last executing test programs: 31.981877482s ago: executing program 1 (id=36): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1/file1\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@errors_remount}, {@inode_readahead_blks}, {@i_version}, {@minixdf}, {@test_dummy_encryption_v1}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}, 0x6, 0xbb2, &(0x7f0000000180)="$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") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000d80)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x5c76b000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000dc0)=0x5, 0x4) (async) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40020, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newtfilter={0x8c, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbb9, {0x0, 0x0, 0x0, r5, {0xfff2, 0xe}, {}, {0x10, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_EMATCHES={0x58, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0x4, 0x8, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xe}, {0x9, 0xce28, 0x7fff, 0x3, 0xe, 0x2, 0x1}}}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="440000003e0007010000000005000000047c0000040063800c0009000000000000000000200002"], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) (async) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000e00), &(0x7f0000000e40)) r8 = socket(0x1d, 0x2, 0x6) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000d80)=0x840, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000e00)={'vxcan1\x00', 0x0}) bind(r8, &(0x7f0000000e80)=@can={0x1d, r9, 0x1, 0x2}, 0x10) read(r8, &(0x7f0000000f00)=""/100, 0x64) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000f80)=0x7, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, r12, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) 31.690406076s ago: executing program 1 (id=42): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000940)='X', 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000a00)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f8900a6ff200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 31.608438226s ago: executing program 1 (id=46): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000200000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008"], 0x104}}, 0x0) 31.046900294s ago: executing program 1 (id=48): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f0000000200)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000700)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f00000007c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000008000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140020000050900010073797a310000000030000000050a010200000000000000bc5d39b44200010020000c00024000000000000000010900010073797a31000000000400048014000000020a0103000000000000000000000006140000001100010000000000000000000000000a"], 0xcc}}, 0x0) 30.877119509s ago: executing program 1 (id=52): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x80, &(0x7f0000000080)=ANY=[], 0x4, 0x20d, &(0x7f00000000c0)="$eJzsVT9rFEEU/73dud2suSJgZ+tB0mi8s7G2Mb1fwOOyxuDGP9kTvSOQ0yaNNmLlFzjwS9gI2luICDZaKCgYsYroysy8mZvsrmTBP9fMD5b3/72Z2XlvruQ3859Fsftjf2eAJSgQ2nhDBAFgmbTuINL0K9OC8UFoucv6J0zfM81p/PK+ZsdX+1mWbuejMpMAmGliEFDx+R1DAqjazj99cLxZfJYWcUnz4t5hH0KjPHNghqE+2aopbMExxXU+HIty5u7Fue+rKZNUFm+Yb233SmXZx79dvVVz6/LRmOiIu34EswCrAazpe7v6m8rM64e6cq1PiLpO+79M8gfH0odp86DWJwLMhT9kyhHwGLpwN8Bnkm6v9ncG8i9dklPs0VSZ1/VnWkJOICU840kndScEMAEoRKF+sswj2HcZwOpw68ZqPhqf2tzqb6Qb6bWeHIHPF7kPi11gM0vPkFqGDleLE7CQfZo4drmntzP7BA7IWRpm2yc3pRnOKyedwATqUEysk0Pi8SLnkPVjVt7KEzPycVtd8R4fUAcym8BlubU1EEIWusJdEA4QYEEZTg+uZ+t7IJAJm0LYHN13aFmhx4IslJ49Z7e/x7TDdI3pVNh6CubtMm+SmABf8ImllQiIcKc/HG6rx0tzUhfZDErXW7KVA65qXkNTrBOjIY41dfTw8PDw8PDw+Ef4FQAA///CCjjS") 30.45833654s ago: executing program 1 (id=63): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000c16, &(0x7f0000000140)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x80, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000680)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) 30.281465818s ago: executing program 32 (id=63): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000c16, &(0x7f0000000140)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x80, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000680)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) 24.182693902s ago: executing program 2 (id=182): ioctl$FE_GET_FRONTEND(0xffffffffffffffff, 0x80246f4d, &(0x7f0000000100)={0x0, 0x0, @ofdm}) 24.099002391s ago: executing program 2 (id=185): write(0xffffffffffffffff, &(0x7f00000004c0)='1', 0x1) 24.07479405s ago: executing program 2 (id=186): mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) getsockname$netlink(r0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000b40)={0x1, 0x100000001, 0x2, 0x4000000000003, 0x4, 0x888, 0x0, 0x9}, 0x0, &(0x7f0000000b80)={0x0, 0x989680}, 0x0) 24.004354314s ago: executing program 2 (id=189): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000640)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000006c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={0x1, 0x3}, &(0x7f0000000600)=0x8) 23.914262737s ago: executing program 2 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='270', 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/arp\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/122, 0x7a}], 0x1, 0x4000ffe, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xf) 23.897821258s ago: executing program 2 (id=193): syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) close(0x3) 8.809699461s ago: executing program 33 (id=193): syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) close(0x3) 1.551717546s ago: executing program 5 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 1.379699082s ago: executing program 0 (id=766): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x1, 0x3d, &(0x7f0000000e00)="806b6aa9b0e4b83e6bff41", 0xb) 1.334783888s ago: executing program 0 (id=768): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000740)="000102030405060708090a0b0c0d0e0f", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="000000edba513108d9e7d30500000000007f000000", 0x15}], 0x1}, 0x24044005) read$alg(r1, &(0x7f0000000fc0)=""/128, 0x80) 1.252186883s ago: executing program 0 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x34}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x2, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x10) 1.140576557s ago: executing program 0 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f000000a040)={&(0x7f000000a080)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a3c0)={0x0, 0x0, &(0x7f000000a400)={&(0x7f000000a440)=@delqdisc={0x24, 0x25, 0x9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 1.013174253s ago: executing program 4 (id=777): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000580)="450000280000400040063ccd7f0000027f00000130390015000000010000000a5010100071780000", 0x28, 0x0, 0x0, 0x0) 1.008822764s ago: executing program 0 (id=778): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) rseq(&(0x7f0000000340), 0x20, 0x20000000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 886.563159ms ago: executing program 4 (id=782): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='3', 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000380)={0xa30000, 0x1, 0x4, r0, 0x0, &(0x7f00000003c0)={0x9c0001, 0x7, '\x00', @p_u8=0x0}}) 798.710124ms ago: executing program 4 (id=784): syz_mount_image$ext4(&(0x7f000000a2c0)='ext4\x00', &(0x7f000000a300)='./file1\x00', 0x10, &(0x7f000000a340)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f000000a380)="$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") open(&(0x7f000000ab80)='./file1\x00', 0x2c1c3, 0x21) open(&(0x7f000000abc0)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f000000ac00)=@loop={'/dev/loop', 0x0}, &(0x7f000000ac40)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f000000ac80)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000009b40)='./file1\x00', 0x42, 0x0) 700.402437ms ago: executing program 3 (id=786): r0 = syz_open_dev$mtd(&(0x7f0000000980), 0x0, 0x2) ioctl$BLKPG(r0, 0x40084d0c, &(0x7f00000009c0)={0x1, 0x0, 0x0, 0x0}) 652.189241ms ago: executing program 5 (id=787): prlimit64(0x0, 0xe, &(0x7f00000081c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008200)=0x7) unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001a80)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2", 0x50}], 0x1}, 0x0) 651.62465ms ago: executing program 6 (id=788): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000e80)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000ec0)="550000001100290404850698fae99e00020000000000", 0x16) 578.851728ms ago: executing program 3 (id=789): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./drv/unbind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x4048010) 578.597956ms ago: executing program 4 (id=790): io_setup(0x22, &(0x7f0000000000)=0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fffffff}}, 0x24) io_submit(r0, 0x1, &(0x7f00000002c0)=[0x0]) 540.65483ms ago: executing program 6 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./trace\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/instances/inst1\x00', 0x1ff) 464.38427ms ago: executing program 3 (id=792): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @loopback, @multicast1}, 0xc) 401.760244ms ago: executing program 5 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./debug/x86/boot_params/version\x00', 0x0, 0x0) 367.84127ms ago: executing program 6 (id=794): mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00i'], 0x0}, 0x94) 342.831608ms ago: executing program 3 (id=795): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ec0)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x200000000c00, 0x0, 0x0, 0x200000000c30, 0x200000000c60], 0x0, 0x0, &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x0, 0xdada, 'batadv_slave_0\x00', 'batadv_slave_0\x00', 'veth1_to_batadv\x00', 'bond_slave_1\x00', @remote, [0x0, 0xff], @random="7ccdbcc0a07a", [0x0, 0xff, 0x0, 0xff], 0x0, 0xa0, 0xa0, 0xd8, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xaa, 0x2, 0x1, 0x6}}}], [], @snat={'snat\x00', 0x10, {{@broadcast, 0x13}}}}, {0x1d, 0x40, 0x17, 'dvmrp0\x00', 'macvlan0\x00', 'tunl0\x00', 'dummy0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}]}, 0x288) 342.347974ms ago: executing program 4 (id=796): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000240)) 321.756187ms ago: executing program 5 (id=797): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 316.018091ms ago: executing program 0 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 262.182574ms ago: executing program 4 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000480)=0x3fa, 0x4) write(r0, &(0x7f00000004c0)='3', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000840), 0xffffffffffffff94, 0xb, 0x0, 0x0) 258.379965ms ago: executing program 6 (id=800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x26, 0x0, @val=@netkit}, 0x1c) 241.453164ms ago: executing program 3 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x4000811}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x800}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 204.339232ms ago: executing program 5 (id=802): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000e80)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000ec0)="550000001100290404850698fae99e00020000000000", 0x16) 154.867843ms ago: executing program 6 (id=803): prlimit64(0x0, 0xe, &(0x7f00000081c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008200)=0x7) unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001a80)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2", 0x50}], 0x1}, 0x0) 154.394851ms ago: executing program 3 (id=804): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) shutdown(r0, 0x1) 99.886574ms ago: executing program 5 (id=805): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r0], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000026c0)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) write(r1, &(0x7f00000006c0)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 28.915523][ T4695] cgroup: Unknown subsys name 'net' [ 29.034642][ T4695] cgroup: Unknown subsys name 'cpuset' [ 29.035909][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.205662][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.001603][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.001835][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.002143][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.002301][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.002963][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.002996][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.003412][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.003828][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.003944][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.004181][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.004345][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.004543][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.004681][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.005408][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.005676][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.005816][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.006205][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.006362][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.015841][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.016345][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.017106][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.017229][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.023523][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.024168][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.026192][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.210125][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.210720][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.212594][ T4712] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.213154][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.220007][ T4716] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.226684][ T4711] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.236044][ T4708] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.284928][ T4707] infiniband rxe0: set active [ 30.285109][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.285166][ T4707] infiniband rxe0: added rxe_eth0 [ 30.303497][ T4707] RDS/IB: rxe0: added [ 30.303566][ T4707] smc: adding ib device rxe0 with port count 1 [ 30.303588][ T4707] smc: ib device rxe0 port 1 has no pnetid [ 30.326175][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.352335][ T4697] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.407008][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.476605][ T866] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.479377][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.512270][ T4697] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.541649][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.562851][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.562886][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.562944][ T4712] bridge_slave_0: entered allmulticast mode [ 30.568320][ T4712] bridge_slave_0: entered promiscuous mode [ 30.587871][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.587923][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.587984][ T4712] bridge_slave_1: entered allmulticast mode [ 30.588420][ T4712] bridge_slave_1: entered promiscuous mode [ 30.596345][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.596375][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.596434][ T4716] bridge_slave_0: entered allmulticast mode [ 30.598808][ T4716] bridge_slave_0: entered promiscuous mode [ 30.599956][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.599979][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.600027][ T4716] bridge_slave_1: entered allmulticast mode [ 30.600441][ T4716] bridge_slave_1: entered promiscuous mode [ 30.607680][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.608559][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.623034][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.623095][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.623144][ T4708] bridge_slave_0: entered allmulticast mode [ 30.628082][ T4708] bridge_slave_0: entered promiscuous mode [ 30.632638][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.632663][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.632752][ T4708] bridge_slave_1: entered allmulticast mode [ 30.633136][ T4708] bridge_slave_1: entered promiscuous mode [ 30.642788][ T4716] team0: Port device team_slave_0 added [ 30.644143][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.645058][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.657520][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.657615][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.657673][ T4711] bridge_slave_0: entered allmulticast mode [ 30.658105][ T4711] bridge_slave_0: entered promiscuous mode [ 30.665009][ T4716] team0: Port device team_slave_1 added [ 30.665635][ T4712] team0: Port device team_slave_0 added [ 30.666600][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.667141][ T4712] team0: Port device team_slave_1 added [ 30.667743][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.676405][ T4707] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.682643][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.682670][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.682727][ T4711] bridge_slave_1: entered allmulticast mode [ 30.683140][ T4711] bridge_slave_1: entered promiscuous mode [ 30.683921][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.683929][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.683940][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.686930][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.686938][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.686951][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.690792][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.692027][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.730412][ T4711] team0: Port device team_slave_0 added [ 30.731217][ T4708] team0: Port device team_slave_0 added [ 30.731972][ T4708] team0: Port device team_slave_1 added [ 30.735724][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.735732][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.735743][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.736271][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.736278][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.736291][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.745838][ T4711] team0: Port device team_slave_1 added [ 30.757433][ T4712] hsr_slave_0: entered promiscuous mode [ 30.757772][ T4712] hsr_slave_1: entered promiscuous mode [ 30.762337][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.762345][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.762360][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.762922][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.762932][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.762949][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.764281][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.764295][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.764307][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.775577][ T4716] hsr_slave_0: entered promiscuous mode [ 30.775880][ T4716] hsr_slave_1: entered promiscuous mode [ 30.776080][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.776118][ T4716] Cannot create hsr debugfs directory [ 30.802366][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.802377][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.802392][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.825235][ T4711] hsr_slave_0: entered promiscuous mode [ 30.825523][ T4711] hsr_slave_1: entered promiscuous mode [ 30.825708][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.825718][ T4711] Cannot create hsr debugfs directory [ 30.861034][ T4708] hsr_slave_0: entered promiscuous mode [ 30.861345][ T4708] hsr_slave_1: entered promiscuous mode [ 30.861569][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.861579][ T4708] Cannot create hsr debugfs directory [ 30.949482][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.951731][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.960389][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.961484][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.961797][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.962822][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.966875][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.966924][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.967012][ T4707] bridge_slave_0: entered allmulticast mode [ 30.967426][ T4707] bridge_slave_0: entered promiscuous mode [ 30.968214][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.968234][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.968320][ T4707] bridge_slave_1: entered allmulticast mode [ 30.968742][ T4707] bridge_slave_1: entered promiscuous mode [ 30.985267][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.986229][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.988250][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.999906][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.012048][ T4707] team0: Port device team_slave_0 added [ 31.017282][ T4707] team0: Port device team_slave_1 added [ 31.024379][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.025334][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.025965][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.027214][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.030536][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.030546][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.030559][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.031104][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.031111][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.031123][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.031885][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.031916][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.032052][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.032080][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.043890][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.049068][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.049231][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.050829][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.051115][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.052299][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.066428][ T4707] hsr_slave_0: entered promiscuous mode [ 31.066729][ T4707] hsr_slave_1: entered promiscuous mode [ 31.066906][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 31.066915][ T4707] Cannot create hsr debugfs directory [ 31.096203][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.097491][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.105888][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.107352][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.107637][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.108725][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.120829][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.120853][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.120922][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.120967][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.124542][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.149011][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.149044][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.149120][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.149148][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.153261][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.161340][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.176144][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.176748][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.178462][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.179531][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.191323][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.191336][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.199992][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.208315][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.209563][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.209868][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.210706][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.216468][ T1803] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.216515][ T1803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.216902][ T1803] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.216920][ T1803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.226907][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.226919][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.231851][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.232832][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.233129][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.238376][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.290313][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.300492][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.305398][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.305791][ T4707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.306893][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.307217][ T4707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.308195][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.322221][ T4707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.326171][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.326469][ T4707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.327360][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.330283][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.343159][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.343186][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.344854][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.344884][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.358823][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.381537][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.381562][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.382247][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.382267][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.407224][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.431408][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.447078][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.455465][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.455492][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.456103][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.456122][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.461147][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.503541][ T4712] veth0_vlan: entered promiscuous mode [ 31.514308][ T4712] veth1_vlan: entered promiscuous mode [ 31.541109][ T4712] veth0_macvtap: entered promiscuous mode [ 31.542470][ T4712] veth1_macvtap: entered promiscuous mode [ 31.551586][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.561593][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.563985][ T1803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.564066][ T1803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.564122][ T1803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.564177][ T1803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.601938][ T4711] veth0_vlan: entered promiscuous mode [ 31.605432][ T4711] veth1_vlan: entered promiscuous mode [ 31.611859][ T4711] veth0_macvtap: entered promiscuous mode [ 31.612923][ T4711] veth1_macvtap: entered promiscuous mode [ 31.640605][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.641133][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.662361][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.676956][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.676970][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.698758][ T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.698769][ T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.702689][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.710299][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.725496][ T4707] veth0_vlan: entered promiscuous mode [ 31.725903][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726888][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.727868][ T4707] veth1_vlan: entered promiscuous mode [ 31.733104][ T4708] veth0_vlan: entered promiscuous mode [ 31.737121][ T4712] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.739251][ T4716] veth0_vlan: entered promiscuous mode [ 31.741227][ T4716] veth1_vlan: entered promiscuous mode [ 31.743483][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.746752][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.760314][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.760323][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.762807][ T4708] veth1_vlan: entered promiscuous mode [ 31.771272][ T4716] veth0_macvtap: entered promiscuous mode [ 31.772353][ T4716] veth1_macvtap: entered promiscuous mode [ 31.779923][ T4911] loop0: detected capacity change from 0 to 1024 [ 31.780594][ T4911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.780834][ T4707] veth0_macvtap: entered promiscuous mode [ 31.798357][ T4708] veth0_macvtap: entered promiscuous mode [ 31.799379][ T4708] veth1_macvtap: entered promiscuous mode [ 31.804616][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.805643][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.812368][ T4707] veth1_macvtap: entered promiscuous mode [ 31.829432][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.830441][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.838418][ T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.838431][ T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.840148][ T4911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.848202][ T4911] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1: bg 0: block 112: padding at end of block bitmap is not set [ 31.849411][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.849580][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.849675][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.849727][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.849884][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.849957][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.850093][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.850177][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.850288][ T4911] EXT4-fs (loop0): Remounting filesystem read-only [ 31.874404][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.875562][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.918917][ T1172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.919132][ T1172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.919247][ T1172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.919359][ T1172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.931076][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.931089][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.947819][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.947828][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.966372][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.966385][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.041530][ T4710] Bluetooth: hci4: command tx timeout [ 32.042018][ T51] Bluetooth: hci2: command tx timeout [ 32.103710][ T4720] Bluetooth: hci0: command tx timeout [ 32.104189][ T4710] Bluetooth: hci3: command tx timeout [ 32.104695][ T51] Bluetooth: hci1: command tx timeout [ 32.243120][ T3123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.243135][ T3123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.247913][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.247925][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.261802][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.261817][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.309083][ T4924] ip_tables: iptables: counters copy to user failed while replacing table [ 32.315419][ T4924] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 32.329633][ T4924] Zero length message leads to an empty skb [ 32.407229][ T4930] FAULT_INJECTION: forcing a failure. [ 32.407229][ T4930] name failslab, interval 1, probability 0, space 0, times 1 [ 32.407250][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT [ 32.407261][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.407267][ T4930] Call trace: [ 32.407270][ T4930] show_stack+0x2c/0x3c (C) [ 32.407293][ T4930] __dump_stack+0x30/0x40 [ 32.407306][ T4930] dump_stack_lvl+0xd8/0x12c [ 32.407318][ T4930] dump_stack+0x1c/0x28 [ 32.407330][ T4930] should_fail_ex+0x418/0x58c [ 32.407339][ T4930] should_failslab+0xc4/0x120 [ 32.407348][ T4930] kmem_cache_alloc_noprof+0x94/0x5d4 [ 32.407357][ T4930] __kernfs_new_node+0xf0/0x7d8 [ 32.407376][ T4930] kernfs_new_node+0xe8/0x130 [ 32.407387][ T4930] kernfs_create_dir_ns+0x58/0x138 [ 32.407398][ T4930] sysfs_create_dir_ns+0x120/0x1f4 [ 32.407407][ T4930] kobject_add_internal+0x290/0x6f0 [ 32.407418][ T4930] kobject_add_varg+0x9c/0xe8 [ 32.407427][ T4930] kobject_add+0x110/0x1c8 [ 32.407435][ T4930] device_add+0x394/0x9e0 [ 32.407453][ T4930] rfkill_register+0x144/0x7bc [ 32.407466][ T4930] nfc_register_device+0x140/0x350 [ 32.407477][ T4930] nci_register_device+0x6b8/0x7e4 [ 32.407486][ T4930] virtual_ncidev_open+0x120/0x1a0 [ 32.407497][ T4930] misc_open+0x2dc/0x338 [ 32.407505][ T4930] chrdev_open+0x398/0x3e8 [ 32.407516][ T4930] do_dentry_open+0x5c4/0xfbc [ 32.407528][ T4930] vfs_open+0x44/0x2dc [ 32.407539][ T4930] path_openat+0x1084/0x18f0 [ 32.407550][ T4930] do_file_open+0x1c8/0x2e8 [ 32.407560][ T4930] do_sys_openat2+0x114/0x1e8 [ 32.407572][ T4930] do_sys_open+0xb0/0xe0 [ 32.407584][ T4930] __arm64_sys_openat+0xa8/0xc4 [ 32.407596][ T4930] invoke_syscall+0x98/0x244 [ 32.407609][ T4930] el0_svc_common+0xec/0x23c [ 32.407620][ T4930] do_el0_svc+0x4c/0x5c [ 32.407632][ T4930] el0_svc+0x60/0x1d8 [ 32.407639][ T4930] el0t_64_sync_handler+0x44/0x104 [ 32.407647][ T4930] el0t_64_sync+0x198/0x19c [ 32.407854][ T4930] kobject: kobject_add_internal failed for rfkill20 (error: -12 parent: nfc2) [ 32.762382][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.792973][ T4942] FAULT_INJECTION: forcing a failure. [ 32.792973][ T4942] name failslab, interval 1, probability 0, space 0, times 0 [ 32.792992][ T4942] CPU: 0 UID: 0 PID: 4942 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT [ 32.793004][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.793010][ T4942] Call trace: [ 32.793013][ T4942] show_stack+0x2c/0x3c (C) [ 32.793032][ T4942] __dump_stack+0x30/0x40 [ 32.793044][ T4942] dump_stack_lvl+0xd8/0x12c [ 32.793056][ T4942] dump_stack+0x1c/0x28 [ 32.793067][ T4942] should_fail_ex+0x418/0x58c [ 32.793076][ T4942] should_failslab+0xc4/0x120 [ 32.793085][ T4942] kmem_cache_alloc_noprof+0x94/0x5d4 [ 32.793094][ T4942] __kernfs_new_node+0xf0/0x7d8 [ 32.793105][ T4942] kernfs_new_node+0xe8/0x130 [ 32.793116][ T4942] __kernfs_create_file+0x60/0x2e0 [ 32.793128][ T4942] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 32.793140][ T4942] sysfs_merge_group+0x164/0x2ac [ 32.793148][ T4942] dpm_sysfs_add+0xc8/0x258 [ 32.793161][ T4942] device_add+0x468/0x9e0 [ 32.793171][ T4942] nfc_register_device+0x64/0x350 [ 32.793182][ T4942] nci_register_device+0x6b8/0x7e4 [ 32.793191][ T4942] virtual_ncidev_open+0x120/0x1a0 [ 32.793204][ T4942] misc_open+0x2dc/0x338 [ 32.793213][ T4942] chrdev_open+0x398/0x3e8 [ 32.793224][ T4942] do_dentry_open+0x5c4/0xfbc [ 32.793236][ T4942] vfs_open+0x44/0x2dc [ 32.793248][ T4942] path_openat+0x1084/0x18f0 [ 32.793259][ T4942] do_file_open+0x1c8/0x2e8 [ 32.793269][ T4942] do_sys_openat2+0x114/0x1e8 [ 32.793280][ T4942] do_sys_open+0xb0/0xe0 [ 32.793292][ T4942] __arm64_sys_openat+0xa8/0xc4 [ 32.793304][ T4942] invoke_syscall+0x98/0x244 [ 32.793316][ T4942] el0_svc_common+0xec/0x23c [ 32.793328][ T4942] do_el0_svc+0x4c/0x5c [ 32.793339][ T4942] el0_svc+0x60/0x1d8 [ 32.793348][ T4942] el0t_64_sync_handler+0x44/0x104 [ 32.793356][ T4942] el0t_64_sync+0x198/0x19c [ 32.955311][ T4949] FAULT_INJECTION: forcing a failure. [ 32.955311][ T4949] name failslab, interval 1, probability 0, space 0, times 0 [ 32.955331][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT [ 32.955343][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.955351][ T4949] Call trace: [ 32.955355][ T4949] show_stack+0x2c/0x3c (C) [ 32.955378][ T4949] __dump_stack+0x30/0x40 [ 32.955392][ T4949] dump_stack_lvl+0xd8/0x12c [ 32.955404][ T4949] dump_stack+0x1c/0x28 [ 32.955415][ T4949] should_fail_ex+0x418/0x58c [ 32.955425][ T4949] should_failslab+0xc4/0x120 [ 32.955434][ T4949] kmem_cache_alloc_noprof+0x94/0x5d4 [ 32.955450][ T4949] __kernfs_new_node+0xf0/0x7d8 [ 32.955465][ T4949] kernfs_new_node+0xe8/0x130 [ 32.955475][ T4949] __kernfs_create_file+0x60/0x2e0 [ 32.955488][ T4949] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 32.955500][ T4949] sysfs_create_file_ns+0x110/0x198 [ 32.955513][ T4949] device_create_file+0xf4/0x1a4 [ 32.955525][ T4949] device_add+0x3d0/0x9e0 [ 32.955534][ T4949] rfkill_register+0x144/0x7bc [ 32.955548][ T4949] nfc_register_device+0x140/0x350 [ 32.955559][ T4949] nci_register_device+0x6b8/0x7e4 [ 32.955567][ T4949] virtual_ncidev_open+0x120/0x1a0 [ 32.955578][ T4949] misc_open+0x2dc/0x338 [ 32.955586][ T4949] chrdev_open+0x398/0x3e8 [ 32.955598][ T4949] do_dentry_open+0x5c4/0xfbc [ 32.955610][ T4949] vfs_open+0x44/0x2dc [ 32.955622][ T4949] path_openat+0x1084/0x18f0 [ 32.955633][ T4949] do_file_open+0x1c8/0x2e8 [ 32.955643][ T4949] do_sys_openat2+0x114/0x1e8 [ 32.955655][ T4949] do_sys_open+0xb0/0xe0 [ 32.955666][ T4949] __arm64_sys_openat+0xa8/0xc4 [ 32.955678][ T4949] invoke_syscall+0x98/0x244 [ 32.955690][ T4949] el0_svc_common+0xec/0x23c [ 32.955702][ T4949] do_el0_svc+0x4c/0x5c [ 32.955713][ T4949] el0_svc+0x60/0x1d8 [ 32.955722][ T4949] el0t_64_sync_handler+0x44/0x104 [ 32.955730][ T4949] el0t_64_sync+0x198/0x19c [ 33.249119][ T4958] loop0: detected capacity change from 0 to 512 [ 33.258380][ T4958] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 33.306004][ T4961] loop4: detected capacity change from 0 to 2048 [ 34.103608][ T4710] Bluetooth: hci4: command tx timeout [ 34.103659][ T51] Bluetooth: hci2: command tx timeout [ 34.136988][ T4961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.141686][ T4961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.159373][ T4961] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 34.160476][ T4961] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.160497][ T4961] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.160497][ T4961] [ 34.160506][ T4961] EXT4-fs (loop4): Total free blocks count 0 [ 34.160514][ T4961] EXT4-fs (loop4): Free/Dirty block details [ 34.160527][ T4961] EXT4-fs (loop4): free_blocks=4096 [ 34.160540][ T4961] EXT4-fs (loop4): dirty_blocks=64 [ 34.160546][ T4961] EXT4-fs (loop4): Block reservation details [ 34.160552][ T4961] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 34.161319][ T4961] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 34.183868][ T4710] Bluetooth: hci3: command tx timeout [ 34.183890][ T4710] Bluetooth: hci0: command tx timeout [ 34.183954][ T51] Bluetooth: hci1: command tx timeout [ 34.245348][ T4711] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 34.313216][ T4979] netlink: 128 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.313235][ T4979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 34.390410][ T4986] bridge0: port 3(syz_tun) entered blocking state [ 34.390498][ T4986] bridge0: port 3(syz_tun) entered disabled state [ 34.390609][ T4986] syz_tun: entered allmulticast mode [ 34.391122][ T4986] syz_tun: entered promiscuous mode [ 34.391384][ T4986] bridge0: port 3(syz_tun) entered blocking state [ 34.391418][ T4986] bridge0: port 3(syz_tun) entered forwarding state [ 34.412017][ T4989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'. [ 34.466704][ T4996] fuse: Bad value for 'fd' [ 34.471684][ T4998] loop3: detected capacity change from 0 to 512 [ 34.480479][ T4998] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.480544][ T4998] ext4: Unknown parameter 'pcr' [ 34.598302][ T5000] 9p: Bad value for 'rfdno' [ 34.744321][ T4998] 9p: Bad value for 'rfdno' [ 34.866740][ T5020] loop2: detected capacity change from 0 to 512 [ 34.876818][ T5020] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 34.892973][ T5020] loop2: detected capacity change from 0 to 1024 [ 35.041363][ T5024] 9p: Bad value for 'rfdno' [ 35.757415][ T5029] loop0: detected capacity change from 0 to 512 [ 35.940048][ T5029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.178452][ T5072] loop2: detected capacity change from 0 to 128 [ 36.186274][ T51] Bluetooth: hci2: command tx timeout [ 36.186284][ T4720] Bluetooth: hci4: command tx timeout [ 36.189794][ T5072] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 36.199986][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.230382][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 36.264053][ T4720] Bluetooth: hci1: command tx timeout [ 36.264077][ T4720] Bluetooth: hci0: command tx timeout [ 36.264092][ T4720] Bluetooth: hci3: command tx timeout [ 36.265505][ T5079] capability: warning: `syz.0.45' uses deprecated v2 capabilities in a way that may be insecure [ 36.272170][ T5081] FAULT_INJECTION: forcing a failure. [ 36.272170][ T5081] name failslab, interval 1, probability 0, space 0, times 0 [ 36.272187][ T5081] CPU: 1 UID: 0 PID: 5081 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT [ 36.272197][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.272203][ T5081] Call trace: [ 36.272206][ T5081] show_stack+0x2c/0x3c (C) [ 36.272228][ T5081] __dump_stack+0x30/0x40 [ 36.272241][ T5081] dump_stack_lvl+0xd8/0x12c [ 36.272252][ T5081] dump_stack+0x1c/0x28 [ 36.272263][ T5081] should_fail_ex+0x418/0x58c [ 36.272272][ T5081] should_failslab+0xc4/0x120 [ 36.272281][ T5081] __kvmalloc_node_noprof+0x160/0x7fc [ 36.272291][ T5081] bucket_table_alloc+0x60/0x334 [ 36.272303][ T5081] __rhashtable_init_noprof+0x3c8/0x744 [ 36.272315][ T5081] __rhltable_init_noprof+0x34/0x90 [ 36.272326][ T5081] nf_tables_newtable+0x64c/0x10f4 [ 36.272338][ T5081] nfnetlink_rcv+0xc8c/0x16ec [ 36.272347][ T5081] netlink_unicast+0x600/0x7f8 [ 36.272358][ T5081] netlink_sendmsg+0x648/0x948 [ 36.272370][ T5081] __sock_sendmsg+0xc8/0x17c [ 36.272387][ T5081] ____sys_sendmsg+0x3d0/0x6c8 [ 36.272399][ T5081] ___sys_sendmsg+0x198/0x224 [ 36.272410][ T5081] __sys_sendmsg+0x158/0x204 [ 36.272422][ T5081] __arm64_sys_sendmsg+0x88/0x9c [ 36.272433][ T5081] invoke_syscall+0x98/0x244 [ 36.272445][ T5081] el0_svc_common+0xec/0x23c [ 36.272463][ T5081] do_el0_svc+0x4c/0x5c [ 36.272475][ T5081] el0_svc+0x60/0x1d8 [ 36.272484][ T5081] el0t_64_sync_handler+0x44/0x104 [ 36.272492][ T5081] el0t_64_sync+0x198/0x19c [ 36.288506][ T5080] loop0: detected capacity change from 0 to 512 [ 36.288846][ T5080] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.298058][ T5080] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.298069][ T5080] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 36.299893][ T5080] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.45: attempt to clear invalid blocks 2 len 1 [ 36.299963][ T5080] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 36.300706][ T5080] EXT4-fs (loop0): Remounting filesystem read-only [ 36.301885][ T5080] EXT4-fs (loop0): 1 truncate cleaned up [ 36.302986][ T5080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.329292][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.765830][ T5087] loop0: detected capacity change from 0 to 256 [ 36.779041][ T5087] FAULT_INJECTION: forcing a failure. [ 36.779041][ T5087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.779060][ T5087] CPU: 1 UID: 0 PID: 5087 Comm: syz.0.47 Not tainted syzkaller #0 PREEMPT [ 36.779074][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.779080][ T5087] Call trace: [ 36.779083][ T5087] show_stack+0x2c/0x3c (C) [ 36.779107][ T5087] __dump_stack+0x30/0x40 [ 36.779120][ T5087] dump_stack_lvl+0xd8/0x12c [ 36.779129][ T5087] dump_stack+0x1c/0x28 [ 36.779139][ T5087] should_fail_ex+0x418/0x58c [ 36.779147][ T5087] should_fail+0x14/0x24 [ 36.779154][ T5087] should_fail_usercopy+0x20/0x30 [ 36.779161][ T5087] strncpy_from_user+0x48/0x388 [ 36.779171][ T5087] do_getname+0x84/0x234 [ 36.779181][ T5087] user_path_at+0x38/0x78 [ 36.779189][ T5087] do_mount+0xb0/0x148 [ 36.779199][ T5087] __arm64_sys_mount+0x33c/0x388 [ 36.779209][ T5087] invoke_syscall+0x98/0x244 [ 36.779219][ T5087] el0_svc_common+0xec/0x23c [ 36.779229][ T5087] do_el0_svc+0x4c/0x5c [ 36.779238][ T5087] el0_svc+0x60/0x1d8 [ 36.779247][ T5087] el0t_64_sync_handler+0x44/0x104 [ 36.779254][ T5087] el0t_64_sync+0x198/0x19c [ 36.827963][ T5090] loop1: detected capacity change from 0 to 512 [ 36.828672][ T5090] EXT4-fs: Ignoring removed oldalloc option [ 36.830435][ T5090] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 36.830449][ T5090] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.830461][ T5090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.833677][ T5090] EXT4-fs (loop1): 1 truncate cleaned up [ 36.834729][ T5090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.855196][ T5091] FAULT_INJECTION: forcing a failure. [ 36.855196][ T5091] name failslab, interval 1, probability 0, space 0, times 0 [ 36.855213][ T5091] CPU: 0 UID: 0 PID: 5091 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT [ 36.855223][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.855228][ T5091] Call trace: [ 36.855231][ T5091] show_stack+0x2c/0x3c (C) [ 36.855251][ T5091] __dump_stack+0x30/0x40 [ 36.855264][ T5091] dump_stack_lvl+0xd8/0x12c [ 36.855276][ T5091] dump_stack+0x1c/0x28 [ 36.855287][ T5091] should_fail_ex+0x418/0x58c [ 36.855296][ T5091] should_failslab+0xc4/0x120 [ 36.855304][ T5091] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.855314][ T5091] skb_clone+0x1ac/0x320 [ 36.855327][ T5091] netlink_broadcast_filtered+0x520/0xd58 [ 36.855339][ T5091] netlink_broadcast+0x50/0x68 [ 36.855350][ T5091] kobject_uevent_net_broadcast+0x33c/0x53c [ 36.855362][ T5091] kobject_uevent_env+0x518/0x944 [ 36.855371][ T5091] kobject_uevent+0x2c/0x3c [ 36.855381][ T5091] device_add+0x4d0/0x9e0 [ 36.855391][ T5091] nfc_register_device+0x64/0x350 [ 36.855402][ T5091] nci_register_device+0x6b8/0x7e4 [ 36.855411][ T5091] virtual_ncidev_open+0x120/0x1a0 [ 36.855421][ T5091] misc_open+0x2dc/0x338 [ 36.855429][ T5091] chrdev_open+0x398/0x3e8 [ 36.855441][ T5091] do_dentry_open+0x5c4/0xfbc [ 36.855463][ T5091] vfs_open+0x44/0x2dc [ 36.855475][ T5091] path_openat+0x1084/0x18f0 [ 36.855485][ T5091] do_file_open+0x1c8/0x2e8 [ 36.855495][ T5091] do_sys_openat2+0x114/0x1e8 [ 36.855507][ T5091] do_sys_open+0xb0/0xe0 [ 36.855519][ T5091] __arm64_sys_openat+0xa8/0xc4 [ 36.855531][ T5091] invoke_syscall+0x98/0x244 [ 36.855543][ T5091] el0_svc_common+0xec/0x23c [ 36.855555][ T5091] do_el0_svc+0x4c/0x5c [ 36.855566][ T5091] el0_svc+0x60/0x1d8 [ 36.855574][ T5091] el0t_64_sync_handler+0x44/0x104 [ 36.855582][ T5091] el0t_64_sync+0x198/0x19c [ 36.915745][ T5096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 36.930366][ T5098] FAULT_INJECTION: forcing a failure. [ 36.930366][ T5098] name failslab, interval 1, probability 0, space 0, times 0 [ 36.930384][ T5098] CPU: 0 UID: 0 PID: 5098 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT [ 36.930394][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.930400][ T5098] Call trace: [ 36.930403][ T5098] show_stack+0x2c/0x3c (C) [ 36.930424][ T5098] __dump_stack+0x30/0x40 [ 36.930437][ T5098] dump_stack_lvl+0xd8/0x12c [ 36.930456][ T5098] dump_stack+0x1c/0x28 [ 36.930467][ T5098] should_fail_ex+0x418/0x58c [ 36.930476][ T5098] should_failslab+0xc4/0x120 [ 36.930485][ T5098] __kmalloc_cache_noprof+0x94/0x5fc [ 36.930495][ T5098] sctp_add_bind_addr+0x9c/0x2e8 [ 36.930506][ T5098] sctp_copy_local_addr_list+0x2f8/0x4a4 [ 36.930515][ T5098] sctp_copy_one_addr+0xb0/0x1e0 [ 36.930523][ T5098] sctp_bind_addr_copy+0x178/0x284 [ 36.930532][ T5098] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 36.930543][ T5098] sctp_connect_new_asoc+0x28c/0x5ec [ 36.930553][ T5098] sctp_sendmsg+0xdd8/0x17bc [ 36.930563][ T5098] inet_sendmsg+0xb4/0xd8 [ 36.930574][ T5098] __sock_sendmsg+0xc8/0x17c [ 36.930585][ T5098] __sys_sendto+0x250/0x328 [ 36.930596][ T5098] __arm64_sys_sendto+0xec/0x10c [ 36.930607][ T5098] invoke_syscall+0x98/0x244 [ 36.930620][ T5098] el0_svc_common+0xec/0x23c [ 36.930631][ T5098] do_el0_svc+0x4c/0x5c [ 36.930642][ T5098] el0_svc+0x60/0x1d8 [ 36.930651][ T5098] el0t_64_sync_handler+0x44/0x104 [ 36.930659][ T5098] el0t_64_sync+0x198/0x19c [ 36.932640][ T5098] loop0: detected capacity change from 0 to 256 [ 36.932900][ T5098] vfat: Unknown parameter '00000000000000000000003' [ 36.986008][ T4708] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 37.001289][ T4708] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 37.003144][ T4708] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 37.064724][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.078885][ T5102] fuse: Unknown parameter 'id' [ 37.084951][ T5102] overlayfs: overlapping lowerdir path [ 37.140334][ T5109] loop0: detected capacity change from 0 to 32768 [ 37.165711][ T5109] device-mapper: table: 248:0: thin-pool: Error getting data device (-EBUSY) [ 37.165726][ T5109] device-mapper: ioctl: error adding target to table [ 37.228969][ T30] audit: type=1326 audit(37.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5105 comm="syz.0.55" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81579e28 code=0x0 [ 37.261888][ T5120] netlink: 2576 bytes leftover after parsing attributes in process `syz.2.60'. [ 37.261920][ T5120] netlink: 4744 bytes leftover after parsing attributes in process `syz.2.60'. [ 37.332688][ T5123] loop4: detected capacity change from 0 to 512 [ 37.333056][ T5123] ======================================================= [ 37.333056][ T5123] WARNING: The mand mount option has been deprecated and [ 37.333056][ T5123] and is ignored by this kernel. Remove the mand [ 37.333056][ T5123] option from the mount to silence this warning. [ 37.333056][ T5123] ======================================================= [ 37.342437][ T5123] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.342467][ T5123] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 37.342483][ T5123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.353604][ T5123] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.61: bad orphan inode 131083 [ 37.353664][ T5123] loop4: lost filesystem error report for type 5 error -117 [ 37.354785][ T5123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.389523][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.438639][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.465597][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 37.476035][ T5131] loop3: detected capacity change from 0 to 512 [ 37.497736][ T5131] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.497759][ T5131] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 37.497769][ T5131] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.498463][ T5131] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 37.526786][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.615015][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.683488][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.702427][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.705307][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.712331][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.712689][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.714589][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.870474][ T40] bridge_slave_1: left allmulticast mode [ 37.870504][ T40] bridge_slave_1: left promiscuous mode [ 37.870878][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.950315][ T4823] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.974346][ T40] bridge_slave_0: left allmulticast mode [ 37.974364][ T40] bridge_slave_0: left promiscuous mode [ 37.974443][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.974960][ T4823] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.048990][ T5151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 38.118004][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.126920][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.128763][ T40] bond0 (unregistering): Released all slaves [ 38.166799][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.169629][ T5137] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.227926][ T5161] loop3: detected capacity change from 0 to 512 [ 38.231877][ T5158] Device name cannot be null; rc = [-22] [ 38.251886][ T5161] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.251973][ T5161] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.252143][ T5161] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 38.252839][ T5161] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 38.252984][ T5161] EXT4-fs error (device loop3): __ext4_iget:5592: inode #16: block 127754: comm syz.3.72: invalid block [ 38.252999][ T5161] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 38.253205][ T5161] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.72: couldn't read orphan inode 16 (err -117) [ 38.253218][ T5161] loop3: lost filesystem error report for type 5 error -117 [ 38.253324][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 38.253334][ C1] EXT4-fs (loop3): initial error at time 38: __ext4_iget:5592: inode 16: block 127754 [ 38.253355][ C1] EXT4-fs (loop3): last error at time 38: ext4_orphan_get:1408 [ 38.255863][ T5161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.257185][ T5163] loop2: detected capacity change from 0 to 128 [ 38.268794][ T51] Bluetooth: hci2: command tx timeout [ 38.274200][ T51] Bluetooth: hci4: command tx timeout [ 38.297699][ T5163] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 38.365942][ T51] Bluetooth: hci3: command tx timeout [ 38.365976][ T51] Bluetooth: hci0: command tx timeout [ 38.400075][ T5167] netlink: 'syz.4.74': attribute type 8 has an invalid length. [ 38.400091][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 38.425072][ T5167] veth1_to_team: entered promiscuous mode [ 38.431227][ T5167] gretap0: entered promiscuous mode [ 38.627560][ T5167] bond_slave_1: entered promiscuous mode [ 38.627636][ T5167] bond_slave_1: left promiscuous mode [ 38.634247][ T5167] veth1_to_team: left promiscuous mode [ 38.637012][ T5167] gretap0: left promiscuous mode [ 39.055377][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.117903][ T5188] loop3: detected capacity change from 0 to 512 [ 39.118489][ T5188] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.118497][ T5188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.148783][ T5188] EXT4-fs (loop3): 1 truncate cleaned up [ 39.152403][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.155171][ T5188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.194174][ T40] hsr_slave_0: left promiscuous mode [ 39.195216][ T40] hsr_slave_1: left promiscuous mode [ 39.195556][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.195571][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.196142][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.196153][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.214843][ T40] veth1_macvtap: left promiscuous mode [ 39.214876][ T40] veth0_macvtap: left promiscuous mode [ 39.214924][ T40] veth1_vlan: left promiscuous mode [ 39.214967][ T40] veth0_vlan: left promiscuous mode [ 39.231202][ T5195] loop2: detected capacity change from 0 to 1024 [ 39.237217][ T5195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.256153][ T5195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.291626][ T5195] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.78: bg 0: block 112: padding at end of block bitmap is not set [ 39.291855][ T5195] EXT4-fs (loop2): Remounting filesystem read-only [ 39.616743][ T40] team0 (unregistering): Port device team_slave_1 removed [ 39.676877][ T40] team0 (unregistering): Port device team_slave_0 removed [ 39.730424][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.730504][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.730592][ T5137] bridge_slave_0: entered allmulticast mode [ 39.731042][ T5137] bridge_slave_0: entered promiscuous mode [ 39.757760][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.757782][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.757844][ T5137] bridge_slave_1: entered allmulticast mode [ 39.758242][ T5137] bridge_slave_1: entered promiscuous mode [ 39.771693][ T5137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.772572][ T5137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.793364][ T4720] Bluetooth: hci1: command tx timeout [ 39.800344][ T5206] syzkaller0: entered promiscuous mode [ 39.800359][ T5206] syzkaller0: entered allmulticast mode [ 39.813088][ T5137] team0: Port device team_slave_0 added [ 39.825363][ T5137] team0: Port device team_slave_1 added [ 39.830875][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.830884][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.830900][ T5137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.831428][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.831434][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.831446][ T5137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.861783][ T5137] hsr_slave_0: entered promiscuous mode [ 39.862051][ T5137] hsr_slave_1: entered promiscuous mode [ 39.862235][ T5137] debugfs: 'hsr0' already exists in 'hsr' [ 39.862246][ T5137] Cannot create hsr debugfs directory [ 39.928370][ T5137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.933147][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.937845][ T5137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.942442][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.942827][ T5137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.954004][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.954324][ T5137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.965071][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.082810][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.570255][ T5239] Set syz1 is full, maxelem 1029 reached [ 40.630823][ T5137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.647808][ T5137] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.675353][ T4965] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.675375][ T4965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.675953][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.675970][ T4965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.766063][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.841406][ T5255] FAULT_INJECTION: forcing a failure. [ 40.841406][ T5255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.841429][ T5255] CPU: 0 UID: 0 PID: 5255 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT [ 40.841439][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.841457][ T5255] Call trace: [ 40.841460][ T5255] show_stack+0x2c/0x3c (C) [ 40.841485][ T5255] __dump_stack+0x30/0x40 [ 40.841499][ T5255] dump_stack_lvl+0xd8/0x12c [ 40.841510][ T5255] dump_stack+0x1c/0x28 [ 40.841522][ T5255] should_fail_ex+0x418/0x58c [ 40.841530][ T5255] should_fail+0x14/0x24 [ 40.841537][ T5255] should_fail_usercopy+0x20/0x30 [ 40.841546][ T5255] set_fd_set+0x48/0xb8 [ 40.841555][ T5255] core_sys_select+0x7ec/0x9e4 [ 40.841563][ T5255] __arm64_sys_pselect6+0x2f0/0x39c [ 40.841571][ T5255] invoke_syscall+0x98/0x244 [ 40.841583][ T5255] el0_svc_common+0xec/0x23c [ 40.841595][ T5255] do_el0_svc+0x4c/0x5c [ 40.841606][ T5255] el0_svc+0x60/0x1d8 [ 40.841615][ T5255] el0t_64_sync_handler+0x44/0x104 [ 40.841623][ T5255] el0t_64_sync+0x198/0x19c [ 41.010721][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.062713][ T5274] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 41.102801][ T5280] ubi0: attaching mtd0 [ 41.109404][ T5280] ubi0: scanning is finished [ 41.109409][ T5280] ubi0: empty MTD device detected [ 41.181952][ T5137] veth0_vlan: entered promiscuous mode [ 41.189521][ T5137] veth1_vlan: entered promiscuous mode [ 41.210193][ T5137] veth0_macvtap: entered promiscuous mode [ 41.223878][ T5137] veth1_macvtap: entered promiscuous mode [ 41.248535][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.256208][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.284877][ T4965] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.285010][ T4965] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.285024][ T4965] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.285038][ T4965] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.294587][ T4909] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.345196][ T4965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.345203][ T4965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.392635][ T4965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.392643][ T4965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.397194][ T5280] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 41.397212][ T5280] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 41.397227][ T5280] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 41.397236][ T5280] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 41.397244][ T5280] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 41.397251][ T5280] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 41.397259][ T5280] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1058600354 [ 41.397267][ T5280] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 41.397642][ T5291] ubi0: background thread "ubi_bgt0d" started, PID 5291 [ 41.568390][ T5301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.589218][ T5301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.592245][ T5297] bond0: no command found in slaves file - use +ifname or -ifname [ 41.745502][ T5318] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.828955][ T5325] Bluetooth: MGMT ver 1.23 [ 41.863539][ T4720] Bluetooth: hci1: command tx timeout [ 41.904335][ T5329] syz_tun: left allmulticast mode [ 41.904348][ T5329] syz_tun: left promiscuous mode [ 41.904453][ T5329] bridge0: port 3(syz_tun) entered disabled state [ 41.906717][ T5329] batman_adv: batadv0: Adding interface: syz_tun [ 41.906723][ T5329] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.906738][ T5329] batman_adv: batadv0: Interface activated: syz_tun [ 42.183234][ T5335] syzkaller0: entered promiscuous mode [ 42.183249][ T5335] syzkaller0: entered allmulticast mode [ 42.193426][ T454] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.203447][ T454] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.203518][ T454] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.203535][ T454] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.406680][ T5354] FAULT_INJECTION: forcing a failure. [ 42.406680][ T5354] name failslab, interval 1, probability 0, space 0, times 0 [ 42.406693][ T5354] CPU: 1 UID: 0 PID: 5354 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT [ 42.406703][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.406716][ T5354] Call trace: [ 42.406719][ T5354] show_stack+0x2c/0x3c (C) [ 42.406740][ T5354] __dump_stack+0x30/0x40 [ 42.406753][ T5354] dump_stack_lvl+0xd8/0x12c [ 42.406768][ T5354] dump_stack+0x1c/0x28 [ 42.406780][ T5354] should_fail_ex+0x418/0x58c [ 42.406790][ T5354] should_failslab+0xc4/0x120 [ 42.406799][ T5354] kmem_cache_alloc_noprof+0x94/0x5d4 [ 42.406809][ T5354] __kernfs_new_node+0xf0/0x7d8 [ 42.406821][ T5354] kernfs_new_node+0xe8/0x130 [ 42.406831][ T5354] kernfs_create_dir_ns+0x58/0x138 [ 42.406842][ T5354] sysfs_create_dir_ns+0x120/0x1f4 [ 42.406851][ T5354] kobject_add_internal+0x290/0x6f0 [ 42.406862][ T5354] kobject_add_varg+0x9c/0xe8 [ 42.406871][ T5354] kobject_add+0x110/0x1c8 [ 42.406879][ T5354] kobject_create_and_add+0x8c/0xf0 [ 42.406889][ T5354] module_add_driver+0x208/0x2e0 [ 42.406901][ T5354] bus_add_driver+0x254/0x500 [ 42.406914][ T5354] driver_register+0x220/0x310 [ 42.406923][ T5354] usb_gadget_register_driver_owner+0xf0/0x25c [ 42.406936][ T5354] raw_ioctl+0x10f8/0x356c [ 42.406944][ T5354] __arm64_sys_ioctl+0x154/0x1cc [ 42.406952][ T5354] invoke_syscall+0x98/0x244 [ 42.406965][ T5354] el0_svc_common+0xec/0x23c [ 42.406976][ T5354] do_el0_svc+0x4c/0x5c [ 42.406987][ T5354] el0_svc+0x60/0x1d8 [ 42.406995][ T5354] el0t_64_sync_handler+0x44/0x104 [ 42.407003][ T5354] el0t_64_sync+0x198/0x19c [ 42.410391][ T5354] kobject: kobject_add_internal failed for drivers (error: -12 parent: raw_gadget) [ 42.410405][ T5354] kobject: kobject_create_and_add: kobject_add error: -12 [ 42.410488][ T5354] bus_add_driver: failed to create module links for raw-gadget.0 [ 42.410560][ T5354] UDC core: USB Raw Gadget: driver registration failed: -22 [ 42.410568][ T5354] misc raw-gadget: fail, usb_gadget_register_driver returned -22 [ 42.448316][ T5359] ubi: mtd0 is already attached to ubi0 [ 42.769377][ T5385] batman_adv: batadv0: Interface deactivated: syz_tun [ 42.769388][ T5385] batman_adv: batadv0: Removing interface: syz_tun [ 42.818697][ T5385] bridge_slave_0: left allmulticast mode [ 42.818710][ T5385] bridge_slave_0: left promiscuous mode [ 42.818786][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.832391][ T5385] bridge_slave_1: left allmulticast mode [ 42.832401][ T5385] bridge_slave_1: left promiscuous mode [ 42.832464][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.859281][ T5385] bond0: (slave bond_slave_0): Releasing backup interface [ 42.891877][ T5385] bond0: (slave bond_slave_1): Releasing backup interface [ 42.940525][ T5385] team0: Port device team_slave_0 removed [ 42.961371][ T5385] team0: Port device team_slave_1 removed [ 42.961766][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.961776][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.970842][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.970850][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.986199][ T5389] syzkaller0: entered promiscuous mode [ 42.986210][ T5389] syzkaller0: entered allmulticast mode [ 42.986766][ T41] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.986804][ T41] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.986828][ T41] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.986842][ T41] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.027049][ T5404] __nla_validate_parse: 1 callbacks suppressed [ 43.027062][ T5404] netlink: 448 bytes leftover after parsing attributes in process `syz.5.151'. [ 43.050351][ T5409] netlink: 48 bytes leftover after parsing attributes in process `syz.3.153'. [ 43.146558][ T4815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.240832][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.159'. [ 43.240849][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.159'. [ 43.293359][ T4815] usb 1-1: Using ep0 maxpacket: 8 [ 43.294888][ T4815] usb 1-1: New USB device found, idVendor=084e, idProduct=0000, bcdDevice= 0.00 [ 43.294915][ T4815] usb 1-1: no configurations [ 43.294921][ T4815] usb 1-1: can't read configurations, error -22 [ 43.425472][ T4815] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.476676][ T5449] FAULT_INJECTION: forcing a failure. [ 43.476676][ T5449] name fail_futex, interval 1, probability 0, space 0, times 1 [ 43.476699][ T5449] CPU: 0 UID: 0 PID: 5449 Comm: syz.2.173 Not tainted syzkaller #0 PREEMPT [ 43.476712][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.476727][ T5449] Call trace: [ 43.476731][ T5449] show_stack+0x2c/0x3c (C) [ 43.476753][ T5449] __dump_stack+0x30/0x40 [ 43.476766][ T5449] dump_stack_lvl+0xd8/0x12c [ 43.476778][ T5449] dump_stack+0x1c/0x28 [ 43.476789][ T5449] should_fail_ex+0x418/0x58c [ 43.476798][ T5449] should_fail+0x14/0x24 [ 43.476805][ T5449] get_futex_key+0x1ec/0x12b0 [ 43.476817][ T5449] futex_wake+0x10c/0x594 [ 43.476828][ T5449] do_futex+0x2c4/0x378 [ 43.476839][ T5449] __arm64_sys_futex+0x2e4/0x418 [ 43.476850][ T5449] invoke_syscall+0x98/0x244 [ 43.476863][ T5449] el0_svc_common+0xec/0x23c [ 43.476874][ T5449] do_el0_svc+0x4c/0x5c [ 43.476886][ T5449] el0_svc+0x60/0x1d8 [ 43.476895][ T5449] el0t_64_sync_handler+0x44/0x104 [ 43.476903][ T5449] el0t_64_sync+0x198/0x19c [ 43.574969][ T4815] usb 1-1: Using ep0 maxpacket: 8 [ 43.575530][ T4815] usb 1-1: New USB device found, idVendor=084e, idProduct=0000, bcdDevice= 0.00 [ 43.575553][ T4815] usb 1-1: no configurations [ 43.575559][ T4815] usb 1-1: can't read configurations, error -22 [ 43.575863][ T4815] usb usb1-port1: attempt power cycle [ 43.791834][ T4720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 43.791843][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT [ 43.791852][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.791858][ T4720] Workqueue: hci1 hci_rx_work [ 43.791878][ T4720] Call trace: [ 43.791881][ T4720] show_stack+0x2c/0x3c (C) [ 43.791897][ T4720] __dump_stack+0x30/0x40 [ 43.791910][ T4720] dump_stack_lvl+0xd8/0x12c [ 43.791922][ T4720] dump_stack+0x1c/0x28 [ 43.791934][ T4720] sysfs_warn_dup+0x9c/0xb8 [ 43.791943][ T4720] sysfs_create_dir_ns+0x190/0x1f4 [ 43.791952][ T4720] kobject_add_internal+0x290/0x6f0 [ 43.791963][ T4720] kobject_add_varg+0x9c/0xe8 [ 43.791972][ T4720] kobject_add+0x110/0x1c8 [ 43.791981][ T4720] device_add+0x394/0x9e0 [ 43.791992][ T4720] hci_conn_add_sysfs+0xbc/0x1e8 [ 43.792004][ T4720] le_conn_complete_evt+0xc84/0x122c [ 43.792014][ T4720] hci_le_conn_complete_evt+0x114/0x3d8 [ 43.792024][ T4720] hci_le_meta_evt+0x2b0/0x46c [ 43.792036][ T4720] hci_event_packet+0x4c0/0x9c8 [ 43.792046][ T4720] hci_rx_work+0x2f4/0xd78 [ 43.792054][ T4720] process_scheduled_works+0x91c/0x1250 [ 43.792066][ T4720] worker_thread+0x798/0xbd0 [ 43.792077][ T4720] kthread+0x304/0x3d4 [ 43.792086][ T4720] ret_from_fork+0x10/0x20 [ 43.792102][ T4720] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 43.792116][ T4720] Bluetooth: hci1: failed to register connection device [ 43.913349][ T4815] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.936386][ T4815] usb 1-1: Using ep0 maxpacket: 8 [ 43.936790][ T4815] usb 1-1: New USB device found, idVendor=084e, idProduct=0000, bcdDevice= 0.00 [ 43.936812][ T4815] usb 1-1: no configurations [ 43.936818][ T4815] usb 1-1: can't read configurations, error -22 [ 43.953461][ T51] Bluetooth: hci1: command tx timeout [ 44.063420][ T4815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.085782][ T4815] usb 1-1: Using ep0 maxpacket: 8 [ 44.086376][ T4815] usb 1-1: New USB device found, idVendor=084e, idProduct=0000, bcdDevice= 0.00 [ 44.086399][ T4815] usb 1-1: no configurations [ 44.086405][ T4815] usb 1-1: can't read configurations, error -22 [ 44.086634][ T4815] usb usb1-port1: unable to enumerate USB device [ 44.407859][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 44.407875][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 44.511124][ T5517] netlink: 'syz.3.206': attribute type 4 has an invalid length. [ 44.918650][ T5541] syzkaller0: left promiscuous mode [ 44.918667][ T5541] syzkaller0: left allmulticast mode [ 45.253359][ T5572] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.227'. [ 45.255310][ T5563] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.227'. [ 45.255483][ T5568] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.227'. [ 45.574864][ T5579] net_ratelimit: 769 callbacks suppressed [ 46.033573][ T51] Bluetooth: hci1: command tx timeout [ 46.144094][ T5596] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.220528][ T5596] netlink: 'syz.0.241': attribute type 7 has an invalid length. [ 46.220540][ T5596] netlink: 'syz.0.241': attribute type 5 has an invalid length. [ 46.220549][ T5596] netlink: 17 bytes leftover after parsing attributes in process `syz.0.241'. [ 46.251425][ T5609] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 46.257873][ T41] IPVS: starting estimator thread 0... [ 46.344732][ T5610] IPVS: using max 60 ests per chain, 144000 per kthread [ 46.679693][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 46.679707][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 46.679717][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.679724][ T51] Workqueue: hci3 hci_rx_work [ 46.679745][ T51] Call trace: [ 46.679748][ T51] show_stack+0x2c/0x3c (C) [ 46.679768][ T51] __dump_stack+0x30/0x40 [ 46.679781][ T51] dump_stack_lvl+0xd8/0x12c [ 46.679793][ T51] dump_stack+0x1c/0x28 [ 46.679804][ T51] sysfs_warn_dup+0x9c/0xb8 [ 46.679814][ T51] sysfs_create_dir_ns+0x190/0x1f4 [ 46.679822][ T51] kobject_add_internal+0x290/0x6f0 [ 46.679834][ T51] kobject_add_varg+0x9c/0xe8 [ 46.679843][ T51] kobject_add+0x110/0x1c8 [ 46.679852][ T51] device_add+0x394/0x9e0 [ 46.679864][ T51] hci_conn_add_sysfs+0xbc/0x1e8 [ 46.679875][ T51] le_conn_complete_evt+0xc84/0x122c [ 46.679886][ T51] hci_le_conn_complete_evt+0x114/0x3d8 [ 46.679895][ T51] hci_le_meta_evt+0x2b0/0x46c [ 46.679906][ T51] hci_event_packet+0x4c0/0x9c8 [ 46.679917][ T51] hci_rx_work+0x2f4/0xd78 [ 46.679924][ T51] process_scheduled_works+0x91c/0x1250 [ 46.679936][ T51] worker_thread+0x798/0xbd0 [ 46.679947][ T51] kthread+0x304/0x3d4 [ 46.679957][ T51] ret_from_fork+0x10/0x20 [ 46.680230][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.680253][ T51] Bluetooth: hci3: failed to register connection device [ 46.987823][ T5656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.569634][ T5696] ubi: mtd0 is already attached to ubi0 [ 47.779836][ T5713] loop4: detected capacity change from 0 to 512 [ 47.789603][ T5713] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.295: corrupted in-inode xattr: invalid ea_ino [ 47.789622][ T5713] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.789738][ T5713] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.295: couldn't read orphan inode 15 (err -117) [ 47.789751][ T5713] loop4: lost filesystem error report for type 5 error -117 [ 47.790277][ T5713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.849521][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.937412][ T5725] netlink: 'syz.0.300': attribute type 33 has an invalid length. [ 47.937429][ T5725] netlink: 'syz.0.300': attribute type 13 has an invalid length. [ 48.236622][ T5742] ubi: mtd0 is already attached to ubi0 [ 49.183564][ T5794] netlink: 'syz.0.333': attribute type 7 has an invalid length. [ 49.183580][ T5794] netlink: 'syz.0.333': attribute type 5 has an invalid length. [ 49.183590][ T5794] __nla_validate_parse: 1 callbacks suppressed [ 49.183599][ T5794] netlink: 17 bytes leftover after parsing attributes in process `syz.0.333'. [ 49.944774][ T4720] Bluetooth: hci1: command 0x0406 tx timeout [ 49.968067][ T4965] IPVS: starting estimator thread 0... [ 50.051994][ T5872] overlayfs: missing 'lowerdir' [ 50.054429][ T5866] IPVS: using max 45 ests per chain, 108000 per kthread [ 50.335589][ T5896] ubi: mtd0 is already attached to ubi0 [ 50.398734][ T5901] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 50.400926][ T41] IPVS: starting estimator thread 0... [ 50.483415][ T5902] IPVS: using max 56 ests per chain, 134400 per kthread [ 50.655623][ T5919] net_ratelimit: 1205 callbacks suppressed [ 50.758316][ T5925] FAULT_INJECTION: forcing a failure. [ 50.758316][ T5925] name failslab, interval 1, probability 0, space 0, times 0 [ 50.758329][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.4.394 Not tainted syzkaller #0 PREEMPT [ 50.758339][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.758352][ T5925] Call trace: [ 50.758356][ T5925] show_stack+0x2c/0x3c (C) [ 50.758376][ T5925] __dump_stack+0x30/0x40 [ 50.758388][ T5925] dump_stack_lvl+0xd8/0x12c [ 50.758400][ T5925] dump_stack+0x1c/0x28 [ 50.758412][ T5925] should_fail_ex+0x418/0x58c [ 50.758421][ T5925] should_failslab+0xc4/0x120 [ 50.758430][ T5925] __kmalloc_cache_noprof+0x94/0x5fc [ 50.758440][ T5925] alloc_workqueue_attrs_noprof+0x54/0x154 [ 50.758456][ T5925] __alloc_workqueue+0x16c/0x11a0 [ 50.758465][ T5925] alloc_workqueue_va+0x5c/0x138 [ 50.758473][ T5925] alloc_workqueue_noprof+0xe0/0x130 [ 50.758483][ T5925] hci_register_dev+0x268/0x8ac [ 50.758492][ T5925] vhci_create_device+0x328/0x624 [ 50.758503][ T5925] vhci_write+0x314/0x3d8 [ 50.758512][ T5925] vfs_write+0x51c/0xa0c [ 50.758520][ T5925] ksys_write+0x12c/0x228 [ 50.758528][ T5925] __arm64_sys_write+0x84/0x98 [ 50.758536][ T5925] invoke_syscall+0x98/0x244 [ 50.758549][ T5925] el0_svc_common+0xec/0x23c [ 50.758561][ T5925] do_el0_svc+0x4c/0x5c [ 50.758572][ T5925] el0_svc+0x60/0x1d8 [ 50.758581][ T5925] el0t_64_sync_handler+0x44/0x104 [ 50.758590][ T5925] el0t_64_sync+0x198/0x19c [ 50.763437][ T5925] Bluetooth: Can't register HCI device [ 50.963685][ T5930] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 51.265436][ T5944] ubi: mtd0 is already attached to ubi0 [ 51.497044][ T5954] FAULT_INJECTION: forcing a failure. [ 51.497044][ T5954] name fail_futex, interval 1, probability 0, space 0, times 0 [ 51.497057][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.5.407 Not tainted syzkaller #0 PREEMPT [ 51.497068][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.497080][ T5954] Call trace: [ 51.497084][ T5954] show_stack+0x2c/0x3c (C) [ 51.497105][ T5954] __dump_stack+0x30/0x40 [ 51.497118][ T5954] dump_stack_lvl+0xd8/0x12c [ 51.497130][ T5954] dump_stack+0x1c/0x28 [ 51.497141][ T5954] should_fail_ex+0x418/0x58c [ 51.497150][ T5954] should_fail+0x14/0x24 [ 51.497157][ T5954] get_futex_key+0x1ec/0x12b0 [ 51.497170][ T5954] futex_wake+0x10c/0x594 [ 51.497181][ T5954] do_futex+0x2c4/0x378 [ 51.497192][ T5954] __arm64_sys_futex+0x2e4/0x418 [ 51.497203][ T5954] invoke_syscall+0x98/0x244 [ 51.497215][ T5954] el0_svc_common+0xec/0x23c [ 51.497227][ T5954] do_el0_svc+0x4c/0x5c [ 51.497239][ T5954] el0_svc+0x60/0x1d8 [ 51.497248][ T5954] el0t_64_sync_handler+0x44/0x104 [ 51.497256][ T5954] el0t_64_sync+0x198/0x19c [ 51.602110][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 51.854877][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.5.420'. [ 52.088142][ T5998] netlink: 'syz.3.427': attribute type 7 has an invalid length. [ 52.088154][ T5998] netlink: 'syz.3.427': attribute type 5 has an invalid length. [ 52.088164][ T5998] netlink: 17 bytes leftover after parsing attributes in process `syz.3.427'. [ 52.144000][ T5995] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.377429][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 52.824121][ T4720] Bluetooth: hci3: command 0x0406 tx timeout [ 52.871433][ T6029] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.443'. [ 52.872022][ T6028] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.443'. [ 52.934948][ T6033] netlink: 52 bytes leftover after parsing attributes in process `syz.3.446'. [ 52.959585][ T6031] FAULT_INJECTION: forcing a failure. [ 52.959585][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 52.959599][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.0.444 Not tainted syzkaller #0 PREEMPT [ 52.959609][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.959622][ T6031] Call trace: [ 52.959625][ T6031] show_stack+0x2c/0x3c (C) [ 52.959644][ T6031] __dump_stack+0x30/0x40 [ 52.959657][ T6031] dump_stack_lvl+0xd8/0x12c [ 52.959669][ T6031] dump_stack+0x1c/0x28 [ 52.959681][ T6031] should_fail_ex+0x418/0x58c [ 52.959690][ T6031] should_failslab+0xc4/0x120 [ 52.959699][ T6031] __kmalloc_cache_node_noprof+0x98/0x618 [ 52.959709][ T6031] __alloc_workqueue+0x650/0x11a0 [ 52.959719][ T6031] alloc_workqueue_va+0x5c/0x138 [ 52.959728][ T6031] alloc_workqueue_noprof+0xe0/0x130 [ 52.959737][ T6031] hci_register_dev+0x268/0x8ac [ 52.959747][ T6031] vhci_create_device+0x328/0x624 [ 52.959757][ T6031] vhci_write+0x314/0x3d8 [ 52.959766][ T6031] vfs_write+0x51c/0xa0c [ 52.959774][ T6031] ksys_write+0x12c/0x228 [ 52.959781][ T6031] __arm64_sys_write+0x84/0x98 [ 52.959790][ T6031] invoke_syscall+0x98/0x244 [ 52.959802][ T6031] el0_svc_common+0xec/0x23c [ 52.959814][ T6031] do_el0_svc+0x4c/0x5c [ 52.959826][ T6031] el0_svc+0x60/0x1d8 [ 52.959834][ T6031] el0t_64_sync_handler+0x44/0x104 [ 52.959843][ T6031] el0t_64_sync+0x198/0x19c [ 52.959987][ T6031] Bluetooth: Can't register HCI device [ 53.044328][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 53.331115][ T6062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.458'. [ 53.985258][ T51] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 54.221505][ T6107] __nla_validate_parse: 7 callbacks suppressed [ 54.221517][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.480'. [ 54.425769][ T6123] FAULT_INJECTION: forcing a failure. [ 54.425769][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 54.425784][ T6123] CPU: 1 UID: 0 PID: 6123 Comm: syz.0.486 Not tainted syzkaller #0 PREEMPT [ 54.425796][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.425810][ T6123] Call trace: [ 54.425814][ T6123] show_stack+0x2c/0x3c (C) [ 54.425835][ T6123] __dump_stack+0x30/0x40 [ 54.425847][ T6123] dump_stack_lvl+0xd8/0x12c [ 54.425859][ T6123] dump_stack+0x1c/0x28 [ 54.425871][ T6123] should_fail_ex+0x418/0x58c [ 54.425881][ T6123] should_failslab+0xc4/0x120 [ 54.425890][ T6123] __kmalloc_cache_noprof+0x94/0x5fc [ 54.425900][ T6123] init_srcu_struct_fields+0x90/0x9a8 [ 54.425911][ T6123] __init_srcu_struct_common+0x54/0x68 [ 54.425920][ T6123] init_srcu_struct_lockdep+0x3c/0x6c [ 54.425933][ T6123] blk_mq_alloc_tag_set+0x330/0xb80 [ 54.425944][ T6123] loop_add+0x31c/0x8e4 [ 54.425954][ T6123] loop_control_ioctl+0x138/0x510 [ 54.425963][ T6123] __arm64_sys_ioctl+0x154/0x1cc [ 54.425972][ T6123] invoke_syscall+0x98/0x244 [ 54.425986][ T6123] el0_svc_common+0xec/0x23c [ 54.425998][ T6123] do_el0_svc+0x4c/0x5c [ 54.426010][ T6123] el0_svc+0x60/0x1d8 [ 54.426019][ T6123] el0t_64_sync_handler+0x44/0x104 [ 54.426027][ T6123] el0t_64_sync+0x198/0x19c [ 54.615049][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 55.299956][ T6156] binder: 6155:6156 tried to acquire reference to desc 0, got 1 instead [ 55.419852][ T6162] FAULT_INJECTION: forcing a failure. [ 55.419852][ T6162] name fail_futex, interval 1, probability 0, space 0, times 0 [ 55.419875][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.0.504 Not tainted syzkaller #0 PREEMPT [ 55.419886][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.419900][ T6162] Call trace: [ 55.419904][ T6162] show_stack+0x2c/0x3c (C) [ 55.419926][ T6162] __dump_stack+0x30/0x40 [ 55.419938][ T6162] dump_stack_lvl+0xd8/0x12c [ 55.419950][ T6162] dump_stack+0x1c/0x28 [ 55.419962][ T6162] should_fail_ex+0x418/0x58c [ 55.419971][ T6162] should_fail+0x14/0x24 [ 55.419978][ T6162] get_futex_key+0x1ec/0x12b0 [ 55.419990][ T6162] futex_wake+0x10c/0x594 [ 55.420001][ T6162] do_futex+0x2c4/0x378 [ 55.420012][ T6162] __arm64_sys_futex+0x2e4/0x418 [ 55.420023][ T6162] invoke_syscall+0x98/0x244 [ 55.420035][ T6162] el0_svc_common+0xec/0x23c [ 55.420047][ T6162] do_el0_svc+0x4c/0x5c [ 55.420058][ T6162] el0_svc+0x60/0x1d8 [ 55.420067][ T6162] el0t_64_sync_handler+0x44/0x104 [ 55.420076][ T6162] el0t_64_sync+0x198/0x19c [ 55.522303][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 55.522318][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 55.655812][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.509'. [ 55.655838][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.509'. [ 55.657939][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.509'. [ 55.657954][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.509'. [ 55.703345][ C1] net_ratelimit: 1376 callbacks suppressed [ 55.788497][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 55.931781][ T6189] netlink: 'syz.4.515': attribute type 7 has an invalid length. [ 55.931797][ T6189] netlink: 'syz.4.515': attribute type 5 has an invalid length. [ 55.931809][ T6189] netlink: 17 bytes leftover after parsing attributes in process `syz.4.515'. [ 55.935737][ T6186] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.060078][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 56.117801][ T10] binder: release 6155:6156 transaction 5 out, still active [ 56.117819][ T10] binder: undelivered TRANSACTION_COMPLETE [ 56.131858][ T10] binder: send failed reply for transaction 5, target dead [ 56.472593][ T6214] loop3: detected capacity change from 0 to 2048 [ 56.854756][ T4965] IPVS: starting estimator thread 0... [ 56.943881][ T6241] IPVS: using max 60 ests per chain, 144000 per kthread [ 57.708962][ T6288] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.214266][ T6311] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.557663][ T6330] syz.3.585: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 58.557685][ T6330] ,cpuset= [ 58.557710][ T6330] /,mems_allowed=0 [ 58.557721][ T6330] [ 58.557727][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.3.585 Not tainted syzkaller #0 PREEMPT [ 58.557739][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 58.557753][ T6330] Call trace: [ 58.557756][ T6330] show_stack+0x2c/0x3c (C) [ 58.557778][ T6330] __dump_stack+0x30/0x40 [ 58.557792][ T6330] dump_stack_lvl+0xd8/0x12c [ 58.557804][ T6330] dump_stack+0x1c/0x28 [ 58.557816][ T6330] warn_alloc+0x1c4/0x1d8 [ 58.557826][ T6330] __vmalloc_node_range_noprof+0xc28/0xe9c [ 58.557838][ T6330] __vmalloc_node_noprof+0xec/0x14c [ 58.557849][ T6330] __vmalloc_noprof+0x64/0x8c [ 58.557860][ T6330] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 58.557872][ T6330] bpf_prog_alloc+0x48/0x110 [ 58.557882][ T6330] bpf_prog_load+0x5e0/0x1554 [ 58.557894][ T6330] __sys_bpf+0x7d4/0x82c [ 58.557904][ T6330] __arm64_sys_bpf+0xd0/0xec [ 58.557913][ T6330] invoke_syscall+0x98/0x244 [ 58.557927][ T6330] el0_svc_common+0xec/0x23c [ 58.557939][ T6330] do_el0_svc+0x4c/0x5c [ 58.557950][ T6330] el0_svc+0x60/0x1d8 [ 58.557960][ T6330] el0t_64_sync_handler+0x44/0x104 [ 58.557968][ T6330] el0t_64_sync+0x198/0x19c [ 58.557979][ T6330] Mem-Info: [ 58.557984][ T6330] active_anon:26 inactive_anon:41980 isolated_anon:0 [ 58.557984][ T6330] active_file:3128 inactive_file:17935 isolated_file:0 [ 58.557984][ T6330] unevictable:768 dirty:703 writeback:0 [ 58.557984][ T6330] slab_reclaimable:11111 slab_unreclaimable:92833 [ 58.557984][ T6330] mapped:33229 shmem:37794 pagetables:1013 [ 58.557984][ T6330] sec_pagetables:0 bounce:0 [ 58.557984][ T6330] kernel_misc_reclaimable:0 [ 58.557984][ T6330] free:1402638 free_pcp:36959 free_cma:7616 [ 58.558007][ T6330] Node 0 active_anon:104kB inactive_anon:167920kB active_file:12512kB inactive_file:71740kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:132916kB dirty:2812kB writeback:0kB shmem:151176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9092kB pagetables:4052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 58.558030][ T6330] Node 0 [ 58.558033][ T6330] DMA free:3077888kB boost:0kB min:20400kB low:25500kB high:30600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 58.558055][ T6330] lowmem_reserve[]: 0 0 3637 3637 3637 [ 58.558073][ T6330] [ 58.558076][ T6330] Node 0 Normal free:2532664kB boost:0kB min:24652kB low:30812kB high:36972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:104kB inactive_anon:167920kB active_file:12512kB inactive_file:71740kB unevictable:3072kB writepending:2812kB zspages:0kB present:5242880kB managed:3724676kB mlocked:0kB bounce:0kB free_pcp:147836kB local_pcp:76512kB free_cma:0kB [ 58.558102][ T6330] lowmem_reserve[]: 0 [ 58.558107][ T6330] 0 0 0 0 [ 58.558121][ T6330] Node 0 DMA: [ 58.558130][ T6330] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 58.558148][ T6330] 0*128kB 1*256kB (C) 1*512kB [ 58.558162][ T6330] (C) 1*1024kB (C) 0*2048kB 751*4096kB [ 58.558180][ T6330] (MC) = 3077888kB [ 58.558187][ T6330] Node 0 Normal: 16*4kB [ 58.558199][ T6330] (ME) 224*8kB (UM) 2*16kB (UE) [ 58.558215][ T6330] 47*32kB (UM) 109*64kB (UE) 72*128kB [ 58.558231][ T6330] (UE) 18*256kB (UME) 1*512kB (E) 1*1024kB [ 58.558251][ T6330] (U) 2*2048kB (UE) 611*4096kB (M) = 2532480kB [ 58.558271][ T6330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.558278][ T6330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 58.558285][ T6330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 58.558292][ T6330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 58.558299][ T6330] 58853 total pagecache pages [ 58.558303][ T6330] 0 pages in swap cache [ 58.558306][ T6330] Free swap = 124996kB [ 58.558310][ T6330] Total swap = 124996kB [ 58.558314][ T6330] 2097152 pages RAM [ 58.558318][ T6330] 0 pages HighMem/MovableOnly [ 58.558321][ T6330] 395935 pages reserved [ 58.558325][ T6330] 8192 pages cma reserved [ 58.558328][ T6330] 0 pages hwpoisoned [ 58.677533][ T6337] loop0: detected capacity change from 0 to 512 [ 58.688554][ T6337] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.589: inode has both inline data and extents flags [ 58.688572][ T6337] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.688722][ T6337] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.589: couldn't read orphan inode 15 (err -117) [ 58.688735][ T6337] loop0: lost filesystem error report for type 5 error -117 [ 58.723788][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.790918][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.160056][ T6365] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.172780][ T4710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 59.174584][ T6360] FAULT_INJECTION: forcing a failure. [ 59.174584][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 59.174600][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.3.599 Not tainted syzkaller #0 PREEMPT [ 59.174611][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.174624][ T6360] Call trace: [ 59.174628][ T6360] show_stack+0x2c/0x3c (C) [ 59.174649][ T6360] __dump_stack+0x30/0x40 [ 59.174662][ T6360] dump_stack_lvl+0xd8/0x12c [ 59.174674][ T6360] dump_stack+0x1c/0x28 [ 59.174685][ T6360] should_fail_ex+0x418/0x58c [ 59.174694][ T6360] should_failslab+0xc4/0x120 [ 59.174704][ T6360] kmem_cache_alloc_noprof+0x94/0x5d4 [ 59.174713][ T6360] __kernfs_new_node+0xf0/0x7d8 [ 59.174725][ T6360] kernfs_new_node+0xe8/0x130 [ 59.174735][ T6360] __kernfs_create_file+0x60/0x2e0 [ 59.174747][ T6360] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 59.174760][ T6360] internal_create_group+0x550/0xb30 [ 59.174769][ T6360] internal_create_groups+0x64/0x138 [ 59.174778][ T6360] sysfs_create_groups+0x2c/0x3c [ 59.174786][ T6360] device_add_attrs+0x17c/0x4e4 [ 59.174797][ T6360] device_add+0x420/0x9e0 [ 59.174807][ T6360] netdev_register_kobject+0x184/0x328 [ 59.174821][ T6360] register_netdevice+0xd74/0x14c0 [ 59.174830][ T6360] register_netdev+0x4c/0x68 [ 59.174838][ T6360] gether_register_netdev+0x84/0x174 [ 59.174852][ T6360] ecm_bind+0x518/0x8d0 [ 59.174861][ T6360] usb_add_function+0x1d0/0x6bc [ 59.174873][ T6360] configfs_composite_bind+0xb4c/0x10b8 [ 59.174884][ T6360] gadget_bind_driver+0x274/0x834 [ 59.174895][ T6360] really_probe+0x29c/0x800 [ 59.174904][ T6360] __driver_probe_device+0x1e0/0x350 [ 59.174913][ T6360] driver_probe_device+0x6c/0x19c [ 59.174922][ T6360] __driver_attach+0x168/0x384 [ 59.174931][ T6360] bus_for_each_dev+0x128/0x1b4 [ 59.174943][ T6360] driver_attach+0x50/0x60 [ 59.174951][ T6360] bus_add_driver+0x208/0x500 [ 59.174963][ T6360] driver_register+0x220/0x310 [ 59.174972][ T6360] usb_gadget_register_driver_owner+0xf0/0x25c [ 59.174984][ T6360] gadget_dev_desc_UDC_store+0x164/0x22c [ 59.174993][ T6360] configfs_write_iter+0x27c/0x354 [ 59.175002][ T6360] vfs_write+0x51c/0xa0c [ 59.175011][ T6360] ksys_write+0x12c/0x228 [ 59.175019][ T6360] __arm64_sys_write+0x84/0x98 [ 59.175027][ T6360] invoke_syscall+0x98/0x244 [ 59.175039][ T6360] el0_svc_common+0xec/0x23c [ 59.175051][ T6360] do_el0_svc+0x4c/0x5c [ 59.175063][ T6360] el0_svc+0x60/0x1d8 [ 59.175072][ T6360] el0t_64_sync_handler+0x44/0x104 [ 59.175080][ T6360] el0t_64_sync+0x198/0x19c [ 59.176603][ T6365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 59.182137][ T4710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 59.182768][ T4710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 59.183741][ T4710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 59.184388][ T4710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.194305][ T6360] udc dummy_udc.0: failed to start g1: -12 [ 59.194313][ T6360] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 59.195029][ T6360] UDC core: g1: couldn't find an available UDC or it's busy [ 59.543352][ T4710] Bluetooth: hci3: command 0x0406 tx timeout [ 59.561295][ T6364] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.675597][ T3123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.848470][ T3123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.930100][ T3123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.048633][ T3123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.075518][ T6431] FAULT_INJECTION: forcing a failure. [ 60.075518][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 60.075535][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.3.627 Not tainted syzkaller #0 PREEMPT [ 60.075546][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.075559][ T6431] Call trace: [ 60.075562][ T6431] show_stack+0x2c/0x3c (C) [ 60.075581][ T6431] __dump_stack+0x30/0x40 [ 60.075594][ T6431] dump_stack_lvl+0xd8/0x12c [ 60.075605][ T6431] dump_stack+0x1c/0x28 [ 60.075617][ T6431] should_fail_ex+0x418/0x58c [ 60.075626][ T6431] should_failslab+0xc4/0x120 [ 60.075635][ T6431] __kmalloc_flags_noprof+0x140/0x724 [ 60.075645][ T6431] __alloc_empty_sheaf+0x38/0x50 [ 60.075653][ T6431] __pcs_replace_empty_main+0x274/0x4f4 [ 60.075664][ T6431] kmem_cache_alloc_noprof+0x35c/0x5d4 [ 60.075672][ T6431] __rds_conn_create+0x594/0x1920 [ 60.075682][ T6431] rds_conn_create_outgoing+0x60/0x7c [ 60.075691][ T6431] rds_sendmsg+0xd0c/0x1c64 [ 60.075701][ T6431] __sock_sendmsg+0xc8/0x17c [ 60.075712][ T6431] ____sys_sendmsg+0x3d0/0x6c8 [ 60.075724][ T6431] ___sys_sendmsg+0x198/0x224 [ 60.075736][ T6431] __sys_sendmsg+0x158/0x204 [ 60.075747][ T6431] __arm64_sys_sendmsg+0x88/0x9c [ 60.075759][ T6431] invoke_syscall+0x98/0x244 [ 60.075771][ T6431] el0_svc_common+0xec/0x23c [ 60.075783][ T6431] do_el0_svc+0x4c/0x5c [ 60.075795][ T6431] el0_svc+0x60/0x1d8 [ 60.075803][ T6431] el0t_64_sync_handler+0x44/0x104 [ 60.075811][ T6431] el0t_64_sync+0x198/0x19c [ 60.224517][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.224539][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.224618][ T6364] bridge_slave_0: entered allmulticast mode [ 60.225105][ T6364] bridge_slave_0: entered promiscuous mode [ 60.225871][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.225892][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.225965][ T6364] bridge_slave_1: entered allmulticast mode [ 60.226419][ T6364] bridge_slave_1: entered promiscuous mode [ 60.275486][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.276600][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.372272][ T6364] team0: Port device team_slave_0 added [ 60.378600][ T6364] team0: Port device team_slave_1 added [ 60.459559][ T3123] bridge_slave_1: left allmulticast mode [ 60.459573][ T3123] bridge_slave_1: left promiscuous mode [ 60.459646][ T3123] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.468706][ T3123] bridge_slave_0: left allmulticast mode [ 60.468717][ T3123] bridge_slave_0: left promiscuous mode [ 60.468788][ T3123] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.590506][ T6467] loop5: detected capacity change from 0 to 512 [ 60.604677][ T6467] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.641: inode has both inline data and extents flags [ 60.604695][ T6467] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.604809][ T6467] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.641: couldn't read orphan inode 15 (err -117) [ 60.604822][ T6467] loop5: lost filesystem error report for type 5 error -117 [ 60.605334][ T6467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.660338][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.691743][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 60.753314][ C1] net_ratelimit: 218 callbacks suppressed [ 60.777620][ T3123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.794211][ T3123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.827879][ T3123] bond0 (unregistering): Released all slaves [ 60.868049][ T6454] __nla_validate_parse: 5 callbacks suppressed [ 60.868066][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 60.870776][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.870782][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.870795][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.928242][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.928248][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.928261][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.035236][ T6364] hsr_slave_0: entered promiscuous mode [ 61.054012][ T6364] hsr_slave_1: entered promiscuous mode [ 61.054291][ T6364] debugfs: 'hsr0' already exists in 'hsr' [ 61.054299][ T6364] Cannot create hsr debugfs directory [ 61.236016][ T51] Bluetooth: hci5: command tx timeout [ 61.659869][ T3123] hsr_slave_0: left promiscuous mode [ 61.660204][ T3123] hsr_slave_1: left promiscuous mode [ 61.660547][ T3123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.660556][ T3123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.662860][ T3123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.662872][ T3123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.676430][ T3123] veth1_macvtap: left promiscuous mode [ 61.676469][ T3123] veth0_macvtap: left promiscuous mode [ 61.676517][ T3123] veth1_vlan: left promiscuous mode [ 61.676580][ T3123] veth0_vlan: left promiscuous mode [ 61.677629][ T6518] device-mapper: ioctl: Target spec extends beyond end of parameters [ 61.677638][ T6518] device-mapper: ioctl: unable to find target [ 61.900093][ T6541] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.672'. [ 62.026729][ T3123] team0 (unregistering): Port device team_slave_1 removed [ 62.043260][ T3123] team0 (unregistering): Port device team_slave_0 removed [ 62.219876][ T6522] batman_adv: batadv0: Adding interface: syz_tun [ 62.219884][ T6522] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.219902][ T6522] batman_adv: batadv0: Interface activated: syz_tun [ 62.235436][ T6535] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.328061][ T6364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.343592][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.343901][ T6364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.366854][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.367201][ T6364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.382514][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.382825][ T6364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.394141][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.542936][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.673511][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.680180][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.680201][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.680801][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.680818][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.113591][ T6583] ubi: mtd0 is already attached to ubi0 [ 63.189041][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.304655][ T51] Bluetooth: hci5: command tx timeout [ 63.341842][ T6595] binder: 6594:6595 tried to acquire reference to desc 0, got 1 instead [ 63.342013][ T6595] binder_alloc: 6594: binder_alloc_buf, no vma [ 63.342022][ T6595] binder: cannot allocate buffer: vma cleared, target dead or dying [ 63.342043][ T6595] binder: 6594:6595 transaction call to 6594:0 failed 10/29189/-3, code 0 size 72-0 line 3409 [ 63.441595][ T6364] veth0_vlan: entered promiscuous mode [ 63.451831][ T6364] veth1_vlan: entered promiscuous mode [ 63.454308][ T6606] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.690'. [ 63.493810][ T6364] veth0_macvtap: entered promiscuous mode [ 63.516567][ T6364] veth1_macvtap: entered promiscuous mode [ 63.527140][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.528256][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.563460][ T454] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.563604][ T454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.563690][ T454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.563773][ T454] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.614871][ T6612] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.643815][ T6615] fuse: Bad value for 'fd' [ 63.805545][ T6624] loop0: detected capacity change from 0 to 512 [ 63.835834][ T6624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.851188][ T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.851197][ T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.875181][ T6626] syzkaller0: entered promiscuous mode [ 63.875196][ T6626] syzkaller0: entered allmulticast mode [ 63.910200][ T6632] binder: tried to use weak ref as strong ref [ 63.910210][ T6632] binder: 6630:6632 Acquire 1 refcount change on invalid ref 0 ret -22 [ 63.910314][ T6632] binder: 6630:6632 got transaction to invalid handle, 1 [ 63.910323][ T6632] binder: 6630:6632 cannot find target node [ 63.910335][ T6632] binder: 6630:6632 transaction call to 0:0 failed 13/29201/-22, code 0 size 72-0 line 3253 [ 63.959438][ T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.959455][ T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.967750][ T6618] FAULT_INJECTION: forcing a failure. [ 63.967750][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 63.967769][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.0.697 Not tainted syzkaller #0 PREEMPT [ 63.967781][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.967795][ T6618] Call trace: [ 63.967798][ T6618] show_stack+0x2c/0x3c (C) [ 63.967820][ T6618] __dump_stack+0x30/0x40 [ 63.967833][ T6618] dump_stack_lvl+0xd8/0x12c [ 63.967845][ T6618] dump_stack+0x1c/0x28 [ 63.967856][ T6618] should_fail_ex+0x418/0x58c [ 63.967865][ T6618] should_failslab+0xc4/0x120 [ 63.967874][ T6618] __kmalloc_noprof+0x108/0x6c8 [ 63.967884][ T6618] alloc_port_data+0xd0/0x300 [ 63.967896][ T6618] ib_device_set_netdev+0x100/0x5cc [ 63.967907][ T6618] rxe_register_device+0x170/0x30c [ 63.967921][ T6618] rxe_add+0x8cc/0xd68 [ 63.967932][ T6618] rxe_net_add+0x80/0x114 [ 63.967942][ T6618] rxe_newlink+0x114/0x1c0 [ 63.967954][ T6618] nldev_newlink+0x47c/0x4f4 [ 63.967961][ T6618] rdma_nl_rcv+0x4f0/0x814 [ 63.967974][ T6618] netlink_unicast+0x600/0x7f8 [ 63.967986][ T6618] netlink_sendmsg+0x648/0x948 [ 63.967998][ T6618] __sock_sendmsg+0xc8/0x17c ** 28 printk messages dropped ** ** 129 printk messages dropped ** ** 115 printk messages dropped ** ** 147 printk messages dropped ** [ 64.097153][ T6639] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.704'. [ 64.251899][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.505150][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.505182][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.519753][ T1097] cfg80211: failed to load regulatory.db [ 64.544828][ T6662] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 64.604648][ T6662] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 64.749405][ T6664] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.837839][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.945902][ T6668] binder: tried to use weak ref as strong ref [ 64.945916][ T6668] binder: 6666:6668 Acquire 1 refcount change on invalid ref 0 ret -22 [ 64.946017][ T6668] binder: 6666:6668 got transaction to invalid handle, 1 [ 64.946026][ T6668] binder: 6666:6668 cannot find target node [ 64.946040][ T6668] binder: 6666:6668 transaction call to 0:0 failed 16/29201/-22, code 0 size 72-0 line 3253 [ 65.383376][ T51] Bluetooth: hci5: command tx timeout [ 65.522446][ T6698] binder: tried to use weak ref as strong ref [ 65.522464][ T6698] binder: 6697:6698 Acquire 1 refcount change on invalid ref 0 ret -22 [ 65.525338][ T6698] binder: 6697:6698 got transaction to invalid handle, 1 [ 65.525351][ T6698] binder: 6697:6698 cannot find target node [ 65.525366][ T6698] binder: 6697:6698 transaction call to 0:0 failed 19/29201/-22, code 0 size 72-0 line 3253 [ 65.561543][ T6706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.731'. [ 65.713093][ T6719] FAULT_INJECTION: forcing a failure. [ 65.713093][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 65.713117][ T6719] CPU: 0 UID: 0 PID: 6719 Comm: syz.0.737 Not tainted syzkaller #0 PREEMPT [ 65.713131][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.713146][ T6719] Call trace: [ 65.713149][ T6719] show_stack+0x2c/0x3c (C) [ 65.713171][ T6719] __dump_stack+0x30/0x40 [ 65.713183][ T6719] dump_stack_lvl+0xd8/0x12c [ 65.713195][ T6719] dump_stack+0x1c/0x28 [ 65.713207][ T6719] should_fail_ex+0x418/0x58c [ 65.713216][ T6719] should_failslab+0xc4/0x120 [ 65.713225][ T6719] __kmalloc_node_noprof+0x10c/0x6e4 [ 65.713235][ T6719] crypto_create_tfm_node+0x94/0x304 [ 65.713249][ T6719] crypto_alloc_tfm_node+0x100/0x22c [ 65.713261][ T6719] crypto_alloc_skcipher+0x40/0x54 [ 65.713272][ T6719] init_skcipher_req+0x30/0x19c [ 65.713289][ T6719] encrypted_read+0x2ac/0xc0c [ 65.713301][ T6719] __keyctl_read_key+0xac/0xd4 [ 65.713312][ T6719] keyctl_read_key+0x1c8/0x30c [ 65.713322][ T6719] __arm64_sys_keyctl+0x138/0x3e8 [ 65.713333][ T6719] invoke_syscall+0x98/0x244 [ 65.713346][ T6719] el0_svc_common+0xec/0x23c [ 65.713358][ T6719] do_el0_svc+0x4c/0x5c [ 65.713370][ T6719] el0_svc+0x60/0x1d8 [ 65.713379][ T6719] el0t_64_sync_handler+0x44/0x104 [ 65.713387][ T6719] el0t_64_sync+0x198/0x19c [ 65.713426][ T6719] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 65.943334][ C1] net_ratelimit: 434 callbacks suppressed [ 65.958666][ T6736] binder: BINDER_SET_CONTEXT_MGR already set [ 65.958677][ T6736] binder: 6735:6736 ioctl 4018620d 20000180 returned -16 [ 66.278023][ T6768] binder: 6768:6767 translate fd failed [ 66.278570][ T6768] binder: 6767:6768 transaction async to 6767:0 failed 26/29201/-1, code 0 size 88-24 line 3594 [ 66.279180][ T6768] binder: 6767:6768 ioctl c0306201 0 returned -14 [ 66.346452][ T6774] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.578124][ T4838] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 66.772328][ T6797] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.881777][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.779'. [ 67.124608][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 67.124619][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 67.160938][ T6817] loop4: detected capacity change from 0 to 2048 [ 67.187800][ T6817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.236540][ T6825] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.271840][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.463429][ T51] Bluetooth: hci5: command tx timeout [ 67.617623][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.797'. [ 67.617642][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.797'. [ 67.757677][ T6861] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.852143][ T4710] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 67.914151][ T6869] bus: 'gadget': add driver configfs-gadget.g1 [ 67.914174][ T6869] kobject: 'configfs-gadget.g1' (00000000e702a5ff): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 67.914215][ T6869] gadget gadget.0: bus: 'gadget': __driver_probe_device: matched device with driver configfs-gadget.g1 [ 67.914235][ T6869] gadget gadget.0: bus: 'gadget': really_probe: probing driver configfs-gadget.g1 with device [ 67.914261][ T6869] configfs-gadget.g1 gadget.0: no default pinctrl state [ 67.914310][ T6869] udc dummy_udc.0: binding gadget driver [g1] [ 67.914338][ T6869] configfs-gadget.g1 gadget.0: adding 'cdc_ethernet'/00000000d0f2ee42 to config 'c'/00000000f1e858a8 [ 67.914552][ T6869] ------------[ cut here ]------------ [ 67.914557][ T6869] kernel BUG at net/core/dev.c:11443! [ 67.914663][ T6869] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 67.932496][ T6869] Modules linked in: [ 67.933388][ T6869] CPU: 1 UID: 0 PID: 6869 Comm: syz.6.806 Not tainted syzkaller #0 PREEMPT [ 67.935456][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.937767][ T6869] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 67.939641][ T6869] pc : register_netdevice+0x145c/0x14c0 [ 67.940897][ T6869] lr : register_netdevice+0x145c/0x14c0 [ 67.942185][ T6869] sp : ffff8000952173a0 [ 67.943139][ T6869] x29: ffff800095217480 x28: dfff800000000000 x27: dfff800000000000 [ 67.944865][ T6869] x26: ffff700012a42e7c x25: ffff0000c8a88c00 x24: ffff80008f7604c0 [ 67.946659][ T6869] x23: 1fffe0001aad80f1 x22: 0000000000001049 x21: 0000000000000003 [ 67.948207][ T6869] x20: ffff0000d56c0788 x19: ffff0000d56c0000 x18: 0000000000000000 [ 67.949871][ T6869] x17: 6e695f6464615f74 x16: 63656a626f6b203a x15: 0000000000000001 [ 67.951646][ T6869] x14: 000000000068ed56 x13: 0000000000000001 x12: 0000000000000000 [ 67.953420][ T6869] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000003641 [ 67.955109][ T6869] x8 : ffff80009a6c9000 x7 : ffff800084c8f2b0 x6 : 0000000000000000 [ 67.956844][ T6869] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800084c5214c [ 67.958678][ T6869] x2 : 0000000000000003 x1 : ffff0001031f9d80 x0 : 0000000000000001 [ 67.960538][ T6869] dump_backtrace(regs = 000000005938396a tsk = 0000000000000000) [ 67.962342][ T6869] Call trace: [ 67.963059][ T6869] register_netdevice+0x145c/0x14c0 (P) [ 67.964248][ T6869] register_netdev+0x4c/0x68 [ 67.965242][ T6869] gether_register_netdev+0x84/0x174 [ 67.966349][ T6869] ecm_bind+0x518/0x8d0 [ 67.967260][ T6869] usb_add_function+0x1d0/0x6bc [ 67.968363][ T6869] configfs_composite_bind+0xb4c/0x10b8 [ 67.969645][ T6869] gadget_bind_driver+0x274/0x834 [ 67.970787][ T6869] really_probe+0x29c/0x800 [ 67.971807][ T6869] __driver_probe_device+0x1e0/0x350 [ 67.973072][ T6869] driver_probe_device+0x6c/0x19c [ 67.974278][ T6869] __driver_attach+0x168/0x384 [ 67.975385][ T6869] bus_for_each_dev+0x128/0x1b4 [ 67.976509][ T6869] driver_attach+0x50/0x60 [ 67.977534][ T6869] bus_add_driver+0x208/0x500 [ 67.978626][ T6869] driver_register+0x220/0x310 [ 67.979694][ T6869] usb_gadget_register_driver_owner+0xf0/0x25c [ 67.981081][ T6869] gadget_dev_desc_UDC_store+0x164/0x22c [ 67.982381][ T6869] configfs_write_iter+0x27c/0x354 [ 67.983445][ T6869] vfs_write+0x51c/0xa0c [ 67.984396][ T6869] ksys_write+0x12c/0x228 [ 67.985361][ T6869] __arm64_sys_write+0x84/0x98 [ 67.986432][ T6869] invoke_syscall+0x98/0x244 [ 67.987471][ T6869] el0_svc_common+0xec/0x23c [ 67.988531][ T6869] do_el0_svc+0x4c/0x5c [ 67.989460][ T6869] el0_svc+0x60/0x1d8 [ 67.990355][ T6869] el0t_64_sync_handler+0x44/0x104 [ 67.991425][ T6869] el0t_64_sync+0x198/0x19c [ 67.992443][ T6869] Code: 17ffff1b 96e7a2e9 d4210000 96e7a2e7 (d4210000) [ 67.994006][ T6869] ---[ end trace 0000000000000000 ]--- [ 68.363327][ T6866] kcov: kcov_task_exit: t = ffff0001031fd880, kcov->t = ffff0001031fd880 [ 68.428064][ T6869] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 68.430956][ T6869] SMP: stopping secondary CPUs [ 68.431917][ T6869] Kernel Offset: disabled [ 68.432904][ T6869] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 68.434303][ T6869] Memory Limit: none [ 68.863831][ T6869] Rebooting in 86400 seconds..