last executing test programs: 4.663143677s ago: executing program 2 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000002c00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000094) 4.62412385s ago: executing program 2 (id=162): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e22, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94, 0x1}, 0x9c) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}]}, &(0x7f0000000100)=0x10) 4.590487042s ago: executing program 2 (id=163): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x4a) 4.570086856s ago: executing program 2 (id=164): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x98b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x80000002, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x884, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r7}, 0x14) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x4a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) 3.642616554s ago: executing program 3 (id=167): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/UDC\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) 3.394225325s ago: executing program 1 (id=170): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3.334776626s ago: executing program 1 (id=171): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0) 2.357659626s ago: executing program 1 (id=172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}], 0x1, 0x40) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{&(0x7f0000000100)={0xa, 0xff, 0x6, @loopback, 0x3}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000000b80)='IS', 0x2}], 0x1}}], 0x1, 0x400c094) 2.355761305s ago: executing program 2 (id=173): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.175531598s ago: executing program 1 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xf87, &(0x7f0000002140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2580a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast=0xdf}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 1.821905823s ago: executing program 3 (id=177): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nodelalloc}]}, 0x1, 0x5be, &(0x7f0000000480)="$eJzs3U1oG9kdAPD/jKzYSZw6hRTakkNoCymEyB9J2rQn51oaCORQ6KU1smKMZStYchsbQ517KM2htCWX9NYeemzpoYeylz3udS/7cV4IG7MLcQ67WvTlOI7klRNL2li/H4z13sxI///TzHueGWZQAEPrQu1PGvG9iLiVREzsWTYSzYUXGuvtbG/mn29v5pOoVm9/mkQSEc+2N/Ot9ZPm6+mI2IqI70bEO9mIS+nuR55oFcrrG0tzxWJhtVmfrCzfnSyvb1xeXJ5bKCwUVq789GfXrl+9Nj0zvTfd59W9tezh2vrgw4d/fPDeLx4//Oe/zm/l/zyXxGyMN5ftbcdRanwn2ZjdN/9qL4INUDLoBHgtmWY/r3Wl78REZJq9vp3q3sFhtC/pAT1UHY2o7tpTBIZA8gadvjWIAG+j1nFA7fy3NfXz+OPJjcYJSC3uzvZm/g/Rij/SuDYRY/Vzk1OfJS+dmdTON8/2M1GOpa37ETE1MvLq/p8097/XN3UUCdJT/7/R2FCvbv90d/yJNuPPeOva6RtqjX87zfFvp038TIfx71aXMb749cd/6xj//mh8v238ZLEVP2kTP42I33YZ/9Gv/nu907Lq3yMuRtv4u+skB18fnryzWCxMNf62jfG/i+d/3rn9Eac6xG9csx2rJ7K3/SeaOaVdtv8/7/77B1sHxP/xDw/e/u2+/5MR8acu43/72T9+2WnZk/vJ09pRQLv2HxQ/iWw87jL+T2YvfNAsumoIAAAAAAAAAABHKK3fy5akud1ymuZyjWd4z8WptFgqVy7dKa2tzDfueTsb2bR1p9VEo57U6tPN+3Fb9Zl99SuZZsDMyXo9ly8V5wfcdgAAAAAAAAAAAAAAAAAAAPimOL3v+f/PM/Xn/2cjZs4MOjegDzr/5Ddw3On/MLxe7v/JwPIA+s//fxhaVf0fhpf+D8NL/4fhpf/D8Grb/0/2Pw+g/17p/2ODyQPoP8f/AAAAAAAAAAAAAAAAAAAAAAAAAADQE7du3qxN1efbm/lafX5kfW2p9LvL84XyUm55LZ/Ll1bv5hZKpYViIZcvLX/d5yWl0t2pWFm7N1kplCuT5fWN3yyX1lZavylayPa8RQAAAAAAAAAAAAAAAAAAAPD2Ga9PSZqLyDbqaZrLRZyJiLNJJHcWi4WpiPhWRLyfyY7W6tODThoAAAAAAAAAAAAAAAAAAACOmfL6xtJcsVhY7V1hpBmqu3d9VOlpPiOHWTkito42jdonHvpd2eYXWJ8z1vPtdbwLmS73w6EvDHBQAgAAAAAAAAAAAAAAAACAIfXiod9u3/FlbxMCAAAAAAAAAAAAAAAAAACAoZR+kkREbbo48aPx/UtPJDuZ+mtE/P7R7b/cm6tUVqdr85/uzq/8tTl/ZhD5A91q9dM0Imr9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHihvL6xNFcsFlZfszDaxTqdo5/rZ1MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuWrAAAA//9WdcgU") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'pim6reg0', 0x32, 0x35}, 0xb) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.755461892s ago: executing program 1 (id=179): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x10, 0x1213, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) truncate(&(0x7f0000000000)='./file1\x00', 0x3) 619.287727ms ago: executing program 2 (id=182): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x98b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x80000002, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x884, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r7}, 0x14) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x4a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$alg(0x26, 0x5, 0x0) 539.021316ms ago: executing program 1 (id=187): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) 538.514376ms ago: executing program 3 (id=188): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000011c0)={0x7, 0x7, {0x7, @usage=0x6, 0x0, 0x0, 0x50, 0xfffffffffffffffb, 0xff, 0x3, 0x450, @usage=0xfffffffffffff9e7, 0x9, 0xffffffff, [0x7f, 0xbe4, 0x3, 0x657, 0x7, 0x8001]}, {0x6, @struct={0x3, 0x813}, 0x0, 0xfffffffffffffff9, 0x10000, 0x6, 0x6, 0x0, 0x93, @struct={0x5, 0xde68}, 0x4, 0xd, [0x4, 0x253adfda, 0x40, 0x61f, 0x3, 0x8000000000000000]}, {0xf0, @usage=0x3, 0x0, 0x4, 0x9, 0x23e, 0xfc3, 0x7c7, 0x2, @usage=0x800, 0x1ff, 0xa, [0x6, 0x0, 0xb9, 0x7, 0x4800c3fe, 0x4]}, {0x31a, 0x3, 0x2}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001280)={0x0}) 306.841755ms ago: executing program 4 (id=189): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000600)={0x4000000, 0xdeca, 0x4}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1}) close(r0) 235.195429ms ago: executing program 3 (id=190): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x11, 0x75b, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0}) 227.207177ms ago: executing program 4 (id=192): r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 194.353651ms ago: executing program 4 (id=194): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 158.677087ms ago: executing program 3 (id=195): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x143, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 158.18437ms ago: executing program 0 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000160)="73797a6bf12f", 0x6) 138.837495ms ago: executing program 4 (id=197): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000440)={&(0x7f00000003c0)="9324ee0d4547794f19d0f2010ad35d90184150e47c69a6ddd3a4b94a22f8cc16075981af0e116460279b11067b550e477429a4ee90a95903cedf7ef78f751390389cab3e9a94ef20c41eeff69980d1e74d1b7d1d7d931afe90e9d39f411e042e8288", 0x62}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) 96.773997ms ago: executing program 4 (id=198): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x11}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 96.489803ms ago: executing program 0 (id=199): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "fd"}}}}}, 0x0) 96.315258ms ago: executing program 3 (id=200): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x400442c9, 0x400000000000588a) setgroups(0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) r8 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x50, r0, 0x801, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3203597dfac48362427a40c894"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) 96.021229ms ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dwc3-haps\n', 0xa) 23.028999ms ago: executing program 0 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x494, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x468, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x1, 0x8, 0x200, 0x2, 0x7}, 0x7, 0x947, 0xe03}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x68988cebd1138f5}, @TCA_TBF_PRATE64={0x4, 0x5, 0xdcffc816ef6fdc0e}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x81, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x80000001, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x26, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x400, 0x6, 0x2, 0x3, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x1000, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x1, 0x7fffffff, 0x8, 0x1, 0x800, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x100, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0xd, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x2ed, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xffd, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0x3, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}, @TCA_TBF_PBURST={0x8, 0x7, 0x17ed}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd3f384ed3f3cfb9}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd36f1e66cf73d1a5}]}}]}, 0x494}}, 0x0) 22.92172ms ago: executing program 4 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\n', 0x4) 22.799433ms ago: executing program 0 (id=204): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xa800001e}) 0s ago: executing program 0 (id=205): timer_create(0x3, 0x0, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 28.717336][ T4704] cgroup: Unknown subsys name 'net' [ 28.798555][ T4704] cgroup: Unknown subsys name 'cpuset' [ 28.800618][ T4704] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.957530][ T4704] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.720146][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.720548][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.723266][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.724662][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.726451][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.728637][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.739250][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.740860][ T4733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.741512][ T4733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.741781][ T4733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.742016][ T4733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.742341][ T4733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.742563][ T4733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.743116][ T4733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.743302][ T4733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.743639][ T4733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.744052][ T4733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.744280][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.745254][ T4733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.747125][ T4726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.747690][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.749313][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.751347][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.753672][ T4734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.754222][ T4734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.029699][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.029971][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.030079][ T4727] bridge_slave_0: entered allmulticast mode [ 30.030539][ T4727] bridge_slave_0: entered promiscuous mode [ 30.042193][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.043532][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.044836][ T4727] bridge_slave_1: entered allmulticast mode [ 30.046578][ T4727] bridge_slave_1: entered promiscuous mode [ 30.065725][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.079979][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.097869][ T4727] team0: Port device team_slave_0 added [ 30.118356][ T4727] team0: Port device team_slave_1 added [ 30.146008][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.147287][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.148169][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.155919][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.157290][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.158528][ T4717] bridge_slave_0: entered allmulticast mode [ 30.159986][ T4717] bridge_slave_0: entered promiscuous mode [ 30.163341][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.164619][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.166438][ T4717] bridge_slave_1: entered allmulticast mode [ 30.167931][ T4717] bridge_slave_1: entered promiscuous mode [ 30.169612][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.169638][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.169652][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.193477][ T4727] hsr_slave_0: entered promiscuous mode [ 30.193833][ T4727] hsr_slave_1: entered promiscuous mode [ 30.224005][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.225007][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.235702][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.236005][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.236076][ T4716] bridge_slave_0: entered allmulticast mode [ 30.236543][ T4716] bridge_slave_0: entered promiscuous mode [ 30.245582][ T4717] team0: Port device team_slave_0 added [ 30.247150][ T4717] team0: Port device team_slave_1 added [ 30.247239][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.247299][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.247357][ T4716] bridge_slave_1: entered allmulticast mode [ 30.247895][ T4716] bridge_slave_1: entered promiscuous mode [ 30.264442][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.264488][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.264547][ T4722] bridge_slave_0: entered allmulticast mode [ 30.264992][ T4722] bridge_slave_0: entered promiscuous mode [ 30.275008][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.275036][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.275062][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.278644][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.278706][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.278795][ T4722] bridge_slave_1: entered allmulticast mode [ 30.279557][ T4722] bridge_slave_1: entered promiscuous mode [ 30.297657][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.297686][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.297704][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.301068][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.312388][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.318800][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.319828][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.343677][ T4716] team0: Port device team_slave_0 added [ 30.344513][ T4716] team0: Port device team_slave_1 added [ 30.352927][ T4722] team0: Port device team_slave_0 added [ 30.355391][ T4717] hsr_slave_0: entered promiscuous mode [ 30.355709][ T4717] hsr_slave_1: entered promiscuous mode [ 30.356191][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.356226][ T4717] Cannot create hsr debugfs directory [ 30.356925][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.360901][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.362077][ T4728] bridge_slave_0: entered allmulticast mode [ 30.363504][ T4728] bridge_slave_0: entered promiscuous mode [ 30.365315][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.366044][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.366107][ T4728] bridge_slave_1: entered allmulticast mode [ 30.366533][ T4728] bridge_slave_1: entered promiscuous mode [ 30.369364][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.369373][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.369389][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.369964][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.369971][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.369983][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.380439][ T4716] hsr_slave_0: entered promiscuous mode [ 30.380719][ T4716] hsr_slave_1: entered promiscuous mode [ 30.380906][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.380915][ T4716] Cannot create hsr debugfs directory [ 30.390288][ T4722] team0: Port device team_slave_1 added [ 30.420299][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.420579][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.420589][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.420604][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.421510][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.421520][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.421536][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.434199][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.466331][ T4722] hsr_slave_0: entered promiscuous mode [ 30.467858][ T4722] hsr_slave_1: entered promiscuous mode [ 30.469036][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 30.470066][ T4722] Cannot create hsr debugfs directory [ 30.471780][ T4728] team0: Port device team_slave_0 added [ 30.472592][ T4728] team0: Port device team_slave_1 added [ 30.493861][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.493883][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.493897][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.495264][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.495272][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.495285][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.532126][ T4728] hsr_slave_0: entered promiscuous mode [ 30.533488][ T4728] hsr_slave_1: entered promiscuous mode [ 30.534729][ T4728] debugfs: 'hsr0' already exists in 'hsr' [ 30.535708][ T4728] Cannot create hsr debugfs directory [ 30.538847][ T4727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.541491][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.543200][ T4727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.545443][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.551341][ T4727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.553704][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.566216][ T4727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.568799][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.610473][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.610523][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.610678][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.610711][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.612331][ T4717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.614283][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.614608][ T4717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.616641][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.626534][ T4717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.628674][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.630191][ T4717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.632203][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.649729][ T4716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.652045][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.653568][ T4716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.656280][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.667799][ T4716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.669897][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.671422][ T4716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.673466][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.680136][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.680180][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.680247][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.680275][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.687768][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.693639][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.695110][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.697708][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.698928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.708605][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.715771][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.718910][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.720561][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.722543][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.724046][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.726303][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.731948][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.734139][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.741513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.741559][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.759806][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.759843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.765716][ T4727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.766149][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.778521][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.794977][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.804087][ T4728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.806810][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.811511][ T4728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.816675][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.819669][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.821186][ T4728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.823322][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.823628][ T4728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.826392][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.837993][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.838033][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.840466][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.843122][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.843159][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.849193][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.849237][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.855368][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.861023][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.861063][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.888553][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.891333][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.891385][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.893239][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.893267][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.923110][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.928763][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.930666][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.958955][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.962009][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.979490][ T4727] veth0_vlan: entered promiscuous mode [ 30.982727][ T4727] veth1_vlan: entered promiscuous mode [ 30.989572][ T4728] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.993747][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.993797][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.014534][ T4728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.019327][ T4728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.021717][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.021741][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.029970][ T4727] veth0_macvtap: entered promiscuous mode [ 31.033671][ T4727] veth1_macvtap: entered promiscuous mode [ 31.044947][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.057395][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.061388][ T3475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.061522][ T3475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.061772][ T3475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.061792][ T3475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.170815][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.170855][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.183833][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.186785][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.188142][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.221044][ T4727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.240102][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.261866][ T4722] veth0_vlan: entered promiscuous mode [ 31.265528][ T4722] veth1_vlan: entered promiscuous mode [ 31.269258][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.279607][ T4722] veth0_macvtap: entered promiscuous mode [ 31.283777][ T4722] veth1_macvtap: entered promiscuous mode [ 31.297800][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.300845][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.312539][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.315387][ T3367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.315497][ T3367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.315522][ T3367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.315538][ T3367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.342156][ T4717] veth0_vlan: entered promiscuous mode [ 31.372502][ T4717] veth1_vlan: entered promiscuous mode [ 31.392692][ T4899] ======================================================= [ 31.392692][ T4899] WARNING: The mand mount option has been deprecated and [ 31.392692][ T4899] and is ignored by this kernel. Remove the mand [ 31.392692][ T4899] option from the mount to silence this warning. [ 31.392692][ T4899] ======================================================= [ 31.431751][ T4899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.638261][ T4728] veth0_vlan: entered promiscuous mode [ 31.641148][ T4728] veth1_vlan: entered promiscuous mode [ 31.648356][ T4717] veth0_macvtap: entered promiscuous mode [ 31.651349][ T4717] veth1_macvtap: entered promiscuous mode [ 31.654489][ T4716] veth0_vlan: entered promiscuous mode [ 31.660485][ T3688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.660512][ T3688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.673378][ T4716] veth1_vlan: entered promiscuous mode [ 31.679804][ T3688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.679834][ T3688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.681391][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.682745][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.690308][ T1235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.694539][ T4728] veth0_macvtap: entered promiscuous mode [ 31.695779][ T1235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.696582][ T1235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.696618][ T1235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.712673][ T4716] veth0_macvtap: entered promiscuous mode [ 31.720368][ T4728] veth1_macvtap: entered promiscuous mode [ 31.727357][ T4716] veth1_macvtap: entered promiscuous mode [ 31.730400][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.730436][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.749082][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.758083][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.763650][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.764755][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.766863][ T4720] Bluetooth: hci4: command tx timeout [ 31.766866][ T4734] Bluetooth: hci0: command tx timeout [ 31.769143][ T1235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.769191][ T1235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.769212][ T1235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.769232][ T1235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.776187][ T4734] Bluetooth: hci2: command tx timeout [ 31.778331][ T910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.778357][ T910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.784535][ T3367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.786991][ T3367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.787966][ T3367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.787994][ T3367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.823535][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.824986][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.840519][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.842071][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.846287][ T4734] Bluetooth: hci1: command tx timeout [ 31.846563][ T4734] Bluetooth: hci3: command tx timeout [ 31.884495][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.884528][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.902432][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.902459][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.972332][ T4904] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 32.019215][ T4905] bridge0: port 3(netdevsim1) entered blocking state [ 32.019275][ T4905] bridge0: port 3(netdevsim1) entered disabled state [ 32.019480][ T4905] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 32.020509][ T4905] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 32.020979][ T4905] bridge0: port 3(netdevsim1) entered blocking state [ 32.021034][ T4905] bridge0: port 3(netdevsim1) entered forwarding state [ 33.709109][ T4914] Config c/1 of g1 needs at least one function. [ 33.710095][ T4914] udc dummy_udc.0: failed to start g1: -22 [ 33.710222][ T4914] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 33.714583][ T4914] UDC core: g1: couldn't find an available UDC or it's busy [ 33.933529][ T4914] loop1: detected capacity change from 0 to 512 [ 34.165521][ T4720] Bluetooth: hci2: command tx timeout [ 34.165559][ T4720] Bluetooth: hci0: command tx timeout [ 34.165580][ T4720] Bluetooth: hci4: command tx timeout [ 34.165600][ T4720] Bluetooth: hci1: command tx timeout [ 34.175670][ T4914] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 34.434877][ T4923] openvswitch: netlink: Message has 78 unknown bytes. [ 35.460803][ T4943] input: syz0 as /devices/virtual/input/input3 [ 36.185894][ T4734] Bluetooth: hci1: command tx timeout [ 36.185936][ T4734] Bluetooth: hci4: command tx timeout [ 36.185966][ T4734] Bluetooth: hci0: command tx timeout [ 36.185986][ T4734] Bluetooth: hci2: command tx timeout [ 37.306553][ T4720] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 37.306607][ T4720] Bluetooth: hci3: Injecting HCI hardware error event [ 37.307143][ T4720] Bluetooth: hci3: hardware error 0x00 [ 37.402571][ T4956] loop2: detected capacity change from 0 to 2048 [ 37.568424][ T4956] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 37.589681][ T4956] loop2: detected capacity change from 0 to 256 [ 37.931736][ T30] audit: type=1326 audit(37.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4948 comm="syz.0.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79028 code=0x0 [ 38.390743][ T4734] Bluetooth: hci2: command tx timeout [ 38.390815][ T4734] Bluetooth: hci0: command tx timeout [ 38.390938][ T4734] Bluetooth: hci4: command tx timeout [ 38.391045][ T4734] Bluetooth: hci1: command tx timeout [ 38.606281][ T4971] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff00000000000000000000' [ 40.130173][ T4990] hub 8-0:1.0: USB hub found [ 40.130721][ T4990] hub 8-0:1.0: 8 ports detected [ 40.207364][ T4989] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 40.207413][ T4989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 40.794713][ T30] audit: type=1326 audit(40.380:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4986 comm="syz.0.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79028 code=0x0 [ 40.798816][ T4720] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 41.312759][ T5006] loop2: detected capacity change from 0 to 128 [ 42.242816][ T5006] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.651266][ T5016] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 42.651293][ T5016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.652064][ T5016] vhci_hcd vhci_hcd.0: Device attached [ 42.750253][ T5017] vhci_hcd: connection closed [ 42.751562][ T12] vhci_hcd vhci_hcd.2: stop threads [ 42.751735][ T12] vhci_hcd vhci_hcd.2: release socket [ 42.751762][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 42.879162][ T5011] 9pnet_fd: Insufficient options for proto=fd [ 42.879707][ T5011] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 43.142335][ T5027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.342093][ T5031] loop3: detected capacity change from 0 to 4096 [ 43.504053][ T5031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.504114][ T5031] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.711128][ T5031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.827851][ T5031] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 43.897346][ T5031] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 44.524319][ T4728] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.613416][ T5036] loop2: detected capacity change from 0 to 256 [ 44.629039][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.974163][ T30] audit: type=1326 audit(44.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.978110][ T30] audit: type=1326 audit(44.950:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.979153][ T30] audit: type=1326 audit(44.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.983528][ T30] audit: type=1326 audit(44.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.983557][ T30] audit: type=1326 audit(44.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.983574][ T30] audit: type=1326 audit(44.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.983589][ T30] audit: type=1326 audit(44.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.983603][ T30] audit: type=1326 audit(44.960:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.983716][ T30] audit: type=1326 audit(44.960:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb9b79028 code=0x7ffc0000 [ 44.984364][ T30] audit: type=1326 audit(44.960:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5042 comm="syz.3.31" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb9b78d20 code=0x7ffc0000 [ 46.330780][ T5049] netlink: 'syz.3.31': attribute type 39 has an invalid length. [ 46.399948][ T5048] loop1: detected capacity change from 0 to 512 [ 46.405883][ T5046] input: syz0 as /devices/virtual/input/input4 [ 46.725098][ T5048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.424057][ T5066] overlayfs: failed to clone lowerpath [ 47.428328][ T5066] overlayfs: failed to clone lowerpath [ 47.444249][ T5070] faux_driver vgem: [drm] Unknown color mode 138423205; guessing buffer size. [ 47.504772][ T5027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.513383][ T10] IPVS: starting estimator thread 0... [ 47.651854][ T5027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.665883][ T5072] IPVS: using max 60 ests per chain, 144000 per kthread [ 48.031710][ T5027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.048634][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.170010][ T1235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.170104][ T1235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.170366][ T1235] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.170387][ T1235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.438007][ T4720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 48.438034][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT [ 48.438046][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.438052][ T4720] Workqueue: hci1 hci_rx_work [ 48.438071][ T4720] Call trace: [ 48.438074][ T4720] show_stack+0x2c/0x3c (C) [ 48.438090][ T4720] __dump_stack+0x30/0x40 [ 48.438102][ T4720] dump_stack_lvl+0xd8/0x12c [ 48.438114][ T4720] dump_stack+0x1c/0x28 [ 48.438125][ T4720] sysfs_warn_dup+0x9c/0xb8 [ 48.438137][ T4720] sysfs_create_dir_ns+0x190/0x1f4 [ 48.438148][ T4720] kobject_add_internal+0x290/0x6f0 [ 48.438158][ T4720] kobject_add_varg+0x9c/0xe8 [ 48.438171][ T4720] kobject_add+0x110/0x1c8 [ 48.438183][ T4720] device_add+0x394/0x9e0 [ 48.438196][ T4720] hci_conn_add_sysfs+0xbc/0x1e8 [ 48.438207][ T4720] le_conn_complete_evt+0xc68/0x10f8 [ 48.438216][ T4720] hci_le_conn_complete_evt+0x114/0x3d8 [ 48.438225][ T4720] hci_le_meta_evt+0x2b0/0x46c [ 48.438236][ T4720] hci_event_packet+0x4c0/0x9c8 [ 48.438246][ T4720] hci_rx_work+0x2f4/0xd78 [ 48.438258][ T4720] process_scheduled_works+0x788/0x10b8 [ 48.438269][ T4720] worker_thread+0x798/0xbd0 [ 48.438279][ T4720] kthread+0x304/0x3d4 [ 48.438287][ T4720] ret_from_fork+0x10/0x20 [ 48.439029][ T4720] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 48.439050][ T4720] Bluetooth: hci1: failed to register connection device [ 48.477876][ T5092] loop4: detected capacity change from 0 to 256 [ 48.478359][ T5092] vfat: Unknown parameter 'n¨numtail' [ 48.571385][ T5098] loop3: detected capacity change from 0 to 128 [ 48.579440][ T5098] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.448521][ T4722] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.407510][ T5078] Set syz1 is full, maxelem 65536 reached [ 50.532413][ T5117] loop1: detected capacity change from 0 to 256 [ 50.535012][ T5117] vfat: Deprecated parameter 'posix' [ 50.538183][ T5117] FAT-fs: "posix" option is obsolete, not supported now [ 51.198773][ T5123] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET) [ 51.220385][ T5133] 9pnet_fd: Insufficient options for proto=fd [ 51.222051][ T5133] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 51.280789][ T4819] IPVS: starting estimator thread 0... [ 51.365931][ T5134] IPVS: using max 60 ests per chain, 144000 per kthread [ 51.388803][ T5140] process 'syz.1.49' launched './file2' with NULL argv: empty string added [ 53.198488][ T5184] input: syz0 as /devices/virtual/input/input5 [ 53.245247][ T5184] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.944744][ T5186] warning: `syz.2.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.964743][ T5192] loop4: detected capacity change from 0 to 256 [ 54.699611][ T4720] Bluetooth: hci1: command 0x0406 tx timeout [ 56.164621][ T5195] infiniband syz2: set down [ 56.166395][ T5195] infiniband syz2: added ipvlan0 [ 56.176945][ T5195] RDS/IB: syz2: added [ 56.178242][ T5195] smc: adding ib device syz2 with port count 1 [ 56.179937][ T5195] smc: ib device syz2 port 1 has no pnetid [ 57.713703][ T4730] Bluetooth: hci4: unexpected subevent 0x0e length: 5 < 15 [ 58.233063][ T5184] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.929518][ T5231] loop4: detected capacity change from 0 to 512 [ 59.954391][ T5231] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.76: corrupted in-inode xattr: invalid ea_ino [ 59.954480][ T5231] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.956966][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 59.956977][ C0] EXT4-fs (loop4): initial error at time 59: ext4_iget_extra_inode:5180: inode 15 [ 59.956992][ C0] EXT4-fs (loop4): last error at time 59: ext4_iget_extra_inode:5180: inode 15 [ 59.963214][ T5231] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.76: couldn't read orphan inode 15 (err -117) [ 59.965119][ T5231] loop4: lost filesystem error report for type 5 error -117 [ 59.967470][ T5209] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 60.016421][ T5231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.062524][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.072428][ T5239] loop3: detected capacity change from 0 to 128 [ 60.081248][ T5239] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.088699][ T5184] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.099646][ T5244] netlink: 32 bytes leftover after parsing attributes in process `syz.4.80'. [ 60.212197][ T5253] loop1: detected capacity change from 0 to 256 [ 60.225252][ T5184] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.505335][ T5259] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 60.547247][ T5261] loop4: detected capacity change from 0 to 128 [ 60.558305][ T5261] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.571021][ T5259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.571294][ T5261] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.577414][ T5259] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 60.595222][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.749770][ T4720] Bluetooth: Frame is too long (len 12, expected len 4) [ 60.870267][ T3475] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.872737][ T3475] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.884121][ T3475] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.884171][ T3475] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.945265][ T4722] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.954826][ T5268] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 62.019750][ T5282] loop4: detected capacity change from 0 to 512 [ 62.021881][ T5282] EXT4-fs (loop4): Test dummy encryption mode enabled [ 62.610503][ T5288] loop2: detected capacity change from 0 to 4096 [ 62.661401][ T5293] Injecting memory failure for pfn 0x11e8ed at process virtual address 0x20000000 [ 62.697581][ T5282] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.94: inode has both inline data and extents flags [ 62.697620][ T5282] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.700119][ T5282] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.94: couldn't read orphan inode 15 (err -117) [ 62.700154][ T5282] loop4: lost filesystem error report for type 5 error -117 [ 62.704330][ T5282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.717927][ T5293] Memory failure: 0x11e8ed: Sending SIGBUS to syz.3.95:5293 due to hardware memory corruption [ 62.722145][ T5288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.731914][ T5293] Memory failure: 0x11e8ed: recovery action for dirty LRU page: Recovered [ 62.733677][ T5293] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 62.746973][ T5293] Memory failure: 0x219250: unhandlable page. [ 62.747002][ T5293] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 62.828633][ T4728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.741907][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.741958][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.747294][ T24] cfg80211: failed to load regulatory.db [ 65.773442][ T5322] loop3: detected capacity change from 0 to 1024 [ 65.778236][ T5322] EXT4-fs: Ignoring removed orlov option [ 65.780168][ T5322] EXT4-fs: Ignoring removed orlov option [ 65.869584][ T5322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.803907][ T5322] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 66.858990][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.362539][ T5337] loop3: detected capacity change from 0 to 4096 [ 67.362913][ T5337] EXT4-fs: inline encryption not supported [ 67.364848][ T5337] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.364863][ T5337] EXT4-fs (loop3): Test dummy encryption mode enabled [ 67.367195][ T5337] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 67.367229][ T5337] System zones: 0-5 [ 67.374352][ T5337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.444502][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.450699][ T5329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.450730][ T5329] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 67.462339][ T5310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.499515][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.507688][ T5348] loop1: detected capacity change from 0 to 256 [ 67.511039][ T5310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.533122][ T5353] Zero length message leads to an empty skb [ 67.557176][ T5329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.557203][ T5329] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 67.568025][ T5310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.576366][ T5348] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 67.576395][ T5348] FAT-fs (loop1): Filesystem has been set read-only [ 67.599483][ T5358] loop4: detected capacity change from 0 to 512 [ 67.626132][ T5358] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.626169][ T5358] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 67.626527][ T5358] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 67.630443][ T5358] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.115: attempt to clear invalid blocks 2 len 1 [ 67.630469][ T5358] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.630965][ T5358] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.115: invalid indirect mapped block 1819239214 (level 0) [ 67.630983][ T5358] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.631114][ T5358] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.115: invalid indirect mapped block 1819239214 (level 1) [ 67.631127][ T5358] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.631488][ T5358] EXT4-fs (loop4): 1 truncate cleaned up [ 67.631947][ T5358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.633250][ T5364] loop1: detected capacity change from 0 to 128 [ 67.634078][ T5360] loop3: detected capacity change from 0 to 1024 [ 67.645033][ T5360] EXT4-fs: Ignoring removed orlov option [ 67.657463][ T5310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.663573][ T5358] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 67.672102][ T5364] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.674622][ T5360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.691547][ T5360] EXT4-fs error (device loop3): __ext4_new_inode:1287: comm syz.3.114: failed to insert inode 16: doubly allocated? [ 67.694683][ T4717] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.696446][ T5358] EXT4-fs (loop4): can't enable nombcache during remount [ 67.725071][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.732969][ T5329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.732997][ T5329] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 67.761374][ T5373] loop1: detected capacity change from 0 to 512 [ 67.763644][ T5373] EXT4-fs: inline encryption not supported [ 67.765986][ T3226] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.788880][ T1235] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.789865][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.790203][ T3367] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790275][ T3367] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.797366][ T5373] EXT4-fs: Invalid want_extra_isize 130 [ 67.835713][ T5383] loop1: detected capacity change from 0 to 512 [ 67.837579][ T5383] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.837620][ T5383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.856484][ T5383] EXT4-fs (loop1): 1 truncate cleaned up [ 67.856971][ T5383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.959919][ T5386] loop4: detected capacity change from 0 to 8192 [ 67.968175][ T5386] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.079209][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.244639][ T5329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 68.244822][ T5329] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 68.563723][ T5416] loop3: detected capacity change from 0 to 8192 [ 69.122036][ T5453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.256585][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.143676][ T5524] set_capacity_and_notify: 1 callbacks suppressed [ 71.154167][ T5524] loop2: detected capacity change from 0 to 2048 [ 71.212951][ T5524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.271081][ T4728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.622392][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 73.740911][ T5587] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 73.836903][ T5592] syz_tun: entered allmulticast mode [ 74.160618][ T5596] loop3: detected capacity change from 0 to 1024 [ 74.162404][ T5596] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.194974][ T5598] loop4: detected capacity change from 0 to 256 [ 74.206820][ T5596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002] [ 74.220992][ T5596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.229558][ T5598] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 74.229588][ T5598] FAT-fs (loop4): Filesystem has been set read-only [ 74.262576][ T5605] loop1: detected capacity change from 0 to 8192 [ 74.280868][ T5605] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.309656][ T5596] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.177: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.315714][ T5596] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.177: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.324373][ T5596] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.177: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 74.344535][ T5596] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.177: lblock 0 mapped to illegal pblock 0 (length 1) [ 75.206618][ T5601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 75.277004][ T5596] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.177: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 75.442107][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.741073][ T5632] loop3: detected capacity change from 0 to 2048 [ 75.741491][ T5632] EXT4-fs: Ignoring removed i_version option [ 75.758501][ T866] kernel read not supported for file /video9 (pid: 866 comm: kworker/0:2) [ 75.766656][ T5632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.782102][ T5642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 75.782189][ T5642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 75.804315][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.929042][ T5661] netlink: 'syz.0.202': attribute type 5 has an invalid length. [ 75.942198][ T5663] PM: suspend entry (deep) [ 75.978653][ T3367] Filesystems sync: 0.034 seconds [ 76.227571][ T5663] Freezing user space processes [ 76.274354][ T5663] Freezing user space processes completed (elapsed 0.046 seconds) [ 76.274456][ T5663] OOM killer disabled. [ 76.274461][ T5663] Freezing remaining freezable tasks [ 76.276858][ T5663] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 76.276873][ T5663] printk: Suspending console(s) (use no_console_suspend to debug) [ 76.396314][ T5663] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 76.396377][ T5663] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 76.396423][ T5663] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 76.396469][ T5663] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 76.396514][ T5663] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 76.396559][ T5663] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 76.396604][ T5663] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 76.396648][ T5663] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 76.396692][ T5663] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 76.396736][ T5663] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 76.396779][ T5663] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 76.396821][ T5663] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 76.396865][ T5663] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 76.396908][ T5663] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 76.396951][ T5663] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 76.396994][ T5663] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 76.579666][ T5663] Disabling non-boot CPUs ... [ 76.585617][ T5663] psci: CPU1 killed (polled 0 ms) [ 76.592443][ T5663] ------------[ cut here ]------------ [ 76.592443][ T5663] WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4, CPU#0: syz.4.203/5663 [ 76.592443][ T5663] Modules linked in: [ 76.592443][ T5663] CPU: 0 UID: 0 PID: 5663 Comm: syz.4.203 Tainted: G L syzkaller #0 PREEMPT [ 76.592443][ T5663] Tainted: [L]=SOFTLOCKUP [ 76.592443][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.592443][ T5663] pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 76.592443][ T5663] pc : ct_kernel_exit+0x1b4/0x1f4 [ 76.592443][ T5663] lr : ct_kernel_exit+0x13c/0x1f4 [ 76.592443][ T5663] sp : ffff800097af75f0 [ 76.592443][ T5663] x29: ffff800097af75f0 x28: dfff800000000000 x27: ffff800097af7660 [ 76.592443][ T5663] x26: 00000000000000c0 x25: ffff700012f5eecc x24: ffff800088abf998 [ 76.592443][ T5663] x23: ffff800088b0b6a0 x22: ffff0001ade38998 x21: ffff0001ade38998 [ 76.592443][ T5663] x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff [ 76.592443][ T5663] x17: ffff80008a791000 x16: 0000000000000006 x15: ffff80008a31ada0 [ 76.592443][ T5663] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 76.592443][ T5663] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 76.592443][ T5663] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 76.592443][ T5663] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000868e6858 [ 76.592443][ T5663] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 76.592443][ T5663] Call trace: [ 76.592443][ T5663] ct_kernel_exit+0x1b4/0x1f4 (P) [ 76.592443][ T5663] ct_idle_enter+0x24/0x38 [ 76.592443][ T5663] cpu_suspend+0x264/0x474 [ 76.592443][ T5663] psci_system_suspend_enter+0x4c/0x80 [ 76.592443][ T5663] suspend_devices_and_enter+0x88c/0xd0c [ 76.592443][ T5663] pm_suspend+0x498/0x698 [ 76.592443][ T5663] state_store+0x14c/0x1fc [ 76.592443][ T5663] kobj_attr_store+0x6c/0x90 [ 76.592443][ T5663] sysfs_kf_write+0xe0/0x108 [ 76.592443][ T5663] kernfs_fop_write_iter+0x260/0x3b8 [ 76.592443][ T5663] vfs_write+0x51c/0xa0c [ 76.592443][ T5663] ksys_write+0x12c/0x228 [ 76.592443][ T5663] __arm64_sys_write+0x7c/0x90 [ 76.592443][ T5663] invoke_syscall+0x98/0x244 [ 76.592443][ T5663] el0_svc_common+0xec/0x23c [ 76.592443][ T5663] do_el0_svc+0x4c/0x5c [ 76.592443][ T5663] el0_svc+0x64/0x260 [ 76.592443][ T5663] el0t_64_sync_handler+0x48/0x148 [ 76.592443][ T5663] el0t_64_sync+0x198/0x19c [ 76.592443][ T5663] irq event stamp: 72654 [ 76.592443][ T5663] hardirqs last enabled at (72653): [] _raw_spin_unlock_irq+0x30/0x80 [ 76.592443][ T5663] hardirqs last disabled at (72654): [] arch_suspend_disable_irqs+0x34/0x4c [ 76.592443][ T5663] softirqs last enabled at (70950): [] handle_softirqs+0xc28/0xd98 [ 76.592443][ T5663] softirqs last disabled at (70945): [] __do_softirq+0x14/0x20 [ 76.592443][ T5663] ---[ end trace 0000000000000000 ]--- [ 76.592443][ T5663] ------------[ cut here ]------------ [ 76.592443][ T5663] WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170, CPU#0: syz.4.203/5663 [ 76.592443][ T5663] Modules linked in: [ 76.592443][ T5663] CPU: 0 UID: 0 PID: 5663 Comm: syz.4.203 Tainted: G W L syzkaller #0 PREEMPT [ 76.592443][ T5663] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 76.592443][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.592443][ T5663] pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 76.592443][ T5663] pc : ct_kernel_enter+0x138/0x170 [ 76.592443][ T5663] lr : ct_kernel_enter+0xc8/0x170 [ 76.592443][ T5663] sp : ffff800097af75e0 [ 76.592443][ T5663] x29: ffff800097af75e0 x28: dfff800000000000 x27: ffff800097af7660 [ 76.592443][ T5663] x26: 00000000000000c0 x25: ffff700012f5eecc x24: 0000000100000000 [ 76.592443][ T5663] x23: ffff800088b0b6a0 x22: ffff800088abf998 x21: ffff0001ade38998 [ 76.592443][ T5663] x20: ffff0001ade38998 x19: 0000000000000000 x18: 00000000ffffffff [ 76.592443][ T5663] x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 [ 76.592443][ T5663] x14: ffff0000d4cf8000 x13: 0000000000000001 x12: 0000000000000000 [ 76.592443][ T5663] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 76.592443][ T5663] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 76.592443][ T5663] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000868e6a20 [ 76.592443][ T5663] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 76.592443][ T5663] Call trace: [ 76.592443][ T5663] ct_kernel_enter+0x138/0x170 (P) [ 76.592443][ T5663] ct_idle_exit+0x24/0x48 [ 76.592443][ T5663] cpu_suspend+0x2dc/0x474 [ 76.592443][ T5663] psci_system_suspend_enter+0x4c/0x80 [ 76.592443][ T5663] suspend_devices_and_enter+0x88c/0xd0c [ 76.592443][ T5663] pm_suspend+0x498/0x698 [ 76.592443][ T5663] state_store+0x14c/0x1fc [ 76.592443][ T5663] kobj_attr_store+0x6c/0x90 [ 76.592443][ T5663] sysfs_kf_write+0xe0/0x108 [ 76.592443][ T5663] kernfs_fop_write_iter+0x260/0x3b8 [ 76.592443][ T5663] vfs_write+0x51c/0xa0c [ 76.592443][ T5663] ksys_write+0x12c/0x228 [ 76.592443][ T5663] __arm64_sys_write+0x7c/0x90 [ 76.592443][ T5663] invoke_syscall+0x98/0x244 [ 76.592443][ T5663] el0_svc_common+0xec/0x23c [ 76.592443][ T5663] do_el0_svc+0x4c/0x5c [ 76.592443][ T5663] el0_svc+0x64/0x260 [ 76.592443][ T5663] el0t_64_sync_handler+0x48/0x148 [ 76.592443][ T5663] el0t_64_sync+0x198/0x19c [ 76.592443][ T5663] irq event stamp: 72656 [ 76.592443][ T5663] hardirqs last enabled at (72655): [] psci_system_suspend_enter+0x4c/0x80 [ 76.592443][ T5663] hardirqs last disabled at (72656): [] psci_system_suspend_enter+0x4c/0x80 [ 76.592443][ T5663] softirqs last enabled at (70950): [] handle_softirqs+0xc28/0xd98 [ 76.592443][ T5663] softirqs last disabled at (70945): [] __do_softirq+0x14/0x20 [ 76.592443][ T5663] ---[ end trace 0000000000000000 ]--- [ 76.592519][ T5663] Enabling non-boot CPUs ... [ 76.592982][ T0] Detected PIPT I-cache on CPU1 [ 76.593019][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 76.593194][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 76.596504][ T5663] CPU1 is up [ 76.691778][ T5675] nvme nvme0: 2/0/0 default/read/poll queues [ 76.698714][ T1907] gve 0000:00:00.0 enp0s0: Device link is up. [ 76.925882][ T5663] OOM killer enabled. [ 76.925898][ T5663] Restarting tasks: Starting [ 76.932018][ T5663] Restarting tasks: Done [ 76.932237][ T5663] random: crng reseeded on system resumption [ 76.932512][ T5663] PM: suspend exit