ac/0x1cc [ 61.471305][ T5768] __get_user_pages+0x2b4/0x13b0 [ 61.471314][ T5768] get_user_pages_remote+0x278/0x83c [ 61.471323][ T5768] __access_remote_vm+0x1d8/0x68c [ 61.471335][ T5768] access_remote_vm+0x48/0x60 [ 61.471347][ T5768] proc_pid_cmdline_read+0x4cc/0xa14 [ 61.471357][ T5768] do_loop_readv_writev+0x24c/0x3dc [ 61.471367][ T5768] vfs_readv+0x258/0x520 [ 61.471374][ T5768] do_preadv+0x11c/0x224 [ 61.471382][ T5768] __arm64_sys_preadv+0xac/0xc4 [ 61.471390][ T5768] invoke_syscall+0x98/0x244 [ 61.471402][ T5768] el0_svc_common+0xec/0x23c [ 61.471414][ T5768] do_el0_svc+0x4c/0x5c [ 61.471425][ T5768] el0_svc+0x64/0x260 [ 61.471437][ T5768] el0t_64_sync_handler+0x44/0x104 [ 61.471447][ T5768] el0t_64_sync+0x198/0x19c [ 62.123333][ T5780] random: crng reseeded on system resumption [ 62.183125][ T5780] Restarting kernel threads ... [ 62.183557][ T5780] Done restarting kernel threads. [ 63.918124][ T5814] tipc: Enabling of bearer rejected, already enabled [ 63.987006][ T5826] capability: warning: `syz.3.293' uses deprecated v2 capabilities in a way that may be insecure [ 63.991816][ T5826] FAULT_INJECTION: forcing a failure. [ 63.991816][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 63.991838][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz.3.293 Not tainted syzkaller #0 PREEMPT [ 63.991853][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.991858][ T5826] Call trace: [ 63.991861][ T5826] show_stack+0x2c/0x3c (C) [ 63.991882][ T5826] __dump_stack+0x30/0x40 [ 63.991896][ T5826] dump_stack_lvl+0xd8/0x12c [ 63.991907][ T5826] dump_stack+0x1c/0x28 [ 63.991918][ T5826] should_fail_ex+0x41c/0x590 [ 63.991932][ T5826] should_failslab+0xc4/0x120 [ 63.991945][ T5826] __kmalloc_cache_noprof+0x94/0x5fc [ 63.991954][ T5826] input_alloc_absinfo+0x80/0xf8 [ 63.991967][ T5826] uinput_write+0x60c/0xb0c [ 63.991976][ T5826] vfs_write+0x2a4/0xa0c [ 63.991989][ T5826] ksys_write+0x12c/0x228 [ 63.992001][ T5826] __arm64_sys_write+0x84/0x98 [ 63.992013][ T5826] invoke_syscall+0x98/0x244 [ 63.992025][ T5826] el0_svc_common+0xec/0x23c [ 63.992036][ T5826] do_el0_svc+0x4c/0x5c [ 63.992047][ T5826] el0_svc+0x64/0x260 [ 63.992062][ T5826] el0t_64_sync_handler+0x44/0x104 [ 63.992073][ T5826] el0t_64_sync+0x198/0x19c [ 64.017786][ T5826] input input5: input_alloc_absinfo: unable to allocate memory [ 64.020155][ T5826] input: syz1 as /devices/virtual/input/input5 [ 64.055975][ T5828] tipc: Enabled bearer , priority 0 [ 64.056303][ T5828] syzkaller0: entered promiscuous mode [ 64.056317][ T5828] syzkaller0: entered allmulticast mode [ 64.067272][ T5828] tipc: Resetting bearer [ 64.069152][ T5827] tipc: Resetting bearer [ 64.071775][ T5827] tipc: Disabling bearer [ 64.473979][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.474061][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.479712][ T866] cfg80211: failed to load regulatory.db [ 64.720936][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.299'. [ 64.894140][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.896816][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.961244][ T5860] loop4: detected capacity change from 0 to 2048 [ 65.057404][ T5866] tipc: Enabling of bearer rejected, failed to enable media [ 65.161803][ T5874] loop2: detected capacity change from 0 to 8 [ 65.384162][ T5874] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 65.384179][ T5874] unable to read xattr id index table [ 65.446044][ T5876] can0: slcan on ttyS3. [ 65.953958][ T5871] can0 (unregistered): slcan off ttyS3. [ 66.032427][ T5912] loop4: detected capacity change from 0 to 2048 [ 66.053064][ T5912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.352042][ T5915] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 66.639104][ T5939] random: crng reseeded on system resumption [ 67.337588][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.517551][ T5938] loop1: detected capacity change from 0 to 2048 [ 67.569440][ T5938] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 67.569458][ T5938] loop1: partition table partially beyond EOD, truncated [ 67.569556][ T5938] loop1: p1 start 3405774849 is beyond EOD, truncated [ 67.569567][ T5938] loop1: p2 start 53543428 is beyond EOD, truncated [ 67.569576][ T5938] loop1: p3 start 4284289 is beyond EOD, truncated [ 67.570996][ T5952] tipc: Enabled bearer , priority 0 [ 67.571280][ T5952] syzkaller0: entered promiscuous mode [ 67.571291][ T5952] syzkaller0: entered allmulticast mode [ 67.604506][ T5938] loop1: p5 start 3405774849 is beyond EOD, truncated [ 67.604526][ T5938] loop1: p6 start 53543428 is beyond EOD, truncated [ 67.608089][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.608264][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.624155][ T5952] tipc: Resetting bearer [ 67.633051][ T5949] tipc: Resetting bearer [ 67.667366][ T5949] tipc: Disabling bearer [ 67.669273][ T5960] loop4: detected capacity change from 0 to 512 [ 67.674993][ T4720] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 67.675946][ T4720] Bluetooth: hci5: Injecting HCI hardware error event [ 67.676599][ T4717] Bluetooth: hci5: hardware error 0x00 [ 67.691664][ T5960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 67.694900][ T5960] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 67.695173][ T5960] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.325: invalid indirect mapped block 2683928664 (level 1) [ 67.695189][ T5960] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.695570][ T5960] EXT4-fs (loop4): 1 truncate cleaned up [ 67.711083][ T5960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.806645][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.562699][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 68.840276][ T6012] loop5: detected capacity change from 0 to 2048 [ 68.881807][ T6012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.266261][ T6027] loop1: detected capacity change from 0 to 131072 [ 69.320010][ T6038] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 69.320025][ T6038] device-mapper: ioctl: error adding target to table [ 69.536391][ T6058] loop4: detected capacity change from 0 to 512 [ 69.555110][ T6058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 69.555294][ T6058] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 69.555562][ T6058] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.339: invalid indirect mapped block 2683928664 (level 1) [ 69.555577][ T6058] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.556067][ T6058] EXT4-fs (loop4): 1 truncate cleaned up [ 69.556832][ T6058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.949451][ T5332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.950421][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.032878][ T6074] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.036108][ T6073] tipc: Started in network mode [ 70.036128][ T6073] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.036224][ T6073] tipc: New replicast peer: 172.20.20.187 [ 70.036544][ T6073] tipc: Enabled bearer , priority 10 [ 70.073985][ T4717] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 70.202181][ T6074] md: could not open device unknown-block(1,0). [ 70.739967][ T6102] loop4: detected capacity change from 0 to 512 [ 70.740314][ T6102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.740330][ T6102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.746772][ T6102] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 70.753046][ T6102] EXT4-fs (loop4): 1 truncate cleaned up [ 70.753630][ T6102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.754867][ T4717] Bluetooth: hci4: unexpected event for opcode 0x0c23 [ 70.819437][ T6104] loop2: detected capacity change from 0 to 8 [ 70.836964][ T6104] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 70.837588][ T6104] unable to read xattr id index table [ 71.049545][ T6107] tipc: Enabling of bearer rejected, already enabled [ 71.174905][ T4798] tipc: Node number set to 2886997162 [ 71.302731][ T6115] random: crng reseeded on system resumption [ 71.354770][ T6115] Restarting kernel threads ... [ 71.355159][ T6115] Done restarting kernel threads. [ 72.344905][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.375487][ T6147] tipc: Enabling of bearer rejected, already enabled [ 73.384779][ T6151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.661353][ T6164] loop2: detected capacity change from 0 to 2048 [ 73.708128][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.714248][ T6152] md: could not open device unknown-block(1,0). [ 73.772476][ T6171] loop4: detected capacity change from 0 to 8 [ 73.775099][ T6171] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 73.775131][ T6171] unable to read xattr id index table [ 74.236179][ T6181] random: crng reseeded on system resumption [ 75.233299][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.304455][ T6186] netlink: 'syz.1.381': attribute type 3 has an invalid length. [ 75.304471][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 75.307674][ T6186] loop1: detected capacity change from 0 to 256 [ 75.318188][ T6186] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.425486][ T6186] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 75.425654][ T6186] FAT-fs (loop1): Filesystem has been set read-only [ 75.427344][ T6186] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 75.427498][ T6186] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 75.657409][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.657609][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.725535][ T6210] loop3: detected capacity change from 0 to 128 [ 75.730268][ T6210] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.029140][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.055419][ T6214] loop3: detected capacity change from 0 to 1024 [ 76.064354][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.084760][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.199569][ T6222] loop2: detected capacity change from 0 to 2048 [ 76.227602][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.284610][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 76.284622][ T30] audit: type=1326 audit(76.280:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6224 comm="syz.3.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf79368 code=0x0 [ 77.399109][ T6185] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 77.418169][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.419562][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.466862][ T6231] random: crng reseeded on system resumption [ 77.473088][ T6230] Restarting kernel threads ... [ 77.473443][ T6230] Done restarting kernel threads. [ 77.556743][ T6244] Bluetooth: MGMT ver 1.23 [ 77.582579][ T6246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.635134][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.697930][ T6259] loop4: detected capacity change from 0 to 512 [ 77.699892][ T6253] md: could not open device unknown-block(1,0). [ 77.725987][ T6259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 77.728310][ T6259] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 77.728626][ T6259] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.406: invalid indirect mapped block 2683928664 (level 1) [ 77.728640][ T6259] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.729604][ T6259] EXT4-fs (loop4): 1 truncate cleaned up [ 77.730079][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.756900][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.759189][ T6268] tipc: New replicast peer: 172.20.20.187 [ 77.759864][ T6268] tipc: Enabled bearer , priority 10 [ 77.867253][ T30] audit: type=1326 audit(77.860:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6279 comm="syz.2.415" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5979368 code=0x7ffc0000 [ 77.867356][ T30] audit: type=1326 audit(77.860:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6279 comm="syz.2.415" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5979368 code=0x7ffc0000 [ 77.868284][ T30] audit: type=1326 audit(77.860:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6279 comm="syz.2.415" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=131 compat=0 ip=0xffffb5979368 code=0x7ffc0000 [ 77.868308][ T30] audit: type=1326 audit(77.860:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6279 comm="syz.2.415" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5979368 code=0x7ffc0000 [ 77.868325][ T30] audit: type=1326 audit(77.860:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6279 comm="syz.2.415" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5979368 code=0x7ffc0000 [ 78.018369][ T6291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.901061][ T6293] random: crng reseeded on system resumption [ 78.930470][ T6293] Restarting kernel threads ... [ 78.930875][ T6293] Done restarting kernel threads. [ 78.970137][ T6296] loop4: detected capacity change from 0 to 512 [ 78.984415][ T867] tipc: Node number set to 3226967223 [ 78.987232][ T6296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 78.989796][ T6296] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 78.989917][ T6296] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.421: invalid indirect mapped block 2683928664 (level 1) [ 78.989933][ T6296] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.990629][ T6296] EXT4-fs (loop4): 1 truncate cleaned up [ 78.991098][ T6296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.091033][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.092781][ T6295] md: could not open device unknown-block(1,0). [ 79.200511][ T6304] syzkaller0: entered promiscuous mode [ 79.200528][ T6304] syzkaller0: entered allmulticast mode [ 79.564500][ T6322] loop3: detected capacity change from 0 to 512 [ 79.567314][ T6322] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.573634][ T6322] EXT4-fs (loop3): 1 truncate cleaned up [ 79.574110][ T6322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.586432][ T6322] grow_buffers: requested out-of-range block 18446744073709551615 for device loop3 [ 79.586451][ T6322] EXT4-fs warning (device loop3): ext4_resize_fs:2018: can't read last block, resize aborted [ 79.633188][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.725805][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.726062][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.053301][ T6343] random: crng reseeded on system resumption [ 81.391607][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.391773][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.576150][ T6350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.589522][ T6350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.601625][ T6355] xt_IDLETIMER: timeout value is zero [ 81.688694][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.688890][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.892353][ T5081] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.892392][ T5081] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.892411][ T5081] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.892427][ T5081] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.927413][ T6379] tipc: Started in network mode [ 81.927432][ T6379] tipc: Node identity 12bc4cd099c2, cluster identity 4711 [ 81.927482][ T6379] tipc: Enabled bearer , priority 0 [ 81.927789][ T6379] syzkaller0: entered promiscuous mode [ 81.927800][ T6379] syzkaller0: entered allmulticast mode [ 81.930241][ T6379] tipc: Resetting bearer [ 81.931320][ T6378] tipc: Resetting bearer [ 81.944210][ T6378] tipc: Disabling bearer [ 81.947541][ T6381] FAULT_INJECTION: forcing a failure. [ 81.947541][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 81.947558][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT [ 81.947569][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.947575][ T6381] Call trace: [ 81.947577][ T6381] show_stack+0x2c/0x3c (C) [ 81.947596][ T6381] __dump_stack+0x30/0x40 [ 81.947609][ T6381] dump_stack_lvl+0xd8/0x12c [ 81.947620][ T6381] dump_stack+0x1c/0x28 [ 81.947631][ T6381] should_fail_ex+0x41c/0x590 [ 81.947645][ T6381] should_failslab+0xc4/0x120 [ 81.947659][ T6381] kmem_cache_alloc_noprof+0x94/0x5d4 [ 81.947668][ T6381] alloc_empty_file+0x6c/0x1cc [ 81.947678][ T6381] alloc_file+0x58/0x98 [ 81.947686][ T6381] alloc_file_pseudo+0xe0/0x198 [ 81.947694][ T6381] __anon_inode_getfile+0x118/0x1c8 [ 81.947708][ T6381] anon_inode_getfile+0x44/0x58 [ 81.947720][ T6381] do_epoll_create+0x2a8/0x3f0 [ 81.947739][ T6381] __arm64_sys_epoll_create1+0x40/0x54 [ 81.947751][ T6381] invoke_syscall+0x98/0x244 [ 81.947764][ T6381] el0_svc_common+0xec/0x23c [ 81.947775][ T6381] do_el0_svc+0x4c/0x5c [ 81.947787][ T6381] el0_svc+0x64/0x260 [ 81.947798][ T6381] el0t_64_sync_handler+0x44/0x104 [ 81.947808][ T6381] el0t_64_sync+0x198/0x19c [ 81.975017][ T6383] Need at least one configuration in g1. [ 81.975129][ T6383] udc dummy_udc.0: failed to start g1: -22 [ 81.975141][ T6383] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 81.976817][ T6383] UDC core: g1: couldn't find an available UDC or it's busy [ 81.996284][ T6385] tipc: Enabling of bearer rejected, already enabled [ 82.120586][ T6398] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 82.121480][ T6398] device-mapper: ioctl: error adding target to table [ 82.322020][ T6409] random: crng reseeded on system resumption [ 83.130707][ T6416] loop3: detected capacity change from 0 to 512 [ 83.138539][ T6416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.138981][ T6416] EXT4-fs warning (device loop3): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 83.148411][ T6417] tipc: Started in network mode [ 83.148433][ T6417] tipc: Node identity 12e4a451e3b5, cluster identity 4711 [ 83.148498][ T6417] tipc: Enabled bearer , priority 0 [ 83.154668][ T6417] syzkaller0: entered promiscuous mode [ 83.154684][ T6417] syzkaller0: entered allmulticast mode [ 83.169238][ T6419] tipc: Enabling of bearer rejected, already enabled [ 83.176940][ T6417] tipc: Resetting bearer [ 83.184205][ T6415] tipc: Resetting bearer [ 83.197549][ T6415] tipc: Disabling bearer [ 83.223977][ T6423] loop5: detected capacity change from 0 to 1024 [ 83.259919][ T6425] loop3: detected capacity change from 0 to 2048 [ 83.279119][ T6423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.285619][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.286982][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.287178][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.287342][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.287508][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.287666][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.287897][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.288054][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.288209][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.288363][ T6422] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.466: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.289702][ T6425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.365276][ T5332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.370372][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 83.401067][ T6436] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 83.401083][ T6436] device-mapper: ioctl: error adding target to table [ 84.114361][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.551767][ T6464] tipc: Enabling of bearer rejected, already enabled [ 85.277396][ T6493] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 85.283245][ T6493] bond1: entered allmulticast mode [ 85.324175][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.324527][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.366024][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.369354][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.562176][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.562481][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.562501][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.562518][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.578972][ T6502] tipc: Enabling of bearer rejected, already enabled [ 86.050994][ T6519] loop4: detected capacity change from 0 to 512 [ 86.054765][ T6519] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 86.064720][ T6519] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.494: iget: bad i_size value: 17592186044426 [ 86.064758][ T6519] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.069976][ T6519] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.494: couldn't read orphan inode 15 (err -117) [ 86.070055][ T6519] loop4: lost filesystem error report for type 5 error -117 [ 86.070694][ T6519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.121022][ T6525] FAULT_INJECTION: forcing a failure. [ 86.121022][ T6525] name failslab, interval 1, probability 0, space 0, times 0 [ 86.121052][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.1.495 Not tainted syzkaller #0 PREEMPT [ 86.121069][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.121075][ T6525] Call trace: [ 86.121078][ T6525] show_stack+0x2c/0x3c (C) [ 86.121100][ T6525] __dump_stack+0x30/0x40 [ 86.121112][ T6525] dump_stack_lvl+0xd8/0x12c [ 86.121124][ T6525] dump_stack+0x1c/0x28 [ 86.121135][ T6525] should_fail_ex+0x41c/0x590 [ 86.121149][ T6525] should_failslab+0xc4/0x120 [ 86.121162][ T6525] __kmalloc_cache_noprof+0x94/0x5fc [ 86.121171][ T6525] __arm64_sys_mincore+0x23c/0x79c [ 86.121180][ T6525] invoke_syscall+0x98/0x244 [ 86.121192][ T6525] el0_svc_common+0xec/0x23c [ 86.121203][ T6525] do_el0_svc+0x4c/0x5c [ 86.121214][ T6525] el0_svc+0x64/0x260 [ 86.121226][ T6525] el0t_64_sync_handler+0x44/0x104 [ 86.121236][ T6525] el0t_64_sync+0x198/0x19c [ 86.135856][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.197897][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.198075][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.201186][ T6532] loop3: detected capacity change from 0 to 8 [ 86.211084][ T6530] SQUASHFS error: Failed to read block 0x4de: -5 [ 86.211098][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211106][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211252][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211259][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211337][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211343][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211361][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211365][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211381][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211386][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211426][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211704][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211739][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211746][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211764][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211769][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211815][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211820][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211836][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211840][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.211900][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.211905][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.212945][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.212955][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.212977][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.212983][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.212998][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213003][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213042][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213047][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213062][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213066][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213081][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213086][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213122][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213127][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213143][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213148][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213164][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213169][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213226][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213230][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213245][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213249][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213266][ T6530] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213270][ T6530] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213392][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213398][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213416][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213421][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213447][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213451][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213471][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213476][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213954][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213960][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.213981][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.213986][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.214009][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.214014][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.214035][ T6532] SQUASHFS error: Unable to read data cache entry [4de] [ 86.214040][ T6532] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 86.350054][ T6541] loop5: detected capacity change from 0 to 8192 [ 86.416822][ T6541] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 86.416839][ T6541] loop5: partition table partially beyond EOD, truncated [ 86.416950][ T6541] loop5: p1 start 100663296 is beyond EOD, truncated [ 86.416960][ T6541] loop5: p2 size 3141337092 extends beyond EOD, truncated [ 86.418144][ T6541] loop5: p4 start 65535 is beyond EOD, truncated [ 86.418160][ T6541] loop5: p5 size 3141337092 extends beyond EOD, truncated [ 86.419024][ T6541] loop5: p6 start 65535 is beyond EOD, truncated [ 86.434402][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.434572][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.716009][ T6547] input: syz0 as /devices/virtual/input/input6 [ 86.811751][ T6551] syz_tun: entered allmulticast mode [ 87.187732][ T6559] loop5: detected capacity change from 0 to 256 [ 87.242016][ T6560] loop4: detected capacity change from 0 to 512 [ 87.247425][ T6560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.268981][ T6560] EXT4-fs (loop4): 1 truncate cleaned up [ 87.271474][ T6560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.282013][ T6563] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 87.317220][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.357325][ T6563] bond2: entered allmulticast mode [ 87.358203][ T6566] tipc: Enabling of bearer rejected, already enabled [ 88.049818][ T6596] loop2: detected capacity change from 0 to 512 [ 88.150856][ T6596] EXT4-fs (loop2): Test dummy encryption mode enabled [ 88.150908][ T6596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.184511][ T6596] EXT4-fs (loop2): 1 truncate cleaned up [ 88.187451][ T6596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.310977][ T6602] loop4: detected capacity change from 0 to 128 [ 88.331492][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.525'. [ 88.371839][ T6608] tipc: Enabling of bearer rejected, already enabled [ 88.457191][ T6615] binder: 6614:6615 tried to acquire reference to desc 0, got 1 instead [ 88.457458][ T6615] binder: 6614:6615 tried to acquire reference to desc 0, got 1 instead [ 88.458275][ T4807] binder: release 6614:6615 transaction 5 out, still active [ 88.458289][ T4807] binder: undelivered TRANSACTION_COMPLETE [ 88.482782][ T4807] binder: send failed reply for transaction 5, target dead [ 88.497069][ T6619] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 88.947794][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.282944][ T6636] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 89.282960][ T6636] device-mapper: ioctl: error adding target to table [ 89.329370][ T6643] loop3: detected capacity change from 0 to 512 [ 89.338535][ T6643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.338626][ T6643] EXT4-fs warning (device loop3): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 89.571351][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.571523][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.966833][ T6670] FAULT_INJECTION: forcing a failure. [ 89.966833][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 89.966857][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.1.551 Not tainted syzkaller #0 PREEMPT [ 89.966868][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.966874][ T6670] Call trace: [ 89.966877][ T6670] show_stack+0x2c/0x3c (C) [ 89.966899][ T6670] __dump_stack+0x30/0x40 [ 89.966913][ T6670] dump_stack_lvl+0xd8/0x12c [ 89.966926][ T6670] dump_stack+0x1c/0x28 [ 89.966937][ T6670] should_fail_ex+0x41c/0x590 [ 89.966951][ T6670] should_failslab+0xc4/0x120 [ 89.966965][ T6670] __kmalloc_noprof+0x108/0x6c8 [ 89.966974][ T6670] alloc_pipe_info+0x208/0x420 [ 89.966983][ T6670] create_pipe_files+0x90/0x650 [ 89.966991][ T6670] __do_pipe_flags+0x5c/0x204 [ 89.966998][ T6670] do_pipe2+0xa0/0x250 [ 89.967006][ T6670] __arm64_sys_pipe2+0x64/0x7c [ 89.967014][ T6670] invoke_syscall+0x98/0x244 [ 89.967027][ T6670] el0_svc_common+0xec/0x23c [ 89.967038][ T6670] do_el0_svc+0x4c/0x5c [ 89.967049][ T6670] el0_svc+0x64/0x260 [ 89.967060][ T6670] el0t_64_sync_handler+0x44/0x104 [ 89.967071][ T6670] el0t_64_sync+0x198/0x19c [ 90.214716][ T30] audit: type=1326 audit(90.210:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.214753][ T30] audit: type=1326 audit(90.210:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.214775][ T30] audit: type=1326 audit(90.210:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.214793][ T30] audit: type=1326 audit(90.210:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.214811][ T30] audit: type=1326 audit(90.210:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=214 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.214828][ T30] audit: type=1326 audit(90.210:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.214844][ T30] audit: type=1326 audit(90.210:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.215088][ T30] audit: type=1326 audit(90.210:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.215135][ T30] audit: type=1326 audit(90.210:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa7379368 code=0x7ffc0000 [ 90.278625][ T6685] loop4: detected capacity change from 0 to 512 [ 90.295945][ T6685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 90.300978][ T6685] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 90.301514][ T6685] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.558: invalid indirect mapped block 2683928664 (level 1) [ 90.301531][ T6685] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.302464][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 90.302478][ C1] EXT4-fs (loop4): initial error at time 90: ext4_free_branches:1023: inode 13 [ 90.302500][ C1] EXT4-fs (loop4): last error at time 90: ext4_free_branches:1023: inode 13 [ 90.317688][ T6685] EXT4-fs (loop4): 1 truncate cleaned up [ 90.318294][ T6685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.345037][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.833214][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.833406][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.513468][ T6721] loop2: detected capacity change from 0 to 512 [ 91.528247][ T6723] loop5: detected capacity change from 0 to 512 [ 91.543829][ T6721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.552869][ T6723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 91.555355][ T6723] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 91.555798][ T6723] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.569: invalid indirect mapped block 2683928664 (level 1) [ 91.555815][ T6723] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 91.558982][ T6723] EXT4-fs (loop5): 1 truncate cleaned up [ 91.562866][ T6723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.573929][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.574100][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.587541][ T6721] capability: warning: `syz.2.568' uses 32-bit capabilities (legacy support in use) [ 91.663218][ T5332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.527859][ T6754] binder: 6753:6754 tried to acquire reference to desc 0, got 1 instead [ 92.533558][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.544795][ T4798] binder: undelivered transaction 14, process died. [ 92.599506][ T6758] Need at least one configuration in g1. [ 92.600726][ T6758] udc dummy_udc.0: failed to start g1: -22 [ 92.600743][ T6758] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 92.602336][ T6758] UDC core: g1: couldn't find an available UDC or it's busy [ 93.209275][ T6777] 9pnet_virtio: no channels available for device syz [ 93.650317][ T6790] Need at least one configuration in g1. [ 93.650368][ T6790] udc dummy_udc.0: failed to start g1: -22 [ 93.650379][ T6790] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 93.650749][ T6790] UDC core: g1: couldn't find an available UDC or it's busy [ 94.013147][ T6798] FAULT_INJECTION: forcing a failure. [ 94.013147][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 94.013174][ T6798] CPU: 1 UID: 0 PID: 6798 Comm: syz.5.599 Not tainted syzkaller #0 PREEMPT [ 94.013190][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.013197][ T6798] Call trace: [ 94.013200][ T6798] show_stack+0x2c/0x3c (C) [ 94.013220][ T6798] __dump_stack+0x30/0x40 [ 94.013234][ T6798] dump_stack_lvl+0xd8/0x12c [ 94.013245][ T6798] dump_stack+0x1c/0x28 [ 94.013256][ T6798] should_fail_ex+0x41c/0x590 [ 94.013270][ T6798] should_failslab+0xc4/0x120 [ 94.013283][ T6798] kmem_cache_alloc_noprof+0x94/0x5d4 [ 94.013292][ T6798] __kernfs_new_node+0xf0/0x7d8 [ 94.013303][ T6798] kernfs_new_node+0xe8/0x130 [ 94.013313][ T6798] __kernfs_create_file+0x60/0x2e0 [ 94.013324][ T6798] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 94.013336][ T6798] sysfs_create_file_ns+0x110/0x198 [ 94.013348][ T6798] device_create_file+0xf4/0x1a4 [ 94.013358][ T6798] device_add+0x3d0/0x9e0 [ 94.013367][ T6798] cdev_device_add+0xec/0x22c [ 94.013378][ T6798] nvme_add_ctrl+0x108/0x238 [ 94.013392][ T6798] nvme_loop_create_ctrl+0x1e4/0x7d8 [ 94.013405][ T6798] nvmf_dev_write+0x1998/0x20a0 [ 94.013413][ T6798] vfs_write+0x2a4/0xa0c [ 94.013425][ T6798] ksys_write+0x12c/0x228 [ 94.013437][ T6798] __arm64_sys_write+0x84/0x98 [ 94.013450][ T6798] invoke_syscall+0x98/0x244 [ 94.013462][ T6798] el0_svc_common+0xec/0x23c [ 94.013473][ T6798] do_el0_svc+0x4c/0x5c [ 94.013485][ T6798] el0_svc+0x64/0x260 [ 94.013496][ T6798] el0t_64_sync_handler+0x44/0x104 [ 94.013506][ T6798] el0t_64_sync+0x198/0x19c [ 94.013601][ T6800] loop2: detected capacity change from 0 to 512 [ 94.023422][ T6800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.058226][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.058399][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.076762][ T6800] EXT4-fs (loop2): 1 truncate cleaned up [ 94.079174][ T6800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.154666][ T6815] loop5: detected capacity change from 0 to 2048 [ 94.163926][ T6815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.326454][ T6822] Need at least one configuration in g1. [ 94.326498][ T6822] udc dummy_udc.0: failed to start g1: -22 [ 94.326509][ T6822] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.327951][ T6822] UDC core: g1: couldn't find an available UDC or it's busy [ 94.395228][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.395450][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.878039][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.975141][ T5332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.063200][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.613'. [ 95.095745][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 95.699595][ T6854] loop3: detected capacity change from 0 to 512 [ 95.700235][ T6854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.843607][ T6854] EXT4-fs (loop3): 1 truncate cleaned up [ 95.844232][ T6854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.915362][ T6863] loop4: detected capacity change from 0 to 2048 [ 99.291653][ T6863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.303669][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.022064][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [kworker/u8:6:1288] [ 124.022082][ C0] Modules linked in: [ 124.022089][ C0] irq event stamp: 393742 [ 124.025296][ C0] hardirqs last enabled at (393741): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 124.027195][ C0] hardirqs last disabled at (393742): [] el1_interrupt+0x28/0x60 [ 124.028871][ C0] softirqs last enabled at (393740): [] handle_softirqs+0xc28/0xd98 [ 124.030664][ C0] softirqs last disabled at (393719): [] __do_softirq+0x14/0x20 [ 124.032424][ C0] CPU: 0 UID: 0 PID: 1288 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT [ 124.032460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.032467][ C0] Workqueue: events_unbound toggle_allocation_gate [ 124.032488][ C0] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 124.032496][ C0] pc : smp_call_function_many_cond+0x73c/0x1590 [ 124.032508][ C0] lr : smp_call_function_many_cond+0x754/0x1590 [ 124.032517][ C0] sp : ffff800094ec77e0 [ 124.032520][ C0] x29: ffff800094ec7920 x28: ffff800088b9a968 x27: 0000000000000011 [ 124.032533][ C0] x26: dfff800000000000 x25: 1ffff0001117352d x24: 0000000000000001 [ 124.032544][ C0] x23: ffff800088b9a960 x22: ffff0001adda3aa8 x21: ffff0001adda3aa0 [ 124.032554][ C0] x20: ffff0000c5ac1538 x19: 0000000000000000 x18: 1fffe00035bac428 [ 124.032564][ C0] x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800088c480e0 [ 124.032574][ C0] x14: 0000000000224533 x13: 0000000000000001 x12: 0000000000000000 [ 124.032583][ C0] x11: 0000000000000000 x10: ffff600035bb4756 x9 : 0000000000000000 [ 124.032592][ C0] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 124.032601][ C0] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000805bc8e4 [ 124.032610][ C0] x2 : 0000000000000000 x1 : ffff0000c5ac0000 x0 : 0000000000000000 [ 124.032620][ C0] Call trace: [ 124.032622][ C0] smp_call_function_many_cond+0x73c/0x1590 (P) [ 124.032635][ C0] kick_all_cpus_sync+0x34/0x40 [ 124.032646][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 124.032654][ C0] __jump_label_update+0x31c/0x344 [ 124.032662][ C0] jump_label_update+0x428/0x4b8 [ 124.032673][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 124.032683][ C0] static_key_enable+0x24/0x38 [ 124.032694][ C0] toggle_allocation_gate+0xb8/0x28c [ 124.032703][ C0] process_scheduled_works+0x91c/0x1250 [ 124.032717][ C0] worker_thread+0x798/0xbd0 [ 124.032725][ C0] kthread+0x304/0x3d4 [ 124.032733][ C0] ret_from_fork+0x10/0x20 [ 124.032742][ C0] Sending NMI from CPU 0 to CPUs 1: [ 128.671687][ C1] NMI backtrace for cpu 1 [ 128.671701][ C1] CPU: 1 UID: 0 PID: 6847 Comm: syz.5.618 Not tainted syzkaller #0 PREEMPT [ 128.671712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 128.671717][ C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 128.671727][ C1] pc : handle_softirqs+0x1cc/0xd98 [ 128.671739][ C1] lr : handle_softirqs+0x1c8/0xd98 [ 128.671745][ C1] sp : ffff80008ebe7ef0 [ 128.671748][ C1] x29: ffff80008ebe7f80 x28: ffff0000c38a3b08 x27: ffff0000c38a3b10 [ 128.671760][ C1] x26: ffff800088b422f8 x25: 0000000000000386 x24: dfff800000000000 [ 128.671770][ C1] x23: ffff0001add9d040 x22: ffff0000c38a3b00 x21: 000000000000000a [ 128.671780][ C1] x20: ffff800088b57040 x19: ffff0001add9d040 x18: 0000000000000000 [ 128.671789][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 00000000203c3140 [ 128.671799][ C1] x14: 000000000a31b1ec x13: 0000000000000001 x12: 0000000000000003 [ 128.671808][ C1] x11: ffff80008a648e28 x10: 0000000000000003 x9 : 0000000000000000 [ 128.671818][ C1] x8 : 00000000000213ce x7 : 0000000000000000 x6 : 0000000000000000 [ 128.671827][ C1] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000801571b4 [ 128.671836][ C1] x2 : 0000000000000003 x1 : ffff0000c38a3b00 x0 : ffff800125246000 [ 128.671846][ C1] Call trace: [ 128.671848][ C1] handle_softirqs+0x1cc/0xd98 (P) [ 128.671857][ C1] __do_softirq+0x14/0x20 [ 128.671865][ C1] ____do_softirq+0x14/0x20 [ 128.671873][ C1] call_on_irq_stack+0x30/0x48 [ 128.671880][ C1] do_softirq_own_stack+0x20/0x2c [ 128.671887][ C1] __irq_exit_rcu+0x1ac/0x428 [ 128.671894][ C1] irq_exit_rcu+0x14/0x84 [ 128.671901][ C1] el1_interrupt+0x40/0x60 [ 128.671911][ C1] el1h_64_irq_handler+0x18/0x24 [ 128.671920][ C1] el1h_64_irq+0x6c/0x70 SYZFAIL: failed to send rpc fd=3 want=256 sent=0 n=-1 (errno 32: Broken pipe)