last executing test programs: 2.703920936s ago: executing program 2 (id=400): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x1000, 0xc, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 2.703679506s ago: executing program 1 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r1, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x42) 2.659608006s ago: executing program 0 (id=402): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) 2.654037937s ago: executing program 2 (id=403): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 2.597087137s ago: executing program 1 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x230b, 0x400000000000005}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="0ffb915daf482d865e5217be03456417198ae558ff9d453a81aa23e82e62a0130c632f6bd0953ea8d5ad6c70bef89e21f77d914d4d6813377c18c1234f4c5c2a1df33ac04562ae82a4c627e0ab8ead4d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 2.526283889s ago: executing program 1 (id=407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000200)="65c2960c", 0x4, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 2.074745526s ago: executing program 3 (id=409): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000894, &(0x7f0000000340)={0x11, 0x80f3, r1, 0x1, 0xc, 0x6, @multicast}, 0x14) 2.043709177s ago: executing program 2 (id=410): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x3, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140), &(0x7f00000001c0)=0xc) 1.959337488s ago: executing program 3 (id=411): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x0, 0x5, 0x8, 0x2, 0x8a3, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0xfffffff8, 0x8, 0x10000009, 0x81, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 1.958998138s ago: executing program 2 (id=412): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 1.958864938s ago: executing program 3 (id=413): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.88175726s ago: executing program 2 (id=415): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.763366271s ago: executing program 0 (id=418): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.595940744s ago: executing program 4 (id=419): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4) 1.590596584s ago: executing program 1 (id=420): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x3, 0x4) 1.557127034s ago: executing program 4 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) 1.443937906s ago: executing program 4 (id=422): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x6004a014}, 0x600c010) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40002020) 1.21168113s ago: executing program 0 (id=423): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.144114282s ago: executing program 3 (id=424): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x62000, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x60602) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) 1.011906604s ago: executing program 0 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x26}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 970.757254ms ago: executing program 0 (id=426): mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 707.948699ms ago: executing program 1 (id=427): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x6) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {0x19, 0xfffe, 0x2, 0x4}, 0x1f, [0x9, 0x9, 0x2aa, 0x5, 0xffffffff, 0x81, 0x9b7e, 0xd86e, 0x400, 0x1, 0x8, 0x8, 0x8, 0x80, 0x9, 0x40, 0x8, 0x1, 0xffff0000, 0x8, 0x3, 0x5, 0x80000001, 0x1, 0x40, 0xf72, 0x3531, 0x9, 0x8, 0x9d, 0x80000001, 0x3aef, 0x1, 0x2, 0x6f, 0xc, 0x1, 0x5b3, 0x5, 0x9, 0x1, 0x4, 0x4, 0x2, 0x3, 0x4b6dd7a1, 0x6, 0x2, 0x2, 0x7, 0x9, 0xe, 0xc9e2, 0xd688, 0x0, 0x3, 0x8, 0x4, 0x8, 0x3, 0x8, 0x7, 0x80000001, 0x55d], [0x0, 0xff, 0x6, 0xe, 0xffff8001, 0x1, 0x445f, 0x4dfc, 0x80000000, 0xffffffff, 0xb, 0x6, 0xa64, 0xffff, 0x3, 0x2, 0x5, 0x4, 0xf, 0x5, 0x66a5, 0x2, 0x1, 0x10001, 0x2, 0x35, 0xc82, 0x2, 0x10001, 0x6, 0x5, 0x2, 0xd2, 0x8, 0x4, 0x10000, 0x6, 0x1, 0x7, 0x7ff, 0x5, 0x9, 0x8edd, 0x81, 0x94f, 0x1, 0x5, 0x7ff, 0xf81, 0xdc, 0x6, 0x80000001, 0x7f, 0x7f, 0x9, 0x7fff, 0x2, 0x80000000, 0x8, 0xffffffff, 0x6, 0x0, 0x8f, 0x80000000], [0x2, 0x9, 0x4, 0x5, 0x8, 0x1, 0x7, 0x9, 0x2, 0x9, 0x8, 0xffffffff, 0xfff, 0x0, 0x10001, 0x1, 0x1, 0x0, 0x6, 0xff8f, 0x200, 0x2, 0xfffff5cb, 0x200, 0x9, 0x70c, 0x7, 0x4, 0x8, 0x1, 0x20e6, 0x10000, 0x9, 0x4, 0x4, 0x21db, 0x77, 0x81, 0x7, 0x101, 0x2e2, 0x0, 0x3, 0x4, 0xc6b9, 0xc, 0x3, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x401, 0x2, 0x120000, 0x0, 0x3ff, 0x9, 0x0, 0x9, 0x8, 0x10, 0x6, 0x4, 0x7f], [0x2, 0x3, 0x5, 0x9, 0xfffffffd, 0x36a, 0x8000000, 0xae00, 0x5, 0x80, 0x58b, 0x0, 0x8, 0x7, 0xfffffffd, 0xa184, 0x1, 0x8, 0x3, 0x6, 0x2, 0x7, 0x80, 0x54, 0x6, 0x3, 0x57f5, 0x8, 0x80, 0x6e3, 0xf58, 0x8000, 0x100, 0x103, 0x3, 0x5, 0x7, 0x9, 0x3, 0xffff, 0x1, 0x3, 0x4, 0x4, 0x0, 0x8, 0x0, 0xa8, 0x3000000, 0x101, 0x2, 0x4, 0xee3d, 0x446, 0x2, 0xfffffffd, 0x7, 0x3, 0x1, 0x800000, 0xa05, 0x400, 0x5, 0x2]}, 0x45c) 563.898951ms ago: executing program 4 (id=428): openat$audio(0xffffffffffffff9c, 0x0, 0x1a9840, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 520.601931ms ago: executing program 1 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 343.618045ms ago: executing program 4 (id=430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4001, 0xfffffffc, @empty, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 195.959997ms ago: executing program 3 (id=431): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) 195.736497ms ago: executing program 4 (id=432): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 74.811669ms ago: executing program 0 (id=433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x7) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 58.985369ms ago: executing program 3 (id=434): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0xe2, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xb, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x200, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r3}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) 0s ago: executing program 2 (id=435): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 37.278564][ T4024] cgroup: Unknown subsys name 'net' [ 37.523167][ T4024] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.867270][ T4024] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.754099][ T4041] chnl_net:caif_netlink_parms(): no params data found [ 39.799908][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 39.879801][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 39.889875][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.891962][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.894749][ T4041] device bridge_slave_0 entered promiscuous mode [ 39.922186][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.924097][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.926750][ T4041] device bridge_slave_1 entered promiscuous mode [ 39.953808][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.955704][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.958432][ T4037] device bridge_slave_0 entered promiscuous mode [ 39.972586][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 39.982624][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.984761][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.987947][ T4037] device bridge_slave_1 entered promiscuous mode [ 39.991989][ T4041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.008277][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 40.021786][ T4041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.041583][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.043651][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.046321][ T4034] device bridge_slave_0 entered promiscuous mode [ 40.074992][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.077249][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.079843][ T4034] device bridge_slave_1 entered promiscuous mode [ 40.083939][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.095065][ T4041] team0: Port device team_slave_0 added [ 40.110890][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.120290][ T4041] team0: Port device team_slave_1 added [ 40.143923][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.178546][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.180651][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.183366][ T4045] device bridge_slave_0 entered promiscuous mode [ 40.188933][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.199618][ T4037] team0: Port device team_slave_0 added [ 40.222322][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.224407][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.227109][ T4045] device bridge_slave_1 entered promiscuous mode [ 40.230534][ T4037] team0: Port device team_slave_1 added [ 40.232903][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.234750][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.242321][ T4041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.246154][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.252000][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.254706][ T4043] device bridge_slave_0 entered promiscuous mode [ 40.259593][ T4034] team0: Port device team_slave_0 added [ 40.272883][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.274927][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.282697][ T4041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.286230][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.288996][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.291694][ T4043] device bridge_slave_1 entered promiscuous mode [ 40.301429][ T4034] team0: Port device team_slave_1 added [ 40.334876][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.336798][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.344080][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.349695][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.352661][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.354646][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.362434][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.372031][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.382384][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.392913][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.395798][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.397954][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.405099][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.409511][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.411453][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.419019][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.499606][ T4041] device hsr_slave_0 entered promiscuous mode [ 40.537425][ T4041] device hsr_slave_1 entered promiscuous mode [ 40.585755][ T4043] team0: Port device team_slave_0 added [ 40.589934][ T4045] team0: Port device team_slave_0 added [ 40.592881][ T4043] team0: Port device team_slave_1 added [ 40.595732][ T4045] team0: Port device team_slave_1 added [ 40.689127][ T4037] device hsr_slave_0 entered promiscuous mode [ 40.727335][ T4037] device hsr_slave_1 entered promiscuous mode [ 40.767270][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.769305][ T4037] Cannot create hsr debugfs directory [ 40.813802][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.815856][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.823161][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.833585][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.835468][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.842774][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.856528][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.858931][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.865868][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.875434][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.877611][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.884546][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.939157][ T4034] device hsr_slave_0 entered promiscuous mode [ 40.977572][ T4034] device hsr_slave_1 entered promiscuous mode [ 41.027263][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.029400][ T4034] Cannot create hsr debugfs directory [ 41.189164][ T4043] device hsr_slave_0 entered promiscuous mode [ 41.227563][ T4043] device hsr_slave_1 entered promiscuous mode [ 41.267265][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.269424][ T4043] Cannot create hsr debugfs directory [ 41.329175][ T4045] device hsr_slave_0 entered promiscuous mode [ 41.367509][ T4045] device hsr_slave_1 entered promiscuous mode [ 41.417110][ T4045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.419147][ T4045] Cannot create hsr debugfs directory [ 41.547543][ T4054] Bluetooth: hci3: command 0x0409 tx timeout [ 41.549666][ T4054] Bluetooth: hci2: command 0x0409 tx timeout [ 41.551325][ T4054] Bluetooth: hci1: command 0x0409 tx timeout [ 41.553052][ T4054] Bluetooth: hci0: command 0x0409 tx timeout [ 41.575033][ T4037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.635316][ T4037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.637504][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 41.693614][ T4037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.740911][ T4037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.822275][ T4041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.854031][ T4041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.903913][ T4041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.968930][ T4041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.050815][ T4034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.087744][ T4034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.154123][ T4034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.194108][ T4034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.271227][ T4045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.298312][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.303053][ T4045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.341336][ T4045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.407673][ T4045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.460786][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.464287][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.472658][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.483489][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.486285][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.490937][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.492987][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.503444][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.517767][ T4043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.568725][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.571525][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.574312][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.576236][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.583246][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.588170][ T4043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.632747][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.635812][ T4043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.700307][ T4043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.750515][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.753547][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.756457][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.760122][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.780166][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.783084][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.798677][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.805494][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.808632][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.811404][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.815201][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.825261][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.828901][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.831538][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.834167][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.836743][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.838738][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.841995][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.844710][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.847396][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.849329][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.854317][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.871244][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.875538][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.894903][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.914060][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.923003][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.926285][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.935969][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.954063][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.956544][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.959947][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.962830][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.995555][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.008610][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.010925][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.013767][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.031026][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.033877][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.053159][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.056065][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.060149][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.062786][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.064737][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.068791][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.070975][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.073162][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.087087][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.093250][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.095787][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.100316][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.103098][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.105599][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.107667][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.122520][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.128585][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.131342][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.134097][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.136034][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.158679][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.161226][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.164553][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.169319][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.171319][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.173763][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.176752][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.195565][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.205419][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.208949][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.211976][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.218595][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.242629][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.245678][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.250456][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.254322][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.258154][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.260638][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.265586][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.268927][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.273733][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.276679][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.281771][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.295337][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.298639][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.301922][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.304845][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.309318][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.311924][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.314498][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.319333][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.321957][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.323949][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.326370][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.329088][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.331589][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.337588][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.339813][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.349690][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.352396][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.355224][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.358430][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.369197][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.372748][ T4037] device veth0_vlan entered promiscuous mode [ 43.376443][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.381368][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.383928][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.385839][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.390643][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.393398][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.408510][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.410825][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.425161][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.446320][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.451670][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.455416][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.462659][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.465496][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.468933][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.474603][ T4037] device veth1_vlan entered promiscuous mode [ 43.508466][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.511195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.513785][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.516869][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.521359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.524006][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.529751][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.532420][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.562057][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.572864][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.580792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.593868][ T4037] device veth0_macvtap entered promiscuous mode [ 43.603099][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.605721][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.609063][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.613001][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.615431][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.627949][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 43.629962][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 43.631592][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.631777][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 43.633832][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.643409][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 43.662234][ T4037] device veth1_macvtap entered promiscuous mode [ 43.669764][ T4041] device veth0_vlan entered promiscuous mode [ 43.673674][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.695694][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.704313][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.706530][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.712801][ T4041] device veth1_vlan entered promiscuous mode [ 43.717327][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 43.721396][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.724697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.728131][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.730889][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.750480][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.755567][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.761279][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.764027][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.766746][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.771106][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.774561][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.776734][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.788615][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.798960][ T4037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.801413][ T4037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.803769][ T4037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.806061][ T4037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.824322][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.828408][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.831056][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.836786][ T4041] device veth0_macvtap entered promiscuous mode [ 43.854327][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.856854][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.863430][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.866218][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.874789][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.878945][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.882677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.888218][ T4041] device veth1_macvtap entered promiscuous mode [ 43.902471][ T4045] device veth0_vlan entered promiscuous mode [ 43.930482][ T4045] device veth1_vlan entered promiscuous mode [ 43.961199][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.964698][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.970318][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.991012][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.993653][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.996290][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.002554][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.005506][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.011822][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.015758][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.022774][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.026670][ T4034] device veth0_vlan entered promiscuous mode [ 44.049332][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.052316][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.056158][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.061556][ T4041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.064002][ T4041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.066434][ T4041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.070510][ T4041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.092942][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.095838][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.099450][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.102261][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.114908][ T4034] device veth1_vlan entered promiscuous mode [ 44.126845][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.145497][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.155189][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.170339][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.173166][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.208330][ T4045] device veth0_macvtap entered promiscuous mode [ 44.220439][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.223367][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.226106][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.238185][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.240916][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.245696][ T4045] device veth1_macvtap entered promiscuous mode [ 44.250201][ T1862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.250694][ T4043] device veth0_vlan entered promiscuous mode [ 44.252346][ T1862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.268836][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.271623][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.295436][ T4043] device veth1_vlan entered promiscuous mode [ 44.305408][ T1862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.311147][ T1862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.316753][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.320862][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.323424][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.331481][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.368607][ T4034] device veth0_macvtap entered promiscuous mode [ 44.373694][ T4034] device veth1_macvtap entered promiscuous mode [ 44.377308][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.380265][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.382991][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.385768][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.390090][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.439571][ T4043] device veth0_macvtap entered promiscuous mode [ 44.457643][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.460690][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.463313][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.466247][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.473328][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.480899][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.483815][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.486417][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.494225][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.500948][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.513775][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.516499][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.518083][ T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.521010][ T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.526321][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.531261][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.534059][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.536893][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.558200][ T4043] device veth1_macvtap entered promiscuous mode [ 44.575951][ T4045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.583072][ T4045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.585420][ T4045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.590619][ T4045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.594291][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.646086][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.654169][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.660512][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.663365][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.665969][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.676500][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.682776][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.685362][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.690030][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.693178][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.696002][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.704924][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.709359][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.712129][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.715041][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.725188][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.736367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.739507][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.742353][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.749034][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.785657][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.800989][ T4144] loop2: detected capacity change from 0 to 8 [ 44.804945][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.822630][ T4142] loop3: detected capacity change from 0 to 40427 [ 44.823295][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.834719][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.837903][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.840599][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.844627][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.855199][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.858552][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.867339][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.870804][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.873467][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.876319][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.882123][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.885037][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.893311][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.896370][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.904475][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.918862][ T4142] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 44.921024][ T4142] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 44.935899][ T4043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.949419][ T4142] F2FS-fs (loop3): invalid crc value [ 44.952746][ T4043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.955223][ T4043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.977375][ T4043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.011970][ T4142] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.038598][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.041456][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.065010][ T4034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.070926][ T4142] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.072927][ T4142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.077793][ T4034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.080190][ T4034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.082478][ T4034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.098147][ T4142] attempt to access beyond end of device [ 45.098147][ T4142] loop3: rw=2049, want=53264, limit=40427 [ 45.170226][ T1705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.172504][ T1705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.207860][ T4037] attempt to access beyond end of device [ 45.207860][ T4037] loop3: rw=2049, want=45104, limit=40427 [ 45.223435][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.327935][ T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.330254][ T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.339506][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.407796][ T1862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.410074][ T1862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.412826][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.439193][ T1862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.441482][ T1862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.445567][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.559680][ T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.559687][ T1862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.562198][ T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.564435][ T1862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.580481][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.590286][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.709330][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 45.725472][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 45.727489][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 45.737155][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 45.807924][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 45.853225][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 45.909845][ T4155] loop4: detected capacity change from 0 to 4096 [ 45.918736][ T4156] netlink: 23932 bytes leftover after parsing attributes in process `syz.0.1'. [ 46.098002][ T4165] loop6: detected capacity change from 0 to 524288000 [ 46.123501][ T4161] loop0: detected capacity change from 0 to 4096 [ 46.132473][ T4161] ======================================================= [ 46.132473][ T4161] WARNING: The mand mount option has been deprecated and [ 46.132473][ T4161] and is ignored by this kernel. Remove the mand [ 46.132473][ T4161] option from the mount to silence this warning. [ 46.132473][ T4161] ======================================================= [ 46.184486][ T4161] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 46.194509][ T4151] loop1: detected capacity change from 0 to 32768 [ 46.228914][ T4161] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 46.251378][ T4151] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4151) [ 46.290065][ T4161] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 46.322571][ T4151] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 46.325049][ T4151] BTRFS info (device loop1): disabling tree log [ 46.326834][ T4151] BTRFS info (device loop1): using free space tree [ 46.343009][ T4151] BTRFS info (device loop1): has skinny extents [ 46.354944][ T4172] loop2: detected capacity change from 0 to 22 [ 46.389237][ T4172] romfs: Unknown parameter '' [ 46.397505][ T1705] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 46.406402][ T4034] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 46.523985][ T4172] loop2: detected capacity change from 0 to 4096 [ 46.531686][ T4177] loop4: detected capacity change from 0 to 4096 [ 46.643711][ T4151] BTRFS info (device loop1): checking UUID tree [ 46.663047][ T4204] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.774666][ T4206] loop3: detected capacity change from 0 to 512 [ 46.821682][ T4206] EXT4-fs (loop3): Ignoring removed orlov option [ 46.833227][ T4206] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,nobarrier,errors=remount-ro,orlov,journal_ioprio=0x0000000000000004,. Quota mode: writeback. [ 46.899876][ T4206] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 47.255277][ T4217] loop3: detected capacity change from 0 to 2048 [ 47.433179][ T4193] loop0: detected capacity change from 0 to 32768 [ 47.483030][ T4193] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.13 (4193) [ 47.525312][ T4217] UDF-fs: iocharset cp3255 not found [ 47.599953][ T4193] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 47.602698][ T4193] BTRFS info (device loop0): force zlib compression, level 3 [ 47.604715][ T4193] BTRFS info (device loop0): force clearing of disk cache [ 47.606651][ T4193] BTRFS info (device loop0): turning off barriers [ 47.630009][ T4193] BTRFS info (device loop0): doing ref verification [ 47.666079][ T4193] BTRFS info (device loop0): enabling disk space caching [ 47.673280][ T4193] BTRFS info (device loop0): disk space caching is enabled [ 47.675304][ T4193] BTRFS info (device loop0): has skinny extents [ 47.787334][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 47.789239][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 47.791166][ T4093] Bluetooth: hci2: command 0x0419 tx timeout [ 47.792841][ T4093] Bluetooth: hci3: command 0x0419 tx timeout [ 47.870132][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 47.956200][ T4193] BTRFS info (device loop0): enabling ssd optimizations [ 47.961379][ T4193] BTRFS info (device loop0): clearing free space tree [ 47.963783][ T4193] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 47.980174][ T4193] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.075818][ T4228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'. [ 48.094758][ T4228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 48.165054][ T4252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 48.181928][ T4252] netlink: 23932 bytes leftover after parsing attributes in process `syz.3.19'. [ 48.264699][ T4254] FAULT_INJECTION: forcing a failure. [ 48.264699][ T4254] name failslab, interval 1, probability 0, space 0, times 1 [ 48.299422][ T4254] CPU: 1 PID: 4254 Comm: syz.1.20 Not tainted 5.15.189-syzkaller #0 [ 48.301814][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.304652][ T4254] Call trace: [ 48.305569][ T4254] dump_backtrace+0x0/0x43c [ 48.306758][ T4254] show_stack+0x2c/0x3c [ 48.307903][ T4254] __dump_stack+0x30/0x40 [ 48.309130][ T4254] dump_stack_lvl+0xf8/0x160 [ 48.310352][ T4254] dump_stack+0x1c/0x5c [ 48.311561][ T4254] should_fail+0x3c0/0x51c [ 48.312761][ T4254] __should_failslab+0xbc/0x10c [ 48.314105][ T4254] should_failslab+0x10/0x28 [ 48.315410][ T4254] slab_pre_alloc_hook+0x64/0xec [ 48.316781][ T4254] __kmalloc_node+0xb8/0x520 [ 48.318059][ T4254] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 48.319249][ T4171] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4171) [ 48.319689][ T4254] slab_post_alloc_hook+0xc0/0x408 [ 48.324362][ T4254] kmem_cache_alloc+0x1e0/0x3e4 [ 48.325623][ T4254] __alloc_file+0x30/0x240 [ 48.326811][ T4254] alloc_empty_file+0xa0/0x184 [ 48.328129][ T4254] alloc_file+0x64/0x498 [ 48.329320][ T4254] alloc_file_pseudo+0x160/0x1dc [ 48.330653][ T4254] __shmem_file_setup+0x19c/0x264 [ 48.332017][ T4254] shmem_file_setup+0x40/0x54 [ 48.333286][ T4254] __arm64_sys_memfd_create+0x37c/0x514 [ 48.334889][ T4254] invoke_syscall+0x98/0x2b8 [ 48.336207][ T4254] el0_svc_common+0x138/0x258 [ 48.337530][ T4254] do_el0_svc+0x58/0x14c [ 48.338657][ T4254] el0_svc+0x78/0x1e0 [ 48.339766][ T4254] el0t_64_sync_handler+0xcc/0xe4 [ 48.341209][ T4254] el0t_64_sync+0x1a0/0x1a4 [ 48.391049][ T4257] loop3: detected capacity change from 0 to 128 [ 48.468371][ T4257] affs: No valid root block on device loop3 [ 48.531647][ T4262] binder: 4261:4262 unknown command 0 [ 48.533172][ T4262] binder: 4261:4262 ioctl c0306201 200003c0 returned -22 [ 48.535682][ T4262] binder: 4261:4262 got transaction to invalid handle, 1 [ 48.539232][ T4200] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop0 scanned by udevd (4200) [ 48.573473][ T4262] binder: 4261:4262 transaction failed 29201/-22, size 112-24 line 2917 [ 48.584369][ T1960] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.764691][ T4249] loop2: detected capacity change from 0 to 32768 [ 48.894857][ T4249] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (4249) [ 49.063160][ T4249] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 49.065763][ T4249] BTRFS info (device loop2): turning off barriers [ 49.072354][ T4249] BTRFS info (device loop2): setting nodatasum [ 49.074100][ T4249] BTRFS info (device loop2): use zlib compression, level 3 [ 49.075974][ T4249] BTRFS info (device loop2): using free space tree [ 49.110930][ T4249] BTRFS info (device loop2): has skinny extents [ 50.436667][ T4322] loop3: detected capacity change from 0 to 512 [ 50.460420][ T4322] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 50.500286][ T4330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 50.517672][ T4249] netlink: 'syz.2.18': attribute type 2 has an invalid length. [ 50.519686][ T4249] netlink: 'syz.2.18': attribute type 8 has an invalid length. [ 50.521746][ T4249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18'. [ 50.546757][ T4330] netlink: 23932 bytes leftover after parsing attributes in process `syz.4.32'. [ 50.608446][ T4332] binder: 4331:4332 unknown command 0 [ 50.609930][ T4332] binder: 4331:4332 ioctl c0306201 200003c0 returned -22 [ 50.621988][ T4332] binder: 4331:4332 got transaction to invalid handle, 1 [ 50.625077][ T4332] binder: 4331:4332 transaction failed 29201/-22, size 112-24 line 2917 [ 50.666269][ T4336] device bridge0 entered promiscuous mode [ 50.701453][ T4085] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.726888][ T4335] overlayfs: failed to resolve './file0': -2 [ 50.803934][ T4348] FAULT_INJECTION: forcing a failure. [ 50.803934][ T4348] name failslab, interval 1, probability 0, space 0, times 0 [ 50.823907][ T4348] CPU: 0 PID: 4348 Comm: syz.2.36 Not tainted 5.15.189-syzkaller #0 [ 50.826304][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.829101][ T4348] Call trace: [ 50.830010][ T4348] dump_backtrace+0x0/0x43c [ 50.831302][ T4348] show_stack+0x2c/0x3c [ 50.832487][ T4348] __dump_stack+0x30/0x40 [ 50.833648][ T4348] dump_stack_lvl+0xf8/0x160 [ 50.834923][ T4348] dump_stack+0x1c/0x5c [ 50.836047][ T4348] should_fail+0x3c0/0x51c [ 50.837328][ T4348] __should_failslab+0xbc/0x10c [ 50.838670][ T4348] should_failslab+0x10/0x28 [ 50.839980][ T4348] slab_pre_alloc_hook+0x64/0xec [ 50.841434][ T4348] kmem_cache_alloc+0x94/0x3e4 [ 50.842768][ T4348] vm_area_alloc+0x2c/0xe0 [ 50.843978][ T4348] mmap_region+0x99c/0x1390 [ 50.845211][ T4348] do_mmap+0x67c/0xdb4 [ 50.846364][ T4348] vm_mmap_pgoff+0x184/0x284 [ 50.847720][ T4348] ksys_mmap_pgoff+0x11c/0x620 [ 50.849119][ T4348] __arm64_sys_mmap+0xf8/0x110 [ 50.850533][ T4348] invoke_syscall+0x98/0x2b8 [ 50.851842][ T4348] el0_svc_common+0x138/0x258 [ 50.853130][ T4348] do_el0_svc+0x58/0x14c [ 50.854334][ T4348] el0_svc+0x78/0x1e0 [ 50.855451][ T4348] el0t_64_sync_handler+0xcc/0xe4 [ 50.856886][ T4348] el0t_64_sync+0x1a0/0x1a4 [ 50.858209][ C0] vkms_vblank_simulate: vblank timer overrun [ 50.880252][ T4342] loop1: detected capacity change from 0 to 512 [ 50.948961][ T4342] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.952131][ T4342] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 50.975399][ T4342] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.40: Corrupt directory, running e2fsck is recommended [ 50.994606][ T4342] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 50.999497][ T4342] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.40: corrupted in-inode xattr [ 51.008918][ T4342] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.40: couldn't read orphan inode 15 (err -117) [ 51.013351][ T4342] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc,init_itable,grpid,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 51.260194][ T4335] loop0: detected capacity change from 0 to 40427 [ 51.314137][ T4359] loop4: detected capacity change from 0 to 512 [ 51.351858][ T4355] loop1: detected capacity change from 0 to 4096 [ 51.357601][ T4335] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 51.359703][ T4359] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 51.362623][ T4335] F2FS-fs (loop0): invalid crc value [ 51.388386][ T4335] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.408605][ T4357] loop2: detected capacity change from 0 to 8192 [ 51.451603][ T4335] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.484475][ T4357] loop2: p3 p4 < > [ 51.486071][ T4357] loop2: p3 size 16744448 extends beyond EOD, truncated [ 51.493033][ T4346] loop3: detected capacity change from 0 to 32768 [ 51.500971][ T4363] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 51.502998][ T4363] netlink: 17 bytes leftover after parsing attributes in process `syz.2.45'. [ 51.559322][ T4034] attempt to access beyond end of device [ 51.559322][ T4034] loop0: rw=2049, want=45104, limit=40427 [ 51.638834][ T4367] capability: warning: `syz.4.49' uses 32-bit capabilities (legacy support in use) [ 51.747680][ T4369] FAULT_INJECTION: forcing a failure. [ 51.747680][ T4369] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.751395][ T4369] CPU: 1 PID: 4369 Comm: syz.4.51 Not tainted 5.15.189-syzkaller #0 [ 51.753570][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.756330][ T4369] Call trace: [ 51.757223][ T4369] dump_backtrace+0x0/0x43c [ 51.758464][ T4369] show_stack+0x2c/0x3c [ 51.759580][ T4369] __dump_stack+0x30/0x40 [ 51.760832][ T4369] dump_stack_lvl+0xf8/0x160 [ 51.762076][ T4369] dump_stack+0x1c/0x5c [ 51.763238][ T4369] should_fail+0x3c0/0x51c [ 51.764390][ T4369] should_fail_usercopy+0x20/0x30 [ 51.765751][ T4369] move_addr_to_kernel+0xac/0x294 [ 51.767185][ T4369] __sys_bind+0x13c/0x27c [ 51.768400][ T4369] __arm64_sys_bind+0x7c/0x94 [ 51.769734][ T4369] invoke_syscall+0x98/0x2b8 [ 51.770980][ T4369] el0_svc_common+0x138/0x258 [ 51.772249][ T4369] do_el0_svc+0x58/0x14c [ 51.773394][ T4369] el0_svc+0x78/0x1e0 [ 51.774449][ T4369] el0t_64_sync_handler+0xcc/0xe4 [ 51.775869][ T4369] el0t_64_sync+0x1a0/0x1a4 [ 51.867335][ T4373] misc userio: Can't change port type on an already running userio instance [ 51.951789][ T4375] loop2: detected capacity change from 0 to 64 [ 51.989517][ T4375] MINIX-fs: bad superblock [ 52.018356][ T4375] binder: 4374:4375 unknown command 0 [ 52.019790][ T4375] binder: 4374:4375 ioctl c0306201 200003c0 returned -22 [ 52.032321][ T4375] binder: 4374:4375 got transaction to invalid handle, 1 [ 52.043124][ T4375] binder: 4374:4375 transaction failed 29201/-22, size 112-24 line 2917 [ 52.060037][ T4140] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.126332][ T4387] FAULT_INJECTION: forcing a failure. [ 52.126332][ T4387] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.138586][ T4387] CPU: 0 PID: 4387 Comm: syz.2.56 Not tainted 5.15.189-syzkaller #0 [ 52.140827][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.143647][ T4387] Call trace: [ 52.144580][ T4387] dump_backtrace+0x0/0x43c [ 52.145818][ T4387] show_stack+0x2c/0x3c [ 52.146952][ T4387] __dump_stack+0x30/0x40 [ 52.148153][ T4387] dump_stack_lvl+0xf8/0x160 [ 52.149380][ T4387] dump_stack+0x1c/0x5c [ 52.150477][ T4387] should_fail+0x3c0/0x51c [ 52.151688][ T4387] should_fail_alloc_page+0x74/0xa8 [ 52.153085][ T4387] prepare_alloc_pages+0x160/0x460 [ 52.154483][ T4387] __alloc_pages+0x108/0x470 [ 52.155761][ T4387] alloc_pages+0x34c/0x5c0 [ 52.157003][ T4387] __pmd_alloc+0x54/0x498 [ 52.158298][ T4387] handle_mm_fault+0x1e04/0x2950 [ 52.159679][ T4387] do_page_fault+0x694/0xad4 [ 52.160998][ T4387] do_translation_fault+0xe0/0x130 [ 52.162369][ T4387] do_mem_abort+0x6c/0x1ac [ 52.163551][ T4387] el0_da+0x90/0x1fc [ 52.164631][ T4387] el0t_64_sync_handler+0xd8/0xe4 [ 52.165988][ T4387] el0t_64_sync+0x1a0/0x1a4 [ 52.167368][ C0] vkms_vblank_simulate: vblank timer overrun [ 52.256594][ T4387] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 52.346510][ T4390] loop4: detected capacity change from 0 to 4096 [ 52.434153][ T4390] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 52.437460][ T4390] ntfs3: loop4: Failed to load $Extend. [ 52.471385][ T4387] loop2: detected capacity change from 0 to 4096 [ 52.501752][ T4387] ntfs: (device loop2): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 52.507224][ T4387] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 52.514330][ T4387] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 52.889433][ T4386] loop3: detected capacity change from 0 to 32768 [ 52.922869][ T4407] FAULT_INJECTION: forcing a failure. [ 52.922869][ T4407] name failslab, interval 1, probability 0, space 0, times 0 [ 52.926652][ T4407] CPU: 0 PID: 4407 Comm: syz.4.63 Not tainted 5.15.189-syzkaller #0 [ 52.928834][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.931557][ T4407] Call trace: [ 52.932432][ T4407] dump_backtrace+0x0/0x43c [ 52.933654][ T4407] show_stack+0x2c/0x3c [ 52.934830][ T4407] __dump_stack+0x30/0x40 [ 52.935995][ T4407] dump_stack_lvl+0xf8/0x160 [ 52.937292][ T4407] dump_stack+0x1c/0x5c [ 52.938454][ T4407] should_fail+0x3c0/0x51c [ 52.939635][ T4407] __should_failslab+0xbc/0x10c [ 52.940937][ T4407] should_failslab+0x10/0x28 [ 52.942207][ T4407] slab_pre_alloc_hook+0x64/0xec [ 52.943594][ T4407] kmem_cache_alloc_trace+0x98/0x3fc [ 52.945004][ T4407] reuseport_alloc+0x118/0x3ec [ 52.946340][ T4407] udp_lib_get_port+0xab0/0x15dc [ 52.947706][ T4407] udp_v4_get_port+0x190/0x234 [ 52.948967][ T4407] __inet_bind+0x484/0x8d0 [ 52.950193][ T4407] inet_bind+0xd4/0xec [ 52.951309][ T4407] __sys_bind+0x1dc/0x27c [ 52.952477][ T4407] __arm64_sys_bind+0x7c/0x94 [ 52.953741][ T4407] invoke_syscall+0x98/0x2b8 [ 52.954946][ T4407] el0_svc_common+0x138/0x258 [ 52.956243][ T4407] do_el0_svc+0x58/0x14c [ 52.957454][ T4407] el0_svc+0x78/0x1e0 [ 52.958568][ T4407] el0t_64_sync_handler+0xcc/0xe4 [ 52.959961][ T4407] el0t_64_sync+0x1a0/0x1a4 [ 52.961335][ C0] vkms_vblank_simulate: vblank timer overrun [ 53.018313][ T4386] XFS: attr2 mount option is deprecated. [ 53.019911][ T4386] XFS: ikeep mount option is deprecated. [ 53.021395][ T4386] XFS: noikeep mount option is deprecated. [ 53.154217][ T4386] XFS (loop3): Mounting V5 Filesystem [ 53.241823][ T4403] loop2: detected capacity change from 0 to 8192 [ 53.325047][ T4386] XFS (loop3): Ending clean mount [ 53.356848][ T4386] XFS (loop3): Quotacheck needed: Please wait. [ 53.400543][ T4386] XFS (loop3): Quotacheck: Done. [ 53.444614][ T4403] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 53.450466][ T4403] REISERFS (device loop2): using ordered data mode [ 53.452329][ T4403] reiserfs: using flush barriers [ 53.467164][ T4403] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.471905][ T4403] REISERFS (device loop2): checking transaction log (loop2) [ 53.504829][ T4432] loop4: detected capacity change from 0 to 64 [ 53.550171][ T4037] XFS (loop3): Unmounting Filesystem [ 53.680710][ T4432] MINIX-fs: bad superblock [ 53.780275][ T4403] REISERFS (device loop2): Using tea hash to sort names [ 53.783801][ T4403] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 53.824071][ T4432] binder: BINDER_SET_CONTEXT_MGR already set [ 53.825905][ T4432] binder: 4431:4432 ioctl 4018620d 20000040 returned -16 [ 53.835440][ T4432] binder: 4431:4432 got transaction to invalid handle, 1 [ 53.837784][ T4432] binder: 4431:4432 transaction failed 29201/-22, size 112-24 line 2917 [ 53.840902][ T4140] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.969907][ T4409] loop0: detected capacity change from 0 to 32768 [ 54.065182][ T4201] loop0: p1 p2 p3 < p5 p6 > [ 54.077239][ T4201] loop0: p1 size 242222080 extends beyond EOD, truncated [ 54.101210][ T4201] loop0: p2 start 4294967295 is beyond EOD, truncated [ 54.106888][ T4443] FAULT_INJECTION: forcing a failure. [ 54.106888][ T4443] name failslab, interval 1, probability 0, space 0, times 0 [ 54.148921][ T4443] CPU: 1 PID: 4443 Comm: syz.1.70 Not tainted 5.15.189-syzkaller #0 [ 54.151204][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.153955][ T4443] Call trace: [ 54.154786][ T4443] dump_backtrace+0x0/0x43c [ 54.155998][ T4443] show_stack+0x2c/0x3c [ 54.157168][ T4443] __dump_stack+0x30/0x40 [ 54.158335][ T4443] dump_stack_lvl+0xf8/0x160 [ 54.159585][ T4443] dump_stack+0x1c/0x5c [ 54.160750][ T4443] should_fail+0x3c0/0x51c [ 54.161926][ T4443] __should_failslab+0xbc/0x10c [ 54.163301][ T4443] should_failslab+0x10/0x28 [ 54.164536][ T4443] slab_pre_alloc_hook+0x64/0xec [ 54.165961][ T4443] kmem_cache_alloc+0x94/0x3e4 [ 54.167265][ T4443] pte_alloc_one+0x78/0x258 [ 54.168563][ T4443] __pte_alloc+0x34/0x21c [ 54.169750][ T4443] handle_mm_fault+0x2388/0x2950 [ 54.171170][ T4443] do_page_fault+0x694/0xad4 [ 54.172398][ T4443] do_translation_fault+0xe0/0x130 [ 54.173789][ T4443] do_mem_abort+0x6c/0x1ac [ 54.175004][ T4443] el0_da+0x90/0x1fc [ 54.176062][ T4443] el0t_64_sync_handler+0xd8/0xe4 [ 54.177400][ T4443] el0t_64_sync+0x1a0/0x1a4 [ 54.196576][ T4450] loop4: detected capacity change from 0 to 128 [ 54.205145][ T4450] FAT-fs (loop4): Unrecognized mount option "F" or missing value [ 54.211785][ T4443] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 54.226235][ T4409] loop0: p1 p2 p3 < p5 p6 > [ 54.228024][ T4409] loop0: p1 size 242222080 extends beyond EOD, truncated [ 54.235156][ T4409] loop0: p2 start 4294967295 is beyond EOD, truncated [ 54.324448][ T4454] FAULT_INJECTION: forcing a failure. [ 54.324448][ T4454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.337451][ T4454] CPU: 0 PID: 4454 Comm: syz.4.75 Not tainted 5.15.189-syzkaller #0 [ 54.339624][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.342529][ T4454] Call trace: [ 54.343420][ T4454] dump_backtrace+0x0/0x43c [ 54.344735][ T4454] show_stack+0x2c/0x3c [ 54.345880][ T4454] __dump_stack+0x30/0x40 [ 54.347094][ T4454] dump_stack_lvl+0xf8/0x160 [ 54.348421][ T4454] dump_stack+0x1c/0x5c [ 54.349548][ T4454] should_fail+0x3c0/0x51c [ 54.350771][ T4454] should_fail_usercopy+0x20/0x30 [ 54.352201][ T4454] simple_read_from_buffer+0xd0/0x264 [ 54.353686][ T4454] proc_fail_nth_read+0x19c/0x244 [ 54.355143][ T4454] vfs_read+0x278/0xa10 [ 54.356368][ T4454] ksys_read+0x120/0x210 [ 54.357678][ T4454] __arm64_sys_read+0x7c/0x90 [ 54.359006][ T4454] invoke_syscall+0x98/0x2b8 [ 54.360351][ T4454] el0_svc_common+0x138/0x258 [ 54.361662][ T4454] do_el0_svc+0x58/0x14c [ 54.362911][ T4454] el0_svc+0x78/0x1e0 [ 54.363991][ T4454] el0t_64_sync_handler+0xcc/0xe4 [ 54.365390][ T4454] el0t_64_sync+0x1a0/0x1a4 [ 54.366794][ C0] vkms_vblank_simulate: vblank timer overrun [ 54.628173][ T4466] binder: BINDER_SET_CONTEXT_MGR already set [ 54.634556][ T4466] binder: 4465:4466 ioctl 4018620d 20000040 returned -16 [ 54.641248][ T4466] binder: 4465:4466 got transaction to invalid handle, 1 [ 54.648956][ T4466] binder: 4465:4466 transaction failed 29201/-22, size 112-24 line 2917 [ 54.657408][ T1960] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.700086][ T4469] loop1: detected capacity change from 0 to 64 [ 54.714040][ T4469] MINIX-fs: bad superblock [ 54.738937][ T4469] binder: BINDER_SET_CONTEXT_MGR already set [ 54.741527][ T4469] binder: 4468:4469 ioctl 4018620d 20000040 returned -16 [ 54.744212][ T4469] binder: 4468:4469 got transaction to invalid handle, 1 [ 54.746331][ T4469] binder: 4468:4469 transaction failed 29201/-22, size 112-24 line 2917 [ 54.757067][ T4223] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.788404][ T4471] loop0: detected capacity change from 0 to 512 [ 54.813392][ T4471] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 54.914079][ T4477] loop1: detected capacity change from 0 to 512 [ 54.933761][ T4477] EXT4-fs (loop1): Ignoring removed oldalloc option [ 54.941395][ T4477] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.960108][ T4477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.966662][ T4474] loop2: detected capacity change from 0 to 4096 [ 54.977904][ T4484] FAULT_INJECTION: forcing a failure. [ 54.977904][ T4484] name failslab, interval 1, probability 0, space 0, times 0 [ 54.981829][ T4484] CPU: 0 PID: 4484 Comm: syz.3.86 Not tainted 5.15.189-syzkaller #0 [ 54.983333][ T4477] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 54.984022][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.991026][ T4484] Call trace: [ 54.991978][ T4484] dump_backtrace+0x0/0x43c [ 54.993265][ T4484] show_stack+0x2c/0x3c [ 54.994407][ T4484] __dump_stack+0x30/0x40 [ 54.995648][ T4484] dump_stack_lvl+0xf8/0x160 [ 54.996806][ T4477] EXT4-fs (loop1): 1 truncate cleaned up [ 54.996965][ T4484] dump_stack+0x1c/0x5c [ 54.996980][ T4484] should_fail+0x3c0/0x51c [ 54.996992][ T4484] __should_failslab+0xbc/0x10c [ 54.997003][ T4484] should_failslab+0x10/0x28 [ 54.997012][ T4484] slab_pre_alloc_hook+0x64/0xec [ 54.997023][ T4484] kmem_cache_alloc+0x94/0x3e4 [ 54.997033][ T4484] __anon_vma_prepare+0x70/0x374 [ 54.997043][ T4484] handle_mm_fault+0x2740/0x2950 [ 54.997052][ T4484] do_page_fault+0x694/0xad4 [ 54.997062][ T4484] do_translation_fault+0xe0/0x130 [ 54.997072][ T4484] do_mem_abort+0x6c/0x1ac [ 55.003159][ T4477] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 55.003669][ T4484] el0_da+0x90/0x1fc [ 55.019923][ T4484] el0t_64_sync_handler+0xd8/0xe4 [ 55.021343][ T4484] el0t_64_sync+0x1a0/0x1a4 [ 55.022609][ C0] vkms_vblank_simulate: vblank timer overrun [ 55.041176][ T4484] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 55.076807][ T4484] loop3: detected capacity change from 0 to 4096 [ 55.195609][ T4045] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 55.207362][ T4484] ntfs: (device loop3): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 55.211682][ T4484] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 55.218879][ T4484] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata. [ 55.523769][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 55.575357][ T4494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 55.592903][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 55.689753][ T4485] loop0: detected capacity change from 0 to 32768 [ 55.744866][ T4485] Currently only 4K block size supported! [ 55.746813][ T4485] Mount JFS Failure: -22 [ 55.756394][ T4485] jfs_mount failed w/return code = -22 [ 55.786468][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.815254][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 56.114463][ T4518] loop0: detected capacity change from 0 to 64 [ 56.179644][ T4518] MINIX-fs: bad superblock [ 56.259305][ T4518] binder: 4517:4518 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 56.269165][ T4518] binder: 4517:4518 unknown command 0 [ 56.274963][ T4518] binder: 4517:4518 ioctl c0306201 200003c0 returned -22 [ 56.281789][ T4518] binder: 4517:4518 got transaction to invalid handle, 1 [ 56.297140][ T4518] binder: 4517:4518 transaction failed 29201/-22, size 112-24 line 2917 [ 56.303009][ T4140] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.359975][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 56.363234][ T4521] loop3: detected capacity change from 0 to 512 [ 56.393123][ T4522] loop0: detected capacity change from 0 to 1024 [ 56.405750][ T4171] udevd[4171]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 56.431887][ T4521] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 56.463383][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.648204][ T4528] FAULT_INJECTION: forcing a failure. [ 56.648204][ T4528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.651911][ T4528] CPU: 0 PID: 4528 Comm: syz.4.99 Not tainted 5.15.189-syzkaller #0 [ 56.654138][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.656958][ T4528] Call trace: [ 56.657832][ T4528] dump_backtrace+0x0/0x43c [ 56.659134][ T4528] show_stack+0x2c/0x3c [ 56.660356][ T4528] __dump_stack+0x30/0x40 [ 56.661523][ T4528] dump_stack_lvl+0xf8/0x160 [ 56.662807][ T4528] dump_stack+0x1c/0x5c [ 56.663985][ T4528] should_fail+0x3c0/0x51c [ 56.665284][ T4528] should_fail_alloc_page+0x74/0xa8 [ 56.666775][ T4528] prepare_alloc_pages+0x160/0x460 [ 56.668203][ T4528] __alloc_pages+0x108/0x470 [ 56.669510][ T4528] alloc_pages+0x34c/0x5c0 [ 56.670798][ T4528] __pmd_alloc+0x54/0x498 [ 56.672020][ T4528] handle_mm_fault+0x1e04/0x2950 [ 56.673380][ T4528] do_page_fault+0x694/0xad4 [ 56.674729][ T4528] do_translation_fault+0xe0/0x130 [ 56.676211][ T4528] do_mem_abort+0x6c/0x1ac [ 56.677438][ T4528] el0_da+0x90/0x1fc [ 56.678538][ T4528] el0t_64_sync_handler+0xd8/0xe4 [ 56.679956][ T4528] el0t_64_sync+0x1a0/0x1a4 [ 56.836671][ T4528] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 57.060982][ T4528] loop4: detected capacity change from 0 to 4096 [ 57.117417][ T4528] ntfs: (device loop4): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 57.119829][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 57.121617][ T4528] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 57.129600][ T4171] udevd[4171]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 57.179284][ T4528] ntfs: (device loop4): ntfs_fill_super(): Failed to load essential metadata. [ 57.203305][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 57.246090][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 57.584197][ T4545] Zero length message leads to an empty skb [ 57.850544][ T1960] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 57.873299][ T4531] loop0: detected capacity change from 0 to 32768 [ 57.874755][ T1960] hid-generic: probe of 0005:046D:FFF9.0001 failed with error -22 [ 57.916359][ T4538] loop3: detected capacity change from 0 to 32768 [ 57.929672][ T4555] loop2: detected capacity change from 0 to 64 [ 57.954633][ T4531] XFS (loop0): Mounting V5 Filesystem [ 57.979695][ T4555] MINIX-fs: bad superblock [ 58.025612][ T4561] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 58.037470][ T3616] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 58.045534][ T4555] binder: 4553:4555 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 58.061476][ T4555] binder: 4553:4555 unknown command 0 [ 58.061788][ T4531] XFS (loop0): Ending clean mount [ 58.067869][ T4555] binder: 4553:4555 ioctl c0306201 200003c0 returned -22 [ 58.071431][ T4531] XFS (loop0): Quotacheck needed: Please wait. [ 58.077370][ T3616] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 58.079848][ T4555] binder: 4553:4555 got transaction to invalid handle, 1 [ 58.089014][ T4555] binder: 4553:4555 transaction failed 29201/-22, size 112-24 line 2917 [ 58.102598][ T3616] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.104636][ T4531] XFS (loop0): Quotacheck: Done. [ 58.161193][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 58.386039][ T4034] XFS (loop0): Unmounting Filesystem [ 58.529506][ T4570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.674510][ T4579] loop3: detected capacity change from 0 to 1024 [ 58.674884][ T4582] FAULT_INJECTION: forcing a failure. [ 58.674884][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 58.708376][ T4582] CPU: 0 PID: 4582 Comm: syz.4.115 Not tainted 5.15.189-syzkaller #0 [ 58.710841][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.713716][ T4582] Call trace: [ 58.714621][ T4582] dump_backtrace+0x0/0x43c [ 58.715905][ T4582] show_stack+0x2c/0x3c [ 58.717071][ T4582] __dump_stack+0x30/0x40 [ 58.718276][ T4582] dump_stack_lvl+0xf8/0x160 [ 58.719553][ T4582] dump_stack+0x1c/0x5c [ 58.720746][ T4582] should_fail+0x3c0/0x51c [ 58.722022][ T4582] __should_failslab+0xbc/0x10c [ 58.723530][ T4582] should_failslab+0x10/0x28 [ 58.724835][ T4582] slab_pre_alloc_hook+0x64/0xec [ 58.726260][ T4582] kmem_cache_alloc+0x94/0x3e4 [ 58.727689][ T4582] __anon_vma_prepare+0x70/0x374 [ 58.729044][ T4582] handle_mm_fault+0x2740/0x2950 [ 58.730522][ T4582] do_page_fault+0x694/0xad4 [ 58.731839][ T4582] do_translation_fault+0xe0/0x130 [ 58.733295][ T4582] do_mem_abort+0x6c/0x1ac [ 58.734520][ T4582] el0_da+0x90/0x1fc [ 58.735590][ T4582] el0t_64_sync_handler+0xd8/0xe4 [ 58.737003][ T4582] el0t_64_sync+0x1a0/0x1a4 [ 58.738357][ C0] vkms_vblank_simulate: vblank timer overrun [ 58.789609][ T4582] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 58.883211][ T4588] FAULT_INJECTION: forcing a failure. [ 58.883211][ T4588] name failslab, interval 1, probability 0, space 0, times 0 [ 58.888699][ T4566] loop2: detected capacity change from 0 to 32768 [ 58.898829][ T4588] CPU: 0 PID: 4588 Comm: syz.0.111 Not tainted 5.15.189-syzkaller #0 [ 58.901264][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.904070][ T4588] Call trace: [ 58.904965][ T4588] dump_backtrace+0x0/0x43c [ 58.906303][ T4588] show_stack+0x2c/0x3c [ 58.907484][ T4588] __dump_stack+0x30/0x40 [ 58.908682][ T4588] dump_stack_lvl+0xf8/0x160 [ 58.909960][ T4588] dump_stack+0x1c/0x5c [ 58.911125][ T4588] should_fail+0x3c0/0x51c [ 58.912373][ T4588] __should_failslab+0xbc/0x10c [ 58.913783][ T4588] should_failslab+0x10/0x28 [ 58.915070][ T4588] slab_pre_alloc_hook+0x64/0xec [ 58.916476][ T4588] kmem_cache_alloc+0x94/0x3e4 [ 58.917745][ T4588] getname_flags+0xb8/0x450 [ 58.918998][ T4588] user_path_at_empty+0x40/0x1a0 [ 58.920387][ T4588] vfs_statx+0xf4/0x458 [ 58.921548][ T4588] __arm64_sys_statx+0x150/0x1e4 [ 58.922872][ T4588] invoke_syscall+0x98/0x2b8 [ 58.924136][ T4588] el0_svc_common+0x138/0x258 [ 58.925444][ T4588] do_el0_svc+0x58/0x14c [ 58.926638][ T4588] el0_svc+0x78/0x1e0 [ 58.927723][ T4588] el0t_64_sync_handler+0xcc/0xe4 [ 58.929105][ T4588] el0t_64_sync+0x1a0/0x1a4 [ 58.930388][ C0] vkms_vblank_simulate: vblank timer overrun [ 58.935612][ T4566] jfs: Unrecognized mount option "gid=Y~95?RT*KAN·XqHk>qĻ" or missing value [ 58.974383][ T4582] loop4: detected capacity change from 0 to 4096 [ 58.999560][ T4593] loop3: detected capacity change from 0 to 64 [ 59.045027][ T4582] ntfs: (device loop4): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 59.051909][ T4582] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 59.054435][ T4593] MINIX-fs: bad superblock [ 59.070992][ T4601] syz.0.119 uses obsolete (PF_INET,SOCK_PACKET) [ 59.075539][ T4582] ntfs: (device loop4): ntfs_fill_super(): Failed to load essential metadata. [ 59.141457][ T4593] binder: 4591:4593 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 59.145479][ T4593] binder: 4591:4593 unknown command 0 [ 59.147327][ T4593] binder: 4591:4593 ioctl c0306201 200003c0 returned -22 [ 59.155875][ T4593] binder: 4591:4593 got transaction to invalid handle, 1 [ 59.163607][ T4593] binder: 4591:4593 transaction failed 29201/-22, size 112-24 line 2917 [ 59.186586][ T4225] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.278989][ T4612] loop0: detected capacity change from 0 to 512 [ 59.305728][ T4618] loop4: detected capacity change from 0 to 512 [ 59.336684][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 59.341452][ T4612] EXT4-fs (loop0): Ignoring removed nobh option [ 59.343221][ T4612] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.363990][ T4621] loop2: detected capacity change from 0 to 512 [ 59.380264][ T4618] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 59.391833][ T4612] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.126: iget: bad i_size value: 38620345925642 [ 59.401258][ T4612] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.126: couldn't read orphan inode 15 (err -117) [ 59.407394][ T4612] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 59.438950][ T4621] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 59.448542][ T4612] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.126: bg 0: block 5: invalid block bitmap [ 59.492835][ T4612] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 63 with max blocks 1 with error 28 [ 59.542242][ T4612] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.542242][ T4612] [ 59.561451][ T4612] EXT4-fs (loop0): Total free blocks count 0 [ 59.566084][ T4612] EXT4-fs (loop0): Free/Dirty block details [ 59.573067][ T4612] EXT4-fs (loop0): free_blocks=0 [ 59.575896][ T4612] EXT4-fs (loop0): dirty_blocks=1 [ 59.580861][ T4612] EXT4-fs (loop0): Block reservation details [ 59.584309][ T4612] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 59.645230][ T4627] loop2: detected capacity change from 0 to 256 [ 59.775179][ T4634] loop0: detected capacity change from 0 to 512 [ 59.813217][ T4634] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 59.826485][ T4634] FAULT_INJECTION: forcing a failure. [ 59.826485][ T4634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.836550][ T4634] CPU: 1 PID: 4634 Comm: syz.0.130 Not tainted 5.15.189-syzkaller #0 [ 59.838826][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.841627][ T4634] Call trace: [ 59.842542][ T4634] dump_backtrace+0x0/0x43c [ 59.843820][ T4634] show_stack+0x2c/0x3c [ 59.844977][ T4634] __dump_stack+0x30/0x40 [ 59.846221][ T4634] dump_stack_lvl+0xf8/0x160 [ 59.847529][ T4634] dump_stack+0x1c/0x5c [ 59.848719][ T4634] should_fail+0x3c0/0x51c [ 59.849927][ T4634] should_fail_usercopy+0x20/0x30 [ 59.851314][ T4634] strncpy_from_user+0x48/0x598 [ 59.852669][ T4634] getname_flags+0xec/0x450 [ 59.853980][ T4634] user_path_at_empty+0x40/0x1a0 [ 59.855348][ T4634] vfs_statx+0xf4/0x458 [ 59.856463][ T4634] __arm64_sys_statx+0x150/0x1e4 [ 59.857837][ T4634] invoke_syscall+0x98/0x2b8 [ 59.859075][ T4634] el0_svc_common+0x138/0x258 [ 59.860360][ T4634] do_el0_svc+0x58/0x14c [ 59.861654][ T4634] el0_svc+0x78/0x1e0 [ 59.862747][ T4634] el0t_64_sync_handler+0xcc/0xe4 [ 59.864135][ T4634] el0t_64_sync+0x1a0/0x1a4 [ 59.877760][ T4637] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 60.224818][ T4648] loop0: detected capacity change from 0 to 64 [ 60.276999][ T4648] MINIX-fs: bad superblock [ 60.286320][ T4648] binder: 4647:4648 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 60.324537][ T4650] FAULT_INJECTION: forcing a failure. [ 60.324537][ T4650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.369893][ T4650] CPU: 0 PID: 4650 Comm: syz.3.137 Not tainted 5.15.189-syzkaller #0 [ 60.372212][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.374926][ T4650] Call trace: [ 60.375787][ T4650] dump_backtrace+0x0/0x43c [ 60.377017][ T4650] show_stack+0x2c/0x3c [ 60.378156][ T4650] __dump_stack+0x30/0x40 [ 60.379314][ T4650] dump_stack_lvl+0xf8/0x160 [ 60.380533][ T4650] dump_stack+0x1c/0x5c [ 60.381732][ T4650] should_fail+0x3c0/0x51c [ 60.382970][ T4650] should_fail_alloc_page+0x74/0xa8 [ 60.384353][ T4650] prepare_alloc_pages+0x160/0x460 [ 60.385730][ T4650] __alloc_pages+0x108/0x470 [ 60.386987][ T4650] alloc_pages_vma+0x284/0x7a8 [ 60.388272][ T4650] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 60.389943][ T4650] handle_mm_fault+0x1904/0x2950 [ 60.391287][ T4650] do_page_fault+0x694/0xad4 [ 60.392555][ T4650] do_translation_fault+0xe0/0x130 [ 60.393888][ T4650] do_mem_abort+0x6c/0x1ac [ 60.395112][ T4650] el0_da+0x90/0x1fc [ 60.396239][ T4650] el0t_64_sync_handler+0xd8/0xe4 [ 60.397603][ T4650] el0t_64_sync+0x1a0/0x1a4 [ 60.458826][ T4632] loop4: detected capacity change from 0 to 32768 [ 60.472095][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 60.498723][ T4650] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 60.580004][ T4650] loop3: detected capacity change from 0 to 4096 [ 60.585993][ T4657] loop0: detected capacity change from 0 to 512 [ 60.622201][ T4630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.645439][ T4650] ntfs: (device loop3): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 60.655711][ T4650] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 60.672950][ T4650] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata. [ 60.682782][ T4657] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.865389][ T4668] loop2: detected capacity change from 0 to 256 [ 60.871949][ T4657] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #2: comm syz.0.139: corrupted inode contents [ 60.884600][ T4657] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #2: comm syz.0.139: mark_inode_dirty error [ 60.893963][ T4657] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #2: comm syz.0.139: corrupted inode contents [ 60.903687][ T4657] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.139: mark_inode_dirty error [ 60.912492][ T4657] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #2: comm syz.0.139: corrupted inode contents [ 60.951462][ T4668] FAT-fs (loop2): Directory bread(block 64) failed [ 60.953285][ T4668] FAT-fs (loop2): Directory bread(block 65) failed [ 60.976146][ T4668] FAT-fs (loop2): Directory bread(block 66) failed [ 60.986095][ T4668] FAT-fs (loop2): Directory bread(block 67) failed [ 60.996439][ T4668] FAT-fs (loop2): Directory bread(block 68) failed [ 61.003831][ T4668] FAT-fs (loop2): Directory bread(block 69) failed [ 61.005798][ T4668] FAT-fs (loop2): Directory bread(block 70) failed [ 61.015592][ T4668] FAT-fs (loop2): Directory bread(block 71) failed [ 61.024618][ T4668] FAT-fs (loop2): Directory bread(block 72) failed [ 61.026562][ T4668] FAT-fs (loop2): Directory bread(block 73) failed [ 61.029594][ T4657] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #2: comm syz.0.139: mark_inode_dirty error [ 61.036159][ T4657] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #2: comm syz.0.139: corrupted inode contents [ 61.738635][ T4672] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #2: comm syz.0.139: corrupted inode contents [ 61.787219][ T4672] EXT4-fs error (device loop0): ext4_append:88: inode #2: comm syz.0.139: mark_inode_dirty error [ 61.804373][ T4672] EXT4-fs error (device loop0) in ext4_append:100: Corrupt filesystem [ 61.946605][ T4682] FAULT_INJECTION: forcing a failure. [ 61.946605][ T4682] name failslab, interval 1, probability 0, space 0, times 0 [ 61.955283][ T4682] CPU: 1 PID: 4682 Comm: syz.4.146 Not tainted 5.15.189-syzkaller #0 [ 61.957525][ T4682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.960345][ T4682] Call trace: [ 61.961256][ T4682] dump_backtrace+0x0/0x43c [ 61.962557][ T4682] show_stack+0x2c/0x3c [ 61.963620][ T4682] __dump_stack+0x30/0x40 [ 61.964781][ T4682] dump_stack_lvl+0xf8/0x160 [ 61.965989][ T4682] dump_stack+0x1c/0x5c [ 61.967201][ T4682] should_fail+0x3c0/0x51c [ 61.968425][ T4682] __should_failslab+0xbc/0x10c [ 61.969751][ T4682] should_failslab+0x10/0x28 [ 61.971056][ T4682] slab_pre_alloc_hook+0x64/0xec [ 61.972491][ T4682] __kmalloc+0xbc/0x44c [ 61.973627][ T4682] tomoyo_realpath_from_path+0xcc/0x510 [ 61.975273][ T4682] tomoyo_path_perm+0x1b4/0x440 [ 61.976597][ T4682] tomoyo_inode_getattr+0x28/0x38 [ 61.978041][ T4682] security_inode_getattr+0xd8/0x124 [ 61.979532][ T4682] vfs_statx+0x118/0x458 [ 61.980704][ T4682] __arm64_sys_statx+0x150/0x1e4 [ 61.982034][ T4682] invoke_syscall+0x98/0x2b8 [ 61.983292][ T4682] el0_svc_common+0x138/0x258 [ 61.984544][ T4682] do_el0_svc+0x58/0x14c [ 61.985757][ T4682] el0_svc+0x78/0x1e0 [ 61.986871][ T4682] el0t_64_sync_handler+0xcc/0xe4 [ 61.988265][ T4682] el0t_64_sync+0x1a0/0x1a4 [ 62.027260][ T4682] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.133931][ T4690] loop4: detected capacity change from 0 to 2048 [ 62.167982][ T4692] loop2: detected capacity change from 0 to 64 [ 62.176732][ T4690] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 62.186494][ T4690] UDF-fs: Scanning with blocksize 512 failed [ 62.205529][ T4690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.210780][ T4692] MINIX-fs: bad superblock [ 62.272883][ T4697] FAULT_INJECTION: forcing a failure. [ 62.272883][ T4697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.276665][ T4697] CPU: 1 PID: 4697 Comm: syz.0.154 Not tainted 5.15.189-syzkaller #0 [ 62.278917][ T4697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.281725][ T4697] Call trace: [ 62.282611][ T4697] dump_backtrace+0x0/0x43c [ 62.283854][ T4697] show_stack+0x2c/0x3c [ 62.284976][ T4697] __dump_stack+0x30/0x40 [ 62.286253][ T4697] dump_stack_lvl+0xf8/0x160 [ 62.287500][ T4697] dump_stack+0x1c/0x5c [ 62.288632][ T4697] should_fail+0x3c0/0x51c [ 62.289839][ T4697] should_fail_alloc_page+0x74/0xa8 [ 62.291350][ T4697] prepare_alloc_pages+0x160/0x460 [ 62.292817][ T4697] __alloc_pages+0x108/0x470 [ 62.294122][ T4697] alloc_pages_vma+0x284/0x7a8 [ 62.295470][ T4697] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 62.297201][ T4697] handle_mm_fault+0x1904/0x2950 [ 62.298532][ T4697] do_page_fault+0x694/0xad4 [ 62.299764][ T4697] do_translation_fault+0xe0/0x130 [ 62.301230][ T4697] do_mem_abort+0x6c/0x1ac [ 62.302453][ T4697] el0_da+0x90/0x1fc [ 62.303561][ T4697] el0t_64_sync_handler+0xd8/0xe4 [ 62.304981][ T4697] el0t_64_sync+0x1a0/0x1a4 [ 62.334874][ T4692] binder: 4691:4692 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 62.358449][ T4697] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 62.435473][ T4703] loop4: detected capacity change from 0 to 2048 [ 62.439780][ T4697] loop0: detected capacity change from 0 to 4096 [ 62.456339][ T4697] ntfs: (device loop0): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 62.460893][ T4697] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 62.466423][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 62.469810][ T4697] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 62.524910][ T4706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.158'. [ 62.544828][ T4706] syz.2.158 sent an empty control message without MSG_MORE. [ 62.613340][ T4708] loop4: detected capacity change from 0 to 64 [ 62.632070][ T4708] hfs: invalid uid -1 [ 62.633355][ T4708] hfs: unable to parse mount options [ 62.774709][ T4699] loop3: detected capacity change from 0 to 32768 [ 62.855612][ T4715] loop4: detected capacity change from 0 to 1024 [ 62.912882][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 62.925062][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 62.927796][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 62.939693][ T4717] loop0: detected capacity change from 0 to 4096 [ 62.966374][ T4715] EXT4-fs error (device loop4): ext4_fill_super:4839: comm syz.4.162: inode #2: comm syz.4.162: iget: illegal inode # [ 62.971207][ T4715] EXT4-fs (loop4): get root inode failed [ 62.972739][ T4715] EXT4-fs (loop4): mount failed [ 63.037913][ T4717] ntfs: (device loop0): parse_options(): Unrecognized mount option 000000000000000000000000x000000000000ee00. [ 63.109164][ T4732] loop3: detected capacity change from 0 to 64 [ 63.150857][ T4732] MINIX-fs: bad superblock [ 63.250294][ T4732] binder: 4730:4732 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 63.327578][ T4743] FAULT_INJECTION: forcing a failure. [ 63.327578][ T4743] name failslab, interval 1, probability 0, space 0, times 0 [ 63.331054][ T4743] CPU: 0 PID: 4743 Comm: syz.0.171 Not tainted 5.15.189-syzkaller #0 [ 63.333161][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.335855][ T4743] Call trace: [ 63.336720][ T4743] dump_backtrace+0x0/0x43c [ 63.337879][ T4743] show_stack+0x2c/0x3c [ 63.339043][ T4743] __dump_stack+0x30/0x40 [ 63.340192][ T4743] dump_stack_lvl+0xf8/0x160 [ 63.341391][ T4743] dump_stack+0x1c/0x5c [ 63.342537][ T4743] should_fail+0x3c0/0x51c [ 63.343724][ T4743] __should_failslab+0xbc/0x10c [ 63.345029][ T4743] should_failslab+0x10/0x28 [ 63.346293][ T4743] slab_pre_alloc_hook+0x64/0xec [ 63.347656][ T4743] __kmalloc+0xbc/0x44c [ 63.348554][ T4749] loop2: detected capacity change from 0 to 256 [ 63.348836][ T4743] tomoyo_encode+0x274/0x4a4 [ 63.351461][ T4748] FAULT_INJECTION: forcing a failure. [ 63.351461][ T4748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.351793][ T4743] tomoyo_realpath_from_path+0x4bc/0x510 [ 63.356954][ T4743] tomoyo_path_perm+0x1b4/0x440 [ 63.358281][ T4743] tomoyo_inode_getattr+0x28/0x38 [ 63.359615][ T4743] security_inode_getattr+0xd8/0x124 [ 63.361069][ T4743] vfs_statx+0x118/0x458 [ 63.362227][ T4743] __arm64_sys_statx+0x150/0x1e4 [ 63.363575][ T4743] invoke_syscall+0x98/0x2b8 [ 63.364789][ T4743] el0_svc_common+0x138/0x258 [ 63.366034][ T4743] do_el0_svc+0x58/0x14c [ 63.367184][ T4743] el0_svc+0x78/0x1e0 [ 63.368217][ T4743] el0t_64_sync_handler+0xcc/0xe4 [ 63.369571][ T4743] el0t_64_sync+0x1a0/0x1a4 [ 63.370745][ T4748] CPU: 1 PID: 4748 Comm: syz.3.174 Not tainted 5.15.189-syzkaller #0 [ 63.373017][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.375760][ T4748] Call trace: [ 63.376665][ T4748] dump_backtrace+0x0/0x43c [ 63.377896][ T4748] show_stack+0x2c/0x3c [ 63.378993][ T4748] __dump_stack+0x30/0x40 [ 63.380177][ T4748] dump_stack_lvl+0xf8/0x160 [ 63.381451][ T4748] dump_stack+0x1c/0x5c [ 63.382588][ T4748] should_fail+0x3c0/0x51c [ 63.383837][ T4748] should_fail_alloc_page+0x74/0xa8 [ 63.385293][ T4748] prepare_alloc_pages+0x160/0x460 [ 63.386697][ T4748] __alloc_pages+0x108/0x470 [ 63.388039][ T4748] alloc_pages_vma+0x284/0x7a8 [ 63.389372][ T4748] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 63.391139][ T4748] handle_mm_fault+0x1904/0x2950 [ 63.392566][ T4748] do_page_fault+0x694/0xad4 [ 63.393827][ T4748] do_translation_fault+0xe0/0x130 [ 63.395218][ T4748] do_mem_abort+0x6c/0x1ac [ 63.396435][ T4748] el0_da+0x90/0x1fc [ 63.397499][ T4748] el0t_64_sync_handler+0xd8/0xe4 [ 63.398895][ T4748] el0t_64_sync+0x1a0/0x1a4 [ 63.465223][ T4749] FAT-fs (loop2): Directory bread(block 64) failed [ 63.474748][ T4749] FAT-fs (loop2): Directory bread(block 65) failed [ 63.481315][ T4749] FAT-fs (loop2): Directory bread(block 66) failed [ 63.486638][ T4749] FAT-fs (loop2): Directory bread(block 67) failed [ 63.488822][ T4743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.497168][ T4748] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 63.500499][ T4749] FAT-fs (loop2): Directory bread(block 68) failed [ 63.504617][ T4749] FAT-fs (loop2): Directory bread(block 69) failed [ 63.527812][ T4749] FAT-fs (loop2): Directory bread(block 70) failed [ 63.529813][ T4749] FAT-fs (loop2): Directory bread(block 71) failed [ 63.532489][ T4749] FAT-fs (loop2): Directory bread(block 72) failed [ 63.534255][ T4749] FAT-fs (loop2): Directory bread(block 73) failed [ 63.574599][ T4748] loop3: detected capacity change from 0 to 4096 [ 63.772877][ T4761] Cannot find add_set index 0 as target [ 63.875281][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 64.066663][ T4767] tap0: tun_chr_ioctl cmd 1074025678 [ 64.075686][ T4753] loop0: detected capacity change from 0 to 32768 [ 64.078039][ T4767] tap0: group set to 0 [ 64.085974][ T4753] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.177 (4753) [ 64.101390][ T4753] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 64.107957][ T4753] BTRFS info (device loop0): metadata ratio 2 [ 64.111988][ T4753] BTRFS info (device loop0): allowing degraded mounts [ 64.116193][ T4753] BTRFS info (device loop0): force zlib compression, level 3 [ 64.121975][ T4753] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 64.130831][ T4753] BTRFS info (device loop0): use zstd compression, level 3 [ 64.135147][ T4753] BTRFS info (device loop0): force clearing of disk cache [ 64.140991][ T4753] BTRFS info (device loop0): max_inline at 0 [ 64.145004][ T4753] BTRFS info (device loop0): using free space tree [ 64.154660][ T4753] BTRFS info (device loop0): has skinny extents [ 64.418671][ T4753] BTRFS info (device loop0): enabling ssd optimizations [ 64.421556][ T4753] BTRFS info (device loop0): clearing free space tree [ 64.423700][ T4753] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.435449][ T4753] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.459693][ T4753] BTRFS info (device loop0): creating free space tree [ 64.464624][ T4753] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.469793][ T4753] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.262389][ T4821] udc-core: couldn't find an available UDC or it's busy [ 65.264347][ T4821] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.544862][ T4835] device syzkaller1 entered promiscuous mode [ 65.882979][ T4842] netlink: 'syz.3.204': attribute type 8 has an invalid length. [ 65.967876][ T4842] bridge0: port 3(syz_tun) entered blocking state [ 65.974226][ T4842] bridge0: port 3(syz_tun) entered disabled state [ 65.989054][ T4842] device syz_tun entered promiscuous mode [ 65.991334][ T4842] bridge0: port 3(syz_tun) entered blocking state [ 65.993492][ T4842] bridge0: port 3(syz_tun) entered forwarding state [ 66.625729][ T4877] TCP: TCP_TX_DELAY enabled [ 67.006494][ T4891] udc-core: couldn't find an available UDC or it's busy [ 67.019905][ T4891] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.087248][ T3616] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.349485][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.352955][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.447261][ T3616] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.451083][ T3616] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.455385][ T3616] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.460986][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.500101][ T4883] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.747814][ T3616] usb 1-1: USB disconnect, device number 2 [ 68.160601][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.196865][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.641194][ T4911] binder: 4910:4911 tried to acquire reference to desc 0, got 1 instead [ 68.644451][ T4911] binder: tried to use weak ref as strong ref [ 68.646220][ T4911] binder: 4910:4911 got transaction to invalid handle, 1 [ 68.655106][ T4911] binder: 4910:4911 transaction failed 29201/-22, size 0-0 line 2917 [ 68.664613][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.748723][ T4884] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.751443][ T4884] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.754040][ T4884] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.761431][ T4884] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.153885][ T4928] udc-core: couldn't find an available UDC or it's busy [ 69.157087][ T4928] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.249297][ T4930] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 69.598016][ T4932] udc-core: couldn't find an available UDC or it's busy [ 69.600024][ T4932] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.631174][ T25] cfg80211: failed to load regulatory.db [ 69.632014][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.885689][ T4947] udc-core: couldn't find an available UDC or it's busy [ 69.901326][ T4947] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.083841][ T4958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'. [ 70.118379][ T4947] udc-core: couldn't find an available UDC or it's busy [ 70.120335][ T4947] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.186685][ T4962] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 70.229173][ T4962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.243000][ T4962] team0: Failed to send port change of device bond0 via netlink (err -105) [ 70.245675][ T4962] team0: Failed to send options change via netlink (err -105) [ 70.252392][ T4962] team0: Port device bond0 added [ 70.255922][ T4964] netlink: 'syz.1.257': attribute type 8 has an invalid length. [ 70.258914][ T4964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.257'. [ 70.600711][ T4980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 70.603312][ T4980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'. [ 71.547956][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 71.575873][ T5010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.579289][ T4675] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 71.603353][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 71.667953][ T4675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.670254][ T4675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.099874][ T5027] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.103227][ T5027] efs: cannot read volume header [ 72.486100][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 72.945092][ T5062] tap0: tun_chr_ioctl cmd 1074025672 [ 72.946825][ T5062] tap0: ignored: set checksum enabled [ 73.013156][ T4040] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 73.016232][ T4040] CPU: 1 PID: 4040 Comm: kworker/u5:3 Not tainted 5.15.189-syzkaller #0 [ 73.018537][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.021288][ T4040] Workqueue: hci2 hci_rx_work [ 73.022587][ T4040] Call trace: [ 73.023453][ T4040] dump_backtrace+0x0/0x43c [ 73.024785][ T4040] show_stack+0x2c/0x3c [ 73.025958][ T4040] __dump_stack+0x30/0x40 [ 73.027155][ T4040] dump_stack_lvl+0xf8/0x160 [ 73.028524][ T4040] dump_stack+0x1c/0x5c [ 73.029727][ T4040] sysfs_create_dir_ns+0x22c/0x24c [ 73.031157][ T4040] kobject_add_internal+0x590/0xc54 [ 73.032576][ T4040] kobject_add+0x134/0x1f8 [ 73.033802][ T4040] device_add+0x3f0/0xf94 [ 73.034986][ T4040] hci_conn_add_sysfs+0xbc/0x1cc [ 73.036364][ T4040] le_conn_complete_evt+0x9a4/0x11bc [ 73.037783][ T4040] hci_le_meta_evt+0x85c/0x3010 [ 73.039085][ T4040] hci_event_packet+0xd10/0x11bc [ 73.040445][ T4040] hci_rx_work+0x1cc/0x880 [ 73.041681][ T4040] process_one_work+0x79c/0x1140 [ 73.043015][ T4040] worker_thread+0x8f4/0x101c [ 73.044338][ T4040] kthread+0x374/0x454 [ 73.045432][ T4040] ret_from_fork+0x10/0x20 [ 73.050040][ T4040] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 73.053626][ T4040] Bluetooth: hci2: failed to register connection device [ 73.350547][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 73.370079][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.662740][ T5104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'. [ 73.667881][ T5104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'. [ 73.720014][ T5104] device gretap0 entered promiscuous mode [ 73.757585][ T5104] device batadv_slave_1 entered promiscuous mode [ 73.788304][ T4258] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 73.797679][ T4258] Bluetooth: hci3: Injecting HCI hardware error event [ 73.799141][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 73.804883][ T4040] Bluetooth: hci3: hardware error 0x00 [ 74.928749][ T4085] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/2 [ 74.936080][ T4085] hid-generic: probe of 0005:16C0:5505.0002 failed with error -22 [ 75.350125][ T5206] udc-core: couldn't find an available UDC or it's busy [ 75.351990][ T5206] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.744856][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 75.802409][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.854944][ T5210] device bridge_slave_0 left promiscuous mode [ 75.857906][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.123706][ T5218] block device autoloading is deprecated and will be removed. [ 76.868142][ T5234] udc-core: couldn't find an available UDC or it's busy [ 76.870080][ T5234] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.907618][ T3616] atkbd serio1: keyboard reset failed on [ 78.347237][ T3616] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 78.373377][ T5263] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 78.420475][ T5263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.480230][ T5265] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 78.538716][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 78.604147][ T5268] netlink: 'syz.4.371': attribute type 13 has an invalid length. [ 78.701926][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.705321][ T5268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.728015][ T5268] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.747314][ T3616] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.750154][ T3616] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 78.752881][ T3616] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 78.762966][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.772488][ T3616] usb 1-1: config 0 descriptor?? [ 78.778642][ T5268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.819751][ T3616] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 78.821979][ T3616] dvb-usb: bulk message failed: -22 (3/0) [ 78.832469][ T3616] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 78.847294][ T3616] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 78.849526][ T3616] usb 1-1: media controller created [ 78.852437][ T3616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.870171][ T3616] dvb-usb: bulk message failed: -22 (6/0) [ 78.872031][ T3616] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 78.910693][ T3616] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input4 [ 78.921605][ T3616] dvb-usb: schedule remote query interval to 150 msecs. [ 78.923514][ T3616] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 79.036056][ T4225] usb 1-1: USB disconnect, device number 3 [ 79.134865][ T4225] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 79.665512][ T5300] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 79.665512][ T5300] The task syz.1.384 (5300) triggered the difference, watch for misbehavior. [ 80.051456][ T5316] Cannot find set identified by id 2 to match [ 80.135349][ T5320] input: syz1 as /devices/virtual/input/input5 [ 80.376503][ T5325] binder: 5324:5325 tried to acquire reference to desc 0, got 1 instead [ 80.381612][ T5325] binder: 5324:5325 unknown command 0 [ 80.383297][ T5325] binder: 5324:5325 ioctl c0306201 200003c0 returned -22 [ 80.395748][ T3616] binder: undelivered TRANSACTION_COMPLETE [ 80.413358][ T3616] binder: undelivered transaction 40, process died. [ 80.464996][ T5328] tipc: Started in network mode [ 80.494532][ T5328] tipc: Node identity ac1414aa, cluster identity 4711 [ 80.499881][ T5328] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 80.503348][ T5328] tipc: Enabled bearer , priority 10 [ 80.638619][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 80.644914][ T5340] udc-core: couldn't find an available UDC or it's busy [ 80.646899][ T5340] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.679076][ T5342] 9pnet_virtio: no channels available for device syz [ 80.689788][ T5340] raw_sendmsg: syz.2.403 forgot to set AF_INET. Fix it! [ 80.777113][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 80.812797][ T5348] udc-core: couldn't find an available UDC or it's busy [ 80.815195][ T5348] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.917085][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 81.057128][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 81.207174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 81.357136][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 81.497858][ T4225] tipc: Node number set to 2886997162 [ 81.637295][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 81.917075][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 83.143605][ T5410] udc-core: couldn't find an available UDC or it's busy [ 83.166233][ T5410] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.255926][ T5413] INFO: trying to register non-static key. [ 83.257783][ T5413] The code is fine but needs lockdep annotation, or maybe [ 83.259760][ T5413] you didn't initialize this object before use? [ 83.261552][ T5413] turning off the locking correctness validator. [ 83.263377][ T5413] CPU: 0 PID: 5413 Comm: syz.2.435 Not tainted 5.15.189-syzkaller #0 [ 83.265680][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.266452][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 83.268598][ T5413] Call trace: [ 83.268606][ T5413] dump_backtrace+0x0/0x43c [ 83.268621][ T5413] show_stack+0x2c/0x3c [ 83.268630][ T5413] __dump_stack+0x30/0x40 [ 83.275632][ T5413] dump_stack_lvl+0xf8/0x160 [ 83.276933][ T5413] dump_stack+0x1c/0x5c [ 83.278108][ T5413] assign_lock_key+0x19c/0x1a8 [ 83.279491][ T5413] register_lock_class+0x1ac/0x694 [ 83.280936][ T5413] __lock_acquire+0x150/0x651c [ 83.282341][ T5413] lock_acquire+0x1f4/0x620 [ 83.283654][ T5413] _raw_spin_lock_irqsave+0xc4/0x14c [ 83.285166][ T5413] gsmld_write_wakeup+0x74/0x2c0 [ 83.286598][ T5413] tty_wakeup+0xac/0xec [ 83.287803][ T5413] tty_port_default_wakeup+0xb8/0x138 [ 83.289347][ T5413] tty_port_tty_wakeup+0x64/0x78 [ 83.290773][ T5413] uart_flush_buffer+0x250/0x348 [ 83.292252][ T5413] tty_driver_flush_buffer+0x6c/0x88 [ 83.293749][ T5413] tty_ldisc_hangup+0xd8/0x4b4 [ 83.295088][ T5413] __tty_hangup+0x3f0/0x70c [ 83.296371][ T5413] tty_ioctl+0x448/0xde0 [ 83.297578][ T5413] __arm64_sys_ioctl+0x14c/0x1c8 [ 83.298914][ T5413] invoke_syscall+0x98/0x2b8 [ 83.300224][ T5413] el0_svc_common+0x138/0x258 [ 83.301552][ T5413] do_el0_svc+0x58/0x14c [ 83.302695][ T5413] el0_svc+0x78/0x1e0 [ 83.303819][ T5413] el0t_64_sync_handler+0xcc/0xe4 [ 83.305325][ T5413] el0t_64_sync+0x1a0/0x1a4 [ 83.379483][ T5417] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 84.507079][ C1] net_ratelimit: 2 callbacks suppressed [ 84.507094][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 85.547063][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 86.587160][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 87.627097][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 88.667087][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 89.707080][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 90.747174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 91.797082][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 92.837061][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available