last executing test programs: 2m53.167781138s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x7) read$eventfd(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000d80), 0x6c}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0xa, &(0x7f00000016c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchmod(0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000001800), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m51.944763338s ago: executing program 2 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000880)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000008c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000940)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000980)={0x11, 0x4, r11, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m36.271261261s ago: executing program 32 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000880)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000008c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m36.175879112s ago: executing program 33 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000880)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000008c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000940)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000980)={0x11, 0x4, r11, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m26.428508335s ago: executing program 0 (id=549): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x80) write(r0, &(0x7f0000000500)='2', 0x1) 1m26.333118617s ago: executing program 0 (id=550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000800), 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r0], 0x16) 1m25.507168797s ago: executing program 0 (id=562): io_setup(0x3, &(0x7f0000000000)=0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') openat(0xffffffffffffff9c, 0x0, 0x729982, 0x19e) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x10048, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f00000012c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000013c0)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x6) msgsnd(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="01"], 0xff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001540)='/sys/power/wakeup_count', 0x1a1081, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000001600)='9', 0x20000108}]) 1m25.293416212s ago: executing program 0 (id=564): gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x18}, 0xc800) syz_mount_image$ext4(&(0x7f0000001680)='ext4\x00', &(0x7f00000016c0)='mnt\x00', 0x4, &(0x7f0000001700), 0x0, 0x236, &(0x7f0000001740)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) 1m25.236774284s ago: executing program 0 (id=565): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1e4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='27', 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000340)=""/73, 0x49, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8949, &(0x7f0000000280)={'veth1_to_bond\x00', @local}) socket$netlink(0x10, 0x3, 0x0) 1m24.735069996s ago: executing program 0 (id=567): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) 1m24.679580837s ago: executing program 34 (id=567): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) 1m10.295370888s ago: executing program 7 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x8040) 1m10.21783654s ago: executing program 7 (id=731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000010000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1m10.103133693s ago: executing program 7 (id=732): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="b3", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20048814}, 0x40000d0) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/176, 0xb0}], 0x1}, 0x40002100) 1m10.102917523s ago: executing program 7 (id=733): gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x18}, 0xc800) syz_mount_image$ext4(&(0x7f0000001680)='ext4\x00', &(0x7f00000016c0)='mnt\x00', 0x4, &(0x7f0000001700), 0x0, 0x236, &(0x7f0000001740)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) 1m9.746888872s ago: executing program 7 (id=737): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000400)={0x0, 0x6cc, 0x6, 0xff7f, 0x5, "391e9c44b06e9a73"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001000)={0xe, {"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", 0x1040}}, 0x1006) 1m9.216828524s ago: executing program 7 (id=754): futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f00000007c0), &(0x7f0000000980)='./file0\x00', 0x10, &(0x7f00000009c0)=ANY=[], 0x19, 0x705, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001400)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000001440)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) close(0x3) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x11}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1m9.189106126s ago: executing program 35 (id=754): futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f00000007c0), &(0x7f0000000980)='./file0\x00', 0x10, &(0x7f00000009c0)=ANY=[], 0x19, 0x705, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001400)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000001440)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) close(0x3) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x11}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 57.469442679s ago: executing program 6 (id=891): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, 0x0, 0x0) 57.364920742s ago: executing program 6 (id=894): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendto$inet(r1, &(0x7f0000000800)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) 56.490503463s ago: executing program 6 (id=904): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 56.434057835s ago: executing program 6 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x20000400) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xd804, 0x100) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) 56.335622487s ago: executing program 6 (id=911): io_setup(0x3, &(0x7f0000000000)=0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') openat(0xffffffffffffff9c, 0x0, 0x729982, 0x19e) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x10048, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f00000012c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000013c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001440), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x6) msgsnd(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="01"], 0xff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001540)='/sys/power/wakeup_count', 0x1a1081, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000001600)='9', 0x20000108}]) 55.363867371s ago: executing program 6 (id=921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_lt}]}}) 40.042533751s ago: executing program 36 (id=921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_lt}]}}) 35.287124447s ago: executing program 3 (id=1188): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, &(0x7f0000000700)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}], [{@smackfsdef={'smackfsdef', 0x3d, '(+\xc1,,)'}}, {@smackfsdef}, {@measure}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0xe9ba}}, {@smackfshat}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(0x0, 0x24842, 0x1a6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x0, &(0x7f00000006c0)}) getxattr(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x200, 0x26081) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000880)={{0x5, 0x0, 0x0, 0xffffffff, 'syz1\x00'}, 0x0, [0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x1d4c06aa, 0x0, 0x3ff, 0x0, 0x3, 0x6, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x400000000000, 0xfffffffffffffffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xe198, 0x0, 0x0, 0xfffffffffffffffd, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x400000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000003, 0x0, 0x0, 0xf035, 0x3, 0x80000000000, 0x6, 0x100000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400000, 0xae, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x1940000000000000, 0x0, 0x80000000000000, 0x0, 0x1004, 0x0, 0x4, 0x0, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x10000000000, 0xfffffffffffffff8]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f00000005c0)) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x404c004}, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 34.397942458s ago: executing program 3 (id=1198): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000004800)='./file0\x00', &(0x7f0000004840), 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) 34.359804319s ago: executing program 3 (id=1199): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002ac0)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000004b80)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004bc0)="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", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c80)={0x90, 0x0, 0x2, {0x5, 0x0, 0x0, 0xfa0, 0x2, 0xfffffffc, {0x8000, 0x0, 0x0, 0x91, 0x22, 0xf7fa, 0x3, 0x0, 0xfffffff7, 0x2000, 0x1, r3, 0x0, 0x0, 0x80}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000006d80)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 33.289154895s ago: executing program 3 (id=1204): syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB='discard,discard,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303030342c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c756d61736b3d30303030303030303030303030303030303030303230312c696f636861727365743d6d6163696e7569742c6e616d65636173653d352c005e1371f9bbe32e19057d22dc1a5c8dec4ec3b6092e8f5558dc0600000070ddbbfd55d44b2f176524d660451f5cdec229331c7d55fc7147ecd238a57766a7f780ec82bfa73b62426d94f6ecb9d4c57ef24f9693900bef4e3315d349205bdaef711cde36b5368f3676d5105c3fd7ef81ff5c71d81f52daaa842aab69d71512f458b2bcc1ad248775df5322ed2546ca7f15"], 0x3, 0x1535, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002d40)='./config\x00', &(0x7f0000002d80)='configfs\x00', 0x0, 0x0) 33.185775097s ago: executing program 3 (id=1208): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) ioctl$STOP_ARRAY_RO(r0, 0x933, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) 32.626870151s ago: executing program 3 (id=1219): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 32.556528533s ago: executing program 37 (id=1219): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 2.89820238s ago: executing program 4 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x80140912, 0x0) 2.832188631s ago: executing program 4 (id=1561): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) fsopen(&(0x7f0000000640)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/dynamic_events\x00', 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x140, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0xc1c0, 0x0) truncate(&(0x7f0000000800)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(r4, 0x7003) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="438ab0a1568f0273fbac7aed04a25b22e52bc57fc877042ab7b5a85ca463be1aedf58bbb923a864762e8f23ce6a1e138ae567352fcaf53e8dc95046606d274552c06667074823a852dcfdf28b9319b94cb5ab521e59a6918e56f4a37501ef1f862eedd7e5c0cc4e5ba13524f231b5b377e4395d7f641a048a9212f16cf00"/140, 0x8c}], 0x1) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) ioctl$SET_ARRAY_INFO(0xffffffffffffffff, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) 1.718969988s ago: executing program 4 (id=1577): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)=0x3, 0x4) write$9p(0xffffffffffffffff, &(0x7f00000005c0)="2d76b41c", 0x4) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000a80)="cd89", 0x2}], 0x1) write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 1.67004202s ago: executing program 4 (id=1578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0xda, 0x6, @multicast}, 0x14) 1.485022424s ago: executing program 4 (id=1584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.460800325s ago: executing program 5 (id=1585): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x62181) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.456196585s ago: executing program 1 (id=1586): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.420596135s ago: executing program 4 (id=1587): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000980)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000b80)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) 1.420336946s ago: executing program 1 (id=1588): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)=0x3, 0x4) write$9p(0xffffffffffffffff, &(0x7f00000005c0)="2d76b41c", 0x4) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000a80)="cd89", 0x2}], 0x1) write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 1.419761636s ago: executing program 5 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) 1.400062666s ago: executing program 1 (id=1590): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) fsopen(&(0x7f0000000640)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/dynamic_events\x00', 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x140, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0xc1c0, 0x0) truncate(&(0x7f0000000800)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(r4, 0x7003) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="438ab0a1568f0273fbac7aed04a25b22e52bc57fc877042ab7b5a85ca463be1aedf58bbb923a864762e8f23ce6a1e138ae567352fcaf53e8dc95046606d274552c06667074823a852dcfdf28b9319b94cb5ab521e59a6918e56f4a37501ef1f862eedd7e5c0cc4e5ba13524f231b5b377e4395d7f641a048a9212f16cf00"/140, 0x8c}], 0x1) r5 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r5, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) 1.307981308s ago: executing program 5 (id=1591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000002c0)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 868.937329ms ago: executing program 8 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0xda, 0x6, @multicast}, 0x14) 780.307601ms ago: executing program 9 (id=1596): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000006c0), 0x3, 0x573, &(0x7f0000021fc0)="$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") syz_mount_image$fuse(&(0x7f0000022540), &(0x7f0000022580)='.\x00', 0x84406d, &(0x7f00000225c0)=ANY=[], 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000022600), &(0x7f0000022640)='.\x00', 0x820f8, &(0x7f0000022680)=ANY=[], 0x0, 0x0, &(0x7f00000226c0)) 708.356933ms ago: executing program 8 (id=1597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 617.002275ms ago: executing program 9 (id=1598): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000500)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000010b80)=[0x0], 0x1, 0x0}) 616.624065ms ago: executing program 8 (id=1599): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 610.723515ms ago: executing program 8 (id=1600): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f00000005c0)="2d76b41c", 0x4) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000a80)="cd89", 0x2}], 0x1) write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 592.420466ms ago: executing program 9 (id=1601): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) 566.135256ms ago: executing program 8 (id=1602): r0 = io_uring_setup(0x8, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000200)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000240)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000280)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000002c0)={0x1, 0xa7, 0x1, '\x00', 0xfffffffc}, 0x1) 528.210577ms ago: executing program 1 (id=1603): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000004800)='./file0\x00', &(0x7f0000004840), 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) 478.794238ms ago: executing program 8 (id=1604): io_setup(0x3ff, &(0x7f0000000100)=0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8, 0x2000007, 0xda31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000940), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(&(0x7f0000000a00)='ramfs\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000ac0)={0x5, 0x0, 0x0, 0x0, 0x132, 0xff80}) io_destroy(r0) 477.888048ms ago: executing program 1 (id=1605): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000d80)={0xa000000d}) close(r1) 469.850678ms ago: executing program 9 (id=1606): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x5, 0x0, 'queue1\x00'}) writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="228292", 0xfff6}], 0x2) 95.039388ms ago: executing program 1 (id=1607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x95}, 0x8080) 84.252798ms ago: executing program 5 (id=1608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0xda, 0x6, @multicast}, 0x14) 39.308629ms ago: executing program 5 (id=1609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 951.25µs ago: executing program 9 (id=1610): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 699.79µs ago: executing program 9 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001080)=@newtfilter={0x88, 0x2c, 0xd37, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20000007, 0x4, 0x5, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001140), 0x56) sendmsg$kcm(r6, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 5 (id=1612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x28, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) kernel console output (not intermixed with test programs): : 1 PID: 4332 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 124.802240][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.803880][ T4332] Workqueue: hci6 hci_rx_work [ 124.804678][ T4332] Call trace: [ 124.805203][ T4332] dump_backtrace+0x1c4/0x1f0 [ 124.806075][ T4332] show_stack+0x2c/0x3c [ 124.806799][ T4332] __dump_stack+0x30/0x40 [ 124.807707][ T4332] dump_stack_lvl+0xf4/0x15c [ 124.808568][ T4332] dump_stack+0x1c/0x5c [ 124.809353][ T4332] sysfs_create_dir_ns+0x244/0x264 [ 124.810267][ T4332] kobject_add_internal+0x5a8/0xb18 [ 124.811200][ T4332] kobject_add+0x144/0x20c [ 124.812129][ T4332] device_add+0x3dc/0xe4c [ 124.813029][ T4332] hci_conn_add_sysfs+0xb8/0x1bc [ 124.814021][ T4332] le_conn_complete_evt+0xd08/0x12c8 [ 124.814973][ T4332] hci_le_conn_complete_evt+0x114/0x3b8 [ 124.816020][ T4332] hci_le_meta_evt+0x2c0/0x4a8 [ 124.816894][ T4332] hci_event_packet+0x64c/0xe60 [ 124.817829][ T4332] hci_rx_work+0x310/0xa70 [ 124.818611][ T4332] process_one_work+0x7e4/0x13bc [ 124.819458][ T4332] worker_thread+0x8cc/0xfe8 [ 124.820249][ T4332] kthread+0x254/0x2e0 [ 124.820964][ T4332] ret_from_fork+0x10/0x20 [ 124.822312][ T4332] kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.824433][ T4332] Bluetooth: hci6: failed to register connection device [ 124.847292][ T6620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.903233][ T6705] loop5: detected capacity change from 0 to 256 [ 124.955260][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 124.966175][ T6708] loop4: detected capacity change from 0 to 128 [ 124.973301][ T6705] exFAT-fs (loop5): failed to load upcase table (idx : 0x000124d2, chksum : 0x32bda17b, utbl_chksum : 0xe619d30d) [ 125.284496][ T6708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.299582][ T6620] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 125.331180][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.332886][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.920284][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.922299][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.931867][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 126.002780][ T6620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.014284][ T5515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.016068][ T5515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.020093][ T6620] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.025154][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.030291][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.032591][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.033884][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.039239][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.042271][ T6738] loop5: detected capacity change from 0 to 512 [ 126.078130][ T6738] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 126.102725][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.104668][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.109796][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.111114][ T4819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.112755][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.122322][ T6749] fuse: Bad value for 'fd' [ 126.129276][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.131405][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.154294][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.160790][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.169751][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.173574][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.177560][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.180755][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.218105][ T6620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.220625][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.222382][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.224234][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.342253][ T6620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.344067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.346058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.393807][ T4332] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 126.781824][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.783659][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.790558][ T6620] device veth0_vlan entered promiscuous mode [ 126.793582][ T6620] device veth1_vlan entered promiscuous mode [ 126.799030][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.800537][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.802284][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.804465][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.809099][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.869521][ T6620] device veth0_macvtap entered promiscuous mode [ 126.883787][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.885790][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.888547][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.888770][ T4663] EXT4-fs (loop5): unmounting filesystem. [ 126.890446][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.913403][ T6790] loop5: detected capacity change from 0 to 128 [ 126.917982][ T6790] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 127.037716][ T4340] Bluetooth: hci1: command 0x041b tx timeout [ 127.411699][ T6620] device veth1_macvtap entered promiscuous mode [ 127.427440][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.430513][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.434257][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.438437][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.442454][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.488537][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.490816][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.493055][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.495547][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.497403][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.500096][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.502630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.504352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.552576][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.559861][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.562136][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.564183][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.565986][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.567846][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.569513][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.571218][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.573165][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.579024][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.583972][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.586723][ T6620] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.588449][ T6620] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.589897][ T6620] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.591339][ T6620] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.594344][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.596298][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.651149][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.652785][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.654433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.680948][ T5515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.682508][ T5515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.683901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.704701][ T4427] device hsr_slave_0 left promiscuous mode [ 127.755385][ T4427] device hsr_slave_1 left promiscuous mode [ 127.758178][ T4663] EXT4-fs (loop5): unmounting filesystem. [ 127.806386][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.809001][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.811791][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.813489][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.815870][ T4427] device bridge_slave_1 left promiscuous mode [ 127.818082][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.846693][ T4427] device bridge_slave_0 left promiscuous mode [ 127.848905][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.974882][ T4340] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 127.996150][ T4427] device veth1_macvtap left promiscuous mode [ 127.997308][ T4427] device veth0_macvtap left promiscuous mode [ 127.998746][ T4427] device veth1_vlan left promiscuous mode [ 128.000025][ T4427] device veth0_vlan left promiscuous mode [ 128.406570][ T6850] fuse: Bad value for 'fd' [ 128.741289][ T6854] xt_hashlimit: size too large, truncated to 1048576 [ 128.753514][ T6856] loop3: detected capacity change from 0 to 2048 [ 128.754995][ T6856] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 128.818754][ T6731] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.115300][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 129.361503][ T4810] smc: removing ib device syz2 [ 130.744597][ T4340] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 130.965259][ T4340] Bluetooth: hci6: command 0x0406 tx timeout [ 131.195237][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 131.227393][ T6886] fuse: Bad value for 'fd' [ 131.317057][ T6890] loop3: detected capacity change from 0 to 128 [ 131.344192][ T6890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.467868][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 131.538335][ T6894] loop5: detected capacity change from 0 to 2048 [ 131.544688][ T6894] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 131.696563][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 131.856811][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.059143][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.151673][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 132.198347][ T4332] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 133.060322][ T6935] loop3: detected capacity change from 0 to 128 [ 133.080514][ T6935] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.260159][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 133.275635][ T4340] Bluetooth: hci1: command 0x0406 tx timeout [ 133.351555][ T6947] loop5: detected capacity change from 0 to 1024 [ 133.352793][ T4332] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 133.354595][ T4332] CPU: 1 PID: 4332 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 133.355981][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 133.357879][ T4332] Workqueue: hci0 hci_rx_work [ 133.358754][ T4332] Call trace: [ 133.359356][ T4332] dump_backtrace+0x1c4/0x1f0 [ 133.360229][ T4332] show_stack+0x2c/0x3c [ 133.360985][ T4332] __dump_stack+0x30/0x40 [ 133.361797][ T4332] dump_stack_lvl+0xf4/0x15c [ 133.362646][ T4332] dump_stack+0x1c/0x5c [ 133.363509][ T4332] sysfs_create_dir_ns+0x244/0x264 [ 133.364430][ T4332] kobject_add_internal+0x5a8/0xb18 [ 133.365388][ T4332] kobject_add+0x144/0x20c [ 133.366193][ T4332] device_add+0x3dc/0xe4c [ 133.367004][ T4332] hci_conn_add_sysfs+0xb8/0x1bc [ 133.367927][ T4332] le_conn_complete_evt+0xd08/0x12c8 [ 133.368902][ T4332] hci_le_conn_complete_evt+0x114/0x3b8 [ 133.369870][ T4332] hci_le_meta_evt+0x2c0/0x4a8 [ 133.370716][ T4332] hci_event_packet+0x64c/0xe60 [ 133.371578][ T4332] hci_rx_work+0x310/0xa70 [ 133.372360][ T4332] process_one_work+0x7e4/0x13bc [ 133.373243][ T4332] worker_thread+0x8cc/0xfe8 [ 133.374029][ T4332] kthread+0x254/0x2e0 [ 133.374865][ T4332] ret_from_fork+0x10/0x20 [ 133.377187][ T6947] EXT4-fs: quotafile must be on filesystem root [ 133.378915][ T4332] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 133.381529][ T4332] Bluetooth: hci0: failed to register connection device [ 133.630446][ T6949] 9pnet_fd: Insufficient options for proto=fd [ 133.638507][ T6949] binder: 6945:6949 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 133.806317][ T4427] bond0 (unregistering): Released all slaves [ 134.284502][ T4340] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 134.289094][ T4340] CPU: 1 PID: 4340 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 134.290394][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 134.291947][ T4340] Workqueue: hci5 hci_rx_work [ 134.292685][ T4340] Call trace: [ 134.293201][ T4340] dump_backtrace+0x1c4/0x1f0 [ 134.293972][ T4340] show_stack+0x2c/0x3c [ 134.294723][ T4340] __dump_stack+0x30/0x40 [ 134.295548][ T4340] dump_stack_lvl+0xf4/0x15c [ 134.296418][ T4340] dump_stack+0x1c/0x5c [ 134.297239][ T4340] sysfs_create_dir_ns+0x244/0x264 [ 134.298161][ T4340] kobject_add_internal+0x5a8/0xb18 [ 134.299103][ T4340] kobject_add+0x144/0x20c [ 134.299870][ T4340] device_add+0x3dc/0xe4c [ 134.300619][ T4340] hci_conn_add_sysfs+0xb8/0x1bc [ 134.301495][ T4340] le_conn_complete_evt+0xd08/0x12c8 [ 134.302394][ T4340] hci_le_conn_complete_evt+0x114/0x3b8 [ 134.303341][ T4340] hci_le_meta_evt+0x2c0/0x4a8 [ 134.304158][ T4340] hci_event_packet+0x64c/0xe60 [ 134.304981][ T4340] hci_rx_work+0x310/0xa70 [ 134.305759][ T4340] process_one_work+0x7e4/0x13bc [ 134.306624][ T4340] worker_thread+0x8cc/0xfe8 [ 134.307391][ T4340] kthread+0x254/0x2e0 [ 134.308084][ T4340] ret_from_fork+0x10/0x20 [ 134.310138][ T4340] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.312602][ T4340] Bluetooth: hci5: failed to register connection device [ 134.380844][ T6993] netlink: 'syz.3.664': attribute type 29 has an invalid length. [ 134.382561][ T6993] netlink: 'syz.3.664': attribute type 29 has an invalid length. [ 134.385972][ T6979] netlink: 'syz.3.664': attribute type 29 has an invalid length. [ 134.491808][ T7005] loop7: detected capacity change from 0 to 1024 [ 134.500752][ T7005] EXT4-fs: quotafile must be on filesystem root [ 134.760354][ T7026] 9pnet_fd: Insufficient options for proto=fd [ 134.768529][ T7026] binder: 7004:7026 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 135.409222][ T7054] netlink: 64 bytes leftover after parsing attributes in process `syz.5.679'. [ 135.411052][ T7050] loop3: detected capacity change from 0 to 256 [ 135.431800][ T7050] exFAT-fs (loop3): failed to load upcase table (idx : 0x000124d2, chksum : 0x32bda17b, utbl_chksum : 0xe619d30d) [ 135.543722][ T7062] loop4: detected capacity change from 0 to 2048 [ 135.550406][ T7062] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 135.589661][ T6731] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.598575][ T7072] loop3: detected capacity change from 0 to 1024 [ 135.613838][ T7072] EXT4-fs: quotafile must be on filesystem root [ 135.691931][ T6342] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.928764][ T7085] 9pnet_fd: Insufficient options for proto=fd [ 135.936923][ T7085] binder: 7071:7085 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 136.246566][ T7102] FAULT_INJECTION: forcing a failure. [ 136.246566][ T7102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.250235][ T7102] CPU: 1 PID: 7102 Comm: syz.4.699 Not tainted syzkaller #0 [ 136.251546][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.253303][ T7102] Call trace: [ 136.253890][ T7102] dump_backtrace+0x1c4/0x1f0 [ 136.254740][ T7102] show_stack+0x2c/0x3c [ 136.255487][ T7102] __dump_stack+0x30/0x40 [ 136.256273][ T7102] dump_stack_lvl+0xf4/0x15c [ 136.257121][ T7102] dump_stack+0x1c/0x5c [ 136.257886][ T7102] should_fail_ex+0x3cc/0x524 [ 136.258730][ T7102] should_fail+0x14/0x24 [ 136.259480][ T7102] should_fail_usercopy+0x20/0x30 [ 136.260370][ T7102] _copy_to_iter+0x18c/0xeac [ 136.261174][ T7102] seq_read_iter+0x294/0xc24 [ 136.261958][ T7102] proc_reg_read_iter+0x180/0x2a8 [ 136.262861][ T7102] vfs_read+0x3cc/0x7b8 [ 136.263600][ T7102] __arm64_sys_pread64+0x178/0x210 [ 136.264485][ T7102] invoke_syscall+0x98/0x290 [ 136.265280][ T7102] el0_svc_common+0x13c/0x258 [ 136.266092][ T7102] do_el0_svc+0x5c/0x134 [ 136.266825][ T7102] el0_svc+0x58/0x12c [ 136.267542][ T7102] el0t_64_sync_handler+0x84/0xf0 [ 136.268458][ T7102] el0t_64_sync+0x18c/0x190 [ 136.784324][ T7126] netlink: 60 bytes leftover after parsing attributes in process `syz.6.709'. [ 136.814666][ T7128] loop4: detected capacity change from 0 to 164 [ 137.007697][ T7145] FAULT_INJECTION: forcing a failure. [ 137.007697][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 137.010214][ T7145] CPU: 0 PID: 7145 Comm: syz.4.715 Not tainted syzkaller #0 [ 137.011488][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 137.013300][ T7145] Call trace: [ 137.013900][ T7145] dump_backtrace+0x1c4/0x1f0 [ 137.014746][ T7145] show_stack+0x2c/0x3c [ 137.015620][ T7145] __dump_stack+0x30/0x40 [ 137.016565][ T7145] dump_stack_lvl+0xf4/0x15c [ 137.017475][ T7145] dump_stack+0x1c/0x5c [ 137.018306][ T7145] should_fail_ex+0x3cc/0x524 [ 137.019193][ T7145] __should_failslab+0xc0/0x11c [ 137.020106][ T7145] should_failslab+0x10/0x28 [ 137.020966][ T7145] slab_pre_alloc_hook+0x6c/0x31c [ 137.021895][ T7145] kmem_cache_alloc_lru+0x60/0x284 [ 137.022822][ T7145] sock_alloc_inode+0x2c/0xcc [ 137.023700][ T7145] new_inode_pseudo+0x68/0x1cc [ 137.024572][ T7145] __sock_create+0x138/0x8a8 [ 137.025400][ T7145] __sys_socketpair+0x2ec/0x6d8 [ 137.026238][ T7145] __arm64_sys_socketpair+0xa0/0xbc [ 137.027094][ T7145] invoke_syscall+0x98/0x290 [ 137.027844][ T7145] el0_svc_common+0x13c/0x258 [ 137.028631][ T7145] do_el0_svc+0x5c/0x134 [ 137.029359][ T7145] el0_svc+0x58/0x12c [ 137.030195][ T7145] el0t_64_sync_handler+0x84/0xf0 [ 137.031243][ T7145] el0t_64_sync+0x18c/0x190 [ 137.033335][ T7145] socket: no more sockets [ 137.053467][ T7141] loop3: detected capacity change from 0 to 512 [ 137.055745][ T7141] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.057136][ T7141] EXT4-fs: Ignoring removed bh option [ 137.058439][ T7141] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.069660][ T7141] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.707: invalid indirect mapped block 4294967295 (level 0) [ 137.075610][ T7141] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.707: invalid indirect mapped block 4294967295 (level 1) [ 137.078873][ T7141] EXT4-fs (loop3): 1 orphan inode deleted [ 137.079992][ T7141] EXT4-fs (loop3): 1 truncate cleaned up [ 137.081146][ T7141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.104116][ T5515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.106167][ T5515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.107779][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.241777][ T7162] netlink: 60 bytes leftover after parsing attributes in process `syz.5.721'. [ 137.297400][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 137.449679][ T7190] loop7: detected capacity change from 0 to 128 [ 137.762590][ T7190] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 137.791984][ T7199] netlink: 'syz.3.735': attribute type 21 has an invalid length. [ 137.824751][ T7201] netlink: 60 bytes leftover after parsing attributes in process `syz.6.736'. [ 138.042850][ T7222] loop4: detected capacity change from 0 to 512 [ 138.046397][ T7222] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.051965][ T7222] EXT4-fs: Ignoring removed bh option [ 138.053340][ T7222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.058545][ T7222] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.739: invalid indirect mapped block 4294967295 (level 0) [ 138.061367][ T7222] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.739: invalid indirect mapped block 4294967295 (level 1) [ 138.064158][ T7222] EXT4-fs (loop4): 1 orphan inode deleted [ 138.065459][ T7222] EXT4-fs (loop4): 1 truncate cleaned up [ 138.066623][ T7222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.083766][ T4827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.085995][ T4827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.209811][ T7239] netlink: 60 bytes leftover after parsing attributes in process `syz.5.752'. [ 138.263957][ T7198] EXT4-fs (loop7): unmounting filesystem. [ 138.307300][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 138.372510][ T7257] loop4: detected capacity change from 0 to 1024 [ 138.420345][ T7262] loop5: detected capacity change from 0 to 256 [ 138.424083][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.426569][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.430093][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.431770][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.433419][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.434936][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.458626][ T7262] exFAT-fs (loop5): failed to load upcase table (idx : 0x000124d2, chksum : 0x32bda17b, utbl_chksum : 0xe619d30d) [ 138.547323][ T4810] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.652925][ T4810] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.659486][ T7284] netlink: 60 bytes leftover after parsing attributes in process `syz.5.766'. [ 138.668150][ T7290] netlink: 'syz.4.768': attribute type 3 has an invalid length. [ 138.673097][ T7263] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.698723][ T7292] netlink: 104 bytes leftover after parsing attributes in process `syz.6.765'. [ 138.729372][ T4810] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.860375][ T7301] loop4: detected capacity change from 0 to 1024 [ 138.873490][ T7303] loop5: detected capacity change from 0 to 256 [ 138.876863][ T4810] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.905019][ T7305] loop3: detected capacity change from 0 to 8 [ 138.908031][ T7303] exFAT-fs (loop5): failed to load upcase table (idx : 0x000124d2, chksum : 0x32bda17b, utbl_chksum : 0xe619d30d) [ 139.058893][ T7263] chnl_net:caif_netlink_parms(): no params data found [ 139.103366][ T7320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.779'. [ 139.171160][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.173720][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.190111][ T7263] device bridge_slave_0 entered promiscuous mode [ 139.203195][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.218257][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.225689][ T7263] device bridge_slave_1 entered promiscuous mode [ 139.309230][ T7348] loop4: detected capacity change from 0 to 1024 [ 139.331197][ T7350] SQUASHFS error: Failed to read block 0x285: -5 [ 139.334552][ T7350] SQUASHFS error: Unable to read metadata cache entry [283] [ 139.336569][ T7350] SQUASHFS error: Unable to read directory block [283:0] [ 139.370882][ T7263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.393582][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.790'. [ 139.426963][ T7263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.482685][ T7263] team0: Port device team_slave_0 added [ 139.493092][ T7263] team0: Port device team_slave_1 added [ 139.623470][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.624954][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.630376][ T7263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.633569][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.635495][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.640772][ T7263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.696708][ T7263] device hsr_slave_0 entered promiscuous mode [ 139.725751][ T7263] device hsr_slave_1 entered promiscuous mode [ 139.831944][ T7396] EXT4-fs: quotafile must be on filesystem root [ 139.958995][ T7263] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 140.110381][ T7412] 9pnet_fd: Insufficient options for proto=fd [ 140.332383][ T7263] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 140.383775][ T7423] FAULT_INJECTION: forcing a failure. [ 140.383775][ T7423] name failslab, interval 1, probability 0, space 0, times 0 [ 140.386515][ T7423] CPU: 0 PID: 7423 Comm: syz.4.813 Not tainted syzkaller #0 [ 140.387793][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 140.389590][ T7423] Call trace: [ 140.390194][ T7423] dump_backtrace+0x1c4/0x1f0 [ 140.391035][ T7423] show_stack+0x2c/0x3c [ 140.391772][ T7423] __dump_stack+0x30/0x40 [ 140.392544][ T7423] dump_stack_lvl+0xf4/0x15c [ 140.393388][ T7423] dump_stack+0x1c/0x5c [ 140.394211][ T7423] should_fail_ex+0x3cc/0x524 [ 140.395079][ T7423] __should_failslab+0xc0/0x11c [ 140.395979][ T7423] should_failslab+0x10/0x28 [ 140.396830][ T7423] slab_pre_alloc_hook+0x6c/0x31c [ 140.397740][ T7423] kmem_cache_alloc_lru+0x60/0x284 [ 140.398666][ T7423] sock_alloc_inode+0x2c/0xcc [ 140.399683][ T7423] new_inode_pseudo+0x68/0x1cc [ 140.400599][ T7423] __sock_create+0x138/0x8a8 [ 140.401535][ T7423] __sys_socketpair+0x2ec/0x6d8 [ 140.402547][ T7423] __arm64_sys_socketpair+0xa0/0xbc [ 140.403569][ T7423] invoke_syscall+0x98/0x290 [ 140.404451][ T7423] el0_svc_common+0x13c/0x258 [ 140.405314][ T7423] do_el0_svc+0x5c/0x134 [ 140.406077][ T7423] el0_svc+0x58/0x12c [ 140.406892][ T7423] el0t_64_sync_handler+0x84/0xf0 [ 140.407902][ T7423] el0t_64_sync+0x18c/0x190 [ 140.415101][ T4332] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 140.417012][ T4332] CPU: 0 PID: 4332 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 140.418291][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 140.420040][ T4332] Workqueue: hci5 hci_rx_work [ 140.420868][ T4332] Call trace: [ 140.421438][ T4332] dump_backtrace+0x1c4/0x1f0 [ 140.422285][ T4332] show_stack+0x2c/0x3c [ 140.423030][ T4332] __dump_stack+0x30/0x40 [ 140.423826][ T4332] dump_stack_lvl+0xf4/0x15c [ 140.424661][ T4332] dump_stack+0x1c/0x5c [ 140.425446][ T4332] sysfs_create_dir_ns+0x244/0x264 [ 140.426416][ T4332] kobject_add_internal+0x5a8/0xb18 [ 140.427334][ T4332] kobject_add+0x144/0x20c [ 140.428117][ T4332] device_add+0x3dc/0xe4c [ 140.428917][ T4332] hci_conn_add_sysfs+0xb8/0x1bc [ 140.429808][ T4332] le_conn_complete_evt+0xd08/0x12c8 [ 140.430753][ T4332] hci_le_conn_complete_evt+0x114/0x3b8 [ 140.431747][ T4332] hci_le_meta_evt+0x2c0/0x4a8 [ 140.432619][ T4332] hci_event_packet+0x64c/0xe60 [ 140.433513][ T4332] hci_rx_work+0x310/0xa70 [ 140.434311][ T4332] process_one_work+0x7e4/0x13bc [ 140.435195][ T4332] worker_thread+0x8cc/0xfe8 [ 140.436027][ T4332] kthread+0x254/0x2e0 [ 140.436752][ T4332] ret_from_fork+0x10/0x20 [ 140.439236][ T4332] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.439775][ T7263] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 140.442814][ T4332] Bluetooth: hci5: failed to register connection device [ 140.445927][ T7423] socket: no more sockets [ 140.475316][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 140.740657][ T7263] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 140.855682][ T7263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.859974][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.861502][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.868255][ T7263] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.871467][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.873336][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.880237][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.881445][ T4606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.889901][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.922332][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.924168][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.926655][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.927902][ T4606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.929395][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.932051][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.944335][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.947930][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.949605][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.951189][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.956146][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.958348][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.964876][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.016224][ T7263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.021581][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.028579][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.030420][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.176831][ T7483] EXT4-fs: quotafile must be on filesystem root [ 141.463100][ T7497] 9pnet_fd: Insufficient options for proto=fd [ 141.738245][ T7263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.754644][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.756117][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.759010][ T4340] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 142.092435][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.094186][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.561901][ T4332] Bluetooth: hci1: command 0x041b tx timeout [ 142.662426][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.664383][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.723569][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.726374][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.759384][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.761194][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.765156][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.769050][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.773426][ T7263] device veth0_vlan entered promiscuous mode [ 142.780470][ T7263] device veth1_vlan entered promiscuous mode [ 142.795105][ T4810] device hsr_slave_0 left promiscuous mode [ 142.816941][ T4810] device hsr_slave_1 left promiscuous mode [ 142.876584][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.879102][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.881926][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.883314][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.885657][ T4810] device bridge_slave_1 left promiscuous mode [ 142.887853][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.946217][ T4810] device bridge_slave_0 left promiscuous mode [ 142.947397][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.045438][ T4810] device veth1_macvtap left promiscuous mode [ 143.046677][ T4810] device veth0_macvtap left promiscuous mode [ 143.050363][ T4810] device veth1_vlan left promiscuous mode [ 143.051566][ T4810] device veth0_vlan left promiscuous mode [ 144.635417][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 144.788326][ T7589] set_capacity_and_notify: 4 callbacks suppressed [ 144.788335][ T7589] loop4: detected capacity change from 0 to 1024 [ 144.796115][ T7589] EXT4-fs: quotafile must be on filesystem root [ 145.045546][ T7591] 9pnet_fd: Insufficient options for proto=fd [ 145.738531][ T4810] team0 (unregistering): Port device team_slave_1 removed [ 145.896695][ T4810] team0 (unregistering): Port device team_slave_0 removed [ 146.055756][ T4810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.182477][ T4340] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 146.256212][ T4810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.715346][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 147.479108][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.851'. [ 147.707200][ T4810] bond0 (unregistering): Released all slaves [ 147.959772][ T7263] device veth0_macvtap entered promiscuous mode [ 147.962410][ T7263] device veth1_macvtap entered promiscuous mode [ 147.980795][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.982563][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.984207][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.991326][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.993024][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.994703][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.997860][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.000253][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.004906][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.061536][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.063574][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.065847][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.068178][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.070005][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.071786][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.109697][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.399473][ T7621] ptrace attach of ""[7622] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[7621] [ 148.404999][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.407138][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.426293][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.444257][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.449499][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.456799][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.462609][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.467049][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.471037][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.478140][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.484469][ T7263] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.489528][ T7263] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.492318][ T7263] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.502735][ T7263] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.512802][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.514477][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.563750][ T4332] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 148.590672][ T4827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.592195][ T4827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.593666][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.607683][ T4819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.609179][ T4819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.610561][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.699059][ T7647] loop8: detected capacity change from 0 to 2048 [ 148.708327][ T7647] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 148.970017][ T7672] loop4: detected capacity change from 0 to 512 [ 149.067101][ T7681] loop4: detected capacity change from 0 to 1024 [ 149.085071][ T7681] EXT4-fs: quotafile must be on filesystem root [ 149.473244][ T7688] 9pnet_fd: Insufficient options for proto=fd [ 149.539115][ T7690] fuse: Bad value for 'fd' [ 149.995963][ T7733] fuse: Bad value for 'fd' [ 150.069106][ T7746] loop8: detected capacity change from 0 to 2048 [ 150.080643][ T7746] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 150.142772][ T7760] loop3: detected capacity change from 0 to 128 [ 150.166454][ T7760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.276440][ T7769] ip_tables: iptables: counters copy to user failed while replacing table [ 150.316890][ T7772] fuse: Bad value for 'fd' [ 150.347878][ T7775] fuse: Bad value for 'fd' [ 151.058583][ T7793] sctp: [Deprecated]: syz.6.904 (pid 7793) Use of int in max_burst socket option. [ 151.058583][ T7793] Use struct sctp_assoc_value instead [ 151.078917][ T7795] ip_tables: iptables: counters copy to user failed while replacing table [ 151.212575][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 151.242036][ T7811] fuse: Bad value for 'fd' [ 151.654597][ T7827] ptrace attach of ""[7828] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[7827] [ 151.661458][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.663038][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.718596][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.917'. [ 151.791296][ T7850] loop5: detected capacity change from 0 to 128 [ 151.808978][ T7850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 152.728672][ T4663] EXT4-fs (loop5): unmounting filesystem. [ 152.774440][ T7922] fuse: Bad value for 'fd' [ 153.349829][ T7961] loop8: detected capacity change from 0 to 128 [ 153.368504][ T7961] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 153.595242][ T4332] Bluetooth: hci4: command 0x0406 tx timeout [ 153.675541][ T4340] Bluetooth: hci0: command 0x0406 tx timeout [ 153.833226][ T7966] fuse: Bad value for 'fd' [ 154.081534][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 154.089626][ T7981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.205908][ T7263] EXT4-fs (loop8): unmounting filesystem. [ 154.226486][ T7981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.335594][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.944'. [ 154.339091][ T8001] device ip6gretap0 entered promiscuous mode [ 154.340334][ T8001] device macvtap1 entered promiscuous mode [ 154.921986][ T8022] loop5: detected capacity change from 0 to 128 [ 154.942777][ T8022] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 155.326460][ T8041] overlayfs: missing 'lowerdir' [ 155.630260][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.631928][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.658145][ T8045] netlink: 'syz.4.956': attribute type 14 has an invalid length. [ 155.660819][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 155.695566][ T8047] loop3: detected capacity change from 0 to 1024 [ 155.705899][ T8047] EXT4-fs: quotafile must be on filesystem root [ 155.955381][ T8057] 9pnet_fd: Insufficient options for proto=fd [ 155.963186][ T8057] binder: 8046:8057 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 156.211815][ T4663] EXT4-fs (loop5): unmounting filesystem. [ 156.809067][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'. [ 156.820313][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 156.823789][ T8084] device ip6gretap0 entered promiscuous mode [ 156.825107][ T8084] device macvtap1 entered promiscuous mode [ 156.972393][ T8095] device syzkaller0 entered promiscuous mode [ 156.999628][ T8097] loop3: detected capacity change from 0 to 1024 [ 157.010277][ T8097] EXT4-fs: quotafile must be on filesystem root [ 157.258071][ T8102] 9pnet_fd: Insufficient options for proto=fd [ 157.264557][ T8102] binder: 8096:8102 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 157.704988][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.982'. [ 158.148256][ T8157] loop4: detected capacity change from 0 to 1024 [ 158.160022][ T8157] EXT4-fs: quotafile must be on filesystem root [ 158.226966][ T8161] process 'syz.3.1000' launched './file0' with NULL argv: empty string added [ 158.410912][ T8164] 9pnet_fd: Insufficient options for proto=fd [ 158.416633][ T8164] binder: 8156:8164 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 158.600638][ T8167] loop8: detected capacity change from 0 to 128 [ 158.618011][ T8167] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 158.915083][ T8175] loop5: detected capacity change from 0 to 16 [ 158.951710][ T8175] erofs: (device loop5): mounted with root inode @ nid 36. [ 159.068013][ T8178] FAULT_INJECTION: forcing a failure. [ 159.068013][ T8178] name failslab, interval 1, probability 0, space 0, times 0 [ 159.070198][ T8178] CPU: 1 PID: 8178 Comm: syz.5.1005 Not tainted syzkaller #0 [ 159.071370][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 159.072945][ T8178] Call trace: [ 159.073515][ T8178] dump_backtrace+0x1c4/0x1f0 [ 159.074322][ T8178] show_stack+0x2c/0x3c [ 159.075068][ T8178] __dump_stack+0x30/0x40 [ 159.075857][ T8178] dump_stack_lvl+0xf4/0x15c [ 159.076644][ T8178] dump_stack+0x1c/0x5c [ 159.077384][ T8178] should_fail_ex+0x3cc/0x524 [ 159.078203][ T8178] __should_failslab+0xc0/0x11c [ 159.079052][ T8178] should_failslab+0x10/0x28 [ 159.079861][ T8178] __kmem_cache_alloc_node+0x7c/0x318 [ 159.080840][ T8178] kmalloc_trace+0x48/0x94 [ 159.081597][ T8178] show_partition_start+0x7c/0x180 [ 159.082476][ T8178] seq_read_iter+0x358/0xc24 [ 159.083290][ T8178] proc_reg_read_iter+0x180/0x2a8 [ 159.084211][ T8178] vfs_read+0x3cc/0x7b8 [ 159.084921][ T8178] __arm64_sys_pread64+0x178/0x210 [ 159.085786][ T8178] invoke_syscall+0x98/0x290 [ 159.086587][ T8178] el0_svc_common+0x13c/0x258 [ 159.087410][ T8178] do_el0_svc+0x5c/0x134 [ 159.088156][ T8178] el0_svc+0x58/0x12c [ 159.088858][ T8178] el0t_64_sync_handler+0x84/0xf0 [ 159.089750][ T8178] el0t_64_sync+0x18c/0x190 [ 159.147611][ T8188] loop3: detected capacity change from 0 to 2048 [ 159.152453][ T8188] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 159.422224][ T8205] loop4: detected capacity change from 0 to 1024 [ 159.424194][ T8205] EXT4-fs: quotafile must be on filesystem root [ 159.482857][ T6731] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.549749][ T7263] EXT4-fs (loop8): unmounting filesystem. [ 159.722988][ T8210] binder: 8204:8210 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 160.126810][ T8232] FAULT_INJECTION: forcing a failure. [ 160.126810][ T8232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.128920][ T8232] CPU: 1 PID: 8232 Comm: syz.3.1023 Not tainted syzkaller #0 [ 160.130009][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 160.131519][ T8232] Call trace: [ 160.132022][ T8232] dump_backtrace+0x1c4/0x1f0 [ 160.132750][ T8232] show_stack+0x2c/0x3c [ 160.133556][ T8232] __dump_stack+0x30/0x40 [ 160.134421][ T8232] dump_stack_lvl+0xf4/0x15c [ 160.135376][ T8232] dump_stack+0x1c/0x5c [ 160.136170][ T8232] should_fail_ex+0x3cc/0x524 [ 160.137108][ T8232] should_fail+0x14/0x24 [ 160.137876][ T8232] should_fail_usercopy+0x20/0x30 [ 160.138906][ T8232] _copy_to_iter+0x18c/0xeac [ 160.139855][ T8232] seq_read_iter+0x294/0xc24 [ 160.140769][ T8232] proc_reg_read_iter+0x180/0x2a8 [ 160.141765][ T8232] vfs_read+0x3cc/0x7b8 [ 160.142581][ T8232] __arm64_sys_pread64+0x178/0x210 [ 160.143558][ T8232] invoke_syscall+0x98/0x290 [ 160.144416][ T8232] el0_svc_common+0x13c/0x258 [ 160.145310][ T8232] do_el0_svc+0x5c/0x134 [ 160.146060][ T8232] el0_svc+0x58/0x12c [ 160.146790][ T8232] el0t_64_sync_handler+0x84/0xf0 [ 160.147677][ T8232] el0t_64_sync+0x18c/0x190 [ 160.296016][ T4340] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 160.297746][ T4340] CPU: 1 PID: 4340 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 160.298934][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 160.300514][ T4340] Workqueue: hci5 hci_rx_work [ 160.301287][ T4340] Call trace: [ 160.301849][ T4340] dump_backtrace+0x1c4/0x1f0 [ 160.302566][ T4340] show_stack+0x2c/0x3c [ 160.303228][ T4340] __dump_stack+0x30/0x40 [ 160.304012][ T4340] dump_stack_lvl+0xf4/0x15c [ 160.304854][ T4340] dump_stack+0x1c/0x5c [ 160.305626][ T4340] sysfs_create_dir_ns+0x244/0x264 [ 160.306548][ T4340] kobject_add_internal+0x5a8/0xb18 [ 160.307506][ T4340] kobject_add+0x144/0x20c [ 160.308279][ T4340] device_add+0x3dc/0xe4c [ 160.309053][ T4340] hci_conn_add_sysfs+0xb8/0x1bc [ 160.309959][ T4340] le_conn_complete_evt+0xd08/0x12c8 [ 160.310879][ T4340] hci_le_conn_complete_evt+0x114/0x3b8 [ 160.311853][ T4340] hci_le_meta_evt+0x2c0/0x4a8 [ 160.312700][ T4340] hci_event_packet+0x64c/0xe60 [ 160.313527][ T4340] hci_rx_work+0x310/0xa70 [ 160.314265][ T4340] process_one_work+0x7e4/0x13bc [ 160.315100][ T4340] worker_thread+0x8cc/0xfe8 [ 160.315953][ T4340] kthread+0x254/0x2e0 [ 160.316707][ T4340] ret_from_fork+0x10/0x20 [ 160.317771][ T4340] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.319954][ T4340] Bluetooth: hci5: failed to register connection device [ 160.359459][ T8259] loop4: detected capacity change from 0 to 128 [ 160.528930][ T8274] FAULT_INJECTION: forcing a failure. [ 160.528930][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 160.538176][ T8274] CPU: 1 PID: 8274 Comm: syz.3.1032 Not tainted syzkaller #0 [ 160.539530][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 160.541267][ T8274] Call trace: [ 160.541845][ T8274] dump_backtrace+0x1c4/0x1f0 [ 160.542665][ T8274] show_stack+0x2c/0x3c [ 160.543371][ T8274] __dump_stack+0x30/0x40 [ 160.544145][ T8274] dump_stack_lvl+0xf4/0x15c [ 160.544952][ T8274] dump_stack+0x1c/0x5c [ 160.545648][ T8274] should_fail_ex+0x3cc/0x524 [ 160.546578][ T8274] __should_failslab+0xc0/0x11c [ 160.547536][ T8274] should_failslab+0x10/0x28 [ 160.548472][ T8274] __kmem_cache_alloc_node+0x7c/0x318 [ 160.549554][ T8274] __kmalloc+0xc4/0x180 [ 160.550421][ T8274] security_sb_alloc+0x48/0x128 [ 160.551439][ T8274] alloc_super+0x1a8/0x840 [ 160.552325][ T8274] sget_fc+0x28c/0x658 [ 160.553171][ T8274] kernfs_get_tree+0x168/0x688 [ 160.554171][ T8274] sysfs_get_tree+0x4c/0x124 [ 160.555138][ T8274] vfs_get_tree+0x90/0x278 [ 160.556027][ T8274] do_new_mount+0x228/0x804 [ 160.556973][ T8274] path_mount+0x5ac/0xe6c [ 160.557864][ T8274] __arm64_sys_mount+0x4a0/0x5a0 [ 160.558852][ T8274] invoke_syscall+0x98/0x290 [ 160.559829][ T8274] el0_svc_common+0x13c/0x258 [ 160.560730][ T8274] do_el0_svc+0x5c/0x134 [ 160.561635][ T8274] el0_svc+0x58/0x12c [ 160.562429][ T8274] el0t_64_sync_handler+0x84/0xf0 [ 160.563444][ T8274] el0t_64_sync+0x18c/0x190 [ 160.886129][ T8301] FAULT_INJECTION: forcing a failure. [ 160.886129][ T8301] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.888909][ T8301] CPU: 0 PID: 8301 Comm: syz.4.1037 Not tainted syzkaller #0 [ 160.890048][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 160.891570][ T8301] Call trace: [ 160.892209][ T8301] dump_backtrace+0x1c4/0x1f0 [ 160.893319][ T8301] show_stack+0x2c/0x3c [ 160.894040][ T8301] __dump_stack+0x30/0x40 [ 160.894780][ T8301] dump_stack_lvl+0xf4/0x15c [ 160.895583][ T8301] dump_stack+0x1c/0x5c [ 160.896353][ T8301] should_fail_ex+0x3cc/0x524 [ 160.897182][ T8301] should_fail+0x14/0x24 [ 160.897938][ T8301] get_futex_key+0x904/0xfb0 [ 160.898745][ T8301] futex_wait_setup+0xbc/0x320 [ 160.899607][ T8301] futex_wait+0x164/0x424 [ 160.900366][ T8301] do_futex+0x2e8/0x340 [ 160.901085][ T8301] __arm64_sys_futex+0x390/0x414 [ 160.901971][ T8301] invoke_syscall+0x98/0x290 [ 160.902785][ T8301] el0_svc_common+0x13c/0x258 [ 160.903597][ T8301] do_el0_svc+0x5c/0x134 [ 160.904332][ T8301] el0_svc+0x58/0x12c [ 160.905018][ T8301] el0t_64_sync_handler+0x84/0xf0 [ 160.905903][ T8301] el0t_64_sync+0x18c/0x190 [ 161.236517][ T8337] loop3: detected capacity change from 0 to 128 [ 161.885562][ T8384] FAULT_INJECTION: forcing a failure. [ 161.885562][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 161.887882][ T8384] CPU: 1 PID: 8384 Comm: syz.5.1053 Not tainted syzkaller #0 [ 161.889110][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 161.890767][ T8384] Call trace: [ 161.891331][ T8384] dump_backtrace+0x1c4/0x1f0 [ 161.892173][ T8384] show_stack+0x2c/0x3c [ 161.892882][ T8384] __dump_stack+0x30/0x40 [ 161.893698][ T8384] dump_stack_lvl+0xf4/0x15c [ 161.894548][ T8384] dump_stack+0x1c/0x5c [ 161.895310][ T8384] should_fail_ex+0x3cc/0x524 [ 161.896181][ T8384] __should_failslab+0xc0/0x11c [ 161.897087][ T8384] should_failslab+0x10/0x28 [ 161.897937][ T8384] __kmem_cache_alloc_node+0x7c/0x318 [ 161.899052][ T8384] kmalloc_trace+0x48/0x94 [ 161.899957][ T8384] show_partition_start+0x7c/0x180 [ 161.900963][ T8384] seq_read_iter+0x358/0xc24 [ 161.901916][ T8384] proc_reg_read_iter+0x180/0x2a8 [ 161.902936][ T8384] vfs_read+0x3cc/0x7b8 [ 161.903748][ T8384] __arm64_sys_pread64+0x178/0x210 [ 161.904735][ T8384] invoke_syscall+0x98/0x290 [ 161.905572][ T8384] el0_svc_common+0x13c/0x258 [ 161.906391][ T8384] do_el0_svc+0x5c/0x134 [ 161.907142][ T8384] el0_svc+0x58/0x12c [ 161.907809][ T8384] el0t_64_sync_handler+0x84/0xf0 [ 161.908670][ T8384] el0t_64_sync+0x18c/0x190 [ 162.394901][ T4340] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 162.396755][ T4340] Bluetooth: hci5: command 0x2016 tx timeout [ 162.446854][ T8412] FAULT_INJECTION: forcing a failure. [ 162.446854][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 162.449277][ T8412] CPU: 1 PID: 8412 Comm: syz.3.1064 Not tainted syzkaller #0 [ 162.450713][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 162.452614][ T8412] Call trace: [ 162.453205][ T8412] dump_backtrace+0x1c4/0x1f0 [ 162.454060][ T8412] show_stack+0x2c/0x3c [ 162.454805][ T8412] __dump_stack+0x30/0x40 [ 162.455571][ T8412] dump_stack_lvl+0xf4/0x15c [ 162.456361][ T8412] dump_stack+0x1c/0x5c [ 162.457149][ T8412] should_fail_ex+0x3cc/0x524 [ 162.457990][ T8412] __should_failslab+0xc0/0x11c [ 162.458839][ T8412] should_failslab+0x10/0x28 [ 162.459641][ T8412] __kmem_cache_alloc_node+0x7c/0x318 [ 162.460552][ T8412] kmalloc_node_trace+0x44/0x90 [ 162.461375][ T8412] __get_vm_area_node+0x14c/0x31c [ 162.462244][ T8412] __vmalloc_node_range+0x1d4/0xe70 [ 162.463160][ T8412] vmalloc+0x9c/0xd4 [ 162.463856][ T8412] bpf_jit_alloc_exec+0x20/0x30 [ 162.464702][ T8412] bpf_jit_binary_alloc+0xd8/0x1e8 [ 162.465608][ T8412] bpf_int_jit_compile+0xd2c/0x1090 [ 162.466519][ T8412] bpf_prog_select_runtime+0x3c4/0x698 [ 162.467460][ T8412] bpf_prepare_filter+0xd60/0xebc [ 162.468339][ T8412] bpf_prog_create_from_user+0x2cc/0x464 [ 162.469268][ T8412] fanout_set_data+0x284/0x338 [ 162.470021][ T8412] packet_setsockopt+0x59c/0xedc [ 162.470819][ T8412] __sys_setsockopt+0x2fc/0x50c [ 162.471628][ T8412] __arm64_sys_setsockopt+0xc0/0xdc [ 162.472518][ T8412] invoke_syscall+0x98/0x290 [ 162.473292][ T8412] el0_svc_common+0x13c/0x258 [ 162.474127][ T8412] do_el0_svc+0x5c/0x134 [ 162.474898][ T8412] el0_svc+0x58/0x12c [ 162.475590][ T8412] el0t_64_sync_handler+0x84/0xf0 [ 162.476469][ T8412] el0t_64_sync+0x18c/0x190 [ 162.481015][ T8412] syz.3.1064: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 162.483528][ T8412] CPU: 1 PID: 8412 Comm: syz.3.1064 Not tainted syzkaller #0 [ 162.484767][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 162.486504][ T8412] Call trace: [ 162.487064][ T8412] dump_backtrace+0x1c4/0x1f0 [ 162.487894][ T8412] show_stack+0x2c/0x3c [ 162.488633][ T8412] __dump_stack+0x30/0x40 [ 162.489519][ T8412] dump_stack_lvl+0xf4/0x15c [ 162.490463][ T8412] dump_stack+0x1c/0x5c [ 162.491337][ T8412] warn_alloc+0x214/0x324 [ 162.492232][ T8412] __vmalloc_node_range+0x24c/0xe70 [ 162.493335][ T8412] vmalloc+0x9c/0xd4 [ 162.494129][ T8412] bpf_jit_alloc_exec+0x20/0x30 [ 162.495111][ T8412] bpf_jit_binary_alloc+0xd8/0x1e8 [ 162.496116][ T8412] bpf_int_jit_compile+0xd2c/0x1090 [ 162.497127][ T8412] bpf_prog_select_runtime+0x3c4/0x698 [ 162.498191][ T8412] bpf_prepare_filter+0xd60/0xebc [ 162.499172][ T8412] bpf_prog_create_from_user+0x2cc/0x464 [ 162.500202][ T8412] fanout_set_data+0x284/0x338 [ 162.501072][ T8412] packet_setsockopt+0x59c/0xedc [ 162.501956][ T8412] __sys_setsockopt+0x2fc/0x50c [ 162.502832][ T8412] __arm64_sys_setsockopt+0xc0/0xdc [ 162.503759][ T8412] invoke_syscall+0x98/0x290 [ 162.504582][ T8412] el0_svc_common+0x13c/0x258 [ 162.505436][ T8412] do_el0_svc+0x5c/0x134 [ 162.506169][ T8412] el0_svc+0x58/0x12c [ 162.506874][ T8412] el0t_64_sync_handler+0x84/0xf0 [ 162.507804][ T8412] el0t_64_sync+0x18c/0x190 [ 162.513432][ T8412] Mem-Info: [ 162.514588][ T8412] active_anon:18433 inactive_anon:0 isolated_anon:0 [ 162.514588][ T8412] active_file:22618 inactive_file:2165 isolated_file:0 [ 162.514588][ T8412] unevictable:768 dirty:282 writeback:0 [ 162.514588][ T8412] slab_reclaimable:20049 slab_unreclaimable:99263 [ 162.514588][ T8412] mapped:29579 shmem:12155 pagetables:975 [ 162.514588][ T8412] sec_pagetables:0 bounce:0 [ 162.514588][ T8412] kernel_misc_reclaimable:0 [ 162.514588][ T8412] free:1404543 free_pcp:3019 free_cma:7360 [ 162.522296][ T8412] Node 0 active_anon:73732kB inactive_anon:0kB active_file:90472kB inactive_file:8660kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:118316kB dirty:1128kB writeback:0kB shmem:48620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10016kB pagetables:3900kB sec_pagetables:0kB all_unreclaimable? no [ 162.530827][ T8412] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 162.535928][ T8412] lowmem_reserve[]: 0 0 3532 3532 3532 [ 162.537135][ T8412] Node 0 Normal free:2541308kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:73732kB inactive_anon:0kB active_file:90472kB inactive_file:8660kB unevictable:3072kB writepending:1128kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:12684kB local_pcp:1264kB free_cma:0kB [ 162.542604][ T8412] lowmem_reserve[]: 0 0 0 0 0 [ 162.543429][ T8412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 162.548583][ T8412] Node 0 Normal: 1829*4kB (UM) 1074*8kB (UM) 522*16kB (UM) 293*32kB (UME) 213*64kB (UME) 65*128kB (UME) 52*256kB (UME) 17*512kB (UM) 8*1024kB (UM) 5*2048kB (UM) 597*4096kB (M) = 2541348kB [ 162.552053][ T8412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.553823][ T8412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 162.555432][ T8412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 162.557361][ T8412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 162.558973][ T8412] 36934 total pagecache pages [ 162.560223][ T8412] 0 pages in swap cache [ 162.560959][ T8412] Free swap = 124740kB [ 162.561842][ T8412] Total swap = 124996kB [ 162.562537][ T8412] 2097152 pages RAM [ 162.563348][ T8412] 0 pages HighMem/MovableOnly [ 162.564194][ T8412] 421949 pages reserved [ 162.567670][ T8412] 8192 pages cma reserved [ 162.568390][ T8412] 0 pages hwpoisoned [ 163.037122][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.038693][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.729262][ T8442] loop5: detected capacity change from 0 to 128 [ 163.890109][ T8458] loop5: detected capacity change from 0 to 2048 [ 163.902187][ T8458] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 164.090629][ T8464] FAULT_INJECTION: forcing a failure. [ 164.090629][ T8464] name fail_futex, interval 1, probability 0, space 0, times 0 [ 164.093282][ T8464] CPU: 1 PID: 8464 Comm: syz.3.1077 Not tainted syzkaller #0 [ 164.094608][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 164.096328][ T8464] Call trace: [ 164.096922][ T8464] dump_backtrace+0x1c4/0x1f0 [ 164.097763][ T8464] show_stack+0x2c/0x3c [ 164.098520][ T8464] __dump_stack+0x30/0x40 [ 164.099293][ T8464] dump_stack_lvl+0xf4/0x15c [ 164.100091][ T8464] dump_stack+0x1c/0x5c [ 164.100825][ T8464] should_fail_ex+0x3cc/0x524 [ 164.101656][ T8464] should_fail+0x14/0x24 [ 164.102422][ T8464] get_futex_key+0x904/0xfb0 [ 164.103239][ T8464] futex_wait_setup+0xbc/0x320 [ 164.104098][ T8464] futex_wait+0x164/0x424 [ 164.104874][ T8464] do_futex+0x2e8/0x340 [ 164.105640][ T8464] __arm64_sys_futex+0x390/0x414 [ 164.106525][ T8464] invoke_syscall+0x98/0x290 [ 164.107329][ T8464] el0_svc_common+0x13c/0x258 [ 164.108136][ T8464] do_el0_svc+0x5c/0x134 [ 164.108887][ T8464] el0_svc+0x58/0x12c [ 164.109575][ T8464] el0t_64_sync_handler+0x84/0xf0 [ 164.110469][ T8464] el0t_64_sync+0x18c/0x190 [ 164.276037][ T4340] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.425507][ T8502] FAULT_INJECTION: forcing a failure. [ 165.425507][ T8502] name fail_futex, interval 1, probability 0, space 0, times 0 [ 165.427935][ T8502] CPU: 0 PID: 8502 Comm: syz.3.1092 Not tainted syzkaller #0 [ 165.429312][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 165.431257][ T8502] Call trace: [ 165.431899][ T8502] dump_backtrace+0x1c4/0x1f0 [ 165.432806][ T8502] show_stack+0x2c/0x3c [ 165.433613][ T8502] __dump_stack+0x30/0x40 [ 165.434526][ T8502] dump_stack_lvl+0xf4/0x15c [ 165.435389][ T8502] dump_stack+0x1c/0x5c [ 165.436206][ T8502] should_fail_ex+0x3cc/0x524 [ 165.437088][ T8502] should_fail+0x14/0x24 [ 165.437867][ T8502] get_futex_key+0x904/0xfb0 [ 165.438682][ T8502] futex_wait_setup+0xbc/0x320 [ 165.439605][ T8502] futex_wait+0x164/0x424 [ 165.440396][ T8502] do_futex+0x2e8/0x340 [ 165.441135][ T8502] __arm64_sys_futex+0x390/0x414 [ 165.441988][ T8502] invoke_syscall+0x98/0x290 [ 165.442790][ T8502] el0_svc_common+0x13c/0x258 [ 165.443618][ T8502] do_el0_svc+0x5c/0x134 [ 165.444451][ T8502] el0_svc+0x58/0x12c [ 165.445294][ T8502] el0t_64_sync_handler+0x84/0xf0 [ 165.446341][ T8502] el0t_64_sync+0x18c/0x190 [ 165.594491][ T8509] loop4: detected capacity change from 0 to 2048 [ 165.608164][ T8509] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 165.687843][ T8511] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1096'. [ 165.951845][ T8526] loop5: detected capacity change from 0 to 764 [ 166.006416][ T8528] FAULT_INJECTION: forcing a failure. [ 166.006416][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.009014][ T8528] CPU: 0 PID: 8528 Comm: syz.5.1103 Not tainted syzkaller #0 [ 166.010402][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 166.012161][ T8528] Call trace: [ 166.012775][ T8528] dump_backtrace+0x1c4/0x1f0 [ 166.013633][ T8528] show_stack+0x2c/0x3c [ 166.014522][ T8528] __dump_stack+0x30/0x40 [ 166.015314][ T8528] dump_stack_lvl+0xf4/0x15c [ 166.016207][ T8528] dump_stack+0x1c/0x5c [ 166.016944][ T8528] should_fail_ex+0x3cc/0x524 [ 166.017925][ T8528] should_fail+0x14/0x24 [ 166.018816][ T8528] should_fail_usercopy+0x20/0x30 [ 166.019845][ T8528] _copy_to_iter+0x18c/0xeac [ 166.020761][ T8528] seq_read_iter+0x294/0xc24 [ 166.021649][ T8528] proc_reg_read_iter+0x180/0x2a8 [ 166.022621][ T8528] vfs_read+0x3cc/0x7b8 [ 166.023440][ T8528] __arm64_sys_pread64+0x178/0x210 [ 166.024450][ T8528] invoke_syscall+0x98/0x290 [ 166.025399][ T8528] el0_svc_common+0x13c/0x258 [ 166.026355][ T8528] do_el0_svc+0x5c/0x134 [ 166.027227][ T8528] el0_svc+0x58/0x12c [ 166.027984][ T8528] el0t_64_sync_handler+0x84/0xf0 [ 166.029021][ T8528] el0t_64_sync+0x18c/0x190 [ 166.193968][ T4340] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 166.646227][ T8543] device bond1 entered promiscuous mode [ 166.647427][ T8543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.953670][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.956080][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.993772][ T8551] ip_tables: iptables: counters copy to user failed while replacing table [ 167.526511][ T8561] FAULT_INJECTION: forcing a failure. [ 167.526511][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 167.528834][ T8561] CPU: 0 PID: 8561 Comm: syz.5.1114 Not tainted syzkaller #0 [ 167.530172][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 167.532066][ T8561] Call trace: [ 167.532696][ T8561] dump_backtrace+0x1c4/0x1f0 [ 167.533605][ T8561] show_stack+0x2c/0x3c [ 167.534320][ T8561] __dump_stack+0x30/0x40 [ 167.535070][ T8561] dump_stack_lvl+0xf4/0x15c [ 167.535896][ T8561] dump_stack+0x1c/0x5c [ 167.536629][ T8561] should_fail_ex+0x3cc/0x524 [ 167.537428][ T8561] __should_failslab+0xc0/0x11c [ 167.538270][ T8561] should_failslab+0x10/0x28 [ 167.539081][ T8561] __kmem_cache_alloc_node+0x7c/0x318 [ 167.540025][ T8561] kmalloc_trace+0x48/0x94 [ 167.540787][ T8561] show_partition_start+0x7c/0x180 [ 167.541689][ T8561] seq_read_iter+0x358/0xc24 [ 167.542480][ T8561] proc_reg_read_iter+0x180/0x2a8 [ 167.543338][ T8561] vfs_read+0x3cc/0x7b8 [ 167.544035][ T8561] __arm64_sys_pread64+0x178/0x210 [ 167.544899][ T8561] invoke_syscall+0x98/0x290 [ 167.545657][ T8561] el0_svc_common+0x13c/0x258 [ 167.546432][ T8561] do_el0_svc+0x5c/0x134 [ 167.547182][ T8561] el0_svc+0x58/0x12c [ 167.547878][ T8561] el0t_64_sync_handler+0x84/0xf0 [ 167.548767][ T8561] el0t_64_sync+0x18c/0x190 [ 167.555299][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.558070][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.560121][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.562457][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.564049][ T4332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.568722][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.632010][ T8563] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.695711][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 167.719281][ T8574] loop5: detected capacity change from 0 to 2048 [ 167.723991][ T8574] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 167.748546][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.752033][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.754929][ T8563] device bridge_slave_0 entered promiscuous mode [ 167.761889][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.764351][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.773349][ T8563] device bridge_slave_1 entered promiscuous mode [ 167.789779][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.792819][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.803078][ T8563] team0: Port device team_slave_0 added [ 167.808820][ T8563] team0: Port device team_slave_1 added [ 167.814630][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.816645][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.821313][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.824377][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.828295][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.836701][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.886595][ T8563] device hsr_slave_0 entered promiscuous mode [ 167.905472][ T8563] device hsr_slave_1 entered promiscuous mode [ 167.945270][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.946573][ T8563] Cannot create hsr debugfs directory [ 167.959365][ T8582] rxe_eth0 speed is unknown, defaulting to 1000 [ 168.031838][ T8563] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 168.077479][ T8563] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 168.118137][ T8563] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 168.178985][ T8563] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 168.224388][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.226477][ T8563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.228112][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.229245][ T8563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.259140][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.263690][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.265898][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.267754][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.270767][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 168.280603][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.284554][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.286510][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.287818][ T4606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.291121][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.292969][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.294345][ T4606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.309542][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.311531][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.320324][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.322005][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.323844][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.327585][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.401646][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.403279][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.410250][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.492424][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.503332][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.505437][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.507276][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.510029][ T8563] device veth0_vlan entered promiscuous mode [ 168.513547][ T8563] device veth1_vlan entered promiscuous mode [ 168.520487][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.522285][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.524294][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.529879][ T8563] device veth0_macvtap entered promiscuous mode [ 168.532681][ T8563] device veth1_macvtap entered promiscuous mode [ 168.538889][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.540776][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.542539][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.544468][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.546763][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.548724][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.550472][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.552263][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.554697][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.557467][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.559257][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.561026][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.562980][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.564871][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.567626][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.569153][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.570905][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.572532][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.574319][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.580393][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.581971][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.584180][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.586674][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.592053][ T8563] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.593433][ T8563] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.594812][ T8563] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.605230][ T8563] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.646262][ T4810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.650123][ T4810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.654288][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.662087][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.663454][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.664835][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.793008][ T8612] FAULT_INJECTION: forcing a failure. [ 168.793008][ T8612] name failslab, interval 1, probability 0, space 0, times 0 [ 168.797926][ T8612] CPU: 1 PID: 8612 Comm: syz.5.1126 Not tainted syzkaller #0 [ 168.799305][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 168.801095][ T8612] Call trace: [ 168.801696][ T8612] dump_backtrace+0x1c4/0x1f0 [ 168.802629][ T8612] show_stack+0x2c/0x3c [ 168.803439][ T8612] __dump_stack+0x30/0x40 [ 168.804276][ T8612] dump_stack_lvl+0xf4/0x15c [ 168.805116][ T8612] dump_stack+0x1c/0x5c [ 168.805895][ T8612] should_fail_ex+0x3cc/0x524 [ 168.806725][ T8612] __should_failslab+0xc0/0x11c [ 168.807640][ T8612] should_failslab+0x10/0x28 [ 168.808566][ T8612] __kmem_cache_alloc_node+0x7c/0x318 [ 168.809653][ T8612] kmalloc_trace+0x48/0x94 [ 168.810497][ T8612] alloc_super+0x6c/0x840 [ 168.811315][ T8612] sget_fc+0x28c/0x658 [ 168.812058][ T8612] kernfs_get_tree+0x168/0x688 [ 168.812996][ T8612] sysfs_get_tree+0x4c/0x124 [ 168.813953][ T8612] vfs_get_tree+0x90/0x278 [ 168.814863][ T8612] do_new_mount+0x228/0x804 [ 168.815819][ T8612] path_mount+0x5ac/0xe6c [ 168.816605][ T8612] __arm64_sys_mount+0x4a0/0x5a0 [ 168.817538][ T8612] invoke_syscall+0x98/0x290 [ 168.818374][ T8612] el0_svc_common+0x13c/0x258 [ 168.819223][ T8612] do_el0_svc+0x5c/0x134 [ 168.819976][ T8612] el0_svc+0x58/0x12c [ 168.820676][ T8612] el0t_64_sync_handler+0x84/0xf0 [ 168.821564][ T8612] el0t_64_sync+0x18c/0x190 [ 168.826758][ T4340] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 168.828472][ T8610] FAULT_INJECTION: forcing a failure. [ 168.828472][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 168.830634][ T8610] CPU: 0 PID: 8610 Comm: syz.3.1125 Not tainted syzkaller #0 [ 168.831958][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 168.833704][ T8610] Call trace: [ 168.834285][ T8610] dump_backtrace+0x1c4/0x1f0 [ 168.835109][ T8610] show_stack+0x2c/0x3c [ 168.835886][ T8610] __dump_stack+0x30/0x40 [ 168.836743][ T8610] dump_stack_lvl+0xf4/0x15c [ 168.837702][ T8610] dump_stack+0x1c/0x5c [ 168.838552][ T8610] should_fail_ex+0x3cc/0x524 [ 168.839521][ T8610] __should_failslab+0xc0/0x11c [ 168.840474][ T8610] should_failslab+0x10/0x28 [ 168.841410][ T8610] __kmem_cache_alloc_node+0x7c/0x318 [ 168.842511][ T8610] kmalloc_trace+0x48/0x94 [ 168.843375][ T8610] show_partition_start+0x7c/0x180 [ 168.844335][ T8610] seq_read_iter+0x358/0xc24 [ 168.845305][ T8610] proc_reg_read_iter+0x180/0x2a8 [ 168.846329][ T8610] vfs_read+0x3cc/0x7b8 [ 168.847155][ T8610] __arm64_sys_pread64+0x178/0x210 [ 168.848145][ T8610] invoke_syscall+0x98/0x290 [ 168.849039][ T8610] el0_svc_common+0x13c/0x258 [ 168.849923][ T8610] do_el0_svc+0x5c/0x134 [ 168.850772][ T8610] el0_svc+0x58/0x12c [ 168.851607][ T8610] el0t_64_sync_handler+0x84/0xf0 [ 168.852654][ T8610] el0t_64_sync+0x18c/0x190 [ 168.911585][ T8616] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 169.128160][ T8641] FAULT_INJECTION: forcing a failure. [ 169.128160][ T8641] name fail_futex, interval 1, probability 0, space 0, times 0 [ 169.130304][ T8641] CPU: 1 PID: 8641 Comm: syz.8.1138 Not tainted syzkaller #0 [ 169.131618][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 169.133391][ T8641] Call trace: [ 169.134004][ T8641] dump_backtrace+0x1c4/0x1f0 [ 169.134864][ T8641] show_stack+0x2c/0x3c [ 169.135611][ T8641] __dump_stack+0x30/0x40 [ 169.136396][ T8641] dump_stack_lvl+0xf4/0x15c [ 169.137205][ T8641] dump_stack+0x1c/0x5c [ 169.137944][ T8641] should_fail_ex+0x3cc/0x524 [ 169.138782][ T8641] should_fail+0x14/0x24 [ 169.139513][ T8641] get_futex_key+0x904/0xfb0 [ 169.140346][ T8641] futex_wait_setup+0xbc/0x320 [ 169.141213][ T8641] futex_wait+0x164/0x424 [ 169.142022][ T8641] do_futex+0x2e8/0x340 [ 169.142768][ T8641] __arm64_sys_futex+0x390/0x414 [ 169.143609][ T8641] invoke_syscall+0x98/0x290 [ 169.144406][ T8641] el0_svc_common+0x13c/0x258 [ 169.145214][ T8641] do_el0_svc+0x5c/0x134 [ 169.145970][ T8641] el0_svc+0x58/0x12c [ 169.146703][ T8641] el0t_64_sync_handler+0x84/0xf0 [ 169.147632][ T8641] el0t_64_sync+0x18c/0x190 [ 169.596113][ T4340] Bluetooth: hci2: command 0x0409 tx timeout [ 169.611383][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 170.188591][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.190618][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.370927][ T8689] fuse: Bad value for 'group_id' [ 170.471894][ T8693] FAULT_INJECTION: forcing a failure. [ 170.471894][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 170.474233][ T8693] CPU: 0 PID: 8693 Comm: syz.3.1157 Not tainted syzkaller #0 [ 170.475522][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 170.477306][ T8693] Call trace: [ 170.477915][ T8693] dump_backtrace+0x1c4/0x1f0 [ 170.478892][ T8693] show_stack+0x2c/0x3c [ 170.479666][ T8693] __dump_stack+0x30/0x40 [ 170.480589][ T8693] dump_stack_lvl+0xf4/0x15c [ 170.481563][ T8693] dump_stack+0x1c/0x5c [ 170.482363][ T8693] should_fail_ex+0x3cc/0x524 [ 170.483355][ T8693] __should_failslab+0xc0/0x11c [ 170.484409][ T8693] should_failslab+0x10/0x28 [ 170.485389][ T8693] kmem_cache_alloc+0x88/0x310 [ 170.486402][ T8693] __sigqueue_alloc+0x3e0/0x4e4 [ 170.487375][ T8693] __send_signal_locked+0x1d8/0xc88 [ 170.488436][ T8693] do_notify_parent+0x9bc/0xbe4 [ 170.489467][ T8693] release_task+0x11d0/0x1510 [ 170.490373][ T8693] do_exit+0x10bc/0x19ac [ 170.491222][ T8693] do_group_exit+0x198/0x238 [ 170.492162][ T8693] get_signal+0x11f4/0x133c [ 170.493114][ T8693] do_notify_resume+0x364/0x2c84 [ 170.494113][ T8693] el0_svc+0x9c/0x12c [ 170.494926][ T8693] el0t_64_sync_handler+0x84/0xf0 [ 170.495949][ T8693] el0t_64_sync+0x18c/0x190 [ 170.539084][ T8703] loop9: detected capacity change from 0 to 2048 [ 170.546340][ T8703] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 170.629359][ T8672] 9pnet_fd: p9_fd_create_tcp (8672): problem connecting socket to 127.0.0.1 [ 170.812878][ T4340] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 171.474218][ T8734] FAULT_INJECTION: forcing a failure. [ 171.474218][ T8734] name failslab, interval 1, probability 0, space 0, times 0 [ 171.478731][ T8734] CPU: 0 PID: 8734 Comm: syz.9.1173 Not tainted syzkaller #0 [ 171.480178][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 171.482128][ T8734] Call trace: [ 171.482758][ T8734] dump_backtrace+0x1c4/0x1f0 [ 171.483650][ T8734] show_stack+0x2c/0x3c [ 171.484420][ T8734] __dump_stack+0x30/0x40 [ 171.485251][ T8734] dump_stack_lvl+0xf4/0x15c [ 171.486165][ T8734] dump_stack+0x1c/0x5c [ 171.486960][ T8734] should_fail_ex+0x3cc/0x524 [ 171.487842][ T8734] __should_failslab+0xc0/0x11c [ 171.488738][ T8734] should_failslab+0x10/0x28 [ 171.489646][ T8734] kmem_cache_alloc+0x88/0x310 [ 171.490546][ T8734] dst_alloc+0xfc/0x16c [ 171.491340][ T8734] ip6_create_rt_rcu+0x210/0x51c [ 171.492286][ T8734] ip6_pol_route_lookup+0x9e0/0xb98 [ 171.493259][ T8734] fib6_rule_lookup+0x198/0x4c0 [ 171.494178][ T8734] rt6_lookup+0x128/0x1f0 [ 171.494986][ T8734] __ipv6_sock_mc_join+0x538/0x71c [ 171.495883][ T8734] ipv6_sock_mc_join+0x38/0x4c [ 171.496736][ T8734] ipv6_mcast_join_leave+0x158/0x1e0 [ 171.497721][ T8734] do_ipv6_setsockopt+0x7c0/0x3174 [ 171.498623][ T8734] ipv6_setsockopt+0x6c/0x1a0 [ 171.499456][ T8734] udpv6_setsockopt+0xa8/0xc0 [ 171.500289][ T8734] sock_common_setsockopt+0xb0/0xcc [ 171.501224][ T8734] __sys_setsockopt+0x2fc/0x50c [ 171.502098][ T8734] __arm64_sys_setsockopt+0xc0/0xdc [ 171.503015][ T8734] invoke_syscall+0x98/0x290 [ 171.503829][ T8734] el0_svc_common+0x13c/0x258 [ 171.504654][ T8734] do_el0_svc+0x5c/0x134 [ 171.505450][ T8734] el0_svc+0x58/0x12c [ 171.506168][ T8734] el0t_64_sync_handler+0x84/0xf0 [ 171.507090][ T8734] el0t_64_sync+0x18c/0x190 [ 171.675387][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 172.268357][ T8766] loop3: detected capacity change from 0 to 128 [ 172.887802][ T4340] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 172.980869][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.982554][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.723910][ T8802] loop8: detected capacity change from 0 to 256 [ 173.738599][ T8802] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 173.755693][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 174.106983][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1201'. [ 174.108527][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1201'. [ 174.109945][ T8807] netlink: 'syz.8.1201': attribute type 15 has an invalid length. [ 174.111340][ T8807] netlink: 'syz.8.1201': attribute type 18 has an invalid length. [ 174.277850][ T8813] loop3: detected capacity change from 0 to 256 [ 174.279765][ T8813] exfat: Deprecated parameter 'utf8' [ 174.281034][ T8813] exfat: Deprecated parameter 'namecase' [ 174.282155][ T8813] exfat: Deprecated parameter 'namecase' [ 174.283238][ T8813] exfat: Deprecated parameter 'namecase' [ 174.293647][ T8813] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 174.441977][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 174.829843][ T8840] loop9: detected capacity change from 0 to 32768 [ 174.847313][ T8840] JBD2: Ignoring recovery information on journal [ 174.863235][ T8840] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 174.903143][ T8563] ocfs2: Unmounting device (7,9) on (node local) [ 175.056059][ T4340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.058599][ T4340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.060497][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.063326][ T4340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.065042][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.071647][ T4340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.169323][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.179377][ T8852] rxe_eth0 speed is unknown, defaulting to 1000 [ 175.342425][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.416942][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.420760][ T8852] chnl_net:caif_netlink_parms(): no params data found [ 175.438174][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.439678][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.441446][ T8852] device bridge_slave_0 entered promiscuous mode [ 175.443714][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.445154][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.447140][ T8852] device bridge_slave_1 entered promiscuous mode [ 175.468341][ T8852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.471036][ T8852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.547486][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.552883][ T8852] team0: Port device team_slave_0 added [ 175.554108][ T8871] FAULT_INJECTION: forcing a failure. [ 175.554108][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 175.556614][ T8871] CPU: 0 PID: 8871 Comm: syz.8.1226 Not tainted syzkaller #0 [ 175.558000][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 175.559897][ T8871] Call trace: [ 175.560573][ T8871] dump_backtrace+0x1c4/0x1f0 [ 175.561515][ T8871] show_stack+0x2c/0x3c [ 175.562355][ T8871] __dump_stack+0x30/0x40 [ 175.563200][ T8871] dump_stack_lvl+0xf4/0x15c [ 175.564119][ T8871] dump_stack+0x1c/0x5c [ 175.564884][ T8871] should_fail_ex+0x3cc/0x524 [ 175.565714][ T8871] __should_failslab+0xc0/0x11c [ 175.566597][ T8871] should_failslab+0x10/0x28 [ 175.567424][ T8871] __kmem_cache_alloc_node+0x7c/0x318 [ 175.568402][ T8871] __kmalloc+0xc4/0x180 [ 175.569159][ T8871] sock_kmalloc+0xb0/0x158 [ 175.569972][ T8871] __ipv6_sock_mc_join+0x40c/0x71c [ 175.570885][ T8871] ipv6_sock_mc_join+0x38/0x4c [ 175.571727][ T8871] ipv6_mcast_join_leave+0x158/0x1e0 [ 175.572641][ T8871] do_ipv6_setsockopt+0x7c0/0x3174 [ 175.573565][ T8871] ipv6_setsockopt+0x6c/0x1a0 [ 175.574531][ T8871] udpv6_setsockopt+0xa8/0xc0 [ 175.575492][ T8871] sock_common_setsockopt+0xb0/0xcc [ 175.576578][ T8871] __sys_setsockopt+0x2fc/0x50c [ 175.577571][ T8871] __arm64_sys_setsockopt+0xc0/0xdc [ 175.578635][ T8871] invoke_syscall+0x98/0x290 [ 175.579547][ T8871] el0_svc_common+0x13c/0x258 [ 175.580412][ T8871] do_el0_svc+0x5c/0x134 [ 175.581144][ T8871] el0_svc+0x58/0x12c [ 175.581841][ T8871] el0t_64_sync_handler+0x84/0xf0 [ 175.582723][ T8871] el0t_64_sync+0x18c/0x190 [ 175.594137][ T8852] team0: Port device team_slave_1 added [ 175.599572][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.600829][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.605873][ T8852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.608937][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.610087][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.614473][ T8852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.633240][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 175.677094][ T8852] device hsr_slave_0 entered promiscuous mode [ 175.705501][ T8852] device hsr_slave_1 entered promiscuous mode [ 175.745252][ T8852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.746694][ T8852] Cannot create hsr debugfs directory [ 175.772875][ T8887] fuse: Unknown parameter 'grou00000000000000000000' [ 175.845778][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 176.500566][ T8914] loop9: detected capacity change from 0 to 764 [ 176.559903][ T4340] Bluetooth: hci1: unexpected subevent 0x04 length: 18 > 11 [ 176.590746][ T8929] syz.5.1239 uses obsolete (PF_INET,SOCK_PACKET) [ 177.062183][ T8933] block device autoloading is deprecated and will be removed. [ 177.117406][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 177.359399][ T8944] fuse: Unknown parameter 'grou00000000000000000000' [ 177.665263][ T8966] loop4: detected capacity change from 0 to 2048 [ 177.909333][ T8967] tipc: Enabling of bearer rejected, failed to enable media [ 178.326781][ T8966] loop4: p1 < > p4 [ 178.326781][ T8966] p4: [ 178.328887][ T8966] loop4: p4 size 722688 extends beyond EOD, truncated [ 178.333041][ T3938] loop4: p1 < > p4 [ 178.333041][ T3938] p4: [ 178.334603][ T3938] loop4: p4 size 722688 extends beyond EOD, truncated [ 178.640131][ T8980] loop4: detected capacity change from 0 to 1024 [ 178.668886][ T8980] EXT4-fs: quotafile must be on filesystem root [ 178.719422][ T6731] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.814951][ T8991] fuse: Unknown parameter 'grou00000000000000000000' [ 178.976834][ T8992] 9pnet_fd: Insufficient options for proto=fd [ 178.983196][ T8992] binder: 8979:8992 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 179.195355][ T4332] Bluetooth: hci6: command 0x0406 tx timeout [ 179.196883][ T4340] Bluetooth: hci5: command 0x0406 tx timeout [ 179.196898][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 179.300856][ T9013] loop5: detected capacity change from 0 to 64 [ 179.443446][ T4338] Bluetooth: hci5: unexpected subevent 0x04 length: 18 > 11 [ 179.531437][ T9033] loop8: detected capacity change from 0 to 2048 [ 179.543403][ T9035] fuse: Unknown parameter 'group_i00000000000000000000' [ 179.559946][ T9033] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 179.578810][ T7263] EXT4-fs (loop8): unmounting filesystem. [ 180.244219][ T39] device hsr_slave_0 left promiscuous mode [ 180.285458][ T39] device hsr_slave_1 left promiscuous mode [ 180.333002][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1270'. [ 180.355699][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.357272][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.359152][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.360581][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.362222][ T39] device bridge_slave_1 left promiscuous mode [ 180.363658][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.416223][ T39] device bridge_slave_0 left promiscuous mode [ 180.417509][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.457599][ T9116] fuse: Unknown parameter 'group_i00000000000000000000' [ 180.515531][ T39] device veth1_macvtap left promiscuous mode [ 180.516794][ T39] device veth0_macvtap left promiscuous mode [ 180.517886][ T39] device veth1_vlan left promiscuous mode [ 180.519616][ T39] device veth0_vlan left promiscuous mode [ 180.591119][ T9130] loop4: detected capacity change from 0 to 1024 [ 180.606747][ T9130] hfsplus: umask requires a value [ 180.607638][ T9130] hfsplus: unable to parse mount options [ 180.946179][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.948404][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.197128][ T9165] fuse: Unknown parameter 'group_i00000000000000000000' [ 181.275244][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 181.527545][ T39] bond1 (unregistering): Released all slaves [ 182.776737][ T9174] loop8: detected capacity change from 0 to 1024 [ 182.782713][ T9174] EXT4-fs: quotafile must be on filesystem root [ 183.030029][ T9176] 9pnet_fd: Insufficient options for proto=fd [ 183.038267][ T9176] binder: 9173:9176 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 183.355239][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 183.874998][ T4338] Bluetooth: hci2: unexpected subevent 0x04 length: 18 > 11 [ 184.617927][ T39] team0 (unregistering): Port device team_slave_1 removed [ 184.777332][ T39] team0 (unregistering): Port device team_slave_0 removed [ 184.935930][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.183700][ T9185] FAULT_INJECTION: forcing a failure. [ 185.183700][ T9185] name failslab, interval 1, probability 0, space 0, times 0 [ 185.186116][ T9185] CPU: 1 PID: 9185 Comm: syz.9.1290 Not tainted syzkaller #0 [ 185.187424][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 185.189181][ T9185] Call trace: [ 185.189793][ T9185] dump_backtrace+0x1c4/0x1f0 [ 185.190694][ T9185] show_stack+0x2c/0x3c [ 185.191488][ T9185] __dump_stack+0x30/0x40 [ 185.192303][ T9185] dump_stack_lvl+0xf4/0x15c [ 185.193163][ T9185] dump_stack+0x1c/0x5c [ 185.193950][ T9185] should_fail_ex+0x3cc/0x524 [ 185.194842][ T9185] __should_failslab+0xc0/0x11c [ 185.195748][ T9185] should_failslab+0x10/0x28 [ 185.196587][ T9185] __kmem_cache_alloc_node+0x7c/0x318 [ 185.197546][ T9185] kmalloc_trace+0x48/0x94 [ 185.198288][ T9185] ovl_encode_real_fh+0xd8/0x2fc [ 185.199129][ T9185] ovl_verify_set_fh+0x58/0x3a4 [ 185.199978][ T9185] ovl_get_indexdir+0x134/0x4e0 [ 185.200931][ T9185] ovl_fill_super+0x2b94/0x3938 [ 185.201892][ T9185] mount_nodev+0x68/0x108 [ 185.202804][ T9185] ovl_mount+0x3c/0x50 [ 185.203639][ T9185] legacy_get_tree+0xd8/0x174 [ 185.204517][ T9185] vfs_get_tree+0x90/0x278 [ 185.205300][ T9185] do_new_mount+0x228/0x804 [ 185.206092][ T9185] path_mount+0x5ac/0xe6c [ 185.206865][ T9185] __arm64_sys_mount+0x4a0/0x5a0 [ 185.207760][ T9185] invoke_syscall+0x98/0x290 [ 185.208546][ T9185] el0_svc_common+0x13c/0x258 [ 185.209376][ T9185] do_el0_svc+0x5c/0x134 [ 185.210106][ T9185] el0_svc+0x58/0x12c [ 185.210808][ T9185] el0t_64_sync_handler+0x84/0xf0 [ 185.211674][ T9185] el0t_64_sync+0x18c/0x190 [ 185.214358][ T9185] overlayfs: failed to verify origin (newroot/41, ino=236, err=-12) [ 185.215763][ T9185] overlayfs: failed to verify upper root origin [ 185.287627][ T9191] fuse: Unknown parameter 'group_id00000000000000000000' [ 185.435872][ T4338] Bluetooth: hci0: command 0x0406 tx timeout [ 186.597227][ T39] bond0 (unregistering): Released all slaves [ 187.044959][ T9219] sctp: [Deprecated]: syz.4.1299 (pid 9219) Use of int in max_burst socket option deprecated. [ 187.044959][ T9219] Use struct sctp_assoc_value instead [ 187.357649][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.359145][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.582435][ T9228] loop9: detected capacity change from 0 to 32768 [ 187.611370][ T9228] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 187.618179][ T9228] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 187.673295][ T8852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.679504][ T9228] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 187.683200][ T4414] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 187.684439][ T4414] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 187.711018][ T4414] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 26ms [ 187.725833][ T4414] gfs2: fsid=syz:syz.0: jid=0: Done [ 187.727228][ T9228] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 187.729290][ T8852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.757212][ T8852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.807764][ T8852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.884562][ T9257] fuse: Unknown parameter 'group_id00000000000000000000' [ 187.891652][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.919262][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.920914][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.930923][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.940917][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.942732][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.944534][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.945810][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.951945][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.953591][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.957596][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.963848][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.965016][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.985149][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.999684][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.006703][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.018794][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.020666][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.022598][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.024528][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.026963][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.030828][ T8852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.033412][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.063070][ T9271] loop4: detected capacity change from 0 to 1024 [ 188.067748][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.070093][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.071815][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.076904][ T9271] EXT4-fs: Ignoring removed bh option [ 188.136865][ T9271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.621659][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.623591][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.633134][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.653874][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.656582][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.666949][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.668746][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.674078][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.681429][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.694775][ T8852] device veth0_vlan entered promiscuous mode [ 188.706943][ T8852] device veth1_vlan entered promiscuous mode [ 188.730317][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.732248][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.734034][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.738915][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.744089][ T8852] device veth0_macvtap entered promiscuous mode [ 188.748238][ T8852] device veth1_macvtap entered promiscuous mode [ 188.754404][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.760393][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.762488][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.765688][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.767456][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.769373][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.771224][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.773280][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.780072][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.784126][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.787324][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.789069][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.790944][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.794477][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.849120][ T9311] sctp: [Deprecated]: syz.8.1312 (pid 9311) Use of int in max_burst socket option deprecated. [ 188.849120][ T9311] Use struct sctp_assoc_value instead [ 188.852575][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.013799][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.064010][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.119769][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.146724][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.148604][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.150362][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.152006][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.153711][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.156249][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.156484][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 189.158895][ T8852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.160506][ T8852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.161960][ T8852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.163435][ T8852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.167213][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.168972][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.218075][ T9314] fuse: Unknown parameter 'group_id00000000000000000000' [ 189.232011][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.236230][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.242537][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.249547][ T574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.251057][ T574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.252508][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.318078][ T9324] fuse: Unknown parameter 'grou00000000000000000000' [ 189.580451][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.583135][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.658634][ T9365] fuse: Bad value for 'user_id' [ 189.674856][ T9366] loop9: detected capacity change from 0 to 1024 [ 189.686301][ T9366] EXT4-fs: Ignoring removed bh option [ 189.717062][ T9371] fuse: Unknown parameter 'grou00000000000000000000' [ 189.726169][ T9366] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 189.765459][ T9377] loop8: detected capacity change from 0 to 512 [ 189.829235][ T9377] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 189.839055][ T9377] FAT-fs (loop8): Filesystem has been set read-only [ 190.472856][ T9404] rxe_eth0 speed is unknown, defaulting to 1000 [ 190.537659][ T8563] EXT4-fs (loop9): unmounting filesystem. [ 191.008201][ T9425] sctp: [Deprecated]: syz.5.1334 (pid 9425) Use of int in max_burst socket option deprecated. [ 191.008201][ T9425] Use struct sctp_assoc_value instead [ 191.054032][ T9430] fuse: Bad value for 'user_id' [ 191.090535][ T9435] fuse: Unknown parameter 'grou00000000000000000000' [ 191.118957][ T9439] fuse: Bad value for 'fd' [ 191.309169][ T9456] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.395043][ T9451] loop1: detected capacity change from 0 to 32768 [ 191.613425][ T9480] fuse: Bad value for 'user_id' [ 191.648408][ T9485] fuse: Unknown parameter 'group_i00000000000000000000' [ 191.652094][ T9486] fuse: Bad value for 'fd' [ 192.265950][ T9522] fuse: Bad value for 'fd' [ 192.280599][ T9525] fuse: Unknown parameter 'group_i00000000000000000000' [ 192.577658][ T9528] fuse: Bad value for 'fd' [ 192.642246][ T9535] loop1: detected capacity change from 0 to 512 [ 192.651563][ T9536] loop8: detected capacity change from 0 to 1024 [ 192.664753][ T9535] EXT4-fs: Ignoring removed orlov option [ 192.678087][ T9536] EXT4-fs: quotafile must be on filesystem root [ 192.679651][ T9535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.779879][ T9535] EXT4-fs (loop1): 1 truncate cleaned up [ 192.780896][ T9535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.784766][ T9535] EXT4-fs (loop1): shut down requested (2) [ 192.967331][ T9551] 9pnet_fd: Insufficient options for proto=fd [ 192.975256][ T9551] binder: 9531:9551 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 193.161928][ T8852] EXT4-fs (loop1): unmounting filesystem. [ 193.217772][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1370'. [ 193.220658][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1370'. [ 193.248977][ T9560] fuse: Unknown parameter 'group_i00000000000000000000' [ 193.332348][ T9573] fuse: Bad value for 'fd' [ 193.351157][ T9575] fuse: Bad value for 'fd' [ 193.594758][ T9594] loop4: detected capacity change from 0 to 2048 [ 193.605750][ T9594] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 193.650906][ T9607] fuse: Unknown parameter 'group_id00000000000000000000' [ 193.732878][ T9613] fuse: Bad value for 'fd' [ 193.775862][ T9615] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1388'. [ 193.906726][ T9628] device syzkaller0 entered promiscuous mode [ 193.987321][ T9637] loop8: detected capacity change from 0 to 256 [ 194.041985][ T9637] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 194.577738][ T9655] fuse: Unknown parameter 'group_id00000000000000000000' [ 194.616299][ T9662] loop5: detected capacity change from 0 to 512 [ 194.618083][ T9662] ext4: Unknown parameter 'prjquota.nouid32' [ 194.647351][ T9203] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.669902][ T9662] loop5: detected capacity change from 0 to 2048 [ 194.670478][ T9203] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.685810][ T9662] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 194.688873][ T9662] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 194.690736][ T9662] UDF-fs: Scanning with blocksize 512 failed [ 194.711328][ T9662] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 194.712792][ T9662] UDF-fs: Scanning with blocksize 1024 failed [ 194.726363][ T9662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 194.733152][ T9662] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 194.741785][ T9662] UDF-fs: Scanning with blocksize 2048 failed [ 194.748149][ T9662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 194.758825][ T9662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 194.765967][ T9662] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 194.770564][ T9662] UDF-fs: Scanning with blocksize 4096 failed [ 194.773933][ T9662] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 194.803052][ T9679] device syzkaller0 entered promiscuous mode [ 194.970175][ T9690] loop8: detected capacity change from 0 to 2048 [ 194.971774][ T9690] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 195.440155][ T9702] fuse: Unknown parameter 'group_id00000000000000000000' [ 196.056738][ T9723] device syzkaller0 entered promiscuous mode [ 197.976545][ T9735] fuse: Bad value for 'user_id' [ 197.999248][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.001973][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.324159][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1429'. [ 198.346069][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1429'. [ 198.398727][ T9756] loop4: detected capacity change from 0 to 512 [ 198.404506][ T9756] ext4: Unknown parameter 'prjquota.nouid32' [ 198.421727][ T9759] fuse: Bad value for 'user_id' [ 198.570079][ T9777] loop9: detected capacity change from 0 to 512 [ 198.571822][ T9777] EXT4-fs: Ignoring removed orlov option [ 198.572859][ T9777] EXT4-fs: Ignoring removed oldalloc option [ 198.979813][ T9777] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.188283][ T9777] EXT4-fs (loop9): failed to initialize system zone (-117) [ 199.189621][ T9777] EXT4-fs (loop9): mount failed [ 199.244399][ T9203] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.588339][ T9774] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.589801][ T9774] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.682240][ T9801] fuse: Bad value for 'user_id' [ 199.940917][ T9827] FAULT_INJECTION: forcing a failure. [ 199.940917][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 199.944448][ T9827] CPU: 1 PID: 9827 Comm: syz.9.1458 Not tainted syzkaller #0 [ 199.945771][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 199.947565][ T9827] Call trace: [ 199.948170][ T9827] dump_backtrace+0x1c4/0x1f0 [ 199.949090][ T9827] show_stack+0x2c/0x3c [ 199.949962][ T9827] __dump_stack+0x30/0x40 [ 199.950851][ T9827] dump_stack_lvl+0xf4/0x15c [ 199.951832][ T9827] dump_stack+0x1c/0x5c [ 199.952681][ T9827] should_fail_ex+0x3cc/0x524 [ 199.953598][ T9827] __should_failslab+0xc0/0x11c [ 199.954548][ T9827] should_failslab+0x10/0x28 [ 199.955449][ T9827] __kmem_cache_alloc_node+0x7c/0x318 [ 199.956466][ T9827] kmalloc_trace+0x48/0x94 [ 199.957259][ T9827] __arm64_sys_timerfd_create+0x144/0x298 [ 199.958349][ T9827] invoke_syscall+0x98/0x290 [ 199.959259][ T9827] el0_svc_common+0x13c/0x258 [ 199.960068][ T9827] do_el0_svc+0x5c/0x134 [ 199.960942][ T9827] el0_svc+0x58/0x12c [ 199.961749][ T9827] el0t_64_sync_handler+0x84/0xf0 [ 199.962748][ T9827] el0t_64_sync+0x18c/0x190 [ 200.053284][ T9829] fuse: Bad value for 'fd' [ 200.095661][ T9774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.116046][ T9774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.262298][ T9854] fuse: Bad value for 'fd' [ 200.285526][ T9856] binder: 9855:9856 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.287771][ T9856] binder: 9856 RLIMIT_NICE not set [ 200.290086][ T9856] binder: BINDER_SET_CONTEXT_MGR already set [ 200.291240][ T9856] binder: 9855:9856 ioctl 4018620d 0 returned -16 [ 200.292497][ T9856] binder: 9855:9856 got transaction to invalid handle, 1 [ 200.293728][ T9856] binder: 9856:9855 cannot find target node [ 200.294938][ T9856] binder: 9855:9856 transaction call to 0:0 failed 12/29201/-22, size 112-24 line 3062 [ 200.303806][ T4531] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.341622][ T9863] FAULT_INJECTION: forcing a failure. [ 200.341622][ T9863] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.343730][ T9863] CPU: 0 PID: 9863 Comm: syz.9.1474 Not tainted syzkaller #0 [ 200.345143][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 200.347054][ T9863] Call trace: [ 200.347707][ T9863] dump_backtrace+0x1c4/0x1f0 [ 200.348649][ T9863] show_stack+0x2c/0x3c [ 200.349425][ T9863] __dump_stack+0x30/0x40 [ 200.350212][ T9863] dump_stack_lvl+0xf4/0x15c [ 200.351054][ T9863] dump_stack+0x1c/0x5c [ 200.351816][ T9863] should_fail_ex+0x3cc/0x524 [ 200.352638][ T9863] should_fail+0x14/0x24 [ 200.353341][ T9863] get_futex_key+0x904/0xfb0 [ 200.354105][ T9863] futex_wait_setup+0xbc/0x320 [ 200.354911][ T9863] futex_wait+0x164/0x424 [ 200.355647][ T9863] do_futex+0x2e8/0x340 [ 200.356329][ T9863] __arm64_sys_futex+0x390/0x414 [ 200.357181][ T9863] invoke_syscall+0x98/0x290 [ 200.357983][ T9863] el0_svc_common+0x13c/0x258 [ 200.358777][ T9863] do_el0_svc+0x5c/0x134 [ 200.359506][ T9863] el0_svc+0x58/0x12c [ 200.360188][ T9863] el0t_64_sync_handler+0x84/0xf0 [ 200.361035][ T9863] el0t_64_sync+0x18c/0x190 [ 200.387237][ T9866] fuse: Bad value for 'fd' [ 200.452414][ T9774] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.454283][ T9774] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.457355][ T9774] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.459060][ T9774] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.505800][ T9883] fuse: Bad value for 'fd' [ 200.542720][ T9885] block device autoloading is deprecated and will be removed. [ 200.551503][ T9885] md: invalid raid superblock magic on ram2 [ 200.552716][ T9885] md: ram2 does not have a valid v0.0 superblock, not importing! [ 200.554106][ T9885] md: md_import_device returned -22 [ 200.556167][ T9885] md: invalid raid superblock magic on ram3 [ 200.557317][ T9885] md: ram3 does not have a valid v0.0 superblock, not importing! [ 200.558801][ T9885] md: md_import_device returned -22 [ 200.567359][ T9889] FAULT_INJECTION: forcing a failure. [ 200.567359][ T9889] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.569543][ T9889] CPU: 1 PID: 9889 Comm: syz.9.1487 Not tainted syzkaller #0 [ 200.570957][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 200.572907][ T9889] Call trace: [ 200.573550][ T9889] dump_backtrace+0x1c4/0x1f0 [ 200.574498][ T9889] show_stack+0x2c/0x3c [ 200.575331][ T9889] __dump_stack+0x30/0x40 [ 200.576217][ T9889] dump_stack_lvl+0xf4/0x15c [ 200.577132][ T9889] dump_stack+0x1c/0x5c [ 200.577969][ T9889] should_fail_ex+0x3cc/0x524 [ 200.578884][ T9889] should_fail+0x14/0x24 [ 200.579649][ T9889] get_futex_key+0x904/0xfb0 [ 200.580442][ T9889] futex_wait_setup+0xbc/0x320 [ 200.581324][ T9889] futex_wait+0x164/0x424 [ 200.582209][ T9889] do_futex+0x2e8/0x340 [ 200.583058][ T9889] __arm64_sys_futex+0x390/0x414 [ 200.584229][ T9889] invoke_syscall+0x98/0x290 [ 200.585095][ T9889] el0_svc_common+0x13c/0x258 [ 200.585950][ T9889] do_el0_svc+0x5c/0x134 [ 200.586748][ T9889] el0_svc+0x58/0x12c [ 200.587459][ T9889] el0t_64_sync_handler+0x84/0xf0 [ 200.588354][ T9889] el0t_64_sync+0x18c/0x190 [ 200.589136][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.608612][ T9891] fuse: Bad value for 'fd' [ 200.679636][ T9902] fuse: Bad value for 'fd' [ 200.708996][ T9907] fuse: Bad value for 'fd' [ 200.736216][ T9910] device syzkaller0 entered promiscuous mode [ 200.745072][ T9916] FAULT_INJECTION: forcing a failure. [ 200.745072][ T9916] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.751677][ T9916] CPU: 1 PID: 9916 Comm: syz.4.1500 Not tainted syzkaller #0 [ 200.753022][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 200.754880][ T9916] Call trace: [ 200.755530][ T9916] dump_backtrace+0x1c4/0x1f0 [ 200.756361][ T9916] show_stack+0x2c/0x3c [ 200.757126][ T9916] __dump_stack+0x30/0x40 [ 200.757905][ T9916] dump_stack_lvl+0xf4/0x15c [ 200.758721][ T9916] dump_stack+0x1c/0x5c [ 200.759436][ T9916] should_fail_ex+0x3cc/0x524 [ 200.760256][ T9916] should_fail+0x14/0x24 [ 200.760966][ T9916] get_futex_key+0x904/0xfb0 [ 200.761919][ T9916] futex_wait_setup+0xbc/0x320 [ 200.762909][ T9916] futex_wait+0x164/0x424 [ 200.763818][ T9916] do_futex+0x2e8/0x340 [ 200.764700][ T9916] __arm64_sys_futex+0x390/0x414 [ 200.765672][ T9916] invoke_syscall+0x98/0x290 [ 200.766610][ T9916] el0_svc_common+0x13c/0x258 [ 200.767435][ T9916] do_el0_svc+0x5c/0x134 [ 200.768236][ T9916] el0_svc+0x58/0x12c [ 200.768993][ T9916] el0t_64_sync_handler+0x84/0xf0 [ 200.769893][ T9916] el0t_64_sync+0x18c/0x190 [ 200.786461][ T9920] fuse: Bad value for 'fd' [ 201.288416][ T9940] device syzkaller0 entered promiscuous mode [ 201.305001][ T9942] fuse: Bad value for 'fd' [ 201.409089][ T9949] fuse: Bad value for 'fd' [ 201.787548][ T9955] fuse: Bad value for 'fd' [ 201.805347][ T9957] FAULT_INJECTION: forcing a failure. [ 201.805347][ T9957] name failslab, interval 1, probability 0, space 0, times 0 [ 201.807486][ T9957] CPU: 0 PID: 9957 Comm: syz.5.1515 Not tainted syzkaller #0 [ 201.808723][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 201.810658][ T9957] Call trace: [ 201.811273][ T9957] dump_backtrace+0x1c4/0x1f0 [ 201.812106][ T9957] show_stack+0x2c/0x3c [ 201.812878][ T9957] __dump_stack+0x30/0x40 [ 201.813658][ T9957] dump_stack_lvl+0xf4/0x15c [ 201.814492][ T9957] dump_stack+0x1c/0x5c [ 201.815203][ T9957] should_fail_ex+0x3cc/0x524 [ 201.816028][ T9957] __should_failslab+0xc0/0x11c [ 201.816894][ T9957] should_failslab+0x10/0x28 [ 201.817760][ T9957] __kmem_cache_alloc_node+0x7c/0x318 [ 201.818734][ T9957] kmalloc_trace+0x48/0x94 [ 201.819541][ T9957] show_partition_start+0x7c/0x180 [ 201.820476][ T9957] seq_read_iter+0x358/0xc24 [ 201.821291][ T9957] proc_reg_read_iter+0x180/0x2a8 [ 201.822217][ T9957] vfs_read+0x3cc/0x7b8 [ 201.822955][ T9957] __arm64_sys_pread64+0x178/0x210 [ 201.823845][ T9957] invoke_syscall+0x98/0x290 [ 201.824686][ T9957] el0_svc_common+0x13c/0x258 [ 201.825510][ T9957] do_el0_svc+0x5c/0x134 [ 201.826268][ T9957] el0_svc+0x58/0x12c [ 201.826956][ T9957] el0t_64_sync_handler+0x84/0xf0 [ 201.827795][ T9957] el0t_64_sync+0x18c/0x190 [ 202.545822][ T9973] fuse: Bad value for 'fd' [ 202.563640][ T9975] fuse: Bad value for 'fd' [ 202.580198][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.582557][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.593283][ T9981] loop4: detected capacity change from 0 to 128 [ 202.607565][ T9981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.696740][ T9988] device syzkaller0 entered promiscuous mode [ 202.708207][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.710787][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.001863][ T9995] fuse: Bad value for 'fd' [ 203.171148][T10006] fuse: Invalid rootmode [ 203.251334][ T4498] Bluetooth: hci3: Frame reassembly failed (-84) [ 203.626064][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 203.749326][T10021] fuse: Bad value for 'fd' [ 203.758468][T10023] device syzkaller0 entered promiscuous mode [ 204.170991][T10029] jffs2: notice: (10029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.247985][T10034] fuse: Invalid rootmode [ 204.492143][T10059] device syzkaller0 entered promiscuous mode [ 204.567107][T10055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.629975][T10067] fuse: Invalid rootmode [ 204.746782][T10078] bonding: unable to delete non-existent b [ 205.176706][T10084] loop1: detected capacity change from 0 to 32768 [ 205.182792][T10084] (syz.1.1565,10084,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.186522][T10084] (syz.1.1565,10084,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.193802][T10084] JBD2: Ignoring recovery information on journal [ 205.207164][T10084] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 205.274120][ T8852] ocfs2: Unmounting device (7,1) on (node local) [ 205.275669][ T4338] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 205.275754][ T48] Bluetooth: hci3: command 0x1003 tx timeout [ 205.295865][T10095] fuse: Bad value for 'rootmode' [ 205.346530][T10099] FAULT_INJECTION: forcing a failure. [ 205.346530][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 205.362939][T10099] CPU: 0 PID: 10099 Comm: syz.1.1571 Not tainted syzkaller #0 [ 205.364304][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 205.366375][T10099] Call trace: [ 205.367041][T10099] dump_backtrace+0x1c4/0x1f0 [ 205.368058][T10099] show_stack+0x2c/0x3c [ 205.368932][T10099] __dump_stack+0x30/0x40 [ 205.369828][T10099] dump_stack_lvl+0xf4/0x15c [ 205.370790][T10099] dump_stack+0x1c/0x5c [ 205.371658][T10099] should_fail_ex+0x3cc/0x524 [ 205.372617][T10099] __should_failslab+0xc0/0x11c [ 205.373568][T10099] should_failslab+0x10/0x28 [ 205.374474][T10099] kmem_cache_alloc+0x88/0x310 [ 205.375434][T10099] vm_area_dup+0x30/0x1c4 [ 205.376266][T10099] __split_vma+0xc8/0x44c [ 205.377101][T10099] split_vma+0xa0/0xf8 [ 205.377861][T10099] mlock_fixup+0x3d4/0x480 [ 205.378675][T10099] apply_vma_lock_flags+0x208/0x33c [ 205.379638][T10099] do_mlock+0x3cc/0x514 [ 205.380355][T10099] __arm64_sys_mlock+0x60/0x78 [ 205.381218][T10099] invoke_syscall+0x98/0x290 [ 205.382049][T10099] el0_svc_common+0x13c/0x258 [ 205.382865][T10099] do_el0_svc+0x5c/0x134 [ 205.383598][T10099] el0_svc+0x58/0x12c [ 205.384314][T10099] el0t_64_sync_handler+0x84/0xf0 [ 205.385218][T10099] el0t_64_sync+0x18c/0x190 [ 205.886271][T10120] device syzkaller0 entered promiscuous mode [ 205.934290][T10125] fuse: Bad value for 'rootmode' [ 205.986691][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.998089][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.001626][T10130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1582'. [ 206.003998][T10130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1582'. [ 206.066372][T10132] tipc: Enabling of bearer rejected, failed to enable media [ 206.101934][T10140] 9pnet_fd: Insufficient options for proto=fd [ 206.579925][T10156] fuse: Bad value for 'rootmode' [ 206.675810][T10163] device syzkaller0 entered promiscuous mode [ 206.777037][T10165] loop9: detected capacity change from 0 to 512 [ 206.814453][T10165] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 206.834186][T10165] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 206.854575][T10165] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 206.881202][ T8563] EXT4-fs (loop9): unmounting filesystem. [ 207.025448][T10183] fuse: Unknown parameter 'use00000000000000000000' [ 207.550217][T10201] device syzkaller0 entered promiscuous mode [ 207.563205][T10201] [ 207.563629][T10201] ============================================ [ 207.564673][T10201] WARNING: possible recursive locking detected [ 207.565936][T10201] syzkaller #0 Not tainted [ 207.566811][T10201] -------------------------------------------- [ 207.567837][T10201] syz.9.1611/10201 is trying to acquire lock: [ 207.568852][T10201] ffff0000fa418108 (&sch->root_lock_key#861){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 207.570570][T10201] [ 207.570570][T10201] but task is already holding lock: [ 207.571765][T10201] ffff0000fa418108 (&sch->root_lock_key#861){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 207.573535][T10201] [ 207.573535][T10201] other info that might help us debug this: [ 207.574939][T10201] Possible unsafe locking scenario: [ 207.574939][T10201] [ 207.576224][T10201] CPU0 [ 207.576792][T10201] ---- [ 207.577341][T10201] lock(&sch->root_lock_key#861); [ 207.578200][T10201] lock(&sch->root_lock_key#861); [ 207.579088][T10201] [ 207.579088][T10201] *** DEADLOCK *** [ 207.579088][T10201] [ 207.580632][T10201] May be due to missing lock nesting notation [ 207.580632][T10201] [ 207.582253][T10201] 3 locks held by syz.9.1611/10201: [ 207.583278][T10201] #0: ffff8000165f7560 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 207.585273][T10201] #1: ffff0000fa418108 (&sch->root_lock_key#861){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 207.587354][T10201] #2: ffff8000165f7560 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 207.589458][T10201] [ 207.589458][T10201] stack backtrace: [ 207.590500][T10201] CPU: 1 PID: 10201 Comm: syz.9.1611 Not tainted syzkaller #0 [ 207.591863][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 207.593703][T10201] Call trace: [ 207.594285][T10201] dump_backtrace+0x1c4/0x1f0 [ 207.595152][T10201] show_stack+0x2c/0x3c [ 207.595846][T10201] __dump_stack+0x30/0x40 [ 207.596595][T10201] dump_stack_lvl+0xf4/0x15c [ 207.597387][T10201] dump_stack+0x1c/0x5c [ 207.598101][T10201] print_deadlock_bug+0x454/0x5c8 [ 207.598946][T10201] __lock_acquire+0x6020/0x7280 [ 207.599755][T10201] lock_acquire+0x210/0x63c [ 207.600534][T10201] _raw_spin_lock+0x54/0x6c [ 207.601304][T10201] __dev_queue_xmit+0x998/0x3154 [ 207.602128][T10201] dev_queue_xmit+0x24/0x34 [ 207.602897][T10201] sch_frag_xmit_hook+0x228/0xf34 [ 207.603752][T10201] tcf_dev_queue_xmit+0x4c/0x50 [ 207.604588][T10201] tcf_mirred_act+0xa90/0x1394 [ 207.605401][T10201] tcf_action_exec+0x164/0x544 [ 207.606254][T10201] basic_classify+0x1ec/0x314 [ 207.607100][T10201] tcf_classify+0x1b4/0x9d4 [ 207.607872][T10201] qfq_enqueue+0x288/0xf74 [ 207.608638][T10201] dev_qdisc_enqueue+0x5c/0x388 [ 207.609477][T10201] __dev_queue_xmit+0xaf0/0x3154 [ 207.610383][T10201] dev_queue_xmit+0x24/0x34 [ 207.611187][T10201] packet_sendmsg+0x2de8/0x3d64 [ 207.612057][T10201] ____sys_sendmsg+0x588/0x90c [ 207.612883][T10201] __sys_sendmsg+0x288/0x374 [ 207.613681][T10201] __arm64_sys_sendmsg+0x80/0x94 [ 207.614539][T10201] invoke_syscall+0x98/0x290 [ 207.615378][T10201] el0_svc_common+0x13c/0x258 [ 207.616202][T10201] do_el0_svc+0x5c/0x134 [ 207.616957][T10201] el0_svc+0x58/0x12c [ 207.617657][T10201] el0t_64_sync_handler+0x84/0xf0 [ 207.618520][T10201] el0t_64_sync+0x18c/0x190 [ 207.619325][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.632282][T10210] fuse: Unknown parameter 'use00000000000000000000'