last executing test programs: 8.479001318s ago: executing program 4 (id=806): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 8.299889835s ago: executing program 4 (id=810): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000580)=@req={0xef34, 0xb21b, 0x4d35d94c, 0x9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00'}, 0x18) syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x22}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 6.517865864s ago: executing program 4 (id=816): keyctl$join(0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioprio_set$pid(0x3, 0x0, 0x0) 6.314208833s ago: executing program 1 (id=822): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 6.200647474s ago: executing program 3 (id=824): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) 6.180171376s ago: executing program 1 (id=825): r0 = msgget$private(0x0, 0x414) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x0, 0x1}) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0xe800) 6.126951011s ago: executing program 3 (id=826): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000580)=@req={0xef34, 0xb21b, 0x4d35d94c, 0x9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00'}, 0x18) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x768], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.416809232s ago: executing program 2 (id=827): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000640)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.416598352s ago: executing program 1 (id=828): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f00000000c0)=@md5={0x1, "06bd095ee79087fef4ac806b53a4f6da"}, 0x11, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'sha384-ssse3\x00'}}) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 4.3406705s ago: executing program 3 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {0xa}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4.326429761s ago: executing program 2 (id=831): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet_group_source_req(r0, 0x2900, 0x59133a57977664f2, 0x0, 0x0) 4.23260165s ago: executing program 2 (id=833): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 4.080801934s ago: executing program 4 (id=834): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/image_size', 0x2206, 0x10c) write$cgroup_subtree(r2, 0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000280), 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffff01) 4.080642214s ago: executing program 0 (id=835): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.441329305s ago: executing program 3 (id=836): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) 3.367668441s ago: executing program 1 (id=837): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0xfffffffc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 3.328225265s ago: executing program 0 (id=838): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000380)=ANY=[], 0xc9) write$binfmt_script(r4, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 3.327309465s ago: executing program 2 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r5, r3}) userfaultfd(0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) 2.062647955s ago: executing program 4 (id=840): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000580)=@req={0xef34, 0xb21b, 0x4d35d94c, 0x9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00'}, 0x18) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x768], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.061641055s ago: executing program 3 (id=841): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500"], &(0x7f0000000640)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 416.823231ms ago: executing program 0 (id=842): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) 416.429231ms ago: executing program 2 (id=843): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0xff00) 410.343351ms ago: executing program 0 (id=844): r0 = syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0/file0/file0\x00', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8080) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x0, 0x0) 370.374095ms ago: executing program 4 (id=845): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) signalfd4(r0, &(0x7f0000000080)={[0x8000000000000001]}, 0x8, 0x80800) 333.366408ms ago: executing program 1 (id=846): syz_clone(0x10300, 0x0, 0x0, 0x0, 0x0, 0x0) 332.110769ms ago: executing program 3 (id=847): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r0, 0x3) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r1, r1}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) 276.463964ms ago: executing program 0 (id=848): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 180.847063ms ago: executing program 1 (id=849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r3, 0x2) 173.640094ms ago: executing program 2 (id=850): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000b00)=""/246, 0xf6}, {&(0x7f0000002480)=""/4061, 0xfdd}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000002140)=""/36, 0x24}, {&(0x7f0000002200)=""/96, 0x60}], 0x9}, 0x0) 0s ago: executing program 0 (id=851): r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x100b, 0x0, @stepwise}) kernel console output (not intermixed with test programs): s ready [ 39.799055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.069962][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.107152][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.649743][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.651576][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.671588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.741620][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.743994][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.751716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.753360][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.755495][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.781873][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.810244][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.812236][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.820076][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.136109][ T4301] Bluetooth: hci1: command tx timeout [ 41.139919][ T4296] Bluetooth: hci4: command tx timeout [ 41.139954][ T4310] Bluetooth: hci0: command tx timeout [ 41.141534][ T4300] Bluetooth: hci3: command tx timeout [ 41.142546][ T47] Bluetooth: hci2: command tx timeout [ 42.331306][ T4421] FAULT_INJECTION: forcing a failure. [ 42.331306][ T4421] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.334315][ T4421] CPU: 0 PID: 4421 Comm: syz.0.10 Not tainted 6.1.115-syzkaller #0 [ 42.336012][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.338162][ T4421] Call trace: [ 42.338808][ T4421] dump_backtrace+0x1c8/0x1f4 [ 42.339787][ T4421] show_stack+0x2c/0x3c [ 42.340624][ T4421] dump_stack_lvl+0x108/0x170 [ 42.341565][ T4421] dump_stack+0x1c/0x58 [ 42.342385][ T4421] should_fail_ex+0x3c0/0x51c [ 42.343273][ T4421] should_fail_alloc_page+0x74/0xb8 [ 42.344411][ T4421] prepare_alloc_pages+0x1c0/0x508 [ 42.345414][ T4421] __alloc_pages+0x150/0x730 [ 42.346435][ T4421] __folio_alloc+0x1c/0x48 [ 42.347347][ T4421] vma_alloc_folio+0x394/0x8d8 [ 42.348302][ T4421] shmem_alloc_and_acct_folio+0x3f4/0xa78 [ 42.349758][ T4421] shmem_get_folio_gfp+0x101c/0x21f0 [ 42.350822][ T4421] shmem_write_begin+0x13c/0x4e8 [ 42.351883][ T4421] generic_perform_write+0x278/0x55c [ 42.352984][ T4421] __generic_file_write_iter+0x168/0x388 [ 42.354079][ T4421] generic_file_write_iter+0xb8/0x2b4 [ 42.355149][ T4421] vfs_write+0x610/0x91c [ 42.356098][ T4421] ksys_write+0x15c/0x26c [ 42.356976][ T4421] __arm64_sys_write+0x7c/0x90 [ 42.357996][ T4421] invoke_syscall+0x98/0x2c0 [ 42.359000][ T4421] el0_svc_common+0x138/0x258 [ 42.359951][ T4421] do_el0_svc+0x64/0x218 [ 42.360948][ T4421] el0_svc+0x58/0x168 [ 42.361786][ T4421] el0t_64_sync_handler+0x84/0xf0 [ 42.362856][ T4421] el0t_64_sync+0x18c/0x190 [ 43.036628][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 43.142585][ T4429] loop0: detected capacity change from 0 to 64 [ 43.216719][ T4311] Bluetooth: hci3: command tx timeout [ 43.217934][ T4311] Bluetooth: hci2: command tx timeout [ 43.219001][ T4311] Bluetooth: hci4: command tx timeout [ 43.220101][ T4311] Bluetooth: hci0: command tx timeout [ 43.221243][ T4311] Bluetooth: hci1: command tx timeout [ 43.313215][ T4434] loop3: detected capacity change from 0 to 8192 [ 43.333910][ T4434] REISERFS warning (device loop3): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 43.333910][ T4434] [ 43.429228][ T4288] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.632477][ T4441] loop0: detected capacity change from 0 to 8192 [ 43.634452][ T4441] ======================================================= [ 43.634452][ T4441] WARNING: The mand mount option has been deprecated and [ 43.634452][ T4441] and is ignored by this kernel. Remove the mand [ 43.634452][ T4441] option from the mount to silence this warning. [ 43.634452][ T4441] ======================================================= [ 43.799275][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.893508][ T4441] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.897221][ T4441] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 43.900868][ T4441] REISERFS (device loop0): using ordered data mode [ 43.902969][ T4441] reiserfs: using flush barriers [ 43.927113][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.042614][ T4441] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.128637][ T4441] REISERFS (device loop0): checking transaction log (loop0) [ 44.447021][ T4441] REISERFS (device loop0): Using r5 hash to sort names [ 44.491093][ T4441] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 44.493821][ T4441] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 44.565245][ T4451] netlink: 'syz.4.19': attribute type 21 has an invalid length. [ 44.629946][ T4453] loop4: detected capacity change from 0 to 128 [ 44.661174][ T4453] ufs: You didn't specify the type of your ufs filesystem [ 44.661174][ T4453] [ 44.661174][ T4453] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 44.661174][ T4453] [ 44.661174][ T4453] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 44.692373][ T4453] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 45.165719][ T4461] loop0: detected capacity change from 0 to 8192 [ 45.169665][ T4461] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.172697][ T4461] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.175253][ T4461] REISERFS (device loop0): using ordered data mode [ 45.176963][ T4461] reiserfs: using flush barriers [ 45.184542][ T4461] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.188584][ T4461] REISERFS (device loop0): checking transaction log (loop0) [ 45.201509][ T4461] REISERFS (device loop0): Using r5 hash to sort names [ 45.203308][ T4461] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 45.208059][ T4461] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.070323][ T4471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'. [ 46.286212][ T4477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.976710][ T4477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.171989][ T4487] loop1: detected capacity change from 0 to 8192 [ 48.260353][ T4499] loop0: detected capacity change from 0 to 256 [ 48.281014][ T4487] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 48.281014][ T4487] [ 48.606468][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 48.611215][ T4286] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.639412][ T4492] loop2: detected capacity change from 0 to 32768 [ 48.652286][ T4492] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 48.654134][ T4492] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 48.694030][ T4492] gfs2: fsid=syz:syz.s: journal 0 mapped with 3 extents in 0ms [ 48.742395][ T4492] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 49.351058][ T4512] netlink: 'syz.0.35': attribute type 21 has an invalid length. [ 49.404979][ T4514] loop0: detected capacity change from 0 to 128 [ 49.420669][ T4514] ufs: You didn't specify the type of your ufs filesystem [ 49.420669][ T4514] [ 49.420669][ T4514] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 49.420669][ T4514] [ 49.420669][ T4514] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 49.435415][ T4514] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 49.586295][ T4516] loop2: detected capacity change from 0 to 8192 [ 49.712421][ T4516] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.716539][ T4516] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 49.720117][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.731923][ T4516] REISERFS (device loop2): using ordered data mode [ 49.734552][ T4516] reiserfs: using flush barriers [ 49.766449][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.870322][ T4516] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.899466][ T4516] REISERFS (device loop2): checking transaction log (loop2) [ 49.954289][ T4516] REISERFS (device loop2): Using r5 hash to sort names [ 50.018196][ T4516] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 50.023303][ T4516] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 51.910842][ T4547] loop1: detected capacity change from 0 to 8192 [ 51.982527][ T4560] loop3: detected capacity change from 0 to 512 [ 52.010804][ T4547] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 52.010804][ T4547] [ 52.049513][ T4560] EXT2-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 52.051629][ T4560] EXT2-fs (loop3): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 52.061964][ T4563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.157052][ T4563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.098206][ T4570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.133077][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 53.383986][ T4577] loop1: detected capacity change from 0 to 8192 [ 53.405357][ T4577] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.412790][ T4577] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 53.419594][ T4577] REISERFS (device loop1): using ordered data mode [ 53.421111][ T4577] reiserfs: using flush barriers [ 53.431668][ T4577] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.440463][ T4577] REISERFS (device loop1): checking transaction log (loop1) [ 53.454589][ T4577] REISERFS (device loop1): Using r5 hash to sort names [ 53.459693][ T4577] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 53.465643][ T4577] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 54.414824][ T4596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.617018][ T4596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.319254][ T4603] capability: warning: `syz.0.61' uses 32-bit capabilities (legacy support in use) [ 55.714679][ T4601] loop2: detected capacity change from 0 to 8192 [ 55.886409][ T4601] REISERFS warning (device loop2): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 55.886409][ T4601] [ 56.136508][ T4609] loop0: detected capacity change from 0 to 128 [ 56.204140][ T4609] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 56.211762][ T4609] FAT-fs (loop0): Filesystem has been set read-only [ 56.384982][ T4619] Zero length message leads to an empty skb [ 56.403828][ T4615] loop1: detected capacity change from 0 to 8192 [ 56.407303][ T4615] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.409870][ T4615] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 56.411610][ T4615] REISERFS (device loop1): using ordered data mode [ 56.413006][ T4615] reiserfs: using flush barriers [ 56.414625][ T4615] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.423997][ T4615] REISERFS (device loop1): checking transaction log (loop1) [ 56.543738][ T4615] REISERFS (device loop1): Using tea hash to sort names [ 56.545535][ T4615] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 56.607608][ T4615] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 1) [ 56.749285][ T4624] loop3: detected capacity change from 0 to 32768 [ 56.826934][ T4624] XFS (loop3): Mounting V5 Filesystem [ 56.869956][ T4617] loop2: detected capacity change from 0 to 32768 [ 56.872880][ T4617] XFS (loop2): no-recovery mounts must be read-only. [ 56.915562][ T4624] XFS (loop3): Ending clean mount [ 56.917994][ T4286] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.931402][ T4624] XFS (loop3): Quotacheck needed: Please wait. [ 56.932757][ T4634] loop1: detected capacity change from 0 to 8192 [ 56.962802][ T4634] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.965566][ T4634] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 56.968471][ T4634] REISERFS (device loop1): using ordered data mode [ 56.969915][ T4634] reiserfs: using flush barriers [ 56.976304][ T4634] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.980536][ T4634] REISERFS (device loop1): checking transaction log (loop1) [ 56.992158][ T4634] REISERFS (device loop1): Using r5 hash to sort names [ 56.993969][ T4634] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 56.997000][ T4634] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 56.998120][ T4304] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 57.024183][ T4624] XFS (loop3): Quotacheck: Done. [ 57.065174][ T4617] input: syz0 as /devices/virtual/input/input2 [ 57.212480][ T4307] XFS (loop3): Unmounting Filesystem [ 57.324135][ T4642] loop4: detected capacity change from 0 to 2048 [ 57.328163][ T4642] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.354229][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.411469][ T4642] FAULT_INJECTION: forcing a failure. [ 57.411469][ T4642] name failslab, interval 1, probability 0, space 0, times 1 [ 57.414219][ T4642] CPU: 1 PID: 4642 Comm: syz.4.73 Not tainted 6.1.115-syzkaller #0 [ 57.415726][ T4642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.417785][ T4642] Call trace: [ 57.418467][ T4642] dump_backtrace+0x1c8/0x1f4 [ 57.419361][ T4642] show_stack+0x2c/0x3c [ 57.420292][ T4642] dump_stack_lvl+0x108/0x170 [ 57.421262][ T4642] dump_stack+0x1c/0x58 [ 57.422088][ T4642] should_fail_ex+0x3c0/0x51c [ 57.423104][ T4642] __should_failslab+0xc8/0x128 [ 57.424049][ T4642] should_failslab+0x10/0x28 [ 57.425070][ T4642] __kmem_cache_alloc_node+0x80/0x388 [ 57.426039][ T4642] __kmalloc+0xc4/0x1c4 [ 57.426872][ T4642] tomoyo_realpath_from_path+0xc8/0x4cc [ 57.428107][ T4642] tomoyo_path_perm+0x208/0x568 [ 57.429117][ T4642] tomoyo_inode_getattr+0x28/0x38 [ 57.430089][ T4642] security_inode_getattr+0xd8/0x124 [ 57.431238][ T4642] vfs_getattr+0x34/0x88 [ 57.432163][ T4642] ovl_copy_up_flags+0x610/0x2c08 [ 57.433233][ T4642] ovl_maybe_copy_up+0x160/0x17c [ 57.434193][ T4642] ovl_open+0xe8/0x274 [ 57.435027][ T4642] do_dentry_open+0x734/0xfa0 [ 57.435975][ T4642] vfs_open+0x7c/0x90 [ 57.436894][ T4642] path_openat+0x1e14/0x2548 [ 57.437859][ T4642] do_filp_open+0x1bc/0x3cc [ 57.438873][ T4642] do_sys_openat2+0x128/0x3e0 [ 57.439842][ T4642] __arm64_sys_openat+0x1f0/0x240 [ 57.440734][ T4642] invoke_syscall+0x98/0x2c0 [ 57.441707][ T4642] el0_svc_common+0x138/0x258 [ 57.442838][ T4642] do_el0_svc+0x64/0x218 [ 57.443654][ T4642] el0_svc+0x58/0x168 [ 57.444369][ T4642] el0t_64_sync_handler+0x84/0xf0 [ 57.445501][ T4642] el0t_64_sync+0x18c/0x190 [ 57.454985][ T4642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.482981][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 57.657391][ T4649] loop4: detected capacity change from 0 to 256 [ 58.097008][ T4617] loop2: detected capacity change from 0 to 65536 [ 58.204094][ T4617] XFS (loop2): Mounting V5 Filesystem [ 58.274220][ T4617] XFS (loop2): Ending clean mount [ 58.389877][ T4667] loop1: detected capacity change from 0 to 8192 [ 58.392412][ T4667] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 58.392412][ T4667] [ 58.686256][ T4682] loop3: detected capacity change from 0 to 128 [ 58.731160][ T4682] process 'syz.3.80' launched './file1' with NULL argv: empty string added [ 58.917203][ T4682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 59.160686][ T4687] FAULT_INJECTION: forcing a failure. [ 59.160686][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 59.163732][ T4687] CPU: 0 PID: 4687 Comm: syz.1.81 Not tainted 6.1.115-syzkaller #0 [ 59.165341][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.167389][ T4687] Call trace: [ 59.168080][ T4687] dump_backtrace+0x1c8/0x1f4 [ 59.169144][ T4687] show_stack+0x2c/0x3c [ 59.170002][ T4687] dump_stack_lvl+0x108/0x170 [ 59.171014][ T4687] dump_stack+0x1c/0x58 [ 59.171914][ T4687] should_fail_ex+0x3c0/0x51c [ 59.172846][ T4687] __should_failslab+0xc8/0x128 [ 59.173781][ T4687] should_failslab+0x10/0x28 [ 59.174820][ T4687] __kmem_cache_alloc_node+0x80/0x388 [ 59.175937][ T4687] kmalloc_trace+0x48/0x94 [ 59.176862][ T4687] nfnetlink_rcv+0xbf8/0x1e04 [ 59.177840][ T4687] netlink_unicast+0x65c/0x898 [ 59.178807][ T4687] netlink_sendmsg+0x834/0xb18 [ 59.179773][ T4687] ____sys_sendmsg+0x55c/0x848 [ 59.180770][ T4687] __sys_sendmsg+0x26c/0x33c [ 59.181718][ T4687] __arm64_sys_sendmsg+0x80/0x94 [ 59.182719][ T4687] invoke_syscall+0x98/0x2c0 [ 59.183599][ T4687] el0_svc_common+0x138/0x258 [ 59.184665][ T4687] do_el0_svc+0x64/0x218 [ 59.185515][ T4687] el0_svc+0x58/0x168 [ 59.186316][ T4687] el0t_64_sync_handler+0x84/0xf0 [ 59.187441][ T4687] el0t_64_sync+0x18c/0x190 [ 59.557177][ T4699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.657646][ T4699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.350740][ T4302] XFS (loop2): Unmounting Filesystem [ 60.437286][ T4703] netem: incorrect gi model size [ 60.438634][ T4703] netem: change failed [ 60.494404][ T4703] loop3: detected capacity change from 0 to 64 [ 60.496702][ T4703] hfs: creator requires a 4 character value [ 60.498153][ T4703] hfs: unable to parse mount options [ 60.538967][ T4286] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.613025][ T4696] loop1: detected capacity change from 0 to 32768 [ 60.699519][ T4696] XFS (loop1): Mounting V5 Filesystem [ 60.800087][ T4696] XFS (loop1): Ending clean mount [ 60.809175][ T4696] XFS (loop1): Quotacheck needed: Please wait. [ 60.850021][ T4696] XFS (loop1): Quotacheck: Done. [ 60.974382][ T4703] loop3: detected capacity change from 0 to 32768 [ 60.987258][ T4715] loop0: detected capacity change from 0 to 8192 [ 60.998393][ T4715] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.002383][ T4715] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.004598][ T4715] REISERFS (device loop0): using ordered data mode [ 61.010363][ T4715] reiserfs: using flush barriers [ 61.016434][ T4715] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.024070][ T4715] REISERFS (device loop0): checking transaction log (loop0) [ 61.024989][ T4703] XFS (loop3): Mounting V5 Filesystem [ 61.029946][ T4715] REISERFS (device loop0): Using r5 hash to sort names [ 61.033852][ T4715] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 61.041281][ T4715] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 61.122421][ T4703] XFS (loop3): Ending clean mount [ 61.203624][ T4307] XFS (loop3): Unmounting Filesystem [ 61.459716][ T4696] sp0: Synchronizing with TNC [ 61.578876][ T4295] XFS (loop1): Unmounting Filesystem [ 61.693150][ T4730] loop3: detected capacity change from 0 to 8192 [ 61.702245][ T4730] REISERFS warning (device loop3): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 61.702245][ T4730] [ 62.395172][ T4742] x_tables: ip_tables: osf match: only valid for protocol 6 [ 62.418488][ T4738] loop0: detected capacity change from 0 to 40427 [ 62.445944][ T4738] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 62.447917][ T4738] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.452245][ T4738] F2FS-fs (loop0): invalid crc value [ 62.514601][ T4738] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.639069][ T4738] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 62.640728][ T4738] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.749893][ T4753] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.165428][ T4742] loop4: detected capacity change from 0 to 40427 [ 63.205699][ T4742] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 63.215538][ T4742] F2FS-fs (loop4): invalid crc value [ 63.243191][ T4742] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.315921][ T4742] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.854775][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.896065][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.932196][ T4741] loop3: detected capacity change from 0 to 65536 [ 64.016922][ T4769] loop0: detected capacity change from 0 to 32768 [ 64.023092][ T4769] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.99 (4769) [ 64.023846][ T4741] XFS (loop3): Mounting V5 Filesystem [ 64.046267][ T4769] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 64.048591][ T4769] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 64.050480][ T4769] BTRFS info (device loop0): using free space tree [ 64.071339][ T4741] XFS (loop3): Ending clean mount [ 64.234715][ T4767] loop1: detected capacity change from 0 to 65536 [ 64.236192][ T4769] BTRFS info (device loop0): enabling ssd optimizations [ 64.280546][ T4307] XFS (loop3): Unmounting Filesystem [ 64.291059][ T4769] overlayfs: './file1' not a directory [ 64.355556][ T4767] XFS (loop1): Mounting V5 Filesystem [ 64.377266][ T4304] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 64.472351][ T4767] XFS (loop1): Ending clean mount [ 64.500656][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.501986][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.642149][ T4814] loop4: detected capacity change from 0 to 8192 [ 64.651814][ T4814] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 64.651814][ T4814] [ 64.752087][ T4295] XFS (loop1): Unmounting Filesystem [ 66.578619][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.681825][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.605186][ T4845] loop4: detected capacity change from 0 to 40427 [ 67.619000][ T4845] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 67.622048][ T4845] F2FS-fs (loop4): invalid crc value [ 67.642462][ T4845] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.681778][ T4845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.691769][ T4845] dccp_invalid_packet: P.Data Offset(104) too large [ 67.700249][ T4856] 9pnet_fd: Insufficient options for proto=fd [ 67.900777][ T4844] loop2: detected capacity change from 0 to 65536 [ 67.938421][ T4858] loop0: detected capacity change from 0 to 512 [ 67.955410][ T4844] XFS (loop2): Mounting V5 Filesystem [ 67.976357][ T4858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.006396][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 68.036776][ T4844] XFS (loop2): Ending clean mount [ 68.043972][ T4844] FAULT_INJECTION: forcing a failure. [ 68.043972][ T4844] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.047687][ T4844] CPU: 0 PID: 4844 Comm: syz.2.109 Not tainted 6.1.115-syzkaller #0 [ 68.049338][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.051488][ T4844] Call trace: [ 68.052188][ T4844] dump_backtrace+0x1c8/0x1f4 [ 68.053068][ T4844] show_stack+0x2c/0x3c [ 68.053852][ T4844] dump_stack_lvl+0x108/0x170 [ 68.054744][ T4844] dump_stack+0x1c/0x58 [ 68.055649][ T4844] should_fail_ex+0x3c0/0x51c [ 68.056646][ T4844] should_fail+0x14/0x24 [ 68.057462][ T4844] should_fail_usercopy+0x20/0x30 [ 68.058539][ T4844] strncpy_from_user+0x48/0x54c [ 68.059690][ T4844] getname_flags+0x104/0x48c [ 68.060575][ T4844] __arm64_sys_symlinkat+0x80/0xbc [ 68.061826][ T4844] invoke_syscall+0x98/0x2c0 [ 68.062821][ T4844] el0_svc_common+0x138/0x258 [ 68.063931][ T4844] do_el0_svc+0x64/0x218 [ 68.064783][ T4844] el0_svc+0x58/0x168 [ 68.065742][ T4844] el0t_64_sync_handler+0x84/0xf0 [ 68.066859][ T4844] el0t_64_sync+0x18c/0x190 [ 68.127949][ T4876] syz.4.114 sent an empty control message without MSG_MORE. [ 68.136061][ T4873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 68.142940][ T4873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 68.144820][ T4873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.115'. [ 68.160593][ T4302] XFS (loop2): Unmounting Filesystem [ 68.264668][ T4878] loop4: detected capacity change from 0 to 8192 [ 68.269039][ T4878] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 68.269039][ T4878] [ 68.408753][ T4883] loop0: detected capacity change from 0 to 8192 [ 68.412571][ T4883] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.415260][ T4883] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 68.422047][ T4883] REISERFS (device loop0): using ordered data mode [ 68.423722][ T4883] reiserfs: using flush barriers [ 68.426879][ T4883] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.431051][ T4883] REISERFS (device loop0): checking transaction log (loop0) [ 68.433926][ T4883] REISERFS (device loop0): Using r5 hash to sort names [ 68.435757][ T4883] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 68.439075][ T4883] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 68.779853][ T4887] lo speed is unknown, defaulting to 1000 [ 68.784172][ T4887] lo speed is unknown, defaulting to 1000 [ 68.786515][ T4887] lo speed is unknown, defaulting to 1000 [ 68.829763][ T4887] infiniband syz0: set down [ 68.830976][ T4887] infiniband syz0: added lo [ 68.839388][ T4346] lo speed is unknown, defaulting to 1000 [ 68.857411][ T4887] RDS/IB: syz0: added [ 68.858845][ T4887] smc: adding ib device syz0 with port count 1 [ 68.860287][ T4887] smc: ib device syz0 port 1 has pnetid [ 68.865098][ T4887] lo speed is unknown, defaulting to 1000 [ 68.882024][ T4346] lo speed is unknown, defaulting to 1000 [ 68.924376][ T4887] lo speed is unknown, defaulting to 1000 [ 69.697671][ T4887] lo speed is unknown, defaulting to 1000 [ 69.731334][ T4887] lo speed is unknown, defaulting to 1000 [ 69.764739][ T4887] lo speed is unknown, defaulting to 1000 [ 69.850076][ T3762] cfg80211: failed to load regulatory.db [ 71.095196][ T4926] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 71.110565][ T4926] syzkaller0: owner set to 0 [ 71.253018][ T4929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.467074][ T4929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.917179][ T4931] loop1: detected capacity change from 0 to 512 [ 71.932082][ T4931] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.960448][ T4931] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.962580][ T4931] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 71.964940][ T4931] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.968469][ T4931] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 71.981567][ T4931] EXT4-fs (loop1): 1 truncate cleaned up [ 71.982693][ T4931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.199037][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 72.285696][ T4944] loop2: detected capacity change from 0 to 8192 [ 72.294417][ T4944] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.304177][ T4944] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 72.308457][ T4944] REISERFS (device loop2): using ordered data mode [ 72.309853][ T4944] reiserfs: using flush barriers [ 72.318347][ T4944] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.321827][ T4944] REISERFS (device loop2): checking transaction log (loop2) [ 72.328626][ T4944] REISERFS (device loop2): Using r5 hash to sort names [ 72.331432][ T4944] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 72.338296][ T4944] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 72.509784][ T4949] loop1: detected capacity change from 0 to 8192 [ 72.516573][ T4949] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 72.516573][ T4949] [ 74.130520][ T4971] kernel profiling enabled (shift: 63) [ 74.142089][ T4971] profiling shift: 63 too large [ 74.230053][ T4974] loop3: detected capacity change from 0 to 512 [ 74.302218][ T4974] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.3.142: corrupted xattr block 95 [ 74.305667][ T4974] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 74.314955][ T4974] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.142: bg 0: block 7: invalid block bitmap [ 74.321996][ T4974] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 74.323101][ T4974] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #11: comm syz.3.142: corrupted xattr block 95 [ 74.344900][ T4974] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 74.344981][ T4974] EXT4-fs (loop3): 1 orphan inode deleted [ 74.345016][ T4974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.580600][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 75.311157][ T4994] loop3: detected capacity change from 0 to 256 [ 77.049180][ T4997] loop4: detected capacity change from 0 to 8192 [ 77.074042][ T4997] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.091277][ T4997] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 77.096262][ T4997] REISERFS (device loop4): using ordered data mode [ 77.097608][ T4997] reiserfs: using flush barriers [ 77.125961][ T4997] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.129327][ T4997] REISERFS (device loop4): checking transaction log (loop4) [ 77.150891][ T5001] loop3: detected capacity change from 0 to 8192 [ 77.152327][ T4997] REISERFS (device loop4): Using r5 hash to sort names [ 77.164294][ T4997] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 77.174058][ T4997] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 77.183424][ T5001] REISERFS warning (device loop3): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 77.183424][ T5001] [ 77.406765][ T5013] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 77.410336][ T5013] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 77.411281][ T4995] loop2: detected capacity change from 0 to 32768 [ 77.413732][ T5013] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 77.440974][ T4286] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.473680][ T4995] JBD2: Ignoring recovery information on journal [ 77.630113][ T4995] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 77.663200][ T4346] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.802101][ T4302] ocfs2: Unmounting device (7,2) on (node local) [ 77.855958][ T4346] usb 1-1: device descriptor read/64, error -71 [ 77.990009][ T5022] loop1: detected capacity change from 0 to 32768 [ 78.013790][ T5022] XFS (loop1): Mounting V5 Filesystem [ 78.056947][ T5022] XFS (loop1): Ending clean mount [ 78.080618][ T4295] XFS (loop1): Unmounting Filesystem [ 78.125907][ T4346] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.315962][ T4346] usb 1-1: device descriptor read/64, error -71 [ 78.438108][ T4346] usb usb1-port1: attempt power cycle [ 78.465482][ T5045] loop3: detected capacity change from 0 to 512 [ 78.491563][ T5045] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.541724][ T5045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.684222][ T5052] lo speed is unknown, defaulting to 1000 [ 78.714198][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 78.932738][ T5061] loop4: detected capacity change from 0 to 8192 [ 78.970924][ T5061] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 78.970924][ T5061] [ 79.782253][ T5069] FAULT_INJECTION: forcing a failure. [ 79.782253][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 79.785051][ T5069] CPU: 1 PID: 5069 Comm: syz.1.166 Not tainted 6.1.115-syzkaller #0 [ 79.786703][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.788855][ T5069] Call trace: [ 79.789583][ T5069] dump_backtrace+0x1c8/0x1f4 [ 79.790602][ T5069] show_stack+0x2c/0x3c [ 79.791538][ T5069] dump_stack_lvl+0x108/0x170 [ 79.792535][ T5069] dump_stack+0x1c/0x58 [ 79.793365][ T5069] should_fail_ex+0x3c0/0x51c [ 79.794391][ T5069] __should_failslab+0xc8/0x128 [ 79.795490][ T5069] should_failslab+0x10/0x28 [ 79.796475][ T5069] __kmem_cache_alloc_node+0x80/0x388 [ 79.797619][ T5069] __kmalloc_node+0xcc/0x1d0 [ 79.798579][ T5069] __vmalloc_node_range+0x458/0xf40 [ 79.799614][ T5069] vzalloc+0xb4/0xf0 [ 79.800362][ T5069] bpf_check+0x1f8/0x11008 [ 79.801238][ T5069] bpf_prog_load+0xe7c/0x1600 [ 79.802096][ T5069] __sys_bpf+0x328/0x654 [ 79.802975][ T5069] __arm64_sys_bpf+0x80/0x98 [ 79.803860][ T5069] invoke_syscall+0x98/0x2c0 [ 79.804848][ T5069] el0_svc_common+0x138/0x258 [ 79.805796][ T5069] do_el0_svc+0x64/0x218 [ 79.806672][ T5069] el0_svc+0x58/0x168 [ 79.807533][ T5069] el0t_64_sync_handler+0x84/0xf0 [ 79.808558][ T5069] el0t_64_sync+0x18c/0x190 [ 79.907186][ T5071] syz.3.168 uses obsolete (PF_INET,SOCK_PACKET) [ 79.974564][ T5075] loop4: detected capacity change from 0 to 2048 [ 80.047609][ T5081] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.066534][ T5073] loop0: detected capacity change from 0 to 8192 [ 80.160804][ T5073] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.163564][ T5073] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.165564][ T5073] REISERFS (device loop0): using ordered data mode [ 80.170860][ T5073] reiserfs: using flush barriers [ 80.201369][ T5073] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.228241][ T5073] REISERFS (device loop0): checking transaction log (loop0) [ 80.232511][ T5075] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 80.241948][ T5075] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 80.251657][ T5073] REISERFS (device loop0): Using r5 hash to sort names [ 80.263261][ T5079] loop1: detected capacity change from 0 to 512 [ 80.267756][ T5075] Remounting filesystem read-only [ 80.268966][ T5075] NILFS (loop4): error -5 truncating bmap (ino=16) [ 80.281405][ T5073] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 80.294612][ T5073] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 80.300661][ T5079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.317158][ T4294] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 80.322203][ T4294] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 80.323742][ T4294] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.325532][ T4294] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.436319][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 80.437853][ T4294] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.440617][ T4294] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 80.442639][ T4294] NILFS (loop4): discard dirty page: offset=0, ino=16 [ 80.444134][ T4294] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.458088][ T4294] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.459987][ T4294] NILFS (loop4): discard dirty block: blocknr=25, size=1024 [ 80.461564][ T4294] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.510948][ T4294] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 80.512366][ T4294] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 80.513787][ T4294] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 80.515171][ T4294] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 80.516834][ T4294] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.557649][ T5089] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 80.560643][ T5089] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 80.563698][ T5089] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 80.675380][ T5094] netlink: 'syz.1.173': attribute type 29 has an invalid length. [ 80.688823][ T5094] netlink: 'syz.1.173': attribute type 29 has an invalid length. [ 80.694461][ T5094] netlink: 56 bytes leftover after parsing attributes in process `syz.1.173'. [ 80.779487][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.826114][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.958399][ T5106] FAULT_INJECTION: forcing a failure. [ 80.958399][ T5106] name failslab, interval 1, probability 0, space 0, times 0 [ 80.968340][ T5104] loop1: detected capacity change from 0 to 64 [ 80.972866][ T5106] CPU: 0 PID: 5106 Comm: syz.0.175 Not tainted 6.1.115-syzkaller #0 [ 80.974552][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.976683][ T5106] Call trace: [ 80.977383][ T5106] dump_backtrace+0x1c8/0x1f4 [ 80.978470][ T5106] show_stack+0x2c/0x3c [ 80.979372][ T5106] dump_stack_lvl+0x108/0x170 [ 80.980281][ T5106] dump_stack+0x1c/0x58 [ 80.981109][ T5106] should_fail_ex+0x3c0/0x51c [ 80.982083][ T5106] __should_failslab+0xc8/0x128 [ 80.983098][ T5106] should_failslab+0x10/0x28 [ 80.984111][ T5106] kmem_cache_alloc+0x8c/0x37c [ 80.985128][ T5106] mas_alloc_nodes+0x228/0x704 [ 80.986088][ T5106] mas_preallocate+0x124/0x2dc [ 80.986988][ T5106] mmap_region+0x10a0/0x1a98 [ 80.988007][ T5106] do_mmap+0xa00/0x1108 [ 80.988913][ T5106] vm_mmap_pgoff+0x1a4/0x2b4 [ 80.989884][ T5106] ksys_mmap_pgoff+0xd0/0x5b0 [ 80.990837][ T5106] __arm64_sys_mmap+0xf8/0x110 [ 80.991890][ T5106] invoke_syscall+0x98/0x2c0 [ 80.992889][ T5106] el0_svc_common+0x138/0x258 [ 80.993834][ T5106] do_el0_svc+0x64/0x218 [ 80.994802][ T5106] el0_svc+0x58/0x168 [ 80.995654][ T5106] el0t_64_sync_handler+0x84/0xf0 [ 80.996754][ T5106] el0t_64_sync+0x18c/0x190 [ 81.115213][ T4295] hfs: walked past end of dir [ 81.128915][ T4295] hfs: walked past end of dir [ 81.143469][ T4295] hfs: walked past end of dir [ 81.153733][ T4295] hfs: walked past end of dir [ 81.157939][ T4295] hfs: walked past end of dir [ 81.159715][ T4295] hfs: walked past end of dir [ 81.168182][ T4295] hfs: walked past end of dir [ 81.169122][ T4295] hfs: walked past end of dir [ 81.170561][ T4295] hfs: walked past end of dir [ 81.179987][ T4295] hfs: walked past end of dir [ 81.181358][ T4295] hfs: walked past end of dir [ 81.187061][ T4295] hfs: walked past end of dir [ 81.192345][ T4295] hfs: walked past end of dir [ 81.195727][ T4295] hfs: walked past end of dir [ 81.199576][ T4295] hfs: walked past end of dir [ 81.202865][ T4295] hfs: walked past end of dir [ 81.206604][ T4295] hfs: walked past end of dir [ 81.207642][ T4295] hfs: walked past end of dir [ 81.208860][ T4295] hfs: walked past end of dir [ 81.209871][ T4295] hfs: walked past end of dir [ 81.239179][ T4295] hfs: walked past end of dir [ 81.247803][ T4295] hfs: walked past end of dir [ 81.249136][ T4295] hfs: walked past end of dir [ 81.250111][ T4295] hfs: walked past end of dir [ 81.264205][ T4295] hfs: walked past end of dir [ 81.268017][ T4295] hfs: walked past end of dir [ 81.269849][ T4295] hfs: walked past end of dir [ 81.275956][ T4295] hfs: walked past end of dir [ 81.277370][ T4295] hfs: walked past end of dir [ 81.278439][ T4295] hfs: walked past end of dir [ 81.279753][ T4295] hfs: walked past end of dir [ 81.280867][ T4295] hfs: walked past end of dir [ 81.293723][ T4295] hfs: walked past end of dir [ 81.294830][ T4295] hfs: walked past end of dir [ 81.300850][ T4295] hfs: walked past end of dir [ 81.301916][ T4295] hfs: walked past end of dir [ 81.308000][ T4295] hfs: walked past end of dir [ 81.311903][ T4295] hfs: walked past end of dir [ 81.315495][ T4295] hfs: walked past end of dir [ 81.319086][ T4295] hfs: walked past end of dir [ 81.320379][ T4295] hfs: walked past end of dir [ 81.374457][ T5110] loop0: detected capacity change from 0 to 8192 [ 81.391546][ T4295] hfs: walked past end of dir [ 81.395073][ T4295] hfs: walked past end of dir [ 81.400800][ T4295] hfs: walked past end of dir [ 81.404433][ T4295] hfs: walked past end of dir [ 81.405449][ T4295] hfs: walked past end of dir [ 81.411219][ T4295] hfs: walked past end of dir [ 81.415138][ T4295] hfs: walked past end of dir [ 81.418796][ T4295] hfs: walked past end of dir [ 81.419843][ T4295] hfs: walked past end of dir [ 81.422439][ T5110] REISERFS warning (device loop0): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 81.422439][ T5110] [ 81.428311][ T4295] hfs: walked past end of dir [ 81.431809][ T4295] hfs: walked past end of dir [ 81.433049][ T4295] hfs: walked past end of dir [ 81.434042][ T4295] hfs: walked past end of dir [ 81.442416][ T4295] hfs: walked past end of dir [ 81.443444][ T4295] hfs: walked past end of dir [ 81.444745][ T4295] hfs: walked past end of dir [ 81.452980][ T4295] hfs: walked past end of dir [ 81.456444][ T4295] hfs: walked past end of dir [ 81.460029][ T4295] hfs: walked past end of dir [ 81.464037][ T4295] hfs: walked past end of dir [ 81.468110][ T4295] hfs: walked past end of dir [ 81.471748][ T4295] hfs: walked past end of dir [ 81.475620][ T4295] hfs: walked past end of dir [ 81.479406][ T4295] hfs: walked past end of dir [ 81.483212][ T4295] hfs: walked past end of dir [ 81.486937][ T4295] hfs: walked past end of dir [ 81.490429][ T4295] hfs: walked past end of dir [ 81.494111][ T4295] hfs: walked past end of dir [ 81.504213][ T4295] hfs: walked past end of dir [ 81.509263][ T4295] hfs: walked past end of dir [ 81.514789][ T4295] hfs: walked past end of dir [ 81.519437][ T4295] hfs: walked past end of dir [ 81.524500][ T4295] hfs: walked past end of dir [ 81.529708][ T4295] hfs: walked past end of dir [ 81.535492][ T4295] hfs: walked past end of dir [ 81.541622][ T4295] hfs: walked past end of dir [ 81.547621][ T4295] hfs: walked past end of dir [ 81.553534][ T4295] hfs: walked past end of dir [ 81.557949][ T4295] hfs: walked past end of dir [ 81.562803][ T4295] hfs: walked past end of dir [ 81.567685][ T4295] hfs: walked past end of dir [ 81.572974][ T4295] hfs: walked past end of dir [ 81.579183][ T4295] hfs: walked past end of dir [ 81.583242][ T4295] hfs: walked past end of dir [ 81.594212][ T4295] hfs: walked past end of dir [ 81.595618][ T4295] hfs: walked past end of dir [ 81.596816][ T4295] hfs: walked past end of dir [ 81.599214][ T4295] hfs: walked past end of dir [ 81.600280][ T4295] hfs: walked past end of dir [ 81.608379][ T4295] hfs: walked past end of dir [ 81.609372][ T4295] hfs: walked past end of dir [ 81.610801][ T4295] hfs: walked past end of dir [ 81.611872][ T4295] hfs: walked past end of dir [ 81.613265][ T4295] hfs: walked past end of dir [ 81.614369][ T4295] hfs: walked past end of dir [ 81.615680][ T4295] hfs: walked past end of dir [ 81.616858][ T4295] hfs: walked past end of dir [ 81.618276][ T4286] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.618437][ T4295] hfs: walked past end of dir [ 81.621648][ T4295] hfs: walked past end of dir [ 81.622955][ T4295] hfs: walked past end of dir [ 81.624077][ T4295] hfs: walked past end of dir [ 81.625486][ T4295] hfs: walked past end of dir [ 81.626797][ T4295] hfs: walked past end of dir [ 81.628243][ T4295] hfs: walked past end of dir [ 81.629949][ T4295] hfs: walked past end of dir [ 81.631343][ T4295] hfs: walked past end of dir [ 81.632395][ T4295] hfs: walked past end of dir [ 81.633769][ T4295] hfs: walked past end of dir [ 81.634828][ T4295] hfs: walked past end of dir [ 81.636338][ T4295] hfs: walked past end of dir [ 81.637416][ T4295] hfs: walked past end of dir [ 81.638804][ T4295] hfs: walked past end of dir [ 81.639907][ T4295] hfs: walked past end of dir [ 81.641291][ T4295] hfs: walked past end of dir [ 81.642398][ T4295] hfs: walked past end of dir [ 81.643799][ T4295] hfs: walked past end of dir [ 81.644946][ T4295] hfs: walked past end of dir [ 81.646309][ T4295] hfs: walked past end of dir [ 81.647520][ T4295] hfs: walked past end of dir [ 81.648818][ T4295] hfs: walked past end of dir [ 81.649964][ T4295] hfs: walked past end of dir [ 81.651375][ T4295] hfs: walked past end of dir [ 81.652485][ T4295] hfs: walked past end of dir [ 81.653826][ T4295] hfs: walked past end of dir [ 81.654839][ T4295] hfs: walked past end of dir [ 81.678688][ T4295] hfs: walked past end of dir [ 81.681803][ T4295] hfs: walked past end of dir [ 81.706320][ T4295] hfs: walked past end of dir [ 81.708560][ T4295] hfs: walked past end of dir [ 82.139075][ T4295] hfs: walked past end of dir [ 82.141152][ T4295] hfs: walked past end of dir [ 82.347368][ T4295] hfs: walked past end of dir [ 82.351605][ T4295] hfs: walked past end of dir [ 82.356676][ T4295] hfs: walked past end of dir [ 82.408378][ T4295] hfs: walked past end of dir [ 82.418787][ T4295] hfs: walked past end of dir [ 82.431536][ T4295] hfs: walked past end of dir [ 82.445709][ T4295] hfs: walked past end of dir [ 82.466393][ T4295] hfs: walked past end of dir [ 82.478487][ T4295] hfs: walked past end of dir [ 82.484232][ T4295] hfs: walked past end of dir [ 82.490396][ T4295] hfs: walked past end of dir [ 82.494687][ T4295] hfs: walked past end of dir [ 82.498164][ T4295] hfs: walked past end of dir [ 82.500259][ T4295] hfs: walked past end of dir [ 82.502656][ T4295] hfs: walked past end of dir [ 82.504897][ T4295] hfs: walked past end of dir [ 82.511607][ T4295] hfs: walked past end of dir [ 82.513852][ T4295] hfs: walked past end of dir [ 82.516699][ T4295] hfs: walked past end of dir [ 82.518816][ T4295] hfs: walked past end of dir [ 82.521355][ T4295] hfs: walked past end of dir [ 82.523500][ T4295] hfs: walked past end of dir [ 82.532648][ T5121] xt_hashlimit: size too large, truncated to 1048576 [ 82.535234][ T4295] hfs: walked past end of dir [ 82.537560][ T4295] hfs: walked past end of dir [ 82.540035][ T4295] hfs: walked past end of dir [ 82.542229][ T4295] hfs: walked past end of dir [ 82.544713][ T4295] hfs: walked past end of dir [ 82.547213][ T5121] xt_hashlimit: overflow, try lower: 0/0 [ 82.547854][ T4295] hfs: walked past end of dir [ 82.552296][ T4295] hfs: walked past end of dir [ 82.554514][ T4295] hfs: walked past end of dir [ 82.563276][ T4295] hfs: walked past end of dir [ 82.565398][ T4295] hfs: walked past end of dir [ 82.574310][ T4295] hfs: walked past end of dir [ 82.578642][ T4295] hfs: walked past end of dir [ 82.584268][ T4295] hfs: walked past end of dir [ 82.593779][ T4295] hfs: walked past end of dir [ 82.597401][ T4295] hfs: walked past end of dir [ 82.601661][ T4295] hfs: walked past end of dir [ 82.604149][ T4295] hfs: walked past end of dir [ 82.614585][ T4295] hfs: walked past end of dir [ 82.618401][ T4295] hfs: walked past end of dir [ 82.621659][ T4295] hfs: walked past end of dir [ 82.624182][ T4295] hfs: walked past end of dir [ 82.631587][ T4295] hfs: walked past end of dir [ 82.634014][ T4295] hfs: walked past end of dir [ 82.636524][ T4295] hfs: walked past end of dir [ 82.643074][ T4295] hfs: walked past end of dir [ 82.651493][ T4295] hfs: walked past end of dir [ 82.656304][ T4295] hfs: walked past end of dir [ 82.658514][ T4295] hfs: walked past end of dir [ 82.661068][ T4295] hfs: walked past end of dir [ 82.663209][ T4295] hfs: walked past end of dir [ 82.667145][ T4295] hfs: walked past end of dir [ 82.669266][ T4295] hfs: walked past end of dir [ 82.671590][ T4295] hfs: walked past end of dir [ 82.673704][ T4295] hfs: walked past end of dir [ 82.683579][ T4295] hfs: walked past end of dir [ 82.686081][ T4295] hfs: walked past end of dir [ 82.689805][ T4295] hfs: walked past end of dir [ 82.691946][ T4295] hfs: walked past end of dir [ 82.694394][ T4295] hfs: walked past end of dir [ 82.697597][ T4295] hfs: walked past end of dir [ 82.700182][ T4295] hfs: walked past end of dir [ 82.702628][ T4295] hfs: walked past end of dir [ 82.705155][ T4295] hfs: walked past end of dir [ 82.713440][ T4295] hfs: walked past end of dir [ 82.717654][ T4295] hfs: walked past end of dir [ 82.719829][ T4295] hfs: walked past end of dir [ 82.722249][ T4295] hfs: walked past end of dir [ 82.733756][ T4295] hfs: walked past end of dir [ 83.607485][ T5125] loop2: detected capacity change from 0 to 8192 [ 83.773990][ T5125] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.780131][ T5125] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 83.784400][ T5125] REISERFS (device loop2): using ordered data mode [ 83.788089][ T5125] reiserfs: using flush barriers [ 83.797194][ T5125] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.816122][ T5125] REISERFS (device loop2): checking transaction log (loop2) [ 83.822820][ T5125] REISERFS (device loop2): Using r5 hash to sort names [ 83.829338][ T5125] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 83.841643][ T5125] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 84.082711][ T5136] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 84.085756][ T5136] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 84.089361][ T5136] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 84.098224][ T4815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.285976][ T4815] usb 1-1: device descriptor read/64, error -71 [ 84.333150][ T4397] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.407503][ T4311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.410489][ T4311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.413191][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.416856][ T4311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.419060][ T4311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.420786][ T4311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.497770][ T4397] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.557038][ T4815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.562257][ T5138] lo speed is unknown, defaulting to 1000 [ 84.735241][ T5143] loop2: detected capacity change from 0 to 512 [ 84.866002][ T4815] usb 1-1: device descriptor read/64, error -71 [ 84.920381][ T4397] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.987364][ T4815] usb usb1-port1: attempt power cycle [ 85.425878][ T4815] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.513115][ T5143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.524908][ T4815] usb 1-1: device descriptor read/8, error -71 [ 85.575017][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 85.731919][ T4397] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.783067][ T5138] chnl_net:caif_netlink_parms(): no params data found [ 85.804658][ T5156] loop3: detected capacity change from 0 to 8192 [ 85.809850][ T5156] REISERFS warning (device loop3): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 85.809850][ T5156] [ 85.835481][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.837340][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.839613][ T5138] device bridge_slave_0 entered promiscuous mode [ 85.843487][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.846571][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.849484][ T5138] device bridge_slave_1 entered promiscuous mode [ 85.875939][ T4815] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 85.882496][ T5138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.888035][ T5138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.914354][ T5138] team0: Port device team_slave_0 added [ 85.932770][ T5138] team0: Port device team_slave_1 added [ 85.985231][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.987198][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.002077][ T5138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.005759][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.013111][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.019323][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.020956][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.024080][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.033031][ T5138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.046620][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.056767][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.061424][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.067877][ T5165] loop0: detected capacity change from 0 to 1024 [ 86.070023][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.077102][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.082224][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.084886][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.091009][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.094324][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.097086][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.099607][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.101210][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.101440][ T5138] device hsr_slave_0 entered promiscuous mode [ 86.102761][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.104096][ T5165] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 86.105569][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.110035][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.111738][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.113363][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.115028][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.116870][ T4815] usb 1-1: device not accepting address 8, error -71 [ 86.119002][ T4815] usb usb1-port1: unable to enumerate USB device [ 86.121474][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.123230][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.127166][ T5168] loop3: detected capacity change from 0 to 64 [ 86.129299][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.131349][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.133198][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.135597][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.138039][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.139736][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.141774][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.143580][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.145064][ T3762] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.152226][ T3762] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 86.159745][ T5138] device hsr_slave_1 entered promiscuous mode [ 86.216182][ T5138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.223035][ T5138] Cannot create hsr debugfs directory [ 86.457222][ T5168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.505909][ T4311] Bluetooth: hci1: command tx timeout [ 86.554616][ T5168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.632818][ T5177] x_tables: duplicate underflow at hook 2 [ 87.799437][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.937247][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.606379][ T4311] Bluetooth: hci1: command tx timeout [ 88.757616][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.827967][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.400985][ T5211] loop0: detected capacity change from 0 to 8192 [ 89.436847][ T5211] REISERFS warning (device loop0): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 89.436847][ T5211] [ 89.674773][ T5138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.728151][ T5138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.657014][ T47] Bluetooth: hci1: command tx timeout [ 91.225153][ T5138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.593904][ T5138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.732798][ T5138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.746027][ T47] Bluetooth: hci1: command tx timeout [ 92.792079][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.794071][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.799012][ T5138] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.806427][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.811566][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.813658][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.815105][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.818092][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.830888][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.832791][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.834201][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.846437][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.848463][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.858096][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.860120][ T5269] loop0: detected capacity change from 0 to 2048 [ 92.891842][ T4397] device hsr_slave_0 left promiscuous mode [ 92.950342][ T4397] device hsr_slave_1 left promiscuous mode [ 92.965930][ T5273] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.975734][ T5253] loop3: detected capacity change from 0 to 32768 [ 92.998689][ T5269] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 93.000546][ T5269] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 93.011869][ T5272] loop4: detected capacity change from 0 to 8192 [ 93.014939][ T5253] XFS (loop3): Mounting V5 Filesystem [ 93.023396][ T5269] Remounting filesystem read-only [ 93.024519][ T5269] NILFS (loop0): error -5 truncating bmap (ino=16) [ 93.035661][ T5272] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 93.035661][ T5272] [ 93.036156][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.039990][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.053635][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.055229][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.069751][ T4397] device bridge_slave_1 left promiscuous mode [ 93.071300][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.137286][ T5253] XFS (loop3): Ending clean mount [ 93.147065][ T4304] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 93.148639][ T5253] XFS (loop3): Quotacheck needed: Please wait. [ 93.148977][ T4304] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 93.164105][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.165903][ T4397] device bridge_slave_0 left promiscuous mode [ 93.166006][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.176856][ T5253] XFS (loop3): Quotacheck: Done. [ 93.178222][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.180047][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.181961][ T4304] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 93.183771][ T4304] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 93.205568][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.214550][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.217915][ T4304] NILFS (loop0): discard dirty block: blocknr=25, size=1024 [ 93.219090][ T4307] XFS (loop3): Unmounting Filesystem [ 93.219502][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.223242][ T4304] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 93.224621][ T4304] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 93.236184][ T4304] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 93.238705][ T4304] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 93.240414][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.416310][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.477440][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.131903][ T5294] loop0: detected capacity change from 0 to 256 [ 94.166427][ T4397] device veth1_macvtap left promiscuous mode [ 94.168207][ T4397] device veth0_macvtap left promiscuous mode [ 94.170248][ T4397] device veth1_vlan left promiscuous mode [ 94.172189][ T4397] device veth0_vlan left promiscuous mode [ 94.223192][ T5292] loop3: detected capacity change from 0 to 8192 [ 94.240470][ T5292] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.243160][ T5292] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 94.245044][ T5292] REISERFS (device loop3): using ordered data mode [ 94.255236][ T5292] reiserfs: using flush barriers [ 94.265481][ T5292] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.272201][ T5292] REISERFS (device loop3): checking transaction log (loop3) [ 94.278620][ T5292] REISERFS (device loop3): Using r5 hash to sort names [ 94.280413][ T5292] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 94.283577][ T5292] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 94.543300][ T5299] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 94.546707][ T5299] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 94.549849][ T5299] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 95.378281][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.379816][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.381272][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.382852][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.384401][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.390252][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.391832][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.393333][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.394853][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.397332][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.398793][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.400252][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.401682][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.403130][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.404527][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.406745][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.408247][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.409848][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.411372][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.412751][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.414476][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.415669][ T5304] loop3: detected capacity change from 0 to 1024 [ 95.416607][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.418855][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.420473][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.421995][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.423623][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.424989][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.427202][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.428753][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.440522][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.441978][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.443465][ T4817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.444796][ T5304] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 95.462398][ T4817] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 95.480902][ T5306] loop0: detected capacity change from 0 to 8192 [ 95.484139][ T5306] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.487353][ T5306] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 95.489411][ T5306] REISERFS (device loop0): using ordered data mode [ 95.490806][ T5306] reiserfs: using flush barriers [ 95.493203][ T5306] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.497492][ T5306] REISERFS (device loop0): checking transaction log (loop0) [ 95.503984][ T5306] REISERFS (device loop0): Using r5 hash to sort names [ 95.505689][ T5306] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 95.524239][ T5306] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 95.752182][ T5311] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 95.755306][ T5311] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 95.758538][ T5311] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 96.293285][ T5313] loop3: detected capacity change from 0 to 64 [ 96.361108][ T5316] loop3: detected capacity change from 0 to 512 [ 96.364694][ T5316] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.393039][ T5316] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.400222][ T5316] EXT4-fs (loop3): 1 truncate cleaned up [ 96.401264][ T5316] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.485240][ T5320] loop0: detected capacity change from 0 to 8192 [ 96.488764][ T5320] REISERFS warning (device loop0): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 96.488764][ T5320] [ 96.763314][ T5325] loop0: detected capacity change from 0 to 8192 [ 96.775326][ T5325] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.778382][ T5325] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 96.780476][ T5325] REISERFS (device loop0): using ordered data mode [ 96.781975][ T5325] reiserfs: using flush barriers [ 96.784842][ T5325] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.795337][ T5325] REISERFS (device loop0): checking transaction log (loop0) [ 96.798574][ T5325] REISERFS (device loop0): Using r5 hash to sort names [ 96.807394][ T5325] reiserfs: enabling write barrier flush mode [ 96.815479][ T5325] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 97.111193][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 97.317050][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 97.477669][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.696637][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.160780][ T4397] bond0 (unregistering): Released all slaves [ 100.400372][ T4526] smc: removing ib device syz0 [ 100.405439][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.408458][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.411654][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.414508][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.417433][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.489997][ T4307] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 100.518970][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.521086][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.533132][ T4307] EXT4-fs (loop3): Remounting filesystem read-only [ 100.534751][ T4307] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 100.538044][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.540074][ T4307] EXT4-fs (loop3): Remounting filesystem read-only [ 100.546570][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.559497][ T5138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.842671][ T5138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.845286][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.847555][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.182337][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.258308][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.666439][ T5339] loop0: detected capacity change from 0 to 8192 [ 101.691100][ T5339] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.693716][ T5339] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 101.704455][ T5339] REISERFS (device loop0): using ordered data mode [ 101.706144][ T5339] reiserfs: using flush barriers [ 101.708742][ T5339] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.712399][ T5339] REISERFS (device loop0): checking transaction log (loop0) [ 101.714836][ T5339] REISERFS (device loop0): Using r5 hash to sort names [ 101.723086][ T5339] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 101.726108][ T5339] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 101.839211][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 101.911867][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.914186][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.938061][ T5350] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 101.941977][ T5350] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 101.945769][ T5350] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 101.978459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.980818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.983257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.986541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.995640][ T5138] device veth0_vlan entered promiscuous mode [ 102.019040][ T5138] device veth1_vlan entered promiscuous mode [ 102.085236][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.087584][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.089817][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.095194][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.104468][ T5138] device veth0_macvtap entered promiscuous mode [ 102.124883][ T5138] device veth1_macvtap entered promiscuous mode [ 102.284643][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.301268][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.303337][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.305501][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.307710][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.309722][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.311484][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.314947][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.329935][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.332272][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.334153][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.341906][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.344023][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.349678][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.351814][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.353735][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.361007][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.363041][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.365112][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.368865][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.370937][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.374104][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.425640][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.427892][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.438357][ T5138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.440232][ T5138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.442055][ T5138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.443938][ T5138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.554402][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.560331][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.575406][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.590658][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.593060][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.599414][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.632637][ T4397] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.664274][ T5355] loop0: detected capacity change from 0 to 32768 [ 103.670027][ T5355] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.242 (5355) [ 103.700583][ T5355] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 103.702524][ T5355] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.704536][ T5355] BTRFS info (device loop0): using free space tree [ 103.724613][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.726291][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.727691][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.729254][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.730729][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.732305][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.733876][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.735360][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.751660][ T5366] loop4: detected capacity change from 0 to 1024 [ 103.764065][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.766397][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.767783][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.769256][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.770672][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.771981][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.785910][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.787490][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.789005][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.790448][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.791897][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.793248][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.794777][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.799209][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.829550][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.832868][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.834994][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.837376][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.838893][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.840485][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.841991][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.844432][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.846831][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.848561][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.848710][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.850682][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.853471][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.853624][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.855043][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.859332][ T4347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.875296][ T4347] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 103.894090][ T5366] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 103.917818][ T4397] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.945301][ T5367] loop1: detected capacity change from 0 to 8192 [ 103.970120][ T5367] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.972954][ T5367] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 103.997508][ T5367] REISERFS (device loop1): using ordered data mode [ 103.998909][ T5367] reiserfs: using flush barriers [ 104.025330][ T5367] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.037907][ T5383] loop2: detected capacity change from 0 to 8192 [ 104.040094][ T5367] REISERFS (device loop1): checking transaction log (loop1) [ 104.041850][ T5355] BTRFS info (device loop0): enabling ssd optimizations [ 104.042450][ T5367] REISERFS (device loop1): Using r5 hash to sort names [ 104.045478][ T5367] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 104.056211][ T5383] REISERFS warning (device loop2): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 104.056211][ T5383] [ 104.059209][ T5367] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 104.179056][ T4397] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.288440][ T5397] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 104.291439][ T5397] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 104.294465][ T5397] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 104.343399][ T4304] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 104.373719][ T4397] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.379625][ T5399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 104.647641][ T5375] chnl_net:caif_netlink_parms(): no params data found [ 106.236483][ T4311] Bluetooth: hci4: command tx timeout [ 106.352776][ T5413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.405372][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.838610][ T5419] FAULT_INJECTION: forcing a failure. [ 106.838610][ T5419] name failslab, interval 1, probability 0, space 0, times 0 [ 106.841753][ T5419] CPU: 0 PID: 5419 Comm: syz.1.239 Not tainted 6.1.115-syzkaller #0 [ 106.843384][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.845344][ T5419] Call trace: [ 106.846020][ T5419] dump_backtrace+0x1c8/0x1f4 [ 106.847024][ T5419] show_stack+0x2c/0x3c [ 106.847976][ T5419] dump_stack_lvl+0x108/0x170 [ 106.848923][ T5419] dump_stack+0x1c/0x58 [ 106.849855][ T5419] should_fail_ex+0x3c0/0x51c [ 106.850921][ T5419] __should_failslab+0xc8/0x128 [ 106.851862][ T5419] should_failslab+0x10/0x28 [ 106.852902][ T5419] __kmem_cache_alloc_node+0x80/0x388 [ 106.854093][ T5419] kmalloc_trace+0x48/0x94 [ 106.855054][ T5419] alloc_tty_struct+0xb8/0x68c [ 106.856073][ T5419] tty_init_dev+0x60/0x3ec [ 106.857039][ T5419] tty_open+0x804/0xc20 [ 106.857967][ T5419] chrdev_open+0x3e8/0x4fc [ 106.858774][ T5419] do_dentry_open+0x734/0xfa0 [ 106.859726][ T5419] vfs_open+0x7c/0x90 [ 106.860620][ T5419] path_openat+0x1e14/0x2548 [ 106.861585][ T5419] do_filp_open+0x1bc/0x3cc [ 106.862576][ T5419] do_sys_openat2+0x128/0x3e0 [ 106.863570][ T5419] __arm64_sys_openat+0x1f0/0x240 [ 106.864840][ T5419] invoke_syscall+0x98/0x2c0 [ 106.865778][ T5419] el0_svc_common+0x138/0x258 [ 106.866804][ T5419] do_el0_svc+0x64/0x218 [ 106.867685][ T5419] el0_svc+0x58/0x168 [ 106.868544][ T5419] el0t_64_sync_handler+0x84/0xf0 [ 106.869661][ T5419] el0t_64_sync+0x18c/0x190 [ 106.901011][ T5416] loop4: detected capacity change from 0 to 8192 [ 106.941642][ T5416] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.946007][ T5416] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 106.948524][ T5416] REISERFS (device loop4): using ordered data mode [ 106.953531][ T5416] reiserfs: using flush barriers [ 106.963674][ T5416] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.978173][ T5416] REISERFS (device loop4): checking transaction log (loop4) [ 106.980528][ T5416] REISERFS (device loop4): Using r5 hash to sort names [ 106.982195][ T5416] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 107.007753][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.009284][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.011549][ T5375] device bridge_slave_0 entered promiscuous mode [ 107.029337][ T5416] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 107.032295][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.056030][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.057533][ T5417] loop0: detected capacity change from 0 to 32768 [ 107.072727][ T5375] device bridge_slave_1 entered promiscuous mode [ 107.093835][ T5375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.101467][ T5375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.175020][ T5375] team0: Port device team_slave_0 added [ 107.191785][ T5375] team0: Port device team_slave_1 added [ 107.225546][ T5417] XFS (loop0): Mounting V5 Filesystem [ 107.250753][ T5430] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.253825][ T5430] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.257052][ T5430] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.282800][ T5428] loop1: detected capacity change from 0 to 8192 [ 107.307809][ T5428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.307821][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.307837][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.310642][ T5428] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 107.315203][ T5375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.322732][ T5417] XFS (loop0): Ending clean mount [ 107.326743][ T5417] XFS (loop0): Quotacheck needed: Please wait. [ 107.330376][ T5428] REISERFS (device loop1): using ordered data mode [ 107.335157][ T5428] reiserfs: using flush barriers [ 107.348047][ T5428] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.351748][ T5428] REISERFS (device loop1): checking transaction log (loop1) [ 107.372221][ T5428] REISERFS (device loop1): Using r5 hash to sort names [ 107.376098][ T5428] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 107.379247][ T5417] XFS (loop0): Quotacheck: Done. [ 107.395197][ T5428] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 107.617790][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.619493][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.626809][ T5445] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.630005][ T5445] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.632910][ T5445] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 107.646080][ T5375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.019410][ T4311] Bluetooth: hci4: command tx timeout [ 110.083395][ T5375] device hsr_slave_0 entered promiscuous mode [ 110.166563][ T5375] device hsr_slave_1 entered promiscuous mode [ 110.245922][ T5375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.247615][ T5375] Cannot create hsr debugfs directory [ 110.310207][ T5466] loop4: detected capacity change from 0 to 256 [ 110.396939][ T5464] loop1: detected capacity change from 0 to 8192 [ 110.398305][ T5462] loop2: detected capacity change from 0 to 512 [ 110.400082][ T4304] XFS (loop0): Unmounting Filesystem [ 110.404772][ T5464] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "noacl" is only correct [ 110.404772][ T5464] [ 110.457832][ T5462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.483356][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 111.628637][ T5476] loop4: detected capacity change from 0 to 8192 [ 111.654968][ T5476] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 111.657946][ T5476] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 111.659799][ T5476] REISERFS (device loop4): using ordered data mode [ 111.661141][ T5476] reiserfs: using flush barriers [ 111.682713][ T5476] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.692819][ T5476] REISERFS (device loop4): checking transaction log (loop4) [ 111.700676][ T5476] REISERFS (device loop4): Using r5 hash to sort names [ 111.702241][ T5476] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 111.706935][ T5476] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 111.726373][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.096280][ T47] Bluetooth: hci4: command tx timeout [ 112.608540][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.662847][ T5502] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 112.666310][ T5502] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 112.670279][ T5502] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 112.725288][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.348563][ T47] Bluetooth: hci4: command tx timeout [ 114.400005][ T5532] sched: RT throttling activated [ 115.649848][ T5551] netlink: 732 bytes leftover after parsing attributes in process `syz.2.272'. [ 116.110165][ T5579] netlink: 'syz.0.279': attribute type 29 has an invalid length. [ 116.322233][ T5579] netlink: 'syz.0.279': attribute type 29 has an invalid length. [ 116.338932][ T5584] netlink: 'syz.0.279': attribute type 29 has an invalid length. [ 117.708754][ T4397] device hsr_slave_0 left promiscuous mode [ 117.723625][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 118.420194][ T4397] device hsr_slave_1 left promiscuous mode [ 119.586286][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.587930][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.597960][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.599575][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.610363][ T4397] device bridge_slave_1 left promiscuous mode [ 119.612692][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.862613][ T4397] device bridge_slave_0 left promiscuous mode [ 119.864350][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.960060][ T4397] device veth1_macvtap left promiscuous mode [ 119.962273][ T4397] device veth0_macvtap left promiscuous mode [ 119.963716][ T4397] device veth1_vlan left promiscuous mode [ 119.965180][ T4397] device veth0_vlan left promiscuous mode [ 120.529145][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 120.551522][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 120.606992][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.647000][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.054285][ T4397] bond0 (unregistering): Released all slaves [ 121.233390][ T5614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.239607][ T5614] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.241259][ T5614] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 121.265105][ T5614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.266827][ T5614] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.268080][ T5614] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 121.270510][ T5614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.274412][ T5614] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.275778][ T5614] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 121.285880][ T5614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.287294][ T5614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.288457][ T5614] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 121.290609][ T5614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.291993][ T5614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.293833][ T5614] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 121.316730][ T5375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.427651][ T5375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.236946][ T5375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.273088][ T4311] Bluetooth: hci3: unexpected event for opcode 0x202a [ 122.366084][ T5375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.415111][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 123.355931][ T4311] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.357297][ T4311] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.358620][ T4311] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.359875][ T4311] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.369405][ T5375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.400116][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.402377][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.407408][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.412698][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.414890][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.421209][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.422737][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.434949][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.484558][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.486951][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.489054][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.490499][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.662503][ T4817] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.665246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.669992][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.683040][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.690249][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.700542][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.712587][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.330856][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.381722][ T4817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.383895][ T4817] usb 1-1: config 0 has no interfaces? [ 124.396075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.398242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.410281][ T5375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.421122][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.454907][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.457849][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.486521][ T4817] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 124.488596][ T4817] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 124.490163][ T4817] usb 1-1: Manufacturer: syz [ 124.505002][ T4817] usb 1-1: config 0 descriptor?? [ 124.712291][ T5697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.764218][ T4815] usb 1-1: USB disconnect, device number 9 [ 124.769026][ T5697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.802771][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.804532][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.823338][ T5375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.857241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.859511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.907068][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.909384][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.911702][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.916927][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.921218][ T5375] device veth0_vlan entered promiscuous mode [ 124.933910][ T5375] device veth1_vlan entered promiscuous mode [ 124.965190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.967530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.969459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.976754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.005053][ T5375] device veth0_macvtap entered promiscuous mode [ 125.012593][ T5375] device veth1_macvtap entered promiscuous mode [ 125.018767][ T5712] Invalid ELF header len 5 [ 125.025049][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.028265][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.032809][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.038277][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.042806][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.050391][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.056228][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.060758][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.068604][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.074923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.077154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.079019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.081334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.087602][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.090808][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.095277][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.103227][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.105529][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.109538][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.111696][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.113903][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.123309][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.127743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.130032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.142973][ T5375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.144849][ T5375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.150940][ T5375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.153957][ T5375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.248038][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.249675][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.262691][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.278663][ T4448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.291913][ T4448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.302289][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.376354][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.376380][ T4311] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.377679][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.378881][ T4311] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.473562][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.506690][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.937271][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.939288][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.983403][ T5756] Invalid ELF header len 5 [ 126.536021][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 128.083918][ T5789] netlink: 64 bytes leftover after parsing attributes in process `syz.2.335'. [ 128.242032][ T5801] netlink: 120 bytes leftover after parsing attributes in process `syz.2.337'. [ 128.304304][ T5804] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.562476][ T5818] input: syz1 as /devices/virtual/input/input5 [ 130.810416][ T5862] netlink: 5288 bytes leftover after parsing attributes in process `syz.1.352'. [ 130.812424][ T5862] netlink: get zone limit has 8 unknown bytes [ 131.546096][ T5865] ubi0: attaching mtd0 [ 131.547096][ T5865] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 132.030802][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.057467][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.174208][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 132.619017][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 134.217651][ T5921] sctp: failed to load transform for md5: -2 [ 134.393366][ T27] audit: type=1326 audit(133.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.413607][ T27] audit: type=1326 audit(133.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.560762][ T27] audit: type=1326 audit(133.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.625073][ T27] audit: type=1326 audit(133.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.647822][ T27] audit: type=1326 audit(133.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.680822][ T27] audit: type=1326 audit(133.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.736002][ T27] audit: type=1326 audit(133.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.759655][ T27] audit: type=1326 audit(133.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.784079][ T27] audit: type=1326 audit(133.270:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.824703][ T27] audit: type=1326 audit(133.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b74bfe8 code=0x7ffc0000 [ 134.922869][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.119830][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.752314][ T5987] input: syz1 as /devices/virtual/input/input7 [ 137.956704][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.413'. [ 138.163416][ T6044] could not allocate digest TFM handle sha384-avx [ 139.114035][ T6068] device syzkaller0 entered promiscuous mode [ 140.104001][ T4310] Bluetooth: hci3: unexpected event for opcode 0x202a [ 140.124640][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.131556][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.176035][ T4310] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.178018][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.179773][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.197480][ T6087] netlink: 104 bytes leftover after parsing attributes in process `syz.4.430'. [ 140.252904][ T6094] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.430'. [ 141.919873][ T6125] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.445'. [ 153.670843][ T6162] netlink: 'syz.1.457': attribute type 8 has an invalid length. [ 154.828349][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 154.975350][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.285216][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.178430][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 157.533306][ T6285] tipc: Started in network mode [ 157.534346][ T6285] tipc: Node identity 6ee0cc800d83, cluster identity 4711 [ 157.536068][ T6285] tipc: Enabled bearer , priority 3 [ 158.197552][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.267432][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.619001][ T4815] tipc: Node number set to 1667484800 [ 159.038463][ T6296] Invalid ELF header len 5 [ 159.056001][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.056111][ T4311] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.057503][ T4300] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.016508][ T6314] Cannot find set identified by id 0 to match [ 161.446849][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 161.505048][ T4301] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.105152][ T6338] netlink: 'syz.3.525': attribute type 8 has an invalid length. [ 164.039401][ T6354] sctp: [Deprecated]: syz.3.529 (pid 6354) Use of int in maxseg socket option. [ 164.039401][ T6354] Use struct sctp_assoc_value instead [ 167.354206][ T6387] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 169.596317][ T6435] device sit0 entered promiscuous mode [ 169.623159][ T6435] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 169.624887][ T6435] netlink: 1 bytes leftover after parsing attributes in process `syz.4.560'. [ 170.758973][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 170.791587][ T6460] device gretap0 entered promiscuous mode [ 170.793056][ T6460] device macvlan2 entered promiscuous mode [ 171.796905][ T6477] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 171.818245][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.820191][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.857608][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.859284][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.861488][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.862889][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.910705][ T6477] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.918072][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 171.919830][ T6483] device bridge_slave_1 left promiscuous mode [ 171.921242][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.998203][ T6483] device bridge_slave_0 left promiscuous mode [ 171.999615][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.138095][ T6483] bond0: (slave bridge0): Releasing backup interface [ 174.639219][ T6556] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 175.077441][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 176.155680][ T6587] input: syz0 as /devices/virtual/input/input9 [ 177.044258][ T6601] nbd0: detected capacity change from 0 to 12 [ 177.049958][ T51] block nbd0: Send control failed (result -89) [ 177.051629][ T51] block nbd0: Request send failed, requeueing [ 177.054945][ T47] block nbd0: Receive control failed (result -32) [ 177.061196][ T51] block nbd0: Dead connection, failed to find a fallback [ 177.062591][ T51] block nbd0: shutting down sockets [ 177.063790][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.065957][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.069992][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.071857][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.073461][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.075259][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.077011][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.078873][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.080465][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.082469][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.084154][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.086173][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.087918][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.089758][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.091500][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.093299][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.094900][ T6601] ldm_validate_partition_table(): Disk read failed. [ 177.096745][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.098540][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.100188][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 177.101985][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.103843][ T6601] Dev nbd0: unable to read RDB block 0 [ 177.105307][ T6601] nbd0: unable to read partition table [ 177.106736][ T6601] nbd0: partition table beyond EOD, truncated [ 177.112131][ T6215] ldm_validate_partition_table(): Disk read failed. [ 177.114351][ T6215] Dev nbd0: unable to read RDB block 0 [ 177.120225][ T6215] nbd0: unable to read partition table [ 177.123620][ T6215] nbd0: partition table beyond EOD, truncated [ 177.130122][ T6215] ldm_validate_partition_table(): Disk read failed. [ 177.132131][ T6215] Dev nbd0: unable to read RDB block 0 [ 177.133782][ T6215] nbd0: unable to read partition table [ 177.135556][ T6215] nbd0: partition table beyond EOD, truncated [ 177.550778][ T6614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 177.582338][ T6616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.630'. [ 177.964313][ T6627] bridge0: port 3(erspan0) entered blocking state [ 177.965571][ T6627] bridge0: port 3(erspan0) entered disabled state [ 177.967705][ T6627] device erspan0 entered promiscuous mode [ 177.969268][ T6627] bridge0: port 3(erspan0) entered blocking state [ 177.970608][ T6627] bridge0: port 3(erspan0) entered forwarding state [ 178.358204][ T6629] input: syz0 as /devices/virtual/input/input10 [ 179.828432][ T6645] syz.2.639 (6645): attempted to duplicate a private mapping with mremap. This is not supported. [ 181.594936][ T47] Bluetooth: hci0: unexpected event for opcode 0x200d [ 181.741016][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'. [ 184.015557][ T6701] netlink: 'syz.2.659': attribute type 11 has an invalid length. [ 184.101997][ T47] Bluetooth: hci3: unexpected event for opcode 0x200d [ 184.155560][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.665'. [ 185.116698][ T6726] input: syz0 as /devices/virtual/input/input11 [ 185.725107][ T6742] tmpfs: Unknown parameter 'usrquota' [ 186.752528][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 186.814292][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.168222][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.436691][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.438161][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.087898][ T6836] xt_CT: No such helper "syz1" [ 190.135399][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 190.238620][ T47] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 190.336373][ T47] Bluetooth: hci1: unexpected event for opcode 0x200d [ 190.478796][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 191.538689][ T47] Bluetooth: hci0: unexpected event for opcode 0x200d [ 191.695384][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 194.754045][ T47] Bluetooth: hci4: unexpected event for opcode 0x200d [ 194.797518][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 197.041302][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 197.168220][ T6979] input: syz0 as /devices/virtual/input/input13 [ 197.854840][ T47] Bluetooth: hci0: unexpected event for opcode 0x200d [ 199.247107][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 199.346999][ T47] Bluetooth: hci3: unexpected event for opcode 0x200d [ 199.671195][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 200.416130][ T7035] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 200.698653][ T47] Bluetooth: hci1: unexpected event for opcode 0x200d [ 200.729944][ T4413] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 202.226049][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.228346][ T4413] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.231046][ T4413] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.232815][ T4413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.297152][ T4413] usb 1-1: config 0 descriptor?? [ 202.360357][ T7073] tipc: Enabling of bearer rejected, failed to enable media [ 202.790915][ T4413] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x4 [ 202.792512][ T4413] mcp2221 0003:04D8:00DD.0004: item fetching failed at offset 4/5 [ 202.794273][ T4413] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 202.795508][ T4413] mcp2221: probe of 0003:04D8:00DD.0004 failed with error -22 [ 202.996917][ T4413] usb 1-1: USB disconnect, device number 10 [ 203.790032][ T7114] input: syz0 as /devices/virtual/input/input17 [ 205.620039][ T7136] could not allocate digest TFM handle sha384-ssse3 [ 205.914564][ T7150] futex_wake_op: syz.4.834 tries to shift op by -1; fix this program [ 208.062865][ T7166] input: syz0 as /devices/virtual/input/input18 [ 209.048985][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 209.098728][ T7195] [ 209.099209][ T7195] ====================================================== [ 209.100555][ T7195] WARNING: possible circular locking dependency detected [ 209.101904][ T7195] 6.1.115-syzkaller #0 Not tainted [ 209.102962][ T7195] ------------------------------------------------------ [ 209.104427][ T7195] syz.1.849/7195 is trying to acquire lock: [ 209.105551][ T7195] ffff0000fdc49450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 209.107842][ T7195] [ 209.107842][ T7195] but task is already holding lock: [ 209.109304][ T7195] ffff0000fdc48130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 209.111257][ T7195] [ 209.111257][ T7195] which lock already depends on the new lock. [ 209.111257][ T7195] [ 209.113396][ T7195] [ 209.113396][ T7195] the existing dependency chain (in reverse order) is: [ 209.115189][ T7195] [ 209.115189][ T7195] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 209.116748][ T7195] lock_sock_nested+0x78/0x138 [ 209.117874][ T7195] smc_listen_out+0x10c/0x3bc [ 209.118912][ T7195] smc_listen_work+0x1e4/0x102c [ 209.119978][ T7195] process_one_work+0x7ac/0x1404 [ 209.121039][ T7195] worker_thread+0x8e4/0xfec [ 209.122048][ T7195] kthread+0x250/0x2d8 [ 209.122924][ T7195] ret_from_fork+0x10/0x20 [ 209.123945][ T7195] [ 209.123945][ T7195] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 209.126097][ T7195] __lock_acquire+0x3338/0x7680 [ 209.127230][ T7195] lock_acquire+0x26c/0x7cc [ 209.128316][ T7195] __flush_work+0xf8/0x1c0 [ 209.129262][ T7195] __cancel_work_timer+0x3ec/0x548 [ 209.130453][ T7195] cancel_work_sync+0x24/0x38 [ 209.131471][ T7195] smc_clcsock_release+0x64/0xec [ 209.132631][ T7195] __smc_release+0x55c/0x700 [ 209.133645][ T7195] smc_close_non_accepted+0xd8/0x260 [ 209.134783][ T7195] smc_close_active+0x9bc/0xd20 [ 209.135876][ T7195] __smc_release+0xa0/0x700 [ 209.136951][ T7195] smc_release+0x260/0x528 [ 209.137899][ T7195] sock_close+0xb8/0x1fc [ 209.138885][ T7195] __fput+0x1c8/0x7c8 [ 209.139874][ T7195] ____fput+0x20/0x30 [ 209.140786][ T7195] task_work_run+0x240/0x2f0 [ 209.141785][ T7195] do_notify_resume+0x2148/0x3474 [ 209.142993][ T7195] el0_svc+0x9c/0x168 [ 209.143948][ T7195] el0t_64_sync_handler+0x84/0xf0 [ 209.145015][ T7195] el0t_64_sync+0x18c/0x190 [ 209.146178][ T7195] [ 209.146178][ T7195] other info that might help us debug this: [ 209.146178][ T7195] [ 209.148380][ T7195] Possible unsafe locking scenario: [ 209.148380][ T7195] [ 209.149894][ T7195] CPU0 CPU1 [ 209.150921][ T7195] ---- ---- [ 209.151995][ T7195] lock(sk_lock-AF_SMC/1); [ 209.152955][ T7195] lock((work_completion)(&new_smc->smc_listen_work)); [ 209.154903][ T7195] lock(sk_lock-AF_SMC/1); [ 209.156299][ T7195] lock((work_completion)(&new_smc->smc_listen_work)); [ 209.157657][ T7195] [ 209.157657][ T7195] *** DEADLOCK *** [ 209.157657][ T7195] [ 209.159237][ T7195] 2 locks held by syz.1.849/7195: [ 209.160290][ T7195] #0: ffff0000d758ca10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 209.162396][ T7195] #1: ffff0000fdc48130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 209.164333][ T7195] [ 209.164333][ T7195] stack backtrace: [ 209.165468][ T7195] CPU: 0 PID: 7195 Comm: syz.1.849 Not tainted 6.1.115-syzkaller #0 [ 209.167183][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.169202][ T7195] Call trace: [ 209.169889][ T7195] dump_backtrace+0x1c8/0x1f4 [ 209.170839][ T7195] show_stack+0x2c/0x3c [ 209.171662][ T7195] dump_stack_lvl+0x108/0x170 [ 209.172655][ T7195] dump_stack+0x1c/0x58 [ 209.173501][ T7195] print_circular_bug+0x150/0x1b8 [ 209.174634][ T7195] check_noncircular+0x2cc/0x378 [ 209.175586][ T7195] __lock_acquire+0x3338/0x7680 [ 209.176571][ T7195] lock_acquire+0x26c/0x7cc [ 209.177495][ T7195] __flush_work+0xf8/0x1c0 [ 209.178363][ T7195] __cancel_work_timer+0x3ec/0x548 [ 209.179416][ T7195] cancel_work_sync+0x24/0x38 [ 209.180229][ T7195] smc_clcsock_release+0x64/0xec [ 209.181245][ T7195] __smc_release+0x55c/0x700 [ 209.182230][ T7195] smc_close_non_accepted+0xd8/0x260 [ 209.183264][ T7195] smc_close_active+0x9bc/0xd20 [ 209.184306][ T7195] __smc_release+0xa0/0x700 [ 209.185223][ T7195] smc_release+0x260/0x528 [ 209.186209][ T7195] sock_close+0xb8/0x1fc [ 209.187082][ T7195] __fput+0x1c8/0x7c8 [ 209.187950][ T7195] ____fput+0x20/0x30 [ 209.188746][ T7195] task_work_run+0x240/0x2f0 [ 209.189677][ T7195] do_notify_resume+0x2148/0x3474 [ 209.190661][ T7195] el0_svc+0x9c/0x168 [ 209.191429][ T7195] el0t_64_sync_handler+0x84/0xf0 [ 209.192524][ T7195] el0t_64_sync+0x18c/0x190 [ 209.193428][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.337790][ T7182] could not allocate digest TFM handle sha384-avx [ 210.655919][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.905842][ T4300] Bluetooth: hci4: command 0x0c1a tx timeout