last executing test programs: 3.427335671s ago: executing program 0 (id=1419): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 3.406333972s ago: executing program 0 (id=1420): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.34405612s ago: executing program 0 (id=1421): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(0x0, 0x0) r2 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) syz_usb_disconnect(r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil) 2.092025173s ago: executing program 2 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.767051562s ago: executing program 2 (id=1452): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = epoll_create1(0x0) r1 = syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000040)={r0, r0, 0x2}) 1.711763548s ago: executing program 2 (id=1454): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000005c0)='y', 0x1}], 0x1}}], 0x3, 0x4c8c0) 1.196446946s ago: executing program 3 (id=1475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.147639678s ago: executing program 3 (id=1478): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') write$P9_RGETLOCK(r0, 0x0, 0x0) 1.087872716s ago: executing program 3 (id=1480): syz_emit_ethernet(0x7c, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x46, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x0]}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0) 1.084896529s ago: executing program 3 (id=1482): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000090) 1.056665611s ago: executing program 3 (id=1484): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ff"], 0x0) 999.9696ms ago: executing program 1 (id=1485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) 999.76652ms ago: executing program 1 (id=1486): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 999.714718ms ago: executing program 1 (id=1487): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000100060000071a80010061cc", 0x10) 944.411311ms ago: executing program 1 (id=1488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000, 0x9}, {}, 0x5}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 925.881166ms ago: executing program 1 (id=1489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 867.949021ms ago: executing program 1 (id=1490): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='mem', 0x3) 795.099208ms ago: executing program 2 (id=1491): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl(r0, 0x3b8f, &(0x7f00000000c0)="2800000006000000010000000400000000000000000000000010") 778.726633ms ago: executing program 2 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 708.041988ms ago: executing program 2 (id=1493): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) 367.212492ms ago: executing program 3 (id=1494): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 275.826929ms ago: executing program 4 (id=1497): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f5881143143", 0x15}], 0x1}}], 0x2, 0x44051) 275.715828ms ago: executing program 4 (id=1498): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) 269.975522ms ago: executing program 4 (id=1499): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x8000004}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x2, r1, 0x0, &(0x7f0000000540)="fc", 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) 253.964666ms ago: executing program 4 (id=1500): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 195.929629ms ago: executing program 4 (id=1501): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fanotify_init(0x8, 0x40000) fanotify_mark(r3, 0x1, 0x40100031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x20481) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)="68c490d7"}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0006c09000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) r7 = socket(0x10, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7f, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r11, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000040)={r13}, &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0x3, 0xffff}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x8870) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={r13, 0x4, 0x800}, 0x8) close_range(r7, r9, 0x0) 195.731621ms ago: executing program 4 (id=1502): add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, 0x0, 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x8090) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f00000003c0)=""/71, 0xfffffffffffffe83, 0x122, 0x0, 0x0) 112.196226ms ago: executing program 0 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffff"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) 78.703155ms ago: executing program 0 (id=1504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="c1", 0x1}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="100600"], 0x20}}], 0x2, 0x4000045) 0s ago: executing program 0 (id=1505): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x78) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202000200070503020002000705840200020007050502000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000430)={0x0, 0x0, 0x2, @string={0x2, 0x0}}, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000510), 0x0, 0x0, 0x0, &(0x7f0000000550)={0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x2}, 0x0, 0x0, &(0x7f00000005b0)={0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, &(0x7f00000005f0)={0x0, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x1}}) mknodat(0xffffffffffffff9c, 0x0, 0x81b6, 0xbc00) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x2]}, &(0x7f0000000180), 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 28.667494][ T4701] cgroup: Unknown subsys name 'net' [ 28.817254][ T4701] cgroup: Unknown subsys name 'cpuset' [ 28.819342][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.957136][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.358002][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.358355][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.369468][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.370212][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.370540][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.370699][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.371182][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.371398][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.376951][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.377396][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.377558][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.377910][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.378138][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.378577][ T4723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.378863][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.379194][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.379402][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.382370][ T4731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.382580][ T4731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.386959][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.387014][ T4729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.398919][ T4731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.405978][ T4729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.406040][ T4731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.416105][ T4729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.742384][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.742680][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.742756][ T4720] bridge_slave_0: entered allmulticast mode [ 30.743231][ T4720] bridge_slave_0: entered promiscuous mode [ 30.757049][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.758445][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.760129][ T4720] bridge_slave_1: entered allmulticast mode [ 30.762121][ T4720] bridge_slave_1: entered promiscuous mode [ 30.795034][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.795872][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.795985][ T4713] bridge_slave_0: entered allmulticast mode [ 30.796433][ T4713] bridge_slave_0: entered promiscuous mode [ 30.801629][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.805655][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.813774][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.813860][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.813933][ T4713] bridge_slave_1: entered allmulticast mode [ 30.814379][ T4713] bridge_slave_1: entered promiscuous mode [ 30.837805][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.842178][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.844744][ T4720] team0: Port device team_slave_0 added [ 30.858703][ T4720] team0: Port device team_slave_1 added [ 30.870566][ T4713] team0: Port device team_slave_0 added [ 30.871684][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.871768][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.871845][ T4719] bridge_slave_0: entered allmulticast mode [ 30.872256][ T4719] bridge_slave_0: entered promiscuous mode [ 30.873784][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.873814][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.873876][ T4719] bridge_slave_1: entered allmulticast mode [ 30.874346][ T4719] bridge_slave_1: entered promiscuous mode [ 30.893480][ T4713] team0: Port device team_slave_1 added [ 30.897015][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.898236][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.902619][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.905005][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.905092][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.905214][ T4714] bridge_slave_0: entered allmulticast mode [ 30.905659][ T4714] bridge_slave_0: entered promiscuous mode [ 30.907219][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.907254][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.907315][ T4714] bridge_slave_1: entered allmulticast mode [ 30.907789][ T4714] bridge_slave_1: entered promiscuous mode [ 30.931657][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.936571][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.936592][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.936622][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.947761][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.947788][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.947806][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.948437][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.948445][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.948461][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.956757][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.963650][ T4719] team0: Port device team_slave_0 added [ 30.968585][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.969734][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.971705][ T4720] hsr_slave_0: entered promiscuous mode [ 30.972103][ T4720] hsr_slave_1: entered promiscuous mode [ 30.976623][ T4719] team0: Port device team_slave_1 added [ 30.998955][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.000323][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.005370][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.017112][ T4714] team0: Port device team_slave_0 added [ 31.018074][ T4714] team0: Port device team_slave_1 added [ 31.018352][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.018362][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.018378][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.026231][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.026297][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.026388][ T4724] bridge_slave_0: entered allmulticast mode [ 31.026847][ T4724] bridge_slave_0: entered promiscuous mode [ 31.027937][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.027967][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.028020][ T4724] bridge_slave_1: entered allmulticast mode [ 31.028682][ T4724] bridge_slave_1: entered promiscuous mode [ 31.030871][ T4713] hsr_slave_0: entered promiscuous mode [ 31.031225][ T4713] hsr_slave_1: entered promiscuous mode [ 31.031450][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.031501][ T4713] Cannot create hsr debugfs directory [ 31.059395][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.059426][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.059441][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.069246][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.070324][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.073546][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.073582][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.073596][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.077563][ T4719] hsr_slave_0: entered promiscuous mode [ 31.078051][ T4719] hsr_slave_1: entered promiscuous mode [ 31.078261][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 31.078272][ T4719] Cannot create hsr debugfs directory [ 31.104372][ T4724] team0: Port device team_slave_0 added [ 31.105250][ T4724] team0: Port device team_slave_1 added [ 31.125913][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.127272][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.132400][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.143619][ T4714] hsr_slave_0: entered promiscuous mode [ 31.143961][ T4714] hsr_slave_1: entered promiscuous mode [ 31.144172][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 31.144184][ T4714] Cannot create hsr debugfs directory [ 31.144455][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.144462][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.144478][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.178646][ T4724] hsr_slave_0: entered promiscuous mode [ 31.180453][ T4724] hsr_slave_1: entered promiscuous mode [ 31.181882][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 31.183380][ T4724] Cannot create hsr debugfs directory [ 31.242834][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.246946][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.248747][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.251139][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.252883][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.255437][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.259009][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.261713][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.301388][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.301458][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.301627][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.301662][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.320226][ T4713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.322750][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.324415][ T4713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.326990][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.328793][ T4713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.331487][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.332070][ T4713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.333591][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.359268][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.361528][ T4719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.363837][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.364194][ T4719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.367047][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.368307][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.368351][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.368418][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.368447][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.372473][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.377566][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.379312][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.389260][ T4719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.391771][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.393525][ T4719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.395674][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.427695][ T4724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.430204][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.438668][ T4724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.441037][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.442844][ T4724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.445408][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.454362][ T4724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.457747][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.487303][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.490043][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.495310][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.498163][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.508242][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.510737][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.514665][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.517989][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.523582][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.531264][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.544525][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.558979][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.562334][ T1980] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.562405][ T1980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.569350][ T1980] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.569401][ T1980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.578342][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.578465][ T1980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.579658][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.579679][ T1980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.609605][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.617848][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.632825][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.657349][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.659588][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.680137][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.685014][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.690790][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.690852][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.695134][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.695177][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.705303][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.710430][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.710484][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.716389][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.716443][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.724600][ T4720] veth0_vlan: entered promiscuous mode [ 31.761806][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.763683][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.775566][ T4720] veth1_vlan: entered promiscuous mode [ 31.795092][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.827532][ T4720] veth0_macvtap: entered promiscuous mode [ 31.833963][ T4720] veth1_macvtap: entered promiscuous mode [ 31.857262][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.859421][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.862705][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.873617][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.878773][ T1926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.879045][ T1926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.879105][ T1926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.879254][ T1926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.924585][ T4719] veth0_vlan: entered promiscuous mode [ 31.936612][ T4719] veth1_vlan: entered promiscuous mode [ 31.964866][ T4719] veth0_macvtap: entered promiscuous mode [ 31.969511][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.969551][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.972985][ T4719] veth1_macvtap: entered promiscuous mode [ 31.984201][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.001399][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.018833][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.019120][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.019140][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.019157][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041629][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.041682][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.060220][ T4713] veth0_vlan: entered promiscuous mode [ 32.074688][ T4713] veth1_vlan: entered promiscuous mode [ 32.082360][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.082828][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.082843][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.093495][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.111144][ T4713] veth0_macvtap: entered promiscuous mode [ 32.117552][ T4713] veth1_macvtap: entered promiscuous mode [ 32.118292][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.131102][ T1920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.132746][ T1920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.138917][ T4714] veth0_vlan: entered promiscuous mode [ 32.176454][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.178321][ T4714] veth1_vlan: entered promiscuous mode [ 32.199032][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.199954][ T4717] IPVS: starting estimator thread 0... [ 32.215671][ T1926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.216946][ T1926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.217065][ T1926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.217150][ T1926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.253513][ T4724] veth0_vlan: entered promiscuous mode [ 32.278815][ T4724] veth1_vlan: entered promiscuous mode [ 32.296164][ T4900] IPVS: using max 60 ests per chain, 144000 per kthread [ 32.304501][ T4724] veth0_macvtap: entered promiscuous mode [ 32.308432][ T4714] veth0_macvtap: entered promiscuous mode [ 32.310257][ T1926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.310284][ T1926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.316461][ T4724] veth1_macvtap: entered promiscuous mode [ 32.319598][ T4714] veth1_macvtap: entered promiscuous mode [ 32.326915][ T4903] loop2: detected capacity change from 0 to 4096 [ 32.330097][ T4903] EXT4-fs: inline encryption not supported [ 32.335524][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.449124][ T4721] Bluetooth: hci3: command tx timeout [ 32.450649][ T4721] Bluetooth: hci0: command tx timeout [ 32.540092][ T4721] Bluetooth: hci4: command tx timeout [ 32.541688][ T4721] Bluetooth: hci1: command tx timeout [ 32.542977][ T4721] Bluetooth: hci2: command tx timeout [ 32.578276][ T4903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.578319][ T4903] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.583447][ T4903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 32.583535][ T4903] System zones: 0-5 [ 32.596844][ T4903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.603176][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.603214][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.609188][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.620667][ T1926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629363][ T1926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.631267][ T1926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.631289][ T1926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.640616][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.642446][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.654368][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.658365][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.658422][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.658455][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.660573][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.747830][ T1980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.747862][ T1980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.774179][ T4912] loop2: detected capacity change from 0 to 1024 [ 32.782062][ T4912] ======================================================= [ 32.782062][ T4912] WARNING: The mand mount option has been deprecated and [ 32.782062][ T4912] and is ignored by this kernel. Remove the mand [ 32.782062][ T4912] option from the mount to silence this warning. [ 32.782062][ T4912] ======================================================= [ 32.782146][ T4912] EXT4-fs: inline encryption not supported [ 32.790253][ T1920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.790266][ T1920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.801106][ T1980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.801147][ T1980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.811938][ T4912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.879634][ T4917] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 33.065915][ T1980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.067496][ T1980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.194951][ T4920] loop0: detected capacity change from 0 to 512 [ 33.531961][ T4928] usb usb1: usbfs: process 4928 (syz.0.10) did not claim interface 6 before use [ 33.572396][ T4930] futex_wake_op: syz.1.2 tries to shift op by 144; fix this program [ 33.845243][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.884001][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 33.908829][ T4938] tmpfs: Bad value for 'mpol' [ 34.030118][ T4942] loop4: detected capacity change from 0 to 1024 [ 34.032934][ T4942] EXT4-fs: inline encryption not supported [ 34.037379][ T4939] Zero length message leads to an empty skb [ 34.115055][ T4942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.138508][ T4948] loop3: detected capacity change from 0 to 1024 [ 34.139785][ T4948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.162333][ T4948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.495885][ T4721] Bluetooth: hci3: command tx timeout [ 34.496096][ T4715] Bluetooth: hci0: command tx timeout [ 34.612353][ T4961] Non-string source [ 34.669404][ T4731] Bluetooth: hci4: command tx timeout [ 34.677716][ T4721] Bluetooth: hci1: command tx timeout [ 34.706762][ T4715] Bluetooth: hci2: command tx timeout [ 34.903807][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.937480][ T4962] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 35.001582][ T4965] loop4: detected capacity change from 0 to 2048 [ 35.048264][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.064893][ T4965] Alternate GPT is invalid, using primary GPT. [ 35.064956][ T4965] loop4: p1 p2 p3 [ 35.064967][ T4965] loop4: partition table partially beyond EOD, truncated [ 35.391560][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 35.446546][ T4965] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18'. [ 35.536805][ T4973] loop0: detected capacity change from 0 to 1024 [ 35.537763][ T4973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.571126][ T4973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.818068][ T4981] Non-string source [ 36.129431][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 36.400791][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.585860][ T4721] Bluetooth: hci3: command tx timeout [ 36.587210][ T4715] Bluetooth: hci0: command tx timeout [ 36.755823][ T4715] Bluetooth: hci4: command tx timeout [ 36.756100][ T4715] Bluetooth: hci1: command tx timeout [ 36.796215][ T4715] Bluetooth: hci2: command tx timeout [ 36.826422][ T5008] loop2: detected capacity change from 0 to 1024 [ 36.828429][ T5008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.840104][ T5008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.030848][ T5012] Non-string source [ 37.384266][ T5023] loop0: detected capacity change from 0 to 1024 [ 37.384976][ T5023] EXT4-fs: inline encryption not supported [ 37.389426][ T5021] usb usb1: usbfs: process 5021 (syz.4.32) did not claim interface 6 before use [ 37.397953][ T5023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.847642][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.869310][ T5044] loop2: detected capacity change from 0 to 1024 [ 37.870337][ T5044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.881371][ T5044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.045800][ T5048] Non-string source [ 38.347631][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.635893][ T4721] Bluetooth: hci0: command tx timeout [ 38.636427][ T4721] Bluetooth: hci3: command tx timeout [ 38.773070][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.797560][ T4715] Bluetooth: hci1: command tx timeout [ 38.797596][ T4715] Bluetooth: hci4: command tx timeout [ 39.053416][ T4721] Bluetooth: hci2: command tx timeout [ 39.343704][ T5086] usb usb1: usbfs: process 5086 (syz.0.49) did not claim interface 6 before use [ 39.486984][ T5099] overlayfs: overlapping lowerdir path [ 40.419317][ T5133] loop3: detected capacity change from 0 to 512 [ 40.421438][ T5133] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.421478][ T5133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.473935][ T5133] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.482763][ T5133] EXT4-fs (loop3): 1 truncate cleaned up [ 40.487316][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.519917][ T5133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 40.600949][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.631544][ T5145] usb usb1: usbfs: process 5145 (syz.0.69) did not claim interface 6 before use [ 40.713994][ T5149] tipc: Started in network mode [ 40.714025][ T5149] tipc: Node identity 4, cluster identity 4711 [ 40.714053][ T5149] tipc: Node number set to 4 [ 41.115717][ T5157] overlayfs: overlapping lowerdir path [ 41.231906][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 42.167635][ T5201] FAULT_INJECTION: forcing a failure. [ 42.167635][ T5201] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.170260][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT [ 42.170280][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.170286][ T5201] Call trace: [ 42.170289][ T5201] show_stack+0x2c/0x3c (C) [ 42.170312][ T5201] __dump_stack+0x30/0x40 [ 42.170323][ T5201] dump_stack_lvl+0xd8/0x12c [ 42.170333][ T5201] dump_stack+0x1c/0x28 [ 42.170343][ T5201] should_fail_ex+0x41c/0x590 [ 42.170354][ T5201] should_fail+0x14/0x24 [ 42.170363][ T5201] should_fail_usercopy+0x20/0x30 [ 42.170374][ T5201] _copy_from_iter+0x188/0x1064 [ 42.170382][ T5201] netlink_sendmsg+0x570/0x948 [ 42.170391][ T5201] __sock_sendmsg+0xc8/0x17c [ 42.170400][ T5201] ____sys_sendmsg+0x3d0/0x6c8 [ 42.170409][ T5201] ___sys_sendmsg+0x198/0x224 [ 42.170417][ T5201] __sys_sendmsg+0x158/0x204 [ 42.170426][ T5201] __arm64_sys_sendmsg+0x88/0x9c [ 42.170434][ T5201] invoke_syscall+0x98/0x244 [ 42.170444][ T5201] el0_svc_common+0xec/0x23c [ 42.170454][ T5201] do_el0_svc+0x4c/0x5c [ 42.170463][ T5201] el0_svc+0x64/0x260 [ 42.170474][ T5201] el0t_64_sync_handler+0x48/0x148 [ 42.170483][ T5201] el0t_64_sync+0x198/0x19c [ 42.251797][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 42.767607][ T5217] usb usb1: usbfs: process 5217 (syz.0.94) did not claim interface 6 before use [ 43.242815][ T5225] loop4: detected capacity change from 0 to 512 [ 43.243228][ T5225] EXT4-fs: inline encryption not supported [ 43.265854][ T5225] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.265918][ T5225] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.306473][ T5225] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.310999][ T5225] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.96: bg 0: block 248: padding at end of block bitmap is not set [ 43.311109][ T5225] loop4: lost filesystem error report for type 5 error -117 [ 43.314078][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 43.314094][ C1] EXT4-fs (loop4): last error at time 43: ext4_validate_block_bitmap:441 [ 43.314427][ T5225] Quota error (device loop4): write_blk: dquota write failed [ 43.314462][ T5225] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 43.314489][ T5225] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.96: Failed to acquire dquot type 1 [ 43.314500][ T5225] loop4: lost filesystem error report for type 5 error -28 [ 43.322513][ T5225] EXT4-fs (loop4): 1 truncate cleaned up [ 43.325816][ T5225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 44.062715][ T5238] capability: warning: `syz.3.98' uses deprecated v2 capabilities in a way that may be insecure [ 44.151663][ T5243] loop2: detected capacity change from 0 to 512 [ 44.190309][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 44.207135][ T5249] loop1: detected capacity change from 0 to 1024 [ 44.207828][ T5243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.228080][ T5249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.247375][ T5249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.362479][ T5257] Non-string source [ 44.404854][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.900618][ T5266] loop3: detected capacity change from 0 to 2048 [ 44.966617][ T5266] Alternate GPT is invalid, using primary GPT. [ 44.968546][ T5266] loop3: p1 p2 p3 [ 44.969459][ T5266] loop3: partition table partially beyond EOD, truncated [ 45.087449][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.202978][ T5278] loop4: detected capacity change from 0 to 1024 [ 45.206202][ T5278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.223228][ T5278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.489416][ T5266] netlink: 76 bytes leftover after parsing attributes in process `syz.3.108'. [ 45.618831][ T5288] Non-string source [ 46.146682][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.176149][ T4707] udevd[4707]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.288960][ T5306] loop4: detected capacity change from 0 to 1024 [ 46.292331][ T5306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.314231][ T5306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.474268][ T5312] Non-string source [ 47.265665][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.435686][ T5330] loop3: detected capacity change from 0 to 1024 [ 47.436088][ T5330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.463127][ T5330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.465691][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 47.465728][ T5334] bridge_slave_0: default FDB implementation only supports local addresses [ 47.466894][ T5334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 48.008749][ T5341] Non-string source [ 48.237034][ T5350] loop2: detected capacity change from 0 to 1024 [ 48.237422][ T5350] EXT4-fs: inline encryption not supported [ 48.535705][ T5350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.556183][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.569643][ T5357] loop4: detected capacity change from 0 to 1024 [ 48.570026][ T5357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.598812][ T5357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.613862][ T5359] loop3: detected capacity change from 0 to 2048 [ 48.688504][ T5359] Alternate GPT is invalid, using primary GPT. [ 48.688636][ T5359] loop3: p2 p3 p7 [ 48.721749][ T5364] Non-string source [ 49.166010][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.526078][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.583201][ T5388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.145'. [ 49.623049][ T5390] usb usb1: usbfs: process 5390 (syz.1.146) did not claim interface 6 before use [ 50.005332][ T5399] loop4: detected capacity change from 0 to 1024 [ 50.008607][ T5399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.019476][ T5399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.144139][ T5405] loop0: detected capacity change from 0 to 512 [ 50.144498][ T5405] EXT4-fs: Ignoring removed bh option [ 50.158518][ T5405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.168953][ T5405] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.150: corrupted xattr block 33: invalid ea_ino [ 50.172231][ T5405] EXT4-fs (loop0): Remounting filesystem read-only [ 50.238645][ T5411] Non-string source [ 50.460542][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.946402][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.982842][ T5427] loop4: detected capacity change from 0 to 2048 [ 51.015318][ T5427] Alternate GPT is invalid, using primary GPT. [ 51.017292][ T5427] loop4: p1 p2 p3 [ 51.018566][ T5427] loop4: partition table partially beyond EOD, truncated [ 51.032322][ T5428] loop1: detected capacity change from 0 to 512 [ 51.034275][ T5428] EXT4-fs: inline encryption not supported [ 51.037009][ T5428] EXT4-fs: journaled quota format not specified [ 51.048513][ T5428] netlink: 184 bytes leftover after parsing attributes in process `syz.1.154'. [ 51.576837][ T5446] bridge0: port 3(syz_tun) entered blocking state [ 51.577063][ T5446] bridge0: port 3(syz_tun) entered disabled state [ 51.577516][ T5446] syz_tun: entered allmulticast mode [ 51.578477][ T5446] syz_tun: entered promiscuous mode [ 51.579085][ T5446] bridge0: port 3(syz_tun) entered blocking state [ 51.579123][ T5446] bridge0: port 3(syz_tun) entered forwarding state [ 51.598167][ T5446] bridge0: port 3(syz_tun) entered learning state [ 51.600839][ T5446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.160'. [ 51.814169][ T5458] loop3: detected capacity change from 0 to 128 [ 51.821666][ T5458] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.002027][ T5481] FAULT_INJECTION: forcing a failure. [ 52.002027][ T5481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.005285][ T5481] CPU: 0 UID: 0 PID: 5481 Comm: syz.4.172 Not tainted syzkaller #0 PREEMPT [ 52.005298][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 52.005304][ T5481] Call trace: [ 52.005307][ T5481] show_stack+0x2c/0x3c (C) [ 52.005327][ T5481] __dump_stack+0x30/0x40 [ 52.005338][ T5481] dump_stack_lvl+0xd8/0x12c [ 52.005348][ T5481] dump_stack+0x1c/0x28 [ 52.005357][ T5481] should_fail_ex+0x41c/0x590 [ 52.005368][ T5481] should_fail+0x14/0x24 [ 52.005378][ T5481] should_fail_usercopy+0x20/0x30 [ 52.005388][ T5481] _copy_from_iter+0x188/0x1064 [ 52.005396][ T5481] tcp_sendmsg_locked+0x11ac/0x3298 [ 52.005408][ T5481] tcp_sendmsg+0x40/0x64 [ 52.005417][ T5481] inet_sendmsg+0xb4/0xd8 [ 52.005425][ T5481] __sock_sendmsg+0xc8/0x17c [ 52.005433][ T5481] __sys_sendto+0x250/0x328 [ 52.005442][ T5481] __arm64_sys_sendto+0xec/0x10c [ 52.005450][ T5481] invoke_syscall+0x98/0x244 [ 52.005460][ T5481] el0_svc_common+0xec/0x23c [ 52.005470][ T5481] do_el0_svc+0x4c/0x5c [ 52.005479][ T5481] el0_svc+0x64/0x260 [ 52.005489][ T5481] el0t_64_sync_handler+0x48/0x148 [ 52.005499][ T5481] el0t_64_sync+0x198/0x19c [ 52.051900][ T4724] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.103461][ T4929] udevd[4929]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.107259][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 52.119772][ T4707] udevd[4707]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.780524][ T5510] loop2: detected capacity change from 0 to 2048 [ 52.814552][ T5510] Alternate GPT is invalid, using primary GPT. [ 52.814609][ T5510] loop2: p1 p2 p3 [ 52.814619][ T5510] loop2: partition table partially beyond EOD, truncated [ 53.275153][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.275399][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.903160][ T5536] loop4: detected capacity change from 0 to 512 [ 53.905264][ T5536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.915915][ T5536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.917997][ T5539] FAULT_INJECTION: forcing a failure. [ 53.917997][ T5539] name failslab, interval 1, probability 0, space 0, times 0 [ 53.918019][ T5539] CPU: 1 UID: 0 PID: 5539 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT [ 53.918029][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 53.918034][ T5539] Call trace: [ 53.918037][ T5539] show_stack+0x2c/0x3c (C) [ 53.918056][ T5539] __dump_stack+0x30/0x40 [ 53.918067][ T5539] dump_stack_lvl+0xd8/0x12c [ 53.918077][ T5539] dump_stack+0x1c/0x28 [ 53.918089][ T5539] should_fail_ex+0x41c/0x590 [ 53.918100][ T5539] should_failslab+0xc4/0x120 [ 53.918110][ T5539] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 53.918119][ T5539] __alloc_skb+0x1f0/0x610 [ 53.918130][ T5539] tcp_stream_alloc_skb+0x44/0x2dc [ 53.918141][ T5539] tcp_sendmsg_locked+0x1374/0x3298 [ 53.918151][ T5539] tcp_sendmsg+0x40/0x64 [ 53.918161][ T5539] inet_sendmsg+0xb4/0xd8 [ 53.918168][ T5539] __sock_sendmsg+0xc8/0x17c [ 53.918177][ T5539] __sys_sendto+0x250/0x328 [ 53.918185][ T5539] __arm64_sys_sendto+0xec/0x10c [ 53.918193][ T5539] invoke_syscall+0x98/0x244 [ 53.918203][ T5539] el0_svc_common+0xec/0x23c [ 53.918213][ T5539] do_el0_svc+0x4c/0x5c [ 53.918222][ T5539] el0_svc+0x64/0x260 [ 53.918233][ T5539] el0t_64_sync_handler+0x48/0x148 [ 53.918242][ T5539] el0t_64_sync+0x198/0x19c [ 53.936147][ T5536] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 53.937787][ T5536] EXT4-fs (loop4): Remounting filesystem read-only [ 53.942127][ T5536] netlink: 104 bytes leftover after parsing attributes in process `syz.4.192'. [ 53.974222][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.977011][ T12] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 53.977052][ T12] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 54.400025][ T5552] loop2: detected capacity change from 0 to 1024 [ 54.403531][ T5552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.472481][ T5552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.476112][ T5560] loop3: detected capacity change from 0 to 2048 [ 54.560416][ T5552] Non-string source [ 54.799387][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.815826][ T5560] Alternate GPT is invalid, using primary GPT. [ 54.815896][ T5560] loop3: p1 p2 p3 [ 54.815905][ T5560] loop3: partition table partially beyond EOD, truncated [ 54.829644][ T5566] FAULT_INJECTION: forcing a failure. [ 54.829644][ T5566] name failslab, interval 1, probability 0, space 0, times 0 [ 54.829693][ T5566] CPU: 1 UID: 0 PID: 5566 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT [ 54.829705][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 54.829712][ T5566] Call trace: [ 54.829716][ T5566] show_stack+0x2c/0x3c (C) [ 54.829738][ T5566] __dump_stack+0x30/0x40 [ 54.829750][ T5566] dump_stack_lvl+0xd8/0x12c [ 54.829760][ T5566] dump_stack+0x1c/0x28 [ 54.829769][ T5566] should_fail_ex+0x41c/0x590 [ 54.829780][ T5566] should_failslab+0xc4/0x120 [ 54.829789][ T5566] kmem_cache_alloc_noprof+0x94/0x5d8 [ 54.829798][ T5566] skb_clone+0x1ac/0x320 [ 54.829809][ T5566] __netlink_deliver_tap+0x364/0x6f4 [ 54.829825][ T5566] netlink_deliver_tap+0x1d8/0x1dc [ 54.829834][ T5566] __netlink_sendskb+0x78/0xd0 [ 54.829843][ T5566] netlink_broadcast_filtered+0x940/0xd58 [ 54.829852][ T5566] team_nl_send_multicast+0xb8/0x114 [ 54.829863][ T5566] team_nl_send_options_get+0xea4/0xfb0 [ 54.829871][ T5566] team_nl_options_set_doit+0x8bc/0xba4 [ 54.829878][ T5566] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 54.829888][ T5566] genl_rcv_msg+0x43c/0x620 [ 54.829897][ T5566] netlink_rcv_skb+0x238/0x414 [ 54.829905][ T5566] genl_rcv+0x38/0x50 [ 54.829913][ T5566] netlink_unicast+0x600/0x7f8 [ 54.829921][ T5566] netlink_sendmsg+0x648/0x948 [ 54.829929][ T5566] __sock_sendmsg+0xc8/0x17c [ 54.829938][ T5566] ____sys_sendmsg+0x3d0/0x6c8 [ 54.829946][ T5566] ___sys_sendmsg+0x198/0x224 [ 54.829955][ T5566] __sys_sendmsg+0x158/0x204 [ 54.829963][ T5566] __arm64_sys_sendmsg+0x88/0x9c [ 54.829972][ T5566] invoke_syscall+0x98/0x244 [ 54.829982][ T5566] el0_svc_common+0xec/0x23c [ 54.829991][ T5566] do_el0_svc+0x4c/0x5c [ 54.830001][ T5566] el0_svc+0x64/0x260 [ 54.830011][ T5566] el0t_64_sync_handler+0x48/0x148 [ 54.830021][ T5566] el0t_64_sync+0x198/0x19c [ 55.027956][ T5581] loop4: detected capacity change from 0 to 1024 [ 55.029859][ T5581] EXT4-fs: inline encryption not supported [ 55.043238][ T5581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.050178][ T5581] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.207: bg 0: block 112: padding at end of block bitmap is not set [ 55.132410][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.186833][ T5598] warning: `syz.4.210' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.530864][ T5603] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 55.617136][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.617458][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.687238][ T5609] loop3: detected capacity change from 0 to 1024 [ 55.689456][ T5609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.702912][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.767549][ T5616] loop4: detected capacity change from 0 to 1024 [ 55.772120][ T5616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.793791][ T5616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.921189][ T5622] Non-string source [ 56.186118][ T5624] Non-string source [ 56.529821][ T5630] FAULT_INJECTION: forcing a failure. [ 56.529821][ T5630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.529866][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT [ 56.529879][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 56.529886][ T5630] Call trace: [ 56.529890][ T5630] show_stack+0x2c/0x3c (C) [ 56.529909][ T5630] __dump_stack+0x30/0x40 [ 56.529920][ T5630] dump_stack_lvl+0xd8/0x12c [ 56.529930][ T5630] dump_stack+0x1c/0x28 [ 56.529940][ T5630] should_fail_ex+0x41c/0x590 [ 56.529951][ T5630] should_fail+0x14/0x24 [ 56.529961][ T5630] should_fail_usercopy+0x20/0x30 [ 56.529971][ T5630] _inline_copy_from_user+0x38/0x164 [ 56.529981][ T5630] io_register_pbuf_ring+0x138/0x654 [ 56.529990][ T5630] __arm64_sys_io_uring_register+0xccc/0x1494 [ 56.530001][ T5630] invoke_syscall+0x98/0x244 [ 56.530011][ T5630] el0_svc_common+0xec/0x23c [ 56.530021][ T5630] do_el0_svc+0x4c/0x5c [ 56.530030][ T5630] el0_svc+0x64/0x260 [ 56.530041][ T5630] el0t_64_sync_handler+0x48/0x148 [ 56.530050][ T5630] el0t_64_sync+0x198/0x19c [ 56.613467][ T5635] loop2: detected capacity change from 0 to 512 [ 56.614186][ T5635] EXT4-fs (loop2): Test dummy encryption mode enabled [ 56.954314][ T5640] loop1: detected capacity change from 0 to 1024 [ 56.954759][ T5640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.957813][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.977016][ T5635] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.220: inode has both inline data and extents flags [ 56.977134][ T5635] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.979570][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.981433][ T5635] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.220: couldn't read orphan inode 15 (err -117) [ 56.981457][ T5635] loop2: lost filesystem error report for type 5 error -117 [ 56.982315][ T5640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.045027][ T5635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.048574][ T5640] Non-string source [ 57.064860][ T5648] binder: 5647:5648 ioctl 4018620d 0 returned -22 [ 57.066741][ T5648] binder: 5647:5648 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 57.092291][ T5648] binder: 5647:5648 Acquire 1 refcount change on invalid ref 0 ret -22 [ 57.092424][ T5648] binder: 5647:5648 got transaction to invalid handle, 1 [ 57.092466][ T5648] binder: 5647:5648 cannot find target node [ 57.092481][ T5648] binder: 5647:5648 transaction call to 0:0 failed 1/29201/-22, code 0 size 72-24 line 3252 [ 57.121534][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.149319][ T4908] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.275340][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.615302][ T4721] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 57.615363][ T4721] Bluetooth: hci1: Injecting HCI hardware error event [ 57.616139][ T4721] Bluetooth: hci1: hardware error 0x00 [ 57.629237][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 57.629611][ T5675] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 57.629622][ T5675] netlink: 'syz.2.234': attribute type 2 has an invalid length. [ 57.629629][ T5675] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 57.629636][ T5675] netlink: 'syz.2.234': attribute type 2 has an invalid length. [ 57.629642][ T5675] netlink: 'syz.2.234': attribute type 2 has an invalid length. [ 57.630527][ T5675] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 57.632311][ T5675] Injecting memory failure for pfn 0x11f9d1 at process virtual address 0x20001000 [ 57.644113][ T5675] Memory failure: 0x11f9d1: Sending SIGBUS to syz.2.234:5675 due to hardware memory corruption [ 57.644211][ T5675] Memory failure: 0x11f9d1: recovery action for dirty LRU page: Recovered [ 57.661308][ T5677] loop0: detected capacity change from 0 to 1024 [ 57.663189][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.672522][ T5677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.746003][ T5683] batadv_slave_0: entered promiscuous mode [ 57.747426][ T5683] batadv_slave_0: left promiscuous mode [ 57.751515][ T5683] batadv_slave_0: entered promiscuous mode [ 57.777180][ T5682] batadv_slave_0: left promiscuous mode [ 57.853708][ T5689] Non-string source [ 58.600940][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.638736][ T5712] FAULT_INJECTION: forcing a failure. [ 58.638736][ T5712] name failslab, interval 1, probability 0, space 0, times 0 [ 58.641925][ T5712] CPU: 0 UID: 0 PID: 5712 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT [ 58.641949][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 58.641956][ T5712] Call trace: [ 58.641960][ T5712] show_stack+0x2c/0x3c (C) [ 58.641983][ T5712] __dump_stack+0x30/0x40 [ 58.641995][ T5712] dump_stack_lvl+0xd8/0x12c [ 58.642005][ T5712] dump_stack+0x1c/0x28 [ 58.642015][ T5712] should_fail_ex+0x41c/0x590 [ 58.642026][ T5712] should_failslab+0xc4/0x120 [ 58.642034][ T5712] __kmalloc_cache_noprof+0x94/0x5ec [ 58.642043][ T5712] io_register_pbuf_ring+0x380/0x654 [ 58.642053][ T5712] __arm64_sys_io_uring_register+0xccc/0x1494 [ 58.642063][ T5712] invoke_syscall+0x98/0x244 [ 58.642073][ T5712] el0_svc_common+0xec/0x23c [ 58.642083][ T5712] do_el0_svc+0x4c/0x5c [ 58.642094][ T5712] el0_svc+0x64/0x260 [ 58.642106][ T5712] el0t_64_sync_handler+0x48/0x148 [ 58.642116][ T5712] el0t_64_sync+0x198/0x19c [ 58.711891][ T5716] loop4: detected capacity change from 0 to 1024 [ 58.713862][ T5716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.826972][ T5716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.854452][ T5716] Non-string source [ 58.866334][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.951323][ T5725] loop4: detected capacity change from 0 to 2048 [ 59.009645][ T5725] Alternate GPT is invalid, using primary GPT. [ 59.009707][ T5725] loop4: p1 p2 p3 [ 59.009716][ T5725] loop4: partition table partially beyond EOD, truncated [ 59.511250][ T5741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.524632][ T5741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.706323][ T5752] Non-string source [ 59.922612][ T5755] FAULT_INJECTION: forcing a failure. [ 59.922612][ T5755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.922651][ T5755] CPU: 0 UID: 0 PID: 5755 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT [ 59.922664][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 59.922672][ T5755] Call trace: [ 59.922676][ T5755] show_stack+0x2c/0x3c (C) [ 59.922698][ T5755] __dump_stack+0x30/0x40 [ 59.922710][ T5755] dump_stack_lvl+0xd8/0x12c [ 59.922720][ T5755] dump_stack+0x1c/0x28 [ 59.922729][ T5755] should_fail_ex+0x41c/0x590 [ 59.922740][ T5755] should_fail+0x14/0x24 [ 59.922750][ T5755] should_fail_usercopy+0x20/0x30 [ 59.922760][ T5755] _copy_from_iter+0x188/0x1064 [ 59.922768][ T5755] tcp_sendmsg_locked+0x11ac/0x3298 [ 59.922780][ T5755] tcp_sendmsg+0x40/0x64 [ 59.922789][ T5755] inet_sendmsg+0xb4/0xd8 [ 59.922796][ T5755] __sock_sendmsg+0xc8/0x17c [ 59.922805][ T5755] __sys_sendto+0x250/0x328 [ 59.922819][ T5755] __arm64_sys_sendto+0xec/0x10c [ 59.922828][ T5755] invoke_syscall+0x98/0x244 [ 59.922839][ T5755] el0_svc_common+0xec/0x23c [ 59.922849][ T5755] do_el0_svc+0x4c/0x5c [ 59.922858][ T5755] el0_svc+0x64/0x260 [ 59.922869][ T5755] el0t_64_sync_handler+0x48/0x148 [ 59.922878][ T5755] el0t_64_sync+0x198/0x19c [ 60.004769][ T5761] set_capacity_and_notify: 1 callbacks suppressed [ 60.006777][ T5761] loop1: detected capacity change from 0 to 512 [ 60.040066][ T4721] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 60.186708][ T5776] loop3: detected capacity change from 0 to 512 [ 60.213271][ T5776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.229457][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.441897][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.532042][ T5794] netlink: 80 bytes leftover after parsing attributes in process `syz.2.273'. [ 61.085535][ T5800] loop0: detected capacity change from 0 to 2048 [ 61.128051][ T5800] Alternate GPT is invalid, using primary GPT. [ 61.128115][ T5800] loop0: p1 p2 p3 [ 61.128139][ T5800] loop0: partition table partially beyond EOD, truncated [ 61.198050][ T5806] usb usb1: usbfs: process 5806 (syz.1.277) did not claim interface 6 before use [ 61.264886][ T5816] loop1: detected capacity change from 0 to 1024 [ 61.265308][ T5816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.281325][ T5816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.387153][ T5822] loop3: detected capacity change from 0 to 1024 [ 61.394659][ T5822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.421878][ T5822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.486374][ T5828] Non-string source [ 61.601459][ T5829] Non-string source [ 61.847629][ T5833] netlink: 80 bytes leftover after parsing attributes in process `syz.2.284'. [ 62.339561][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.342353][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.231626][ T5876] loop2: detected capacity change from 0 to 2048 [ 63.237929][ T5876] Alternate GPT is invalid, using primary GPT. [ 63.239470][ T5876] loop2: p1 p2 p3 [ 63.240239][ T5876] loop2: partition table partially beyond EOD, truncated [ 63.263416][ T5878] loop4: detected capacity change from 0 to 4096 [ 63.263850][ T5878] ext4: Bad value for 'min_batch_time' [ 63.496344][ T5882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 63.711502][ T5886] loop0: detected capacity change from 0 to 1024 [ 63.714576][ T5886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.717474][ T5887] loop3: detected capacity change from 0 to 1024 [ 63.717867][ T5887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.727077][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.730555][ T5887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.524272][ T5902] Non-string source [ 65.944013][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.944065][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.952252][ T867] cfg80211: failed to load regulatory.db [ 65.969867][ T5940] loop2: detected capacity change from 0 to 2048 [ 66.044614][ T5940] Alternate GPT is invalid, using primary GPT. [ 66.044680][ T5940] loop2: p1 p2 p3 [ 66.044700][ T5940] loop2: partition table partially beyond EOD, truncated [ 66.060735][ T5945] loop3: detected capacity change from 0 to 512 [ 66.079842][ T5945] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 66.453659][ T5957] loop3: detected capacity change from 0 to 1024 [ 66.454499][ T5957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.485920][ T5957] EXT4-fs mount: 2 callbacks suppressed [ 66.485965][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.665454][ T5967] Non-string source [ 67.634903][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.805776][ T5996] loop3: detected capacity change from 0 to 1024 [ 67.808693][ T5996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.829799][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.013202][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 68.332098][ T6004] FAULT_INJECTION: forcing a failure. [ 68.332098][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.332137][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT [ 68.332149][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 68.332156][ T6004] Call trace: [ 68.332160][ T6004] show_stack+0x2c/0x3c (C) [ 68.332184][ T6004] __dump_stack+0x30/0x40 [ 68.332198][ T6004] dump_stack_lvl+0xd8/0x12c [ 68.332208][ T6004] dump_stack+0x1c/0x28 [ 68.332218][ T6004] should_fail_ex+0x41c/0x590 [ 68.332229][ T6004] should_fail+0x14/0x24 [ 68.332239][ T6004] should_fail_usercopy+0x20/0x30 [ 68.332249][ T6004] _copy_from_iter+0x188/0x1064 [ 68.332257][ T6004] tcp_sendmsg_locked+0x11ac/0x3298 [ 68.332269][ T6004] tcp_sendmsg+0x40/0x64 [ 68.332278][ T6004] inet_sendmsg+0xb4/0xd8 [ 68.332286][ T6004] __sock_sendmsg+0xc8/0x17c [ 68.332294][ T6004] __sys_sendto+0x250/0x328 [ 68.332303][ T6004] __arm64_sys_sendto+0xec/0x10c [ 68.332311][ T6004] invoke_syscall+0x98/0x244 [ 68.332321][ T6004] el0_svc_common+0xec/0x23c [ 68.332331][ T6004] do_el0_svc+0x4c/0x5c [ 68.332340][ T6004] el0_svc+0x64/0x260 [ 68.332351][ T6004] el0t_64_sync_handler+0x48/0x148 [ 68.332360][ T6004] el0t_64_sync+0x198/0x19c [ 68.756600][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.518728][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.518773][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.517306][ T4723] Bluetooth: hci3: command 0x0406 tx timeout [ 162.517361][ T4728] Bluetooth: hci0: command 0x0406 tx timeout [ 162.517382][ T4723] Bluetooth: hci4: command 0x0406 tx timeout [ 162.522913][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 164.522393][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.522586][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.529755][ T6033] FAULT_INJECTION: forcing a failure. [ 164.529755][ T6033] name failslab, interval 1, probability 0, space 0, times 0 [ 164.529802][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.4.340 Not tainted syzkaller #0 PREEMPT [ 164.529823][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 164.529831][ T6033] Call trace: [ 164.529835][ T6033] show_stack+0x2c/0x3c (C) [ 164.529853][ T6033] __dump_stack+0x30/0x40 [ 164.529865][ T6033] dump_stack_lvl+0xd8/0x12c [ 164.529875][ T6033] dump_stack+0x1c/0x28 [ 164.529885][ T6033] should_fail_ex+0x41c/0x590 [ 164.529896][ T6033] should_failslab+0xc4/0x120 [ 164.529905][ T6033] kmem_cache_alloc_noprof+0x94/0x5d8 [ 164.529914][ T6033] skb_clone+0x1ac/0x320 [ 164.529924][ T6033] raw_local_deliver+0x758/0xbd0 [ 164.529935][ T6033] ip_protocol_deliver_rcu+0x60/0x468 [ 164.529942][ T6033] ip_local_deliver_finish+0x320/0x65c [ 164.529949][ T6033] NF_HOOK+0x308/0x398 [ 164.529956][ T6033] ip_local_deliver+0x128/0x188 [ 164.529962][ T6033] ip_sublist_rcv_finish+0x1a0/0x234 [ 164.529970][ T6033] ip_sublist_rcv+0x5fc/0x8cc [ 164.529976][ T6033] ip_list_rcv+0x37c/0x3d8 [ 164.529983][ T6033] __netif_receive_skb_list_core+0x4f0/0x67c [ 164.529994][ T6033] netif_receive_skb_list_internal+0x748/0xa0c [ 164.530002][ T6033] netif_receive_skb_list+0x70/0x818 [ 164.530011][ T6033] bpf_test_run_xdp_live+0x1434/0x1770 [ 164.530022][ T6033] bpf_prog_test_run_xdp+0x634/0xe0c [ 164.530032][ T6033] bpf_prog_test_run+0x1e0/0x250 [ 164.530040][ T6033] __sys_bpf+0x730/0x8c8 [ 164.530047][ T6033] __arm64_sys_bpf+0xd0/0xec [ 164.530053][ T6033] invoke_syscall+0x98/0x244 [ 164.530063][ T6033] el0_svc_common+0xec/0x23c [ 164.530073][ T6033] do_el0_svc+0x4c/0x5c [ 164.530082][ T6033] el0_svc+0x64/0x260 [ 164.530093][ T6033] el0t_64_sync_handler+0x48/0x148 [ 164.530103][ T6033] el0t_64_sync+0x198/0x19c [ 164.593849][ T6043] binder: 6041:6043 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 164.593893][ T6043] binder: 6041:6043 unknown command 0 [ 164.593920][ T6043] binder: 6041:6043 ioctl c0306201 200001c0 returned -22 [ 164.667330][ T6049] loop2: detected capacity change from 0 to 512 [ 164.692272][ T6049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.696967][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 164.739651][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 164.769747][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.971247][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 165.211080][ T6083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 165.211177][ T6083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 166.102845][ T6104] block nbd0: NBD_DISCONNECT [ 166.510905][ T6116] fuse: Unknown parameter '0x0000000000000009' [ 168.352834][ T6155] process 'syz.3.374' launched './file0' with NULL argv: empty string added [ 169.260179][ T6190] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 169.262843][ T6190] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.390137][ T6201] Bluetooth: MGMT ver 1.23 [ 169.820632][ T6225] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 169.825499][ T6225] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.836628][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.836853][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.400273][ T6257] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 170.400329][ T6257] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 170.833758][ T6290] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 170.833825][ T6290] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 170.901184][ T6299] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 170.901251][ T6299] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 171.128789][ T6329] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 171.128865][ T6329] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 171.496909][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.1.455'. [ 171.636677][ T6364] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 171.636755][ T6364] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 171.828309][ T6391] netlink: 128 bytes leftover after parsing attributes in process `syz.1.476'. [ 172.188036][ T6403] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 172.188093][ T6403] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.302150][ T6421] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 172.302213][ T6421] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.431602][ T6442] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 172.431667][ T6442] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.521702][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.524861][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.543998][ T6456] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 172.548156][ T6456] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 173.002174][ T6477] lo: entered allmulticast mode [ 173.066515][ T6487] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 173.068830][ T6487] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 173.651095][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 173.973937][ T30] audit: type=1326 audit(164.153:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.974263][ T30] audit: type=1326 audit(164.153:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975107][ T30] audit: type=1326 audit(164.153:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975257][ T30] audit: type=1326 audit(164.153:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=469 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975335][ T30] audit: type=1326 audit(164.153:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975404][ T30] audit: type=1326 audit(164.153:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975487][ T30] audit: type=1326 audit(164.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975554][ T30] audit: type=1326 audit(164.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975669][ T30] audit: type=1326 audit(164.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 173.975730][ T30] audit: type=1326 audit(164.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffad7781a8 code=0x7ffc0000 [ 174.561426][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.563386][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.611133][ T6613] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 174.611193][ T6613] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 174.939292][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.941314][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.088122][ T6652] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 175.088173][ T6652] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.129185][ T6657] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 175.130115][ T6657] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.668518][ T6682] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 175.668581][ T6682] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.731067][ T6693] netlink: zone id is out of range [ 175.731100][ T6693] netlink: set zone limit has 4 unknown bytes [ 175.853075][ T6710] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 175.853135][ T6710] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 176.320901][ T6748] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 176.328062][ T6748] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 176.525730][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.529971][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.547618][ T4721] Bluetooth: hci2: Malformed Event: 0x2f [ 176.717275][ T6793] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 176.717336][ T6793] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 176.731193][ T6796] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 176.736554][ T6796] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.281117][ T6833] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 177.281176][ T6833] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.364427][ T6841] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 177.367141][ T6841] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.741707][ T6862] syz_tun: entered allmulticast mode [ 177.746705][ T6861] syz_tun: left allmulticast mode [ 177.765761][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.768431][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.087943][ T6876] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 178.090633][ T6876] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.147417][ T6881] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 178.147479][ T6881] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.381294][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 178.383153][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.390775][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.404926][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 178.430144][ T6907] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 178.432647][ T6907] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.921514][ T6937] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 178.924463][ T6937] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.462340][ T6971] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 179.462399][ T6971] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.550677][ T6986] netdevsim netdevsim1: Direct firmware load for X failed with error -2 [ 179.550722][ T6986] netdevsim netdevsim1: Falling back to sysfs fallback for: X [ 180.017641][ T7010] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 180.017699][ T7010] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 180.268594][ T7019] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 180.276689][ T7019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.278650][ T7019] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.391780][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.393747][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.398821][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 180.403925][ T7033] bridge0: port 3(syz_tun) entered disabled state [ 180.409764][ T7033] syz_tun (unregistering): left allmulticast mode [ 180.409816][ T7033] syz_tun (unregistering): left promiscuous mode [ 180.409863][ T7033] bridge0: port 3(syz_tun) entered disabled state [ 180.488685][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.491294][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.503013][ T7045] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 180.503073][ T7045] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 180.770987][ T7073] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 180.771040][ T7073] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 180.936584][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.937345][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.972804][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.976802][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.143262][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.143332][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.143356][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.143377][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.168229][ T7100] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 181.169812][ T7100] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 181.269737][ T7107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.271996][ T7107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.293408][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.293598][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.610463][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.612783][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.877444][ T7134] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 181.880168][ T7134] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.204308][ T7164] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 182.204376][ T7164] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.790469][ T7205] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 182.793036][ T7205] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.826911][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 182.937900][ T7216] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 182.940298][ T7216] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 183.101645][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 183.105381][ T7229] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 183.150438][ T7231] block nbd0: not configured, cannot reconfigure [ 183.368435][ T7256] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 183.368501][ T7256] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 184.202028][ T7308] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 184.205733][ T7308] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 184.665277][ T7329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.860'. [ 184.668517][ T7329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.860'. [ 184.675591][ T7329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.860'. [ 184.725764][ T7337] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 184.728963][ T7337] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 184.750249][ T7341] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 184.750315][ T7341] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 184.942365][ T30] audit: type=1326 audit(174.275:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 184.948006][ T30] audit: type=1326 audit(174.275:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 184.954811][ T30] audit: type=1326 audit(174.284:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 184.964512][ T30] audit: type=1326 audit(174.293:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 184.971577][ T30] audit: type=1326 audit(174.293:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 185.167109][ T30] audit: type=1326 audit(174.478:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 185.176088][ T30] audit: type=1326 audit(174.487:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 185.176126][ T30] audit: type=1326 audit(174.487:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 185.176343][ T30] audit: type=1326 audit(174.478:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 185.176439][ T30] audit: type=1326 audit(174.487:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.875" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=149 compat=0 ip=0xffff959781a8 code=0x7ffc0000 [ 185.255909][ T7378] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 185.256075][ T7378] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.294299][ T7385] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 185.294367][ T7385] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.701141][ T7409] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.805936][ T7417] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 185.805999][ T7417] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.814405][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 185.872464][ T7425] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 185.872532][ T7425] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.961950][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.964108][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.435329][ T7465] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 186.438181][ T7465] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 186.589733][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.593552][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.617866][ T7486] nbd: must specify at least one socket [ 186.662253][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 186.662290][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 186.712972][ T7495] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 186.713030][ T7495] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 186.987506][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.991568][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.423956][ T7528] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 187.424014][ T7528] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 187.972324][ T7570] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 189.619656][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.621706][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.361412][ T7657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.361617][ T7657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.851091][ T7720] capability: warning: `syz.2.1015' uses 32-bit capabilities (legacy support in use) [ 191.969517][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 191.969639][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 192.347877][ T7743] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 7 out of range (1000000..45000000) [ 192.920623][ T7787] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1040'. [ 193.419725][ T7818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 193.446817][ T7820] tipc: Failed to remove unknown binding: 66,0,0/0:995659803/995659805 [ 193.446850][ T7820] tipc: Failed to remove unknown binding: 66,0,0/0:995659803/995659804 [ 193.447055][ T7820] tipc: Failed to remove unknown binding: 66,0,0/0:995659803/995659805 [ 193.447070][ T7820] tipc: Failed to remove unknown binding: 66,0,0/0:995659803/995659804 [ 193.508372][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.508585][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.320820][ T7860] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 1633771873 out of range (1000000..45000000) [ 194.374252][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.374438][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.186632][ T7911] : renamed from bond_slave_0 (while UP) [ 195.482073][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.484092][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.700481][ T6781] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.702370][ T6781] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.704448][ T6781] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.708719][ T6781] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.356731][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.356941][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.575412][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.575605][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.577119][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.577276][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.710677][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.713299][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.707958][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.709943][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.128412][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.130070][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.179572][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.181968][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.870644][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.870863][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.872420][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.872583][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.872928][ T4721] Bluetooth: hci4: Malformed LE Event: 0x0d [ 200.111584][ T8121] gadgetfs: bound to dummy_udc driver [ 200.386815][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 200.428880][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 200.518024][ T8147] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4714] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0b € £µùëoÏXÚ¥\x0d·)Çw- \x0dx)œÁl5ùî˜g¢Pšr\x09  €"[8147] [ 200.571376][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 200.665923][ T8155] vlan2: entered promiscuous mode [ 200.665962][ T8155] bond0: entered promiscuous mode [ 200.665971][ T8155] bond_slave_0: entered promiscuous mode [ 200.666041][ T8155] bond_slave_1: entered promiscuous mode [ 201.182711][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.186092][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.414544][ T8198] binder: 8197:8198 tried to acquire reference to desc 0, got 1 instead [ 201.417598][ T8198] binder: 8197:8198 got transaction to invalid handle, 2 [ 201.417643][ T8198] binder: 8197:8198 cannot find target node [ 201.417671][ T8198] binder: 8197:8198 transaction call to 0:0 failed 8/29201/-22, code 0 size 0-0 line 3252 [ 201.422265][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.865518][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1220'. [ 201.948712][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.948925][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.415948][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.417848][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.388988][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.391062][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.893491][ T8293] Bluetooth: hci0: unsupported parameter 255 [ 203.894833][ T8293] Bluetooth: hci0: unsupported parameter 255 [ 204.313809][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1253'. [ 204.693173][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 204.697033][ T8331] ip6gre1: entered promiscuous mode [ 204.698246][ T8331] ip6gre1: entered allmulticast mode [ 204.858555][ T8341] netlink: 'syz.3.1267': attribute type 2 has an invalid length. [ 204.860198][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 204.862060][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 204.863910][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 204.952932][ T8349] binder: 8348:8349 tried to acquire reference to desc 0, got 1 instead [ 204.953030][ T8349] binder: 8348:8349 got transaction with fd, 3, but target does not allow fds [ 204.953042][ T8349] binder: 8349:8348 translate fd failed [ 204.953089][ T8349] binder: 8348:8349 transaction call to 8348:0 failed 13/29201/-1, code 0 size 88-24 line 3593 [ 204.953361][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.888776][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.891334][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.675584][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 206.677089][ T30] audit: type=1326 audit(194.325:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8433 comm="syz.4.1307" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89781a8 code=0x0 [ 206.984428][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.984682][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.279759][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.279981][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.400224][ T8504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1336'. [ 207.583667][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.586200][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.856399][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.858245][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.147625][ T8527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1347'. [ 208.174406][ T8529] ip6erspan0: entered promiscuous mode [ 208.887583][ T8562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1360'. [ 210.072679][ T8589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 210.072790][ T8589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 210.303359][ T8599] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 210.960925][ T8636] block nbd3: NBD_DISCONNECT [ 211.134380][ T8639] fuse: Unknown parameter '0x0000000000000009' [ 211.859629][ T8656] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 211.859725][ T8656] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 212.873833][ T8684] usb usb5: usbfs: process 8684 (syz.1.1400) did not claim interface 0 before use [ 213.076417][ T8694] block nbd1: NBD_DISCONNECT [ 213.328511][ T8704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.329491][ T8704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.670839][ T8710] fuse: Unknown parameter '0x0000000000000009' [ 213.769166][ T8714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1409'. [ 214.382894][ T8731] tipc: Started in network mode [ 214.382986][ T8731] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 214.383010][ T8731] tipc: Enabling of bearer rejected, failed to enable media [ 214.502547][ T8736] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 214.502641][ T8736] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 215.323855][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1422'. [ 215.627486][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.630537][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.794424][ T8784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1434'. [ 216.508054][ T8820] netlink: 'syz.2.1449': attribute type 1 has an invalid length. [ 216.518483][ T8820] bond1: entered promiscuous mode [ 216.518679][ T8820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.523677][ T8820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1449'. [ 217.630581][ T8904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.637335][ T8904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.669235][ T8908] dummy0: entered promiscuous mode [ 217.670475][ T8907] dummy0: left promiscuous mode [ 217.763453][ T8914] PM: suspend entry (deep) [ 217.783900][ T6777] Filesystems sync: 0.017 seconds [ 218.570951][ T8948] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1503'. [ 218.667717][ T8914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.667839][ T8914] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 218.674901][ T8914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.675089][ T8914] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 218.678042][ T8914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.678088][ T8914] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.685045][ T8914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.685110][ T8914] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.688274][ T8914] Freezing user space processes [ 218.738968][ T8914] Freezing user space processes completed (elapsed 0.046 seconds) [ 218.739087][ T8914] OOM killer disabled. [ 218.739093][ T8914] Freezing remaining freezable tasks [ 218.741461][ T8914] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 218.741476][ T8914] printk: Suspending console(s) (use no_console_suspend to debug) [ 218.842451][ T8914] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 218.842515][ T8914] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 218.842562][ T8914] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 218.842609][ T8914] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 218.844921][ T8914] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 218.844971][ T8914] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 218.845016][ T8914] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 218.845305][ T8914] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 218.845350][ T8914] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 218.845394][ T8914] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 218.845437][ T8914] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 218.845481][ T8914] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 218.845524][ T8914] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 218.845568][ T8914] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 218.845610][ T8914] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 218.845654][ T8914] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 219.073226][ T8914] Disabling non-boot CPUs ... [ 219.080779][ T8914] psci: CPU1 killed (polled 0 ms) [ 219.087269][ T8914] ------------[ cut here ]------------ [ 219.087269][ T8914] WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4, CPU#0: syz.1.1490/8914 [ 219.087269][ T8914] Modules linked in: [ 219.087269][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.1.1490 Tainted: G L syzkaller #0 PREEMPT [ 219.087269][ T8914] Tainted: [L]=SOFTLOCKUP [ 219.087269][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 219.087269][ T8914] pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 219.087269][ T8914] pc : ct_kernel_exit+0x1b4/0x1f4 [ 219.087269][ T8914] lr : ct_kernel_exit+0x13c/0x1f4 [ 219.087269][ T8914] sp : ffff8000935f75f0 [ 219.087269][ T8914] x29: ffff8000935f75f0 x28: dfff800000000000 x27: ffff8000935f7660 [ 219.087269][ T8914] x26: 00000000000000c0 x25: ffff7000126beecc x24: ffff800088abf998 [ 219.087269][ T8914] x23: ffff800088b0b6a0 x22: ffff0001ade38998 x21: ffff0001ade38998 [ 219.087269][ T8914] x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff [ 219.087269][ T8914] x17: ffff80008a791000 x16: 0000000000000006 x15: ffff80008a31ada0 [ 219.087269][ T8914] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 219.087269][ T8914] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 219.087269][ T8914] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 219.087269][ T8914] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000868ecb78 [ 219.087269][ T8914] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 219.087269][ T8914] Call trace: [ 219.087269][ T8914] ct_kernel_exit+0x1b4/0x1f4 (P) [ 219.087269][ T8914] ct_idle_enter+0x24/0x38 [ 219.087269][ T8914] cpu_suspend+0x264/0x474 [ 219.087269][ T8914] psci_system_suspend_enter+0x4c/0x80 [ 219.087269][ T8914] suspend_devices_and_enter+0x88c/0xd0c [ 219.087269][ T8914] pm_suspend+0x498/0x698 [ 219.087269][ T8914] state_store+0x14c/0x1fc [ 219.087269][ T8914] kobj_attr_store+0x6c/0x90 [ 219.087269][ T8914] sysfs_kf_write+0xe0/0x108 [ 219.087269][ T8914] kernfs_fop_write_iter+0x260/0x3b8 [ 219.087269][ T8914] vfs_write+0x51c/0xa0c [ 219.087269][ T8914] ksys_write+0x12c/0x228 [ 219.087269][ T8914] __arm64_sys_write+0x84/0x98 [ 219.087269][ T8914] invoke_syscall+0x98/0x244 [ 219.087269][ T8914] el0_svc_common+0xec/0x23c [ 219.087269][ T8914] do_el0_svc+0x4c/0x5c [ 219.087269][ T8914] el0_svc+0x64/0x260 [ 219.087269][ T8914] el0t_64_sync_handler+0x48/0x148 [ 219.087269][ T8914] el0t_64_sync+0x198/0x19c [ 219.087269][ T8914] irq event stamp: 74540 [ 219.087269][ T8914] hardirqs last enabled at (74539): [] _raw_spin_unlock_irq+0x30/0x80 [ 219.087269][ T8914] hardirqs last disabled at (74540): [] arch_suspend_disable_irqs+0x34/0x4c [ 219.087269][ T8914] softirqs last enabled at (72824): [] handle_softirqs+0xc28/0xd98 [ 219.087269][ T8914] softirqs last disabled at (72819): [] __do_softirq+0x14/0x20 [ 219.087269][ T8914] ---[ end trace 0000000000000000 ]--- [ 219.087269][ T8914] ------------[ cut here ]------------ [ 219.087269][ T8914] WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170, CPU#0: syz.1.1490/8914 [ 219.087269][ T8914] Modules linked in: [ 219.087269][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.1.1490 Tainted: G W L syzkaller #0 PREEMPT [ 219.087269][ T8914] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 219.087269][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 219.087269][ T8914] pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 219.087269][ T8914] pc : ct_kernel_enter+0x138/0x170 [ 219.087269][ T8914] lr : ct_kernel_enter+0xc8/0x170 [ 219.087269][ T8914] sp : ffff8000935f75e0 [ 219.087269][ T8914] x29: ffff8000935f75e0 x28: dfff800000000000 x27: ffff8000935f7660 [ 219.087269][ T8914] x26: 00000000000000c0 x25: ffff7000126beecc x24: 0000000100000000 [ 219.087269][ T8914] x23: ffff800088b0b6a0 x22: ffff800088abf998 x21: ffff0001ade38998 [ 219.087269][ T8914] x20: ffff0001ade38998 x19: 0000000000000000 x18: 00000000ffffffff [ 219.087269][ T8914] x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 [ 219.087269][ T8914] x14: ffff0000cf19ba80 x13: 0000000000000001 x12: 0000000000000000 [ 219.087269][ T8914] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 219.087269][ T8914] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 219.087269][ T8914] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000868ecd40 [ 219.087269][ T8914] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 219.087269][ T8914] Call trace: [ 219.087269][ T8914] ct_kernel_enter+0x138/0x170 (P) [ 219.087269][ T8914] ct_idle_exit+0x24/0x48 [ 219.087269][ T8914] cpu_suspend+0x2dc/0x474 [ 219.087269][ T8914] psci_system_suspend_enter+0x4c/0x80 [ 219.087269][ T8914] suspend_devices_and_enter+0x88c/0xd0c [ 219.087269][ T8914] pm_suspend+0x498/0x698 [ 219.087269][ T8914] state_store+0x14c/0x1fc [ 219.087269][ T8914] kobj_attr_store+0x6c/0x90 [ 219.087269][ T8914] sysfs_kf_write+0xe0/0x108 [ 219.087269][ T8914] kernfs_fop_write_iter+0x260/0x3b8 [ 219.087269][ T8914] vfs_write+0x51c/0xa0c [ 219.087269][ T8914] ksys_write+0x12c/0x228 [ 219.087269][ T8914] __arm64_sys_write+0x84/0x98 [ 219.087269][ T8914] invoke_syscall+0x98/0x244 [ 219.087269][ T8914] el0_svc_common+0xec/0x23c [ 219.087269][ T8914] do_el0_svc+0x4c/0x5c [ 219.087269][ T8914] el0_svc+0x64/0x260 [ 219.087269][ T8914] el0t_64_sync_handler+0x48/0x148 [ 219.087269][ T8914] el0t_64_sync+0x198/0x19c [ 219.087269][ T8914] irq event stamp: 74542 [ 219.087269][ T8914] hardirqs last enabled at (74541): [] psci_system_suspend_enter+0x4c/0x80 [ 219.087269][ T8914] hardirqs last disabled at (74542): [] psci_system_suspend_enter+0x4c/0x80 [ 219.087269][ T8914] softirqs last enabled at (72824): [] handle_softirqs+0xc28/0xd98 [ 219.087269][ T8914] softirqs last disabled at (72819): [] __do_softirq+0x14/0x20 [ 219.087269][ T8914] ---[ end trace 0000000000000000 ]--- [ 219.087402][ T8914] Enabling non-boot CPUs ... [ 219.088173][ T0] Detected PIPT I-cache on CPU1 [ 219.088210][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 219.088395][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 219.092353][ T8914] CPU1 is up [ 219.187755][ T1866] nvme nvme0: 2/0/0 default/read/poll queues [ 219.194537][ T6777] gve 0000:00:00.0 enp0s0: Device link is up. [ 219.437234][ T8914] OOM killer enabled. [ 219.437253][ T8914] Restarting tasks: Starting [ 219.445677][ T8914] Restarting tasks: Done [ 219.445981][ T8914] random: crng reseeded on system resumption [ 219.446609][ T8914] PM: suspend exit [ 220.000695][ T4721] Bluetooth: hci0: command 0x0406 tx timeout [ 220.868569][ T4721] Bluetooth: hci2: command 0x0406 tx timeout [ 220.868815][ T4715] Bluetooth: hci4: command 0x0406 tx timeout [ 220.868841][ T4715] Bluetooth: hci3: command 0x0406 tx timeout [ 222.254940][ T4721] Bluetooth: hci0: command 0x0406 tx timeout [ 223.122286][ T4731] Bluetooth: hci3: command 0x0406 tx timeout [ 223.122331][ T4731] Bluetooth: hci4: command 0x0406 tx timeout [ 223.122364][ T4721] Bluetooth: hci2: command 0x0406 tx timeout