last executing test programs: 8.672075681s ago: executing program 1 (id=209): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x53ae, 0xcc14}, &(0x7f0000000240)=0x8) 8.548068842s ago: executing program 1 (id=212): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 8.547934472s ago: executing program 1 (id=213): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 8.414490463s ago: executing program 1 (id=220): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x10}, {0x0, 0xd}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3b, 0xd, 0x357, 0x1, 0x8, 0xfffffffd}}, {0x4}}, {{0x1c, 0x1, {0x9f, 0xce, 0x100, 0x100, 0x2, 0x6394, 0x6d98, 0x5}}, {0xe, 0x2, [0xfff7, 0x4, 0xffff, 0x1, 0x5]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x0, 0x1, 0x5, 0x5}}, {0x4}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x72bd25, 0x5, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x99}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.313149302s ago: executing program 1 (id=225): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xd01c4813, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x2, 0x245f37b7e2498807, 0x5, 0x2, 0x5, 0x4cd0a145}) 7.752437198s ago: executing program 1 (id=238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000000000001) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xdb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x1) 1.623571406s ago: executing program 4 (id=365): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nodelalloc}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x3, 0x6, 0x0, 0x3) 1.500552736s ago: executing program 4 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2400000018000109000000000000000002180000000000082000000008000100ac"], 0x24}}, 0x0) 1.488283497s ago: executing program 4 (id=369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x4006, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, 0x0, 0x0, 0x16, 0x0, "024c08f6beaae211e04128017b8f9720fc434ce01e58499892b786263c721a4dd042fac0c78d10b9206d1cf9577ea4d8b709afd0a6d76f775344852e83a4fab66ac4883fbf7d17e0d8245a4aa8714ae3"}, 0xd8) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x4c, @remote, 0x9}, 0x1c) 1.412134993s ago: executing program 0 (id=372): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2000233, 0x0, &(0x7f0000000180), &(0x7f0000005680)) read$FUSE(r0, &(0x7f000000c780)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 1.036398074s ago: executing program 2 (id=382): syz_emit_vhci(0x0, 0xf) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x2, 0x8000000}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="d9b6") r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0xd, 0x4000000000000003, 0xc, 0xfffffffc, 0x3, 0x505e, "57002300000000000339e0846600", 0x6, 0x0, 0x20, 0x8, 0x5, 0xfd}) 1.003076947s ago: executing program 2 (id=383): r0 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x8890) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, 0x0, 0x8000) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b04, 0x0) syz_usb_disconnect(r2) 641.929507ms ago: executing program 4 (id=391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0xa09, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_vlan={0x78, 0x1, 0x0, 0x0, {{0x9}, {0xfffffd4a, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffe, 0x6, 0x3, 0x7fffffff, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 560.461384ms ago: executing program 4 (id=393): syz_read_part_table(0x5e8, &(0x7f0000000c00)="$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") 558.379954ms ago: executing program 4 (id=394): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) 541.278956ms ago: executing program 0 (id=395): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) write$snapshot(r0, 0x0, 0x0) 488.81088ms ago: executing program 0 (id=397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000047c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004840)=@newtfilter={0x104, 0x2c, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xfff1}, {0x1, 0x5}}, [@f_rsvp6={{0xa}, {0xd4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_SRC={0x14, 0x3, @private2}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}, @TCA_RSVP_ACT={0x64, 0x6, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000095}, 0x8000) 488.50396ms ago: executing program 0 (id=398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x10}, {0x0, 0xd}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9f, 0xce, 0x100, 0x100, 0x2, 0x6394, 0x6d98, 0x6}}, {0x10, 0x2, [0xfff7, 0x4, 0xffff, 0x1, 0x2, 0x5]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x0, 0x1, 0x5, 0x5}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x72bd25, 0x5, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x99}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 488.15313ms ago: executing program 0 (id=399): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfe}, 0x2) 248.4677ms ago: executing program 0 (id=405): syz_usb_connect(0x3, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104"], 0x0) 202.613573ms ago: executing program 3 (id=408): unshare(0x20000400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) 189.563534ms ago: executing program 3 (id=409): openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 158.243787ms ago: executing program 3 (id=410): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x10}, {0x0, 0xd}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9f, 0xce, 0x100, 0x100, 0x2, 0x6394, 0x6d98, 0x6}}, {0x10, 0x2, [0xfff7, 0x4, 0xffff, 0x1, 0x2, 0x5]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x0, 0x1, 0x5, 0x5}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x72bd25, 0x5, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x99}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 143.984528ms ago: executing program 3 (id=411): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x84, 0x8, {[@timestamp={0x44, 0x4, 0x47, 0x0, 0x8}]}}}], 0x18}}], 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) epoll_create1(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r6], 0x3c}}, 0x10) 60.584115ms ago: executing program 2 (id=412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 60.034875ms ago: executing program 3 (id=413): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2}}}}) 48.018676ms ago: executing program 2 (id=414): unshare(0x60600) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) 388.6µs ago: executing program 3 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c71, 0x3, 0x1000, 0x101, 0x8, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 130.01µs ago: executing program 2 (id=416): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setpgid(0x0, 0x0) 0s ago: executing program 2 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) futex(0x0, 0x800000000007, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 28.195397][ T4032] cgroup: Unknown subsys name 'net' [ 28.488721][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.787904][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.034939][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 30.075108][ T4058] chnl_net:caif_netlink_parms(): no params data found [ 30.097514][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.098776][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.100395][ T4048] device bridge_slave_0 entered promiscuous mode [ 30.102399][ T4056] chnl_net:caif_netlink_parms(): no params data found [ 30.104534][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.106015][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.107535][ T4048] device bridge_slave_1 entered promiscuous mode [ 30.124677][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.127484][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.154867][ T4048] team0: Port device team_slave_0 added [ 30.169880][ T4048] team0: Port device team_slave_1 added [ 30.180582][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.181811][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.183436][ T4056] device bridge_slave_0 entered promiscuous mode [ 30.191975][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.193113][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.197513][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.200109][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.201192][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.205253][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.207613][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.208845][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.210355][ T4058] device bridge_slave_0 entered promiscuous mode [ 30.212064][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.213245][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.214741][ T4056] device bridge_slave_1 entered promiscuous mode [ 30.226282][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.227421][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.228828][ T4058] device bridge_slave_1 entered promiscuous mode [ 30.235621][ T4056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.245725][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 30.254983][ T4056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.307308][ T4048] device hsr_slave_0 entered promiscuous mode [ 30.336183][ T4048] device hsr_slave_1 entered promiscuous mode [ 30.396638][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.399020][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.405013][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 30.408769][ T4056] team0: Port device team_slave_0 added [ 30.419019][ T4058] team0: Port device team_slave_0 added [ 30.420651][ T4056] team0: Port device team_slave_1 added [ 30.436930][ T4058] team0: Port device team_slave_1 added [ 30.453539][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.454665][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.456547][ T4043] device bridge_slave_0 entered promiscuous mode [ 30.468111][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.469203][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.473394][ T4056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.475455][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.476780][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.478338][ T4044] device bridge_slave_0 entered promiscuous mode [ 30.480008][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.481204][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.482849][ T4043] device bridge_slave_1 entered promiscuous mode [ 30.487348][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.488526][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.492627][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.499778][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.500874][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.505220][ T4056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.507817][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.508994][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.510478][ T4044] device bridge_slave_1 entered promiscuous mode [ 30.518324][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.519473][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.523743][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.545488][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.548261][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.560446][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.565426][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.606824][ T4058] device hsr_slave_0 entered promiscuous mode [ 30.646287][ T4058] device hsr_slave_1 entered promiscuous mode [ 30.685633][ T4058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.687025][ T4058] Cannot create hsr debugfs directory [ 30.695345][ T4044] team0: Port device team_slave_0 added [ 30.736668][ T4056] device hsr_slave_0 entered promiscuous mode [ 30.775822][ T4056] device hsr_slave_1 entered promiscuous mode [ 30.815656][ T4056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.816786][ T4056] Cannot create hsr debugfs directory [ 30.821890][ T4044] team0: Port device team_slave_1 added [ 30.828261][ T4043] team0: Port device team_slave_0 added [ 30.840740][ T4043] team0: Port device team_slave_1 added [ 30.846379][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.847512][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.851438][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.862543][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.863543][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.867994][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.874365][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.875470][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.879955][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.887224][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.888293][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.892273][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.901238][ T4048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.943053][ T4048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.986953][ T4048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.068320][ T4048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.186644][ T4043] device hsr_slave_0 entered promiscuous mode [ 31.225734][ T4043] device hsr_slave_1 entered promiscuous mode [ 31.275609][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.276989][ T4043] Cannot create hsr debugfs directory [ 31.326656][ T4044] device hsr_slave_0 entered promiscuous mode [ 31.375778][ T4044] device hsr_slave_1 entered promiscuous mode [ 31.435622][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.436804][ T4044] Cannot create hsr debugfs directory [ 31.479177][ T4056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.532626][ T4056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.577958][ T4056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.616664][ T4056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.721223][ T4058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.757900][ T4058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.826892][ T4058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.896539][ T4058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.926008][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 31.926413][ T4102] Bluetooth: hci1: command 0x0409 tx timeout [ 31.949755][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.959803][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.961740][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.964201][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.977137][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.978997][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.980632][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.981773][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.983273][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.984793][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.989353][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.990402][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.991608][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.993127][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.994789][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.002711][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.004488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.006219][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 32.007158][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 32.008463][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.010109][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.011784][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.013240][ T4043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.015664][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 32.061168][ T4043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.103705][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.105300][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.107099][ T4043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.147306][ T4043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.188489][ T4056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.200693][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.202247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.204440][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.215094][ T4044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.237796][ T4044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.277801][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.279488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.281366][ T4044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.326807][ T4044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.369698][ T4056] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.390654][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.392509][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.393942][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.395123][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.397596][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.399156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.400605][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.401625][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.403022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.404641][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.407668][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.409405][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.410911][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.412469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.414024][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.417619][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.423131][ T4056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.424610][ T4056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.431040][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.432682][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.434516][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.438215][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.440273][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.450897][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.452411][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.453684][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.473090][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.494824][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.497052][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.498485][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.500084][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.504788][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.510874][ T4058] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.514671][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.525495][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.529036][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.530434][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.531682][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.538739][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.540267][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.541775][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.543300][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.544772][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.545866][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.548613][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.549978][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.551381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.553432][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.557103][ T4056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.559718][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.561063][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.562957][ T4048] device veth0_vlan entered promiscuous mode [ 32.567594][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.570502][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.572002][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.573415][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.574595][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.576186][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.577657][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.579101][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.580217][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.581597][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.589898][ T4048] device veth1_vlan entered promiscuous mode [ 32.592380][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.593844][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.595347][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.597925][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.599075][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.600964][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.602749][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.608439][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.609886][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.611404][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.612976][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.619057][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.620797][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.622346][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.623582][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.624889][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.627106][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.628482][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.629477][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.639760][ T4048] device veth0_macvtap entered promiscuous mode [ 32.641888][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.643598][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.644948][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.647153][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.648766][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.650314][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.655446][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.658253][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.661447][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.668438][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.669986][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.671402][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.681342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.682891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.684466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.687197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.688810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.690400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.691858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.693528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.695972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.697456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.698813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.700245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.703108][ T4048] device veth1_macvtap entered promiscuous mode [ 32.704478][ T4056] device veth0_vlan entered promiscuous mode [ 32.708127][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.709630][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.711154][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.713893][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.715436][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.720774][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.722387][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.729183][ T4056] device veth1_vlan entered promiscuous mode [ 32.732283][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.733839][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.737454][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.738945][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.740386][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.741884][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.743325][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.744856][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.747642][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.750591][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.757867][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.761839][ T4058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.771183][ T4056] device veth0_macvtap entered promiscuous mode [ 32.773528][ T4056] device veth1_macvtap entered promiscuous mode [ 32.780631][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.783221][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.790369][ T4048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.791799][ T4048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.793248][ T4048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.794700][ T4048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.799275][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.800805][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.802276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.803777][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.805200][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.808994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.810643][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.812194][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.813804][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.819395][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.820967][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.823819][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.832834][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.834482][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.836892][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.838678][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.840588][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.842173][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.848621][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.862368][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.864884][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.866242][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.876017][ T4056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877406][ T4056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.878716][ T4056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.880090][ T4056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902629][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.904025][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.917722][ T4141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.919049][ T4141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.919434][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.924300][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.937180][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.938518][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.942665][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.974204][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.977984][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.979494][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.981048][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.990304][ T4141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.991637][ T4141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.995806][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.997408][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.999005][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.002198][ T4141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.003371][ T4141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.005333][ T4058] device veth0_vlan entered promiscuous mode [ 33.013020][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.014422][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.016381][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.028834][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.030497][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.032491][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.033960][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.039457][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.040958][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.044465][ T4043] device veth0_vlan entered promiscuous mode [ 33.057738][ T4044] device veth0_vlan entered promiscuous mode [ 33.061128][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.061646][ T4044] device veth1_vlan entered promiscuous mode [ 33.062370][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.064306][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.066299][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.067838][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.073292][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.074830][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.076950][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.078740][ T4058] device veth1_vlan entered promiscuous mode [ 33.084272][ T4153] tipc: Started in network mode [ 33.085041][ T4153] tipc: Node identity fe0d64a44a23, cluster identity 4711 [ 33.089911][ T4153] tipc: Enabled bearer , priority 0 [ 33.109820][ T4043] device veth1_vlan entered promiscuous mode [ 33.111400][ T4153] device syzkaller0 entered promiscuous mode [ 33.116958][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.118403][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.119936][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.121414][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.130661][ T4155] loop2: detected capacity change from 0 to 512 [ 33.131965][ T4152] tipc: Resetting bearer [ 33.141463][ T4152] tipc: Disabling bearer [ 33.149319][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.151573][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.158129][ T4058] device veth0_macvtap entered promiscuous mode [ 33.161985][ T4058] device veth1_macvtap entered promiscuous mode [ 33.173543][ T4044] device veth0_macvtap entered promiscuous mode [ 33.176905][ T4044] device veth1_macvtap entered promiscuous mode [ 33.182996][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.184459][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.186060][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.187681][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.189250][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.190664][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.197343][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.200970][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.202876][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.204442][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.207521][ T4155] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.209397][ T4155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.211848][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.214301][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.218716][ T4043] device veth0_macvtap entered promiscuous mode [ 33.220817][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.222349][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.226872][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.230955][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.234626][ T4043] device veth1_macvtap entered promiscuous mode [ 33.237465][ T4158] binder: tried to use weak ref as strong ref [ 33.238480][ T4158] binder: 4157:4158 Acquire 1 refcount change on invalid ref 0 ret -22 [ 33.240891][ T4155] EXT4-fs (loop2): 1 orphan inode deleted [ 33.241839][ T4155] EXT4-fs (loop2): 1 truncate cleaned up [ 33.242776][ T4155] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,journal_dev=0x0000000000000001,block_validity,grpjquota=,. Quota mode: none. [ 33.243060][ T4158] binder: 4157:4158 got transaction to invalid handle, 1 [ 33.254179][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.264169][ T4158] binder: 4157:4158 transaction failed 29201/-22, size 0-0 line 2917 [ 33.265184][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.267724][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.269493][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.271857][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.272654][ T4149] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.277934][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.279615][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.283958][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.288929][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.290418][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.291882][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.293787][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.295381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.298121][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.299795][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.301217][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.302753][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.308780][ T4044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.311594][ T4044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.312846][ T4044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.314147][ T4044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.320048][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.321574][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.322882][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.324559][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.334598][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.336427][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.338498][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.340996][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.342733][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.346248][ T4164] loop8: detected capacity change from 0 to 7 [ 33.350224][ T4052] Dev loop8: unable to read RDB block 7 [ 33.351104][ T4052] loop8: unable to read partition table [ 33.351629][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.351989][ T4052] loop8: partition table beyond EOD, truncated [ 33.353767][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.356861][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.358886][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.358955][ T4164] Dev loop8: unable to read RDB block 7 [ 33.360394][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.361186][ T4164] loop8: unable to read partition table [ 33.362822][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.363646][ T4164] loop8: partition table beyond EOD, truncated [ 33.365161][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.372581][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.372742][ T4164] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 33.374755][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.380109][ T4058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.381433][ T4058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.382717][ T4058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.383936][ T4058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.388851][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.390522][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.393055][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.394677][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.397368][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.399487][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.401016][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.402722][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.404363][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.407282][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.409359][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.411979][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.413618][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.439227][ T4043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.440561][ T4043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.441982][ T4043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.448919][ T4043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.506590][ T1622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.507892][ T1622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.509538][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.531302][ T359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.532660][ T359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.543780][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.547068][ T359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.548274][ T359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.549204][ T4141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.550763][ T4141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.553035][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.554546][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.572658][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.573863][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.583485][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.586450][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.588397][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.590136][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.595840][ T4103] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.630718][ T4175] loop2: detected capacity change from 0 to 1024 [ 33.644675][ T4177] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 33.712165][ T4187] tipc: Started in network mode [ 33.713032][ T4187] tipc: Node identity 72d82899b5f7, cluster identity 4711 [ 33.714077][ T4187] tipc: Enabled bearer , priority 0 [ 33.736964][ T4190] loop4: detected capacity change from 0 to 256 [ 33.737511][ T4187] tipc: Resetting bearer [ 33.743028][ T4185] tipc: Disabling bearer [ 33.743981][ T4191] binder: tried to use weak ref as strong ref [ 33.743993][ T4191] binder: 4189:4191 Acquire 1 refcount change on invalid ref 0 ret -22 [ 33.744155][ T4191] binder: 4189:4191 got transaction to invalid handle, 1 [ 33.747817][ T4191] binder: 4189:4191 transaction failed 29201/-22, size 0-0 line 2917 [ 33.749991][ T4186] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.777625][ T4190] ======================================================= [ 33.777625][ T4190] WARNING: The mand mount option has been deprecated and [ 33.777625][ T4190] and is ignored by this kernel. Remove the mand [ 33.777625][ T4190] option from the mount to silence this warning. [ 33.777625][ T4190] ======================================================= [ 33.822429][ T4200] udc-core: couldn't find an available UDC or it's busy [ 33.823566][ T4200] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 33.836949][ T4190] FAT-fs (loop4): Directory bread(block 64) failed [ 33.838133][ T4190] FAT-fs (loop4): Directory bread(block 65) failed [ 33.839184][ T4190] FAT-fs (loop4): Directory bread(block 66) failed [ 33.840210][ T4190] FAT-fs (loop4): Directory bread(block 67) failed [ 33.841241][ T4190] FAT-fs (loop4): Directory bread(block 68) failed [ 33.842301][ T4190] FAT-fs (loop4): Directory bread(block 69) failed [ 33.843388][ T4190] FAT-fs (loop4): Directory bread(block 70) failed [ 33.845418][ T4203] netlink: 128 bytes leftover after parsing attributes in process `syz.2.20'. [ 33.851435][ T4205] tipc: Started in network mode [ 33.852244][ T4205] tipc: Node identity da530f6a6f73, cluster identity 4711 [ 33.853423][ T4205] tipc: Enabled bearer , priority 0 [ 33.855063][ T4205] device syzkaller0 entered promiscuous mode [ 33.862972][ T4190] FAT-fs (loop4): Directory bread(block 71) failed [ 33.864080][ T4190] FAT-fs (loop4): Directory bread(block 72) failed [ 33.865427][ T4190] FAT-fs (loop4): Directory bread(block 73) failed [ 33.887184][ T4205] tipc: Resetting bearer [ 33.892334][ T4204] tipc: Resetting bearer [ 33.905926][ T4204] tipc: Disabling bearer [ 33.938007][ T149] block nbd2: Send control failed (result -22) [ 33.939092][ T149] block nbd2: Request send failed, requeueing [ 33.941131][ T149] block nbd2: Dead connection, failed to find a fallback [ 33.942222][ T149] block nbd2: shutting down sockets [ 33.943044][ T149] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 33.955710][ T4103] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 33.957220][ T4103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.961638][ T4103] usb 1-1: config 0 descriptor?? [ 33.996919][ T4103] cp210x 1-1:0.0: cp210x converter detected [ 34.006262][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 34.006651][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 34.034832][ T4220] binder: 4219:4220 ioctl 4018620d 0 returned -22 [ 34.038238][ T4220] binder: tried to use weak ref as strong ref [ 34.039414][ T4220] binder: 4219:4220 Acquire 1 refcount change on invalid ref 0 ret -22 [ 34.041007][ T4220] binder: 4219:4220 got transaction to invalid handle, 1 [ 34.042223][ T4220] binder: 4219:4220 transaction failed 29201/-22, size 0-0 line 2917 [ 34.043868][ T4220] binder: 4219:4220 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.046418][ T4220] binder: 4220 RLIMIT_NICE not set [ 34.047284][ T4220] binder: 4219:4220 ioctl c0306201 20000140 returned -11 [ 34.048754][ T4163] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.085975][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 34.087074][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 34.088097][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 34.173977][ T4232] tipc: Started in network mode [ 34.174799][ T4232] tipc: Node identity f6e32edf0575, cluster identity 4711 [ 34.179184][ T4232] tipc: Enabled bearer , priority 0 [ 34.183191][ T4232] tipc: Resetting bearer [ 34.187275][ T4231] tipc: Disabling bearer [ 34.268652][ T4242] udc-core: couldn't find an available UDC or it's busy [ 34.269724][ T4242] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.341113][ T4245] udc-core: couldn't find an available UDC or it's busy [ 34.342319][ T4245] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.438718][ T4103] usb 1-1: cp210x converter now attached to ttyUSB0 [ 34.640209][ T25] usb 1-1: USB disconnect, device number 2 [ 34.644384][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 34.652689][ T25] cp210x 1-1:0.0: device disconnected [ 34.786675][ T4247] binder: 4246:4247 ioctl 4018620d 0 returned -22 [ 34.790743][ T4247] binder: tried to use weak ref as strong ref [ 34.791861][ T4247] binder: 4246:4247 Acquire 1 refcount change on invalid ref 0 ret -22 [ 34.793458][ T4247] binder: 4246:4247 got transaction to invalid handle, 1 [ 34.794711][ T4247] binder: 4246:4247 transaction failed 29201/-22, size 0-0 line 2917 [ 34.796544][ T4247] binder: 4246:4247 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.798585][ T4247] binder: 4247 RLIMIT_NICE not set [ 34.799446][ T4247] binder: 4246:4247 ioctl c0306201 20000140 returned -11 [ 34.801258][ T3624] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.890967][ T4259] loop1: detected capacity change from 0 to 1024 [ 34.900383][ T4259] EXT4-fs (loop1): Ignoring removed nobh option [ 34.903622][ T4259] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.43: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 34.913541][ T4259] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.43: couldn't read orphan inode 11 (err -117) [ 34.926194][ T4259] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 34.951077][ T4265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.45'. [ 34.952730][ T4265] netlink: 'syz.2.45': attribute type 7 has an invalid length. [ 34.953884][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 35.008930][ T4267] loop1: detected capacity change from 0 to 2048 [ 35.097200][ T4271] tipc: Enabled bearer , priority 0 [ 35.101451][ T4271] tipc: Resetting bearer [ 35.111076][ T4270] tipc: Disabling bearer [ 35.141837][ T4277] binder: 4276:4277 ioctl 4018620d 0 returned -22 [ 35.143316][ T4277] binder: tried to use weak ref as strong ref [ 35.144210][ T4277] binder: 4276:4277 Acquire 1 refcount change on invalid ref 0 ret -22 [ 35.146393][ T4277] binder: 4276:4277 got transaction to invalid handle, 1 [ 35.147492][ T4277] binder: 4276:4277 transaction failed 29201/-22, size 0-0 line 2917 [ 35.149120][ T4277] binder: 4276:4277 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.151099][ T4277] binder: 4277 RLIMIT_NICE not set [ 35.151842][ T4277] binder: 4276:4277 ioctl c0306201 20000140 returned -11 [ 35.155059][ T4163] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.224130][ T4281] loop1: detected capacity change from 0 to 4096 [ 35.230098][ T4290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.56'. [ 35.352996][ T4299] udc-core: couldn't find an available UDC or it's busy [ 35.354206][ T4299] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.696377][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.897961][ T4308] device syzkaller0 entered promiscuous mode [ 35.945895][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 35.964356][ T4310] binder: 4309:4310 ioctl c0306201 0 returned -14 [ 35.965992][ T4310] binder: 4309:4310 got transaction to invalid handle, 1 [ 35.967058][ T4310] binder: 4309:4310 transaction failed 29201/-22, size 0-0 line 2917 [ 35.968415][ T4310] binder: 4309:4310 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.970308][ T4310] binder: 4310 RLIMIT_NICE not set [ 35.971100][ T4310] binder: 4309:4310 ioctl c0306201 20000140 returned -11 [ 35.972488][ T4163] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.085801][ T3624] Bluetooth: hci1: command 0x040f tx timeout [ 36.086939][ T3624] Bluetooth: hci0: command 0x040f tx timeout [ 36.101249][ T4327] loop1: detected capacity change from 0 to 256 [ 36.166224][ T3624] Bluetooth: hci4: command 0x040f tx timeout [ 36.167259][ T3624] Bluetooth: hci3: command 0x040f tx timeout [ 36.168180][ T3624] Bluetooth: hci2: command 0x040f tx timeout [ 36.183708][ T4335] device syzkaller0 entered promiscuous mode [ 36.209557][ T4337] binder: 4336:4337 ioctl c0306201 0 returned -14 [ 36.210962][ T4337] binder: 4336:4337 got transaction to invalid handle, 1 [ 36.212019][ T4337] binder: 4336:4337 transaction failed 29201/-22, size 0-0 line 2917 [ 36.213586][ T4337] binder: 4336:4337 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.217771][ T4337] binder: 4337 RLIMIT_NICE not set [ 36.218611][ T4337] binder: 4336:4337 ioctl c0306201 20000140 returned -11 [ 36.220333][ T4163] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.240455][ T4339] udc-core: couldn't find an available UDC or it's busy [ 36.241507][ T4339] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.266355][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 36.267751][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.269020][ T25] usb 1-1: Product: syz [ 36.269695][ T25] usb 1-1: Manufacturer: syz [ 36.270435][ T25] usb 1-1: SerialNumber: syz [ 36.272628][ T25] usb 1-1: config 0 descriptor?? [ 36.449820][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 36.545678][ T25] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 36.585142][ T4354] loop2: detected capacity change from 0 to 512 [ 36.681545][ T4358] loop2: detected capacity change from 0 to 1024 [ 36.717915][ T4358] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 36.729154][ T4358] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 36.766642][ T4361] udc-core: couldn't find an available UDC or it's busy [ 36.767863][ T4361] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.799509][ T4363] udc-core: couldn't find an available UDC or it's busy [ 36.800695][ T4363] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.283899][ T4365] binder: 4364:4365 ioctl c0306201 0 returned -14 [ 37.285300][ T4365] binder: 4364:4365 got transaction to invalid handle, 1 [ 37.287571][ T4365] binder: 4364:4365 transaction failed 29201/-22, size 0-0 line 2917 [ 37.290122][ T4365] binder: 4364:4365 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.291978][ T4365] binder: 4365 RLIMIT_NICE not set [ 37.292682][ T4365] binder: 4364:4365 ioctl c0306201 20000140 returned -11 [ 37.296849][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.415744][ T25] usb write operation failed. (-71) [ 37.418766][ T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 37.420496][ T25] dvbdev: DVB: registering new adapter (Terratec H7) [ 37.421595][ T25] usb 1-1: media controller created [ 37.436309][ T25] usb read operation failed. (-71) [ 37.453461][ T4382] loop1: detected capacity change from 0 to 1024 [ 37.455936][ T25] usb write operation failed. (-71) [ 37.458850][ T25] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 37.461172][ T25] usb 1-1: USB disconnect, device number 3 [ 37.509671][ T359] hfsplus: b-tree write err: -5, ino 4 [ 37.602592][ T4051] Bluetooth: min 1 > max 0 [ 37.851526][ T4392] binder: 4391:4392 got transaction to invalid handle, 1 [ 37.852865][ T4392] binder: 4391:4392 transaction failed 29201/-22, size 0-0 line 2917 [ 37.854548][ T4392] binder: 4391:4392 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.856667][ T4392] binder: 4392 RLIMIT_NICE not set [ 37.857652][ T4392] binder: 4391:4392 ioctl c0306201 20000140 returned -11 [ 37.859225][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.946471][ T4409] loop4: detected capacity change from 0 to 256 [ 37.980427][ T4409] FAT-fs (loop4): Directory bread(block 64) failed [ 37.981687][ T4409] FAT-fs (loop4): Directory bread(block 65) failed [ 37.982846][ T4409] FAT-fs (loop4): Directory bread(block 66) failed [ 37.983940][ T4409] FAT-fs (loop4): Directory bread(block 67) failed [ 37.985184][ T4409] FAT-fs (loop4): Directory bread(block 68) failed [ 37.986528][ T4409] FAT-fs (loop4): Directory bread(block 69) failed [ 37.987716][ T4409] FAT-fs (loop4): Directory bread(block 70) failed [ 37.988878][ T4409] FAT-fs (loop4): Directory bread(block 71) failed [ 37.990344][ T4409] FAT-fs (loop4): Directory bread(block 72) failed [ 37.991444][ T4409] FAT-fs (loop4): Directory bread(block 73) failed [ 37.997241][ T4413] ax25_connect(): syz.0.110 uses autobind, please contact jreuter@yaina.de [ 38.041731][ T4417] device syzkaller0 entered promiscuous mode [ 38.078279][ T4420] binder: 4419:4420 got transaction to invalid handle, 1 [ 38.079459][ T4420] binder: 4419:4420 transaction failed 29201/-22, size 0-0 line 2917 [ 38.081159][ T4420] binder: 4419:4420 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.083078][ T4420] binder: 4420 RLIMIT_NICE not set [ 38.084083][ T4420] binder: 4419:4420 ioctl c0306201 20000140 returned -11 [ 38.085447][ T4088] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.166580][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 38.168808][ T4186] Bluetooth: hci1: command 0x0419 tx timeout [ 38.176704][ T4095] Bluetooth: hci5: command 0x1003 tx timeout [ 38.177783][ T4051] Bluetooth: hci5: sending frame failed (-49) [ 38.209873][ T4443] loop0: detected capacity change from 0 to 4096 [ 38.224109][ T4446] binder: 4445:4446 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.226436][ T4446] binder: 4446 RLIMIT_NICE not set [ 38.227243][ T4446] binder: 4445:4446 ioctl c0306201 20000140 returned -11 [ 38.246152][ T4095] Bluetooth: hci2: command 0x0419 tx timeout [ 38.247247][ T4095] Bluetooth: hci3: command 0x0419 tx timeout [ 38.248247][ T4095] Bluetooth: hci4: command 0x0419 tx timeout [ 38.249045][ T4443] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 38.260424][ T4443] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 38.262958][ T4443] ntfs3: loop0: mft corrupted [ 38.263986][ T4443] ntfs3: loop0: Failed to load $Extend. [ 38.328559][ T4459] device syzkaller0 entered promiscuous mode [ 38.352260][ T4462] loop4: detected capacity change from 0 to 1024 [ 38.387563][ T4462] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.405888][ T3624] atkbd serio0: keyboard reset failed on [ 38.411773][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,i_version,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 38.426398][ T4462] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 38.503137][ T4475] binder_transaction: 1 callbacks suppressed [ 38.503146][ T4475] binder: 4474:4475 got transaction to invalid handle, 1 [ 38.505180][ T4475] binder_transaction: 1 callbacks suppressed [ 38.505190][ T4475] binder: 4474:4475 transaction failed 29201/-22, size 0-0 line 2917 [ 38.507912][ T4475] binder: 4474:4475 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.509933][ T4475] binder: 4475 RLIMIT_NICE not set [ 38.510716][ T4475] binder: 4474:4475 ioctl c0306201 20000140 returned -11 [ 38.512330][ T4104] binder_release_work: 1 callbacks suppressed [ 38.512335][ T4104] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.565179][ T4485] loop4: detected capacity change from 0 to 256 [ 38.590703][ T4485] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 38.688221][ T4491] device syzkaller0 entered promiscuous mode [ 38.794062][ T4504] binder: 4503:4504 got transaction to invalid handle, 1 [ 38.795381][ T4504] binder: 4503:4504 transaction failed 29201/-22, size 0-0 line 2917 [ 38.797687][ T4504] binder: 4503:4504 ioctl c0306201 20000140 returned -11 [ 38.799230][ T4104] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.819978][ T4509] loop0: detected capacity change from 0 to 1024 [ 38.865492][ T4509] EXT4-fs (loop0): Ignoring removed nobh option [ 38.866631][ T4509] EXT4-fs (loop0): Ignoring removed bh option [ 38.867563][ T4509] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.899219][ T4509] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 38.899897][ T4524] udc-core: couldn't find an available UDC or it's busy [ 38.911550][ T4524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 38.918053][ T4526] loop2: detected capacity change from 0 to 256 [ 39.022227][ T4533] device syzkaller0 entered promiscuous mode [ 39.049388][ T4537] binder: 4534:4537 got transaction to invalid handle, 1 [ 39.050645][ T4537] binder: 4534:4537 transaction failed 29201/-22, size 0-0 line 2917 [ 39.063120][ T4537] binder_thread_read: 1 callbacks suppressed [ 39.063126][ T4537] binder: 4534:4537 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.068467][ T4537] binder_set_nice: 1 callbacks suppressed [ 39.068478][ T4537] binder: 4537 RLIMIT_NICE not set [ 39.070449][ T4537] binder: 4534:4537 ioctl c0306201 20000140 returned -11 [ 39.072190][ T4034] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.084869][ T4539] loop0: detected capacity change from 0 to 64 [ 39.089741][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 39.091744][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 39.105154][ T4543] loop1: detected capacity change from 0 to 64 [ 39.152570][ T4545] udc-core: couldn't find an available UDC or it's busy [ 39.155042][ T4545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.160342][ T4543] Trying to free block not in datazone [ 39.259662][ T4552] loop1: detected capacity change from 0 to 1764 [ 39.440567][ T4568] binder: 4567:4568 tried to acquire reference to desc 0, got 1 instead [ 39.442574][ T4568] binder: 4567:4568 ioctl c0306201 0 returned -14 [ 39.448934][ T4568] binder: 4567:4568 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.455512][ T4570] loop4: detected capacity change from 0 to 1024 [ 39.462061][ T4568] binder: 4568 RLIMIT_NICE not set [ 39.463310][ T4095] binder: undelivered TRANSACTION_COMPLETE [ 39.493751][ T4575] udc-core: couldn't find an available UDC or it's busy [ 39.494927][ T4575] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.609725][ T4586] loop0: detected capacity change from 0 to 64 [ 39.633464][ T4589] loop4: detected capacity change from 0 to 1024 [ 39.656540][ T4586] attempt to access beyond end of device [ 39.656540][ T4586] loop0: rw=0, want=130064, limit=64 [ 39.658338][ T4586] Buffer I/O error on dev loop0, logical block 65031, async page read [ 39.660382][ T4586] Trying to free block not in datazone [ 39.661243][ T4586] Trying to free block not in datazone [ 39.673297][ T4586] Trying to free block not in datazone [ 39.674198][ T4586] Trying to free block not in datazone [ 39.675149][ T4586] Trying to free block not in datazone [ 39.727649][ T4598] udc-core: couldn't find an available UDC or it's busy [ 39.728798][ T4598] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.771065][ T4602] binder: 4601:4602 tried to acquire reference to desc 0, got 1 instead [ 39.772799][ T4602] binder: 4601:4602 ioctl c0306201 0 returned -14 [ 39.774108][ T4602] binder: 4601:4602 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.782605][ T4602] binder: 4602 RLIMIT_NICE not set [ 39.783827][ T25] binder: undelivered TRANSACTION_COMPLETE [ 39.871707][ T4610] loop0: detected capacity change from 0 to 1024 [ 39.916313][ T4610] EXT4-fs (loop0): Ignoring removed nobh option [ 39.917291][ T4610] EXT4-fs (loop0): Ignoring removed bh option [ 39.918219][ T4610] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.940966][ T4616] udc-core: couldn't find an available UDC or it's busy [ 39.942433][ T4616] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.946890][ T4610] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 40.161480][ T4626] netlink: 'syz.1.201': attribute type 3 has an invalid length. [ 40.245769][ T3624] Bluetooth: hci5: command 0x1001 tx timeout [ 40.246819][ T4051] Bluetooth: hci5: sending frame failed (-49) [ 40.254715][ T4637] binder: 4634:4637 tried to acquire reference to desc 0, got 1 instead [ 40.263374][ T4637] binder: 4634:4637 ioctl c0306201 0 returned -14 [ 40.264786][ T4637] binder: 4634:4637 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.269732][ T4637] binder: 4637 RLIMIT_NICE not set [ 40.270889][ T13] binder: undelivered TRANSACTION_COMPLETE [ 40.277512][ T4639] loop1: detected capacity change from 0 to 256 [ 40.322687][ T4639] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.325779][ T25] Bluetooth: hci2: command 0x2021 tx timeout [ 40.351665][ T4644] loop4: detected capacity change from 0 to 64 [ 40.465636][ T4095] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.492945][ T4656] loop1: detected capacity change from 0 to 8 [ 40.537434][ T4667] binder: 4666:4667 tried to acquire reference to desc 0, got 1 instead [ 40.539370][ T4667] binder: 4666:4667 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.541374][ T4667] binder: 4667 RLIMIT_NICE not set [ 40.542467][ T25] binder: undelivered TRANSACTION_COMPLETE [ 40.579156][ T4671] tipc: Started in network mode [ 40.579952][ T4671] tipc: Node identity ea05bde62589, cluster identity 4711 [ 40.581044][ T4671] tipc: Enabled bearer , priority 0 [ 40.585089][ T4671] tipc: Resetting bearer [ 40.588833][ T4656] SQUASHFS error: zlib decompression failed, data probably corrupt [ 40.590174][ T4656] SQUASHFS error: Failed to read block 0x4de: -5 [ 40.591103][ T4656] SQUASHFS error: Failed to read block 0x4e2: -5 [ 40.592211][ T4656] SQUASHFS error: Failed to read block 0x9ca: -5 [ 40.593228][ T4656] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 40.594171][ T4656] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 40.595113][ T4656] SQUASHFS error: Failed to read block 0x535f2: -5 [ 40.597882][ T4670] tipc: Disabling bearer [ 40.604814][ T4669] loop2: detected capacity change from 0 to 2048 [ 40.671883][ T4669] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 40.715589][ T4095] usb 1-1: Using ep0 maxpacket: 16 [ 40.725352][ T4684] udc-core: couldn't find an available UDC or it's busy [ 40.728440][ T4684] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.801865][ T4692] loop2: detected capacity change from 0 to 1024 [ 40.837205][ T4692] EXT4-fs (loop2): Ignoring removed nobh option [ 40.851010][ T4692] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.228: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 40.854620][ T4692] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.228: couldn't read orphan inode 11 (err -117) [ 40.855768][ T4095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.858219][ T4095] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 40.859687][ T4095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.861156][ T4692] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 40.862814][ T4095] usb 1-1: config 0 descriptor?? [ 40.877287][ T4692] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.228: Invalid block bitmap block 0 in block_group 0 [ 40.881606][ T4692] Quota error (device loop2): write_blk: dquota write failed [ 40.882881][ T4692] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 40.884452][ T4692] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.228: Failed to acquire dquot type 0 [ 40.891899][ T4701] binder: 4700:4701 tried to acquire reference to desc 0, got 1 instead [ 40.893783][ T4701] binder: 4700:4701 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.898803][ T1622] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm kworker/u4:5: Invalid inode table block 8589934593 in block_group 0 [ 40.899064][ T4701] binder: 4701 RLIMIT_NICE not set [ 40.903516][ T25] binder: undelivered TRANSACTION_COMPLETE [ 40.919902][ T4703] tipc: Enabled bearer , priority 0 [ 40.923986][ T4703] tipc: Resetting bearer [ 40.929334][ T4702] tipc: Disabling bearer [ 40.980835][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 41.088617][ T4715] udc-core: couldn't find an available UDC or it's busy [ 41.089958][ T4715] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.258061][ T4718] Bluetooth: Invalid byte 01 after esc byte [ 41.435629][ T4095] usbhid 1-1:0.0: can't add hid device: -71 [ 41.436725][ T4095] usbhid: probe of 1-1:0.0 failed with error -71 [ 41.442572][ T4095] usb 1-1: USB disconnect, device number 4 [ 41.608197][ T4721] loop2: detected capacity change from 0 to 512 [ 41.643759][ T4721] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.645273][ T4721] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.239: iget: bad i_size value: 38620345925642 [ 41.653383][ T4721] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.239: couldn't read orphan inode 15 (err -117) [ 41.666177][ T4721] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.782107][ T4737] binder: 4736:4737 tried to acquire reference to desc 0, got 1 instead [ 41.784005][ T4737] binder: 4736:4737 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 41.787376][ T4737] binder: 4737 RLIMIT_NICE not set [ 41.788461][ T4103] binder: undelivered TRANSACTION_COMPLETE [ 41.808191][ T4739] tipc: Enabled bearer , priority 0 [ 41.814391][ T4739] tipc: Resetting bearer [ 41.817295][ T4738] tipc: Disabling bearer [ 41.909787][ T4749] loop2: detected capacity change from 0 to 256 [ 41.927825][ T4751] loop0: detected capacity change from 0 to 256 [ 41.932416][ T4749] FAT-fs (loop2): Directory bread(block 64) failed [ 41.937140][ T4749] FAT-fs (loop2): Directory bread(block 65) failed [ 41.938364][ T4749] FAT-fs (loop2): Directory bread(block 66) failed [ 41.939481][ T4749] FAT-fs (loop2): Directory bread(block 67) failed [ 41.940529][ T4749] FAT-fs (loop2): Directory bread(block 68) failed [ 41.941553][ T4749] FAT-fs (loop2): Directory bread(block 69) failed [ 41.942553][ T4749] FAT-fs (loop2): Directory bread(block 70) failed [ 41.943701][ T4749] FAT-fs (loop2): Directory bread(block 71) failed [ 41.944795][ T4749] FAT-fs (loop2): Directory bread(block 72) failed [ 41.946064][ T4749] FAT-fs (loop2): Directory bread(block 73) failed [ 41.975972][ T4751] exfat: Deprecated parameter 'utf8' [ 42.038049][ T4751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 42.124575][ T4765] binder: 4764:4765 tried to acquire reference to desc 0, got 1 instead [ 42.129062][ T4765] binder: 4764:4765 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.131077][ T4765] binder: 4765 RLIMIT_NICE not set [ 42.132536][ T4095] binder: undelivered TRANSACTION_COMPLETE [ 42.173752][ T4771] tipc: Enabled bearer , priority 0 [ 42.182220][ T4771] tipc: Resetting bearer [ 42.184753][ T4770] tipc: Disabling bearer [ 42.263809][ T4783] udc-core: couldn't find an available UDC or it's busy [ 42.264983][ T4783] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.326232][ T25] Bluetooth: hci5: command 0x1009 tx timeout [ 42.505570][ T4103] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.616586][ T4095] kernel read not supported for file /dsp1 (pid: 4095 comm: kworker/0:3) [ 42.745657][ T4103] usb 1-1: Using ep0 maxpacket: 8 [ 42.799725][ T4788] loop4: detected capacity change from 0 to 1024 [ 42.914696][ T4791] binder: 4790:4791 tried to acquire reference to desc 0, got 1 instead [ 42.916804][ T4791] binder: 4790:4791 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.918852][ T4791] binder: 4791 RLIMIT_NICE not set [ 42.920096][ T4104] binder: undelivered TRANSACTION_COMPLETE [ 43.020566][ T4795] loop4: detected capacity change from 0 to 512 [ 43.025753][ T4103] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 43.027203][ T4103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.028531][ T4103] usb 1-1: Product: syz [ 43.029168][ T4103] usb 1-1: Manufacturer: syz [ 43.029871][ T4103] usb 1-1: SerialNumber: syz [ 43.031831][ T4103] usb 1-1: config 0 descriptor?? [ 43.067739][ T4103] gspca_main: se401-2.14.0 probing 047d:5003 [ 43.075685][ T4795] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 43.077515][ T4795] EXT4-fs (loop4): invalid journal inode [ 43.078477][ T4795] EXT4-fs (loop4): can't get journal size [ 43.091931][ T4795] EXT4-fs (loop4): 1 truncate cleaned up [ 43.092932][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 43.101517][ T4795] overlayfs: upper fs needs to support d_type. [ 43.179774][ T4799] loop4: detected capacity change from 0 to 256 [ 43.240019][ T4801] udc-core: couldn't find an available UDC or it's busy [ 43.241196][ T4801] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.285625][ T13] Bluetooth: hci6: command 0x1003 tx timeout [ 43.286743][ T4047] Bluetooth: hci6: sending frame failed (-49) [ 43.505655][ T4103] gspca_se401: Bayer format not supported! [ 43.592264][ T4803] loop2: detected capacity change from 0 to 128 [ 43.624047][ T4803] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.702923][ T4808] tipc: Enabled bearer , priority 0 [ 43.709361][ T4104] usb 1-1: USB disconnect, device number 5 [ 43.716460][ T4808] tipc: Resetting bearer [ 43.719354][ T4807] tipc: Disabling bearer [ 43.759677][ T4810] loop4: detected capacity change from 0 to 1024 [ 43.781221][ T4810] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,max_batch_time=0x0000000000008000,,errors=continue. Quota mode: none. [ 43.852192][ T4822] binder: 4821:4822 tried to acquire reference to desc 0, got 1 instead [ 43.854194][ T4822] binder: 4821:4822 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.856435][ T4822] binder: 4822 RLIMIT_NICE not set [ 43.857597][ T4186] binder: undelivered TRANSACTION_COMPLETE [ 44.014883][ T4837] tipc: Enabled bearer , priority 0 [ 44.019040][ T4837] tipc: Resetting bearer [ 44.021386][ T4836] tipc: Disabling bearer [ 44.072206][ T4841] loop2: detected capacity change from 0 to 2048 [ 44.105958][ T4841] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 44.108341][ T4841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.194456][ T4845] udc-core: couldn't find an available UDC or it's busy [ 44.195831][ T4845] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.231440][ T4847] binder: 4846:4847 tried to acquire reference to desc 0, got 1 instead [ 44.233278][ T4847] binder: 4846:4847 ioctl c0306201 0 returned -14 [ 44.234600][ T4847] binder: 4846:4847 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.237090][ T4847] binder: 4847 RLIMIT_NICE not set [ 44.238322][ T13] binder: undelivered TRANSACTION_COMPLETE [ 44.408346][ T4861] tipc: Enabling of bearer rejected, failed to enable media [ 44.526280][ T4873] loop0: detected capacity change from 0 to 4096 [ 44.568856][ T4873] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 44.743036][ T4880] binder: 4879:4880 tried to acquire reference to desc 0, got 1 instead [ 44.744960][ T4880] binder: 4879:4880 ioctl c0306201 0 returned -14 [ 44.746209][ T4880] binder: 4879:4880 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.748192][ T4880] binder: 4880 RLIMIT_NICE not set [ 44.749437][ T4104] binder: undelivered TRANSACTION_COMPLETE [ 44.766585][ T4882] loop2: detected capacity change from 0 to 512 [ 44.771850][ T4882] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 44.846578][ T4884] loop2: detected capacity change from 0 to 16 [ 44.887230][ T4884] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 44.889925][ T4884] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 45.070046][ T4897] tipc: Enabling of bearer rejected, failed to enable media [ 45.171949][ T4911] binder: 4910:4911 ioctl 4018620d 0 returned -22 [ 45.194176][ T4915] binder: 4914:4915 tried to acquire reference to desc 0, got 1 instead [ 45.196166][ T4915] binder: 4914:4915 ioctl c0306201 0 returned -14 [ 45.197456][ T4915] binder: 4914:4915 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.199601][ T4915] binder: 4915 RLIMIT_NICE not set [ 45.200915][ T25] binder: undelivered TRANSACTION_COMPLETE [ 45.241708][ T4919] loop2: detected capacity change from 0 to 8 [ 45.269539][ T4919] SQUASHFS error: Failed to read block 0x260685: -5 [ 45.270970][ T4919] SQUASHFS error: Unable to read metadata cache entry [260685] [ 45.272155][ T4919] SQUASHFS error: Unable to read directory block [260685:0] [ 45.376325][ T4095] Bluetooth: hci6: command 0x1001 tx timeout [ 45.377481][ T4047] Bluetooth: hci6: sending frame failed (-49) [ 45.412027][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 45.566777][ T4937] tipc: Enabling of bearer rejected, failed to enable media [ 45.635296][ T4948] binder: 4947:4948 tried to acquire reference to desc 0, got 1 instead [ 45.638999][ T4948] binder: 4947:4948 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.641109][ T4948] binder: 4948 RLIMIT_NICE not set [ 45.642390][ T13] binder: undelivered TRANSACTION_COMPLETE [ 45.739809][ T4962] udc-core: couldn't find an available UDC or it's busy [ 45.741004][ T4962] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.810229][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 45.827563][ T4970] loop4: detected capacity change from 0 to 64 [ 45.963157][ T4980] binder: 4979:4980 tried to acquire reference to desc 0, got 1 instead [ 45.965037][ T4980] binder: 4979:4980 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.967302][ T4980] binder: 4980 RLIMIT_NICE not set [ 45.968418][ T13] binder: undelivered TRANSACTION_COMPLETE [ 45.999911][ T4984] tipc: Enabling of bearer rejected, failed to enable media [ 46.045738][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.084641][ T4994] udc-core: couldn't find an available UDC or it's busy [ 46.086859][ T4994] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.285642][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 46.405693][ T25] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.407319][ T25] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.408886][ T25] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.411243][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 46.583302][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 46.584918][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.586688][ T25] usb 1-1: Product: syz [ 46.587333][ T25] usb 1-1: Manufacturer: syz [ 46.588080][ T25] usb 1-1: SerialNumber: syz [ 46.643790][ T5012] loop4: detected capacity change from 0 to 64 [ 46.652968][ T5010] loop3: detected capacity change from 0 to 4096 [ 46.703693][ T5012] udc-core: couldn't find an available UDC or it's busy [ 46.704867][ T5012] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.802295][ T5016] binder: 5015:5016 tried to acquire reference to desc 0, got 1 instead [ 46.804450][ T5016] binder: 5015:5016 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.806802][ T5016] binder: 5016 RLIMIT_NICE not set [ 46.808070][ T4095] binder: undelivered TRANSACTION_COMPLETE [ 46.865388][ T25] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 46.872229][ T5020] tipc: Enabling of bearer rejected, failed to enable media [ 47.049908][ T5037] udc-core: couldn't find an available UDC or it's busy [ 47.051081][ T5037] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.058493][ T4095] usb 1-1: USB disconnect, device number 6 [ 47.062004][ T4095] usblp0: removed [ 47.320379][ T5045] netlink: 'syz.2.360': attribute type 2 has an invalid length. [ 47.321858][ T5045] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 47.323113][ T5045] netlink: 152 bytes leftover after parsing attributes in process `syz.2.360'. [ 47.394470][ T5055] binder: 5054:5055 tried to acquire reference to desc 0, got 1 instead [ 47.397663][ T5055] binder: 5054:5055 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.403511][ T5055] binder: 5055 RLIMIT_NICE not set [ 47.404589][ T4095] binder: undelivered TRANSACTION_COMPLETE [ 47.404786][ T5057] loop4: detected capacity change from 0 to 1024 [ 47.420866][ T5059] tipc: Enabling of bearer rejected, failed to enable media [ 47.445945][ T4095] Bluetooth: hci6: command 0x1009 tx timeout [ 47.451625][ T5057] EXT4-fs (loop4): Ignoring removed nobh option [ 47.452668][ T5057] EXT4-fs (loop4): Ignoring removed bh option [ 47.453731][ T5057] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.479513][ T5057] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nodelalloc,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 47.583838][ T5081] udc-core: couldn't find an available UDC or it's busy [ 47.585013][ T5081] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.593610][ T5083] loop0: detected capacity change from 0 to 256 [ 47.600181][ T5083] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.629353][ T5085] overlayfs: overlapping lowerdir path [ 47.711408][ T5093] binder: 5092:5093 tried to acquire reference to desc 0, got 1 instead [ 47.713491][ T5093] binder: 5092:5093 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.715951][ T5093] binder: 5093 RLIMIT_NICE not set [ 47.717178][ T13] binder: undelivered TRANSACTION_COMPLETE [ 47.808210][ T5100] tipc: Enabling of bearer rejected, failed to enable media [ 48.046121][ T5118] udc-core: couldn't find an available UDC or it's busy [ 48.047431][ T5118] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.231406][ T5131] binder: 5130:5131 tried to acquire reference to desc 0, got 1 instead [ 48.233335][ T5131] binder: 5130:5131 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.236246][ T5131] binder: 5131 RLIMIT_NICE not set [ 48.237547][ T25] binder: undelivered TRANSACTION_COMPLETE [ 48.339521][ T5135] tipc: Enabling of bearer rejected, failed to enable media [ 48.419309][ T5145] netlink: 104 bytes leftover after parsing attributes in process `syz.4.391'. [ 48.420931][ T5145] netlink: 104 bytes leftover after parsing attributes in process `syz.4.391'. [ 48.441085][ T5147] loop3: detected capacity change from 0 to 1024 [ 48.442241][ T5149] loop4: detected capacity change from 0 to 2048 [ 48.460210][ T4052] loop4: [ICS] [ 48.462201][ T5149] loop4: [ICS] [ 48.589773][ T5164] udc-core: couldn't find an available UDC or it's busy [ 48.590982][ T5164] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.620130][ T5166] binder: 5165:5166 tried to acquire reference to desc 0, got 1 instead [ 48.622067][ T5166] binder_alloc: 5165: pid 5165 spamming oneway? 2 buffers allocated for a total size of 5120 [ 48.623958][ T5166] binder: 5165:5166 ioctl c0306201 0 returned -14 [ 48.625305][ T13] binder: undelivered TRANSACTION_COMPLETE [ 48.626353][ T13] binder: undelivered TRANSACTION_COMPLETE [ 48.631205][ T13] binder: undelivered transaction 148, process died. [ 48.632292][ T13] binder: undelivered transaction 147, process died. [ 48.665715][ T5172] tipc: Enabling of bearer rejected, failed to enable media [ 48.968495][ T5201] binder: 5200:5201 tried to acquire reference to desc 0, got 1 instead [ 48.970789][ T5201] binder_alloc: 5200: pid 5200 spamming oneway? 2 buffers allocated for a total size of 5120 [ 48.973506][ T5201] binder: 5200:5201 ioctl c0306201 0 returned -14 [ 48.982705][ T3624] binder: undelivered transaction 154, process died. [ 48.983746][ T3624] binder: undelivered transaction 153, process died. [ 49.009146][ T5207] tipc: Enabling of bearer rejected, failed to enable media [ 49.034126][ T5213] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 49.035409][ T5213] Modules linked in: [ 49.036061][ T5213] CPU: 1 PID: 5213 Comm: syz.2.417 Not tainted 5.15.189-syzkaller #0 [ 49.037272][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 49.038786][ T5213] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 49.040000][ T5213] pc : do_futex+0xcec/0x257c [ 49.040699][ T5213] lr : do_futex+0xcc4/0x257c [ 49.041323][ T5213] sp : ffff8000202478a0 [ 49.041889][ T5213] x29: ffff800020247c20 x28: 0000000000000001 x27: 0000000000000000 [ 49.043024][ T5213] x26: 0000000000000000 x25: 0000000000000000 x24: ffff0000d12a9b40 [ 49.044236][ T5213] x23: 0000000000000000 x22: 0000000000000000 x21: 00000000fffffff2 [ 49.045414][ T5213] x20: dfff800000000000 x19: ffff700004048f30 x18: 0000000000000000 [ 49.046566][ T5213] x17: 0000000000000002 x16: ffff8000083bfe64 x15: 000000000000000d [ 49.047834][ T5213] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 49.048945][ T5213] x11: 0000000000000000 x10: 0000ffffffffffff x9 : 0000000000000000 [ 49.050079][ T5213] x8 : 0000000000000000 x7 : ffff800008750ed4 x6 : 0000000000000000 [ 49.051415][ T5213] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 49.052762][ T5213] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 49.054102][ T5213] Call trace: [ 49.054627][ T5213] do_futex+0xcec/0x257c [ 49.055327][ T5213] __arm64_sys_futex+0x388/0x400 [ 49.056132][ T5213] invoke_syscall+0x98/0x2b8 [ 49.056894][ T5213] el0_svc_common+0x138/0x258 [ 49.057618][ T5213] do_el0_svc+0x58/0x14c [ 49.058324][ T5213] el0_svc+0x78/0x1e0 [ 49.058981][ T5213] el0t_64_sync_handler+0xcc/0xe4 [ 49.059740][ T5213] el0t_64_sync+0x1a0/0x1a4 [ 49.060395][ T5213] Code: d503229f 2a1703f5 2a1703e0 b840091a (2a1503e1) [ 49.061553][ T5213] ---[ end trace 1a236b8317bafa27 ]--- [ 49.085668][ T4163] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.104812][ T5221] udc-core: couldn't find an available UDC or it's busy [ 49.108086][ T5221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.112314][ T5223] loop4: detected capacity change from 0 to 256 [ 49.255177][ T5213] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 49.256247][ T5213] SMP: stopping secondary CPUs [ 49.257001][ T5213] Kernel Offset: disabled [ 49.257596][ T5213] CPU features: 0x8,000003c1,7d33ffd9 [ 49.258386][ T5213] Memory Limit: none [ 49.437979][ T5213] Rebooting in 86400 seconds..