last executing test programs: 6.026079513s ago: executing program 1 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='1:0', 0x3) 5.940858125s ago: executing program 1 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 5.865511833s ago: executing program 1 (id=229): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r1, &(0x7f0000000800)='transport=loop,nqn=t', 0x14) 5.68061769s ago: executing program 1 (id=234): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x7}, {0x1, 0x8}, {0x44e9f4f6f6d4d2eb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400c4}, 0x40042) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffff0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f023}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3a, [0x4, 0xd, 0xb82e, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7fff, 0x3, 0x3, 0x40, 0x8, 0x6, 0x4, 0x6, 0x3, 0xfffc, 0xffff, 0x60, 0x1, 0x3, 0x7fff, 0xa, 0x43, 0x6, 0x0, 0x4, 0x9, 0x7, 0x3, 0x4, 0x6, 0xc, 0x7, 0x3, 0x1, 0x1, 0x4, 0x8, 0x4, 0x2, 0x8000, 0x8, 0x800, 0x1, 0x0, 0x81], 0x7fb}}) r6 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 5.59408986s ago: executing program 2 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080d5}, 0x4000000) write$tun(r1, &(0x7f0000000c40)={@val={0x0, 0xf5}, @void, @ipv6=@tcp={0x4, 0x6, "5a96b2", 0x14, 0x6, 0xff, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x6, 0x0, 0x3}}}}}, 0x40) 5.555657546s ago: executing program 1 (id=236): socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9) 5.379692302s ago: executing program 2 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 4.592535984s ago: executing program 2 (id=247): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e00"], 0x0, 0x34, 0x0, 0x0, 0x7fff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 4.554496359s ago: executing program 1 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.49320059s ago: executing program 2 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs2/custom0\x00', 0x0, 0x0) r1 = syz_clone3(&(0x7f0000000fc0)={0x100, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840), {0x9}, &(0x7f0000000880)=""/121, 0x79, &(0x7f0000000e80)=""/251, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000001040)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x1000720) 4.460853104s ago: executing program 4 (id=253): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000002c0)=""/253, 0xfd, 0x401, 0x8, 0xe1, 0x8, 0x80}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 4.341004648s ago: executing program 4 (id=255): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 4.285819774s ago: executing program 4 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x408}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x40) 4.208931678s ago: executing program 3 (id=259): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000000)={0x8, r1}) 4.204887202s ago: executing program 4 (id=260): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x68902, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.191052566s ago: executing program 0 (id=261): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000c80)={0x1, 0x3, &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40), 0x0, 0x5}) 4.105606501s ago: executing program 3 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 4.105161238s ago: executing program 0 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="68000000000905040000002000000000020000000900010089797a3000000000140002800600010000020000050002000600000008000500000000da14002c000480080001000000d794be485a1254c20100706f6c69637930000800020000000002080003000000001e", 0x6a}], 0x1}, 0x0) 3.884727476s ago: executing program 0 (id=264): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/QEMU0002:00/status\x00', 0x0, 0x0) read(r4, &(0x7f0000000280)=""/100, 0x64) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mmap(&(0x7f000007d000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x2000) 3.882834903s ago: executing program 2 (id=265): setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140)=0x66, 0x4) 3.875869235s ago: executing program 3 (id=266): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x2b, &(0x7f0000000040)=[{0x14, '\x00', @buffer={"29ca384f66a22f2428c84767c6f300000000081700", 0x20}, 0x20007489}]}) 3.871110602s ago: executing program 4 (id=267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 3.815107778s ago: executing program 3 (id=268): r0 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x18a) 3.814903692s ago: executing program 2 (id=269): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010102}}]}, 0x28}}, 0x0) 3.814618168s ago: executing program 4 (id=270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x7, 0x100}, 0x4}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.340256166s ago: executing program 3 (id=271): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x408}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x40) 670.488914ms ago: executing program 0 (id=272): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 638.640987ms ago: executing program 0 (id=273): semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000057c0)=""/33) 133.847µs ago: executing program 3 (id=274): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) accept(r2, 0x0, 0x0) 0s ago: executing program 0 (id=275): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x7c4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xff, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0xe9db, 0x5f, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 21.362987][ T4677] cgroup: Unknown subsys name 'net' [ 21.504115][ T4677] cgroup: Unknown subsys name 'cpuset' [ 21.505432][ T4677] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.675862][ T4677] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.524693][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.535380][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.536275][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.536440][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.536674][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.536980][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.537575][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.537801][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.537877][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.538193][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.538271][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.538282][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.538732][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.539038][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.539325][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.539403][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.539406][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.539566][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.542547][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.550882][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.551116][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.574541][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.574896][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.575167][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.576077][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.901030][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.901373][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.905956][ T4705] bridge_slave_0: entered allmulticast mode [ 22.906456][ T4705] bridge_slave_0: entered promiscuous mode [ 22.910357][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.910386][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.910451][ T4705] bridge_slave_1: entered allmulticast mode [ 22.910890][ T4705] bridge_slave_1: entered promiscuous mode [ 22.937715][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.950461][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.954557][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.954588][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.954679][ T4714] bridge_slave_0: entered allmulticast mode [ 22.955097][ T4714] bridge_slave_0: entered promiscuous mode [ 22.963069][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.963568][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.963689][ T4714] bridge_slave_1: entered allmulticast mode [ 22.964139][ T4714] bridge_slave_1: entered promiscuous mode [ 22.993175][ T4705] team0: Port device team_slave_0 added [ 22.994044][ T4705] team0: Port device team_slave_1 added [ 23.009519][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.014677][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.015087][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.015097][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.015108][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.018398][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.018409][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.018424][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.040498][ T4714] team0: Port device team_slave_0 added [ 23.041210][ T4714] team0: Port device team_slave_1 added [ 23.059717][ T4705] hsr_slave_0: entered promiscuous mode [ 23.060091][ T4705] hsr_slave_1: entered promiscuous mode [ 23.067904][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.067915][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.067925][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.071325][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.071336][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.071347][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.090175][ T4714] hsr_slave_0: entered promiscuous mode [ 23.090463][ T4714] hsr_slave_1: entered promiscuous mode [ 23.090662][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 23.090703][ T4714] Cannot create hsr debugfs directory [ 23.129587][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.129621][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.129680][ T4706] bridge_slave_0: entered allmulticast mode [ 23.130194][ T4706] bridge_slave_0: entered promiscuous mode [ 23.152626][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.152656][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.152714][ T4706] bridge_slave_1: entered allmulticast mode [ 23.153139][ T4706] bridge_slave_1: entered promiscuous mode [ 23.172598][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.174831][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.207917][ T4706] team0: Port device team_slave_0 added [ 23.208755][ T4706] team0: Port device team_slave_1 added [ 23.218616][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.218686][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.218754][ T4716] bridge_slave_0: entered allmulticast mode [ 23.219186][ T4716] bridge_slave_0: entered promiscuous mode [ 23.222436][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.222464][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.222559][ T4716] bridge_slave_1: entered allmulticast mode [ 23.222995][ T4716] bridge_slave_1: entered promiscuous mode [ 23.247259][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.247271][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.247285][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.250950][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.251951][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.252071][ T4709] bridge_slave_0: entered allmulticast mode [ 23.252533][ T4709] bridge_slave_0: entered promiscuous mode [ 23.253453][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.253476][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.253533][ T4709] bridge_slave_1: entered allmulticast mode [ 23.253937][ T4709] bridge_slave_1: entered promiscuous mode [ 23.255149][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.256078][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.264216][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.264226][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.264240][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.274489][ T4716] team0: Port device team_slave_0 added [ 23.275280][ T4716] team0: Port device team_slave_1 added [ 23.281265][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.281275][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.281290][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.285805][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.286773][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.301366][ T4709] team0: Port device team_slave_0 added [ 23.301859][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.301866][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.301881][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.309734][ T4709] team0: Port device team_slave_1 added [ 23.322834][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.325200][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.325566][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.326636][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.334577][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.334588][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.334605][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.335268][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.335275][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.335287][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.346649][ T4709] hsr_slave_0: entered promiscuous mode [ 23.346964][ T4709] hsr_slave_1: entered promiscuous mode [ 23.347168][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 23.347179][ T4709] Cannot create hsr debugfs directory [ 23.363283][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.364980][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.365304][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.366283][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.368167][ T4716] hsr_slave_0: entered promiscuous mode [ 23.368459][ T4716] hsr_slave_1: entered promiscuous mode [ 23.368641][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 23.368651][ T4716] Cannot create hsr debugfs directory [ 23.377147][ T4706] hsr_slave_0: entered promiscuous mode [ 23.377430][ T4706] hsr_slave_1: entered promiscuous mode [ 23.377601][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 23.377611][ T4706] Cannot create hsr debugfs directory [ 23.446307][ T4705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.447599][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.447945][ T4705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.449070][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.463485][ T4705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.464663][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.464995][ T4705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.466025][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.494400][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.494448][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.494588][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.494617][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.500789][ T4709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.506475][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.506864][ T4709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.509149][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.511407][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.511476][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.511557][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.511593][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.514305][ T4709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.516261][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.524789][ T4709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.525758][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.558687][ T4716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.562602][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.568484][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.568515][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.568579][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.568621][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.577875][ T4716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.579122][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.579474][ T4716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.580479][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.583703][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.585260][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.591399][ T4716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.594660][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.610544][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.616944][ T4706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.618300][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.619356][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.619897][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.621225][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.629369][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.635513][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.635775][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.639545][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.642204][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.642240][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.655106][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.655273][ T4706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.656370][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.656701][ T4706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.657757][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.658138][ T4706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.659892][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.661018][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.672342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.672372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.672677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.672694][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.680316][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.680343][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.698067][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.698095][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.718739][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.730538][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.734162][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.734193][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.752085][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.759039][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.773874][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.773902][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.775676][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.775695][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.793578][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.803724][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.806585][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.806598][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.823171][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.823199][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.823711][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.823731][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.848774][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.848794][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.981256][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.018407][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.022445][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.043823][ T4705] veth0_vlan: entered promiscuous mode [ 24.045818][ T4705] veth1_vlan: entered promiscuous mode [ 24.057926][ T4709] veth0_vlan: entered promiscuous mode [ 24.066625][ T4709] veth1_vlan: entered promiscuous mode [ 24.075493][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.084420][ T4705] veth0_macvtap: entered promiscuous mode [ 24.087351][ T4709] veth0_macvtap: entered promiscuous mode [ 24.088767][ T4709] veth1_macvtap: entered promiscuous mode [ 24.107224][ T4705] veth1_macvtap: entered promiscuous mode [ 24.110566][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.118400][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.119647][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.120678][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.137166][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.154147][ T4716] veth0_vlan: entered promiscuous mode [ 24.175211][ T4716] veth1_vlan: entered promiscuous mode [ 24.200714][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.200729][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.209768][ T4714] veth0_vlan: entered promiscuous mode [ 24.220736][ T4706] veth0_vlan: entered promiscuous mode [ 24.223403][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.224769][ T4714] veth1_vlan: entered promiscuous mode [ 24.228951][ T4716] veth0_macvtap: entered promiscuous mode [ 24.230363][ T4716] veth1_macvtap: entered promiscuous mode [ 24.233178][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.233190][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.243031][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.246000][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.249346][ T4706] veth1_vlan: entered promiscuous mode [ 24.264719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.264735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.276643][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.276934][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.276943][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.277069][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.290814][ T4714] veth0_macvtap: entered promiscuous mode [ 24.293436][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.293531][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.294661][ T4706] veth0_macvtap: entered promiscuous mode [ 24.295969][ T4706] veth1_macvtap: entered promiscuous mode [ 24.299611][ T4714] veth1_macvtap: entered promiscuous mode [ 24.315537][ T930] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.320069][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.324820][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.339224][ T930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.339240][ T930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.340147][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.347911][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.360114][ T4709] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.404717][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.404732][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.446088][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.446104][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.448095][ T4892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 24.448108][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 24.448604][ T4892] vhci_hcd vhci_hcd.0: Device attached [ 24.450955][ T4898] vhci_hcd: connection closed [ 24.452946][ T1337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453476][ T1337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453495][ T1337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453512][ T1337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453527][ T1337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453541][ T1337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453554][ T1337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453568][ T1337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453581][ T1337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453595][ T1337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453608][ T1337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453621][ T1337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453634][ T1337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.453648][ T1337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.455111][ T12] vhci_hcd vhci_hcd.2: stop threads [ 24.455238][ T12] vhci_hcd vhci_hcd.2: release socket [ 24.455259][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 24.462811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.462824][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.493487][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.493499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.509079][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.509097][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.562010][ T4710] Bluetooth: hci0: command tx timeout [ 24.576995][ T4908] loop3: detected capacity change from 0 to 1024 [ 24.579513][ T4908] ======================================================= [ 24.579513][ T4908] WARNING: The mand mount option has been deprecated and [ 24.579513][ T4908] and is ignored by this kernel. Remove the mand [ 24.579513][ T4908] option from the mount to silence this warning. [ 24.579513][ T4908] ======================================================= [ 24.579570][ T4908] EXT4-fs: Ignoring removed bh option [ 24.620833][ T4908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 24.625212][ T4908] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.7: lblock 0 mapped to illegal pblock 0 (length 1) [ 24.639935][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 24.642419][ T4711] Bluetooth: hci3: command tx timeout [ 24.642609][ T4711] Bluetooth: hci2: command tx timeout [ 24.642678][ T4711] Bluetooth: hci1: command tx timeout [ 24.643326][ T4710] Bluetooth: hci4: command tx timeout [ 25.244287][ T4940] loop2: detected capacity change from 0 to 4096 [ 25.244727][ T4940] EXT4-fs: Ignoring removed nobh option [ 25.244835][ T4940] EXT4-fs: Ignoring removed bh option [ 25.250031][ T4940] EXT4-fs (loop2): Test dummy encryption mode enabled [ 25.256529][ T4940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.270904][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.392064][ T4798] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 25.730561][ T4949] loop4: detected capacity change from 0 to 512 [ 25.751296][ T4949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 25.751959][ T4949] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 25.752150][ T4949] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.24: invalid indirect mapped block 2683928664 (level 1) [ 25.752208][ T4949] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 25.761036][ T4949] EXT4-fs (loop4): 1 truncate cleaned up [ 25.769837][ T4949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.775225][ T4954] loop3: detected capacity change from 0 to 2048 [ 25.777300][ T4949] Bluetooth: MGMT ver 1.23 [ 25.784354][ T4798] usb 1-1: New USB device found, idVendor=39b3, idProduct=8199, bcdDevice= 0.88 [ 25.786056][ T4798] usb 1-1: config 1 has an invalid interface number: 178 but max is 0 [ 25.786069][ T4798] usb 1-1: config 1 has no interface number 0 [ 25.786081][ T4798] usb 1-1: config 1 interface 178 has no altsetting 0 [ 25.789362][ T4798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.789375][ T4798] usb 1-1: Product: syz [ 25.789382][ T4798] usb 1-1: Manufacturer: syz [ 25.789389][ T4798] usb 1-1: SerialNumber: syz [ 25.816639][ T4954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.819205][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.532679][ T4798] usb 1-1: USB disconnect, device number 2 [ 26.622245][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.641777][ T4710] Bluetooth: hci0: command tx timeout [ 26.688779][ T4981] loop3: detected capacity change from 0 to 2048 [ 26.697376][ T4981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.740493][ T4710] Bluetooth: hci4: command tx timeout [ 26.740523][ T4710] Bluetooth: hci3: command tx timeout [ 26.792030][ T4718] Bluetooth: hci1: command tx timeout [ 26.803865][ T4988] Need at least one configuration in g1. [ 26.803959][ T4988] udc dummy_udc.0: failed to start g1: -22 [ 26.803971][ T4988] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 26.805754][ T4988] UDC core: g1: couldn't find an available UDC or it's busy [ 27.161979][ T4991] Zero length message leads to an empty skb [ 27.205588][ T4997] tipc: Started in network mode [ 27.205610][ T4997] tipc: Node identity ac1414aa, cluster identity 4711 [ 27.205922][ T4997] tipc: New replicast peer: 172.20.20.187 [ 27.206312][ T4997] tipc: Enabled bearer , priority 10 [ 27.298939][ T5005] loop4: detected capacity change from 0 to 2048 [ 27.314905][ T5005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.748126][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.950893][ T5030] loop1: detected capacity change from 0 to 32768 [ 28.054189][ T5042] loop0: detected capacity change from 0 to 8 [ 28.077641][ T5042] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 28.077776][ T5042] unable to read xattr id index table [ 28.230789][ T5030] loop1: p1 p3 < > [ 28.239302][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.322284][ T24] tipc: Node number set to 2886997162 [ 28.331208][ T5044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.53'. [ 28.430635][ T4695] udevd[4695]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 28.437483][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 28.498722][ T5058] FAULT_INJECTION: forcing a failure. [ 28.498722][ T5058] name failslab, interval 1, probability 0, space 0, times 1 [ 28.498745][ T5058] CPU: 1 UID: 0 PID: 5058 Comm: syz.2.60 Tainted: G L syzkaller #0 PREEMPT [ 28.498757][ T5058] Tainted: [L]=SOFTLOCKUP [ 28.498760][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 28.498766][ T5058] Call trace: [ 28.498769][ T5058] show_stack+0x2c/0x3c (C) [ 28.498799][ T5058] __dump_stack+0x30/0x40 [ 28.498813][ T5058] dump_stack_lvl+0xd8/0x12c [ 28.498825][ T5058] dump_stack+0x1c/0x28 [ 28.498836][ T5058] should_fail_ex+0x41c/0x590 [ 28.498849][ T5058] should_failslab+0xc4/0x120 [ 28.498863][ T5058] kmem_cache_alloc_node_noprof+0x98/0x604 [ 28.498872][ T5058] dup_task_struct+0x74/0x850 [ 28.498881][ T5058] copy_process+0x600/0x332c [ 28.498889][ T5058] kernel_clone+0x234/0x9fc [ 28.498898][ T5058] __arm64_sys_clone+0x168/0x1d4 [ 28.498907][ T5058] invoke_syscall+0x98/0x244 [ 28.498919][ T5058] el0_svc_common+0xec/0x23c [ 28.498931][ T5058] do_el0_svc+0x4c/0x5c [ 28.498942][ T5058] el0_svc+0x64/0x260 [ 28.498953][ T5058] el0t_64_sync_handler+0x44/0x104 [ 28.498964][ T5058] el0t_64_sync+0x198/0x19c [ 28.595591][ T5064] loop2: detected capacity change from 0 to 256 [ 28.711683][ T4718] Bluetooth: hci2: command tx timeout [ 28.711715][ T4718] Bluetooth: hci0: command tx timeout [ 28.792293][ T4710] Bluetooth: hci3: command tx timeout [ 28.792321][ T4710] Bluetooth: hci4: command tx timeout [ 28.851166][ T5083] syzkaller0: entered promiscuous mode [ 28.851182][ T5083] syzkaller0: entered allmulticast mode [ 28.871649][ T4718] Bluetooth: hci1: command tx timeout [ 28.906443][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.906680][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.910649][ T5086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 28.913924][ T5086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 30.279226][ T5118] FAULT_INJECTION: forcing a failure. [ 30.279226][ T5118] name failslab, interval 1, probability 0, space 0, times 0 [ 30.279249][ T5118] CPU: 0 UID: 0 PID: 5118 Comm: syz.0.84 Tainted: G L syzkaller #0 PREEMPT [ 30.279261][ T5118] Tainted: [L]=SOFTLOCKUP [ 30.279265][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.279270][ T5118] Call trace: [ 30.279273][ T5118] show_stack+0x2c/0x3c (C) [ 30.279294][ T5118] __dump_stack+0x30/0x40 [ 30.279306][ T5118] dump_stack_lvl+0xd8/0x12c [ 30.279317][ T5118] dump_stack+0x1c/0x28 [ 30.279330][ T5118] should_fail_ex+0x41c/0x590 [ 30.279344][ T5118] should_failslab+0xc4/0x120 [ 30.279357][ T5118] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 30.279366][ T5118] __d_alloc+0x50/0x690 [ 30.279375][ T5118] d_alloc_pseudo+0x2c/0xd8 [ 30.279384][ T5118] alloc_path_pseudo+0xe8/0x1d4 [ 30.279393][ T5118] alloc_file_pseudo+0xb0/0x198 [ 30.279402][ T5118] __anon_inode_getfile+0x118/0x1c8 [ 30.279415][ T5118] anon_inode_getfile+0x44/0x58 [ 30.279427][ T5118] do_epoll_create+0x2a8/0x3f0 [ 30.279439][ T5118] __arm64_sys_epoll_create1+0x40/0x54 [ 30.279450][ T5118] invoke_syscall+0x98/0x244 [ 30.279463][ T5118] el0_svc_common+0xec/0x23c [ 30.279474][ T5118] do_el0_svc+0x4c/0x5c [ 30.279485][ T5118] el0_svc+0x64/0x260 [ 30.279496][ T5118] el0t_64_sync_handler+0x44/0x104 [ 30.279506][ T5118] el0t_64_sync+0x198/0x19c [ 30.325497][ T5121] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 30.325515][ T5121] device-mapper: ioctl: error adding target to table [ 30.340835][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 30.535789][ T5137] loop3: detected capacity change from 0 to 2048 [ 30.634661][ T5142] loop2: detected capacity change from 0 to 512 [ 30.650759][ T30] audit: type=1326 audit(30.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5143 comm="syz.1.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff83579368 code=0x0 [ 30.664512][ T5142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.792175][ T4718] Bluetooth: hci2: command tx timeout [ 30.873632][ T4718] Bluetooth: hci4: command tx timeout [ 30.873824][ T4718] Bluetooth: hci3: command tx timeout [ 30.922606][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.939575][ T5152] syz_tun: entered allmulticast mode [ 30.998005][ T5156] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 30.998022][ T5156] device-mapper: ioctl: error adding target to table [ 31.788986][ T5171] random: crng reseeded on system resumption [ 32.514771][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.515161][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.555647][ T5192] warning: `syz.0.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 32.569455][ T5188] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 32.569473][ T5188] device-mapper: ioctl: error adding target to table [ 32.571750][ T5192] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 32.628451][ T5190] syzkaller0: entered promiscuous mode [ 32.628463][ T5190] syzkaller0: entered allmulticast mode [ 32.940441][ T5216] random: crng reseeded on system resumption [ 32.979080][ T5216] Restarting kernel threads ... [ 32.979639][ T5216] Done restarting kernel threads. [ 33.693648][ T5215] loop2: detected capacity change from 0 to 512 [ 33.990207][ T30] audit: type=1326 audit(33.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 33.990234][ T30] audit: type=1326 audit(33.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 34.005833][ T30] audit: type=1326 audit(34.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 34.005854][ T30] audit: type=1326 audit(34.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 34.005871][ T30] audit: type=1326 audit(34.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 34.008701][ T30] audit: type=1326 audit(34.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 34.008805][ T30] audit: type=1326 audit(34.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 34.009634][ T30] audit: type=1326 audit(34.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5230 comm="syz.1.126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83579368 code=0x7ffc0000 [ 34.074442][ T5235] loop1: detected capacity change from 0 to 512 [ 34.076600][ T5235] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.076609][ T5235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.090406][ T5235] EXT4-fs (loop1): 1 truncate cleaned up [ 34.090991][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.176697][ T5233] loop3: detected capacity change from 0 to 256 [ 34.178731][ T5233] vfat: Invalid uid '0x00000000ffffffff' [ 34.328743][ T5250] loop2: detected capacity change from 0 to 8 [ 34.332158][ T5250] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 34.332168][ T5250] unable to read xattr id index table [ 34.612239][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 34.744372][ T5264] tipc: Started in network mode [ 34.744388][ T5264] tipc: Node identity ac1414aa, cluster identity 4711 [ 34.744467][ T5264] tipc: New replicast peer: 172.20.20.187 [ 34.745471][ T5264] tipc: Enabled bearer , priority 10 [ 35.135291][ T12] wlan1: Trigger new scan to find an IBSS to join [ 35.819174][ T5270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.819426][ T5270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.832946][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.900465][ T1490] tipc: Node number set to 2886997162 [ 36.207031][ T5287] file system registered [ 36.246630][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.246939][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.292348][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.292724][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.514908][ T5295] loop3: detected capacity change from 0 to 2048 [ 36.535745][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.538106][ T5295] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 36.552172][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.577745][ T5299] tipc: Started in network mode [ 36.577766][ T5299] tipc: Node identity ac1414aa, cluster identity 4711 [ 36.577861][ T5299] tipc: New replicast peer: 172.20.20.187 [ 36.578806][ T5299] tipc: Enabled bearer , priority 10 [ 36.697945][ T5305] loop0: detected capacity change from 0 to 512 [ 36.698663][ T5305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.705120][ T5305] EXT4-fs (loop0): 1 truncate cleaned up [ 36.705718][ T5305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.988271][ T5310] FAULT_INJECTION: forcing a failure. [ 36.988271][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 36.988285][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.2.154 Tainted: G L syzkaller #0 PREEMPT [ 36.988297][ T5310] Tainted: [L]=SOFTLOCKUP [ 36.988300][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.988312][ T5310] Call trace: [ 36.988315][ T5310] show_stack+0x2c/0x3c (C) [ 36.988333][ T5310] __dump_stack+0x30/0x40 [ 36.988346][ T5310] dump_stack_lvl+0xd8/0x12c [ 36.988357][ T5310] dump_stack+0x1c/0x28 [ 36.988369][ T5310] should_fail_ex+0x41c/0x590 [ 36.988383][ T5310] should_failslab+0xc4/0x120 [ 36.988396][ T5310] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.988405][ T5310] __kernfs_new_node+0xf0/0x7d8 [ 36.988416][ T5310] kernfs_new_node+0xe8/0x130 [ 36.988426][ T5310] kernfs_create_dir_ns+0x58/0x138 [ 36.988436][ T5310] sysfs_create_dir_ns+0x120/0x1f4 [ 36.988449][ T5310] kobject_add_internal+0x290/0x6f0 [ 36.988463][ T5310] kobject_add_varg+0x9c/0xe8 [ 36.988474][ T5310] kobject_add+0x110/0x1c8 [ 36.988486][ T5310] get_device_parent+0x2c8/0x350 [ 36.988496][ T5310] device_add+0x298/0x9e0 [ 36.988505][ T5310] wakeup_source_sysfs_add+0x1b4/0x2a4 [ 36.988518][ T5310] wakeup_source_register+0x158/0x2fc [ 36.988529][ T5310] ep_create_wakeup_source+0xf4/0x240 [ 36.988542][ T5310] ep_insert+0xb88/0x1418 [ 36.988554][ T5310] do_epoll_ctl_file+0xa0c/0xbd4 [ 36.988565][ T5310] do_epoll_ctl+0xa0/0x140 [ 36.988577][ T5310] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 36.988589][ T5310] invoke_syscall+0x98/0x244 [ 36.988601][ T5310] el0_svc_common+0xec/0x23c [ 36.988612][ T5310] do_el0_svc+0x4c/0x5c [ 36.988624][ T5310] el0_svc+0x64/0x260 [ 36.988634][ T5310] el0t_64_sync_handler+0x44/0x104 [ 36.988645][ T5310] el0t_64_sync+0x198/0x19c [ 36.988656][ T5310] kobject: kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 36.988983][ T5312] loop4: detected capacity change from 0 to 2048 [ 37.027310][ T5312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.077280][ T4716] ffs_data_put(): freeing [ 37.496529][ T5337] loop3: detected capacity change from 0 to 8 [ 37.497785][ T5337] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 37.497792][ T5337] unable to read xattr id index table [ 37.564052][ T4705] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.656556][ T5349] tipc: Started in network mode [ 37.656570][ T5349] tipc: Node identity ac1414aa, cluster identity 4711 [ 37.656653][ T5349] tipc: New replicast peer: 172.20.20.187 [ 37.657766][ T5349] tipc: Enabled bearer , priority 10 [ 37.692767][ T4797] tipc: Node number set to 2886997162 [ 37.693400][ T5351] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 37.817499][ T5369] loop3: detected capacity change from 0 to 512 [ 37.830630][ T5369] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.831575][ C1] net_ratelimit: 49 callbacks suppressed [ 37.853836][ T5367] loop0: detected capacity change from 0 to 8 [ 37.854868][ T5367] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 37.854873][ T5367] unable to read xattr id index table [ 37.854994][ T5369] EXT4-fs (loop3): 1 truncate cleaned up [ 37.856525][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.859280][ T5369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.020343][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. ** 35799 printk messages dropped ** [ 39.030685][ T5175] tipc: Node number set to 2886997162 ** 1414 printk messages dropped ** ** 134 printk messages dropped ** ** 134 printk messages dropped ** ** 111 printk messages dropped ** ** 105 printk messages dropped ** ** 104 printk messages dropped ** ** 100 printk messages dropped ** ** 106 printk messages dropped ** ** 100 printk messages dropped ** ** 104 printk messages dropped ** ** 113 printk messages dropped ** ** 133 printk messages dropped ** ** 132 printk messages dropped ** ** 121 printk messages dropped ** ** 72 printk messages dropped ** ** 114 printk messages dropped ** ** 148 printk messages dropped ** ** 128 printk messages dropped ** ** 113 printk messages dropped ** ** 111 printk messages dropped ** ** 105 printk messages dropped ** ** 119 printk messages dropped ** ** 120 printk messages dropped ** ** 100 printk messages dropped ** ** 102 printk messages dropped ** ** 109 printk messages dropped ** ** 592 printk messages dropped ** ** 113 printk messages dropped ** ** 116 printk messages dropped ** ** 111 printk messages dropped ** ** 100 printk messages dropped ** ** 112 printk messages dropped ** ** 93 printk messages dropped ** ** 90 printk messages dropped ** ** 90 printk messages dropped ** ** 97 printk messages dropped ** ** 97 printk messages dropped ** ** 93 printk messages dropped ** ** 309 printk messages dropped ** ** 110 printk messages dropped ** ** 140 printk messages dropped ** ** 125 printk messages dropped ** ** 119 printk messages dropped ** ** 116 printk messages dropped ** ** 115 printk messages dropped ** ** 112 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 334 printk messages dropped ** ** 107 printk messages dropped ** ** 126 printk messages dropped ** ** 111 printk messages dropped ** ** 140 printk messages dropped ** ** 114 printk messages dropped ** ** 117 printk messages dropped ** ** 110 printk messages dropped ** ** 105 printk messages dropped ** ** 99 printk messages dropped ** ** 104 printk messages dropped ** ** 107 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 97 printk messages dropped ** ** 111 printk messages dropped ** ** 101 printk messages dropped ** ** 104 printk messages dropped ** ** 254 printk messages dropped ** ** 122 printk messages dropped ** ** 118 printk messages dropped ** ** 115 printk messages dropped ** ** 114 printk messages dropped ** ** 113 printk messages dropped ** ** 111 printk messages dropped ** ** 110 printk messages dropped ** ** 111 printk messages dropped ** ** 113 printk messages dropped ** ** 121 printk messages dropped ** ** 104 printk messages dropped ** ** 110 printk messages dropped ** ** 112 printk messages dropped ** ** 693 printk messages dropped ** ** 116 printk messages dropped ** ** 110 printk messages dropped ** ** 116 printk messages dropped ** ** 111 printk messages dropped ** ** 116 printk messages dropped ** ** 108 printk messages dropped ** ** 112 printk messages dropped ** ** 112 printk messages dropped ** ** 110 printk messages dropped ** ** 117 printk messages dropped ** ** 137 printk messages dropped ** ** 103 printk messages dropped ** ** 110 printk messages dropped ** ** 125 printk messages dropped ** ** 110 printk messages dropped ** ** 113 printk messages dropped ** ** 110 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 109 printk messages dropped ** ** 98 printk messages dropped ** ** 431 printk messages dropped ** ** 110 printk messages dropped ** ** 127 printk messages dropped ** ** 111 printk messages dropped ** ** 114 printk messages dropped ** ** 110 printk messages dropped ** ** 109 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 116 printk messages dropped ** ** 104 printk messages dropped ** ** 94 printk messages dropped ** ** 216 printk messages dropped ** ** 116 printk messages dropped ** ** 112 printk messages dropped ** ** 96 printk messages dropped ** ** 89 printk messages dropped ** ** 119 printk messages dropped ** ** 118 printk messages dropped ** ** 116 printk messages dropped ** ** 110 printk messages dropped ** ** 113 printk messages dropped ** ** 121 printk messages dropped ** ** 112 printk messages dropped ** ** 115 printk messages dropped ** ** 111 printk messages dropped ** ** 166 printk messages dropped ** ** 139 printk messages dropped ** ** 107 printk messages dropped ** ** 115 printk messages dropped ** ** 112 printk messages dropped ** ** 109 printk messages dropped ** ** 117 printk messages dropped ** ** 106 printk messages dropped ** ** 111 printk messages dropped ** ** 121 printk messages dropped ** ** 106 printk messages dropped ** ** 118 printk messages dropped ** ** 112 printk messages dropped ** ** 104 printk messages dropped ** ** 698 printk messages dropped ** ** 127 printk messages dropped ** ** 99 printk messages dropped ** ** 104 printk messages dropped ** ** 102 printk messages dropped ** ** 101 printk messages dropped ** ** 96 printk messages dropped ** ** 103 printk messages dropped ** ** 99 printk messages dropped ** ** 93 printk messages dropped ** ** 131 printk messages dropped ** ** 110 printk messages dropped ** ** 108 printk messages dropped ** ** 110 printk messages dropped ** ** 103 printk messages dropped ** ** 111 printk messages dropped ** ** 112 printk messages dropped ** ** 108 printk messages dropped ** ** 101 printk messages dropped ** ** 110 printk messages dropped ** ** 116 printk messages dropped ** ** 114 printk messages dropped ** ** 107 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 101 printk messages dropped ** ** 140 printk messages dropped ** ** 120 printk messages dropped ** ** 122 printk messages dropped ** ** 123 printk messages dropped ** ** 125 printk messages dropped ** ** 129 printk messages dropped ** ** 110 printk messages dropped ** ** 117 printk messages dropped ** ** 108 printk messages dropped ** ** 121 printk messages dropped ** ** 113 printk messages dropped ** ** 115 printk messages dropped ** ** 324 printk messages dropped ** ** 129 printk messages dropped ** ** 118 printk messages dropped ** ** 128 printk messages dropped ** ** 106 printk messages dropped ** ** 116 printk messages dropped ** ** 112 printk messages dropped ** ** 105 printk messages dropped ** ** 99 printk messages dropped ** ** 122 printk messages dropped ** ** 119 printk messages dropped ** ** 111 printk messages dropped ** ** 109 printk messages dropped ** ** 110 printk messages dropped ** ** 135 printk messages dropped ** ** 114 printk messages dropped ** ** 123 printk messages dropped ** ** 118 printk messages dropped ** ** 114 printk messages dropped ** ** 109 printk messages dropped ** ** 124 printk messages dropped ** ** 105 printk messages dropped ** ** 119 printk messages dropped ** ** 119 printk messages dropped ** ** 114 printk messages dropped ** ** 124 printk messages dropped ** ** 114 printk messages dropped ** ** 110 printk messages dropped ** ** 450 printk messages dropped ** ** 124 printk messages dropped ** ** 110 printk messages dropped ** ** 159 printk messages dropped ** ** 111 printk messages dropped ** ** 111 printk messages dropped ** ** 115 printk messages dropped ** ** 120 printk messages dropped ** ** 115 printk messages dropped ** ** 115 printk messages dropped ** ** 111 printk messages dropped ** ** 111 printk messages dropped ** ** 401 printk messages dropped ** ** 118 printk messages dropped ** ** 113 printk messages dropped ** ** 121 printk messages dropped ** ** 114 printk messages dropped ** ** 121 printk messages dropped ** ** 114 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 98 printk messages dropped ** ** 97 printk messages dropped ** ** 97 printk messages dropped ** ** 282 printk messages dropped ** ** 109 printk messages dropped ** ** 106 printk messages dropped ** ** 96 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 93 printk messages dropped ** ** 96 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 95 printk messages dropped ** ** 97 printk messages dropped ** ** 92 printk messages dropped ** ** 95 printk messages dropped ** ** 131 printk messages dropped ** ** 104 printk messages dropped ** ** 99 printk messages dropped ** ** 102 printk messages dropped ** ** 105 printk messages dropped ** ** 105 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 104 printk messages dropped ** ** 49 printk messages dropped ** ** 2244 printk messages dropped ** ** 132 printk messages dropped ** ** 112 printk messages dropped ** ** 108 printk messages dropped ** ** 100 printk messages dropped ** ** 101 printk messages dropped ** ** 95 printk messages dropped ** ** 112 printk messages dropped ** ** 119 printk messages dropped ** ** 122 printk messages dropped ** ** 123 printk messages dropped ** ** 116 printk messages dropped ** ** 108 printk messages dropped ** ** 388 printk messages dropped ** ** 102 printk messages dropped ** ** 85 printk messages dropped ** ** 98 printk messages dropped ** ** 111 printk messages dropped ** ** 109 printk messages dropped ** ** 109 printk messages dropped ** ** 110 printk messages dropped ** ** 108 printk messages dropped ** ** 106 printk messages dropped ** ** 113 printk messages dropped ** ** 124 printk messages dropped ** ** 439 printk messages dropped ** ** 118 printk messages dropped ** ** 102 printk messages dropped ** ** 114 printk messages dropped ** ** 108 printk messages dropped ** ** 110 printk messages dropped ** ** 98 printk messages dropped ** ** 99 printk messages dropped ** ** 102 printk messages dropped ** ** 101 printk messages dropped ** ** 100 printk messages dropped ** ** 102 printk messages dropped ** ** 123 printk messages dropped ** ** 283 printk messages dropped ** ** 119 printk messages dropped ** ** 104 printk messages dropped ** ** 190 printk messages dropped ** ** 103 printk messages dropped ** ** 105 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 10 printk messages dropped ** [ 39.675767][ T5403] loop2: detected capacity change from 0 to 256 [ 39.676653][ T5415] loop3: detected capacity change from 0 to 512 [ 39.682067][ T5407] loop4: detected capacity change from 0 to 8 [ 39.683389][ T5407] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 39.683396][ T5407] unable to read xattr id index table [ 39.714884][ T5415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c118, mo2=0002] [ 39.719026][ T5415] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 39.719793][ T5415] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.189: invalid indirect mapped block 2683928664 (level 1) [ 39.719815][ T5415] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.721477][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 39.721486][ C0] EXT4-fs (loop3): initial error at time 39: ext4_free_branches:1023: inode 13 [ 39.721504][ C0] EXT4-fs (loop3): last error at time 39: ext4_free_branches:1023: inode 13 [ 39.734593][ T5415] EXT4-fs (loop3): 1 truncate cleaned up [ 39.735640][ T5415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.804384][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.895011][ T5427] FAULT_INJECTION: forcing a failure. [ 39.895011][ T5427] name failslab, interval 1, probability 0, space 0, times 0 [ 39.895025][ T5427] CPU: 0 UID: 0 PID: 5427 Comm: syz.2.195 Tainted: G L syzkaller #0 PREEMPT [ 39.895037][ T5427] Tainted: [L]=SOFTLOCKUP [ 39.895041][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.895053][ T5427] Call trace: [ 39.895056][ T5427] show_stack+0x2c/0x3c (C) [ 39.895078][ T5427] __dump_stack+0x30/0x40 [ 39.895090][ T5427] dump_stack_lvl+0xd8/0x12c [ 39.895101][ T5427] dump_stack+0x1c/0x28 [ 39.895112][ T5427] should_fail_ex+0x41c/0x590 [ 39.895126][ T5427] should_failslab+0xc4/0x120 [ 39.895140][ T5427] __kmalloc_cache_noprof+0x94/0x5fc [ 39.895150][ T5427] get_device_parent+0x21c/0x350 [ 39.895161][ T5427] device_add+0x298/0x9e0 [ 39.895170][ T5427] wakeup_source_sysfs_add+0x1b4/0x2a4 [ 39.895183][ T5427] wakeup_source_register+0x158/0x2fc [ 39.895194][ T5427] ep_create_wakeup_source+0xf4/0x240 [ 39.895207][ T5427] ep_insert+0xb88/0x1418 [ 39.895219][ T5427] do_epoll_ctl_file+0xa0c/0xbd4 [ 39.895230][ T5427] do_epoll_ctl+0xa0/0x140 [ 39.895242][ T5427] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 39.895254][ T5427] invoke_syscall+0x98/0x244 [ 39.895266][ T5427] el0_svc_common+0xec/0x23c [ 39.895278][ T5427] do_el0_svc+0x4c/0x5c [ 39.895289][ T5427] el0_svc+0x64/0x260 [ 39.895301][ T5427] el0t_64_sync_handler+0x44/0x104 [ 39.895312][ T5427] el0t_64_sync+0x198/0x19c [ 40.044943][ T5445] loop3: detected capacity change from 0 to 8 [ 40.071722][ T4710] Bluetooth: hci2: command 0x2016 tx timeout [ 40.073231][ T5445] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 40.073243][ T5445] unable to read xattr id index table [ 40.086541][ T5443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.113231][ T930] wlan1: Creating new IBSS network, BSSID 5a:8c:39:8c:df:48 [ 40.624473][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 40.645110][ T5480] FAULT_INJECTION: forcing a failure. [ 40.645110][ T5480] name failslab, interval 1, probability 0, space 0, times 0 [ 40.645127][ T5480] CPU: 0 UID: 0 PID: 5480 Comm: syz.4.214 Tainted: G L syzkaller #0 PREEMPT [ 40.645140][ T5480] Tainted: [L]=SOFTLOCKUP [ 40.645143][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.645157][ T5480] Call trace: [ 40.645160][ T5480] show_stack+0x2c/0x3c (C) [ 40.645181][ T5480] __dump_stack+0x30/0x40 [ 40.645193][ T5480] dump_stack_lvl+0xd8/0x12c [ 40.645205][ T5480] dump_stack+0x1c/0x28 [ 40.645216][ T5480] should_fail_ex+0x41c/0x590 [ 40.645230][ T5480] should_failslab+0xc4/0x120 [ 40.645244][ T5480] __kmalloc_cache_noprof+0x94/0x5fc [ 40.645253][ T5480] get_device_parent+0x21c/0x350 [ 40.645264][ T5480] device_add+0x298/0x9e0 [ 40.645273][ T5480] wakeup_source_sysfs_add+0x1b4/0x2a4 [ 40.645286][ T5480] wakeup_source_register+0x158/0x2fc [ 40.645297][ T5480] ep_create_wakeup_source+0xf4/0x240 [ 40.645310][ T5480] ep_insert+0xb88/0x1418 [ 40.645321][ T5480] do_epoll_ctl_file+0xa0c/0xbd4 [ 40.645333][ T5480] do_epoll_ctl+0xa0/0x140 [ 40.645344][ T5480] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 40.645356][ T5480] invoke_syscall+0x98/0x244 [ 40.645368][ T5480] el0_svc_common+0xec/0x23c [ 40.645379][ T5480] do_el0_svc+0x4c/0x5c [ 40.645391][ T5480] el0_svc+0x64/0x260 [ 40.645402][ T5480] el0t_64_sync_handler+0x44/0x104 [ 40.645413][ T5480] el0t_64_sync+0x198/0x19c [ 40.692370][ T5483] syzkaller0: entered promiscuous mode [ 40.692380][ T5483] syzkaller0: entered allmulticast mode [ 40.695246][ T5483] tipc: Enabled bearer , priority 0 [ 40.699818][ T5482] tipc: Resetting bearer [ 40.710529][ T5470] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4709] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5470] [ 40.718864][ T5482] tipc: Disabling bearer [ 40.746586][ T5485] syzkaller0: entered promiscuous mode [ 40.746601][ T5485] syzkaller0: entered allmulticast mode [ 40.881268][ T5492] process 'syz.0.217' launched './file0' with NULL argv: empty string added [ 40.897060][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.948756][ T5498] overlayfs: workdir and upperdir must be separate subtrees [ 41.021032][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 41.021066][ T5504] IPv6: Can't replace route, no match found [ 41.165829][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 41.167744][ T5510] syzkaller1: entered allmulticast mode [ 41.261247][ T49] nvmet: connect request for invalid subsystem t! [ 41.267230][ T5516] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "t" [ 41.317360][ T5521] syzkaller0: entered promiscuous mode [ 41.317371][ T5521] syzkaller0: entered allmulticast mode [ 41.397566][ T5523] netlink: 'syz.4.232': attribute type 3 has an invalid length. [ 41.397578][ T5523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 41.416067][ T5523] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.449611][ T5526] Dev loop5: unable to read RDB block 7 [ 41.449629][ T5526] loop5: AHDI p1 p2 p3 [ 41.449640][ T5526] loop5: partition table partially beyond EOD, truncated [ 41.449744][ T5526] loop5: p1 start 1818582900 is beyond EOD, truncated [ 41.449753][ T5526] loop5: p3 start 335544320 is beyond EOD, truncated [ 41.496439][ T5523] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 41.496453][ T5523] FAT-fs (loop4): Filesystem has been set read-only [ 41.498716][ T5523] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 41.498768][ T5523] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 41.665211][ T5540] tipc: Enabling of bearer rejected, already enabled [ 41.737225][ T5548] GUP no longer grows the stack in syz.1.236 (5548): 20004000-2000a000 (20002000) [ 41.737244][ T5548] CPU: 1 UID: 0 PID: 5548 Comm: syz.1.236 Tainted: G L syzkaller #0 PREEMPT [ 41.737257][ T5548] Tainted: [L]=SOFTLOCKUP [ 41.737261][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.737276][ T5548] Call trace: [ 41.737279][ T5548] show_stack+0x2c/0x3c (C) [ 41.737300][ T5548] __dump_stack+0x30/0x40 [ 41.737312][ T5548] dump_stack_lvl+0xd8/0x12c [ 41.737324][ T5548] dump_stack+0x1c/0x28 [ 41.737335][ T5548] gup_vma_lookup+0x1ac/0x1cc [ 41.737345][ T5548] __get_user_pages+0x2b4/0x13b0 [ 41.737354][ T5548] get_user_pages_remote+0x278/0x83c [ 41.737363][ T5548] __access_remote_vm+0x1d8/0x68c [ 41.737376][ T5548] access_remote_vm+0x48/0x60 [ 41.737388][ T5548] proc_pid_cmdline_read+0x4cc/0xa14 [ 41.737399][ T5548] do_loop_readv_writev+0x24c/0x3dc [ 41.737409][ T5548] vfs_readv+0x258/0x520 [ 41.737417][ T5548] do_preadv+0x11c/0x224 [ 41.737425][ T5548] __arm64_sys_preadv+0xac/0xc4 [ 41.737433][ T5548] invoke_syscall+0x98/0x244 [ 41.737445][ T5548] el0_svc_common+0xec/0x23c [ 41.737457][ T5548] do_el0_svc+0x4c/0x5c [ 41.737469][ T5548] el0_svc+0x64/0x260 [ 41.737480][ T5548] el0t_64_sync_handler+0x44/0x104 [ 41.737491][ T5548] el0t_64_sync+0x198/0x19c [ 41.959616][ T5551] syzkaller0: entered promiscuous mode [ 41.960310][ T5551] syzkaller0: entered allmulticast mode [ 42.241490][ T4710] Bluetooth: hci2: command 0x2016 tx timeout [ 42.375669][ T5555] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 42.634513][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634526][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634535][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634544][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634553][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634561][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634570][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634578][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634586][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.634594][ T4797] hid-generic 0401:0008:00E1.0001: unknown main item tag 0x0 [ 42.664571][ T5569] netlink: 'syz.2.250': attribute type 3 has an invalid length. [ 42.664586][ T5569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'. [ 42.666357][ T4797] hid-generic 0401:0008:00E1.0001: hidraw0: HID v0.08 Device [syz1] on syz0 [ 42.677537][ T5569] set_capacity_and_notify: 3 callbacks suppressed [ 42.677544][ T5569] loop2: detected capacity change from 0 to 256 [ 42.686433][ T5569] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.747595][ T5586] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 42.747606][ T5586] FAT-fs (loop2): Filesystem has been set read-only [ 42.747704][ T5586] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 42.747721][ T5586] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 42.816232][ T5580] fido_id[5580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.085760][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.263'. [ 43.196120][ C0] net_ratelimit: 697 callbacks suppressed [ 43.470541][ T5616] syz.4.270 uses obsolete (PF_INET,SOCK_PACKET) [ 53.601502][ C1] net_ratelimit: 28 callbacks suppressed [ 60.631497][ C1] net_ratelimit: 64 callbacks suppressed [ 72.031429][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 24s! [syz.0.275:5628] [ 72.031451][ C1] Modules linked in: [ 72.031458][ C1] irq event stamp: 42816 [ 72.036943][ C1] hardirqs last enabled at (42815): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 72.039058][ C1] hardirqs last disabled at (42816): [] el1_interrupt+0x28/0x60 [ 72.040909][ C1] softirqs last enabled at (42806): [] handle_softirqs+0xc28/0xd98 [ 72.042908][ C1] softirqs last disabled at (42775): [] __do_softirq+0x14/0x20 [ 72.044760][ C1] CPU: 1 UID: 0 PID: 5628 Comm: syz.0.275 Tainted: G L syzkaller #0 PREEMPT [ 72.044785][ C1] Tainted: [L]=SOFTLOCKUP [ 72.044790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.044796][ C1] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 72.044805][ C1] pc : smp_call_function_many_cond+0x73c/0x1590 [ 72.044820][ C1] lr : smp_call_function_many_cond+0x754/0x1590 [ 72.044830][ C1] sp : ffff8000a8b67580 [ 72.044833][ C1] x29: ffff8000a8b676c0 x28: ffff800088b9a960 x27: 0000000000000011 [ 72.044845][ C1] x26: dfff800000000000 x25: 1ffff0001117352c x24: 0000000000000000 [ 72.044855][ C1] x23: ffff800088b9a960 x22: ffff0001add7f648 x21: ffff0001add7f640 [ 72.044865][ C1] x20: ffff0000c4cbb2b8 x19: 0000000000000000 x18: ffff8000952fb074 [ 72.044875][ C1] x17: ffff8000952fb072 x16: ffff8000952fb071 x15: ffff8000952fb06c [ 72.044885][ C1] x14: 00000000006be979 x13: 0000000000000001 x12: 0000000000000000 [ 72.044894][ C1] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 72.044904][ C1] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 72.044913][ C1] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000805bc8e4 [ 72.044923][ C1] x2 : 0000000000000000 x1 : ffff0000c4cb9d80 x0 : 0000000000000001 [ 72.044940][ C1] Call trace: [ 72.044943][ C1] smp_call_function_many_cond+0x73c/0x1590 (P) [ 72.044956][ C1] kick_all_cpus_sync+0x34/0x40 [ 72.044966][ C1] __text_poke+0xd8/0xf8 [ 72.044977][ C1] aarch64_insn_copy+0x3c/0x50 [ 72.044987][ C1] bpf_arch_text_copy+0x34/0x54 [ 72.044996][ C1] bpf_jit_binary_pack_finalize+0x44/0xf0 [ 72.045006][ C1] bpf_int_jit_compile+0xd4c/0x1184 [ 72.045015][ C1] __bpf_prog_select_runtime+0x3a0/0x728 [ 72.045024][ C1] bpf_prog_select_runtime+0x2c/0x3c [ 72.045033][ C1] bpf_prepare_filter+0xc74/0xdac [ 72.045044][ C1] bpf_prog_create_from_user+0x1c4/0x26c [ 72.045053][ C1] do_seccomp+0x6fc/0xbfc [ 72.045063][ C1] __arm64_sys_seccomp+0x84/0x98 [ 72.045072][ C1] invoke_syscall+0x98/0x244 [ 72.045082][ C1] el0_svc_common+0xec/0x23c [ 72.045092][ C1] do_el0_svc+0x4c/0x5c [ 72.045101][ C1] el0_svc+0x64/0x260 [ 72.045110][ C1] el0t_64_sync_handler+0x44/0x104 [ 72.045119][ C1] el0t_64_sync+0x198/0x19c [ 72.045127][ C1] Sending NMI from CPU 1 to CPUs 0: [ 72.700350][ C0] NMI backtrace for cpu 0 [ 72.700370][ C0] CPU: 0 UID: 0 PID: 5565 Comm: syz.1.248 Tainted: G L syzkaller #0 PREEMPT [ 72.700387][ C0] Tainted: [L]=SOFTLOCKUP [ 72.700391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.700397][ C0] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 72.700405][ C0] pc : unwind_find_stack+0x134/0x150 [ 72.700424][ C0] lr : unwind_find_stack+0x134/0x150 [ 72.700432][ C0] sp : ffff8000a8b063d0 [ 72.700436][ C0] x29: ffff8000a8b063d0 x28: ffff800088b9a960 x27: ffff0000c75b5880 [ 72.700449][ C0] x26: ffff80008539b8e4 x25: ffff8000a8b06468 x24: ffff8000a8b08000 [ 72.700459][ C0] x23: ffff8000a8b068a0 x22: ffff8000a8b06418 x21: 0000000000000010 [ 72.700469][ C0] x20: ffff8000a8b06428 x19: ffff8000a8b06890 x18: 1fffe00035bac428 [ 72.700479][ C0] x17: ff00000020200000 x16: ffffffffcc45010a x15: ff00000020200000 [ 72.700489][ C0] x14: 000000000156e933 x13: 000000000000001b x12: 0000000000000003 [ 72.700499][ C0] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 72.700508][ C0] x8 : ffff80009b137000 x7 : 0000000000000000 x6 : 000000000000003f [ 72.700518][ C0] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff80008015301c [ 72.700527][ C0] x2 : ffff8000a8b08000 x1 : ffff0000c75b5880 x0 : 0000000000000001 [ 72.700545][ C0] Call trace: [ 72.700548][ C0] unwind_find_stack+0x134/0x150 (P) [ 72.700560][ C0] arch_stack_walk+0x238/0x328 [ 72.700574][ C0] stack_trace_save+0x9c/0xf0 [ 72.700585][ C0] kasan_save_track+0x40/0x78 [ 72.700594][ C0] kasan_save_alloc_info+0x40/0x50 [ 72.700603][ C0] __kasan_kmalloc+0x9c/0xb4 [ 72.700611][ C0] __kmalloc_noprof+0x34c/0x6c8 [ 72.700620][ C0] hash_netportnet4_resize+0x950/0x1868 [ 72.700629][ C0] call_ad+0x294/0x764 [ 72.700638][ C0] ip_set_ad+0x670/0x7c0 [ 72.700645][ C0] ip_set_uadd+0x74/0x8c [ 72.700652][ C0] nfnetlink_rcv_msg+0xad8/0x1044 [ 72.700660][ C0] netlink_rcv_skb+0x238/0x414 [ 72.700670][ C0] nfnetlink_rcv+0x218/0x16ec [ 72.700677][ C0] netlink_unicast+0x600/0x7f8 [ 72.700686][ C0] netlink_sendmsg+0x648/0x948 [ 72.700695][ C0] __sock_sendmsg+0xc8/0x17c [ 72.700704][ C0] ____sys_sendmsg+0x3d0/0x6c8 [ 72.700713][ C0] ___sys_sendmsg+0x198/0x224 [ 72.700722][ C0] __sys_sendmsg+0x158/0x204 [ 72.700731][ C0] __arm64_sys_sendmsg+0x88/0x9c [ 72.700740][ C0] invoke_syscall+0x98/0x244 [ 72.700751][ C0] el0_svc_common+0xec/0x23c [ 72.700763][ C0] do_el0_svc+0x4c/0x5c [ 72.700774][ C0] el0_svc+0x64/0x260 [ 72.700784][ C0] el0t_64_sync_handler+0x44/0x104 [ 72.700793][ C0] el0t_64_sync+0x198/0x19c [ 72.726326][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.726366][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.728496][ T865] cfg80211: failed to load regulatory.db [ 72.749564][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 73.448185][ T4710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.450451][ T4710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.451083][ T4710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.459138][ T4710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.460114][ T4710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 73.705855][ T4718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.795814][ T4711] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.796330][ T4711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.796540][ T4711] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.797496][ T4711] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.798088][ T4711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.798458][ T4711] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.799317][ T4711] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.799384][ T4711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.800262][ T4711] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.873588][ T4711] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 73.881206][ T4711] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 73.885748][ T4711] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 73.888969][ T4711] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 73.889384][ T4711] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 75.541548][ T4711] Bluetooth: hci5: command tx timeout [ 75.841530][ T4711] Bluetooth: hci6: command tx timeout [ 75.942755][ T4711] Bluetooth: hci8: command tx timeout [ 75.943165][ T4711] Bluetooth: hci7: command tx timeout [ 77.591571][ T4719] Bluetooth: hci5: command tx timeout [ 77.942674][ T4719] Bluetooth: hci6: command tx timeout [ 77.991961][ T4719] Bluetooth: hci7: command tx timeout [ 77.991982][ T4719] Bluetooth: hci8: command tx timeout [ 79.691535][ T4711] Bluetooth: hci5: command tx timeout [ 79.991567][ T4711] Bluetooth: hci6: command tx timeout [ 80.091595][ T4711] Bluetooth: hci8: command tx timeout [ 80.091615][ T4711] Bluetooth: hci7: command tx timeout [ 81.141485][ C1] net_ratelimit: 195 callbacks suppressed [ 81.791869][ T4719] Bluetooth: hci5: command tx timeout