last executing test programs: 7.828429765s ago: executing program 1 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x40000007, 0x21, 0x0, 0x1b, 0x4, 0xc0, 0x2, 0x12b, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000210000a99a00080004000025000008001b00"], 0x30}}, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 7.610395684s ago: executing program 0 (id=205): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") setxattr$security_ima(&(0x7f0000000100)='./file3\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x700, 0x0) 6.534497491s ago: executing program 0 (id=207): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3818014, &(0x7f0000000000)={[{@errors_remount}, {@dioread_nolock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000000380)="$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") 3.673463486s ago: executing program 0 (id=213): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000900)={'ip6_vti0\x00', @random="e4ff002000"}) 3.561544551s ago: executing program 0 (id=215): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000003c0)=0x1ff, 0x8) 3.4423953s ago: executing program 0 (id=218): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000100)=""/222, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000080)={0x28, r3, 0x301, 0x70bd28, 0x25dfdbf8, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xe529, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x9000}, 0x20044884) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 2.929280076s ago: executing program 1 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="7e0033008000e100ffffffffffff0802110000005050505050500020230100000601010101010000018c"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 2.873923579s ago: executing program 1 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) io_setup(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2.873508166s ago: executing program 3 (id=229): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000000500)=""/176, 0xb0}], 0x6}, 0x10100) 2.814993448s ago: executing program 4 (id=231): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$ublk_chdev(&(0x7f0000000fc0), 0x0, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$ublk_chdev(&(0x7f0000004000), 0x0, 0x40) 2.810933477s ago: executing program 3 (id=232): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000800)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) write$binfmt_format(r0, &(0x7f0000000840)='0\x00', 0x2) 2.802429539s ago: executing program 2 (id=233): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 2.618468472s ago: executing program 4 (id=234): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1301", @ANYBLOB=' '], 0x16) 1.901619555s ago: executing program 0 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='mem\n', 0x4) 1.867574519s ago: executing program 3 (id=236): r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x141000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) tgkill(r5, r5, 0x39) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x3231564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x400000}]}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x6c}, {0x18, 0x1}, {0x30}, {0x5, 0x1}, {0x12, 0x1}, {0x60}, {0x1b, 0x1}, {0x3}, {0x9}, {0x1}, {0x0, 0x1}, {0x9, 0x1}, {0x24}, {0x9, 0x1}, {0x1b}, {0x6}, {0xc}, {0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000080) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.791516932s ago: executing program 2 (id=237): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x274, &(0x7f00000005c0)="$eJzs3cFrk2ccB/Bf2nRJCyM5DMrGYO/YZafQduyeMjoYC2xs5KAni01RmlpooaCHtrfi/6D/gh69Ch7Eq/+ACFIFL9ZTD0IkvmlNahIbbRqxn8+lP5739+V5nrcveemhTy79uLqytLaxvL+/F/l8JrLlKMdBJooxFuOR2gkA4Gty0GjEq0Zq1GsBAM6G9z8AnD/93v+ZnaOxf89+ZQDAsHzW3/9jQ1kSADBk/1+4+Pd8pbLwX5LkI1Z3N6ub1fRnen1+Oa5GPWoxE4V4E9E4ktZ//lVZmEmanhcjv7o9lua3N6vjnfnZKESxe342SUW1mTvMT8RUK/9kKmoxF4X4rnt+rmv+m/j1l7b5S1GIx5djLeqxFM1sms9FxNZskvzxT+VYPveuDwAAAAAAAAAAAAAAAAAAAAAAhqGUHCl2nn+Tnt9TKvW6nubbzwea7Hc+UGP72Pk62fghO9q9AwAAAAAAAAAAAAAAAAAAwJdi4/qNlcV6vbber7j26M6DvVwa+Ghz/yLTmnew1G7fnsmT7eJY8e3Pz251u5SL3KD359OKiYhoH0laU97/aYiTnlbxcO/K979tTP/eqyey7SM3m1vt6OnxIGWHdcNfFiI6RyZat7ter+UHfiDbi7uHRfn1Bz2Hj1JtfXLUv7jp2+XFe1tPX5w01edDozF+2h9DAAAAAAAAAAAAAAAAAABAx/+3j3olAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA677//f9AiFx0j+Z7NmZ1RbxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPvbQAAAP//Th2Rtg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.727250076s ago: executing program 1 (id=238): unshare(0x64000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x6, 0xa247, 0x2]}, &(0x7f0000000280)=0x44) 1.673788564s ago: executing program 2 (id=239): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000057c0)=@ethtool_regs={0x4, 0x3}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 1.554558922s ago: executing program 2 (id=240): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) readv(r0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/170, 0xaa}], 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) 1.32064435s ago: executing program 4 (id=241): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast2, 0xb}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 1.304319578s ago: executing program 4 (id=242): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005700)=""/4083, 0xff3}, {&(0x7f0000000ac0)=""/4067, 0xfe3}, {&(0x7f0000001f80)=""/4144, 0x1030}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000002fc0)=""/204, 0xcc}, {&(0x7f0000000280)=""/164, 0xa4}], 0x6}, 0x0) 1.246514527s ago: executing program 4 (id=243): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 1.246402079s ago: executing program 1 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 1.239432331s ago: executing program 1 (id=245): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 1.239205731s ago: executing program 4 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r3, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) ioctl$UBLK_U_CMD_ADD_DEV(r3, 0xc0207504, &(0x7f0000000280)={0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x2, 0xc65, 0x0, 0x0, 0x1000, 0x2, r0, 0x0, 0x100}}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 153.949456ms ago: executing program 3 (id=247): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f00000000c0)=@usbdevfs_driver={0x3, 0x7, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 94.509405ms ago: executing program 2 (id=248): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000081000000810000999900", 0x20, 0x200000c4, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xc, 0x6, @broadcast}, 0x14) 72.342577ms ago: executing program 3 (id=249): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5dc, 0x0, 0x0, 0xfffffffffffffec8) 19.4414ms ago: executing program 2 (id=250): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@sysvgroups}, {@errors_continue}, {@grpjquota}, {@nodioread_nolock}, {@jqfmt_vfsv1}, {@i_version}, {@dax, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl(r2, 0x8b32, &(0x7f0000000040)) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x2, &(0x7f0000000040)={0x5, 0x5}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) sched_setscheduler(0x0, 0x0, 0x0) epoll_create1(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f03d, 0x5}) 0s ago: executing program 3 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x200) kernel console output (not intermixed with test programs): [ 8.218413][ T4398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8.223213][ T4398] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 8.261610][ T1286] gve 0000:00:00.0 enp0s0: Device link is up. Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. syzkaller login: [ 28.353456][ T4697] cgroup: Unknown subsys name 'net' [ 28.434598][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.436614][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.615112][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.452850][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.453471][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.454153][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.454430][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.454807][ T4725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.455120][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.455307][ T4725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.455467][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.455621][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.456175][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.456570][ T4725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.456739][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.457800][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.461151][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.466108][ T4723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.467736][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.468018][ T4723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.468237][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.468350][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.469204][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.469721][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.470395][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.470557][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.470670][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.472444][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.845228][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.845499][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.845740][ T4718] bridge_slave_0: entered allmulticast mode [ 29.846205][ T4718] bridge_slave_0: entered promiscuous mode [ 29.860698][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.861834][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.861898][ T4718] bridge_slave_1: entered allmulticast mode [ 29.862335][ T4718] bridge_slave_1: entered promiscuous mode [ 29.869124][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.870439][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.873076][ T4709] bridge_slave_0: entered allmulticast mode [ 29.874886][ T4709] bridge_slave_0: entered promiscuous mode [ 29.889084][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.889843][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.889904][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.889971][ T4709] bridge_slave_1: entered allmulticast mode [ 29.890414][ T4709] bridge_slave_1: entered promiscuous mode [ 29.905286][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.911315][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.911670][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.911952][ T4721] bridge_slave_0: entered allmulticast mode [ 29.912394][ T4721] bridge_slave_0: entered promiscuous mode [ 29.925654][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.925736][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.925790][ T4721] bridge_slave_1: entered allmulticast mode [ 29.926645][ T4721] bridge_slave_1: entered promiscuous mode [ 29.937828][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.939082][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.940411][ T4712] bridge_slave_0: entered allmulticast mode [ 29.941934][ T4712] bridge_slave_0: entered promiscuous mode [ 29.945235][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.946320][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.950408][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.954227][ T4718] team0: Port device team_slave_0 added [ 29.955051][ T4718] team0: Port device team_slave_1 added [ 29.958577][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.959804][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.961119][ T4712] bridge_slave_1: entered allmulticast mode [ 29.962261][ T4712] bridge_slave_1: entered promiscuous mode [ 29.969769][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.984200][ T4709] team0: Port device team_slave_0 added [ 29.985065][ T4709] team0: Port device team_slave_1 added [ 29.988145][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.988170][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.988182][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.989056][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.989064][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.989080][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.995099][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.995122][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.995218][ T4710] bridge_slave_0: entered allmulticast mode [ 29.995610][ T4710] bridge_slave_0: entered promiscuous mode [ 29.996268][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.996286][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.996366][ T4710] bridge_slave_1: entered allmulticast mode [ 29.996757][ T4710] bridge_slave_1: entered promiscuous mode [ 30.007765][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.008676][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.021383][ T4721] team0: Port device team_slave_0 added [ 30.026210][ T4721] team0: Port device team_slave_1 added [ 30.028146][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.029501][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.033305][ T4712] team0: Port device team_slave_0 added [ 30.034545][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.034568][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.034582][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.035153][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.035160][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.035174][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.048653][ T4718] hsr_slave_0: entered promiscuous mode [ 30.049026][ T4718] hsr_slave_1: entered promiscuous mode [ 30.059908][ T4712] team0: Port device team_slave_1 added [ 30.062932][ T4709] hsr_slave_0: entered promiscuous mode [ 30.064442][ T4709] hsr_slave_1: entered promiscuous mode [ 30.065866][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.067095][ T4709] Cannot create hsr debugfs directory [ 30.068520][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.068544][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.068557][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.069113][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.069120][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.069134][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.072738][ T4710] team0: Port device team_slave_0 added [ 30.073778][ T4710] team0: Port device team_slave_1 added [ 30.093246][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.093271][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.093286][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.093728][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.093735][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.093747][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.094886][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.094896][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.094914][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.108166][ T4721] hsr_slave_0: entered promiscuous mode [ 30.108491][ T4721] hsr_slave_1: entered promiscuous mode [ 30.108707][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 30.108718][ T4721] Cannot create hsr debugfs directory [ 30.109029][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.109037][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.109053][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.137522][ T4710] hsr_slave_0: entered promiscuous mode [ 30.138858][ T4710] hsr_slave_1: entered promiscuous mode [ 30.140120][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.140145][ T4710] Cannot create hsr debugfs directory [ 30.148631][ T4712] hsr_slave_0: entered promiscuous mode [ 30.148967][ T4712] hsr_slave_1: entered promiscuous mode [ 30.149168][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.149177][ T4712] Cannot create hsr debugfs directory [ 30.276202][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.278880][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.279628][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.281581][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.288503][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.289486][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.289802][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.291158][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.307883][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.307937][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.308086][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.308132][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.314466][ T4709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.317006][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.318637][ T4709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.320612][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.333809][ T4709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.336343][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.336914][ T4709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.338473][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.353501][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.355769][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.357648][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.359880][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.365317][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.367941][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.370216][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.372316][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.374383][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.385001][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.385047][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.385160][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.385205][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.398866][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.402847][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.403329][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.404495][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.406787][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.420822][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.420895][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.422167][ T4721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.424587][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.424993][ T4721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.429119][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.429523][ T4721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.431175][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.437842][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.437883][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.440653][ T4721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.443556][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.470624][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.479221][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.495517][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.499743][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.518301][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.518350][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.518717][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.518735][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.519632][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.519656][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.527522][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.529607][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.530517][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.534405][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.547590][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.549781][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.550134][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.552715][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.558487][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.558539][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.617557][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.631177][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.644324][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.664512][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.669173][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.669216][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.669577][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.669602][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.678081][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.678122][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.682755][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.682792][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.697774][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.699736][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.737380][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.755136][ T4718] veth0_vlan: entered promiscuous mode [ 30.767829][ T4718] veth1_vlan: entered promiscuous mode [ 30.785576][ T4718] veth0_macvtap: entered promiscuous mode [ 30.790312][ T4718] veth1_macvtap: entered promiscuous mode [ 30.795530][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.805238][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.820177][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.831291][ T1286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.831409][ T1286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.831674][ T1286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.831692][ T1286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.864273][ T4710] veth0_vlan: entered promiscuous mode [ 30.866237][ T4710] veth1_vlan: entered promiscuous mode [ 30.895047][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.899779][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.899808][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.911560][ T4709] veth0_vlan: entered promiscuous mode [ 30.916048][ T4709] veth1_vlan: entered promiscuous mode [ 30.921665][ T4710] veth0_macvtap: entered promiscuous mode [ 30.944275][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.944312][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.945778][ T4709] veth0_macvtap: entered promiscuous mode [ 30.953503][ T4710] veth1_macvtap: entered promiscuous mode [ 30.960089][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.966897][ T4709] veth1_macvtap: entered promiscuous mode [ 30.970880][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.981258][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.985336][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.985611][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.985656][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.985683][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.007637][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.014136][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.026955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.026991][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.029461][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.034338][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.034398][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.034418][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.034434][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.048823][ T4718] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.061971][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.062000][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.108501][ T4891] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 31.119645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.119677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.130321][ T4712] veth0_vlan: entered promiscuous mode [ 31.136657][ T4712] veth1_vlan: entered promiscuous mode [ 31.156796][ T4721] veth0_vlan: entered promiscuous mode [ 31.166910][ T4721] veth1_vlan: entered promiscuous mode [ 31.169157][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.169193][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.177693][ T4712] veth0_macvtap: entered promiscuous mode [ 31.184634][ T4712] veth1_macvtap: entered promiscuous mode [ 31.185707][ T4893] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 31.188988][ T4893] syzkaller0: entered promiscuous mode [ 31.189296][ T4893] syzkaller0: entered allmulticast mode [ 31.199695][ T4895] syzkaller0: entered promiscuous mode [ 31.199725][ T4895] syzkaller0: entered allmulticast mode [ 31.209973][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.220970][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.235688][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.246091][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.246147][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.246180][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.252244][ T4721] veth0_macvtap: entered promiscuous mode [ 31.253388][ T4721] veth1_macvtap: entered promiscuous mode [ 31.273945][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.284373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.284402][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.285474][ T4897] syzkaller0: entered promiscuous mode [ 31.285485][ T4897] syzkaller0: entered allmulticast mode [ 31.291266][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.297073][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.297175][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.297200][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.297222][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.317246][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.317274][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.337397][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.338807][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.353972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.353999][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.365911][ T4899] loop0: detected capacity change from 0 to 128 [ 31.368174][ T4899] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.375462][ T4899] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.413406][ T4901] syzkaller0: entered promiscuous mode [ 31.414462][ T4901] syzkaller0: entered allmulticast mode [ 31.446057][ T4903] syzkaller0: entered promiscuous mode [ 31.446088][ T4903] syzkaller0: entered allmulticast mode [ 31.536168][ T4713] Bluetooth: hci4: command tx timeout [ 31.541940][ T4713] Bluetooth: hci2: command tx timeout [ 31.543220][ T4713] Bluetooth: hci0: command tx timeout [ 31.544329][ T4713] Bluetooth: hci1: command tx timeout [ 31.545410][ T4713] Bluetooth: hci3: command tx timeout [ 32.423120][ T4910] TC_ACT_REPEAT abuse ? [ 32.913783][ T4918] loop3: detected capacity change from 0 to 1024 [ 32.914159][ T4918] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.868120][ T4717] Bluetooth: hci3: command tx timeout [ 33.868172][ T4717] Bluetooth: hci1: command tx timeout [ 33.868195][ T4717] Bluetooth: hci0: command tx timeout [ 33.868216][ T4717] Bluetooth: hci2: command tx timeout [ 33.868234][ T4717] Bluetooth: hci4: command tx timeout [ 33.901151][ T4918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.243158][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.258402][ T4925] bridge_slave_0: left allmulticast mode [ 34.258439][ T4925] bridge_slave_0: left promiscuous mode [ 34.258531][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.280580][ T4925] bridge_slave_1: left allmulticast mode [ 34.284691][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 34.286378][ T4925] bridge_slave_1: left promiscuous mode [ 34.287615][ T4925] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.298202][ T4925] bond0: (slave bond_slave_0): Releasing backup interface [ 34.617639][ T4925] bond0: (slave bond_slave_1): Releasing backup interface [ 34.646956][ T4925] team0: Port device team_slave_0 removed [ 34.649491][ T4925] team0: Port device team_slave_1 removed [ 34.650191][ T4925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.650203][ T4925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.652810][ T4925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.652830][ T4925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.655321][ T4925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 34.657688][ T4930] team0: Mode changed to "random" [ 34.672994][ T4944] vlan0: entered promiscuous mode [ 34.677196][ T4944] team0: Port device vlan0 added [ 34.713858][ T4947] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 34.715794][ T4948] tipc: Started in network mode [ 34.715833][ T4948] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 34.715945][ T4948] tipc: Enabled bearer , priority 0 [ 34.825483][ T4955] warning: `syz.1.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 35.317117][ T4968] syzkaller0: entered promiscuous mode [ 35.317152][ T4968] syzkaller0: entered allmulticast mode [ 35.655335][ T4974] netlink: 'syz.0.25': attribute type 13 has an invalid length. [ 35.901254][ T4983] Injecting memory failure for pfn 0x135e86 at process virtual address 0x20000000 [ 35.910596][ T4958] tipc: Node number set to 11578026 [ 35.945228][ T4717] Bluetooth: hci2: command tx timeout [ 35.945311][ T4717] Bluetooth: hci0: command tx timeout [ 35.945523][ T4717] Bluetooth: hci1: command tx timeout [ 35.945643][ T4717] Bluetooth: hci3: command tx timeout [ 35.947954][ T4713] Bluetooth: hci4: command tx timeout [ 36.006595][ T4975] syzkaller0: entered promiscuous mode [ 36.006612][ T4975] syzkaller0: entered allmulticast mode [ 36.032697][ T4983] Memory failure: 0x135e86: Sending SIGBUS to syz.3.29:4983 due to hardware memory corruption [ 36.032788][ T4983] Memory failure: 0x135e86: recovery action for dirty LRU page: Recovered [ 36.032817][ T4983] Injecting memory failure for pfn 0x135e85 at process virtual address 0x20001000 [ 36.035582][ T4983] Memory failure: 0x135e85: Sending SIGBUS to syz.3.29:4983 due to hardware memory corruption [ 36.035613][ T4983] Memory failure: 0x135e85: recovery action for dirty LRU page: Recovered [ 36.035624][ T4983] Injecting memory failure for pfn 0x135e84 at process virtual address 0x20002000 [ 36.035661][ T4983] Memory failure: 0x135e84: Sending SIGBUS to syz.3.29:4983 due to hardware memory corruption [ 36.035678][ T4983] Memory failure: 0x135e84: recovery action for dirty LRU page: Recovered [ 36.106341][ T4975] tipc: Enabled bearer , priority 0 [ 36.125312][ T4973] tipc: Resetting bearer [ 36.158685][ T4973] tipc: Disabling bearer [ 36.227555][ T4980] syzkaller0: entered promiscuous mode [ 36.228637][ T4980] syzkaller0: entered allmulticast mode [ 36.784300][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 36.790382][ T4713] Bluetooth: hci0: Unknown advertising packet type: 0x18 [ 36.790720][ T4713] Bluetooth: hci0: Unknown advertising packet type: 0x1e [ 36.793449][ T4713] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 36.793461][ T4713] Bluetooth: hci0: Malformed LE Event: 0x0d [ 38.022312][ T4723] Bluetooth: hci3: command tx timeout [ 38.022351][ T4723] Bluetooth: hci1: command tx timeout [ 38.022380][ T4723] Bluetooth: hci0: command tx timeout [ 38.022399][ T4723] Bluetooth: hci2: command tx timeout [ 38.026336][ T4713] Bluetooth: hci4: command tx timeout [ 38.525002][ T5033] syzkaller0: entered promiscuous mode [ 38.525043][ T5033] syzkaller0: entered allmulticast mode [ 40.317731][ T5053] loop2: detected capacity change from 0 to 512 [ 40.318099][ T5053] vfat: Unknown parameter '' [ 40.367564][ T1202] Bluetooth: Error in BCSP hdr checksum [ 40.477258][ T30] audit: type=1326 audit(40.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5054 comm="syz.3.48" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0177fe8 code=0x0 [ 40.648452][ T5060] syzkaller0: entered promiscuous mode [ 40.649692][ T5060] syzkaller0: entered allmulticast mode [ 42.703761][ T4717] Bluetooth: hci5: command 0x1003 tx timeout [ 42.721843][ T4713] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 43.345692][ T5100] loop2: detected capacity change from 0 to 1024 [ 43.346110][ T5100] ======================================================= [ 43.346110][ T5100] WARNING: The mand mount option has been deprecated and [ 43.346110][ T5100] and is ignored by this kernel. Remove the mand [ 43.346110][ T5100] option from the mount to silence this warning. [ 43.346110][ T5100] ======================================================= [ 43.380898][ T5097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.381543][ T5094] syzkaller0: entered promiscuous mode [ 43.381555][ T5094] syzkaller0: entered allmulticast mode [ 43.392378][ T5100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.647873][ T5094] Zero length message leads to an empty skb [ 43.758394][ T5097] team0: No ports can be present during mode change [ 43.765063][ T5097] team0: Device xfrm0 failed to enter team mode [ 43.765093][ T5097] team0: Device xfrm0 failed to enter team mode [ 43.777856][ T5097] tipc: Enabling of bearer rejected, already enabled [ 44.111480][ T5113] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 44.111509][ T5113] PKCS7: Only support pkcs7_signedData type [ 44.177547][ T5096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.492675][ T5114] syzkaller0: entered promiscuous mode [ 44.492725][ T5114] syzkaller0: entered allmulticast mode [ 44.678798][ T5121] binder: 5120:5121 tried to acquire reference to desc 0, got 1 instead [ 44.785271][ T5122] binder: release 5120:5122 transaction 12 out, still active [ 44.785307][ T5122] binder: undelivered TRANSACTION_COMPLETE [ 44.788055][ T5122] binder: 5120:5122 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.788082][ T5122] binder: 5122 RLIMIT_NICE not set [ 44.788153][ T5122] binder: 5122 RLIMIT_NICE not set [ 44.788444][ T5122] binder: 5122 RLIMIT_NICE not set [ 44.788457][ T5122] binder: 5122:5120 reply target not found [ 44.788478][ T5122] binder: 5120:5122 transaction reply to 0:0 failed 13/29189/0, code 0 size 0-0 line 3184 [ 44.788499][ T5122] binder: send failed reply for transaction 12, target dead [ 44.790374][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.907757][ T4804] binder: send failed reply for transaction 5 to 5120:5121 [ 45.907844][ T4804] binder: undelivered TRANSACTION_COMPLETE [ 45.907855][ T4804] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.907865][ T4804] binder: undelivered TRANSACTION_ERROR: 29190 [ 46.063969][ T5133] loop2: detected capacity change from 0 to 512 [ 46.346131][ T5133] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.349649][ T5132] loop4: detected capacity change from 0 to 128 [ 46.351437][ T5133] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.65: bg 0: block 63: padding at end of block bitmap is not set [ 46.351492][ T5133] loop2: lost filesystem error report for type 5 error -117 [ 46.351798][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 46.351810][ C0] EXT4-fs (loop2): initial error at time 46: ext4_validate_block_bitmap:441 [ 46.351822][ C0] EXT4-fs (loop2): last error at time 46: ext4_validate_block_bitmap:441 [ 46.354898][ T5133] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.355111][ T5133] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.65: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 46.355149][ T5133] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.368081][ T5133] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.65: ea_inode dec ref err=-117 [ 46.368311][ T5133] EXT4-fs (loop2): 1 orphan inode deleted [ 46.368768][ T5133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.388469][ T5132] EXT4-fs (loop4): Test dummy encryption mode enabled [ 46.431560][ T5132] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.697651][ T4713] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 46.697757][ T4713] CPU: 0 UID: 0 PID: 4713 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT [ 46.697770][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 46.697776][ T4713] Workqueue: hci2 hci_rx_work [ 46.697799][ T4713] Call trace: [ 46.697802][ T4713] show_stack+0x2c/0x3c (C) [ 46.697821][ T4713] __dump_stack+0x30/0x40 [ 46.697834][ T4713] dump_stack_lvl+0xd8/0x12c [ 46.697846][ T4713] dump_stack+0x1c/0x28 [ 46.697857][ T4713] sysfs_warn_dup+0x9c/0xb8 [ 46.697870][ T4713] sysfs_create_dir_ns+0x190/0x1f4 [ 46.697881][ T4713] kobject_add_internal+0x290/0x6f0 [ 46.697891][ T4713] kobject_add_varg+0x9c/0xe8 [ 46.697904][ T4713] kobject_add+0x110/0x1c8 [ 46.697916][ T4713] device_add+0x394/0x9e0 [ 46.697930][ T4713] hci_conn_add_sysfs+0xbc/0x1e8 [ 46.697941][ T4713] le_conn_complete_evt+0xc68/0x10f8 [ 46.697951][ T4713] hci_le_conn_complete_evt+0x114/0x3d8 [ 46.697959][ T4713] hci_le_meta_evt+0x2b0/0x46c [ 46.697970][ T4713] hci_event_packet+0x4c0/0x9c8 [ 46.697980][ T4713] hci_rx_work+0x2f4/0xd78 [ 46.697992][ T4713] process_scheduled_works+0x788/0x10b8 [ 46.698003][ T4713] worker_thread+0x798/0xbd0 [ 46.698013][ T4713] kthread+0x304/0x3d4 [ 46.698028][ T4713] ret_from_fork+0x10/0x20 [ 46.698103][ T4713] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.698184][ T4713] Bluetooth: hci2: failed to register connection device [ 46.749648][ T5137] nvme_fabrics: missing parameter 'transport=%s' [ 46.749660][ T5137] nvme_fabrics: missing parameter 'nqn=%s' [ 46.759051][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.980736][ T5148] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 47.007580][ T5154] syzkaller0: entered promiscuous mode [ 47.007618][ T5154] syzkaller0: entered allmulticast mode [ 47.096015][ T5156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.446966][ T5163] loop3: detected capacity change from 0 to 8192 [ 47.514451][ T5163] loop3: p1 p2 p3 p4[EZD] [ 47.514486][ T5163] loop3: partition table partially beyond EOD, truncated [ 47.515855][ T5163] loop3: p1 start 16384 is beyond EOD, truncated [ 47.515871][ T5163] loop3: p2 size 150994944 extends beyond EOD, truncated [ 47.520048][ T5163] loop3: p3 start 67108864 is beyond EOD, truncated [ 47.520106][ T5163] loop3: p4 size 33555584 extends beyond EOD, truncated [ 47.607197][ T5168] input: syz0 as /devices/virtual/input/input2 [ 48.775914][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 48.776823][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 48.829114][ T4721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.888152][ T5194] loop1: detected capacity change from 0 to 512 [ 49.894335][ T5194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 49.946584][ T5194] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.82: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 49.946633][ T5194] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 49.951756][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 49.951783][ C0] EXT4-fs (loop1): last error at time 49: ext4_ext_check_inode:521: inode 4 [ 49.956411][ T5194] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.82: Bad quota inode: 4, type: 1 [ 49.958354][ T5194] loop1: lost filesystem error report for type 5 error -117 [ 49.958619][ T5194] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.965427][ T5194] EXT4-fs (loop1): mount failed [ 49.970600][ T5191] syzkaller0: entered promiscuous mode [ 49.973092][ T5191] syzkaller0: entered allmulticast mode [ 51.780566][ T5228] loop4: detected capacity change from 0 to 512 [ 52.072553][ T30] audit: type=1400 audit(51.900:3): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="lowerdir" requested=w pid=5224 comm="syz.3.87" name="file1" dev="tmpfs" ino=117 [ 52.090762][ T5228] EXT4-fs (loop4): Test dummy encryption mode enabled [ 52.155109][ T5228] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.88: inode has both inline data and extents flags [ 52.157514][ T5228] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.161754][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 52.161781][ C1] EXT4-fs (loop4): initial error at time 52: ext4_orphan_get:1399: inode 15 [ 52.161812][ C1] EXT4-fs (loop4): last error at time 52: ext4_orphan_get:1399: inode 15 [ 52.213056][ T5228] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.88: couldn't read orphan inode 15 (err -117) [ 52.213102][ T5228] loop4: lost filesystem error report for type 5 error -117 [ 52.217308][ T5228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.222646][ T5228] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 52.439534][ T5239] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4712] was attempted by " syzkaller  [ 53.428220][ T5252] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 53.428267][ T5252] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.571883][ T4713] Bluetooth: hci2: command 0x0406 tx timeout [ 53.642606][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.727325][ T5255] vlan0: left promiscuous mode [ 54.342201][ T5270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.96'. [ 54.343955][ T5270] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.344287][ T5270] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.863829][ T5277] loop2: detected capacity change from 0 to 512 [ 54.876731][ T5277] EXT4-fs (loop2): Test dummy encryption mode enabled [ 54.885963][ T5277] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.100: inode has both inline data and extents flags [ 54.890526][ T5277] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.891259][ T5277] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.100: couldn't read orphan inode 15 (err -117) [ 54.892999][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 54.893011][ C1] EXT4-fs (loop2): initial error at time 54: ext4_orphan_get:1399: inode 15 [ 54.893026][ C1] EXT4-fs (loop2): last error at time 54: ext4_orphan_get:1399: inode 15 [ 54.901124][ T5277] loop2: lost filesystem error report for type 5 error -117 [ 54.902767][ T5277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.339022][ T26] IPVS: starting estimator thread 0... [ 55.611296][ T5297] IPVS: using max 60 ests per chain, 144000 per kthread [ 55.639771][ T5296] overlayfs: missing 'lowerdir' [ 55.806657][ T5300] loop0: detected capacity change from 0 to 128 [ 55.890564][ T5300] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.997187][ T5307] loop4: detected capacity change from 0 to 512 [ 56.279811][ T5308] loop1: detected capacity change from 0 to 512 [ 56.318158][ T5307] EXT4-fs: Ignoring removed oldalloc option [ 56.736265][ T4712] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.756871][ T5307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.853487][ T5321] loop0: detected capacity change from 0 to 512 [ 56.854277][ T5321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.863126][ T5321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 56.863180][ T5321] System zones: 1-12 [ 56.864057][ T5321] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.107: invalid indirect mapped block 8 (level 2) [ 56.864075][ T5321] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.865091][ T5321] EXT4-fs (loop0): 1 truncate cleaned up [ 57.739949][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.885907][ T5330] loop1: detected capacity change from 0 to 256 [ 57.886302][ T5330] vfat: Unexpected value for 'rodir' [ 58.202342][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.717105][ T5336] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 5: comm syz.0.107: lblock 0 mapped to illegal pblock 5 (length 1) [ 58.885249][ T5331] infiniband syz2: set active [ 58.885274][ T5331] infiniband syz2: added ipvlan0 [ 58.930438][ T5336] EXT4-fs warning (device loop0): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.0.107: error -EUCLEAN reading directory block [ 59.122358][ T5331] RDS/IB: syz2: added [ 59.122472][ T5331] smc: adding ib device syz2 with port count 1 [ 59.122519][ T5331] smc: ib device syz2 port 1 has no pnetid [ 59.847370][ T9] IPVS: starting estimator thread 0... [ 59.962733][ T5350] IPVS: using max 58 ests per chain, 139200 per kthread [ 59.966180][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.317876][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.447992][ T5369] Cannot find map_set index 0 as target [ 60.709149][ T5376] loop0: detected capacity change from 0 to 512 [ 60.712790][ T5376] EXT4-fs (loop0): Test dummy encryption mode enabled [ 60.716107][ T5376] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.119: inode has both inline data and extents flags [ 60.716517][ T5376] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.717129][ T5376] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.119: couldn't read orphan inode 15 (err -117) [ 60.717144][ T5376] loop0: lost filesystem error report for type 5 error -117 [ 60.718100][ T5376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.021005][ T5384] overlayfs: missing 'lowerdir' [ 62.221485][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.260628][ T5402] loop1: detected capacity change from 0 to 256 [ 62.628889][ T4957] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.785144][ T5419] syz.4.132 uses obsolete (PF_INET,SOCK_PACKET) [ 62.787512][ T5417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.329096][ T5423] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 63.329128][ T5423] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 63.857689][ T5436] loop1: detected capacity change from 0 to 8 [ 63.960983][ T5436] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 63.961015][ T5436] unable to read xattr id index table [ 63.988101][ T5438] FAT-fs (nullb0): bogus number of reserved sectors [ 63.988138][ T5438] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 64.097310][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.098983][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.138259][ T4717] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 64.138315][ T5444] process 'syz.2.137' launched './file1' with NULL argv: empty string added [ 64.140943][ T4717] CPU: 1 UID: 0 PID: 4717 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT [ 64.140961][ T4717] Tainted: [L]=SOFTLOCKUP [ 64.140965][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.140971][ T4717] Workqueue: hci3 hci_rx_work [ 64.140990][ T4717] Call trace: [ 64.140993][ T4717] show_stack+0x2c/0x3c (C) [ 64.141009][ T4717] __dump_stack+0x30/0x40 [ 64.141021][ T4717] dump_stack_lvl+0xd8/0x12c [ 64.141036][ T4717] dump_stack+0x1c/0x28 [ 64.141048][ T4717] sysfs_warn_dup+0x9c/0xb8 [ 64.141060][ T4717] sysfs_create_dir_ns+0x190/0x1f4 [ 64.141072][ T4717] kobject_add_internal+0x290/0x6f0 [ 64.141081][ T4717] kobject_add_varg+0x9c/0xe8 [ 64.141094][ T4717] kobject_add+0x110/0x1c8 [ 64.141105][ T4717] device_add+0x394/0x9e0 [ 64.141119][ T4717] hci_conn_add_sysfs+0xbc/0x1e8 [ 64.141129][ T4717] le_conn_complete_evt+0xc68/0x10f8 [ 64.141139][ T4717] hci_le_conn_complete_evt+0x114/0x3d8 [ 64.141148][ T4717] hci_le_meta_evt+0x2b0/0x46c [ 64.141158][ T4717] hci_event_packet+0x4c0/0x9c8 [ 64.141168][ T4717] hci_rx_work+0x2f4/0xd78 [ 64.141180][ T4717] process_scheduled_works+0x788/0x10b8 [ 64.141191][ T4717] worker_thread+0x798/0xbd0 [ 64.141201][ T4717] kthread+0x304/0x3d4 [ 64.141209][ T4717] ret_from_fork+0x10/0x20 [ 64.141856][ T4717] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 64.141881][ T4717] Bluetooth: hci3: failed to register connection device [ 64.393996][ T4717] Bluetooth: hci0: command tx timeout [ 64.463645][ T5448] loop4: detected capacity change from 0 to 4096 [ 64.475315][ T5448] EXT4-fs (loop4): Test dummy encryption mode enabled [ 64.476625][ T5448] EXT4-fs (loop4): bs(8192) > ps(4096) unsupported for encrypt [ 64.493753][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495026][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.498841][ T5451] loop1: detected capacity change from 0 to 8192 [ 64.503613][ T1013] cfg80211: failed to load regulatory.db [ 64.955469][ T5457] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 64.988305][ T5460] loop2: detected capacity change from 0 to 1024 [ 64.988771][ T5460] EXT4-fs: Ignoring removed bh option [ 64.989927][ T5460] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 65.003353][ T5460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 65.003415][ T5460] System zones: 0-1, 3-12 [ 65.003967][ T5460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.083696][ T5468] loop1: detected capacity change from 0 to 2048 [ 65.124331][ T5468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.429322][ T5468] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.863724][ T5463] loop3: detected capacity change from 0 to 8192 [ 65.912207][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.380046][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.487592][ T5500] xt_SECMARK: invalid mode: 2 [ 67.745894][ T5519] loop3: detected capacity change from 0 to 512 [ 67.762848][ T5519] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.768325][ T5519] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.163: corrupted inode contents [ 67.770500][ T5519] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.771759][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 67.771781][ C0] EXT4-fs (loop3): initial error at time 67: ext4_do_update_inode:5742: inode 15 [ 67.771819][ C0] EXT4-fs (loop3): last error at time 67: ext4_do_update_inode:5742: inode 15 [ 67.777296][ T5519] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.163: mark_inode_dirty error [ 67.777330][ T5519] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.779186][ T5519] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.163: corrupted inode contents [ 67.779210][ T5519] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.784470][ T5519] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.163: mark_inode_dirty error [ 67.792980][ T5519] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.051218][ T5526] loop2: detected capacity change from 0 to 128 [ 68.154927][ T5526] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.428981][ T5519] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.163: mark inode dirty (error -117) [ 68.564062][ T5531] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 68.564086][ T5531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.564685][ T5531] vhci_hcd vhci_hcd.0: Device attached [ 68.801282][ T5533] vhci_hcd: connection closed [ 68.825585][ T1202] vhci_hcd vhci_hcd.2: stop threads [ 68.827783][ T1202] vhci_hcd vhci_hcd.2: release socket [ 68.829546][ T1202] vhci_hcd vhci_hcd.2: disconnect device [ 68.835100][ T5519] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.933104][ T4818] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 68.993748][ T5519] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 68.993861][ T5519] EXT4-fs (loop3): 1 orphan inode deleted [ 68.994338][ T5519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.036363][ T5541] loop1: detected capacity change from 0 to 2048 [ 69.060794][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.095926][ T5541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 69.112540][ T5541] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.167: inline data xattr refers to an external xattr inode [ 69.131426][ T5552] loop0: detected capacity change from 0 to 512 [ 69.133661][ T5552] EXT4-fs (loop0): invalid inodes per group: 32766 [ 69.133661][ T5552] [ 69.140730][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 69.144095][ T5554] loop3: detected capacity change from 0 to 512 [ 69.151005][ T5554] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.173: corrupted in-inode xattr: e_value size too large [ 69.151046][ T5554] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.153840][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 69.153865][ C1] EXT4-fs (loop3): initial error at time 69: ext4_iget_extra_inode:5180: inode 15 [ 69.153885][ C1] EXT4-fs (loop3): last error at time 69: ext4_iget_extra_inode:5180: inode 15 [ 69.161446][ T5554] EXT4-fs (loop3): Remounting filesystem read-only [ 69.171394][ T5554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.234549][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.255409][ T5561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.297258][ T5567] Option '&7f%R(ﮘWO]mA(BeTv_bJqQ-I:' to dns_resolver key: bad/missing value [ 69.465492][ T5569] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 69.483453][ T5569] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 70.300611][ T5573] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 70.345717][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.453364][ T30] audit: type=1400 audit(70.350:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5577 comm="syz.1.180" src=1 netif=wpan0 [ 70.944450][ T30] audit: type=1400 audit(70.920:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5587 comm="syz.3.185" src=1 netif=wpan0 [ 71.085348][ T5611] loop0: detected capacity change from 0 to 512 [ 71.086174][ T5611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.091089][ T5611] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.091146][ T5611] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 71.091184][ T5611] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.091296][ T5611] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.091328][ T5611] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 71.091363][ T5611] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.091375][ T5611] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 71.095127][ T5611] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.193: bg 0: block 40: padding at end of block bitmap is not set [ 71.095149][ T5611] loop0: lost filesystem error report for type 5 error -117 [ 71.096284][ T5611] EXT4-fs (loop0): Remounting filesystem read-only [ 71.096346][ T5611] EXT4-fs (loop0): 1 truncate cleaned up [ 71.096797][ T5611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.285800][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 71.442655][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.459930][ T5614] bridge_slave_1: left allmulticast mode [ 71.459963][ T5614] bridge_slave_1: left promiscuous mode [ 71.460084][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.471926][ T5614] bridge_slave_0: left allmulticast mode [ 71.471955][ T5614] bridge_slave_0: left promiscuous mode [ 71.472035][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.529609][ T5619] netlink: 'syz.2.195': attribute type 10 has an invalid length. [ 71.543343][ T5619] team0: Device veth1_vlan failed to register rx_handler [ 71.549782][ T5625] futex_wake_op: syz.0.198 tries to shift op by -1; fix this program [ 71.665405][ T5635] loop2: detected capacity change from 0 to 8192 [ 71.668257][ T5635] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.700954][ T5639] loop0: detected capacity change from 0 to 1024 [ 71.705049][ T5639] EXT4-fs: Ignoring removed orlov option [ 72.748795][ T5639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.161683][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.226066][ T5657] loop0: detected capacity change from 0 to 512 [ 75.244475][ T5661] loop2: detected capacity change from 0 to 512 [ 75.275343][ T5661] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.276794][ T5657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.276835][ T5657] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.282034][ T5661] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.210: bad orphan inode 15 [ 75.282069][ T5661] loop2: lost filesystem error report for type 5 error -117 [ 75.283561][ T5661] ext4_test_bit(bit=14, block=18) = 1 [ 75.283582][ T5661] is_bad_inode(inode)=0 [ 75.283600][ T5661] NEXT_ORPHAN(inode)=1023 [ 75.283611][ T5661] max_ino=32 [ 75.283622][ T5661] i_nlink=0 [ 75.284886][ T5661] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.210: corrupted xattr block 19: e_value size too large [ 75.284921][ T5661] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.286946][ T5661] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 75.287485][ T5661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 75.325507][ T5657] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.325644][ T5657] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.345080][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 75.352069][ T5657] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 75.352125][ T5657] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 75.352142][ T5657] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.207: Failed to acquire dquot type 1 [ 75.352158][ T5657] loop0: lost filesystem error report for type 5 error -117 [ 75.357841][ T5657] EXT4-fs (loop0): Remounting filesystem read-only [ 75.361366][ T5657] EXT4-fs (loop0): 1 truncate cleaned up [ 75.362367][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 75.362377][ C1] EXT4-fs (loop0): initial error at time 75: ext4_acquire_dquot:7041 [ 75.362389][ C1] EXT4-fs (loop0): last error at time 75: ext4_acquire_dquot:7041 [ 75.368042][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.368226][ T12] Quota error (device loop0): write_blk: dquota write failed [ 75.368274][ T12] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 75.368310][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.368345][ T12] Quota error (device loop0): write_blk: dquota write failed [ 75.368378][ T12] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 75.368561][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 75.368595][ T12] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 75.598192][ T5657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.669694][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.678512][ T5672] loop4: detected capacity change from 0 to 128 [ 75.694594][ T5674] loop2: detected capacity change from 0 to 512 [ 75.756121][ T5674] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.214: corrupted in-inode xattr: bad e_name length [ 75.756160][ T5674] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.756338][ T5674] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.214: couldn't read orphan inode 15 (err -117) [ 75.756353][ T5674] loop2: lost filesystem error report for type 5 error -117 [ 75.756896][ T5674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.776107][ T5674] Invalid source name [ 75.788701][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.321927][ T5697] loop4: detected capacity change from 0 to 512 [ 76.324707][ T5697] EXT4-fs: Ignoring removed i_version option [ 76.326916][ T5697] ext2: Unknown parameter 'daxmin_batch_time' [ 76.538251][ T5724] loop2: detected capacity change from 0 to 256 [ 77.476601][ T5724] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 77.478762][ T5724] FAT-fs (loop2): Filesystem has been set read-only [ 77.507875][ T5732] PM: suspend entry (deep) [ 77.528653][ T5730] loop3: detected capacity change from 0 to 1024 [ 77.536810][ T5730] EXT4-fs: Ignoring removed bh option [ 77.550584][ T1202] Filesystems sync: 0.040 seconds [ 77.589113][ T5730] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 77.593116][ T5734] loop2: detected capacity change from 0 to 256 [ 77.593606][ T5734] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.605793][ T5730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 77.607898][ T5730] System zones: 0-1, 3-12 [ 77.624992][ T5730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.163695][ T5732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.163768][ T5732] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.203645][ T5761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.209809][ T5732] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.213012][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.218713][ T5732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.218785][ T5732] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.255146][ T5732] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.267575][ T5732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.267613][ T5732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.334350][ T5732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.345481][ T5761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.350541][ T5732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.359387][ T5732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.360819][ T5732] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.363327][ T5732] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.366517][ T5732] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.370354][ T5732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.374013][ T5773] loop2: detected capacity change from 0 to 512 [ 79.375278][ T5732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.379322][ T5732] Freezing user space processes [ 79.383980][ T5773] EXT4-fs: Ignoring removed i_version option [ 79.386695][ T5773] ext2: Unknown parameter 'daxmin_batch_time' [ 79.410286][ T5761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.458025][ T5761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.512416][ T5044] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.514731][ T5044] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.516616][ T5044] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.518459][ T5044] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.526585][ T5732] Freezing user space processes completed (elapsed 0.138 seconds) [ 79.526679][ T5732] OOM killer disabled. [ 79.526685][ T5732] Freezing remaining freezable tasks [ 79.529117][ T5732] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 79.529133][ T5732] printk: Suspending console(s) (use no_console_suspend to debug) [ 79.589180][ T5732] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 79.589235][ T5732] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 79.589280][ T5732] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 79.589325][ T5732] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 79.605903][ T5732] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 79.605954][ T5732] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 79.605997][ T5732] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 79.606050][ T5732] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 79.606094][ T5732] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 79.606137][ T5732] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 79.606179][ T5732] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 79.606221][ T5732] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 79.606264][ T5732] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 79.606305][ T5732] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 79.606348][ T5732] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 79.606390][ T5732] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 79.692005][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.826984][ T5732] Disabling non-boot CPUs ... [ 79.833825][ T5732] psci: CPU1 killed (polled 0 ms) [ 79.838238][ T5732] ------------[ cut here ]------------ [ 79.838238][ T5732] WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4, CPU#0: syz.0.235/5732 [ 79.838238][ T5732] Modules linked in: [ 79.838238][ T5732] CPU: 0 UID: 0 PID: 5732 Comm: syz.0.235 Tainted: G L syzkaller #0 PREEMPT [ 79.838238][ T5732] Tainted: [L]=SOFTLOCKUP [ 79.838238][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 79.838238][ T5732] pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 79.838238][ T5732] pc : ct_kernel_exit+0x1b4/0x1f4 [ 79.838238][ T5732] lr : ct_kernel_exit+0x13c/0x1f4 [ 79.838238][ T5732] sp : ffff800098e475f0 [ 79.838238][ T5732] x29: ffff800098e475f0 x28: dfff800000000000 x27: ffff800098e47660 [ 79.838238][ T5732] x26: 00000000000000c0 x25: ffff7000131c8ecc x24: ffff800088abf998 [ 79.838238][ T5732] x23: ffff800088b0b6a0 x22: ffff0001ade38998 x21: ffff0001ade38998 [ 79.838238][ T5732] x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff [ 79.838238][ T5732] x17: ffff80008a791000 x16: 0000000000000006 x15: ffff80008a31ada0 [ 79.838238][ T5732] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 79.838238][ T5732] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 79.838238][ T5732] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 79.838238][ T5732] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000868e6858 [ 79.838238][ T5732] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 79.838238][ T5732] Call trace: [ 79.838238][ T5732] ct_kernel_exit+0x1b4/0x1f4 (P) [ 79.838238][ T5732] ct_idle_enter+0x24/0x38 [ 79.838238][ T5732] cpu_suspend+0x264/0x474 [ 79.838238][ T5732] psci_system_suspend_enter+0x4c/0x80 [ 79.838238][ T5732] suspend_devices_and_enter+0x88c/0xd0c [ 79.838238][ T5732] pm_suspend+0x498/0x698 [ 79.838238][ T5732] state_store+0x14c/0x1fc [ 79.838238][ T5732] kobj_attr_store+0x6c/0x90 [ 79.838238][ T5732] sysfs_kf_write+0xe0/0x108 [ 79.838238][ T5732] kernfs_fop_write_iter+0x260/0x3b8 [ 79.838238][ T5732] vfs_write+0x51c/0xa0c [ 79.838238][ T5732] ksys_write+0x12c/0x228 [ 79.838238][ T5732] __arm64_sys_write+0x7c/0x90 [ 79.838238][ T5732] invoke_syscall+0x98/0x244 [ 79.838238][ T5732] el0_svc_common+0xec/0x23c [ 79.838238][ T5732] do_el0_svc+0x4c/0x5c [ 79.838238][ T5732] el0_svc+0x64/0x260 [ 79.838238][ T5732] el0t_64_sync_handler+0x48/0x148 [ 79.838238][ T5732] el0t_64_sync+0x198/0x19c [ 79.838238][ T5732] irq event stamp: 81718 [ 79.838238][ T5732] hardirqs last enabled at (81717): [] _raw_spin_unlock_irq+0x30/0x80 [ 79.838238][ T5732] hardirqs last disabled at (81718): [] arch_suspend_disable_irqs+0x34/0x4c [ 79.838238][ T5732] softirqs last enabled at (80226): [] handle_softirqs+0xc28/0xd98 [ 79.838238][ T5732] softirqs last disabled at (80221): [] __do_softirq+0x14/0x20 [ 79.838238][ T5732] ---[ end trace 0000000000000000 ]--- [ 79.838238][ T5732] ------------[ cut here ]------------ [ 79.838238][ T5732] WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170, CPU#0: syz.0.235/5732 [ 79.838238][ T5732] Modules linked in: [ 79.838238][ T5732] CPU: 0 UID: 0 PID: 5732 Comm: syz.0.235 Tainted: G W L syzkaller #0 PREEMPT [ 79.838238][ T5732] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 79.838238][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 79.838238][ T5732] pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 79.838238][ T5732] pc : ct_kernel_enter+0x138/0x170 [ 79.838238][ T5732] lr : ct_kernel_enter+0xc8/0x170 [ 79.838238][ T5732] sp : ffff800098e475e0 [ 79.838238][ T5732] x29: ffff800098e475e0 x28: dfff800000000000 x27: ffff800098e47660 [ 79.838238][ T5732] x26: 00000000000000c0 x25: ffff7000131c8ecc x24: 0000000100000000 [ 79.838238][ T5732] x23: ffff800088b0b6a0 x22: ffff800088abf998 x21: ffff0001ade38998 [ 79.838238][ T5732] x20: ffff0001ade38998 x19: 0000000000000000 x18: 00000000ffffffff [ 79.838238][ T5732] x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 [ 79.838238][ T5732] x14: ffff0000c5611d40 x13: 0000000000000001 x12: 0000000000000000 [ 79.838238][ T5732] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 79.838238][ T5732] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 79.838238][ T5732] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000868e6a20 [ 79.838238][ T5732] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 79.838238][ T5732] Call trace: [ 79.838238][ T5732] ct_kernel_enter+0x138/0x170 (P) [ 79.838238][ T5732] ct_idle_exit+0x24/0x48 [ 79.838238][ T5732] cpu_suspend+0x2dc/0x474 [ 79.838238][ T5732] psci_system_suspend_enter+0x4c/0x80 [ 79.838238][ T5732] suspend_devices_and_enter+0x88c/0xd0c [ 79.838238][ T5732] pm_suspend+0x498/0x698 [ 79.838238][ T5732] state_store+0x14c/0x1fc [ 79.838238][ T5732] kobj_attr_store+0x6c/0x90 [ 79.838238][ T5732] sysfs_kf_write+0xe0/0x108 [ 79.838238][ T5732] kernfs_fop_write_iter+0x260/0x3b8 [ 79.838238][ T5732] vfs_write+0x51c/0xa0c [ 79.838238][ T5732] ksys_write+0x12c/0x228 [ 79.838238][ T5732] __arm64_sys_write+0x7c/0x90 [ 79.838238][ T5732] invoke_syscall+0x98/0x244 [ 79.838238][ T5732] el0_svc_common+0xec/0x23c [ 79.838238][ T5732] do_el0_svc+0x4c/0x5c [ 79.838238][ T5732] el0_svc+0x64/0x260 [ 79.838238][ T5732] el0t_64_sync_handler+0x48/0x148 [ 79.838238][ T5732] el0t_64_sync+0x198/0x19c [ 79.838238][ T5732] irq event stamp: 81720 [ 79.838238][ T5732] hardirqs last enabled at (81719): [] psci_system_suspend_enter+0x4c/0x80 [ 79.838238][ T5732] hardirqs last disabled at (81720): [] psci_system_suspend_enter+0x4c/0x80 [ 79.838238][ T5732] softirqs last enabled at (80226): [] handle_softirqs+0xc28/0xd98 [ 79.838238][ T5732] softirqs last disabled at (80221): [] __do_softirq+0x14/0x20 [ 79.838238][ T5732] ---[ end trace 0000000000000000 ]--- [ 79.838333][ T5732] Enabling non-boot CPUs ... [ 79.838804][ T0] Detected PIPT I-cache on CPU1 [ 79.838839][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 79.839025][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 79.842490][ T5732] CPU1 is up [ 80.024859][ T3378] nvme nvme0: 2/0/0 default/read/poll queues [ 80.045602][ T3378] gve 0000:00:00.0 enp0s0: Device link is up. [ 80.261857][ T5732] OOM killer enabled. [ 80.261875][ T5732] Restarting tasks: Starting [ 80.291931][ T5732] Restarting tasks: Done [ 80.292176][ T5732] random: crng reseeded on system resumption [ 80.292865][ T5732] PM: suspend exit [ 81.291770][ T4713] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.451764][ T4713] Bluetooth: hci4: command 0x0c1a tx timeout [ 81.451818][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.451840][ T4713] Bluetooth: hci2: command 0x0406 tx timeout [ 81.771787][ T4717] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.372149][ T4717] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.531804][ T4717] Bluetooth: hci2: command 0x0406 tx timeout [ 83.531855][ T4717] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.532964][ T4717] Bluetooth: hci4: command 0x0c1a tx timeout [ 83.861732][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.451751][ T4713] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.621758][ T4717] Bluetooth: hci2: command 0x0406 tx timeout [ 85.621829][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.691767][ T4717] Bluetooth: hci2: command 0x0406 tx timeout [ 87.691814][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout