last executing test programs: 2.391411575s ago: executing program 3 (id=227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)=""/164}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.002430893s ago: executing program 0 (id=231): syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x33, 0x2, 0x2, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x55}}]}]}}}}}, 0x0) 2.002089643s ago: executing program 0 (id=233): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f00000006c0), 0x1, 0x63e, &(0x7f0000000d40)="$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") 1.982599491s ago: executing program 0 (id=234): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) getpid() semop(0x0, &(0x7f0000000140)=[{0x4}], 0x1) semctl$GETPID(0x0, 0x2, 0xb, &(0x7f0000000300)=""/4096) 1.871461012s ago: executing program 4 (id=240): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.530657732s ago: executing program 4 (id=243): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x747, &(0x7f0000002600)="$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") 1.527175176s ago: executing program 3 (id=244): futex(0x0, 0x9, 0x0, &(0x7f0000000400)={0x77359400}, 0x0, 0x0) 1.511640684s ago: executing program 3 (id=246): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @local, @broadcast, @broadcast}}}}, 0x0) 1.438461814s ago: executing program 3 (id=248): syz_emit_ethernet(0x3e, &(0x7f0000000700)={@random="05c38c886b60", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x1000}}}}}}, 0x0) 1.438413755s ago: executing program 4 (id=249): memfd_secret(0xb9baaa069c044a) 1.438225674s ago: executing program 3 (id=251): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) getpid() semop(0x0, &(0x7f0000000140)=[{0x4}], 0x1) semctl$GETPID(0x0, 0x2, 0xb, &(0x7f0000000300)=""/4096) 1.438169065s ago: executing program 4 (id=252): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000020) 1.358475905s ago: executing program 4 (id=255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)=""/164}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.254472867s ago: executing program 1 (id=262): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2020000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000314000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb3d6dd5582203865}, 0x48) 1.254193793s ago: executing program 1 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x3, 0x6, 0x1, 0x1, 0xa2, 0x20fff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.152452862s ago: executing program 1 (id=270): add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040301751892a6eb270cf3a2900b04030c2f4367727469666963617465207665726966696307000000000000004453412073656c662d74657374696e67206b65593020170d32343034313332323136323652180f32313201003332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206bfbddb6dcf2e8a8d32a8648ce3d020106082a8648ce3d0301070342000407e56b51af412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b3073062900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d044002034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75dd3058b67f0f1bb58", 0x1d8, 0xfffffffffffffffd) 1.147500896s ago: executing program 1 (id=271): r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @loopback}, {0x306, @broadcast}, 0xc, {0x2, 0x0, @rand_addr=0x64010102}}) 1.094446686s ago: executing program 0 (id=272): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x4, &(0x7f00000010c0)=@raw=[@generic={0x15, 0x0, 0x0, 0x2}, @generic={0x81, 0x1, 0x0, 0x20}, @generic={0xc5, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.018620527s ago: executing program 0 (id=273): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0xfffffffffffffe62}, {0x0, 0x1, 0x804}}}, 0x7) 1.018430021s ago: executing program 1 (id=274): rt_sigreturn() 1.018297654s ago: executing program 2 (id=275): syz_emit_ethernet(0x52, &(0x7f0000000000)={@random="5b4d0eba53fa", @remote, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x5}, {@private=0xa010100, 0x1}, {@multicast2, 0x4}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) 1.00563133s ago: executing program 2 (id=276): mremap(&(0x7f00006d3000/0x3000)=nil, 0x3000, 0x3000, 0x2fd2a85a98732d6e, &(0x7f00008c3000/0x3000)=nil) 965.118258ms ago: executing program 2 (id=277): syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, "4e214e20000000000000000001000004"}}}}, 0x0) 886.496611ms ago: executing program 2 (id=278): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r1, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876b", 0x29) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) socket(0xa, 0x3, 0xff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="14000000", 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x40811, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) 885.911032ms ago: executing program 2 (id=279): socket$igmp(0x2, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shutdown(r0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 511.766197ms ago: executing program 0 (id=280): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() keyctl$join(0x7ffffffe, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_NAME(0x10, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) syz_read_part_table(0x5fe, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x4, 0x1) getdents64(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffff"], 0xd) 510.190136ms ago: executing program 3 (id=281): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) utimensat(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000003f000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000c0003000000100003"], 0x68}}, 0x0) 414.892203ms ago: executing program 4 (id=282): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000580)="10", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r5, 0xfffffffc}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000003c0)) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000280)='./file1\x00', 0x200802, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$eJzsVU9rE0EU/81mkm00SMGbV4PtRW22IJ692Lt+AEO61mLin05EEwpGL70oiF+i4JfQg6B3DyKCFz0o6KHiKSIjb+bNZDdZ7KbSnuYH4f3e/zc7mZkb6q6KAfzZ2+5gEQYCDXwUAhLAkrC2cc3Knyw146u0eovtL1h+YakGw3dPLB3ebHe76ZYa/JvEEMA+MXkya7r08unJ8vlT5O3jvEWgTJaQB+n1f6RfsV921vUsZ4mLYjgX05VbV+aeR7s5jnDtROozwzvyqwFkLd9yMWOt9YGbnqjSSqsojBFirv96AaEChgDe9bsxu03T5MNz27kwpsLpdeQ/y76ETvHR7mkxobvIkGiudAXeD3X5UYQfAqji/d52h6zX+BYj97r9uSNhskh5nYk5JYERICrQpijVkRy7BIx1v3fnvBoMz2722hvpRnorSVYvrLw5zkdDPwQ2u+mKMGPY9IiIhAed03rGT/+0TxP/CBmIzGigdU3MvqS7nJdPZ0LqQGQChb/I83Vf+f4x2+6pHq7iDBYA3B+RO+EP1ARVk7hOS1uDQIWVlswOhDEiLBjHuc7t7vqOac9pu5C+Ruszql5JWKFG6epFv/wdlk2Wayx3J/0M3Nvl3iRpKnxnbXkE1PCg3e9vmcfLMrLVfAVjSxZ954i7utfQNWvGKIljZQMDAgICAgICAg4JfwMAAP//2Sk6fA==") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@usrjquota}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x280, 0x0, 0x36314752}}) 38.335519ms ago: executing program 1 (id=283): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000001c0)) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c820"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 0s ago: executing program 2 (id=284): r0 = socket$igmp(0x2, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shutdown(r1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) getsockopt$MRT(r0, 0x0, 0x53, 0xffffffffffffffff, &(0x7f0000000000)=0xff00) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. syzkaller login: [ 29.274693][ T4697] cgroup: Unknown subsys name 'net' [ 29.385804][ T4697] cgroup: Unknown subsys name 'cpuset' [ 29.387083][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.563044][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.345245][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.346172][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.346622][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.346986][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.347212][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.362452][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.363563][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.368132][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.368566][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.370278][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.370607][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.370806][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.371352][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.372421][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.372679][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.373796][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.374997][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.378068][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.378387][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.379649][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.379862][ T4723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.381297][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.382771][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.417407][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.417638][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.624769][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.625050][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.625117][ T4708] bridge_slave_0: entered allmulticast mode [ 30.625567][ T4708] bridge_slave_0: entered promiscuous mode [ 30.639273][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.639322][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.639371][ T4708] bridge_slave_1: entered allmulticast mode [ 30.639779][ T4708] bridge_slave_1: entered promiscuous mode [ 30.659216][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.661057][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.678384][ T4708] team0: Port device team_slave_0 added [ 30.679136][ T4708] team0: Port device team_slave_1 added [ 30.703553][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.703564][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.703579][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.705357][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.705364][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.705377][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.770459][ T4708] hsr_slave_0: entered promiscuous mode [ 30.770817][ T4708] hsr_slave_1: entered promiscuous mode [ 30.771165][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.771222][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.771284][ T4718] bridge_slave_0: entered allmulticast mode [ 30.771711][ T4718] bridge_slave_0: entered promiscuous mode [ 30.784167][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.784227][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.784279][ T4718] bridge_slave_1: entered allmulticast mode [ 30.784703][ T4718] bridge_slave_1: entered promiscuous mode [ 30.832705][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.834112][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.860545][ T4718] team0: Port device team_slave_0 added [ 30.866600][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.866626][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.866724][ T4722] bridge_slave_0: entered allmulticast mode [ 30.867141][ T4722] bridge_slave_0: entered promiscuous mode [ 30.867840][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.867860][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.867905][ T4722] bridge_slave_1: entered allmulticast mode [ 30.868299][ T4722] bridge_slave_1: entered promiscuous mode [ 30.878312][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.879131][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.885800][ T4722] team0: Port device team_slave_0 added [ 30.886510][ T4722] team0: Port device team_slave_1 added [ 30.892232][ T4718] team0: Port device team_slave_1 added [ 30.892472][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.892480][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.892491][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.898271][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.898283][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.898298][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.911622][ T4722] hsr_slave_0: entered promiscuous mode [ 30.911909][ T4722] hsr_slave_1: entered promiscuous mode [ 30.912087][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 30.912132][ T4722] Cannot create hsr debugfs directory [ 30.924443][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.924515][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.924595][ T4713] bridge_slave_0: entered allmulticast mode [ 30.925041][ T4713] bridge_slave_0: entered promiscuous mode [ 30.942168][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.942200][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.942255][ T4713] bridge_slave_1: entered allmulticast mode [ 30.942658][ T4713] bridge_slave_1: entered promiscuous mode [ 30.946616][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.946625][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.946637][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.947437][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.947445][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.947460][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.976020][ T4718] hsr_slave_0: entered promiscuous mode [ 30.976329][ T4718] hsr_slave_1: entered promiscuous mode [ 30.976505][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.976514][ T4718] Cannot create hsr debugfs directory [ 30.980008][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.995081][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.001395][ T4713] team0: Port device team_slave_0 added [ 31.002140][ T4713] team0: Port device team_slave_1 added [ 31.021633][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.021645][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.021657][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.021874][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.022003][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.022102][ T4709] bridge_slave_0: entered allmulticast mode [ 31.022547][ T4709] bridge_slave_0: entered promiscuous mode [ 31.026813][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.026823][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.026836][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.048918][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.048945][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.049009][ T4709] bridge_slave_1: entered allmulticast mode [ 31.049575][ T4709] bridge_slave_1: entered promiscuous mode [ 31.058220][ T4713] hsr_slave_0: entered promiscuous mode [ 31.058496][ T4713] hsr_slave_1: entered promiscuous mode [ 31.058659][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.058669][ T4713] Cannot create hsr debugfs directory [ 31.078165][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.087929][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.104656][ T4709] team0: Port device team_slave_0 added [ 31.106553][ T4709] team0: Port device team_slave_1 added [ 31.117757][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.121604][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.127485][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.127495][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.127511][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.128059][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.129590][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.131302][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.132485][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.132898][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.132907][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.132919][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.148005][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.150719][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.168896][ T4709] hsr_slave_0: entered promiscuous mode [ 31.169191][ T4709] hsr_slave_1: entered promiscuous mode [ 31.169362][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 31.169372][ T4709] Cannot create hsr debugfs directory [ 31.181550][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.181582][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.181717][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.181745][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.191995][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.193134][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.204552][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.205662][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.205957][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.207132][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.207626][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.208614][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.237825][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.238994][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.250764][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.251764][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.252243][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.252270][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.252335][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.252362][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.261677][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.271598][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.272714][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.277540][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.277946][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.280210][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.280440][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.291704][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.294284][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.294317][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.294692][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.299425][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.301537][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.302502][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.302834][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.305200][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.313983][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.315063][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.315619][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.316424][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.317503][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.317532][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.345534][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.346500][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.350259][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.351398][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.351737][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.352970][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.364898][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.366113][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.407344][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.411424][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.420034][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.431195][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.444628][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.444655][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.445064][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.445082][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.452557][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.460190][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.463128][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.468205][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.468231][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.468548][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.468566][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.481679][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.481702][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.482408][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.482427][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.502461][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.502968][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.502981][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.509253][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.509267][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.532281][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.538243][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.549354][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.549378][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.549682][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.549711][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.577562][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.577577][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.666299][ T4708] veth0_vlan: entered promiscuous mode [ 31.675980][ T4708] veth1_vlan: entered promiscuous mode [ 31.696075][ T4708] veth0_macvtap: entered promiscuous mode [ 31.716421][ T4708] veth1_macvtap: entered promiscuous mode [ 31.726960][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.727996][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.758655][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.766977][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.788057][ T4709] veth0_vlan: entered promiscuous mode [ 31.799893][ T4713] veth0_vlan: entered promiscuous mode [ 31.808695][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.810147][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.819149][ T4713] veth1_vlan: entered promiscuous mode [ 31.820076][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.820088][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.822242][ T4709] veth1_vlan: entered promiscuous mode [ 31.840414][ T4709] veth0_macvtap: entered promiscuous mode [ 31.841074][ T4722] veth0_vlan: entered promiscuous mode [ 31.841668][ T4709] veth1_macvtap: entered promiscuous mode [ 31.846557][ T4722] veth1_vlan: entered promiscuous mode [ 31.851151][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.851165][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.861762][ T4713] veth0_macvtap: entered promiscuous mode [ 31.864469][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.865390][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.877357][ T4722] veth0_macvtap: entered promiscuous mode [ 31.888384][ T4713] veth1_macvtap: entered promiscuous mode [ 31.891577][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.896219][ T4722] veth1_macvtap: entered promiscuous mode [ 31.902846][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.908134][ T4718] veth0_vlan: entered promiscuous mode [ 31.909015][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.910790][ T4718] veth1_vlan: entered promiscuous mode [ 31.922802][ T4718] veth0_macvtap: entered promiscuous mode [ 31.931310][ T4708] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.934256][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.939836][ T4718] veth1_macvtap: entered promiscuous mode [ 31.944480][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.944492][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.949656][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949784][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949810][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949835][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949859][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949881][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949903][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949924][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949947][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949969][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.950788][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.951789][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.986577][ T136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.986987][ T136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.009708][ T3044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.009724][ T3044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.019304][ T3044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.019318][ T3044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.019998][ T3001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.038396][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.038406][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.053863][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054217][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054384][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054499][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054563][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054623][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054753][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.061650][ T4888] tc action pedit offset 132 out of bounds [ 32.061662][ T4888] tc action pedit offset 132 out of bounds [ 32.061669][ T4888] tc action pedit offset 132 out of bounds [ 32.061675][ T4888] tc action pedit offset 132 out of bounds [ 32.061680][ T4888] tc action pedit offset 132 out of bounds [ 32.061686][ T4888] tc action pedit offset 132 out of bounds [ 32.061691][ T4888] tc action pedit offset 132 out of bounds [ 32.061695][ T4888] tc action pedit offset 132 out of bounds [ 32.061700][ T4888] tc action pedit offset 132 out of bounds [ 32.061705][ T4888] tc action pedit offset 132 out of bounds [ 32.061743][ T4888] TC_ACT_REPEAT abuse ? [ 32.062487][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.062500][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.087325][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.087338][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.106170][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.106181][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.125782][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.125796][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.537465][ T4904] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.550280][ T51] Bluetooth: hci0: command tx timeout [ 32.550647][ T51] Bluetooth: hci3: command tx timeout [ 32.550802][ T51] Bluetooth: hci2: command tx timeout [ 32.550950][ T51] Bluetooth: hci1: command tx timeout [ 32.551152][ T51] Bluetooth: hci4: command tx timeout [ 32.801443][ T4892] FAULT_INJECTION: forcing a failure. [ 32.801443][ T4892] name failslab, interval 1, probability 0, space 0, times 1 [ 32.801465][ T4892] CPU: 1 UID: 0 PID: 4892 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 32.801476][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.801482][ T4892] Call trace: [ 32.801485][ T4892] show_stack+0x2c/0x3c (C) [ 32.801506][ T4892] __dump_stack+0x30/0x40 [ 32.801519][ T4892] dump_stack_lvl+0xd8/0x12c [ 32.801530][ T4892] dump_stack+0x1c/0x28 [ 32.801541][ T4892] should_fail_ex+0x418/0x58c [ 32.801555][ T4892] should_failslab+0xc4/0x120 [ 32.801568][ T4892] __kmalloc_cache_noprof+0x94/0x5fc [ 32.801577][ T4892] netstat_seq_show+0x108/0x724 [ 32.801587][ T4892] seq_read_iter+0x39c/0xbe8 [ 32.801600][ T4892] seq_read+0x278/0x3a8 [ 32.801611][ T4892] proc_reg_read+0x1cc/0x244 [ 32.801624][ T4892] vfs_read+0x230/0x8c8 [ 32.801637][ T4892] ksys_read+0x12c/0x228 [ 32.801648][ T4892] __arm64_sys_read+0x84/0x98 [ 32.801660][ T4892] invoke_syscall+0x98/0x244 [ 32.801680][ T4892] el0_svc_common+0xec/0x23c [ 32.801691][ T4892] do_el0_svc+0x4c/0x5c [ 32.801702][ T4892] el0_svc+0x60/0x1d8 [ 32.801716][ T4892] el0t_64_sync_handler+0x44/0x104 [ 32.801728][ T4892] el0t_64_sync+0x198/0x19c [ 32.878459][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.340673][ T4920] tc action pedit offset must be on 32 bit boundaries [ 34.072758][ T4929] loop1: detected capacity change from 0 to 512 [ 34.078263][ T4929] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.078841][ T4929] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 34.079692][ T4929] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.080082][ T4929] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.14: Invalid inode bitmap blk 0 in block_group 0 [ 34.080123][ T4929] loop1: lost filesystem error report for type 5 error -117 [ 34.081379][ T4929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.155301][ T4932] loop3: detected capacity change from 0 to 512 [ 34.196983][ T4932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.251605][ T4711] Bluetooth: hci4: command tx timeout [ 35.251634][ T4711] Bluetooth: hci1: command tx timeout [ 35.251652][ T4711] Bluetooth: hci3: command tx timeout [ 35.251668][ T4711] Bluetooth: hci0: command tx timeout [ 35.304362][ T4711] Bluetooth: hci2: command tx timeout [ 35.316114][ T3001] IPVS: starting estimator thread 0... [ 35.317478][ T4946] IPVS: dh: UDP 127.0.0.1:21 - no destination available [ 35.324510][ T4946] FAULT_INJECTION: forcing a failure. [ 35.324510][ T4946] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.324526][ T4946] CPU: 1 UID: 0 PID: 4946 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT [ 35.324537][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.324543][ T4946] Call trace: [ 35.324546][ T4946] show_stack+0x2c/0x3c (C) [ 35.324564][ T4946] __dump_stack+0x30/0x40 [ 35.324576][ T4946] dump_stack_lvl+0xd8/0x12c [ 35.324588][ T4946] dump_stack+0x1c/0x28 [ 35.324599][ T4946] should_fail_ex+0x418/0x58c [ 35.324612][ T4946] should_fail+0x14/0x24 [ 35.324623][ T4946] should_fail_usercopy+0x20/0x30 [ 35.324635][ T4946] bpf_verifier_vlog+0x2f0/0xbc0 [ 35.324649][ T4946] verbose+0x120/0x1a0 [ 35.324660][ T4946] print_bpf_insn+0xcbc/0x1f60 [ 35.324670][ T4946] bpf_verbose_insn+0xbc/0x12c [ 35.324681][ T4946] bpf_compute_live_registers+0x10e8/0x129c [ 35.324690][ T4946] bpf_check+0x1dec/0x2428 [ 35.324701][ T4946] bpf_prog_load+0xf4c/0x1554 [ 35.324710][ T4946] __sys_bpf+0x7d4/0x82c [ 35.324719][ T4946] __arm64_sys_bpf+0xd0/0xec [ 35.324728][ T4946] invoke_syscall+0x98/0x244 [ 35.324740][ T4946] el0_svc_common+0xec/0x23c [ 35.324751][ T4946] do_el0_svc+0x4c/0x5c [ 35.324762][ T4946] el0_svc+0x60/0x1d8 [ 35.324774][ T4946] el0t_64_sync_handler+0x44/0x104 [ 35.324785][ T4946] el0t_64_sync+0x198/0x19c [ 35.385784][ T4949] syzkaller0: entered promiscuous mode [ 35.385801][ T4949] syzkaller0: entered allmulticast mode [ 35.394247][ T4949] tipc: Started in network mode [ 35.394266][ T4949] tipc: Node identity bac1ccb8cc7b, cluster identity 4711 [ 35.394403][ T4949] tipc: Enabled bearer , priority 0 [ 35.402960][ T4949] tipc: Resetting bearer [ 35.403473][ T4947] IPVS: using max 61 ests per chain, 146400 per kthread [ 35.416079][ T4948] tipc: Resetting bearer [ 35.421520][ T4951] random: crng reseeded on system resumption [ 35.422068][ T4948] tipc: Disabling bearer [ 35.451782][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.538416][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.596589][ T4967] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 36.597089][ T4967] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 36.601400][ T4967] i2c i2c-0: new_device: Instantiated device stusb160x at 0x28 [ 36.606540][ T4967] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 36.608895][ T4967] i2c i2c-0: Failed to register i2c client wusb3801 at 0x60 (-16) [ 36.610864][ T4967] tcpci 0-0050: probe with driver tcpci failed with error -5 [ 36.611069][ T4967] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 36.771861][ T4976] loop3: detected capacity change from 0 to 256 [ 37.133726][ T4979] ip_tables: iptables: counters copy to user failed while replacing table [ 37.135176][ T4979] loop1: detected capacity change from 0 to 128 [ 37.135640][ T4979] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.179267][ T4979] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.304489][ T51] Bluetooth: hci0: command tx timeout [ 37.304607][ T51] Bluetooth: hci3: command tx timeout [ 37.304890][ T4711] Bluetooth: hci4: command tx timeout [ 37.308353][ T51] Bluetooth: hci1: command tx timeout [ 37.474169][ T4711] Bluetooth: hci2: command tx timeout [ 37.647866][ T4976] capability: warning: `syz.3.27' uses deprecated v2 capabilities in a way that may be insecure [ 37.699784][ T4982] Zero length message leads to an empty skb [ 38.735483][ T5000] loop4: detected capacity change from 0 to 8192 [ 38.751124][ T5000] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.512548][ T4711] Bluetooth: hci4: command tx timeout [ 39.512730][ T4711] Bluetooth: hci3: command tx timeout [ 39.512769][ T4711] Bluetooth: hci1: command tx timeout [ 39.512894][ T4711] Bluetooth: hci0: command tx timeout [ 39.708926][ T5004] syzkaller0: entered promiscuous mode [ 39.708944][ T5004] syzkaller0: entered allmulticast mode [ 39.711189][ T5004] tipc: Started in network mode [ 39.711206][ T5004] tipc: Node identity 463e4de97c47, cluster identity 4711 [ 39.711276][ T5004] tipc: Enabled bearer , priority 0 [ 39.784858][ T5004] tipc: Resetting bearer [ 39.788818][ T5003] tipc: Resetting bearer [ 39.874615][ T5003] tipc: Disabling bearer [ 40.155980][ T5017] binder: 5016:5017 ioctl c0306201 20000080 returned -14 [ 40.171441][ T5017] binder: 5016:5017 tried to acquire reference to desc 0, got 1 instead [ 40.171465][ T5017] binder: 5016:5017 ioctl c0306201 200003c0 returned -14 [ 40.268718][ T5017] FAULT_INJECTION: forcing a failure. [ 40.268718][ T5017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.268746][ T5017] CPU: 0 UID: 0 PID: 5017 Comm: syz.3.37 Not tainted syzkaller #0 PREEMPT [ 40.268758][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.268764][ T5017] Call trace: [ 40.268767][ T5017] show_stack+0x2c/0x3c (C) [ 40.268788][ T5017] __dump_stack+0x30/0x40 [ 40.268800][ T5017] dump_stack_lvl+0xd8/0x12c [ 40.268812][ T5017] dump_stack+0x1c/0x28 [ 40.268823][ T5017] should_fail_ex+0x418/0x58c [ 40.268836][ T5017] should_fail+0x14/0x24 [ 40.268848][ T5017] should_fail_usercopy+0x20/0x30 [ 40.268860][ T5017] binder_alloc_copy_user_to_buffer+0x27c/0x430 [ 40.268872][ T5017] binder_transaction+0x1c8c/0x5448 [ 40.268885][ T5017] binder_ioctl_write_read+0x964/0x9038 [ 40.268898][ T5017] binder_ioctl+0x438/0x1a0c [ 40.268908][ T5017] __arm64_sys_ioctl+0x154/0x1cc [ 40.268921][ T5017] invoke_syscall+0x98/0x244 [ 40.268933][ T5017] el0_svc_common+0xec/0x23c [ 40.268945][ T5017] do_el0_svc+0x4c/0x5c [ 40.268956][ T5017] el0_svc+0x60/0x1d8 [ 40.268968][ T5017] el0t_64_sync_handler+0x44/0x104 [ 40.268979][ T5017] el0t_64_sync+0x198/0x19c [ 40.268991][ T5017] binder: 5016:5017 got transaction with invalid offsets ptr [ 40.269084][ T5017] binder: 5016:5017 transaction call to 5016:0 failed 5/29201/-14, code 0 size 112-24 line 3447 [ 40.493740][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.510928][ T5023] loop3: detected capacity change from 0 to 512 [ 40.517065][ T5023] ======================================================= [ 40.517065][ T5023] WARNING: The mand mount option has been deprecated and [ 40.517065][ T5023] and is ignored by this kernel. Remove the mand [ 40.517065][ T5023] option from the mount to silence this warning. [ 40.517065][ T5023] ======================================================= [ 40.517099][ T5023] EXT4-fs: Ignoring removed oldalloc option [ 40.519714][ T5023] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 40.520744][ T5023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 40.521674][ T5023] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.521685][ T5023] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.39: bad orphan inode 267 [ 40.521696][ T5023] loop3: lost filesystem error report for type 5 error -117 [ 40.521947][ T5023] EXT4-fs (loop3): Remounting filesystem read-only [ 40.522405][ T5023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 41.955439][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 42.045256][ T5048] loop2: detected capacity change from 0 to 256 [ 42.054485][ T5047] loop4: detected capacity change from 0 to 2048 [ 42.144339][ T5047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.684840][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.713794][ T5063] syzkaller0: entered promiscuous mode [ 42.713811][ T5063] syzkaller0: entered allmulticast mode [ 42.945746][ T5066] syzkaller0: entered promiscuous mode [ 42.945763][ T5066] syzkaller0: entered allmulticast mode [ 42.972326][ T5066] 0: reclassify loop, rule prio 0, protocol 700 [ 42.985293][ T5070] Config c/1 of g1 needs at least one function. [ 42.985382][ T5070] udc usbip-vudc.0: failed to start g1: -22 [ 42.985393][ T5070] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 42.986802][ T5070] UDC core: g1: couldn't find an available UDC or it's busy [ 43.629950][ T5084] syzkaller0: entered promiscuous mode [ 43.629969][ T5084] syzkaller0: entered allmulticast mode [ 43.695316][ T5086] loop1: detected capacity change from 0 to 8192 [ 43.723665][ T5088] random: crng reseeded on system resumption [ 44.112327][ T5096] loop0: detected capacity change from 0 to 512 [ 44.125925][ T5093] FAULT_INJECTION: forcing a failure. [ 44.125925][ T5093] name failslab, interval 1, probability 0, space 0, times 0 [ 44.125942][ T5093] CPU: 1 UID: 0 PID: 5093 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT [ 44.125954][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.125960][ T5093] Call trace: [ 44.125967][ T5093] show_stack+0x2c/0x3c (C) [ 44.125991][ T5093] __dump_stack+0x30/0x40 [ 44.126004][ T5093] dump_stack_lvl+0xd8/0x12c [ 44.126016][ T5093] dump_stack+0x1c/0x28 [ 44.126027][ T5093] should_fail_ex+0x418/0x58c [ 44.126040][ T5093] should_failslab+0xc4/0x120 [ 44.126052][ T5093] __kmalloc_noprof+0x108/0x6c8 [ 44.126061][ T5093] fib6_info_alloc+0x38/0xf4 [ 44.126074][ T5093] ip6_route_info_create+0x11c/0x708 [ 44.126084][ T5093] ip6_route_add+0x60/0x1b4 [ 44.126094][ T5093] ipv6_route_ioctl+0x2cc/0x400 [ 44.126104][ T5093] inet6_ioctl+0x21c/0x284 [ 44.126112][ T5093] sock_do_ioctl+0x100/0x254 [ 44.126130][ T5093] sock_ioctl+0x55c/0x7ec [ 44.126140][ T5093] __arm64_sys_ioctl+0x154/0x1cc [ 44.126153][ T5093] invoke_syscall+0x98/0x244 [ 44.126165][ T5093] el0_svc_common+0xec/0x23c [ 44.126176][ T5093] do_el0_svc+0x4c/0x5c [ 44.126187][ T5093] el0_svc+0x60/0x1d8 [ 44.126199][ T5093] el0t_64_sync_handler+0x44/0x104 [ 44.126210][ T5093] el0t_64_sync+0x198/0x19c [ 44.137324][ T5096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.200246][ T5098] syzkaller0: entered promiscuous mode [ 44.200263][ T5098] syzkaller0: entered allmulticast mode [ 44.203719][ T5098] tipc: Started in network mode [ 44.203736][ T5098] tipc: Node identity 12154d4df257, cluster identity 4711 [ 44.203800][ T5098] tipc: Enabled bearer , priority 0 [ 44.220778][ T4470] kernel read not supported for file /vcs (pid: 4470 comm: kworker/1:3) [ 44.221446][ T5098] tipc: Resetting bearer [ 44.228280][ T5097] tipc: Resetting bearer [ 44.233649][ T5097] tipc: Disabling bearer [ 44.300177][ T5112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.60'. [ 44.302268][ T5112] loop2: detected capacity change from 0 to 128 [ 44.311516][ T5112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.330221][ T5112] syz.2.60 (pid 5112) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 44.770619][ T5104] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 44.796226][ T5118] Bluetooth: MGMT ver 1.23 [ 44.827008][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.326503][ T5120] null_blk: disk nullb1 created [ 46.569462][ T5148] syzkaller0: entered promiscuous mode [ 46.569479][ T5148] syzkaller0: entered allmulticast mode [ 47.447165][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.676240][ T5165] loop4: detected capacity change from 0 to 128 [ 47.716684][ T5159] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 47.926381][ T5159] loop3: detected capacity change from 0 to 256 [ 48.136253][ T5165] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.138640][ T5178] syzkaller0: entered promiscuous mode [ 49.138655][ T5178] syzkaller0: entered allmulticast mode [ 49.140321][ T5181] tipc: Enabled bearer , priority 0 [ 49.144193][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.186747][ T5154] tipc: Resetting bearer [ 49.188248][ T5185] loop4: detected capacity change from 0 to 512 [ 49.246416][ T5153] tipc: Resetting bearer [ 49.252027][ T5153] tipc: Disabling bearer [ 49.283292][ T5185] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.565594][ T5185] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.78: Allocating blocks 41-42 which overlap fs metadata [ 49.565617][ T5185] loop4: lost filesystem error report for type 5 error -117 [ 49.576640][ T5185] EXT4-fs (loop4): Remounting filesystem read-only [ 49.576743][ T5185] Quota error (device loop4): write_blk: dquota write failed [ 49.576753][ T5185] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 49.576814][ T5185] Quota error (device loop4): write_blk: dquota write failed [ 49.576857][ T5185] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 49.577025][ T5185] EXT4-fs (loop4): 1 truncate cleaned up [ 49.583633][ T5185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.996545][ T5239] loop3: detected capacity change from 0 to 256 [ 51.099728][ T5239] Console: switching to colour dummy device 80x25 [ 51.301001][ T5249] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 51.453031][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.009234][ T5269] loop3: detected capacity change from 0 to 8 [ 53.529825][ T5297] loop3: detected capacity change from 0 to 512 [ 53.536439][ T5297] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.537598][ T5299] netlink: 9 bytes leftover after parsing attributes in process `syz.2.99'. [ 53.538249][ T5299] gretap0: entered promiscuous mode [ 53.553909][ T5299] loop2: detected capacity change from 0 to 512 [ 53.573680][ T5299] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 54.429259][ T5299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e11c, mo2=0102] [ 54.429355][ T5299] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.440153][ T5299] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.99: attempt to clear invalid blocks 1024 len 1 [ 54.440226][ T5299] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.443381][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 54.443395][ C0] EXT4-fs (loop2): initial error at time 54: ext4_clear_blocks:876: inode 11 [ 54.443414][ C0] EXT4-fs (loop2): last error at time 54: ext4_clear_blocks:876: inode 11 [ 54.466839][ T5299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.99: bg 0: block 361: padding at end of block bitmap is not set [ 54.466868][ T5299] loop2: lost filesystem error report for type 5 error -117 [ 54.467743][ T5297] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.98: Allocating blocks 41-42 which overlap fs metadata [ 54.467761][ T5297] loop3: lost filesystem error report for type 5 error -117 [ 54.468076][ T5297] EXT4-fs (loop3): Remounting filesystem read-only [ 54.468152][ T5297] Quota error (device loop3): write_blk: dquota write failed [ 54.468161][ T5297] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 54.468207][ T5297] Quota error (device loop3): write_blk: dquota write failed [ 54.468236][ T5297] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 54.468288][ T5297] EXT4-fs (loop3): 1 truncate cleaned up [ 54.468699][ T5299] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 54.468713][ T5299] loop2: lost filesystem error report for type 5 error -117 [ 54.470209][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.470719][ T5299] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.99: invalid indirect mapped block 1811939328 (level 0) [ 54.470741][ T5299] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.471174][ T5299] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.99: invalid indirect mapped block 2185560079 (level 1) [ 54.471191][ T5299] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.471556][ T5299] EXT4-fs (loop2): 1 truncate cleaned up [ 54.472003][ T5299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 54.520171][ T5316] loop4: detected capacity change from 0 to 512 [ 54.554127][ T5319] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.99: dx entry: limit 0 != root limit 125 [ 54.554145][ T5319] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.99: Corrupt directory, running e2fsck is recommended [ 54.555363][ T5319] netlink: 5 bytes leftover after parsing attributes in process `syz.2.99'. [ 54.555470][ T5319] 0{X: renamed from gretap0 [ 54.591034][ T5316] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.606244][ T5319] 0{X: left promiscuous mode [ 54.606253][ T5319] 0{X: entered allmulticast mode [ 54.608061][ T5323] loop1: detected capacity change from 0 to 512 [ 54.608162][ T5316] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.102: Allocating blocks 41-42 which overlap fs metadata [ 54.608177][ T5316] loop4: lost filesystem error report for type 5 error -117 [ 54.610252][ T5323] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.610703][ T5316] EXT4-fs (loop4): Remounting filesystem read-only [ 54.610761][ T5316] Quota error (device loop4): write_blk: dquota write failed [ 54.610770][ T5316] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 54.610820][ T5316] Quota error (device loop4): write_blk: dquota write failed [ 54.610854][ T5316] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 54.610910][ T5316] EXT4-fs (loop4): 1 truncate cleaned up [ 54.611369][ T5316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.928179][ T5325] netlink: 204 bytes leftover after parsing attributes in process `syz.0.101'. [ 54.930268][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 54.943886][ T5323] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.103: Allocating blocks 41-42 which overlap fs metadata [ 54.943904][ T5323] loop1: lost filesystem error report for type 5 error -117 [ 54.944890][ T5323] EXT4-fs (loop1): Remounting filesystem read-only [ 54.944945][ T5323] Quota error (device loop1): write_blk: dquota write failed [ 54.944955][ T5323] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 54.945001][ T5323] Quota error (device loop1): write_blk: dquota write failed [ 54.945033][ T5323] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 54.945084][ T5323] EXT4-fs (loop1): 1 truncate cleaned up [ 54.945544][ T5323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.468331][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.679572][ T5353] evm: overlay not supported [ 56.252904][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.287235][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.503417][ C1] net_ratelimit: 78 callbacks suppressed [ 56.580208][ T5379] loop4: detected capacity change from 0 to 8 [ 56.926300][ T5388] nvmet: adding nsid 1 to subsystem testsubsys [ 56.952238][ T5391] tmpfs: Unknown parameter 'dont_hash' [ 58.008095][ T5407] loop3: detected capacity change from 0 to 512 [ 58.016762][ T5407] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.026725][ T5411] loop4: detected capacity change from 0 to 512 [ 58.030036][ T5407] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.116: Allocating blocks 41-42 which overlap fs metadata [ 58.030052][ T5407] loop3: lost filesystem error report for type 5 error -117 [ 58.030821][ T5411] vfat: Unknown parameter '' [ 58.031291][ T5407] EXT4-fs (loop3): Remounting filesystem read-only [ 58.031368][ T5407] Quota error (device loop3): write_blk: dquota write failed [ 58.031379][ T5407] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 58.031584][ T5407] EXT4-fs (loop3): 1 truncate cleaned up [ 58.034236][ T5407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.368177][ T5420] loop2: detected capacity change from 0 to 8 [ 58.709646][ T5420] Filesystem uses "lzo" compression. This is not supported [ 58.907487][ T5423] loop1: detected capacity change from 0 to 512 [ 58.929452][ T5425] loop4: detected capacity change from 0 to 512 [ 58.945782][ T5425] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.955514][ T5423] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.965279][ T5425] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.120: Allocating blocks 41-42 which overlap fs metadata [ 58.965297][ T5425] loop4: lost filesystem error report for type 5 error -117 [ 58.965438][ T5425] EXT4-fs (loop4): Remounting filesystem read-only [ 58.965578][ T5425] EXT4-fs (loop4): 1 truncate cleaned up [ 58.972370][ T5423] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.118: Allocating blocks 41-42 which overlap fs metadata [ 58.972389][ T5423] loop1: lost filesystem error report for type 5 error -117 [ 58.972562][ T5423] EXT4-fs (loop1): Remounting filesystem read-only [ 58.972687][ T5423] EXT4-fs (loop1): 1 truncate cleaned up [ 58.974773][ T5425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.061047][ T5423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.274174][ T5436] Console: switching to colour frame buffer device 128x48 [ 59.404940][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.359949][ T5453] hub 6-0:1.0: USB hub found [ 60.360354][ T5453] hub 6-0:1.0: 8 ports detected [ 60.363318][ T5453] FAULT_INJECTION: forcing a failure. [ 60.363318][ T5453] name failslab, interval 1, probability 0, space 0, times 0 [ 60.363330][ T5453] CPU: 1 UID: 0 PID: 5453 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT [ 60.363339][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.363355][ T5453] Call trace: [ 60.363358][ T5453] show_stack+0x2c/0x3c (C) [ 60.363375][ T5453] __dump_stack+0x30/0x40 [ 60.363387][ T5453] dump_stack_lvl+0xd8/0x12c [ 60.363399][ T5453] dump_stack+0x1c/0x28 [ 60.363410][ T5453] should_fail_ex+0x418/0x58c [ 60.363423][ T5453] should_failslab+0xc4/0x120 [ 60.363437][ T5453] __kmalloc_cache_noprof+0x94/0x5fc [ 60.363446][ T5453] usb_hub_create_port_device+0xc4/0xadc [ 60.363458][ T5453] hub_probe+0x1c5c/0x2dd4 [ 60.363470][ T5453] usb_probe_interface+0x374/0x834 [ 60.363481][ T5453] really_probe+0x29c/0x800 [ 60.363490][ T5453] __driver_probe_device+0x1e0/0x350 [ 60.363503][ T5453] driver_probe_device+0x6c/0x19c [ 60.363511][ T5453] __device_attach_driver+0x198/0x2f8 [ 60.363519][ T5453] bus_for_each_drv+0x144/0x1dc [ 60.363530][ T5453] __device_attach+0x248/0x390 [ 60.363542][ T5453] device_attach+0x24/0x34 [ 60.363554][ T5453] proc_ioctl+0x368/0x588 [ 60.363563][ T5453] proc_ioctl_default+0xc8/0x110 [ 60.363572][ T5453] usbdev_ioctl+0xe4c/0x1990 [ 60.363581][ T5453] __arm64_sys_ioctl+0x154/0x1cc [ 60.363594][ T5453] invoke_syscall+0x98/0x244 [ 60.363606][ T5453] el0_svc_common+0xec/0x23c [ 60.363618][ T5453] do_el0_svc+0x4c/0x5c [ 60.363629][ T5453] el0_svc+0x60/0x1d8 [ 60.363640][ T5453] el0t_64_sync_handler+0x44/0x104 [ 60.363651][ T5453] el0t_64_sync+0x198/0x19c [ 60.363717][ T5453] hub 6-0:1.0: couldn't create port8 device. [ 60.363761][ T5453] hub 6-0:1.0: config failed, out of memory (err -12) [ 60.475480][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.541568][ T5458] loop3: detected capacity change from 0 to 8 [ 60.711597][ T5459] Cannot find add_set index 0 as target [ 61.341697][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.422204][ T5470] loop5: detected capacity change from 0 to 7 [ 61.425299][ T5470] Dev loop5: unable to read RDB block 7 [ 61.425319][ T5470] loop5: unable to read partition table [ 61.425385][ T5470] loop5: partition table beyond EOD, truncated [ 61.425405][ T5470] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 61.451899][ T5471] loop1: detected capacity change from 0 to 8192 [ 61.458088][ T5470] Dev loop5: unable to read RDB block 7 [ 61.458107][ T5470] loop5: unable to read partition table [ 61.458560][ T5470] loop5: partition table beyond EOD, truncated [ 61.458574][ T5470] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 61.486516][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 61.498771][ T5471] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.696083][ T5479] FAULT_INJECTION: forcing a failure. [ 61.696083][ T5479] name failslab, interval 1, probability 0, space 0, times 0 [ 61.696235][ T5479] CPU: 1 UID: 0 PID: 5479 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT [ 61.696251][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.696266][ T5479] Call trace: [ 61.696269][ T5479] show_stack+0x2c/0x3c (C) [ 61.696290][ T5479] __dump_stack+0x30/0x40 [ 61.696303][ T5479] dump_stack_lvl+0xd8/0x12c [ 61.696314][ T5479] dump_stack+0x1c/0x28 [ 61.696326][ T5479] should_fail_ex+0x418/0x58c [ 61.696339][ T5479] should_failslab+0xc4/0x120 [ 61.696352][ T5479] __kmalloc_flags_noprof+0x140/0x724 [ 61.696361][ T5479] alloc_slab_obj_exts+0x70/0x1bc [ 61.696374][ T5479] __memcg_slab_post_alloc_hook+0x408/0x824 [ 61.696387][ T5479] __kvmalloc_node_noprof+0x4f8/0x7fc [ 61.696396][ T5479] seq_read_iter+0x1d0/0xbe8 [ 61.696409][ T5479] seq_read+0x278/0x3a8 [ 61.696421][ T5479] proc_reg_read+0x1cc/0x244 [ 61.696434][ T5479] vfs_read+0x230/0x8c8 [ 61.696446][ T5479] ksys_read+0x12c/0x228 [ 61.696458][ T5479] __arm64_sys_read+0x84/0x98 [ 61.696470][ T5479] invoke_syscall+0x98/0x244 [ 61.696482][ T5479] el0_svc_common+0xec/0x23c [ 61.696494][ T5479] do_el0_svc+0x4c/0x5c [ 61.696505][ T5479] el0_svc+0x60/0x1d8 [ 61.696516][ T5479] el0t_64_sync_handler+0x44/0x104 [ 61.696527][ T5479] el0t_64_sync+0x198/0x19c [ 61.793378][ C0] net_ratelimit: 134 callbacks suppressed [ 62.540487][ T5487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.133'. [ 62.540980][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 65.223738][ T1591] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.223773][ T1591] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.317647][ T866] cfg80211: failed to load regulatory.db [ 65.875295][ T5488] loop1: detected capacity change from 0 to 256 [ 65.875631][ T5488] vfat: Unknown parameter 'uni_xle' [ 65.878662][ T5488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.878933][ T5488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.998177][ T5492] loop2: detected capacity change from 0 to 8192 [ 65.999660][ T5492] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.402198][ T5503] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.983454][ C1] net_ratelimit: 152 callbacks suppressed [ 67.102347][ T5503] nvme nvme1: failed to connect socket: -512 [ 67.361816][ T5510] loop1: detected capacity change from 0 to 512 [ 67.385543][ T5510] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.417512][ T5510] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.138: Allocating blocks 41-42 which overlap fs metadata [ 67.417529][ T5510] loop1: lost filesystem error report for type 5 error -117 [ 67.417677][ T5510] EXT4-fs (loop1): Remounting filesystem read-only [ 67.417711][ T5510] __quota_error: 10 callbacks suppressed [ 67.417717][ T5510] Quota error (device loop1): write_blk: dquota write failed [ 67.417725][ T5510] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 67.417765][ T5510] Quota error (device loop1): write_blk: dquota write failed [ 67.417794][ T5510] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 67.417864][ T5510] EXT4-fs (loop1): 1 truncate cleaned up [ 67.418326][ T5510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.348078][ T5528] loop3: detected capacity change from 0 to 8 [ 68.886781][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.214922][ T5555] FAULT_INJECTION: forcing a failure. [ 70.214922][ T5555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.214943][ T5555] CPU: 0 UID: 0 PID: 5555 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT [ 70.214954][ T5555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.214967][ T5555] Call trace: [ 70.214970][ T5555] show_stack+0x2c/0x3c (C) [ 70.214989][ T5555] __dump_stack+0x30/0x40 [ 70.215002][ T5555] dump_stack_lvl+0xd8/0x12c [ 70.215013][ T5555] dump_stack+0x1c/0x28 [ 70.215024][ T5555] should_fail_ex+0x418/0x58c [ 70.215037][ T5555] should_fail_alloc_page+0xec/0x10c [ 70.215051][ T5555] prepare_alloc_pages+0x194/0x484 [ 70.215060][ T5555] alloc_pages_bulk_noprof+0x10c/0x7d8 [ 70.215068][ T5555] __kasan_populate_vmalloc+0xc0/0x1d0 [ 70.215079][ T5555] alloc_vmap_area+0xcd8/0x12ec [ 70.215089][ T5555] __get_vm_area_node+0x210/0x32c [ 70.215098][ T5555] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 70.215114][ T5555] __vmalloc_node_noprof+0xec/0x14c [ 70.215123][ T5555] dup_task_struct+0x2b0/0x76c [ 70.215133][ T5555] copy_process+0x610/0x34c4 [ 70.215141][ T5555] kernel_clone+0x234/0x8e8 [ 70.215150][ T5555] __arm64_sys_clone3+0x35c/0x390 [ 70.215159][ T5555] invoke_syscall+0x98/0x244 [ 70.215172][ T5555] el0_svc_common+0xec/0x23c [ 70.215183][ T5555] do_el0_svc+0x4c/0x5c [ 70.215194][ T5555] el0_svc+0x60/0x1d8 [ 70.215206][ T5555] el0t_64_sync_handler+0x44/0x104 [ 70.215217][ T5555] el0t_64_sync+0x198/0x19c [ 70.215305][ T5555] syz.1.148: vmalloc error: size 32768, align 0x10000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 70.215360][ T5555] CPU: 0 UID: 0 PID: 5555 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT [ 70.215368][ T5555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.215379][ T5555] Call trace: [ 70.215381][ T5555] show_stack+0x2c/0x3c (C) [ 70.215394][ T5555] __dump_stack+0x30/0x40 [ 70.215406][ T5555] dump_stack_lvl+0xd8/0x12c [ 70.215417][ T5555] dump_stack+0x1c/0x28 [ 70.215428][ T5555] warn_alloc+0x1c4/0x1d8 [ 70.215436][ T5555] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 70.215446][ T5555] __vmalloc_node_noprof+0xec/0x14c [ 70.215456][ T5555] dup_task_struct+0x2b0/0x76c [ 70.215465][ T5555] copy_process+0x610/0x34c4 [ 70.215473][ T5555] kernel_clone+0x234/0x8e8 [ 70.215482][ T5555] __arm64_sys_clone3+0x35c/0x390 [ 70.215491][ T5555] invoke_syscall+0x98/0x244 [ 70.215503][ T5555] el0_svc_common+0xec/0x23c [ 70.215514][ T5555] do_el0_svc+0x4c/0x5c [ 70.215525][ T5555] el0_svc+0x60/0x1d8 [ 70.215536][ T5555] el0t_64_sync_handler+0x44/0x104 [ 70.215547][ T5555] el0t_64_sync+0x198/0x19c [ 70.215556][ T5555] Mem-Info: [ 70.215561][ T5555] active_anon:32 inactive_anon:14627 isolated_anon:0 [ 70.215561][ T5555] active_file:2496 inactive_file:4419 isolated_file:0 [ 70.215561][ T5555] unevictable:768 dirty:283 writeback:0 [ 70.215561][ T5555] slab_reclaimable:8978 slab_unreclaimable:86718 [ 70.215561][ T5555] mapped:39819 shmem:9544 pagetables:1074 [ 70.215561][ T5555] sec_pagetables:0 bounce:0 [ 70.215561][ T5555] kernel_misc_reclaimable:0 [ 70.215561][ T5555] free:1477586 free_pcp:9241 free_cma:7616 [ 70.215583][ T5555] Node 0 active_anon:128kB inactive_anon:58508kB active_file:9984kB inactive_file:17676kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:159276kB dirty:1132kB writeback:0kB shmem:38176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8868kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 70.215606][ T5555] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 70.215630][ T5555] lowmem_reserve[]: 0 0 3652 3652 3652 [ 70.215650][ T5555] Node 0 Normal free:2832456kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:128kB inactive_anon:58508kB active_file:9984kB inactive_file:17676kB unevictable:3072kB writepending:1132kB zspages:0kB present:5242880kB managed:3739872kB mlocked:0kB bounce:0kB free_pcp:36960kB local_pcp:10492kB free_cma:0kB [ 70.215674][ T5555] lowmem_reserve[]: 0 0 0 0 0 [ 70.215693][ T5555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 70.215754][ T5555] Node 0 Normal: 1760*4kB (U) 585*8kB (U) 417*16kB (UM) 37*32kB (UME) 21*64kB (UME) 29*128kB (UME) 12*256kB (UME) 12*512kB (UM) 11*1024kB (UME) 5*2048kB (UME) 678*4096kB (M) = 2832440kB [ 70.215845][ T5555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 70.215852][ T5555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 70.215859][ T5555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 70.215866][ T5555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 70.215873][ T5555] 16454 total pagecache pages [ 70.215877][ T5555] 0 pages in swap cache [ 70.215880][ T5555] Free swap = 124996kB [ 70.215884][ T5555] Total swap = 124996kB [ 70.215887][ T5555] 2097152 pages RAM [ 70.215891][ T5555] 0 pages HighMem/MovableOnly [ 70.215894][ T5555] 392136 pages reserved [ 70.215897][ T5555] 8192 pages cma reserved [ 70.215901][ T5555] 0 pages hwpoisoned [ 70.721727][ T5569] loop2: detected capacity change from 0 to 128 [ 71.033111][ T5569] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.023379][ C0] net_ratelimit: 69 callbacks suppressed [ 72.564512][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.415479][ T5604] loop3: detected capacity change from 0 to 512 [ 73.415937][ T5604] EXT4-fs: Ignoring removed oldalloc option [ 73.415953][ T5604] EXT4-fs: Ignoring removed oldalloc option [ 73.415960][ T5604] ext3: Unknown parameter 'no' [ 74.356023][ T5601] loop4: detected capacity change from 0 to 8 [ 74.452356][ T5612] loop2: detected capacity change from 0 to 8 [ 74.694135][ T5614] loop3: detected capacity change from 0 to 128 [ 74.702678][ T5616] loop1: detected capacity change from 0 to 512 [ 74.711155][ T5614] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.723008][ T5616] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.162: corrupted in-inode xattr: invalid ea_ino [ 74.723027][ T5616] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.723114][ T5616] EXT4-fs (loop1): Remounting filesystem read-only [ 74.730551][ T5616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.954526][ T5623] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 74.972299][ T5623] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 75.174641][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 75.178425][ T5625] hsr_slave_0: left promiscuous mode [ 75.180911][ T5625] hsr_slave_1: left promiscuous mode [ 75.609646][ T4722] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.617568][ T5625] loop4: detected capacity change from 0 to 1024 [ 75.648186][ T5625] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 75.664142][ T5625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.699203][ T5625] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.175556][ T5648] loop2: detected capacity change from 0 to 512 [ 76.182149][ T5648] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.188546][ T5648] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.167: Allocating blocks 41-42 which overlap fs metadata [ 76.188564][ T5648] loop2: lost filesystem error report for type 5 error -117 [ 76.188809][ T5648] EXT4-fs (loop2): Remounting filesystem read-only [ 76.188861][ T5648] Quota error (device loop2): write_blk: dquota write failed [ 76.188870][ T5648] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 76.188914][ T5648] Quota error (device loop2): write_blk: dquota write failed [ 76.188945][ T5648] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.189059][ T5648] EXT4-fs (loop2): 1 truncate cleaned up [ 76.189580][ T5648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.467255][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.631147][ T5656] loop3: detected capacity change from 0 to 4096 [ 76.651595][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.779931][ T5656] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.783718][ T5656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.033214][ T5664] loop4: detected capacity change from 0 to 8 [ 77.223399][ C0] net_ratelimit: 64 callbacks suppressed [ 77.417091][ T5667] netdevsim netdevsim0: Direct firmware load for T)`)YFnA@T<3ڂ$rcnHwC" -8/ failed with error -2 [ 77.417101][ T5667] netdevsim netdevsim0: Falling back to sysfs fallback for: T)`)YFnA@T<3ڂ$rcnHwC" -8/ [ 77.435125][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.487604][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.571869][ T5675] binder: 5673:5675 tried to acquire reference to desc 0, got 1 instead [ 77.572343][ T5675] binder: 5673:5675 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.572356][ T5675] binder: 5675 RLIMIT_NICE not set [ 77.572439][ T5675] binder: 5675 RLIMIT_NICE not set [ 77.572830][ T5675] binder: release 5673:5675 transaction 10 in, still active [ 77.572843][ T5675] binder: send failed reply for transaction 10 to 5673:5675 [ 77.573066][ T5675] binder_alloc: 5673: binder_alloc_buf, no vma [ 77.573073][ T5675] binder: cannot allocate buffer: vma cleared, target dead or dying [ 77.573094][ T5675] binder: 5673:5675 transaction call to 5673:0 failed 17/29189/-3, code 0 size 0-0 line 3408 [ 77.582956][ T4794] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.669936][ T5677] loop1: detected capacity change from 0 to 512 [ 77.678220][ T5677] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.678230][ T5677] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.679679][ T5677] EXT4-fs error (device loop1): __ext4_iget:5592: inode #11: block 2: comm syz.1.174: invalid block [ 77.679696][ T5677] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.679907][ T5677] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.174: couldn't read orphan inode 11 (err -117) [ 77.679934][ T5677] loop1: lost filesystem error report for type 5 error -117 [ 77.680586][ T5677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.670994][ T5691] ftl_cs: FTL header not found. [ 78.711271][ T5691] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 78.779857][ T5691] macvlan0: entered promiscuous mode [ 78.780036][ T5691] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 78.780046][ T5691] netlink: 'syz.2.176': attribute type 2 has an invalid length. [ 79.076460][ T5701] capability: warning: `syz.4.178' uses 32-bit capabilities (legacy support in use) [ 79.288240][ T5703] WARNING! power/level is deprecated; use power/control instead [ 79.950411][ T5711] can0: slcan on ttyS3. [ 79.994823][ T5711] can0 (unregistered): slcan off ttyS3. [ 80.004371][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.044678][ T5714] nvme_fcloop: unknown parameter or missing value 'l' [ 80.075158][ T5714] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 80.118921][ T5721] set_capacity_and_notify: 1 callbacks suppressed [ 80.118928][ T5721] loop1: detected capacity change from 0 to 512 [ 80.122640][ T5721] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.136151][ T5721] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.183: Allocating blocks 41-42 which overlap fs metadata [ 80.136168][ T5721] loop1: lost filesystem error report for type 5 error -117 [ 80.136958][ T5721] EXT4-fs (loop1): Remounting filesystem read-only [ 80.137012][ T5721] Quota error (device loop1): write_blk: dquota write failed [ 80.137021][ T5721] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 80.137065][ T5721] Quota error (device loop1): write_blk: dquota write failed [ 80.137095][ T5721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 80.137152][ T5721] EXT4-fs (loop1): 1 truncate cleaned up [ 80.137595][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.331860][ T5727] loop4: detected capacity change from 0 to 512 [ 80.377312][ T5727] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.184: corrupted in-inode xattr: invalid ea_ino [ 80.377336][ T5727] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.377506][ T5727] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.184: couldn't read orphan inode 15 (err -117) [ 80.377521][ T5727] loop4: lost filesystem error report for type 5 error -117 [ 80.378372][ T5727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.171517][ T5734] infiniband syz2: set down [ 81.171705][ T5734] infiniband syz2: added ipvlan0 [ 81.509906][ T5734] RDS/IB: syz2: added [ 81.509989][ T5734] smc: adding ib device syz2 with port count 1 [ 81.510018][ T5734] smc: ib device syz2 port 1 has no pnetid [ 82.146747][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.165756][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.229072][ T5752] tipc: Started in network mode [ 82.229097][ T5752] tipc: Node identity 869363fa355c, cluster identity 4711 [ 82.229198][ T5752] tipc: Enabled bearer , priority 0 [ 82.229500][ T5752] syzkaller0: entered promiscuous mode [ 82.229508][ T5752] syzkaller0: entered allmulticast mode [ 82.231616][ T5752] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 82.247736][ T5752] tipc: Resetting bearer [ 82.263424][ C1] net_ratelimit: 117 callbacks suppressed [ 83.203175][ T5751] tipc: Resetting bearer [ 83.248014][ T5751] tipc: Disabling bearer [ 83.265031][ T5760] fuse: Bad value for 'fd' [ 83.269480][ T5760] FAULT_INJECTION: forcing a failure. [ 83.269480][ T5760] name failslab, interval 1, probability 0, space 0, times 0 [ 83.269492][ T5760] CPU: 0 UID: 0 PID: 5760 Comm: syz.3.191 Not tainted syzkaller #0 PREEMPT [ 83.269502][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 83.269515][ T5760] Call trace: [ 83.269518][ T5760] show_stack+0x2c/0x3c (C) [ 83.269538][ T5760] __dump_stack+0x30/0x40 [ 83.269550][ T5760] dump_stack_lvl+0xd8/0x12c [ 83.269562][ T5760] dump_stack+0x1c/0x28 [ 83.269573][ T5760] should_fail_ex+0x418/0x58c [ 83.269586][ T5760] should_failslab+0xc4/0x120 [ 83.269599][ T5760] __kvmalloc_node_noprof+0x160/0x7fc [ 83.269608][ T5760] allocate_hook_entries_size+0x50/0xb8 [ 83.269622][ T5760] nf_hook_entries_grow+0x1b0/0x560 [ 83.269634][ T5760] __nf_register_net_hook+0x22c/0x624 [ 83.269646][ T5760] nf_register_net_hook+0xc0/0x19c [ 83.269657][ T5760] nf_register_net_hooks+0x54/0xf0 [ 83.269669][ T5760] xt_register_table+0x2e0/0x710 [ 83.269679][ T5760] ipt_register_table+0x140/0x2b0 [ 83.269691][ T5760] iptable_raw_table_init+0x68/0x98 [ 83.269703][ T5760] xt_find_table_lock+0x228/0x3c0 [ 83.269713][ T5760] xt_request_find_table_lock+0x38/0x118 [ 83.269723][ T5760] do_ipt_get_ctl+0x5e4/0x1110 [ 83.269735][ T5760] nf_getsockopt+0x94/0xd4 [ 83.269747][ T5760] ip_getsockopt+0x1c4/0x334 [ 83.269758][ T5760] sctp_getsockopt+0x134/0x888 [ 83.269768][ T5760] sock_common_getsockopt+0xa8/0xc4 [ 83.269778][ T5760] do_sock_getsockopt+0x338/0x720 [ 83.269789][ T5760] __sys_getsockopt+0xfc/0x168 [ 83.269799][ T5760] __arm64_sys_getsockopt+0xc8/0xe4 [ 83.269810][ T5760] invoke_syscall+0x98/0x244 [ 83.269822][ T5760] el0_svc_common+0xec/0x23c [ 83.269833][ T5760] do_el0_svc+0x4c/0x5c [ 83.269845][ T5760] el0_svc+0x60/0x1d8 [ 83.269855][ T5760] el0t_64_sync_handler+0x44/0x104 [ 83.269866][ T5760] el0t_64_sync+0x198/0x19c [ 83.573113][ T5768] loop2: detected capacity change from 0 to 512 [ 83.641637][ T5774] loop4: detected capacity change from 0 to 4096 [ 83.650274][ T5768] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.656278][ T5774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.674746][ T5768] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.193: Allocating blocks 41-42 which overlap fs metadata [ 83.674767][ T5768] loop2: lost filesystem error report for type 5 error -117 [ 83.675016][ T5768] EXT4-fs (loop2): Remounting filesystem read-only [ 83.675086][ T5768] Quota error (device loop2): write_blk: dquota write failed [ 83.675095][ T5768] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 83.675145][ T5768] Quota error (device loop2): write_blk: dquota write failed [ 83.675176][ T5768] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 83.675230][ T5768] EXT4-fs (loop2): 1 truncate cleaned up [ 83.675680][ T5768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.688897][ T5775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.192'. [ 84.629509][ T5787] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 84.640574][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.771638][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.164459][ T5802] FAULT_INJECTION: forcing a failure. [ 85.164459][ T5802] name failslab, interval 1, probability 0, space 0, times 0 [ 85.164480][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT [ 85.164491][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 85.164505][ T5802] Call trace: [ 85.164509][ T5802] show_stack+0x2c/0x3c (C) [ 85.164530][ T5802] __dump_stack+0x30/0x40 [ 85.164542][ T5802] dump_stack_lvl+0xd8/0x12c [ 85.164554][ T5802] dump_stack+0x1c/0x28 [ 85.164565][ T5802] should_fail_ex+0x418/0x58c [ 85.164578][ T5802] should_failslab+0xc4/0x120 [ 85.164591][ T5802] __kmalloc_cache_noprof+0x94/0x5fc [ 85.164601][ T5802] netstat_seq_show+0x108/0x724 [ 85.164611][ T5802] seq_read_iter+0x39c/0xbe8 [ 85.164624][ T5802] seq_read+0x278/0x3a8 [ 85.164636][ T5802] proc_reg_read+0x1cc/0x244 [ 85.164649][ T5802] vfs_read+0x230/0x8c8 [ 85.164661][ T5802] ksys_read+0x12c/0x228 [ 85.164673][ T5802] __arm64_sys_read+0x84/0x98 [ 85.164685][ T5802] invoke_syscall+0x98/0x244 [ 85.164698][ T5802] el0_svc_common+0xec/0x23c [ 85.164709][ T5802] do_el0_svc+0x4c/0x5c [ 85.164721][ T5802] el0_svc+0x60/0x1d8 [ 85.164732][ T5802] el0t_64_sync_handler+0x44/0x104 [ 85.164744][ T5802] el0t_64_sync+0x198/0x19c [ 85.269525][ T4723] Bluetooth: hci4: hcon 000000000c70fbeb sent 1 < count 698 [ 85.296891][ T5810] tipc: Enabled bearer , priority 0 [ 85.297712][ T5810] syzkaller0: entered promiscuous mode [ 85.297724][ T5810] syzkaller0: entered allmulticast mode [ 85.298917][ T5810] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 85.303111][ T5810] tipc: Resetting bearer [ 85.308541][ T5809] tipc: Resetting bearer [ 85.315207][ T5809] tipc: Disabling bearer ** 3635 printk messages dropped ** [ 85.758455][ T5822] loop2: detected capacity change from 0 to 512 [ 85.765540][ T5822] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.777310][ T5822] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.210: Allocating blocks 41-42 which overlap fs metadata [ 85.777327][ T5822] loop2: lost filesystem error report for type 5 error -117 [ 85.778067][ T5822] EXT4-fs (loop2): Remounting filesystem read-only [ 85.778132][ T5822] Quota error (device loop2): write_blk: dquota write failed [ 85.778146][ T5822] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 85.778195][ T5822] Quota error (device loop2): write_blk: dquota write failed [ 85.778226][ T5822] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 85.778280][ T5822] EXT4-fs (loop2): 1 truncate cleaned up [ 85.779922][ T5822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.206041][ T5837] loop3: detected capacity change from 0 to 2048 [ 86.285164][ T5841] tipc: Enabled bearer , priority 0 [ 86.285432][ T5841] syzkaller0: entered promiscuous mode [ 86.285441][ T5841] syzkaller0: entered allmulticast mode [ 86.286676][ T5841] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 86.298847][ T5841] tipc: Resetting bearer [ 86.302069][ T5840] tipc: Resetting bearer [ 86.305887][ T5840] tipc: Disabling bearer [ 86.798311][ T5852] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 86.802950][ T5852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.094784][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.204523][ T5866] loop2: detected capacity change from 0 to 128 [ 87.205271][ T5866] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.383369][ C1] net_ratelimit: 93 callbacks suppressed [ 87.463130][ T5869] binder: 5868:5869 tried to acquire reference to desc 0, got 1 instead [ 87.464400][ T5869] binder: release 5868:5869 transaction 29 out, still active [ 87.464413][ T5869] binder: undelivered TRANSACTION_COMPLETE [ 87.517589][ T5875] binder_alloc: 5868: binder_alloc_buf, no vma [ 87.517597][ T5875] binder: cannot allocate buffer: vma cleared, target dead or dying [ 87.517615][ T5875] binder: 5868:5875 transaction call to 5868:0 failed 30/29189/-3, code 0 size 0-0 line 3408 [ 87.551980][ T5877] loop4: detected capacity change from 0 to 8192 [ 88.277878][ T5905] loop4: detected capacity change from 0 to 2048 [ 88.286321][ T5902] tipc: Enabled bearer , priority 0 [ 88.288577][ T5902] syzkaller0: entered promiscuous mode [ 88.288592][ T5902] syzkaller0: entered allmulticast mode [ 88.291225][ T5902] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.299574][ T4470] binder: release 5868:5869 transaction 22 out, still active [ 88.299591][ T4470] binder: undelivered TRANSACTION_COMPLETE [ 88.299608][ T4470] binder: undelivered TRANSACTION_ERROR: 29189 [ 88.299644][ T4470] binder: send failed reply for transaction 29, target dead [ 88.299754][ T4470] binder: send failed reply for transaction 22, target dead [ 88.306420][ T5902] tipc: Resetting bearer [ 88.309263][ T5901] tipc: Resetting bearer [ 88.324532][ T5905] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.243: inode #0: comm syz.4.243: iget: illegal inode # [ 88.324554][ T5905] loop4: lost filesystem error report for type 5 error -117 [ 88.324727][ T5905] EXT4-fs (loop4): get orphan inode failed [ 88.324954][ T5905] EXT4-fs (loop4): mount failed [ 88.341524][ T5901] tipc: Disabling bearer [ 88.417163][ T5926] loop3: detected capacity change from 0 to 512 [ 88.429913][ T5926] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.447943][ T5926] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.251: Allocating blocks 41-42 which overlap fs metadata [ 88.447962][ T5926] loop3: lost filesystem error report for type 5 error -117 [ 88.448098][ T5926] EXT4-fs (loop3): Remounting filesystem read-only [ 88.448140][ T5926] Quota error (device loop3): write_blk: dquota write failed [ 88.448150][ T5926] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 88.448261][ T5926] EXT4-fs (loop3): 1 truncate cleaned up [ 88.448709][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.526612][ T5941] binder: 5940:5941 tried to acquire reference to desc 0, got 1 instead [ 88.527215][ T5941] binder: release 5940:5941 transaction 42 out, still active [ 88.578223][ T5955] binder_alloc: 5940: binder_alloc_buf, no vma [ 88.594477][ T5958] tipc: Enabled bearer , priority 0 [ 88.594741][ T5958] syzkaller0: entered promiscuous mode [ 88.594751][ T5958] syzkaller0: entered allmulticast mode [ 88.596197][ T5958] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.601972][ T5958] tipc: Resetting bearer [ 88.606830][ T5957] tipc: Resetting bearer [ 88.616823][ T5957] tipc: Disabling bearer [ 88.706068][ T5970] syz.1.271 uses obsolete (PF_INET,SOCK_PACKET) [ 88.934143][ T5984] netlink: 'syz.2.278': attribute type 83 has an invalid length. [ 89.328437][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.580821][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 89.732913][ T4723] Bluetooth: unknown link type 153 [ 89.732947][ T4723] Bluetooth: hci1: connection err: -111 [ 89.851738][ T4711] Bluetooth: Frame is too long (len 10, expected len 4) [ 89.892764][ T6003] loop4: detected capacity change from 0 to 8 [ 90.008943][ T6005] kcov: kcov_start: t = ffff0000f3c31d80, size = 524288, area = ffff80009cf8d000 [ 90.012217][ T6005] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 176 [ 90.032573][ T6005] [ 90.036515][ T6005] ====================================================== [ 90.037899][ T6005] WARNING: possible circular locking dependency detected [ 90.039138][ T6005] syzkaller #0 Not tainted [ 90.039915][ T6005] ------------------------------------------------------ [ 90.041195][ T6005] syz.1.283/6005 is trying to acquire lock: [ 90.042265][ T6005] ffff800089690b08 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x47c [ 90.044273][ T6005] [ 90.044273][ T6005] but task is already holding lock: [ 90.045839][ T6005] ffff0000f27a6740 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: configfs_symlink+0x400/0xfb4 [ 90.047767][ T6005] [ 90.047767][ T6005] which lock already depends on the new lock. [ 90.047767][ T6005] [ 90.049905][ T6005] [ 90.049905][ T6005] the existing dependency chain (in reverse order) is: [ 90.051755][ T6005] [ 90.051755][ T6005] -> #3 (&sb->s_type->i_mutex_key#23){++++}-{4:4}: [ 90.053495][ T6005] down_write+0xac/0x2a8 [ 90.054369][ T6005] configfs_depend_item_unlocked+0x154/0x344 [ 90.055588][ T6005] usbg_make_tpg+0x218/0x4a0 [ 90.056712][ T6005] target_fabric_make_tpg+0x98/0x518 [ 90.057885][ T6005] configfs_mkdir+0x374/0x7d4 [ 90.058947][ T6005] vfs_mkdir+0x2e4/0x46c [ 90.059932][ T6005] filename_mkdirat+0x228/0x3f4 [ 90.061046][ T6005] __arm64_sys_mkdirat+0x9c/0xc0 [ 90.062187][ T6005] invoke_syscall+0x98/0x244 [ 90.063254][ T6005] el0_svc_common+0xec/0x23c [ 90.064206][ T6005] do_el0_svc+0x4c/0x5c [ 90.064984][ T6005] el0_svc+0x60/0x1d8 [ 90.065731][ T6005] el0t_64_sync_handler+0x44/0x104 [ 90.066775][ T6005] el0t_64_sync+0x198/0x19c [ 90.067799][ T6005] [ 90.067799][ T6005] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 90.069538][ T6005] __mutex_lock+0x164/0x1078 [ 90.070634][ T6005] mutex_lock_nested+0x24/0x30 [ 90.071685][ T6005] tcm_alloc_inst+0x6c/0x190 [ 90.072786][ T6005] try_get_usb_function_instance+0xe4/0x164 [ 90.074176][ T6005] usb_get_function_instance+0x24/0xb0 [ 90.075405][ T6005] function_make+0x110/0x300 [ 90.076469][ T6005] configfs_mkdir+0x374/0x7d4 [ 90.077585][ T6005] vfs_mkdir+0x2e4/0x46c [ 90.078635][ T6005] filename_mkdirat+0x228/0x3f4 [ 90.079753][ T6005] __arm64_sys_mkdirat+0x9c/0xc0 [ 90.080718][ T6005] invoke_syscall+0x98/0x244 [ 90.081629][ T6005] el0_svc_common+0xec/0x23c [ 90.082596][ T6005] do_el0_svc+0x4c/0x5c [ 90.083508][ T6005] el0_svc+0x60/0x1d8 [ 90.084286][ T6005] el0t_64_sync_handler+0x44/0x104 [ 90.085286][ T6005] el0t_64_sync+0x198/0x19c [ 90.086239][ T6005] [ 90.086239][ T6005] -> #1 (func_lock){+.+.}-{4:4}: [ 90.087540][ T6005] __mutex_lock+0x164/0x1078 [ 90.088460][ T6005] mutex_lock_nested+0x24/0x30 [ 90.089558][ T6005] try_get_usb_function_instance+0x38/0x164 [ 90.090677][ T6005] usb_get_function_instance+0x24/0xb0 [ 90.091792][ T6005] function_make+0x110/0x300 [ 90.092825][ T6005] configfs_mkdir+0x374/0x7d4 [ 90.093815][ T6005] vfs_mkdir+0x2e4/0x46c [ 90.094740][ T6005] filename_mkdirat+0x228/0x3f4 [ 90.095774][ T6005] __arm64_sys_mkdirat+0x9c/0xc0 [ 90.096828][ T6005] invoke_syscall+0x98/0x244 [ 90.097823][ T6005] el0_svc_common+0xec/0x23c [ 90.098756][ T6005] do_el0_svc+0x4c/0x5c [ 90.099611][ T6005] el0_svc+0x60/0x1d8 [ 90.100469][ T6005] el0t_64_sync_handler+0x44/0x104 [ 90.101613][ T6005] el0t_64_sync+0x198/0x19c [ 90.102508][ T6005] [ 90.102508][ T6005] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 90.104092][ T6005] __lock_acquire+0x1660/0x2b08 [ 90.105190][ T6005] lock_acquire+0x13c/0x320 [ 90.106231][ T6005] __mutex_lock+0x164/0x1078 [ 90.107263][ T6005] mutex_lock_nested+0x24/0x30 [ 90.108225][ T6005] uvcg_streaming_header_allow_link+0x7c/0x47c [ 90.109434][ T6005] configfs_symlink+0x5ec/0xfb4 [ 90.110511][ T6005] vfs_symlink+0x16c/0x290 [ 90.111445][ T6005] filename_symlinkat+0x18c/0x328 [ 90.112549][ T6005] __arm64_sys_symlinkat+0xb0/0xdc [ 90.113726][ T6005] invoke_syscall+0x98/0x244 [ 90.114757][ T6005] el0_svc_common+0xec/0x23c [ 90.115901][ T6005] do_el0_svc+0x4c/0x5c [ 90.116924][ T6005] el0_svc+0x60/0x1d8 [ 90.117820][ T6005] el0t_64_sync_handler+0x44/0x104 [ 90.118944][ T6005] el0t_64_sync+0x198/0x19c [ 90.120015][ T6005] [ 90.120015][ T6005] other info that might help us debug this: [ 90.120015][ T6005] [ 90.122200][ T6005] Chain exists of: [ 90.122200][ T6005] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#23 [ 90.122200][ T6005] [ 90.124925][ T6005] Possible unsafe locking scenario: [ 90.124925][ T6005] [ 90.126240][ T6005] CPU0 CPU1 [ 90.127181][ T6005] ---- ---- [ 90.128105][ T6005] lock(&sb->s_type->i_mutex_key#23); [ 90.129202][ T6005] lock(tpg_instances_lock); [ 90.130466][ T6005] lock(&sb->s_type->i_mutex_key#23); [ 90.131808][ T6005] lock(gadget_subsys.su_mutex); [ 90.132645][ T6005] [ 90.132645][ T6005] *** DEADLOCK *** [ 90.132645][ T6005] [ 90.134093][ T6005] locks held by syz.1.283/6005: 2, last CPU#0: [ 90.135255][ T6005] #0: ffff0000c44ea460 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 90.136876][ T6005] #1: ffff0000f27a6740 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: configfs_symlink+0x400/0xfb4 [ 90.138924][ T6005] [ 90.138924][ T6005] stack backtrace: [ 90.140034][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT [ 90.141688][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.143607][ T6005] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 90.145355][ T6005] Call trace: [ 90.146051][ T6005] show_stack+0x2c/0x3c (C) [ 90.147073][ T6005] __dump_stack+0x30/0x40 [ 90.147992][ T6005] dump_stack_lvl+0xd8/0x12c [ 90.149046][ T6005] dump_stack+0x1c/0x28 [ 90.149848][ T6005] print_circular_bug+0x328/0x330 [ 90.150810][ T6005] check_noncircular+0x158/0x174 [ 90.151717][ T6005] __lock_acquire+0x1660/0x2b08 [ 90.152672][ T6005] lock_acquire+0x13c/0x320 [ 90.153474][ T6005] __mutex_lock+0x164/0x1078 [ 90.154323][ T6005] mutex_lock_nested+0x24/0x30 [ 90.155202][ T6005] uvcg_streaming_header_allow_link+0x7c/0x47c [ 90.156266][ T6005] configfs_symlink+0x5ec/0xfb4 [ 90.157311][ T6005] vfs_symlink+0x16c/0x290 [ 90.158301][ T6005] filename_symlinkat+0x18c/0x328 [ 90.159325][ T6005] __arm64_sys_symlinkat+0xb0/0xdc [ 90.160325][ T6005] invoke_syscall+0x98/0x244 [ 90.161270][ T6005] el0_svc_common+0xec/0x23c [ 90.162231][ T6005] do_el0_svc+0x4c/0x5c [ 90.163019][ T6005] el0_svc+0x60/0x1d8 [ 90.163791][ T6005] el0t_64_sync_handler+0x44/0x104 [ 90.164905][ T6005] el0t_64_sync+0x198/0x19c [ 90.166895][ T6005] configfs: configfs_get_target_path: depth = 7, size = 79 [ 90.166914][ T6005] configfs: configfs_get_target_path: path = '../../../../../../../usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u' [ 90.169475][ T1018] nfc: nfc_urelease_event_work: portid 176 [ 90.170830][ T6006] kcov: kcov_start: t = ffff0000f3c30000, size = 524288, area = ffff80009db90000 [ 90.195973][ T5991] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 181 [ 90.196260][ T5992] kcov: kcov_task_exit: t = ffff0000c1d80000, kcov->t = ffff0000c1d80000 [ 90.196342][ T5996] kcov: kcov_task_exit: t = ffff0000c84e0000, kcov->t = ffff0000c84e0000 [ 90.196448][ T5997] kcov: kcov_task_exit: t = ffff0000c1f90000, kcov->t = ffff0000c1f90000 [ 90.215625][ T1018] nfc: nfc_urelease_event_work: portid 181 [ 90.257756][ T6007] kcov: kcov_start: t = ffff0000c6a48000, size = 524288, area = ffff80009e392000 [ 90.310022][ T6008] kcov: kcov_start: t = ffff0000cbc21d80, size = 524288, area = ffff80009eb94000 [ 90.310771][ T6008] sctp: sctp_do_sm[pre-fn]: ep:00000000c0d9102c, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:00000000b137d0ce[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 90.310813][ T6008] sctp: sctp_do_sm[post-fn]: asoc:00000000b137d0ce, status:DISPOSITION_DELETE_TCB [ 90.310861][ T6008] sctp: sctp_cmd_new_state: asoc:00000000b137d0ce[STATE_CLOSED] [ 90.311336][ T6008] sctp: sctp_packet_free: packet:000000004c1e5b2c [ 90.311418][ T6008] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 90.312815][ T6008] dump type, flag: 1 0 index: 0 [ 90.315404][ T6008] dump type, flag: 3 0 index: 0 [ 90.414102][ T5993] sctp: sctp_close: sk:00000000683d054c, timeout:0 [ 90.414253][ T5993] sctp: sctp_destroy_sock: sk:00000000683d054c [ 90.414440][ T5993] sctp: sctp_close: sk:000000001c6f5f99, timeout:0 [ 90.414454][ T5993] sctp: sctp_destroy_sock: sk:000000001c6f5f99 [ 90.414629][ T6003] kcov: kcov_task_exit: t = ffff0000f19bbb00, kcov->t = ffff0000f19bbb00 [ 90.414786][ T5994] kcov: kcov_task_exit: t = ffff0000c785d880, kcov->t = ffff0000c785d880 [ 90.686773][ T6001] sctp: sctp_close: sk:0000000015aa0e08, timeout:0 [ 90.686800][ T6001] sctp: sctp_destroy_sock: sk:0000000015aa0e08 [ 90.687026][ T6006] kcov: kcov_task_exit: t = ffff0000f3c30000, kcov->t = ffff0000f3c30000 [ 90.687084][ T6007] kcov: kcov_task_exit: t = ffff0000c6a48000, kcov->t = ffff0000c6a48000 [ 90.687211][ T6008] kcov: kcov_task_exit: t = ffff0000cbc21d80, kcov->t = ffff0000cbc21d80 [ 90.687277][ T6002] kcov: kcov_task_exit: t = ffff0000f4338000, kcov->t = ffff0000f4338000 [ 90.727928][ T5990] kcov: kcov_task_exit: t = ffff0000c7255880, kcov->t = ffff0000c7255880 [ 90.727977][ T5995] kcov: kcov_task_exit: t = ffff0000c2f1d880, kcov->t = ffff0000c2f1d880 [ 90.822174][ T5998] kcov: kcov_task_exit: t = ffff0000c7859d80, kcov->t = ffff0000c7859d80 [ 90.845443][ T4708] kernfs backing_file: removing [ 90.845473][ T4708] kernfs offset: removing [ 90.845485][ T4708] kernfs sizelimit: removing [ 90.845497][ T4708] kernfs autoclear: removing [ 90.845508][ T4708] kernfs partscan: removing [ 90.845518][ T4708] kernfs dio: removing [ 90.845528][ T4708] kernfs loop: removing [ 90.845536][ T4708] kobject: 'loop4' (00000000bb14c23d): kobject_uevent_env [ 90.845563][ T4708] kobject: 'loop4' (00000000bb14c23d): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 90.845643][ T4708] kobject: 'loop4' (00000000bb14c23d): kobject_uevent_env [ 90.845653][ T4708] kobject: 'loop4' (00000000bb14c23d): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 90.846555][ T5621] inotify_handle_inode_event: group=0000000089c22c09 mark=0000000024dd6ca6 mask=8000 [ 90.846570][ T5621] fsnotify_insert_event: group=0000000089c22c09 event=00000000c96bcef2 [ 90.846607][ T4342] get_one_event: group=0000000089c22c09 event=00000000c96bcef2 [ 90.846620][ T4342] fsnotify_remove_first_event: group=0000000089c22c09 event=00000000c96bcef2 [ 90.846628][ T4342] inotify_read: group=0000000089c22c09 kevent=00000000c96bcef2 [ 90.846635][ T4342] copy_event_to_user: group=0000000089c22c09 event=00000000c96bcef2 [ 90.846657][ T4342] inotify_read: group=0000000089c22c09 kevent=0000000000000000 [ 90.849333][ T5621] inotify_handle_inode_event: group=0000000089c22c09 mark=000000001ea4fe52 mask=8000 [ 90.849348][ T5621] fsnotify_insert_event: group=0000000089c22c09 event=000000008a305056 [ 90.849433][ T4342] get_one_event: group=0000000089c22c09 event=000000008a305056 [ 90.849454][ T4342] fsnotify_remove_first_event: group=0000000089c22c09 event=000000008a305056 [ 90.849462][ T4342] inotify_read: group=0000000089c22c09 kevent=000000008a305056 [ 90.849468][ T4342] copy_event_to_user: group=0000000089c22c09 event=000000008a305056 [ 90.849479][ T4342] inotify_read: group=0000000089c22c09 kevent=0000000000000000 [ 91.181645][ T6000] kcov: kcov_task_exit: t = ffff0000c7858000, kcov->t = ffff0000c7858000 [ 91.182080][ T6004] kcov: kcov_task_exit: t = ffff0000dbd40000, kcov->t = ffff0000dbd40000 [ 91.182175][ T6005] kcov: kcov_task_exit: t = ffff0000f3c31d80, kcov->t = ffff0000f3c31d80 [ 91.383740][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 91.703505][ T5167] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings [ 91.703526][ T5167] cfg80211: Restoring regulatory settings [ 91.704189][ T5167] cfg80211: Kicking the queue [ 91.704207][ T1018] cfg80211: Calling CRDA to update world regulatory domain [ 91.704214][ T1018] kobject: 'regulatory' (00000000d79f591d): kobject_uevent_env [ 91.704227][ T1018] kobject: 'regulatory' (00000000d79f591d): fill_kobj_path: path = '/devices/faux/regulatory' [ 92.743363][ C1] net_ratelimit: 93 callbacks suppressed [ 92.743382][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 92.743422][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 92.743462][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 92.743488][ C1] wireguard: wg0: Sending keepalive packet to peer 14 ([::1]:20003/0%0) [ 92.743593][ T1018] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 92.743766][ T4819] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 92.823365][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 92.823415][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 92.823617][ T4798] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 92.823681][ T4805] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 94.583851][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 94.903630][ T3044] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings [ 94.903650][ T3044] cfg80211: Restoring regulatory settings [ 94.904568][ T3044] cfg80211: Kicking the queue [ 94.904592][ T866] cfg80211: Calling CRDA to update world regulatory domain [ 94.904601][ T866] kobject: 'regulatory' (00000000d79f591d): kobject_uevent_env [ 94.904617][ T866] kobject: 'regulatory' (00000000d79f591d): fill_kobj_path: path = '/devices/faux/regulatory' [ 94.904703][ T866] cfg80211: Pending regulatory request, waiting for it to be processed... [ 95.223357][ C1] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 4) [ 97.143554][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 97.783365][ C1] net_ratelimit: 132 callbacks suppressed [ 97.783383][ C1] wireguard: wg1: Sending keepalive packet to peer 15 ([::1]:20001/0%0) [ 97.943394][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 97.943435][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 97.943461][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 97.944220][ T4819] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 98.023379][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 98.023419][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 98.023718][ T4798] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 98.023791][ T4805] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 98.103482][ T3044] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings [ 98.103498][ T3044] cfg80211: Restoring regulatory settings [ 98.103515][ T3044] cfg80211: Kicking the queue [ 98.105282][ T1018] cfg80211: Calling CRDA to update world regulatory domain [ 98.105289][ T1018] kobject: 'regulatory' (00000000d79f591d): kobject_uevent_env [ 98.105305][ T1018] kobject: 'regulatory' (00000000d79f591d): fill_kobj_path: path = '/devices/faux/regulatory' [ 98.983364][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 99.703583][ T5094] Added buffer head 0 to 00000000c1542462 [ 99.703661][ C1] virtqueue callback for 00000000c1542462 (00000000bd514086)