last executing test programs: 14.306658794s ago: executing program 3 (id=551): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x0) recvfrom$inet_nvme(r0, &(0x7f0000000100)=""/167, 0xa7, 0x40000040, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x230040) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a0000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0x9}) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, 0x0) 14.203953756s ago: executing program 3 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x9, &(0x7f0000000640)=@string={0x9, 0x3, "da79952bac9a1e"}}, {0x77, &(0x7f00000006c0)=@string={0x77, 0x3, "f985de4e6c570918c0431310a5130c3b0bc8e409d3f48586e4b57936d941ec6dc6425fadf2d3c4423ea3c234023767f2c059c1736f99b1fedec54b4560a6514d093204ed9140f4d50e081e743f69b437f210a3b9cd12ddc674d1acf33953a899e4a690f737f749661b4fe0ec0ce5c88a45472adb8f"}}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 13.520508531s ago: executing program 3 (id=563): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x3, 0x1a, "0b3e71f6094279c9156afec61dab20c4d1c2d0d41e026aa6759b"}, 0x0, 0x0, 0x0, 0x0}) 12.981370714s ago: executing program 3 (id=570): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/146, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000040)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0xa7}}]}, 0x3, 0x465, &(0x7f00000004c0)="$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") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_capability(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x20) 12.072498304s ago: executing program 3 (id=579): unshare(0x22020600) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 11.644279004s ago: executing program 3 (id=586): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee01) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140), 0x0, 0xe7c) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) 11.601250455s ago: executing program 32 (id=586): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee01) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140), 0x0, 0xe7c) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) 2.844757726s ago: executing program 0 (id=649): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r0, 0x800000004, 0x1) 2.704773409s ago: executing program 0 (id=653): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2.333813947s ago: executing program 2 (id=655): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x869, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x2, {0x2, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x28}}, 0x0) 2.22050846s ago: executing program 5 (id=657): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r0, r0, 0x0, 0x1000000201005) 2.137680571s ago: executing program 5 (id=658): syz_usb_connect$uac1(0x5, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000008adff01a06000010203010902710003010120180904000000010100000a"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.684766572s ago: executing program 1 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x18, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xffffffffffffffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.639780373s ago: executing program 1 (id=662): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 1.552516755s ago: executing program 5 (id=663): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.552419115s ago: executing program 1 (id=664): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x6, &(0x7f0000000900)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.545068825s ago: executing program 0 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x9, &(0x7f0000000640)=@string={0x9, 0x3, "da79952bac9a1e"}}, {0x77, &(0x7f00000006c0)=@string={0x77, 0x3, "f985de4e6c570918c0431310a5130c3b0bc8e409d3f48586e4b57936d941ec6dc6425fadf2d3c4423ea3c234023767f2c059c1736f99b1fedec54b4560a6514d093204ed9140f4d50e081e743f69b437f210a3b9cd12ddc674d1acf33953a899e4a690f737f749661b4fe0ec0ce5c88a45472adb8f"}}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2], 0x6f4}}, 0x0) 1.497088546s ago: executing program 1 (id=666): unshare(0x22020600) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, 0x0) 1.468510386s ago: executing program 5 (id=667): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x80803, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 1.396430018s ago: executing program 1 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.34398756s ago: executing program 1 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket(0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents64(r2, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000003c0)="e3402a2059ded7eb80f67f19ae87aa2c8d302d927c903e95f61931c2ed91cb8059b181b0", 0x24) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 898.23236ms ago: executing program 4 (id=671): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 897.64877ms ago: executing program 2 (id=672): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 836.574841ms ago: executing program 0 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="ba", 0x1, 0x4041, &(0x7f00000001c0)={0x11, 0x9900, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 836.277861ms ago: executing program 2 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000540)='GPL\x00', 0x4101c2, &(0x7f0000000580)={@_ha_fsid={[0x4, 0x2]}, {0x1c8, 0x6, 0xdf4b, 0x8000000000000001}}, 0x6, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000740)=0x8}) accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183) read$FUSE(r0, &(0x7f0000005400)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) unshare(0x6a040000) 545.546468ms ago: executing program 5 (id=675): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x7ff}, 0x50) 532.501828ms ago: executing program 4 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001200)={0x2c, r1, 0x215, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 450.7857ms ago: executing program 4 (id=677): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast}) 450.49734ms ago: executing program 5 (id=678): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) 448.10459ms ago: executing program 2 (id=679): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 447.66966ms ago: executing program 4 (id=680): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) 355.825042ms ago: executing program 2 (id=681): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x5, 0x5, {0xa, 0x38, 0x8, 0x101d, 0x3, 0x7fe3, 0x3, 0xbd, 0xffffffffffffffff}}) 355.731552ms ago: executing program 2 (id=682): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020) 355.392342ms ago: executing program 0 (id=683): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 296.544103ms ago: executing program 4 (id=684): unshare(0x22020600) r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x7ffffa}, 0x18) 14.87726ms ago: executing program 4 (id=685): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200c9a, &(0x7f0000000280)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x101, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x29) 0s ago: executing program 0 (id=686): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) syz_mount_image$fuse(0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001bc0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="3bb8d8006e005eca6f9c1bdd12b9a927c05b1d48c7f371b90a83d17b6147507130", @ANYRESHEX], 0x1, 0x1524, &(0x7f00000020c0)="$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") r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x6, 0x2, 0x8001}) kernel console output (not intermixed with test programs): 31.539035][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.540978][ T4342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.542633][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.543736][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.544085][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.546354][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.546888][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.548115][ T4344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.549272][ T4342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.550999][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.551535][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.553151][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.554565][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.558150][ T4342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.558928][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.559980][ T4342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.561106][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.561956][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.567096][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.568795][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.571160][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.581715][ T4342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.583402][ T4342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.698045][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.727876][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.747083][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 31.759332][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 31.796193][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.797666][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.799479][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.805747][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.807181][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.808759][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.813992][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.815798][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.817469][ T4335] device bridge_slave_0 entered promiscuous mode [ 31.819155][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.820540][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.822115][ T4328] device bridge_slave_0 entered promiscuous mode [ 31.829359][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.830705][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.832237][ T4335] device bridge_slave_1 entered promiscuous mode [ 31.833712][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.836489][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.838156][ T4328] device bridge_slave_1 entered promiscuous mode [ 31.842027][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.843181][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.845227][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.847363][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.848585][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.850224][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.863386][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.867219][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.870105][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.877328][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.879172][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 31.884097][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.889152][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.897378][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.903808][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.912185][ T4328] team0: Port device team_slave_0 added [ 31.914325][ T4330] team0: Port device team_slave_0 added [ 31.916337][ T4330] team0: Port device team_slave_1 added [ 31.925079][ T4328] team0: Port device team_slave_1 added [ 31.934153][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.935802][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.940207][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.943606][ T4329] team0: Port device team_slave_0 added [ 31.953418][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.955145][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.956807][ T4339] device bridge_slave_0 entered promiscuous mode [ 31.959250][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.960453][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.965186][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.967625][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.968854][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.973162][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.976720][ T4329] team0: Port device team_slave_1 added [ 31.980249][ T4335] team0: Port device team_slave_0 added [ 31.981505][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.982790][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.984437][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.986481][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.987633][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.991888][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.998015][ T4335] team0: Port device team_slave_1 added [ 32.009978][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.011304][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.016195][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.018773][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.019899][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.024099][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.029571][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.030902][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.038158][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.086148][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.124982][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.169829][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.173017][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.174345][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.179894][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.183654][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.235756][ T4328] device hsr_slave_0 entered promiscuous mode [ 32.284875][ T4328] device hsr_slave_1 entered promiscuous mode [ 32.334737][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.336329][ T4328] Cannot create hsr debugfs directory [ 32.347518][ T4339] team0: Port device team_slave_0 added [ 32.405974][ T4335] device hsr_slave_0 entered promiscuous mode [ 32.445070][ T4335] device hsr_slave_1 entered promiscuous mode [ 32.484751][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.486127][ T4335] Cannot create hsr debugfs directory [ 32.496557][ T4339] team0: Port device team_slave_1 added [ 32.565842][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.614972][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.654811][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.656393][ T4329] Cannot create hsr debugfs directory [ 32.657811][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.659068][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.663171][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.670730][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.671781][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.678209][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.765881][ T4339] device hsr_slave_0 entered promiscuous mode [ 32.804985][ T4339] device hsr_slave_1 entered promiscuous mode [ 32.844775][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.846291][ T4339] Cannot create hsr debugfs directory [ 32.898305][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.926222][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.973931][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.016776][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.073171][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.099560][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.156111][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.197854][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.261863][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.316620][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.350397][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.390927][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.436545][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.485946][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.530808][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.532297][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.591511][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.615371][ T4340] Bluetooth: hci4: command 0x0409 tx timeout [ 33.615374][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 33.615465][ T4340] Bluetooth: hci2: command 0x0409 tx timeout [ 33.616672][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 33.617736][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 33.628206][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.670590][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.676946][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.737637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.739933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.741567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.743341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.745470][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.746662][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.748487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.753562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.758425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.760280][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.761595][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.763418][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.825802][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.870817][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.877756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.879703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.881242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.887402][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.891184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.909179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.911089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.912804][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.914209][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.919489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.921361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.922972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.924590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.939983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.941790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.943463][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.944703][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.946125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.948107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.950359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.952393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.954104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.958549][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.960291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.962167][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.963952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.970444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.972044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.980268][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.981925][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.983413][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.985320][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.991147][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.995848][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.998656][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.014093][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.023174][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.036089][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.040852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.042917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.050831][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.064125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.066599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.068233][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.069683][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.071193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.072861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.088228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.089823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.091589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.093176][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.094446][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.101251][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.108243][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.109887][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.111403][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.112915][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.122637][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.126057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.127872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.129909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.131623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.139694][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.141590][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.143355][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.146208][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.148264][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.149579][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.159866][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.161655][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.163440][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.165950][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.167402][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.168689][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.170368][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.171997][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.173301][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.175864][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.182761][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.185186][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.188228][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.190711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.192366][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.194178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.196655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.198941][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.200183][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.201752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.203619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.205852][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.207085][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.218170][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.219992][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.221468][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.222849][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.225979][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.227649][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.229336][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.231123][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.242677][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.244111][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.246410][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.248213][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.250111][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.252054][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.253816][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.256565][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.258277][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.259938][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.261634][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.271476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.273397][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.276138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.277814][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.280107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.281753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.289912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.291926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.301179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.303091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.305614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.308218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.309830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.311633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.313739][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.323120][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.325750][ T4330] device veth0_vlan entered promiscuous mode [ 34.330329][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.331934][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.333874][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.335425][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.341300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.342634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.350657][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.354507][ T4328] device veth0_vlan entered promiscuous mode [ 34.361385][ T4330] device veth1_vlan entered promiscuous mode [ 34.371791][ T4328] device veth1_vlan entered promiscuous mode [ 34.388535][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.390299][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.391951][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.393643][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.397522][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.399227][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.412593][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.414347][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.426285][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.428734][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.430126][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.431844][ T4330] device veth0_macvtap entered promiscuous mode [ 34.436413][ T4330] device veth1_macvtap entered promiscuous mode [ 34.442436][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.448435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.450184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.451699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.453390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.455514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.457259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.459086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.460486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.463389][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.470750][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.472553][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.479327][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.480854][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.482356][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.484261][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.488157][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.489654][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.491056][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.492536][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.500007][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.501944][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.503977][ T4329] device veth0_vlan entered promiscuous mode [ 34.506512][ T4328] device veth0_macvtap entered promiscuous mode [ 34.510419][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.520610][ T4328] device veth1_macvtap entered promiscuous mode [ 34.529830][ T4329] device veth1_vlan entered promiscuous mode [ 34.556133][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.558166][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.561045][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.562584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.564436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.566527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.568216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.569937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.571529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.573152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.575164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.577021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.578541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.580710][ T4335] device veth0_vlan entered promiscuous mode [ 34.584588][ T4335] device veth1_vlan entered promiscuous mode [ 34.598890][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.600897][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.603370][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.613955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.615938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.617542][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.620289][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.621887][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.623432][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.626873][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.632216][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.633512][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.637205][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.639099][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.643639][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.646274][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.654064][ T4335] device veth0_macvtap entered promiscuous mode [ 34.661762][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.663933][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.667143][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.673691][ T4329] device veth0_macvtap entered promiscuous mode [ 34.679324][ T4329] device veth1_macvtap entered promiscuous mode [ 34.688563][ T4335] device veth1_macvtap entered promiscuous mode [ 34.692292][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.693625][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.708901][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.710696][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.712358][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.713888][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.724000][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.726025][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.731458][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.733334][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.735514][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.737290][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.739820][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.742246][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.744095][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.749555][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.751276][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.752887][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.754561][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.757948][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.762505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.764444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.767947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.769891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.774087][ T4339] device veth0_vlan entered promiscuous mode [ 34.780498][ T4339] device veth1_vlan entered promiscuous mode [ 34.783578][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.786411][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.788060][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.789782][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.792444][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.796757][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.798169][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.798206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.802477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.805699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.807502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.809215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.810919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.816050][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.817811][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.819487][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.821217][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.822934][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.828671][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.831317][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.836277][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.837922][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.839443][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.840893][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.849994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.851716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.853286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.855843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.873440][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.878026][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.883223][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.883696][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.884461][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.886915][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.887222][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.888658][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.889872][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.892473][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.893694][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.894988][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.896328][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 34.897607][ T4410] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 35.005389][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.011008][ T524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.012670][ T524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.013688][ T4339] device veth0_macvtap entered promiscuous mode [ 35.019340][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.021369][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.023871][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.026889][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.079952][ T4339] device veth1_macvtap entered promiscuous mode [ 35.146240][ T524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.211922][ T524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.223525][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.241153][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.242861][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.245278][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.247141][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.248940][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.250535][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.252410][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.255488][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.257006][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.258688][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.260199][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.261962][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.267888][ T1580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.359715][ T1580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.546869][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.548636][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.553586][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.555939][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.560499][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.565213][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.566977][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.569325][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.571245][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.573237][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.576073][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.578091][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.580980][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.643834][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.646050][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.651780][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.653488][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.657324][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.659073][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.684364][ T1580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.685897][ T1580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.687274][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.735088][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 35.735163][ T4340] Bluetooth: hci3: command 0x041b tx timeout [ 35.735181][ T4342] Bluetooth: hci2: command 0x041b tx timeout [ 35.739058][ T4342] Bluetooth: hci4: command 0x041b tx timeout [ 35.739188][ T4340] Bluetooth: hci1: command 0x041b tx timeout [ 36.150007][ T524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.152145][ T524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.161524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.224598][ T4431] loop2: detected capacity change from 0 to 512 [ 36.232684][ T4431] ======================================================= [ 36.232684][ T4431] WARNING: The mand mount option has been deprecated and [ 36.232684][ T4431] and is ignored by this kernel. Remove the mand [ 36.232684][ T4431] option from the mount to silence this warning. [ 36.232684][ T4431] ======================================================= [ 36.258801][ T4431] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.263935][ T1580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.266756][ T1580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.268485][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.273560][ T4431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 36.275852][ T4431] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.277109][ T4431] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.9: bad orphan inode 3 [ 36.280573][ T4431] EXT4-fs (loop2): Remounting filesystem read-only [ 36.281660][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.396344][ T4436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.607277][ T4331] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 36.648109][ T4431] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.9: dx entry: limit 0 != root limit 125 [ 36.651762][ T4431] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9: Corrupt directory, running e2fsck is recommended [ 36.699704][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 36.736206][ T4442] jffs2: notice: (4442) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 37.230449][ T4449] loop0: detected capacity change from 0 to 1024 [ 37.239772][ T4453] tmpfs: Unknown parameter 'quota' [ 37.249364][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.258149][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.270474][ T4449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.273681][ T4455] loop4: detected capacity change from 0 to 2048 [ 37.307191][ T4459] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 37.309027][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 37.345927][ T4459] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 37.348460][ T4459] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 37.351296][ T4459] Remounting filesystem read-only [ 37.375614][ T4339] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 37.379633][ T4463] loop1: detected capacity change from 0 to 512 [ 37.382768][ T4463] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.386045][ T4463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.395479][ T4463] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.401270][ T4463] EXT4-fs (loop1): 1 truncate cleaned up [ 37.405274][ T4463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.448120][ T4468] loop4: detected capacity change from 0 to 512 [ 37.454479][ T4468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.468818][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 37.473406][ T4468] EXT4-fs (loop4): 1 truncate cleaned up [ 37.479549][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.528301][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 37.583055][ T4474] loop4: detected capacity change from 0 to 512 [ 37.586213][ T4474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.589446][ T4474] EXT4-fs (loop4): 1 truncate cleaned up [ 37.590527][ T4474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.969271][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 37.970857][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 37.972809][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 37.974304][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 38.091491][ T4481] FAULT_INJECTION: forcing a failure. [ 38.091491][ T4481] name fail_futex, interval 1, probability 0, space 0, times 1 [ 38.094065][ T4481] CPU: 0 PID: 4481 Comm: syz.2.23 Not tainted syzkaller #0 [ 38.095500][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.097400][ T4481] Call trace: [ 38.097999][ T4481] dump_backtrace+0x1c4/0x1f0 [ 38.098949][ T4481] show_stack+0x2c/0x3c [ 38.099738][ T4481] __dump_stack+0x30/0x40 [ 38.100541][ T4481] dump_stack_lvl+0xf4/0x15c [ 38.101371][ T4481] dump_stack+0x1c/0x5c [ 38.102135][ T4481] should_fail_ex+0x3cc/0x524 [ 38.103018][ T4481] should_fail+0x14/0x24 [ 38.103822][ T4481] get_futex_key+0x904/0xfb0 [ 38.104680][ T4481] futex_wake+0x10c/0x458 [ 38.105505][ T4481] do_futex+0x2c4/0x340 [ 38.106328][ T4481] mm_release+0x190/0x274 [ 38.107144][ T4481] exit_mm_release+0x30/0x40 [ 38.107991][ T4481] exit_mm+0x50/0x290 [ 38.108694][ T4481] do_exit+0x4d0/0x19ac [ 38.109424][ T4481] do_group_exit+0x198/0x238 [ 38.110273][ T4481] get_signal+0x11f4/0x133c [ 38.111079][ T4481] do_notify_resume+0x364/0x2c84 [ 38.112014][ T4481] el0_svc+0x98/0x128 [ 38.112737][ T4481] el0t_64_sync_handler+0x84/0xf0 [ 38.113660][ T4481] el0t_64_sync+0x18c/0x190 [ 38.115143][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 38.160791][ T4485] Zero length message leads to an empty skb [ 38.298993][ T4496] loop3: detected capacity change from 0 to 1024 [ 38.327014][ T4498] loop0: detected capacity change from 0 to 512 [ 38.347090][ T4498] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.347960][ T4496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.385322][ T4498] EXT4-fs (loop0): 1 truncate cleaned up [ 38.388408][ T4498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.390752][ T4504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 38.433425][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 38.442212][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 38.443827][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 38.469897][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 38.484489][ T4506] FAULT_INJECTION: forcing a failure. [ 38.484489][ T4506] name fail_futex, interval 1, probability 0, space 0, times 0 [ 38.495095][ T4506] CPU: 1 PID: 4506 Comm: syz.1.35 Not tainted syzkaller #0 [ 38.496461][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.498326][ T4506] Call trace: [ 38.498917][ T4506] dump_backtrace+0x1c4/0x1f0 [ 38.499780][ T4506] show_stack+0x2c/0x3c [ 38.500629][ T4506] __dump_stack+0x30/0x40 [ 38.501510][ T4506] dump_stack_lvl+0xf4/0x15c [ 38.502338][ T4506] dump_stack+0x1c/0x5c [ 38.503117][ T4506] should_fail_ex+0x3cc/0x524 [ 38.503970][ T4506] should_fail+0x14/0x24 [ 38.504714][ T4506] get_futex_key+0x904/0xfb0 [ 38.505545][ T4506] futex_wait_setup+0xbc/0x320 [ 38.506387][ T4506] futex_wait+0x164/0x424 [ 38.507150][ T4506] do_futex+0x2e8/0x340 [ 38.507899][ T4506] __arm64_sys_futex+0x390/0x414 [ 38.508789][ T4506] invoke_syscall+0x98/0x290 [ 38.509624][ T4506] el0_svc_common+0x13c/0x258 [ 38.510470][ T4506] do_el0_svc+0x5c/0x134 [ 38.511210][ T4506] el0_svc+0x58/0x128 [ 38.511932][ T4506] el0t_64_sync_handler+0x84/0xf0 [ 38.512827][ T4506] el0t_64_sync+0x18c/0x190 [ 38.549801][ T4516] tmpfs: Unknown parameter 'quota' [ 38.638854][ T4527] loop1: detected capacity change from 0 to 512 [ 38.640690][ T4527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.710482][ T4527] EXT4-fs (loop1): 1 truncate cleaned up [ 38.710641][ T4510] loop0: detected capacity change from 0 to 32768 [ 38.711537][ T4527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.113627][ T4536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.145986][ T4541] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.150389][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 39.170022][ T4541] EXT4-fs (loop2): 1 truncate cleaned up [ 39.172605][ T4544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'. [ 39.173447][ T4541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.217643][ T4549] tmpfs: Unknown parameter 'quota' [ 39.280281][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 40.015870][ T4342] Bluetooth: hci2: command 0x0419 tx timeout [ 40.015895][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 40.015912][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 40.019444][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 40.106796][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 40.175138][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 40.191909][ T4576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.219512][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 40.248613][ T4581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 40.276833][ T4583] tmpfs: Unknown parameter 'quota' [ 40.323074][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 40.408378][ T4342] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 40.840064][ T4606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.857869][ T4606] EXT4-fs (loop4): 1 truncate cleaned up [ 40.859211][ T4606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.929876][ T4609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.938125][ T4614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.73'. [ 40.957709][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 41.318336][ T4619] set_capacity_and_notify: 5 callbacks suppressed [ 41.318405][ T4619] loop3: detected capacity change from 0 to 512 [ 41.328721][ T4619] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.343322][ T4619] EXT4-fs (loop3): 1 truncate cleaned up [ 41.351868][ T4619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.377625][ T4626] loop2: detected capacity change from 0 to 1024 [ 41.380670][ T4626] hfsplus: unable to parse mount options [ 41.428970][ T7] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 41.620129][ T7] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 41.621757][ T7] usb 1-1: config 0 has no interface number 0 [ 41.622879][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 41.629336][ T7] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 41.635788][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 41.637615][ T7] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 41.640258][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 41.642194][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.649861][ T7] usb 1-1: config 0 descriptor?? [ 41.651821][ T4616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.654203][ T4616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.659437][ T7] ldusb 1-1:0.55: Interrupt in endpoint not found [ 41.692955][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 41.853322][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.85'. [ 41.873684][ T7] usb 1-1: USB disconnect, device number 2 [ 41.904090][ T4646] loop4: detected capacity change from 0 to 1024 [ 41.938985][ T4646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.971185][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 42.498947][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 42.603887][ T4665] loop3: detected capacity change from 0 to 512 [ 42.606512][ T4665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.617883][ T4665] EXT4-fs (loop3): 1 truncate cleaned up [ 42.618988][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.066917][ T4677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.97'. [ 43.130546][ T4681] loop4: detected capacity change from 0 to 512 [ 43.153322][ T4681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.172150][ T4681] EXT4-fs (loop4): 1 truncate cleaned up [ 43.173471][ T4681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.177456][ T4685] loop0: detected capacity change from 0 to 1024 [ 43.239570][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.257387][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 43.339281][ T4692] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 43.344555][ T4692] CIFS: Attempting to mount \\127.0.0.1\share [ 43.349437][ T4692] CIFS: VFS: No username specified [ 43.431419][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.443746][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.517951][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 44.237878][ T4714] loop1: detected capacity change from 0 to 256 [ 44.245219][ T4714] exfat: Deprecated parameter 'utf8' [ 44.248597][ T4714] exfat: Deprecated parameter 'namecase' [ 44.279446][ T4714] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 44.345671][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 44.367559][ T4722] CIFS: Attempting to mount \\127.0.0.1\share [ 44.369707][ T4721] loop2: detected capacity change from 0 to 512 [ 44.371079][ T4722] CIFS: VFS: No username specified [ 44.376541][ T4721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.386459][ T4721] EXT4-fs (loop2): 1 truncate cleaned up [ 44.387650][ T4721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.848497][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.850513][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.243532][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 45.271483][ T4748] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 45.302059][ T4750] loop2: detected capacity change from 0 to 512 [ 45.312339][ T4750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.320286][ T4750] EXT4-fs (loop2): 1 truncate cleaned up [ 45.321732][ T4750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.407361][ T4755] CIFS: Attempting to mount \\127.0.0.1\share [ 45.408642][ T4755] CIFS: VFS: No username specified [ 45.468433][ T4762] vcan0: tx address claim with broadcast sa [ 45.639184][ T4774] loop3: detected capacity change from 0 to 512 [ 45.648480][ T4774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.660121][ T4774] EXT4-fs (loop3): 1 truncate cleaned up [ 45.662514][ T4774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.134713][ T24] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 46.342605][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 46.344103][ T24] usb 1-1: config 0 has no interface number 0 [ 46.345558][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 46.347424][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 46.349293][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 46.351192][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 46.353413][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 46.359144][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 46.361505][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.366486][ T24] usb 1-1: config 0 descriptor?? [ 46.368433][ T4776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.369781][ T4776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.372649][ T24] ldusb 1-1:0.55: Interrupt in endpoint not found [ 46.421243][ T4792] set_capacity_and_notify: 1 callbacks suppressed [ 46.421254][ T4792] loop2: detected capacity change from 0 to 4096 [ 46.448862][ T4792] EXT4-fs: Ignoring removed orlov option [ 46.451359][ T4792] EXT4-fs (loop2): Test dummy encryption mode enabled [ 46.455072][ T4792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.459670][ T4792] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 46.520817][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 46.523294][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 46.578566][ T4380] usb 1-1: USB disconnect, device number 3 [ 46.718313][ T4814] loop3: detected capacity change from 0 to 512 [ 46.776728][ T4814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.792005][ T4803] loop2: detected capacity change from 0 to 32768 [ 46.804340][ T4803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.146 (4803) [ 46.882422][ T4814] EXT4-fs (loop3): 1 truncate cleaned up [ 46.883873][ T4814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.962148][ T4803] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.965263][ T4803] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 46.967163][ T4803] BTRFS info (device loop2): metadata ratio 220 [ 46.968579][ T4803] BTRFS info (device loop2): setting nodatasum [ 46.969922][ T4803] BTRFS info (device loop2): metadata ratio 4 [ 46.971087][ T4803] BTRFS info (device loop2): enabling ssd optimizations [ 46.972741][ T4803] BTRFS info (device loop2): allowing degraded mounts [ 46.974031][ T4803] BTRFS info (device loop2): using free space tree [ 47.008418][ T4335] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.347991][ T4856] loop0: detected capacity change from 0 to 512 [ 47.360520][ T4856] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.372745][ T4856] EXT4-fs (loop0): 1 truncate cleaned up [ 47.374235][ T4856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.967976][ T4877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.969724][ T4877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.041312][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 48.057264][ T4875] loop2: detected capacity change from 0 to 32768 [ 48.064364][ T4875] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.165 (4875) [ 48.080554][ T4875] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.082664][ T4875] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 48.084100][ T4875] BTRFS info (device loop2): using free space tree [ 48.084715][ T4881] netlink: 'syz.3.168': attribute type 4 has an invalid length. [ 48.182807][ T4875] BTRFS info (device loop2): enabling ssd optimizations [ 48.212721][ T4335] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.299319][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 48.578219][ T4922] loop4: detected capacity change from 0 to 512 [ 48.580413][ T4922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.599743][ T4922] EXT4-fs (loop4): 1 truncate cleaned up [ 48.601078][ T4922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.857756][ T4935] FAULT_INJECTION: forcing a failure. [ 48.857756][ T4935] name fail_futex, interval 1, probability 0, space 0, times 0 [ 48.861125][ T4935] CPU: 1 PID: 4935 Comm: syz.1.182 Not tainted syzkaller #0 [ 48.862493][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.864267][ T4935] Call trace: [ 48.864960][ T4935] dump_backtrace+0x1c4/0x1f0 [ 48.865838][ T4935] show_stack+0x2c/0x3c [ 48.866598][ T4935] __dump_stack+0x30/0x40 [ 48.867358][ T4935] dump_stack_lvl+0xf4/0x15c [ 48.868361][ T4935] dump_stack+0x1c/0x5c [ 48.869293][ T4935] should_fail_ex+0x3cc/0x524 [ 48.870291][ T4935] should_fail+0x14/0x24 [ 48.871217][ T4935] get_futex_key+0x904/0xfb0 [ 48.872120][ T4935] futex_wake+0x10c/0x458 [ 48.872985][ T4935] do_futex+0x2c4/0x340 [ 48.873840][ T4935] __arm64_sys_futex+0x390/0x414 [ 48.874747][ T4935] invoke_syscall+0x98/0x290 [ 48.875551][ T4935] el0_svc_common+0x13c/0x258 [ 48.876377][ T4935] do_el0_svc+0x5c/0x134 [ 48.877132][ T4935] el0_svc+0x58/0x128 [ 48.877859][ T4935] el0t_64_sync_handler+0x84/0xf0 [ 48.878817][ T4935] el0t_64_sync+0x18c/0x190 [ 48.950829][ T4937] loop1: detected capacity change from 0 to 512 [ 48.963976][ T4937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.980445][ T4937] EXT4-fs (loop1): 1 truncate cleaned up [ 48.981804][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.442385][ T4946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 49.477672][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.479344][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.649061][ T4956] netlink: 14 bytes leftover after parsing attributes in process `syz.0.191'. [ 49.681839][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 49.815012][ T4962] loop0: detected capacity change from 0 to 128 [ 49.822799][ T4962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.856654][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 49.993354][ T4962] xt_hashlimit: size too large, truncated to 1048576 [ 50.870843][ T5001] loop1: detected capacity change from 0 to 512 [ 50.886669][ T5001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.892458][ T5001] EXT4-fs (loop1): 1 truncate cleaned up [ 50.893747][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.996956][ T5004] loop3: detected capacity change from 0 to 512 [ 51.028616][ T5004] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.041397][ T5004] EXT4-fs (loop3): 1 truncate cleaned up [ 51.042503][ T5004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.538290][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.544533][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.779415][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 51.850831][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 52.040560][ T5033] device syzkaller0 entered promiscuous mode [ 52.302078][ T5042] device lo entered promiscuous mode [ 52.334207][ T5042] device tunl0 entered promiscuous mode [ 52.364292][ T5042] device gre0 entered promiscuous mode [ 52.477521][ T5042] device gretap0 entered promiscuous mode [ 52.487421][ T5042] device erspan0 entered promiscuous mode [ 52.497573][ T5042] device ip_vti0 entered promiscuous mode [ 52.503049][ T5042] device ip6_vti0 entered promiscuous mode [ 52.513614][ T5042] device sit0 entered promiscuous mode [ 52.713350][ T5042] device ip6tnl0 entered promiscuous mode [ 52.854032][ T5042] device ip6gre0 entered promiscuous mode [ 52.866572][ T5042] device syz_tun entered promiscuous mode [ 52.880429][ T5042] device ip6gretap0 entered promiscuous mode [ 52.889801][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.891617][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.894525][ T5042] device bridge0 entered promiscuous mode [ 52.922807][ T5042] device vcan0 entered promiscuous mode [ 52.940141][ T5042] device bond0 entered promiscuous mode [ 52.941294][ T5042] device bond_slave_0 entered promiscuous mode [ 52.942495][ T5042] device bond_slave_1 entered promiscuous mode [ 52.961311][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 52.963820][ T5042] device team0 entered promiscuous mode [ 52.969236][ T5042] device team_slave_0 entered promiscuous mode [ 52.970492][ T5042] device team_slave_1 entered promiscuous mode [ 52.990112][ T5042] device dummy0 entered promiscuous mode [ 53.003201][ T5042] device nlmon0 entered promiscuous mode [ 53.009629][ T5042] device caif0 entered promiscuous mode [ 53.011259][ T5042] device batadv0 entered promiscuous mode [ 53.023056][ T5042] device vxcan0 entered promiscuous mode [ 53.027357][ T5042] device vxcan1 entered promiscuous mode [ 53.031336][ T5042] device veth0 entered promiscuous mode [ 53.042315][ T5042] device veth1 entered promiscuous mode [ 53.124960][ T5042] device wg0 entered promiscuous mode [ 53.214920][ T5042] device wg1 entered promiscuous mode [ 53.269538][ T4840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.284432][ T5056] loop1: detected capacity change from 0 to 512 [ 53.286869][ T5056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.291128][ T5056] EXT4-fs (loop1): 1 truncate cleaned up [ 53.292220][ T5056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.304956][ T5042] device wg2 entered promiscuous mode [ 53.311487][ T5042] device veth0_to_bridge entered promiscuous mode [ 53.331051][ T5042] device veth1_to_bridge entered promiscuous mode [ 53.345964][ T5042] device veth0_to_bond entered promiscuous mode [ 53.360701][ T5042] device veth1_to_bond entered promiscuous mode [ 53.373449][ T5042] device veth0_to_team entered promiscuous mode [ 53.389349][ T5042] device veth1_to_team entered promiscuous mode [ 53.402112][ T5042] device veth0_to_batadv entered promiscuous mode [ 53.406079][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.412508][ T5042] device batadv_slave_0 entered promiscuous mode [ 53.420465][ T5042] device veth1_to_batadv entered promiscuous mode [ 53.423345][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.429847][ T5042] device batadv_slave_1 entered promiscuous mode [ 53.437490][ T5042] device xfrm0 entered promiscuous mode [ 53.447428][ T4840] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 53.449209][ T4840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.450964][ T4840] usb 1-1: Product: syz [ 53.451642][ T4840] usb 1-1: Manufacturer: syz [ 53.452598][ T4840] usb 1-1: SerialNumber: syz [ 53.618084][ T5042] device veth0_to_hsr entered promiscuous mode [ 53.635537][ T5042] device veth1_to_hsr entered promiscuous mode [ 53.647856][ T5042] device hsr0 entered promiscuous mode [ 53.655287][ T5042] device veth1_virt_wifi entered promiscuous mode [ 53.662491][ T5042] device veth0_virt_wifi entered promiscuous mode [ 53.665628][ T5042] device virt_wifi0 entered promiscuous mode [ 53.686943][ T5042] device vlan0 entered promiscuous mode [ 53.688078][ T5042] device vlan1 entered promiscuous mode [ 53.715586][ T5042] device macvlan0 entered promiscuous mode [ 53.764801][ T5042] device macvlan1 entered promiscuous mode [ 53.767396][ T5042] device ipvlan0 entered promiscuous mode [ 53.768515][ T5042] device ipvlan1 entered promiscuous mode [ 53.815336][ T5042] device macvtap0 entered promiscuous mode [ 53.822974][ T5042] device macsec0 entered promiscuous mode [ 53.864756][ T5042] device geneve0 entered promiscuous mode [ 53.869728][ T4840] net_ratelimit: 3320 callbacks suppressed [ 53.869743][ T4840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 53.874263][ T5042] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.876158][ T5042] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.878188][ T5042] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.879866][ T5042] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.914848][ T5042] device geneve1 entered promiscuous mode [ 53.922545][ T5042] device netdevsim0 entered promiscuous mode [ 53.929758][ T5042] device netdevsim1 entered promiscuous mode [ 53.942536][ T5042] device netdevsim2 entered promiscuous mode [ 53.948236][ T5042] device netdevsim3 entered promiscuous mode [ 54.046083][ T5042] device wlan0 entered promiscuous mode [ 54.134982][ T5042] device wlan1 entered promiscuous mode [ 54.198669][ T5063] loop2: detected capacity change from 0 to 512 [ 54.203940][ T5063] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.207238][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 54.219814][ T5063] EXT4-fs (loop2): 1 truncate cleaned up [ 54.220913][ T5063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.359710][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.361493][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.722428][ T4840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 54.729140][ T4840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 54.732315][ T4840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 54.805323][ T4840] lan78xx: probe of 1-1:1.0 failed with error -71 [ 54.811009][ T4840] usb 1-1: USB disconnect, device number 4 [ 55.159823][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 55.193984][ T5092] loop2: detected capacity change from 0 to 512 [ 55.200188][ T5092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.205763][ T5092] EXT4-fs (loop2): 1 truncate cleaned up [ 55.207052][ T5092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.649042][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.653815][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.675445][ T4333] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 55.858578][ T4333] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 55.860279][ T4333] usb 1-1: config 0 has no interface number 0 [ 55.862352][ T4333] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.867370][ T4333] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 55.869098][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.870453][ T4333] usb 1-1: Product: syz [ 55.871183][ T4333] usb 1-1: Manufacturer: syz [ 55.872149][ T4333] usb 1-1: SerialNumber: syz [ 55.874960][ T4333] usb 1-1: config 0 descriptor?? [ 55.882165][ T4333] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 56.021558][ T5118] loop1: detected capacity change from 0 to 512 [ 56.023670][ T5118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.031343][ T5118] EXT4-fs (loop1): 1 truncate cleaned up [ 56.032486][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.234493][ T5130] loop3: detected capacity change from 0 to 128 [ 56.240516][ T5130] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 56.243937][ T5130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.735589][ T5152] loop4: detected capacity change from 0 to 512 [ 56.738206][ T5152] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.742238][ T5152] EXT4-fs (loop4): 1 truncate cleaned up [ 56.945272][ T5157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.947249][ T5157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.141548][ T5160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.260'. [ 57.455175][ T5173] loop3: detected capacity change from 0 to 8 [ 57.609638][ T5182] loop2: detected capacity change from 0 to 512 [ 57.623122][ T5182] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.642066][ T5182] EXT4-fs (loop2): 1 truncate cleaned up [ 58.107773][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 58.190492][ T4840] usb 1-1: USB disconnect, device number 5 [ 58.215246][ T4840] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 58.696010][ T5208] loop4: detected capacity change from 0 to 512 [ 58.699681][ T5208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.773114][ T5208] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 58.787741][ T5208] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.277: corrupted in-inode xattr [ 58.800586][ T5208] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.277: couldn't read orphan inode 15 (err -117) [ 58.829462][ T5208] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 59.270395][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.272035][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.291343][ T5223] loop4: detected capacity change from 0 to 512 [ 59.293398][ T5223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.302635][ T5223] EXT4-fs (loop4): 1 truncate cleaned up [ 59.322530][ T5228] loop2: detected capacity change from 0 to 512 [ 59.333423][ T5228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.343086][ T5228] EXT4-fs (loop2): 1 truncate cleaned up [ 59.478189][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.490129][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.015013][ T4844] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 60.109751][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.112900][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.217028][ T4844] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 60.218768][ T4844] usb 1-1: config 0 has no interface number 0 [ 60.223048][ T4844] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 60.230400][ T4844] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 60.236405][ T4844] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 60.247452][ T4844] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.254171][ T4844] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 60.297146][ T4844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.299622][ T4844] usb 1-1: config 0 descriptor?? [ 60.304191][ T5238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.307323][ T5238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.314419][ T4844] ldusb 1-1:0.55: Interrupt in endpoint not found [ 60.518914][ T4843] usb 1-1: USB disconnect, device number 6 [ 60.981088][ T5271] loop3: detected capacity change from 0 to 512 [ 60.985766][ T5271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.993764][ T5271] EXT4-fs (loop3): 1 truncate cleaned up [ 61.046792][ T5276] loop0: detected capacity change from 0 to 512 [ 61.049221][ T5276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.053623][ T5276] EXT4-fs (loop0): 1 truncate cleaned up [ 61.907432][ T5300] loop1: detected capacity change from 0 to 512 [ 61.954513][ T5300] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 62.030758][ T5308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.032583][ T5308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.067906][ T5310] loop1: detected capacity change from 0 to 8 [ 62.438103][ T5329] loop1: detected capacity change from 0 to 512 [ 62.457761][ T5329] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.464001][ T5329] EXT4-fs (loop1): 1 truncate cleaned up [ 62.948159][ T5337] loop4: detected capacity change from 0 to 40427 [ 62.966087][ T5337] F2FS-fs (loop4): invalid crc value [ 62.975699][ T5337] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.989622][ T5337] F2FS-fs (loop4): Start checkpoint disabled! [ 62.995402][ T5337] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 63.048978][ T5219] kworker/u4:13: attempt to access beyond end of device [ 63.048978][ T5219] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 63.076625][ T5343] loop3: detected capacity change from 0 to 512 [ 63.095526][ T5343] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.329: iget: bad i_size value: 38620345925642 [ 63.111076][ T5343] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.329: couldn't read orphan inode 15 (err -117) [ 63.700018][ T5363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.701983][ T5363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.028912][ T5369] loop1: detected capacity change from 0 to 32768 [ 64.068950][ T5369] XFS (loop1): Mounting V5 Filesystem [ 64.076968][ T5385] loop4: detected capacity change from 0 to 512 [ 64.081506][ T5385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.095269][ T5385] EXT4-fs (loop4): 1 truncate cleaned up [ 64.108750][ T5369] XFS (loop1): Ending clean mount [ 64.198666][ T4328] XFS (loop1): Unmounting Filesystem [ 64.496496][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498483][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.879352][ T5401] loop3: detected capacity change from 0 to 32768 [ 64.969034][ T5401] XFS (loop3): Mounting V5 Filesystem [ 64.985280][ T5401] XFS (loop3): Ending clean mount [ 65.307129][ T4329] XFS (loop3): Unmounting Filesystem [ 65.947697][ T5452] loop4: detected capacity change from 0 to 512 [ 65.959059][ T5452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.043661][ T5452] EXT4-fs (loop4): 1 truncate cleaned up [ 66.208707][ T5457] device bridge0 entered promiscuous mode [ 66.210026][ T5457] device vlan2 entered promiscuous mode [ 66.899833][ T4339] EXT4-fs unmount: 23 callbacks suppressed [ 66.899847][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 67.225095][ T4342] Bluetooth: latency 65520 > 499 [ 67.308933][ T5495] loop4: detected capacity change from 0 to 1024 [ 67.310668][ T5495] EXT4-fs: Ignoring removed bh option [ 67.318793][ T5497] loop1: detected capacity change from 0 to 512 [ 67.325048][ T5497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.326986][ T5495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.346058][ T5497] EXT4-fs (loop1): 1 truncate cleaned up [ 67.347172][ T5497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.427471][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 68.061411][ T5517] loop4: detected capacity change from 0 to 32768 [ 68.118269][ T5517] JBD2: Ignoring recovery information on journal [ 68.138252][ T5517] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 68.218807][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 68.275351][ T4339] ocfs2: Unmounting device (7,4) on (node local) [ 68.371598][ T5536] loop4: detected capacity change from 0 to 512 [ 68.388818][ T5536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.400244][ T5536] EXT4-fs (loop4): 1 truncate cleaned up [ 68.401378][ T5536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.959139][ T5549] loop2: detected capacity change from 0 to 32768 [ 69.096322][ T5559] loop0: detected capacity change from 0 to 512 [ 69.104594][ T5559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.147373][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.149139][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.150675][ T5559] EXT4-fs (loop0): 1 truncate cleaned up [ 69.151742][ T5559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.294730][ T4340] Bluetooth: hci0: command 0x2021 tx timeout [ 69.333732][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 69.499066][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 69.623799][ T3437] cfg80211: failed to load regulatory.db [ 69.630899][ T5578] loop0: detected capacity change from 0 to 32768 [ 70.044749][ T3437] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 70.167955][ T5593] loop3: detected capacity change from 0 to 4096 [ 70.194812][ T3437] usb 1-1: device descriptor read/64, error -71 [ 70.328628][ T5598] loop3: detected capacity change from 0 to 512 [ 70.349683][ T5598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.387335][ T5598] EXT4-fs (loop3): 1 truncate cleaned up [ 70.388373][ T5598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.464845][ T3437] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 70.576348][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 70.614788][ T3437] usb 1-1: device descriptor read/64, error -71 [ 70.679025][ T5615] loop2: detected capacity change from 0 to 512 [ 70.699766][ T5615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.732756][ T5615] EXT4-fs (loop2): 1 truncate cleaned up [ 70.733884][ T5615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.735308][ T3437] usb usb1-port1: attempt power cycle [ 70.762610][ T5621] device syzkaller0 entered promiscuous mode [ 70.837528][ T5611] loop3: detected capacity change from 0 to 40427 [ 70.840303][ T5611] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 70.851249][ T5611] F2FS-fs (loop3): invalid crc value [ 70.863459][ T5611] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.872488][ T5611] F2FS-fs (loop3): recover fsync data on readonly fs [ 70.875257][ T5611] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 70.880486][ T5611] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 70.891790][ T5611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.013249][ T5635] FAULT_INJECTION: forcing a failure. [ 71.013249][ T5635] name fail_futex, interval 1, probability 0, space 0, times 0 [ 71.015856][ T5635] CPU: 0 PID: 5635 Comm: syz.3.433 Not tainted syzkaller #0 [ 71.017217][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 71.019115][ T5635] Call trace: [ 71.019718][ T5635] dump_backtrace+0x1c4/0x1f0 [ 71.020617][ T5635] show_stack+0x2c/0x3c [ 71.021402][ T5635] __dump_stack+0x30/0x40 [ 71.022319][ T5635] dump_stack_lvl+0xf4/0x15c [ 71.023250][ T5635] dump_stack+0x1c/0x5c [ 71.024133][ T5635] should_fail_ex+0x3cc/0x524 [ 71.025039][ T5635] should_fail+0x14/0x24 [ 71.025838][ T5635] get_futex_key+0x18c/0xfb0 [ 71.026733][ T5635] futex_wake+0x10c/0x458 [ 71.027580][ T5635] do_futex+0x2c4/0x340 [ 71.028358][ T5635] mm_release+0x190/0x274 [ 71.029171][ T5635] exit_mm_release+0x30/0x40 [ 71.030044][ T5635] exit_mm+0x50/0x290 [ 71.030810][ T5635] do_exit+0x4d0/0x19ac [ 71.031585][ T5635] do_group_exit+0x198/0x238 [ 71.032461][ T5635] get_signal+0x11f4/0x133c [ 71.033318][ T5635] do_notify_resume+0x364/0x2c84 [ 71.034265][ T5635] el0_svc+0x98/0x128 [ 71.035027][ T5635] el0t_64_sync_handler+0x84/0xf0 [ 71.035892][ T5635] el0t_64_sync+0x18c/0x190 [ 71.100369][ T5639] loop3: detected capacity change from 0 to 512 [ 71.341881][ T3437] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 71.345633][ T5639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.365147][ T3437] usb 1-1: device descriptor read/8, error -71 [ 71.367475][ T5639] EXT4-fs (loop3): 1 truncate cleaned up [ 71.369016][ T5639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.494823][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 71.614405][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 71.634890][ T3437] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 71.665272][ T3437] usb 1-1: device descriptor read/8, error -71 [ 71.759250][ T5670] loop2: detected capacity change from 0 to 512 [ 71.782095][ T5670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.787239][ T3437] usb usb1-port1: unable to enumerate USB device [ 71.801328][ T5670] EXT4-fs (loop2): 1 truncate cleaned up [ 71.802365][ T5670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.897406][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 72.269581][ T5686] loop2: detected capacity change from 0 to 512 [ 72.285556][ T5686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.323318][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 72.397356][ T5695] loop2: detected capacity change from 0 to 4096 [ 72.403891][ T5695] EXT4-fs: inline encryption not supported [ 72.418491][ T5695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.422083][ T5695] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.438001][ T5695] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 72.439669][ T5695] System zones: 0-5 [ 72.442773][ T5695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.466131][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 72.511056][ T5702] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 72.551199][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 72.928640][ T5710] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.951254][ T5710] EXT4-fs (loop3): 1 truncate cleaned up [ 72.952464][ T5710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.047730][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 73.070251][ T5719] jffs2: notice: (5719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.550610][ T5737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.552228][ T5737] IPv6: NLM_F_CREATE should be set when creating new route [ 73.553564][ T5737] IPv6: NLM_F_CREATE should be set when creating new route [ 73.634071][ T5744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.637881][ T5744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.663985][ T5745] SQUASHFS error: Failed to read block 0x4de: -5 [ 73.668387][ T5745] SQUASHFS error: Failed to read block 0x4de: -5 [ 73.670405][ T5745] SQUASHFS error: Failed to read block 0x4de: -5 [ 73.672598][ T5745] SQUASHFS error: Failed to read block 0x4de: -5 [ 73.748536][ T5750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.763649][ T5750] EXT4-fs (loop3): 1 truncate cleaned up [ 73.765261][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.813466][ T5753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.816167][ T5753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.826961][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 74.097757][ T5775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.102144][ T5776] ext4: Unknown parameter 'dont_measure' [ 74.113781][ T5775] EXT4-fs (loop2): 1 truncate cleaned up [ 74.115325][ T5775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.141907][ T4322] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.172042][ T5782] set_capacity_and_notify: 7 callbacks suppressed [ 74.172052][ T5782] loop4: detected capacity change from 0 to 512 [ 74.195853][ T5782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.217530][ T5782] EXT4-fs (loop4): 1 truncate cleaned up [ 74.218793][ T5782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.480388][ T5794] loop1: detected capacity change from 0 to 128 [ 75.195990][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.197705][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.221879][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 75.300784][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 75.400332][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 75.517994][ T5836] loop3: detected capacity change from 0 to 512 [ 75.528148][ T5836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.542004][ T5836] EXT4-fs (loop3): 1 truncate cleaned up [ 75.543057][ T5836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.547158][ T5839] loop4: detected capacity change from 0 to 256 [ 75.569322][ T5839] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 75.707450][ T5844] loop0: detected capacity change from 0 to 512 [ 75.727865][ T5844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.992569][ T5844] EXT4-fs (loop0): 1 truncate cleaned up [ 75.993804][ T5844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.024585][ T5841] loop2: detected capacity change from 0 to 40427 [ 76.031850][ T5841] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 76.039018][ T5841] F2FS-fs (loop2): invalid crc value [ 76.059719][ T5841] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.081633][ T5841] F2FS-fs (loop2): recover fsync data on readonly fs [ 76.083056][ T5841] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 76.084384][ T5841] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 76.088616][ T5841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.300196][ T5861] loop1: detected capacity change from 0 to 512 [ 76.323650][ T5861] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.346947][ T5861] EXT4-fs (loop1): 1 truncate cleaned up [ 76.348210][ T5861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.359816][ T5861] EXT4-fs error (device loop1): ext4_nfs_get_inode:1512: inode #11: comm syz.1.519: iget: bad extra_isize 62 (inode size 256) [ 76.422131][ T5861] EXT4-fs (loop1): Remounting filesystem read-only [ 76.484466][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 76.554345][ T5868] loop1: detected capacity change from 0 to 512 [ 76.593775][ T5868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 76.595453][ T5868] System zones: 1-12 [ 76.596560][ T5868] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.521: Directory hole found for htree index block 0 [ 76.610447][ T5868] EXT4-fs (loop1): Remounting filesystem read-only [ 76.618529][ T5868] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 76.622447][ T5868] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.521: Directory hole found for htree index block 0 [ 76.627235][ T5868] EXT4-fs (loop1): Remounting filesystem read-only [ 76.634169][ T5868] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 76.664854][ T5868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.921428][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 77.008368][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 77.162141][ T5879] FAULT_INJECTION: forcing a failure. [ 77.162141][ T5879] name failslab, interval 1, probability 0, space 0, times 1 [ 77.164960][ T5879] CPU: 1 PID: 5879 Comm: syz.2.526 Not tainted syzkaller #0 [ 77.166091][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.167957][ T5879] Call trace: [ 77.168561][ T5879] dump_backtrace+0x1c4/0x1f0 [ 77.169433][ T5879] show_stack+0x2c/0x3c [ 77.170203][ T5879] __dump_stack+0x30/0x40 [ 77.171001][ T5879] dump_stack_lvl+0xf4/0x15c [ 77.171809][ T5879] dump_stack+0x1c/0x5c [ 77.172604][ T5879] should_fail_ex+0x3cc/0x524 [ 77.173487][ T5879] __should_failslab+0xc0/0x11c [ 77.174395][ T5879] should_failslab+0x10/0x28 [ 77.175251][ T5879] __kmem_cache_alloc_node+0x7c/0x318 [ 77.176250][ T5879] kmalloc_trace+0x48/0x94 [ 77.177106][ T5879] alloc_fs_context+0x7c/0x778 [ 77.178044][ T5879] fs_context_for_mount+0x34/0x44 [ 77.178947][ T5879] mq_init_ns+0xdc/0x4d8 [ 77.179769][ T5879] copy_ipcs+0x274/0x4d4 [ 77.180513][ T5879] create_new_namespaces+0x1b0/0x604 [ 77.181476][ T5879] unshare_nsproxy_namespaces+0x108/0x160 [ 77.182483][ T5879] ksys_unshare+0x3f0/0x70c [ 77.183338][ T5879] __arm64_sys_unshare+0x3c/0x50 [ 77.184268][ T5879] invoke_syscall+0x98/0x290 [ 77.185163][ T5879] el0_svc_common+0x13c/0x258 [ 77.186048][ T5879] do_el0_svc+0x5c/0x134 [ 77.186818][ T5879] el0_svc+0x58/0x128 [ 77.187573][ T5879] el0t_64_sync_handler+0x84/0xf0 [ 77.188471][ T5879] el0t_64_sync+0x18c/0x190 [ 77.215950][ T5881] loop2: detected capacity change from 0 to 256 [ 77.232193][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 77.256499][ T5881] FAT-fs (loop2): Directory bread(block 64) failed [ 77.257930][ T5881] FAT-fs (loop2): Directory bread(block 65) failed [ 77.259342][ T5881] FAT-fs (loop2): Directory bread(block 66) failed [ 77.260527][ T5881] FAT-fs (loop2): Directory bread(block 67) failed [ 77.264819][ T5881] FAT-fs (loop2): Directory bread(block 68) failed [ 77.266119][ T5881] FAT-fs (loop2): Directory bread(block 69) failed [ 77.267328][ T5881] FAT-fs (loop2): Directory bread(block 70) failed [ 77.271591][ T5881] FAT-fs (loop2): Directory bread(block 71) failed [ 77.273041][ T5881] FAT-fs (loop2): Directory bread(block 72) failed [ 77.274285][ T5881] FAT-fs (loop2): Directory bread(block 73) failed [ 77.295551][ T4382] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 77.329689][ T5881] Bluetooth: MGMT ver 1.22 [ 77.400274][ T5883] loop1: detected capacity change from 0 to 40427 [ 77.408629][ T5883] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 77.415236][ T5883] F2FS-fs (loop1): invalid crc value [ 77.421046][ T5883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.437413][ T5883] F2FS-fs (loop1): recover fsync data on readonly fs [ 77.438828][ T5883] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 77.440833][ T5883] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 77.443500][ T5883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.444724][ T4382] usb 1-1: device descriptor read/64, error -71 [ 77.646677][ T5897] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 77.714776][ T4382] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 77.864823][ T4382] usb 1-1: device descriptor read/64, error -71 [ 77.992706][ T4382] usb usb1-port1: attempt power cycle [ 78.265945][ T5903] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.270245][ T5903] EXT4-fs (loop2): 1 truncate cleaned up [ 78.271496][ T5903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.386216][ T5892] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 78.581733][ T4382] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 78.615172][ T4382] usb 1-1: device descriptor read/8, error -71 [ 78.682357][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.684584][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.884737][ T4382] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 78.915125][ T4382] usb 1-1: device descriptor read/8, error -71 [ 79.034798][ T4382] usb usb1-port1: unable to enumerate USB device [ 79.180031][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 79.184409][ T5926] set_capacity_and_notify: 3 callbacks suppressed [ 79.184418][ T5926] loop3: detected capacity change from 0 to 256 [ 79.212295][ T5926] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 79.228658][ T5930] loop2: detected capacity change from 0 to 512 [ 79.236600][ T5930] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.255840][ T5930] EXT4-fs (loop2): 1 orphan inode deleted [ 79.256885][ T5930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.302524][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 79.445245][ T5936] loop4: detected capacity change from 0 to 16 [ 79.609093][ T5936] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.620371][ T5935] syz.4.548: attempt to access beyond end of device [ 79.620371][ T5935] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 79.624103][ T5935] syz.4.548 sent an empty control message without MSG_MORE. [ 80.130207][ T5951] loop0: detected capacity change from 0 to 1024 [ 80.164295][ T5951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.203977][ T5951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.240197][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 80.325724][ T5968] loop0: detected capacity change from 0 to 512 [ 80.342128][ T5968] FAT-fs (loop0): Directory bread(block 199916) failed [ 80.343582][ T5968] FAT-fs (loop0): Directory bread(block 199917) failed [ 80.348394][ T5968] FAT-fs (loop0): Directory bread(block 199918) failed [ 80.352070][ T5968] FAT-fs (loop0): Directory bread(block 199919) failed [ 80.354610][ T5968] FAT-fs (loop0): Directory bread(block 199920) failed [ 80.359076][ T5968] FAT-fs (loop0): Directory bread(block 199921) failed [ 80.359458][ T5970] jffs2: notice: (5970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.360955][ T5968] FAT-fs (loop0): Directory bread(block 199922) failed [ 80.368004][ T5968] FAT-fs (loop0): Directory bread(block 199923) failed [ 80.451915][ T5968] FAT-fs (loop0): FAT read failed (blocknr 128) [ 80.848962][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.850909][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.094770][ T4843] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 81.251271][ T4843] usb 1-1: device descriptor read/64, error -71 [ 81.354547][ T5990] loop4: detected capacity change from 0 to 512 [ 81.378441][ T5990] EXT4-fs (loop4): can't mount with commit=8, fs mounted w/o journal [ 81.407133][ T5993] loop3: detected capacity change from 0 to 512 [ 81.409938][ T5993] EXT4-fs: inline encryption not supported [ 81.415585][ T5993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.421262][ T5993] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52306!=33349) [ 81.433571][ T5993] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.434925][ T5993] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.570: inode #15: comm syz.3.570: iget: illegal inode # [ 81.437885][ T5993] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.570: couldn't read orphan inode 15 (err -117) [ 81.440421][ T5993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.455109][ T5998] loop4: detected capacity change from 0 to 128 [ 81.465708][ T5998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.480808][ T5998] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.572: Invalid inode table block 35 in block_group 0 [ 81.487179][ T5998] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 81.500419][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 81.514751][ T4843] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 81.664694][ T4843] usb 1-1: device descriptor read/64, error -71 [ 81.787481][ T4843] usb usb1-port1: attempt power cycle [ 82.195849][ T4843] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 82.227531][ T4843] usb 1-1: device descriptor read/8, error -71 [ 82.243117][ T4329] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 3: comm syz-executor: invalid block [ 82.247150][ T4329] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 3: comm syz-executor: invalid block [ 82.589162][ T6023] loop2: detected capacity change from 0 to 164 [ 82.624796][ T4843] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 82.669113][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.673176][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.684451][ T6029] loop2: detected capacity change from 0 to 512 [ 82.688062][ T4843] usb 1-1: device descriptor read/8, error -71 [ 82.689944][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 82.722763][ T6029] EXT4-fs (loop2): 1 truncate cleaned up [ 82.723853][ T6029] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.758981][ T6029] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.585: deleted inode referenced: 15 [ 82.762840][ T6029] EXT4-fs (loop2): Remounting filesystem read-only [ 82.782853][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 82.803039][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.806682][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.808940][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.812173][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.813810][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.817764][ T4843] usb usb1-port1: unable to enumerate USB device [ 82.819172][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.974304][ T6032] chnl_net:caif_netlink_parms(): no params data found [ 83.119695][ T6046] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.184000][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.190799][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.192125][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.194055][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.204391][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.206067][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.207504][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.208745][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.218530][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.219726][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.221554][ T6032] device bridge_slave_0 entered promiscuous mode [ 83.225785][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.227143][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.228895][ T6032] device bridge_slave_1 entered promiscuous mode [ 83.246365][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.253528][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.281509][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.288212][ T6032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.291129][ T6032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.302610][ T6032] team0: Port device team_slave_0 added [ 83.305999][ T6032] team0: Port device team_slave_1 added [ 83.312908][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.314076][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.321670][ T6032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.328322][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.329618][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.334462][ T6032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.375606][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.436169][ T6032] device hsr_slave_0 entered promiscuous mode [ 83.468808][ T6032] device hsr_slave_1 entered promiscuous mode [ 83.517400][ T6032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.518987][ T6032] Cannot create hsr debugfs directory [ 83.558815][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.657372][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.679049][ T6032] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.745907][ T6032] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.786394][ T6032] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.789370][ T6079] hfsplus: umask requires a value [ 83.790486][ T6079] hfsplus: unable to parse mount options [ 83.806776][ T6032] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.903485][ T6087] FAULT_INJECTION: forcing a failure. [ 83.903485][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 83.912863][ T6087] CPU: 0 PID: 6087 Comm: syz.1.607 Not tainted syzkaller #0 [ 83.914207][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.916068][ T6087] Call trace: [ 83.916684][ T6087] dump_backtrace+0x1c4/0x1f0 [ 83.917588][ T6087] show_stack+0x2c/0x3c [ 83.917711][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.918407][ T6087] __dump_stack+0x30/0x40 [ 83.920615][ T6087] dump_stack_lvl+0xf4/0x15c [ 83.921515][ T6087] dump_stack+0x1c/0x5c [ 83.922276][ T6087] should_fail_ex+0x3cc/0x524 [ 83.923176][ T6087] __should_failslab+0xc0/0x11c [ 83.924132][ T6087] should_failslab+0x10/0x28 [ 83.924996][ T6087] __kmem_cache_alloc_node+0x7c/0x318 [ 83.926032][ T6087] kmalloc_trace+0x48/0x94 [ 83.926873][ T6087] proc_self_get_link+0xe4/0x17c [ 83.927848][ T6087] pick_link+0x5e0/0xbc8 [ 83.928725][ T6087] step_into+0x954/0xbc4 [ 83.929543][ T6087] link_path_walk+0x5f4/0xcd8 [ 83.930430][ T6087] path_openat+0x1c0/0x27a0 [ 83.931291][ T6087] do_filp_open+0x198/0x38c [ 83.932161][ T6087] do_sys_openat2+0x134/0x3fc [ 83.933033][ T6087] __arm64_sys_openat+0x11c/0x150 [ 83.933976][ T6087] invoke_syscall+0x98/0x290 [ 83.934862][ T6087] el0_svc_common+0x13c/0x258 [ 83.935719][ T6087] do_el0_svc+0x5c/0x134 [ 83.936488][ T6087] el0_svc+0x58/0x128 [ 83.937225][ T6087] el0t_64_sync_handler+0x84/0xf0 [ 83.938162][ T6087] el0t_64_sync+0x18c/0x190 [ 83.952253][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.956075][ T6089] FAULT_INJECTION: forcing a failure. [ 83.956075][ T6089] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.958547][ T6089] CPU: 1 PID: 6089 Comm: syz.4.608 Not tainted syzkaller #0 [ 83.960003][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.961980][ T6089] Call trace: [ 83.962649][ T6089] dump_backtrace+0x1c4/0x1f0 [ 83.963591][ T6089] show_stack+0x2c/0x3c [ 83.964461][ T6089] __dump_stack+0x30/0x40 [ 83.965371][ T6089] dump_stack_lvl+0xf4/0x15c [ 83.966263][ T6089] dump_stack+0x1c/0x5c [ 83.967010][ T6089] should_fail_ex+0x3cc/0x524 [ 83.967876][ T6089] should_fail+0x14/0x24 [ 83.968675][ T6089] should_fail_usercopy+0x20/0x30 [ 83.969662][ T6089] strncpy_from_user+0x48/0x59c [ 83.970544][ T6089] __arm64_sys_add_key+0x14c/0x520 [ 83.971527][ T6089] invoke_syscall+0x98/0x290 [ 83.972422][ T6089] el0_svc_common+0x13c/0x258 [ 83.973310][ T6089] do_el0_svc+0x5c/0x134 [ 83.974069][ T6089] el0_svc+0x58/0x128 [ 83.974919][ T6089] el0t_64_sync_handler+0x84/0xf0 [ 83.975854][ T6089] el0t_64_sync+0x18c/0x190 [ 83.992927][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.995956][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.010794][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.013350][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.019778][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.021085][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.030129][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.032004][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.033634][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.034965][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.062527][ T6032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.064586][ T6032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.081031][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.082877][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.086488][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.092840][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.099611][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.112746][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.118302][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.120129][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.125656][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.148715][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.150532][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.322100][ T6107] set_capacity_and_notify: 5 callbacks suppressed [ 84.322124][ T6107] loop4: detected capacity change from 0 to 16 [ 84.444834][ T4376] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 84.504787][ T6107] erofs: (device loop4): mounted with root inode @ nid 36. [ 84.542904][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.544995][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.551965][ T6106] syz.4.614: attempt to access beyond end of device [ 84.551965][ T6106] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 84.555812][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.557407][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.595688][ T4376] usb 1-1: device descriptor read/64, error -71 [ 84.640628][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.642127][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.647975][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.653272][ T6119] loop2: detected capacity change from 0 to 128 [ 84.874970][ T4376] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 84.904970][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 84.967634][ T6140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.969059][ T6140] IPv6: NLM_F_CREATE should be set when creating new route [ 84.983623][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.991847][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.020484][ T6032] device veth0_vlan entered promiscuous mode [ 85.022924][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.024888][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.034970][ T4376] usb 1-1: device descriptor read/64, error -71 [ 85.040559][ T27] audit: type=1326 audit(85.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.1.620" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a1792a8 code=0x0 [ 85.059659][ T6032] device veth1_vlan entered promiscuous mode [ 85.064547][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.066489][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.068058][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.069666][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.087523][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.090984][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.093764][ T6032] device veth0_macvtap entered promiscuous mode [ 85.098163][ T6032] device veth1_macvtap entered promiscuous mode [ 85.140323][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.142264][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.144275][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.154727][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.156573][ T4376] usb usb1-port1: attempt power cycle [ 85.156681][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.159700][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.161493][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.163374][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.169941][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.176158][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.179232][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.182714][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.185319][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.188661][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.190620][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.192475][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.194447][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.204724][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.206792][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.208646][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.210498][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.216225][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.281328][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.283315][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.286500][ T6032] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.288075][ T6032] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.289754][ T6032] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.291293][ T6032] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.490018][ T4708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.491815][ T4708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.494886][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.519711][ T4708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.521432][ T4708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.523166][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.604980][ T4376] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 85.645385][ T4376] usb 1-1: device descriptor read/8, error -71 [ 85.915221][ T4376] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 85.945519][ T4376] usb 1-1: device descriptor read/8, error -71 [ 86.068690][ T4376] usb usb1-port1: unable to enumerate USB device [ 86.119651][ T6204] loop1: detected capacity change from 0 to 512 [ 86.134977][ T6204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.152177][ T6204] EXT4-fs (loop1): 1 truncate cleaned up [ 86.153559][ T6204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.269724][ T9] device hsr_slave_0 left promiscuous mode [ 86.355031][ T9] device hsr_slave_1 left promiscuous mode [ 86.445470][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.447534][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.450746][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.452342][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.460743][ T9] device bridge_slave_1 left promiscuous mode [ 86.464464][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.526176][ T9] device bridge_slave_0 left promiscuous mode [ 86.527604][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.665055][ T9] device veth1_macvtap left promiscuous mode [ 86.668630][ T9] device veth0_macvtap left promiscuous mode [ 86.670558][ T9] device veth1_vlan left promiscuous mode [ 86.671754][ T9] device veth0_vlan left promiscuous mode [ 87.020203][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 87.063017][ T6233] loop1: detected capacity change from 0 to 2048 [ 87.073732][ T6233] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.197725][ T6254] loop4: detected capacity change from 0 to 2048 [ 88.210399][ T6254] EXT4-fs: Ignoring removed i_version option [ 88.216386][ T6254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.233900][ T6254] fs-verity: sha512 using implementation "sha512-ce" [ 88.253224][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 88.894817][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 88.901307][ T9] team0 (unregistering): Port device team_slave_1 removed [ 89.085406][ T9] team0 (unregistering): Port device team_slave_0 removed [ 89.245757][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.446172][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.926203][ T9] bond0 (unregistering): Released all slaves [ 90.974780][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 91.221146][ T6235] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 91.274956][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 91.368790][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.379386][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.507760][ T6291] jffs2: notice: (6291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.546546][ T6297] loop2: detected capacity change from 0 to 164 [ 92.128437][ T6325] loop5: detected capacity change from 0 to 256 [ 92.143517][ T6325] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.153820][ T6325] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 92.161727][ T6325] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 92.169259][ T6325] exFAT-fs (loop5): failed to load alloc-bitmap [ 92.171781][ T6325] exFAT-fs (loop5): failed to recognize exfat type [ 92.244878][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.247841][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.850635][ T6365] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.665'. [ 93.056300][ T4340] Bluetooth: hci1: command 0x0407 tx timeout [ 93.392882][ T6382] jffs2: notice: (6382) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.942120][ T6410] device-mapper: ioctl: Unable to rename non-existent device, to DUfwˆ™ª»ÌÝîÿ> [ 94.039543][ T6420] loop2: detected capacity change from 0 to 16 [ 94.339051][ T6420] erofs: (device loop2): mounted with root inode @ nid 36. [ 94.363818][ T6420] syz.2.682: attempt to access beyond end of device [ 94.363818][ T6420] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 94.367107][ T6420] syz.2.682: attempt to access beyond end of device [ 94.367107][ T6420] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 94.371432][ T6420] ================================================================== [ 94.372626][ T6426] loop4: detected capacity change from 0 to 1024 [ 94.372851][ T6420] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 94.375407][ T6420] Read of size 4096 at addr ffff0000ea384000 by task syz.2.682/6420 [ 94.376898][ T6420] [ 94.377309][ T6420] CPU: 1 PID: 6420 Comm: syz.2.682 Not tainted syzkaller #0 [ 94.378683][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.380527][ T6420] Call trace: [ 94.381142][ T6420] dump_backtrace+0x1c4/0x1f0 [ 94.381978][ T6420] show_stack+0x2c/0x3c [ 94.382705][ T6420] __dump_stack+0x30/0x40 [ 94.383525][ T6420] dump_stack_lvl+0xf4/0x15c [ 94.384343][ T6420] print_address_description+0x88/0x218 [ 94.385382][ T6420] print_report+0x50/0x68 [ 94.386205][ T6420] kasan_report+0xa8/0xfc [ 94.387018][ T6420] kasan_check_range+0x258/0x290 [ 94.387926][ T6420] memcpy+0x48/0x90 [ 94.388624][ T6420] z_erofs_transform_plain+0x39c/0x494 [ 94.389637][ T6420] z_erofs_decompress+0x9c/0xd4 [ 94.390509][ T6420] z_erofs_decompress_queue+0x103c/0x1bf4 [ 94.391351][ T6420] z_erofs_runqueue+0x1508/0x16a8 [ 94.392182][ T6420] z_erofs_read_folio+0x2dc/0x5cc [ 94.393134][ T6420] filemap_read_folio+0x134/0x384 [ 94.394044][ T6420] filemap_read+0x1290/0x20dc [ 94.394908][ T6420] generic_file_read_iter+0xf8/0x5ac [ 94.395875][ T6420] vfs_read+0x3cc/0x7b8 [ 94.396654][ T6420] ksys_read+0x12c/0x228 [ 94.397460][ T6420] __arm64_sys_read+0x7c/0x90 [ 94.398353][ T6420] invoke_syscall+0x98/0x290 [ 94.399239][ T6420] el0_svc_common+0x13c/0x258 [ 94.400129][ T6420] do_el0_svc+0x5c/0x134 [ 94.400910][ T6420] el0_svc+0x58/0x128 [ 94.401638][ T6420] el0t_64_sync_handler+0x84/0xf0 [ 94.402554][ T6420] el0t_64_sync+0x18c/0x190 [ 94.403431][ T6420] [ 94.403843][ T6420] Allocated by task 6399: [ 94.404596][ T6420] kasan_set_track+0x4c/0x80 [ 94.405404][ T6420] kasan_save_alloc_info+0x24/0x30 [ 94.406362][ T6420] __kasan_slab_alloc+0x70/0x88 [ 94.407250][ T6420] slab_post_alloc_hook+0x74/0x430 [ 94.408201][ T6420] kmem_cache_alloc+0x234/0x310 [ 94.409054][ T6420] vm_area_dup+0x30/0x1c4 [ 94.409840][ T6420] __split_vma+0xc8/0x44c [ 94.410651][ T6420] do_mas_align_munmap+0x2e4/0xf28 [ 94.411552][ T6420] __vm_munmap+0x260/0x390 [ 94.412411][ T6420] vm_munmap+0x2c/0x3c [ 94.413145][ T6420] elf_map+0x150/0x230 [ 94.413872][ T6420] elf_load+0x90/0x35c [ 94.414638][ T6420] load_elf_binary+0xc24/0x1b78 [ 94.415538][ T6420] bprm_execve+0x94c/0x1588 [ 94.416387][ T6420] do_execveat_common+0x668/0x7fc [ 94.417306][ T6420] __arm64_sys_execve+0x98/0xb0 [ 94.418194][ T6420] invoke_syscall+0x98/0x290 [ 94.419060][ T6420] el0_svc_common+0x13c/0x258 [ 94.419905][ T6420] do_el0_svc+0x5c/0x134 [ 94.420689][ T6420] el0_svc+0x58/0x128 [ 94.421381][ T6420] el0t_64_sync_handler+0x84/0xf0 [ 94.422304][ T6420] el0t_64_sync+0x18c/0x190 [ 94.423085][ T6420] [ 94.423498][ T6420] Freed by task 6399: [ 94.424256][ T6420] kasan_set_track+0x4c/0x80 [ 94.425074][ T6420] kasan_save_free_info+0x38/0x5c [ 94.425957][ T6420] ____kasan_slab_free+0x148/0x1b0 [ 94.426888][ T6420] __kasan_slab_free+0x18/0x28 [ 94.427750][ T6420] slab_free_freelist_hook+0x16c/0x1e8 [ 94.428701][ T6420] kmem_cache_free+0x118/0x318 [ 94.429567][ T6420] vm_area_free+0x58/0x128 [ 94.430379][ T6420] do_mas_align_munmap+0xc68/0xf28 [ 94.431314][ T6420] __vm_munmap+0x260/0x390 [ 94.432154][ T6420] vm_munmap+0x2c/0x3c [ 94.432930][ T6420] elf_map+0x150/0x230 [ 94.433699][ T6420] elf_load+0x90/0x35c [ 94.434447][ T6420] load_elf_binary+0xc24/0x1b78 [ 94.435327][ T6420] bprm_execve+0x94c/0x1588 [ 94.436130][ T6420] do_execveat_common+0x668/0x7fc [ 94.437013][ T6420] __arm64_sys_execve+0x98/0xb0 [ 94.437900][ T6420] invoke_syscall+0x98/0x290 [ 94.438742][ T6420] el0_svc_common+0x13c/0x258 [ 94.439533][ T6420] do_el0_svc+0x5c/0x134 [ 94.440275][ T6420] el0_svc+0x58/0x128 [ 94.440981][ T6420] el0t_64_sync_handler+0x84/0xf0 [ 94.441907][ T6420] el0t_64_sync+0x18c/0x190 [ 94.442739][ T6420] [ 94.443150][ T6420] The buggy address belongs to the object at ffff0000ea384000 [ 94.443150][ T6420] which belongs to the cache vm_area_struct of size 152 [ 94.445588][ T6420] The buggy address is located 0 bytes inside of [ 94.445588][ T6420] 152-byte region [ffff0000ea384000, ffff0000ea384098) [ 94.447925][ T6420] [ 94.448373][ T6420] The buggy address belongs to the physical page: [ 94.449512][ T6420] page:0000000088256b7d refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a384 [ 94.451413][ T6420] memcg:ffff0000d6eb6001 [ 94.452182][ T6420] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 94.453532][ T6420] raw: 05ffc00000000200 fffffc0003ac55c0 dead000000000008 ffff0000c03df680 [ 94.454976][ T6420] raw: 0000000000000000 0000000000120012 00000001ffffffff ffff0000d6eb6001 [ 94.456511][ T6420] page dumped because: kasan: bad access detected [ 94.457651][ T6420] [ 94.458069][ T6420] Memory state around the buggy address: [ 94.459074][ T6420] ffff0000ea383f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.460870][ T6420] ffff0000ea383f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.462286][ T6420] >ffff0000ea384000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.463720][ T6420] ^ [ 94.464478][ T6420] ffff0000ea384080: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 94.465929][ T6420] ffff0000ea384100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 94.467348][ T6420] ================================================================== [ 94.487688][ T6420] Disabling lock debugging due to kernel taint [ 94.489120][ T6420] syz.2.682: attempt to access beyond end of device [ 94.489120][ T6420] loop2: rw=0, sector=1056, nr_sectors = 8 limit=16 [ 94.521659][ T6428] loop0: detected capacity change from 0 to 256 [ 94.531041][ T6428] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)