last executing test programs: 2.777576553s ago: executing program 3 (id=410): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0xbb6fb4d32aadc6e0}, 0x40000) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000440)={0x1, 0x2, 0x1000, 0xf2, &(0x7f0000000280)="ff618fcb562f1a758283166efd836a6570f0f72de91140eac7738f6171308e39809b5a05f39e53a2d816d0e3ba6b7731b723eb6d7285e5a4156525db750c9eeae065d7025e50721bb4bce1a6ab8ecc21b1b7bd2df00c9acf5a9f59014b19fa2a206e183b6ee0d35aedfcd2f02d1a141083bb915f9242c4f489fca5d3790c89871f7356bc52b3a65aa0d828f30bd5e305ab253ebeab71ff54ac384e235a50f8419e3422985d56683bc1296fae798fa3b3a9a7ae6c850083a0c1b6abffe4b47d2ca256dfbe72024f9e444e81b4f6ce61e14856b3d73fc9be005845f35ed02ffa7f9e41edb6927bce5f8e0c06e3db6e7d95d579", 0x67, 0x0, &(0x7f00000003c0)="1ee16a215d97ecf39bdd8cacd61a38a6b6da8cfdece9f1e85ccc9d4d3b521c9aa24201d7314be8a2a8c17444f9d023e2645da46c4d5ef05336564673e66410b46e77bda8c1fdd39ee3bbe16da3a9105d947c65af1af039465d85892e94acb601f8f753877e7420"}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00004e6000/0x2000)=nil, 0x2000}, 0x2}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x9, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x1, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) 1.241463027s ago: executing program 3 (id=427): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) 1.12917047s ago: executing program 0 (id=432): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) close(0x3) 1.10293335s ago: executing program 0 (id=434): r0 = fanotify_init(0x4, 0x400) readv(r0, &(0x7f0000002ec0)=[{&(0x7f0000000a40)=""/207, 0xcf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) syz_clone(0x8100, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000b40)="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") fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 953.921757ms ago: executing program 1 (id=439): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x40, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xa, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x3300, 0x0, 0xa, 0x0, @opaque="7de8"}}}}}}, 0x0) 938.914434ms ago: executing program 1 (id=440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x4c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) 920.210637ms ago: executing program 1 (id=441): syz_mount_image$fuse(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x5b) write(r1, &(0x7f00000001c0)='0x0', 0x3) 877.614509ms ago: executing program 1 (id=442): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 876.916679ms ago: executing program 1 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) close(r0) 825.784297ms ago: executing program 0 (id=445): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) close(0x3) 789.847769ms ago: executing program 0 (id=447): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003a00)=@newtfilter={0x27ac, 0x2c, 0xf3f, 0x30bd29, 0x25dfdb7d, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2780, 0x2, [@TCA_BPF_ACT={0x1190, 0x1, [@m_nat={0x130, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x5, 0x6, 0x4, 0x10000}, @multicast1, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x400, 0x8, 0x3, 0xf809}, @empty, @dev={0xac, 0x14, 0x14, 0x32}, 0xffffff00, 0x1}}]}, {0xb6, 0x6, "df0b78d7048fc957cc6877a70f951a69a1d10a1b4d775fc524da5f85fe067597e5fe6cfc253fb45b5a21d48466f622784055b7e4f59802e8afc476721c1194c810f3aa9f14e1d3b43cdd3c7315cd7b12470586c2f2624bf71986b6d2464c8f2582f97bfe8dc06e0f78036986da2c370820338890686aa2877cf49ad54e62902592916763837ff4cef59767e7ff9cc65fa9af6760fe19fc2bd8526ae4c83ab7f150af2ba88c4f323e7ce404a7bc6cebadec3e"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x105c, 0x19, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x101}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3a6}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_ACT={0x15c4, 0x1, [@m_vlan={0x124, 0x15, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0xffffffff, 0x6, 0x4b64, 0x5e3e48}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xc1, 0xffffffffffffffff, 0x10, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe9a}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8c7c}]}, {0x8d, 0x6, "70b473edb81071e92feef140e34f67c574239547f461d718211ae49269080839271f52ca1fefdf14c76251db218e1b29497f268cb6531464afc8cb60165e600197389b5f0be3d5a638f1e5d8e497721672f6bd7afa4a7eb2b006b02f037e161390528a2e9b6454e8f3e8e1b9b7dcc97d2df6ab01414142a2ede4606e4d335a5a501f5d604d856cea87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x70, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xf, 0x5, 0x3, 0xfffffffc, 0x8001}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0x4, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x20d77a8cb17eaccb}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x118, 0xc, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xce442}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3b4be}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0xb3, 0x6, "12f1253429458641c1c344a947371f285c7e097b14c405f94b7a83638231d36892bfad25de798c4c9544242711f6174d3e3f2dbb13356bd759f3c12d36178dafe3a238aa5a6a173eb2dae26627f6f0acc0f7d1a5414fa34beebc77be1d8c4cb1a257499f37d1c010b5b3bfb57a33405d58c692f895904b5811e50a2cb075222f06a0be64a92caff5cdb042efafbb961126832cb5fd95aac81fb03ffa8699d49dfbd14f32238c325a7ca215feb8c587"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xb0, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x81, 0xb, 0x7, 0x1ff, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x63, 0x6, "a5f785a4416ee57f759efd0f1ed4fadb61366b19a55ab7c0b92edda357c8872ec5cab5294ff8997712835d972e24010dd1616d064c20eda53eedc24f8080705e0019cc45a7261c888636eb103028a494e241ad61b30ec307a4f7ee0e57bd7f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x190, 0x19, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0xfffffff2, 0x10000000, 0x7f, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x6, 0x8, 0x7fffffff, 0x49a}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x100}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xc, 0x7, 0x3, 0x3, 0x2}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8f43d78, 0xe, 0x10000000, 0x5, 0x10001}}]}, {0xea, 0x6, "beffe26b79f939381b521ceb4298ceaa9981fdcf642f535c0e59283ed14bf74b88a4a816f34e66a47a3c5d2f8cb94b622468072a414aaf572ad18d04466fe287498a945d431f24693a5383beac3ee87a145548bce28549d0cd3af4f6a16b64b9972f6a1476d098b477b4362988e1596055a228f4235073db17f524558b7007396c0791cece0fe2ba2c0663b6be2834450caaa64d3ced38c4ca403202621e48a1fec018b1d109bfb76587f3f2714f3fef24b33a613cda0b5628749f601dbbb7bbd895de8e4b9cfc491186cda9d87dbf0bca4eec696cd8e7fcae952f01f7c1062b8261ea200a64"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x10d4, 0x14, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x0, 0x6, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x3, 0xb, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x8, 0x7ff, 0x10000}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x200, 0x7, 0x9}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x5, 0xffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x4, 0x7, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x0, 0x3b, 0x5}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x4, 0x2, 0x4}, 0x5}}]}, {0xfc4, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x5, 0x1, 0x80}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x27ac}, 0x1, 0x0, 0x0, 0x814}, 0x240480c0) 767.569466ms ago: executing program 0 (id=448): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) 426.593026ms ago: executing program 0 (id=450): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000100)=0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0) recvmmsg(r0, &(0x7f0000008400)=[{{&(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001980)=[{&(0x7f00000001c0)=""/131, 0x83}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000900)=""/119, 0x77}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x7, &(0x7f0000001a00)=""/254, 0xfe}, 0xb77}, {{&(0x7f0000001b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/216, 0xd8}], 0x2, &(0x7f0000001d00)=""/109, 0x6d}, 0xffffffff}, {{&(0x7f0000001d80)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001e00)=""/165, 0xa5}, {&(0x7f0000001ec0)=""/72, 0x48}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/203, 0xcb}], 0x4, &(0x7f0000003080)=""/53, 0x35}, 0x2}, {{&(0x7f00000030c0)=@in, 0x80, &(0x7f0000005440)=[{&(0x7f0000003140)=""/103, 0x67}, {&(0x7f00000031c0)=""/102, 0x66}, {&(0x7f0000003240)=""/214, 0xd6}, {&(0x7f0000003340)=""/2, 0x2}, {&(0x7f0000008680)=""/131, 0x83}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)}], 0x8, &(0x7f00000054c0)=""/253, 0xfd}, 0x1a41}, {{&(0x7f00000055c0)=@nl=@proc, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005640)=""/250, 0xfa}, {&(0x7f0000005740)=""/120, 0x78}], 0x2}, 0x5}, {{&(0x7f0000005800)=@caif, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000005880)=""/107, 0x6b}, {&(0x7f0000005900)=""/96, 0x60}, {&(0x7f0000005980)=""/145, 0x91}, {&(0x7f0000005a40)=""/248, 0xf8}, {&(0x7f0000005b40)=""/70, 0x46}, {&(0x7f0000003380)=""/98, 0x62}, {&(0x7f0000005c40)=""/78, 0x4e}, {&(0x7f0000005cc0)=""/206, 0xce}], 0x8, &(0x7f0000005e40)=""/173, 0xad}, 0xfffffe00}, {{&(0x7f0000005f00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000008600)=[{&(0x7f0000005f80)=""/18, 0x12}, {&(0x7f0000005fc0)=""/87, 0x57}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/91, 0x5b}, {&(0x7f00000070c0)=""/4096, 0x1000}, {&(0x7f00000080c0)=""/42, 0x2a}, {&(0x7f0000008100)=""/124, 0x7c}, {&(0x7f0000008180)=""/222, 0xde}], 0x8, &(0x7f0000008300)=""/211, 0xd3}, 0x4}], 0x7, 0x40000000, &(0x7f00000085c0)={0x0, 0x989680}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x10882, &(0x7f00000002c0)=ANY=[], 0xfe, 0x2de, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='delete 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000880)=ANY=[@ANYBLOB="64010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4501330080080e00ffffffffffff0802110000002668e8a3b755380001000000000000000500c2520406020701003983060206000503f1ff012d1a0080100600000000000000080081001800000001000000000004710701ff0001ff8131dd16e5345a84a7aadcf48434f28a2aef90462509fed8660bdd5d84aa5040297c208104eb395a79b9e50785992a90acb4d6e3ea7d0735d52cd094e35824f88ce3f75ec949c93c77fbb6abc15ff7b36b3a89d49ff81165112129db2e0cc4faa53371e3660cdec2239cc32dc8b4eaea6e98487287f7242f7a6effec"], 0x164}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 401.502656ms ago: executing program 4 (id=452): syz_mount_image$fuse(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x5b) write(r1, &(0x7f00000001c0)='0x0', 0x3) 329.150438ms ago: executing program 2 (id=453): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2201, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) 328.291221ms ago: executing program 3 (id=454): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 268.285135ms ago: executing program 4 (id=455): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x5b) write(r0, &(0x7f00000001c0)='0x0', 0x3) 268.006707ms ago: executing program 2 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x0, 0x1a0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x8, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0xd, 0x24, 0x35, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x4fc8, 0x5, 0x4, 0x100, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x5, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7ffb, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x7, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x40b, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x2, 0xb, 0x1, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x20002, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x6, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x3, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x9, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x808, 0x6, 0x226, 0x5, 0x5, 0x0, 0x1ff, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffffff80, 0xb1e, 0xd5, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 260.307719ms ago: executing program 3 (id=457): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) close(0x3) 242.106863ms ago: executing program 2 (id=458): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 225.280574ms ago: executing program 4 (id=459): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) bind(0xffffffffffffffff, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa) setsockopt(0xffffffffffffffff, 0x112, 0x11, 0x0, 0x0) 209.194472ms ago: executing program 3 (id=460): r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) 176.979676ms ago: executing program 4 (id=461): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) 176.442446ms ago: executing program 2 (id=462): mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 147.092772ms ago: executing program 3 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 146.381481ms ago: executing program 4 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x80001, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="1954363cd5", 0x5, 0x3fa) close(0xffffffffffffffff) 96.620182ms ago: executing program 4 (id=465): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback, 0x7}, 0x1c) 95.956494ms ago: executing program 2 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x4004c0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfc}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x35}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xca}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x8c5) write(r0, &(0x7f0000000100)='+p', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9) 0s ago: executing program 1 (id=467): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x59) kernel console output (not intermixed with test programs): [ 7.438823][ T4400] 8021q: adding VLAN 0 to HW filter on device bond0 Starting crond: [ 7.450561][ T4400] eql: remember to turn off Van-Jacobson compression on your slave devices OK [ 7.480326][ T13] gve 0000:00:00.0 enp0s0: Device link is up. Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. syzkaller login: [ 21.800790][ T4696] cgroup: Unknown subsys name 'net' [ 21.951048][ T4696] cgroup: Unknown subsys name 'cpuset' [ 21.952350][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.084606][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.888771][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.889317][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.889633][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.889786][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.890300][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.890674][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.890895][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.891249][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.891526][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.892239][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.892713][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.893181][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.893283][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.894022][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.894230][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.895584][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.897437][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.897488][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.897611][ T4717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.904052][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.904891][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.905110][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.905919][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.905981][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.908628][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 23.234923][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.235149][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.235222][ T4709] bridge_slave_0: entered allmulticast mode [ 23.235680][ T4709] bridge_slave_0: entered promiscuous mode [ 23.236991][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.237016][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.237103][ T4709] bridge_slave_1: entered allmulticast mode [ 23.237481][ T4709] bridge_slave_1: entered promiscuous mode [ 23.248195][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.249068][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.264444][ T4709] team0: Port device team_slave_0 added [ 23.276617][ T4709] team0: Port device team_slave_1 added [ 23.287739][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.287748][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.287761][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.288521][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.288528][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.288542][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.353858][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.353918][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.353972][ T4710] bridge_slave_0: entered allmulticast mode [ 23.354393][ T4710] bridge_slave_0: entered promiscuous mode [ 23.357173][ T4709] hsr_slave_0: entered promiscuous mode [ 23.357492][ T4709] hsr_slave_1: entered promiscuous mode [ 23.381402][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.381431][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.381486][ T4710] bridge_slave_1: entered allmulticast mode [ 23.381893][ T4710] bridge_slave_1: entered promiscuous mode [ 23.388899][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.390598][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.410563][ T4710] team0: Port device team_slave_0 added [ 23.412369][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.412397][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.412488][ T4708] bridge_slave_0: entered allmulticast mode [ 23.412885][ T4708] bridge_slave_0: entered promiscuous mode [ 23.413560][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.413581][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.413668][ T4708] bridge_slave_1: entered allmulticast mode [ 23.414079][ T4708] bridge_slave_1: entered promiscuous mode [ 23.437155][ T4710] team0: Port device team_slave_1 added [ 23.440192][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.441229][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.465772][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.465860][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.465951][ T4723] bridge_slave_0: entered allmulticast mode [ 23.466387][ T4723] bridge_slave_0: entered promiscuous mode [ 23.473439][ T4708] team0: Port device team_slave_0 added [ 23.476832][ T4708] team0: Port device team_slave_1 added [ 23.476862][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.476883][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.476931][ T4716] bridge_slave_0: entered allmulticast mode [ 23.477345][ T4716] bridge_slave_0: entered promiscuous mode [ 23.484703][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.484713][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.484726][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.485288][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.485295][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.485311][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.491119][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.491148][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.491204][ T4723] bridge_slave_1: entered allmulticast mode [ 23.491625][ T4723] bridge_slave_1: entered promiscuous mode [ 23.498684][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.500457][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.506034][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.506063][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.506113][ T4716] bridge_slave_1: entered allmulticast mode [ 23.506543][ T4716] bridge_slave_1: entered promiscuous mode [ 23.518584][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.518595][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.518607][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.519210][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.519218][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.519233][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.523806][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.526698][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.533948][ T4710] hsr_slave_0: entered promiscuous mode [ 23.534245][ T4710] hsr_slave_1: entered promiscuous mode [ 23.534452][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 23.534481][ T4710] Cannot create hsr debugfs directory [ 23.539128][ T4723] team0: Port device team_slave_0 added [ 23.543566][ T4716] team0: Port device team_slave_0 added [ 23.544301][ T4716] team0: Port device team_slave_1 added [ 23.561207][ T4723] team0: Port device team_slave_1 added [ 23.570102][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.570111][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.570124][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.570746][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.570753][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.570766][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.596464][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.596473][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.596486][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.602335][ T4716] hsr_slave_0: entered promiscuous mode [ 23.602650][ T4716] hsr_slave_1: entered promiscuous mode [ 23.602848][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 23.602858][ T4716] Cannot create hsr debugfs directory [ 23.608642][ T4708] hsr_slave_0: entered promiscuous mode [ 23.608919][ T4708] hsr_slave_1: entered promiscuous mode [ 23.609098][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 23.609108][ T4708] Cannot create hsr debugfs directory [ 23.616085][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.616094][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.616108][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.665113][ T4723] hsr_slave_0: entered promiscuous mode [ 23.665399][ T4723] hsr_slave_1: entered promiscuous mode [ 23.665585][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 23.665595][ T4723] Cannot create hsr debugfs directory [ 23.703451][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.706836][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.711515][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.713547][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.715468][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.717515][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.719279][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.721058][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.757371][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.757401][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.757531][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.757558][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.758548][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.759482][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.761018][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.762345][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.770406][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.771501][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.772130][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.774483][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.792168][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.795465][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.796014][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.796992][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.800998][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.801023][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.801089][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.801116][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.801743][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.803558][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.804230][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.805652][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.834351][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.834377][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.834437][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.834465][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.836834][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.838619][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.838888][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.841056][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.842216][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.845798][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.856130][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.857378][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.864257][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.864637][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.867311][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.867534][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.890011][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.890152][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.891198][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.906389][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.909469][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.922708][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.925506][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.925560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.943288][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.943318][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.945635][ T4723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.947954][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.953376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.953402][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.960731][ T4723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.961633][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.961945][ T4723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.962910][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.963226][ T4723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.964159][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.979209][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.979224][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.989674][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.989700][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.998537][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.013139][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.026650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.026680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.027029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.027054][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.084813][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.102428][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.104763][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.109046][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.109069][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.116477][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.116501][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.154921][ T4709] veth0_vlan: entered promiscuous mode [ 24.171234][ T4709] veth1_vlan: entered promiscuous mode [ 24.185783][ T4709] veth0_macvtap: entered promiscuous mode [ 24.186999][ T4709] veth1_macvtap: entered promiscuous mode [ 24.192906][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.198740][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.205733][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.222857][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.222940][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.222956][ T1147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.239984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.239998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.260726][ T1193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.260738][ T1193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.298670][ T4709] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.306769][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.325232][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.339374][ T4879] loop0: detected capacity change from 0 to 256 [ 24.353094][ T4879] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 24.357063][ T4716] veth0_vlan: entered promiscuous mode [ 24.359093][ T4716] veth1_vlan: entered promiscuous mode [ 24.370865][ T4716] veth0_macvtap: entered promiscuous mode [ 24.373226][ T4716] veth1_macvtap: entered promiscuous mode [ 24.374227][ T4710] veth0_vlan: entered promiscuous mode [ 24.376432][ T4710] veth1_vlan: entered promiscuous mode [ 24.377134][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.378348][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.392060][ T4879] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 24.392075][ T4879] FAT-fs (loop0): Filesystem has been set read-only [ 24.411580][ T4710] veth0_macvtap: entered promiscuous mode [ 24.412664][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.427983][ T4710] veth1_macvtap: entered promiscuous mode [ 24.441590][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.442687][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.442871][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.442980][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.446427][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.460927][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.476215][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.476228][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.485364][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.486744][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.516121][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.516132][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.521360][ T172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.521716][ T172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.521803][ T172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.521818][ T172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.535256][ T4723] veth0_vlan: entered promiscuous mode [ 24.536170][ T4879] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 24.536193][ T4879] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 24.536213][ T4879] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 24.536226][ T4879] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 24.548532][ T4723] veth1_vlan: entered promiscuous mode [ 24.555857][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.555869][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.569332][ T4723] veth0_macvtap: entered promiscuous mode [ 24.575622][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.575633][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.577499][ T4723] veth1_macvtap: entered promiscuous mode [ 24.605053][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.606105][ T4708] veth0_vlan: entered promiscuous mode [ 24.606922][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.627577][ T88] IPVS: starting estimator thread 0... [ 24.632574][ T172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.632691][ T172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.632865][ T172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.634138][ T4895] FAULT_INJECTION: forcing a failure. [ 24.634138][ T4895] name failslab, interval 1, probability 0, space 0, times 1 [ 24.634157][ T4895] CPU: 1 UID: 0 PID: 4895 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT [ 24.634169][ T4895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 24.634174][ T4895] Call trace: [ 24.634178][ T4895] show_stack+0x2c/0x3c (C) [ 24.634198][ T4895] __dump_stack+0x30/0x40 [ 24.634211][ T4895] dump_stack_lvl+0xd8/0x12c [ 24.634222][ T4895] dump_stack+0x1c/0x28 [ 24.634233][ T4895] should_fail_ex+0x41c/0x590 [ 24.634247][ T4895] should_failslab+0xc4/0x120 [ 24.634260][ T4895] kmem_cache_alloc_noprof+0x94/0x5d4 [ 24.634269][ T4895] __nf_conntrack_alloc+0x94/0x3fc [ 24.634280][ T4895] init_conntrack+0x13c/0xd6c [ 24.634291][ T4895] nf_conntrack_in+0x88c/0x1410 [ 24.634301][ T4895] ipv4_conntrack_in+0x28/0x38 [ 24.634313][ T4895] nf_hook_slow+0xc8/0x224 [ 24.634325][ T4895] NF_HOOK+0x1f0/0x398 [ 24.634334][ T4895] ip_rcv+0x7c/0x9c [ 24.634342][ T4895] __netif_receive_skb_one_core+0xc8/0x110 [ 24.634353][ T4895] __netif_receive_skb+0x34/0x128 [ 24.634365][ T4895] netif_receive_skb+0x1e0/0xad0 [ 24.634375][ T4895] tun_rx_batched+0x180/0x620 [ 24.634385][ T4895] tun_get_user+0x2330/0x36d0 [ 24.634395][ T4895] tun_chr_write_iter+0xfc/0x168 [ 24.634405][ T4895] vfs_write+0x51c/0xa0c [ 24.634417][ T4895] ksys_write+0x12c/0x228 [ 24.634429][ T4895] __arm64_sys_write+0x84/0x98 [ 24.634442][ T4895] invoke_syscall+0x98/0x244 [ 24.634454][ T4895] el0_svc_common+0xec/0x23c [ 24.634466][ T4895] do_el0_svc+0x4c/0x5c [ 24.634477][ T4895] el0_svc+0x64/0x260 [ 24.634488][ T4895] el0t_64_sync_handler+0x44/0x104 [ 24.634499][ T4895] el0t_64_sync+0x198/0x19c [ 24.638788][ T4708] veth1_vlan: entered promiscuous mode [ 24.651760][ T1193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.676568][ T4708] veth0_macvtap: entered promiscuous mode [ 24.700536][ T4708] veth1_macvtap: entered promiscuous mode [ 24.709874][ T4896] IPVS: using max 59 ests per chain, 141600 per kthread [ 24.718048][ T4903] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 24.744707][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.746754][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.756872][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.756883][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.798900][ T1193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.798912][ T1193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.809778][ T88] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.810622][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.810753][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.810899][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.990016][ T4720] Bluetooth: hci3: command tx timeout [ 24.990268][ T4720] Bluetooth: hci1: command tx timeout [ 24.990477][ T4720] Bluetooth: hci0: command tx timeout [ 24.990638][ T4720] Bluetooth: hci4: command tx timeout [ 24.990797][ T4720] Bluetooth: hci2: command tx timeout [ 25.073665][ T1871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.073678][ T1871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.089356][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.089368][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.241892][ T4920] Bluetooth: ISO socket layer initialized [ 25.246191][ T4923] ip_tables: iptables: counters copy to user failed while replacing table [ 25.284369][ T4925] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 25.293684][ T4927] netlink: 'syz.1.17': attribute type 63 has an invalid length. [ 25.347937][ T4929] syz.2.16: vmalloc error: size 8192, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0 [ 25.348142][ T4929] CPU: 1 UID: 0 PID: 4929 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT [ 25.348158][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 25.348164][ T4929] Call trace: [ 25.348167][ T4929] show_stack+0x2c/0x3c (C) [ 25.348187][ T4929] __dump_stack+0x30/0x40 [ 25.348202][ T4929] dump_stack_lvl+0xd8/0x12c [ 25.348213][ T4929] dump_stack+0x1c/0x28 [ 25.348224][ T4929] warn_alloc+0x1c4/0x1d8 [ 25.348234][ T4929] __vmalloc_node_range_noprof+0xc28/0xe9c [ 25.348245][ T4929] __kvmalloc_node_noprof+0x49c/0x7fc [ 25.348255][ T4929] alloc_netdev_mqs+0xac/0xf34 [ 25.348270][ T4929] alloc_etherdev_mqs+0x48/0x5c [ 25.348279][ T4929] gether_setup_name_default+0x30/0x444 [ 25.348293][ T4929] rndis_alloc_inst+0x12c/0x320 [ 25.348303][ T4929] try_get_usb_function_instance+0xe4/0x164 [ 25.348318][ T4929] usb_get_function_instance+0x24/0xb0 [ 25.348330][ T4929] function_make+0x110/0x300 [ 25.348338][ T4929] configfs_mkdir+0x374/0x7d4 [ 25.348348][ T4929] vfs_mkdir+0x2e4/0x46c [ 25.348359][ T4929] filename_mkdirat+0x228/0x3f4 [ 25.348370][ T4929] __arm64_sys_mkdirat+0x9c/0xc0 [ 25.348380][ T4929] invoke_syscall+0x98/0x244 [ 25.348393][ T4929] el0_svc_common+0xec/0x23c [ 25.348405][ T4929] do_el0_svc+0x4c/0x5c [ 25.348416][ T4929] el0_svc+0x64/0x260 [ 25.348428][ T4929] el0t_64_sync_handler+0x44/0x104 [ 25.348439][ T4929] el0t_64_sync+0x198/0x19c [ 25.348449][ T4929] Mem-Info: [ 25.348453][ T4929] active_anon:20 inactive_anon:7814 isolated_anon:0 [ 25.348453][ T4929] active_file:2005 inactive_file:4633 isolated_file:0 [ 25.348453][ T4929] unevictable:768 dirty:1683 writeback:0 [ 25.348453][ T4929] slab_reclaimable:8549 slab_unreclaimable:85752 [ 25.348453][ T4929] mapped:31828 shmem:3813 pagetables:956 [ 25.348453][ T4929] sec_pagetables:0 bounce:0 [ 25.348453][ T4929] kernel_misc_reclaimable:0 [ 25.348453][ T4929] free:1488413 free_pcp:10800 free_cma:7616 [ 25.348477][ T4929] Node 0 active_anon:80kB inactive_anon:31256kB active_file:8020kB inactive_file:18532kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:127312kB dirty:6732kB writeback:0kB shmem:15252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8896kB pagetables:3824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 25.348498][ T4929] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 25.348522][ T4929] lowmem_reserve[]: 0 0 3650 3650 3650 [ 25.348542][ T4929] Node 0 Normal free:2875764kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:80kB inactive_anon:31256kB active_file:8020kB inactive_file:18532kB unevictable:3072kB writepending:6732kB zspages:0kB present:5242880kB managed:3738576kB mlocked:0kB bounce:0kB free_pcp:43200kB local_pcp:20264kB free_cma:0kB [ 25.348567][ T4929] lowmem_reserve[]: 0 0 0 0 0 [ 25.348662][ T4929] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 25.348730][ T4929] Node 0 Normal: 191*4kB (UME) 49*8kB (M) 25*16kB (UM) 23*32kB (UME) 13*64kB (UM) 10*128kB (ME) 6*256kB (M) 7*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 698*4096kB (M) = 2875700kB [ 25.348812][ T4929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 25.348820][ T4929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 25.348826][ T4929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 25.348833][ T4929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 25.348840][ T4929] 10447 total pagecache pages [ 25.348844][ T4929] 0 pages in swap cache [ 25.348848][ T4929] Free swap = 124996kB [ 25.348851][ T4929] Total swap = 124996kB [ 25.348855][ T4929] 2097152 pages RAM [ 25.348858][ T4929] 0 pages HighMem/MovableOnly [ 25.348862][ T4929] 392460 pages reserved [ 25.348865][ T4929] 8192 pages cma reserved [ 25.348869][ T4929] 0 pages hwpoisoned [ 25.382335][ T4928] syz.2.16 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 25.382350][ T4928] CPU: 0 UID: 0 PID: 4928 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT [ 25.382359][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 25.382364][ T4928] Call trace: [ 25.382366][ T4928] show_stack+0x2c/0x3c (C) [ 25.382380][ T4928] __dump_stack+0x30/0x40 [ 25.382390][ T4928] dump_stack_lvl+0xd8/0x12c [ 25.382400][ T4928] dump_stack+0x1c/0x28 [ 25.382409][ T4928] dump_header+0xbc/0x3f0 [ 25.382421][ T4928] oom_kill_process+0x248/0x8f0 [ 25.382430][ T4928] out_of_memory+0xd24/0x1064 [ 25.382436][ T4928] mem_cgroup_out_of_memory+0xe8/0x170 [ 25.382445][ T4928] try_charge_memcg+0x9bc/0xd38 [ 25.382456][ T4928] charge_memcg+0x19c/0x2a0 [ 25.382465][ T4928] __mem_cgroup_charge+0x38/0x98 [ 25.382475][ T4928] filemap_add_folio+0x258/0x7fc [ 25.382485][ T4928] __filemap_get_folio_mpol+0x534/0x1054 [ 25.382494][ T4928] filemap_fault+0xbb4/0x1498 [ 25.382503][ T4928] __do_fault+0xf4/0x4a8 [ 25.382511][ T4928] do_pte_missing+0x4f4/0x2a28 [ 25.382517][ T4928] handle_mm_fault+0x1534/0x2bec [ 25.382528][ T4928] do_page_fault+0x77c/0xb88 [ 25.382537][ T4928] do_translation_fault+0xc4/0x114 [ 25.382546][ T4928] do_mem_abort+0x70/0x194 [ 25.382554][ T4928] el0_da+0x78/0x254 [ 25.382563][ T4928] el0t_64_sync_handler+0xd8/0x104 [ 25.382572][ T4928] el0t_64_sync+0x198/0x19c [ 25.382580][ T4928] memory: usage 8kB, limit 8kB, failcnt 64 [ 25.382586][ T4928] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 25.382591][ T4928] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 25.382596][ T4928] Memory cgroup stats for /syz2/test: [ 25.382648][ T4928] cache 0 [ 25.382652][ T4928] rss 0 [ 25.382655][ T4928] rss_huge 0 [ 25.382658][ T4928] shmem 0 [ 25.382661][ T4928] mapped_file 0 [ 25.382664][ T4928] dirty 0 [ 25.382667][ T4928] writeback 0 [ 25.382670][ T4928] workingset_refault_anon 0 [ 25.382673][ T4928] workingset_refault_file 0 [ 25.382676][ T4928] swap 0 [ 25.382679][ T4928] swapcached 0 [ 25.382682][ T4928] pgpgin 0 [ 25.382685][ T4928] pgpgout 0 [ 25.382688][ T4928] pgfault 0 [ 25.382691][ T4928] pgmajfault 0 [ 25.382694][ T4928] inactive_anon 0 [ 25.382697][ T4928] active_anon 0 [ 25.382700][ T4928] inactive_file 0 [ 25.382703][ T4928] active_file 0 [ 25.382706][ T4928] unevictable 0 [ 25.382709][ T4928] hierarchical_memory_limit 8192 [ 25.382712][ T4928] hierarchical_memsw_limit 9223372036854771712 [ 25.382716][ T4928] total_cache 0 [ 25.382719][ T4928] total_rss 0 [ 25.382722][ T4928] total_rss_huge 0 [ 25.382725][ T4928] total_shmem 0 [ 25.382728][ T4928] total_mapped_file 0 [ 25.382731][ T4928] total_dirty 0 [ 25.382734][ T4928] total_writeback 0 [ 25.382737][ T4928] total_workingset_refault_anon 0 [ 25.382740][ T4928] total_workingset_refault_file 0 [ 25.382743][ T4928] total_swap 0 [ 25.382746][ T4928] total_swapcached 0 [ 25.382749][ T4928] total_pgpgin 0 [ 25.382752][ T4928] total_pgpgout 0 [ 25.382755][ T4928] total_pgfault 0 [ 25.382758][ T4928] total_pgmajfault 0 [ 25.382761][ T4928] total_inactive_anon 0 [ 25.382764][ T4928] total_active_anon 0 [ 25.382767][ T4928] total_inactive_file 0 [ 25.382771][ T4928] total_active_file 0 [ 25.382774][ T4928] total_unevictable 0 [ 25.382777][ T4928] anon_cost 0 [ 25.382780][ T4928] file_cost 0 [ 25.382783][ T4928] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.16,pid=4928,uid=0 [ 25.383078][ T4928] Memory cgroup out of memory: Killed process 4928 (syz.2.16) total-vm:104236kB, anon-rss:1384kB, file-rss:22536kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 25.607353][ T4950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.607559][ T4950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.617150][ T4950] Bluetooth: MGMT ver 1.23 [ 25.782773][ T4970] zram0: detected capacity change from 0 to 8 [ 25.969160][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.969453][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.011086][ T4989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 26.012804][ T4989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 26.024369][ T4994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 26.047581][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 26.053326][ T4997] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.089249][ T4997] Could not create tracefs 'stacktrace' entry [ 26.095142][ T4997] ERROR: Could not create tracefs directory 'per_cpu/0' [ 26.099205][ T4997] Could not create tracefs 'free_buffer' entry [ 26.106652][ T4997] Could not create tracefs 'trace_marker' entry [ 26.111389][ T4997] Could not create tracefs 'trace_marker_raw' entry [ 26.113823][ T4997] Could not create tracefs 'buffer_percent' entry [ 26.115162][ T4997] Could not create tracefs 'syscall_user_buf_size' entry [ 26.116490][ T4997] Could not create tracefs 'tracing_on' entry [ 26.119139][ T4997] Could not create tracefs 'error_log' entry [ 26.130525][ T4997] Could not create tracefs 'test_nop_accept' entry [ 26.130533][ T4997] ERROR: Failed to create trace option: test_nop_accept [ 26.138306][ T4997] Could not create tracefs 'test_nop_refuse' entry [ 26.167990][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 26.174430][ T4991] hsr0: entered allmulticast mode [ 26.174454][ T4991] hsr_slave_0: entered allmulticast mode [ 26.174466][ T4991] hsr_slave_1: entered allmulticast mode [ 26.174630][ T4991] hsr0: left allmulticast mode [ 26.174638][ T4991] hsr_slave_0: left allmulticast mode [ 26.174655][ T4991] hsr_slave_1: left allmulticast mode [ 26.177430][ T4996] hsr_slave_0: left promiscuous mode [ 26.178689][ T4996] hsr_slave_1: left promiscuous mode [ 26.211403][ T5002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 26.231923][ T5002] bond1: (slave bridge1): making interface the new active one [ 26.232788][ T5002] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 26.255603][ T5012] ip_tables: iptables: counters copy to user failed while replacing table [ 26.283542][ T5013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 26.310782][ T88] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.320225][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.330792][ T5013] md: could not open device unknown-block(1,0). [ 26.341062][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.341091][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.371176][ T5019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.45'. [ 26.371192][ T5019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 26.371204][ T5019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.45'. [ 26.389861][ T4897] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 26.433357][ T5026] fido_id[5026]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 26.536967][ T5040] pim6reg: entered allmulticast mode [ 26.543421][ T5039] pim6reg: left allmulticast mode [ 26.625816][ T5052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.626004][ T5052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.645311][ T5052] i2c i2c-0: dtv_property_process_set: SET cmd 0x00001880 undefined [ 26.682199][ T5059] syz.4.69 (5059) used obsolete PPPIOCDETACH ioctl [ 26.731184][ T5067] vivid-000: disconnect [ 26.731478][ T5066] vivid-000: reconnect [ 26.985924][ T5091] ip_tables: iptables: counters copy to user failed while replacing table [ 27.059226][ T5095] syzkaller0: entered promiscuous mode [ 27.059244][ T5095] syzkaller0: entered allmulticast mode [ 27.062858][ T4719] Bluetooth: hci2: command tx timeout [ 27.062878][ T4719] Bluetooth: hci4: command tx timeout [ 27.062892][ T4719] Bluetooth: hci1: command tx timeout [ 27.062904][ T4719] Bluetooth: hci3: command tx timeout [ 27.425104][ T5070] Set syz1 is full, maxelem 65536 reached [ 27.663086][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.663360][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.674023][ T5126] i2c i2c-0: dtv_property_process_set: SET cmd 0x00001880 undefined [ 27.717903][ T5133] xt_hashlimit: size too large, truncated to 1048576 [ 27.717926][ T5133] xt_hashlimit: max too large, truncated to 1048576 [ 27.967263][ T5143] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 28.184773][ T5160] loop3: detected capacity change from 0 to 512 [ 28.189126][ T5160] ======================================================= [ 28.189126][ T5160] WARNING: The mand mount option has been deprecated and [ 28.189126][ T5160] and is ignored by this kernel. Remove the mand [ 28.189126][ T5160] option from the mount to silence this warning. [ 28.189126][ T5160] ======================================================= [ 28.211795][ T5160] EXT4-fs error (device loop3): __ext4_iget:5592: inode #11: block 1: comm syz.3.114: invalid block [ 28.211847][ T5160] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 28.212933][ T5160] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.114: couldn't read orphan inode 11 (err -117) [ 28.212980][ T5160] loop3: lost filesystem error report for type 5 error -117 [ 28.213849][ T5160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.330462][ T5174] Zero length message leads to an empty skb [ 28.338169][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.454070][ T5189] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 28.494654][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.494917][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.504222][ T5192] zram: Cannot change disksize for initialized device [ 28.527425][ T5185] i2c i2c-0: dtv_property_process_set: SET cmd 0x00001880 undefined [ 28.542428][ T5198] misc userio: Invalid payload size [ 28.800863][ T5225] usb usb8: usbfs: process 5225 (syz.1.143) did not claim interface 0 before use [ 28.992606][ T5251] usb usb8: usbfs: process 5251 (syz.0.156) did not claim interface 0 before use [ 29.058910][ T5255] macvlan2: entered promiscuous mode [ 29.058920][ T5255] macvlan2: entered allmulticast mode [ 29.123617][ T5267] zram: Cannot change disksize for initialized device [ 29.139755][ T4720] Bluetooth: hci3: command tx timeout [ 29.139775][ T4720] Bluetooth: hci1: command tx timeout [ 29.139791][ T4720] Bluetooth: hci4: command tx timeout [ 29.139805][ T4720] Bluetooth: hci2: command tx timeout [ 29.177505][ T5275] usb usb8: usbfs: process 5275 (syz.1.168) did not claim interface 0 before use [ 29.456521][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.497640][ T5310] FAULT_INJECTION: forcing a failure. [ 29.497640][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 29.497660][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.4.186 Tainted: G L syzkaller #0 PREEMPT [ 29.497673][ T5310] Tainted: [L]=SOFTLOCKUP [ 29.497677][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.497691][ T5310] Call trace: [ 29.497694][ T5310] show_stack+0x2c/0x3c (C) [ 29.497713][ T5310] __dump_stack+0x30/0x40 [ 29.497726][ T5310] dump_stack_lvl+0xd8/0x12c [ 29.497738][ T5310] dump_stack+0x1c/0x28 [ 29.497750][ T5310] should_fail_ex+0x41c/0x590 [ 29.497764][ T5310] should_failslab+0xc4/0x120 [ 29.497777][ T5310] __kmalloc_cache_noprof+0x94/0x5fc [ 29.497786][ T5310] alloc_fs_context+0x7c/0xba4 [ 29.497796][ T5310] fs_context_for_mount+0x34/0x44 [ 29.497805][ T5310] mq_init_ns+0xdc/0x638 [ 29.497818][ T5310] copy_ipcs+0x3c8/0x63c [ 29.497830][ T5310] create_new_namespaces+0x1a8/0x50c [ 29.497842][ T5310] unshare_nsproxy_namespaces+0x120/0x170 [ 29.497852][ T5310] ksys_unshare+0x438/0x6cc [ 29.497862][ T5310] __arm64_sys_unshare+0x40/0x54 [ 29.497872][ T5310] invoke_syscall+0x98/0x244 [ 29.497884][ T5310] el0_svc_common+0xec/0x23c [ 29.497896][ T5310] do_el0_svc+0x4c/0x5c [ 29.497907][ T5310] el0_svc+0x64/0x260 [ 29.497919][ T5310] el0t_64_sync_handler+0x44/0x104 [ 29.497930][ T5310] el0t_64_sync+0x198/0x19c [ 29.503913][ T5310] FAULT_INJECTION: forcing a failure. [ 29.503913][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 29.503932][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.4.186 Tainted: G L syzkaller #0 PREEMPT [ 29.503945][ T5310] Tainted: [L]=SOFTLOCKUP [ 29.503949][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.503961][ T5310] Call trace: [ 29.503964][ T5310] show_stack+0x2c/0x3c (C) [ 29.503985][ T5310] __dump_stack+0x30/0x40 [ 29.503997][ T5310] dump_stack_lvl+0xd8/0x12c [ 29.504010][ T5310] dump_stack+0x1c/0x28 [ 29.504022][ T5310] should_fail_ex+0x41c/0x590 [ 29.504035][ T5310] should_failslab+0xc4/0x120 [ 29.504048][ T5310] __kmalloc_cache_noprof+0x94/0x5fc [ 29.504057][ T5310] alloc_fs_context+0x7c/0xba4 [ 29.504066][ T5310] fs_context_for_mount+0x34/0x44 [ 29.504075][ T5310] mq_init_ns+0xdc/0x638 [ 29.504087][ T5310] copy_ipcs+0x3c8/0x63c [ 29.504099][ T5310] create_new_namespaces+0x1a8/0x50c [ 29.504110][ T5310] unshare_nsproxy_namespaces+0x120/0x170 [ 29.504120][ T5310] ksys_unshare+0x438/0x6cc [ 29.504130][ T5310] __arm64_sys_unshare+0x40/0x54 [ 29.504139][ T5310] invoke_syscall+0x98/0x244 [ 29.504151][ T5310] el0_svc_common+0xec/0x23c [ 29.504163][ T5310] do_el0_svc+0x4c/0x5c [ 29.504174][ T5310] el0_svc+0x64/0x260 [ 29.504185][ T5310] el0t_64_sync_handler+0x44/0x104 [ 29.504196][ T5310] el0t_64_sync+0x198/0x19c [ 29.505662][ T5310] FAULT_INJECTION: forcing a failure. [ 29.505662][ T5310] name fail_futex, interval 1, probability 0, space 0, times 1 [ 29.505680][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.4.186 Tainted: G L syzkaller #0 PREEMPT [ 29.505692][ T5310] Tainted: [L]=SOFTLOCKUP [ 29.505696][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.505708][ T5310] Call trace: [ 29.505711][ T5310] show_stack+0x2c/0x3c (C) [ 29.505725][ T5310] __dump_stack+0x30/0x40 [ 29.505736][ T5310] dump_stack_lvl+0xd8/0x12c [ 29.505748][ T5310] dump_stack+0x1c/0x28 [ 29.505759][ T5310] should_fail_ex+0x41c/0x590 [ 29.505772][ T5310] should_fail+0x14/0x24 [ 29.505784][ T5310] get_futex_key+0x1ec/0x12b0 [ 29.505797][ T5310] futex_wake+0x10c/0x594 [ 29.505808][ T5310] do_futex+0x2c4/0x378 [ 29.505819][ T5310] __arm64_sys_futex+0x2e4/0x418 [ 29.505829][ T5310] invoke_syscall+0x98/0x244 [ 29.505841][ T5310] el0_svc_common+0xec/0x23c [ 29.505853][ T5310] do_el0_svc+0x4c/0x5c [ 29.505864][ T5310] el0_svc+0x64/0x260 [ 29.505874][ T5310] el0t_64_sync_handler+0x44/0x104 [ 29.505885][ T5310] el0t_64_sync+0x198/0x19c [ 29.615754][ T24] usb 1-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 29.617207][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 29.617236][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.674270][ T5319] FAULT_INJECTION: forcing a failure. [ 29.674270][ T5319] name failslab, interval 1, probability 0, space 0, times 0 [ 29.674289][ T5319] CPU: 1 UID: 0 PID: 5319 Comm: syz.2.187 Tainted: G L syzkaller #0 PREEMPT [ 29.674301][ T5319] Tainted: [L]=SOFTLOCKUP [ 29.674305][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.674316][ T5319] Call trace: [ 29.674319][ T5319] show_stack+0x2c/0x3c (C) [ 29.674336][ T5319] __dump_stack+0x30/0x40 [ 29.674350][ T5319] dump_stack_lvl+0xd8/0x12c [ 29.674360][ T5319] dump_stack+0x1c/0x28 [ 29.674369][ T5319] should_fail_ex+0x41c/0x590 [ 29.674382][ T5319] should_failslab+0xc4/0x120 [ 29.674387][ T5322] tipc: Started in network mode [ 29.674395][ T5319] kmem_cache_alloc_noprof+0x94/0x5d4 [ 29.674403][ T5319] security_inode_alloc+0x40/0x304 [ 29.674408][ T5322] tipc: Node identity ac1414aa, cluster identity 4711 [ 29.674412][ T5319] inode_init_always_gfp+0x704/0xbac [ 29.674422][ T5319] alloc_inode+0x9c/0x198 [ 29.674431][ T5319] new_inode+0x20/0x50 [ 29.674441][ T5319] debugfs_get_inode+0x20/0x7c [ 29.674448][ T5319] __debugfs_create_file+0xb8/0x36c [ 29.674459][ T5319] debugfs_create_file_full+0x58/0x70 [ 29.674469][ T5319] ref_tracker_dir_debugfs+0x174/0x2f0 [ 29.674479][ T5319] alloc_netdev_mqs+0x1fc/0xf34 [ 29.674490][ T5319] loopback_net_init+0x40/0x150 [ 29.674499][ T5319] ops_init+0x2cc/0x528 [ 29.674507][ T5319] setup_net+0x118/0x2fc [ 29.674516][ T5319] copy_net_ns+0x454/0x698 [ 29.674524][ T5319] create_new_namespaces+0x304/0x50c [ 29.674533][ T5319] unshare_nsproxy_namespaces+0x120/0x170 [ 29.674542][ T5319] ksys_unshare+0x438/0x6cc [ 29.674551][ T5319] __arm64_sys_unshare+0x40/0x54 [ 29.674559][ T5319] invoke_syscall+0x98/0x244 [ 29.674569][ T5319] el0_svc_common+0xec/0x23c [ 29.674579][ T5319] do_el0_svc+0x4c/0x5c [ 29.674588][ T5319] el0_svc+0x64/0x260 [ 29.674598][ T5319] el0t_64_sync_handler+0x44/0x104 [ 29.674607][ T5319] el0t_64_sync+0x198/0x19c [ 29.674685][ T5319] debugfs: out of free dentries, can not create file 'netdev@000000003bd3455c' [ 29.674766][ T5322] tipc: New replicast peer: 172.20.20.187 [ 29.675196][ T5322] tipc: Enabled bearer , priority 10 [ 29.682384][ T5310] FAULT_INJECTION: forcing a failure. [ 29.682384][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 29.682400][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.4.186 Tainted: G L syzkaller #0 PREEMPT [ 29.682414][ T5310] Tainted: [L]=SOFTLOCKUP [ 29.682417][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.682428][ T5310] Call trace: [ 29.682431][ T5310] show_stack+0x2c/0x3c (C) [ 29.682443][ T5310] __dump_stack+0x30/0x40 [ 29.682453][ T5310] dump_stack_lvl+0xd8/0x12c [ 29.682463][ T5310] dump_stack+0x1c/0x28 [ 29.682472][ T5310] should_fail_ex+0x41c/0x590 [ 29.682482][ T5310] should_failslab+0xc4/0x120 [ 29.682493][ T5310] __kmalloc_noprof+0x108/0x6c8 [ 29.682500][ T5310] __alloc_workqueue+0x160/0x11a0 [ 29.682508][ T5310] alloc_workqueue_va+0x5c/0x138 [ 29.682516][ T5310] alloc_workqueue_noprof+0xe0/0x130 [ 29.682523][ T5310] tipc_topsrv_init_net+0x2f0/0x710 [ 29.682532][ T5310] ops_init+0x2cc/0x528 [ 29.682541][ T5310] setup_net+0x118/0x2fc [ 29.682550][ T5310] copy_net_ns+0x454/0x698 [ 29.682558][ T5310] create_new_namespaces+0x304/0x50c [ 29.682567][ T5310] unshare_nsproxy_namespaces+0x120/0x170 [ 29.682576][ T5310] ksys_unshare+0x438/0x6cc [ 29.682584][ T5310] __arm64_sys_unshare+0x40/0x54 [ 29.682592][ T5310] invoke_syscall+0x98/0x244 [ 29.682602][ T5310] el0_svc_common+0xec/0x23c [ 29.682611][ T5310] do_el0_svc+0x4c/0x5c [ 29.682621][ T5310] el0_svc+0x64/0x260 [ 29.682630][ T5310] el0t_64_sync_handler+0x44/0x104 [ 29.682639][ T5310] el0t_64_sync+0x198/0x19c [ 29.682648][ T5310] tipc: can't start tipc receive workqueue [ 29.737962][ T4809] net_ratelimit: 159 callbacks suppressed [ 29.747695][ T5310] FAULT_INJECTION: forcing a failure. [ 29.747695][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 29.747706][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.4.186 Tainted: G L syzkaller #0 PREEMPT [ 29.747716][ T5310] Tainted: [L]=SOFTLOCKUP [ 29.747719][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.747730][ T5310] Call trace: [ 29.747732][ T5310] show_stack+0x2c/0x3c (C) [ 29.747746][ T5310] __dump_stack+0x30/0x40 [ 29.747756][ T5310] dump_stack_lvl+0xd8/0x12c [ 29.747766][ T5310] dump_stack+0x1c/0x28 [ 29.747775][ T5310] should_fail_ex+0x41c/0x590 [ 29.747785][ T5310] should_failslab+0xc4/0x120 [ 29.747796][ T5310] __kmalloc_noprof+0x108/0x6c8 [ 29.747804][ T5310] kobject_get_path+0xbc/0x2a4 [ 29.747814][ T5310] kobject_uevent_env+0x264/0x944 [ 29.747825][ T5310] kobject_uevent+0x2c/0x3c [ 29.747834][ T5310] __kobject_del+0xd4/0x1c8 [ 29.747844][ T5310] kobject_put+0x1f4/0x4b8 [ 29.747854][ T5310] net_rx_queue_update_kobjects+0x5ac/0x66c [ 29.747864][ T5310] netdev_unregister_kobject+0xe8/0x39c [ 29.747874][ T5310] unregister_netdevice_many_notify+0x123c/0x1760 [ 29.747885][ T5310] unregister_netdevice_many+0x28/0x38 [ 29.747895][ T5310] ops_undo_list+0x32c/0x81c [ 29.747904][ T5310] setup_net+0x2a0/0x2fc [ 29.747912][ T5310] copy_net_ns+0x454/0x698 [ 29.747920][ T5310] create_new_namespaces+0x304/0x50c [ 29.747929][ T5310] unshare_nsproxy_namespaces+0x120/0x170 [ 29.747938][ T5310] ksys_unshare+0x438/0x6cc [ 29.747946][ T5310] __arm64_sys_unshare+0x40/0x54 [ 29.747954][ T5310] invoke_syscall+0x98/0x244 [ 29.747970][ T5310] el0_svc_common+0xec/0x23c [ 29.747980][ T5310] do_el0_svc+0x4c/0x5c [ 29.747990][ T5310] el0_svc+0x64/0x260 [ 29.747999][ T5310] el0t_64_sync_handler+0x44/0x104 [ 29.748008][ T5310] el0t_64_sync+0x198/0x19c [ 29.778895][ T5330] file system registered [ 29.865575][ T5319] FAULT_INJECTION: forcing a failure. [ 29.865575][ T5319] name failslab, interval 1, probability 0, space 0, times 0 [ 29.865593][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.2.187 Tainted: G L syzkaller #0 PREEMPT [ 29.865606][ T5319] Tainted: [L]=SOFTLOCKUP [ 29.865609][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.865621][ T5319] Call trace: [ 29.865623][ T5319] show_stack+0x2c/0x3c (C) [ 29.865637][ T5319] __dump_stack+0x30/0x40 [ 29.865647][ T5319] dump_stack_lvl+0xd8/0x12c [ 29.865657][ T5319] dump_stack+0x1c/0x28 [ 29.865666][ T5319] should_fail_ex+0x41c/0x590 [ 29.865677][ T5319] should_failslab+0xc4/0x120 [ 29.865688][ T5319] __kmalloc_cache_noprof+0x94/0x5fc [ 29.865696][ T5319] alloc_netdev_mqs+0x97c/0xf34 [ 29.865707][ T5319] __ip_tunnel_create+0x2e0/0x4b0 [ 29.865717][ T5319] ip_tunnel_init_net+0x238/0x49c [ 29.865728][ T5319] erspan_init_net+0x38/0x48 [ 29.865738][ T5319] ops_init+0x2cc/0x528 [ 29.865747][ T5319] setup_net+0x118/0x2fc [ 29.865755][ T5319] copy_net_ns+0x454/0x698 [ 29.865763][ T5319] create_new_namespaces+0x304/0x50c [ 29.865773][ T5319] unshare_nsproxy_namespaces+0x120/0x170 [ 29.865781][ T5319] ksys_unshare+0x438/0x6cc [ 29.865789][ T5319] __arm64_sys_unshare+0x40/0x54 [ 29.865798][ T5319] invoke_syscall+0x98/0x244 [ 29.865808][ T5319] el0_svc_common+0xec/0x23c [ 29.865817][ T5319] do_el0_svc+0x4c/0x5c [ 29.865827][ T5319] el0_svc+0x64/0x260 [ 29.865836][ T5319] el0t_64_sync_handler+0x44/0x104 [ 29.865846][ T5319] el0t_64_sync+0x198/0x19c [ 29.872582][ T1180] usb 1-1: USB disconnect, device number 2 [ 29.873110][ T4719] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 29.900065][ T5339] IPv6: Can't replace route, no match found [ 30.032154][ T24] hid-multitouch 0005:0457:0009.0002: unknown main item tag 0x0 [ 30.039922][ T24] hid-multitouch 0005:0457:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 30.220587][ T5348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 30.220677][ T5348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 30.223126][ T5348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 30.224788][ T5348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 30.224838][ T5348] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 30.225610][ T5348] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 30.228801][ T5348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 30.228847][ T5348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 30.233208][ T5348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 30.235658][ T5348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 30.235700][ T5348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 30.248895][ T5348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 30.511882][ T5370] FAULT_INJECTION: forcing a failure. [ 30.511882][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.511902][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.511915][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.511919][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.511932][ T5370] Call trace: [ 30.511935][ T5370] show_stack+0x2c/0x3c (C) [ 30.511955][ T5370] __dump_stack+0x30/0x40 [ 30.511973][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.511985][ T5370] dump_stack+0x1c/0x28 [ 30.511997][ T5370] should_fail_ex+0x41c/0x590 [ 30.512011][ T5370] should_failslab+0xc4/0x120 [ 30.512024][ T5370] __kmalloc_cache_noprof+0x94/0x5fc [ 30.512033][ T5370] alloc_fs_context+0x7c/0xba4 [ 30.512043][ T5370] fs_context_for_mount+0x34/0x44 [ 30.512052][ T5370] mq_init_ns+0xdc/0x638 [ 30.512065][ T5370] copy_ipcs+0x3c8/0x63c [ 30.512077][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.512088][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.512099][ T5370] ksys_unshare+0x438/0x6cc [ 30.512109][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.512118][ T5370] invoke_syscall+0x98/0x244 [ 30.512131][ T5370] el0_svc_common+0xec/0x23c [ 30.512142][ T5370] do_el0_svc+0x4c/0x5c [ 30.512154][ T5370] el0_svc+0x64/0x260 [ 30.512166][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.512177][ T5370] el0t_64_sync+0x198/0x19c [ 30.531647][ T5370] FAULT_INJECTION: forcing a failure. [ 30.531647][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.531665][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.531679][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.531683][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.531695][ T5370] Call trace: [ 30.531697][ T5370] show_stack+0x2c/0x3c (C) [ 30.531711][ T5370] __dump_stack+0x30/0x40 [ 30.531723][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.531735][ T5370] dump_stack+0x1c/0x28 [ 30.531746][ T5370] should_fail_ex+0x41c/0x590 [ 30.531759][ T5370] should_failslab+0xc4/0x120 [ 30.531772][ T5370] __kmalloc_cache_noprof+0x94/0x5fc [ 30.531781][ T5370] alloc_fs_context+0x7c/0xba4 [ 30.531790][ T5370] fs_context_for_mount+0x34/0x44 [ 30.531799][ T5370] mq_init_ns+0xdc/0x638 [ 30.531811][ T5370] copy_ipcs+0x3c8/0x63c [ 30.531823][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.531834][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.531845][ T5370] ksys_unshare+0x438/0x6cc [ 30.531854][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.531864][ T5370] invoke_syscall+0x98/0x244 [ 30.531876][ T5370] el0_svc_common+0xec/0x23c [ 30.531888][ T5370] do_el0_svc+0x4c/0x5c [ 30.531899][ T5370] el0_svc+0x64/0x260 [ 30.531909][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.531920][ T5370] el0t_64_sync+0x198/0x19c [ 30.535349][ T5370] FAULT_INJECTION: forcing a failure. [ 30.535349][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.535369][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.535382][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.535386][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.535399][ T5370] Call trace: [ 30.535402][ T5370] show_stack+0x2c/0x3c (C) [ 30.535416][ T5370] __dump_stack+0x30/0x40 [ 30.535428][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.535439][ T5370] dump_stack+0x1c/0x28 [ 30.535450][ T5370] should_fail_ex+0x41c/0x590 [ 30.535463][ T5370] should_failslab+0xc4/0x120 [ 30.535475][ T5370] __kmalloc_cache_noprof+0x94/0x5fc [ 30.535484][ T5370] mqueue_init_fs_context+0x64/0x4dc [ 30.535497][ T5370] alloc_fs_context+0x7d8/0xba4 [ 30.535506][ T5370] fs_context_for_mount+0x34/0x44 [ 30.535515][ T5370] mq_init_ns+0xdc/0x638 [ 30.535526][ T5370] copy_ipcs+0x3c8/0x63c [ 30.535538][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.535549][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.535559][ T5370] ksys_unshare+0x438/0x6cc [ 30.535568][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.535578][ T5370] invoke_syscall+0x98/0x244 [ 30.535589][ T5370] el0_svc_common+0xec/0x23c [ 30.535601][ T5370] do_el0_svc+0x4c/0x5c [ 30.535612][ T5370] el0_svc+0x64/0x260 [ 30.535623][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.535633][ T5370] el0t_64_sync+0x198/0x19c [ 30.542047][ T5370] FAULT_INJECTION: forcing a failure. [ 30.542047][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.542064][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.542077][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.542081][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.542092][ T5370] Call trace: [ 30.542095][ T5370] show_stack+0x2c/0x3c (C) [ 30.542110][ T5370] __dump_stack+0x30/0x40 [ 30.542121][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.542133][ T5370] dump_stack+0x1c/0x28 [ 30.542144][ T5370] should_fail_ex+0x41c/0x590 [ 30.542157][ T5370] should_failslab+0xc4/0x120 [ 30.542169][ T5370] __kmalloc_cache_noprof+0x94/0x5fc [ 30.542178][ T5370] sget_fc+0x5f4/0x14e8 [ 30.542188][ T5370] vfs_get_super+0x40/0x148 [ 30.542197][ T5370] get_tree_nodev+0x2c/0x3c [ 30.542207][ T5370] mqueue_get_tree+0xac/0xe8 [ 30.542220][ T5370] vfs_get_tree+0x90/0x28c [ 30.542229][ T5370] fc_mount+0x24/0xac [ 30.542239][ T5370] fc_mount_longterm+0x20/0x74 [ 30.542250][ T5370] mq_init_ns+0x3c8/0x638 [ 30.542261][ T5370] copy_ipcs+0x3c8/0x63c [ 30.542274][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.542284][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.542295][ T5370] ksys_unshare+0x438/0x6cc [ 30.542304][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.542313][ T5370] invoke_syscall+0x98/0x244 [ 30.542325][ T5370] el0_svc_common+0xec/0x23c [ 30.542337][ T5370] do_el0_svc+0x4c/0x5c [ 30.542348][ T5370] el0_svc+0x64/0x260 [ 30.542359][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.542370][ T5370] el0t_64_sync+0x198/0x19c [ 30.543715][ T5370] FAULT_INJECTION: forcing a failure. [ 30.543715][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.543731][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.543744][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.543747][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.543759][ T5370] Call trace: [ 30.543761][ T5370] show_stack+0x2c/0x3c (C) [ 30.543776][ T5370] __dump_stack+0x30/0x40 [ 30.543787][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.543799][ T5370] dump_stack+0x1c/0x28 [ 30.543810][ T5370] should_fail_ex+0x41c/0x590 [ 30.543823][ T5370] should_failslab+0xc4/0x120 [ 30.543835][ T5370] __kmalloc_cache_noprof+0x94/0x5fc [ 30.543844][ T5370] shrinker_alloc+0x68/0x97c [ 30.543855][ T5370] sget_fc+0xb90/0x14e8 [ 30.543864][ T5370] vfs_get_super+0x40/0x148 [ 30.543874][ T5370] get_tree_nodev+0x2c/0x3c [ 30.543883][ T5370] mqueue_get_tree+0xac/0xe8 [ 30.543896][ T5370] vfs_get_tree+0x90/0x28c [ 30.543906][ T5370] fc_mount+0x24/0xac [ 30.543916][ T5370] fc_mount_longterm+0x20/0x74 [ 30.543926][ T5370] mq_init_ns+0x3c8/0x638 [ 30.543938][ T5370] copy_ipcs+0x3c8/0x63c [ 30.543950][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.543966][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.543977][ T5370] ksys_unshare+0x438/0x6cc [ 30.543986][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.543996][ T5370] invoke_syscall+0x98/0x244 [ 30.544008][ T5370] el0_svc_common+0xec/0x23c [ 30.544020][ T5370] do_el0_svc+0x4c/0x5c [ 30.544031][ T5370] el0_svc+0x64/0x260 [ 30.544042][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.544053][ T5370] el0t_64_sync+0x198/0x19c [ 30.557054][ T5370] FAULT_INJECTION: forcing a failure. [ 30.557054][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.557076][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.557089][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.557093][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.557105][ T5370] Call trace: [ 30.557108][ T5370] show_stack+0x2c/0x3c (C) [ 30.557123][ T5370] __dump_stack+0x30/0x40 [ 30.557135][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.557147][ T5370] dump_stack+0x1c/0x28 [ 30.557158][ T5370] should_fail_ex+0x41c/0x590 [ 30.557170][ T5370] should_failslab+0xc4/0x120 [ 30.557183][ T5370] __kmalloc_cache_noprof+0x94/0x5fc [ 30.557192][ T5370] shrinker_alloc+0x68/0x97c [ 30.557202][ T5370] sget_fc+0xb90/0x14e8 [ 30.557212][ T5370] vfs_get_super+0x40/0x148 [ 30.557221][ T5370] get_tree_nodev+0x2c/0x3c [ 30.557231][ T5370] mqueue_get_tree+0xac/0xe8 [ 30.557243][ T5370] vfs_get_tree+0x90/0x28c [ 30.557253][ T5370] fc_mount+0x24/0xac [ 30.557263][ T5370] fc_mount_longterm+0x20/0x74 [ 30.557273][ T5370] mq_init_ns+0x3c8/0x638 [ 30.557285][ T5370] copy_ipcs+0x3c8/0x63c [ 30.557297][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.557308][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.557318][ T5370] ksys_unshare+0x438/0x6cc [ 30.557327][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.557337][ T5370] invoke_syscall+0x98/0x244 [ 30.557349][ T5370] el0_svc_common+0xec/0x23c [ 30.557360][ T5370] do_el0_svc+0x4c/0x5c [ 30.557372][ T5370] el0_svc+0x64/0x260 [ 30.557382][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.557393][ T5370] el0t_64_sync+0x198/0x19c [ 30.573212][ T5370] FAULT_INJECTION: forcing a failure. [ 30.573212][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.573232][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.573249][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.573252][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.573265][ T5370] Call trace: [ 30.573268][ T5370] show_stack+0x2c/0x3c (C) [ 30.573282][ T5370] __dump_stack+0x30/0x40 [ 30.573294][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.573305][ T5370] dump_stack+0x1c/0x28 [ 30.573316][ T5370] should_fail_ex+0x41c/0x590 [ 30.573329][ T5370] should_failslab+0xc4/0x120 [ 30.573341][ T5370] __kmalloc_noprof+0x108/0x6c8 [ 30.573350][ T5370] __list_lru_init+0xa4/0x3e8 [ 30.573359][ T5370] sget_fc+0xc60/0x14e8 [ 30.573367][ T5370] vfs_get_super+0x40/0x148 [ 30.573377][ T5370] get_tree_nodev+0x2c/0x3c [ 30.573386][ T5370] mqueue_get_tree+0xac/0xe8 [ 30.573399][ T5370] vfs_get_tree+0x90/0x28c [ 30.573408][ T5370] fc_mount+0x24/0xac [ 30.573418][ T5370] fc_mount_longterm+0x20/0x74 [ 30.573428][ T5370] mq_init_ns+0x3c8/0x638 [ 30.573440][ T5370] copy_ipcs+0x3c8/0x63c [ 30.573452][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.573462][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.573473][ T5370] ksys_unshare+0x438/0x6cc [ 30.573482][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.573491][ T5370] invoke_syscall+0x98/0x244 [ 30.573503][ T5370] el0_svc_common+0xec/0x23c [ 30.573514][ T5370] do_el0_svc+0x4c/0x5c [ 30.573526][ T5370] el0_svc+0x64/0x260 [ 30.573536][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.573547][ T5370] el0t_64_sync+0x198/0x19c [ 30.574373][ T5370] FAULT_INJECTION: forcing a failure. [ 30.574373][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.574389][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.574400][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.574403][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.574414][ T5370] Call trace: [ 30.574417][ T5370] show_stack+0x2c/0x3c (C) [ 30.574430][ T5370] __dump_stack+0x30/0x40 [ 30.574442][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.574453][ T5370] dump_stack+0x1c/0x28 [ 30.574464][ T5370] should_fail_ex+0x41c/0x590 [ 30.574477][ T5370] should_failslab+0xc4/0x120 [ 30.574489][ T5370] __kmalloc_cache_noprof+0x94/0x5fc [ 30.574498][ T5370] super_dev_alloc+0x5c/0x10c [ 30.574508][ T5370] sget_fc+0xcb4/0x14e8 [ 30.574517][ T5370] vfs_get_super+0x40/0x148 [ 30.574527][ T5370] get_tree_nodev+0x2c/0x3c [ 30.574536][ T5370] mqueue_get_tree+0xac/0xe8 [ 30.574549][ T5370] vfs_get_tree+0x90/0x28c [ 30.574559][ T5370] fc_mount+0x24/0xac [ 30.574569][ T5370] fc_mount_longterm+0x20/0x74 [ 30.574579][ T5370] mq_init_ns+0x3c8/0x638 [ 30.574591][ T5370] copy_ipcs+0x3c8/0x63c [ 30.574603][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.574613][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.574624][ T5370] ksys_unshare+0x438/0x6cc [ 30.574633][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.574643][ T5370] invoke_syscall+0x98/0x244 [ 30.574654][ T5370] el0_svc_common+0xec/0x23c [ 30.574666][ T5370] do_el0_svc+0x4c/0x5c [ 30.574678][ T5370] el0_svc+0x64/0x260 [ 30.574688][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.574699][ T5370] el0t_64_sync+0x198/0x19c [ 30.581287][ T5370] FAULT_INJECTION: forcing a failure. [ 30.581287][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.581300][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.581312][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.581316][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.581328][ T5370] Call trace: [ 30.581330][ T5370] show_stack+0x2c/0x3c (C) [ 30.581345][ T5370] __dump_stack+0x30/0x40 [ 30.581357][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.581368][ T5370] dump_stack+0x1c/0x28 [ 30.581379][ T5370] should_fail_ex+0x41c/0x590 [ 30.581392][ T5370] should_failslab+0xc4/0x120 [ 30.581405][ T5370] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 30.581414][ T5370] mqueue_alloc_inode+0x2c/0x48 [ 30.581427][ T5370] alloc_inode+0x68/0x198 [ 30.581438][ T5370] new_inode+0x20/0x50 [ 30.581448][ T5370] mqueue_get_inode+0x40/0x93c [ 30.581460][ T5370] mqueue_fill_super+0x110/0x1a8 [ 30.581473][ T5370] vfs_get_super+0xb8/0x148 [ 30.581483][ T5370] get_tree_nodev+0x2c/0x3c [ 30.581492][ T5370] mqueue_get_tree+0xac/0xe8 [ 30.581504][ T5370] vfs_get_tree+0x90/0x28c [ 30.581514][ T5370] fc_mount+0x24/0xac [ 30.581524][ T5370] fc_mount_longterm+0x20/0x74 [ 30.581534][ T5370] mq_init_ns+0x3c8/0x638 [ 30.581545][ T5370] copy_ipcs+0x3c8/0x63c [ 30.581558][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.581568][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.581579][ T5370] ksys_unshare+0x438/0x6cc [ 30.581587][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.581597][ T5370] invoke_syscall+0x98/0x244 [ 30.581609][ T5370] el0_svc_common+0xec/0x23c [ 30.581620][ T5370] do_el0_svc+0x4c/0x5c [ 30.581631][ T5370] el0_svc+0x64/0x260 [ 30.581642][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.581652][ T5370] el0t_64_sync+0x198/0x19c [ 30.595301][ T5370] FAULT_INJECTION: forcing a failure. [ 30.595301][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 30.595319][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT [ 30.595333][ T5370] Tainted: [L]=SOFTLOCKUP [ 30.595336][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.595349][ T5370] Call trace: [ 30.595352][ T5370] show_stack+0x2c/0x3c (C) [ 30.595367][ T5370] __dump_stack+0x30/0x40 [ 30.595378][ T5370] dump_stack_lvl+0xd8/0x12c [ 30.595390][ T5370] dump_stack+0x1c/0x28 [ 30.595401][ T5370] should_fail_ex+0x41c/0x590 [ 30.595414][ T5370] should_failslab+0xc4/0x120 [ 30.595427][ T5370] __kmalloc_noprof+0x108/0x6c8 [ 30.595435][ T5370] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 30.595444][ T5370] memcg_list_lru_alloc+0xc4/0xf8 [ 30.595453][ T5370] __memcg_slab_post_alloc_hook+0x28c/0x8c0 [ 30.595466][ T5370] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 30.595474][ T5370] __d_alloc+0x50/0x690 [ 30.595483][ T5370] d_make_root+0x48/0x90 [ 30.595493][ T5370] mqueue_fill_super+0x130/0x1a8 [ 30.595506][ T5370] vfs_get_super+0xb8/0x148 [ 30.595515][ T5370] get_tree_nodev+0x2c/0x3c [ 30.595525][ T5370] mqueue_get_tree+0xac/0xe8 [ 30.595537][ T5370] vfs_get_tree+0x90/0x28c [ 30.595547][ T5370] fc_mount+0x24/0xac [ 30.595557][ T5370] fc_mount_longterm+0x20/0x74 [ 30.595567][ T5370] mq_init_ns+0x3c8/0x638 [ 30.595579][ T5370] copy_ipcs+0x3c8/0x63c [ 30.595592][ T5370] create_new_namespaces+0x1a8/0x50c [ 30.595602][ T5370] unshare_nsproxy_namespaces+0x120/0x170 [ 30.595613][ T5370] ksys_unshare+0x438/0x6cc [ 30.595622][ T5370] __arm64_sys_unshare+0x40/0x54 [ 30.595632][ T5370] invoke_syscall+0x98/0x244 [ 30.595644][ T5370] el0_svc_common+0xec/0x23c [ 30.595655][ T5370] do_el0_svc+0x4c/0x5c [ 30.595667][ T5370] el0_svc+0x64/0x260 [ 30.595677][ T5370] el0t_64_sync_handler+0x44/0x104 [ 30.595688][ T5370] el0t_64_sync+0x198/0x19c [ 30.658136][ T5377] loop1: detected capacity change from 0 to 512 [ 30.679287][ T5377] EXT4-fs error (device loop1): __ext4_iget:5592: inode #11: block 1: comm syz.1.206: invalid block [ 30.679303][ T5377] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 30.679457][ T5377] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.206: couldn't read orphan inode 11 (err -117) [ 30.679471][ T5377] loop1: lost filesystem error report for type 5 error -117 [ 30.679524][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 30.679532][ C0] EXT4-fs (loop1): initial error at time 30: __ext4_iget:5592: inode 11: block 1 [ 30.679549][ C0] EXT4-fs (loop1): last error at time 30: ext4_orphan_get:1408 [ 30.682684][ T5377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.761442][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.862938][ T5392] bridge0: port 3(syz_tun) entered blocking state [ 30.862980][ T5392] bridge0: port 3(syz_tun) entered disabled state [ 30.863082][ T5392] syz_tun: entered allmulticast mode [ 30.863685][ T5392] syz_tun: entered promiscuous mode [ 30.863904][ T5392] bridge0: port 3(syz_tun) entered blocking state [ 30.863933][ T5392] bridge0: port 3(syz_tun) entered forwarding state [ 31.105033][ T1180] tipc: Node number set to 2886997162 [ 31.258089][ T4720] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 31.312362][ T4720] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 31.484718][ T5423] hsr0: entered allmulticast mode [ 31.484741][ T5423] hsr_slave_0: entered allmulticast mode [ 31.484758][ T5423] hsr_slave_1: entered allmulticast mode [ 31.487717][ T5423] hsr0: left allmulticast mode [ 31.487730][ T5423] hsr_slave_0: left allmulticast mode [ 31.487744][ T5423] hsr_slave_1: left allmulticast mode [ 31.683460][ T5395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 31.683682][ T5395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 31.683784][ T5395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 31.685407][ T5395] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 31.754850][ T5442] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 31.824842][ T5450] FAULT_INJECTION: forcing a failure. [ 31.824842][ T5450] name failslab, interval 1, probability 0, space 0, times 0 [ 31.824860][ T5450] CPU: 1 UID: 0 PID: 5450 Comm: syz.2.238 Tainted: G L syzkaller #0 PREEMPT [ 31.824873][ T5450] Tainted: [L]=SOFTLOCKUP [ 31.824876][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.824889][ T5450] Call trace: [ 31.824892][ T5450] show_stack+0x2c/0x3c (C) [ 31.824912][ T5450] __dump_stack+0x30/0x40 [ 31.824924][ T5450] dump_stack_lvl+0xd8/0x12c [ 31.824936][ T5450] dump_stack+0x1c/0x28 [ 31.824947][ T5450] should_fail_ex+0x41c/0x590 [ 31.824961][ T5450] should_failslab+0xc4/0x120 [ 31.824983][ T5450] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 31.824992][ T5450] aio_alloc_inode+0x2c/0x78 [ 31.825002][ T5450] alloc_inode+0x68/0x198 [ 31.825014][ T5450] alloc_anon_inode+0x28/0x31c [ 31.825027][ T5450] aio_setup_ring+0xe0/0xad4 [ 31.825036][ T5450] ioctx_alloc+0x2ec/0x780 [ 31.825045][ T5450] __arm64_sys_io_setup+0x14c/0x2f4 [ 31.825054][ T5450] invoke_syscall+0x98/0x244 [ 31.825067][ T5450] el0_svc_common+0xec/0x23c [ 31.825079][ T5450] do_el0_svc+0x4c/0x5c [ 31.825090][ T5450] el0_svc+0x64/0x260 [ 31.825102][ T5450] el0t_64_sync_handler+0x44/0x104 [ 31.825113][ T5450] el0t_64_sync+0x198/0x19c [ 32.049396][ T5479] loop2: detected capacity change from 0 to 512 [ 32.053259][ T5479] EXT4-fs error (device loop2): __ext4_iget:5592: inode #11: block 1: comm syz.2.251: invalid block [ 32.053276][ T5479] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.053431][ T5479] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.251: couldn't read orphan inode 11 (err -117) [ 32.053444][ T5479] loop2: lost filesystem error report for type 5 error -117 [ 32.064122][ T5479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.104425][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.135566][ T5489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.274683][ T5507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.385192][ T5509] loop1: detected capacity change from 0 to 512 [ 32.387775][ T5509] EXT4-fs error (device loop1): __ext4_iget:5592: inode #11: block 1: comm syz.1.266: invalid block [ 32.387793][ T5509] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.387980][ T5509] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.266: couldn't read orphan inode 11 (err -117) [ 32.388013][ T5509] loop1: lost filesystem error report for type 5 error -117 [ 32.389169][ T5509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.409410][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.444690][ T5513] loop1: detected capacity change from 0 to 2048 [ 32.455549][ T5513] Alternate GPT is invalid, using primary GPT. [ 32.455584][ T5513] loop1: p1 p2 p3 [ 32.458816][ T5513] overlayfs: failed lookup in lower (newroot/67, name='file0', err=-40): overlapping layers [ 32.458999][ T5513] overlayfs: refusing to follow metacopy origin for (/file1) [ 32.517347][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 32.517829][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.518476][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.741134][ T5467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 32.741343][ T5467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 32.741950][ T5467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 32.744750][ T5467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 32.824294][ T5547] hsr0: entered allmulticast mode [ 32.824307][ T5547] hsr_slave_0: entered allmulticast mode [ 32.824322][ T5547] hsr_slave_1: entered allmulticast mode [ 32.824564][ T5547] hsr0: left allmulticast mode [ 32.824573][ T5547] hsr_slave_0: left allmulticast mode [ 32.824585][ T5547] hsr_slave_1: left allmulticast mode [ 32.979578][ T1180] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.075207][ T5585] hsr0: entered allmulticast mode [ 33.075218][ T5585] hsr_slave_0: entered allmulticast mode [ 33.075229][ T5585] hsr_slave_1: entered allmulticast mode [ 33.075449][ T5585] hsr0: left allmulticast mode [ 33.075456][ T5585] hsr_slave_0: left allmulticast mode [ 33.075465][ T5585] hsr_slave_1: left allmulticast mode [ 33.109668][ T1180] usb 1-1: device descriptor read/64, error -71 [ 33.115514][ T5591] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.299'. [ 33.140325][ T5593] FAULT_INJECTION: forcing a failure. [ 33.140325][ T5593] name failslab, interval 1, probability 0, space 0, times 0 [ 33.140345][ T5593] CPU: 1 UID: 0 PID: 5593 Comm: syz.2.301 Tainted: G L syzkaller #0 PREEMPT [ 33.140358][ T5593] Tainted: [L]=SOFTLOCKUP [ 33.140363][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.140376][ T5593] Call trace: [ 33.140379][ T5593] show_stack+0x2c/0x3c (C) [ 33.140400][ T5593] __dump_stack+0x30/0x40 [ 33.140413][ T5593] dump_stack_lvl+0xd8/0x12c [ 33.140425][ T5593] dump_stack+0x1c/0x28 [ 33.140436][ T5593] should_fail_ex+0x41c/0x590 [ 33.140450][ T5593] should_failslab+0xc4/0x120 [ 33.140463][ T5593] __kmalloc_cache_noprof+0x94/0x5fc [ 33.140473][ T5593] nfc_genl_rcv_nl_event+0xa4/0x2bc [ 33.140483][ T5593] notifier_call_chain+0x1a4/0x624 [ 33.140495][ T5593] blocking_notifier_call_chain+0x70/0xa0 [ 33.140507][ T5593] netlink_release+0xf74/0x18bc [ 33.140519][ T5593] __sock_release+0xa0/0x1d4 [ 33.140529][ T5593] sock_close+0x24/0x38 [ 33.140540][ T5593] __fput+0x338/0x74c [ 33.140549][ T5593] fput_close_sync+0x10c/0x278 [ 33.140558][ T5593] __arm64_sys_close+0x80/0x110 [ 33.140570][ T5593] invoke_syscall+0x98/0x244 [ 33.140583][ T5593] el0_svc_common+0xec/0x23c [ 33.140595][ T5593] do_el0_svc+0x4c/0x5c [ 33.140607][ T5593] el0_svc+0x64/0x260 [ 33.140618][ T5593] el0t_64_sync_handler+0x44/0x104 [ 33.140629][ T5593] el0t_64_sync+0x198/0x19c [ 33.185625][ T5598] loop4: detected capacity change from 0 to 512 [ 33.192270][ T5599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 33.193763][ T5598] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 1: comm syz.4.304: invalid block [ 33.193785][ T5598] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.194044][ T5598] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.304: couldn't read orphan inode 11 (err -117) [ 33.194067][ T5598] loop4: lost filesystem error report for type 5 error -117 [ 33.194991][ T5598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.225294][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.349587][ T1180] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.477052][ T5629] loop4: detected capacity change from 0 to 512 [ 33.479994][ T1180] usb 1-1: device descriptor read/64, error -71 [ 33.484124][ T5629] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 1: comm syz.4.317: invalid block [ 33.484147][ T5629] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.484844][ T5629] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.317: couldn't read orphan inode 11 (err -117) [ 33.484864][ T5629] loop4: lost filesystem error report for type 5 error -117 [ 33.485526][ T5629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.507655][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.590585][ T1180] usb usb1-port1: attempt power cycle [ 33.632901][ T5643] FAULT_INJECTION: forcing a failure. [ 33.632901][ T5643] name failslab, interval 1, probability 0, space 0, times 0 [ 33.632918][ T5643] CPU: 1 UID: 0 PID: 5643 Comm: syz.4.322 Tainted: G L syzkaller #0 PREEMPT [ 33.632931][ T5643] Tainted: [L]=SOFTLOCKUP [ 33.632935][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.632948][ T5643] Call trace: [ 33.632951][ T5643] show_stack+0x2c/0x3c (C) [ 33.632978][ T5643] __dump_stack+0x30/0x40 [ 33.632991][ T5643] dump_stack_lvl+0xd8/0x12c [ 33.633003][ T5643] dump_stack+0x1c/0x28 [ 33.633015][ T5643] should_fail_ex+0x41c/0x590 [ 33.633030][ T5643] should_failslab+0xc4/0x120 [ 33.633044][ T5643] kmem_cache_alloc_node_noprof+0x98/0x604 [ 33.633054][ T5643] __alloc_skb+0x1f0/0x610 [ 33.633066][ T5643] tipc_buf_acquire+0x34/0xe8 [ 33.633077][ T5643] named_prepare_buf+0x40/0x154 [ 33.633087][ T5643] tipc_named_withdraw+0x178/0x51c [ 33.633097][ T5643] tipc_nametbl_withdraw+0x104/0x28c [ 33.633109][ T5643] tipc_sk_withdraw+0x244/0x524 [ 33.633118][ T5643] tipc_release+0x15c/0x1200 [ 33.633127][ T5643] __sock_release+0xa0/0x1d4 [ 33.633137][ T5643] sock_close+0x24/0x38 [ 33.633148][ T5643] __fput+0x338/0x74c [ 33.633157][ T5643] fput_close_sync+0x10c/0x278 [ 33.633167][ T5643] __arm64_sys_close+0x80/0x110 [ 33.633179][ T5643] invoke_syscall+0x98/0x244 [ 33.633192][ T5643] el0_svc_common+0xec/0x23c [ 33.633204][ T5643] do_el0_svc+0x4c/0x5c [ 33.633216][ T5643] el0_svc+0x64/0x260 [ 33.633227][ T5643] el0t_64_sync_handler+0x44/0x104 [ 33.633238][ T5643] el0t_64_sync+0x198/0x19c [ 33.633249][ T5643] tipc: Withdrawal distribution failure [ 33.739325][ T5655] loop3: detected capacity change from 0 to 512 [ 33.746591][ T5655] EXT4-fs error (device loop3): __ext4_iget:5592: inode #11: block 1: comm syz.3.328: invalid block [ 33.746610][ T5655] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.746783][ T5655] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.328: couldn't read orphan inode 11 (err -117) [ 33.746798][ T5655] loop3: lost filesystem error report for type 5 error -117 [ 33.747379][ T5655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.767428][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.831918][ T5668] hsr0: entered allmulticast mode [ 33.831931][ T5668] hsr_slave_0: entered allmulticast mode [ 33.831944][ T5668] hsr_slave_1: entered allmulticast mode [ 33.832352][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 33.832428][ T5668] hsr_slave_0: left promiscuous mode [ 33.832837][ T5668] hsr_slave_1: left promiscuous mode [ 33.839378][ T5668] hsr0 (unregistering): left allmulticast mode [ 33.929694][ T1180] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.934312][ T5678] loop3: detected capacity change from 0 to 128 [ 33.934687][ T5678] EXT4-fs: Ignoring removed bh option [ 33.942792][ T5678] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.956048][ T1180] usb 1-1: device descriptor read/8, error -71 [ 34.009673][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 34.018826][ T5685] netlink: 128 bytes leftover after parsing attributes in process `syz.4.340'. [ 34.124491][ T5695] loop2: detected capacity change from 0 to 512 [ 34.134721][ T5695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.163117][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.189576][ T1180] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.210115][ T1180] usb 1-1: device descriptor read/8, error -71 [ 34.215811][ T4712] lg-g15 0003:046D:0A07.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 34.219743][ T4712] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0003/input/input5 [ 34.256053][ T5703] fido_id[5703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.319852][ T1180] usb usb1-port1: unable to enumerate USB device [ 34.333667][ T5711] bond1: entered promiscuous mode [ 34.354282][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.356145][ T5711] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.357907][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.379420][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.382807][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.391906][ T5711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.391918][ T5711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.398945][ T5711] veth1_vlan: left promiscuous mode [ 34.399389][ T5711] veth0_vlan: left promiscuous mode [ 34.402491][ T5711] veth0_vlan: entered promiscuous mode [ 34.403288][ T5711] veth1_vlan: entered promiscuous mode [ 34.405193][ T5711] veth1_macvtap: left promiscuous mode [ 34.405638][ T5711] veth0_macvtap: left promiscuous mode [ 34.406016][ T5711] veth0_macvtap: entered promiscuous mode [ 34.406401][ T5711] veth1_macvtap: entered promiscuous mode [ 34.408304][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.408783][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.409367][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.423133][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.425440][ T5711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.438526][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.438548][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.439238][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.439256][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.449811][ T1180] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.462081][ T1193] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.462103][ T1193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.462121][ T1193] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.462131][ T1193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.462145][ T1193] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.462154][ T1193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.462168][ T1193] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.462177][ T1193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.476420][ T5722] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 34.502105][ T5724] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.552392][ T5728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.552651][ T5728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.562251][ T5730] loop2: detected capacity change from 0 to 2048 [ 34.580360][ T1180] usb 1-1: device descriptor read/64, error -71 [ 34.586055][ T4720] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 34.615448][ T5738] random: crng reseeded on system resumption [ 34.657728][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 34.657812][ T5744] hsr_slave_0: left promiscuous mode [ 34.658222][ T5744] hsr_slave_1: left promiscuous mode [ 34.809801][ T4720] Bluetooth: hci4: command 0x0c1a tx timeout [ 34.809816][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout [ 34.809848][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 34.819564][ T1180] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 34.949581][ T1180] usb 1-1: device descriptor read/64, error -71 [ 35.062972][ T1180] usb usb1-port1: attempt power cycle [ 35.091295][ T5759] net_ratelimit: 812 callbacks suppressed [ 35.214705][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 35.302447][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.302745][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.399563][ T1180] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 35.419975][ T1180] usb 1-1: device descriptor read/8, error -71 [ 35.659601][ T1180] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 35.822390][ T5787] loop2: detected capacity change from 0 to 512 [ 35.823762][ T5787] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 35.831201][ T5787] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.831326][ T5787] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.384: bad orphan inode 15 [ 35.831339][ T5787] loop2: lost filesystem error report for type 5 error -117 [ 35.832041][ T5787] ext4_test_bit(bit=14, block=18) = 1 [ 35.832052][ T5787] is_bad_inode(inode)=0 [ 35.832059][ T5787] NEXT_ORPHAN(inode)=1023 [ 35.832064][ T5787] max_ino=32 [ 35.832069][ T5787] i_nlink=0 [ 35.832677][ T5787] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #15: comm syz.2.384: corrupted xattr block 19: e_value size too large [ 35.832695][ T5787] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.835894][ T5787] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 35.836589][ T5787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.869990][ T1180] usb 1-1: device not accepting address 10, error -71 [ 35.870240][ T1180] usb usb1-port1: unable to enumerate USB device [ 35.908366][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.944011][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.089823][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 36.206161][ T5818] loop3: detected capacity change from 0 to 1024 [ 36.220112][ T5819] loop4: detected capacity change from 0 to 2048 [ 36.271298][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.272864][ T5819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.276051][ T5819] overlayfs: failed to resolve './bus': -2 [ 36.288836][ T5819] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.398: invalid fast symlink length 39 [ 36.306765][ T5829] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.398: bg 0: block 288: padding at end of block bitmap is not set [ 36.502915][ T5832] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.685223][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.742172][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 36.889867][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 36.889910][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 36.890073][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout [ 37.181884][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.554228][ T5841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 37.554432][ T5841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 37.554554][ T5841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 37.554666][ T5841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 37.570322][ T5868] loop1: detected capacity change from 0 to 2048 [ 37.603938][ T5868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.612672][ T5868] overlayfs: failed to resolve './bus': -2 [ 37.668472][ T5868] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.414: invalid fast symlink length 39 [ 37.680792][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 37.681334][ T5881] loop0: detected capacity change from 0 to 4096 [ 37.698794][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.700862][ T5883] zram: Cannot change disksize for initialized device [ 37.726889][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.699928][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.810872][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 38.845448][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 38.871676][ T5922] loop1: detected capacity change from 0 to 2048 [ 38.884881][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.886258][ T5922] overlayfs: failed to resolve './bus': -2 [ 38.886636][ T5922] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.433: invalid fast symlink length 39 [ 38.905800][ T4723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.955480][ T5932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.153190][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 39.178524][ T5953] loop4: detected capacity change from 0 to 2048 [ 39.199181][ T5953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.479930][ T5953] overlayfs: failed to resolve './bus': -2 [ 39.501954][ T5953] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.446: invalid fast symlink length 39 [ 39.558107][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.597389][ T5909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 39.597542][ T5909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 39.597665][ T5909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 39.597762][ T5909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 39.658224][ T5979] loop0: detected capacity change from 0 to 256 [ 39.668032][ T5979] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.684594][ T5979] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 39.684607][ T5979] FAT-fs (loop0): Filesystem has been set read-only [ 39.725194][ T4716] ffs_data_put(): freeing [ 39.726377][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 39.822740][ T6004] zram: Cannot change disksize for initialized device [ 39.831379][ T6003] usb usb8: usbfs: process 6003 (syz.2.462) did not claim interface 0 before use [ 39.960967][ T6007] ------------[ cut here ]------------ [ 39.960980][ T6007] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3a4/0x44c, CPU#1: syz.3.463/6007 [ 39.964036][ T6007] Modules linked in: [ 39.964767][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.3.463 Tainted: G L syzkaller #0 PREEMPT [ 39.966575][ T6007] Tainted: [L]=SOFTLOCKUP [ 39.967318][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.969150][ T6007] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.970622][ T6007] pc : ieee80211_tx_skb_tid+0x3a4/0x44c [ 39.971672][ T6007] lr : ieee80211_tx_skb_tid+0x3a4/0x44c [ 39.972723][ T6007] sp : ffff800098816990 [ 39.973494][ T6007] x29: ffff800098816990 x28: 0000000000000006 x27: ffff0000d1b5746c [ 39.974881][ T6007] x26: 0000000000000000 x25: dfff800000000000 x24: 0000000000000001 [ 39.976386][ T6007] x23: 0000000000000000 x22: ffff0000f4994ec0 x21: 0000000000000007 [ 39.978068][ T6007] x20: 00000000ffffffff x19: ffff0000c83528c0 x18: 00000000ffffffff [ 39.979661][ T6007] x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800084c59180 [ 39.981274][ T6007] x14: 00000000006f74f5 x13: 0000000000000009 x12: 0000000000000009 [ 39.982869][ T6007] x11: 0000000071e1cbb9 x10: 0000000000080000 x9 : 0000000000016937 [ 39.984575][ T6007] x8 : ffff80009d772000 x7 : ffff8000863021d0 x6 : 0000000000000000 [ 39.986153][ T6007] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800086302388 [ 39.987702][ T6007] x2 : 0000000000000001 x1 : ffff0000dbda8000 x0 : 0000000000000001 [ 39.989300][ T6007] Call trace: [ 39.989922][ T6007] ieee80211_tx_skb_tid+0x3a4/0x44c (P) [ 39.991012][ T6007] mesh_plink_frame_tx+0x5ec/0xa70 [ 39.992011][ T6007] mesh_plink_deactivate+0x128/0x284 [ 39.992988][ T6007] mesh_sta_cleanup+0x44/0x80 [ 39.993853][ T6007] cleanup_single_sta+0x354/0x4d4 [ 39.994787][ T6007] __sta_info_destroy_part2+0x304/0x3d8 [ 39.995851][ T6007] __sta_info_flush+0x4c0/0x5f0 [ 39.996756][ T6007] ieee80211_do_stop+0x350/0x1bf0 [ 39.997668][ T6007] ieee80211_stop+0x1ac/0x1fc [ 39.998527][ T6007] __dev_close_many+0x2f4/0x648 [ 39.999443][ T6007] netif_close_many+0x1d8/0x51c [ 40.000352][ T6007] netif_close+0x150/0x208 [ 40.001149][ T6007] dev_close+0xf8/0x1dc [ 40.001899][ T6007] nl80211_del_interface+0xcc/0x130 [ 40.002811][ T6007] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 40.003781][ T6007] genl_rcv_msg+0x43c/0x620 [ 40.004566][ T6007] netlink_rcv_skb+0x238/0x414 [ 40.005509][ T6007] genl_rcv+0x38/0x50 [ 40.006306][ T6007] netlink_unicast+0x600/0x7f8 [ 40.007236][ T6007] netlink_sendmsg+0x648/0x948 [ 40.008185][ T6007] __sock_sendmsg+0xc8/0x17c [ 40.009055][ T6007] ____sys_sendmsg+0x3d0/0x6c8 [ 40.009949][ T6007] ___sys_sendmsg+0x198/0x224 [ 40.010848][ T6007] __sys_sendmsg+0x158/0x204 [ 40.011731][ T6007] __arm64_sys_sendmsg+0x88/0x9c [ 40.012703][ T6007] invoke_syscall+0x98/0x244 [ 40.013596][ T6007] el0_svc_common+0xec/0x23c [ 40.014489][ T6007] do_el0_svc+0x4c/0x5c [ 40.015295][ T6007] el0_svc+0x64/0x260 [ 40.016063][ T6007] el0t_64_sync_handler+0x44/0x104 [ 40.017038][ T6007] el0t_64_sync+0x198/0x19c [ 40.017891][ T6007] irq event stamp: 7675 [ 40.018665][ T6007] hardirqs last enabled at (7674): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 40.020450][ T6007] hardirqs last disabled at (7675): [] el1_brk64+0x20/0x54 [ 40.022039][ T6007] softirqs last enabled at (7666): [] ieee80211_txq_purge+0x264/0x340 [ 40.023859][ T6007] softirqs last disabled at (7668): [] mesh_plink_deactivate+0x70/0x284 [ 40.025628][ T6007] ---[ end trace 0000000000000000 ]--- [ 40.037638][ T6007] ------------[ cut here ]------------ [ 40.037647][ T6007] WARNING: net/mac80211/iface.c:538 at ieee80211_do_stop+0x17bc/0x1bf0, CPU#1: syz.3.463/6007 [ 40.040499][ T6007] Modules linked in: [ 40.041210][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.3.463 Tainted: G W L syzkaller #0 PREEMPT [ 40.043121][ T6007] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 40.044226][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.046268][ T6007] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.047866][ T6007] pc : ieee80211_do_stop+0x17bc/0x1bf0 [ 40.048954][ T6007] lr : ieee80211_do_stop+0x17bc/0x1bf0 [ 40.050063][ T6007] sp : ffff800098816d40 [ 40.050905][ T6007] x29: ffff800098816f30 x28: ffff800098816e00 x27: ffff0000f4980f60 [ 40.052464][ T6007] x26: dfff800000000000 x25: 1fffe0001e932d8e x24: ffff0000f4994ec0 [ 40.054031][ T6007] x23: ffff800098816e20 x22: ffff0000f4996c70 x21: 0000000000000001 [ 40.055586][ T6007] x20: dfff800000000000 x19: ffff0000f4995930 x18: 1fffe00035bb1028 [ 40.057041][ T6007] x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800084c59180 [ 40.058560][ T6007] x14: 00000000006f77cd x13: 0000000000000009 x12: 0000000000000009 [ 40.060188][ T6007] x11: 00000000f28af2f4 x10: 0000000000080000 x9 : 000000000004226f [ 40.061675][ T6007] x8 : ffff80009d772000 x7 : ffff8000862191c4 x6 : 0000000000000000 [ 40.063357][ T6007] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008627324c [ 40.065066][ T6007] x2 : 0000000000000001 x1 : ffff0000dbda8000 x0 : 0000000000000001 [ 40.066693][ T6007] Call trace: [ 40.067329][ T6007] ieee80211_do_stop+0x17bc/0x1bf0 (P) [ 40.068368][ T6007] ieee80211_stop+0x1ac/0x1fc [ 40.069273][ T6007] __dev_close_many+0x2f4/0x648 [ 40.070217][ T6007] netif_close_many+0x1d8/0x51c [ 40.071179][ T6007] netif_close+0x150/0x208 [ 40.072051][ T6007] dev_close+0xf8/0x1dc [ 40.072808][ T6007] nl80211_del_interface+0xcc/0x130 [ 40.073784][ T6007] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 40.074782][ T6007] genl_rcv_msg+0x43c/0x620 [ 40.075606][ T6007] netlink_rcv_skb+0x238/0x414 [ 40.076475][ T6007] genl_rcv+0x38/0x50 [ 40.077190][ T6007] netlink_unicast+0x600/0x7f8 [ 40.078044][ T6007] netlink_sendmsg+0x648/0x948 [ 40.078918][ T6007] __sock_sendmsg+0xc8/0x17c [ 40.079756][ T6007] ____sys_sendmsg+0x3d0/0x6c8 [ 40.080590][ T6007] ___sys_sendmsg+0x198/0x224 [ 40.081403][ T6007] __sys_sendmsg+0x158/0x204 [ 40.082247][ T6007] __arm64_sys_sendmsg+0x88/0x9c [ 40.083124][ T6007] invoke_syscall+0x98/0x244 [ 40.083932][ T6007] el0_svc_common+0xec/0x23c [ 40.084753][ T6007] do_el0_svc+0x4c/0x5c [ 40.085527][ T6007] el0_svc+0x64/0x260 [ 40.086225][ T6007] el0t_64_sync_handler+0x44/0x104 [ 40.087128][ T6007] el0t_64_sync+0x198/0x19c [ 40.087888][ T6007] irq event stamp: 8214 [ 40.088580][ T6007] hardirqs last enabled at (8213): [] kasan_quarantine_put+0xb4/0x1c4 [ 40.090332][ T6007] hardirqs last disabled at (8214): [] el1_brk64+0x20/0x54 [ 40.091835][ T6007] softirqs last enabled at (8168): [] mesh_path_flush_by_nexthop+0x108/0x124 [ 40.093682][ T6007] softirqs last disabled at (8166): [] mesh_path_flush_by_nexthop+0x54/0x124 [ 40.095476][ T6007] ---[ end trace 0000000000000000 ]--- [ 40.409614][ C1] net_ratelimit: 344 callbacks suppressed [ 40.889536][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 41.609668][ T4720] Bluetooth: hci3: command 0x0c1a tx timeout [ 41.609704][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 41.609752][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 43.689570][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 45.769521][ C1] net_ratelimit: 144 callbacks suppressed [ 45.769554][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 47.850032][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 49.929531][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout