last executing test programs: 9.67528213s ago: executing program 1 (id=1220): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_CLASSID={0x8, 0x1, {0xe}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.613517135s ago: executing program 1 (id=1222): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_CLASSID={0x8, 0x1, {0xe}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) 9.483231116s ago: executing program 1 (id=1224): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.454531088s ago: executing program 1 (id=1226): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 8.797448792s ago: executing program 1 (id=1232): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xd0, 0x10, 0x50b, 0x0, 0x0, "", [@generic, @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d282829882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xd0}], 0x1}, 0x0) 8.689133241s ago: executing program 1 (id=1233): openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.285433367s ago: executing program 3 (id=1248): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)={0x1c, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x5}, @typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x2000000000000074, 0x4) 4.236144954s ago: executing program 3 (id=1256): openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.091504796s ago: executing program 3 (id=1257): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a844a0db63175395be37ff4d1a86411304db8a78538a12", 0x17}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x34b2, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 3.91937389s ago: executing program 3 (id=1259): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 3.806983879s ago: executing program 0 (id=1260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) 3.728737966s ago: executing program 0 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r1, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x30}}, 0x0) 3.580014708s ago: executing program 0 (id=1264): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xd8, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d282829882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xd8}], 0x1}, 0x0) 3.529700192s ago: executing program 0 (id=1265): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)={0x1c, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x5}, @typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x2000000000000074, 0x4) 3.319429579s ago: executing program 3 (id=1266): openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.266718113s ago: executing program 3 (id=1267): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4}, {0x2, 0xfffe, @remote}, {0x2, 0xfffd, @multicast1}, 0x8f}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) socket(0x10, 0x3, 0xfffffffc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x10003, {{0x13, 0x4, 0x1, 0x4, 0x4c, 0x65, 0x0, 0xe, 0x2f, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x6}, @lsrr={0x83, 0xb, 0x7b, [@multicast1, @multicast1]}, @rr={0x7, 0x13, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @empty]}, @ssrr={0x89, 0x7, 0x77, [@local]}, @ssrr={0x89, 0xb, 0x7c, [@private, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="82570ee7ff072d2200000e210806000108000604"], 0x120) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x404080d) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 3.046868401s ago: executing program 4 (id=1268): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a844a0db63175395be37ff4d1a86411304db8a78538a12", 0x17}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x34b2, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.857823967s ago: executing program 4 (id=1270): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001040)={0xffffffffffffffff}, 0x106}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r1, 0x0, 0x3, 0x1}}, 0x20) 1.653089725s ago: executing program 2 (id=1274): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xd8, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d282829882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xd8}], 0x1}, 0x0) 1.582860021s ago: executing program 2 (id=1275): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 1.46802304s ago: executing program 0 (id=1276): openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.381636157s ago: executing program 0 (id=1277): syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x37, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a0600000024000100"/316], 0x21c}}, 0x0) 1.076153422s ago: executing program 4 (id=1278): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 956.270582ms ago: executing program 2 (id=1279): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a844a0db63175395be37ff4d1a86411304db8a78538a12", 0x17}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x34b2, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 950.661042ms ago: executing program 2 (id=1280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) socketpair(0x1e, 0x80000, 0x8, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_create(0x3, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045002, &(0x7f0000000400)) read$dsp(r4, &(0x7f0000001500)=""/4096, 0x1000) read$dsp(r4, &(0x7f00000000c0)=""/96, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe) 527.460727ms ago: executing program 4 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 488.80667ms ago: executing program 4 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) 443.086214ms ago: executing program 4 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r1, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x30}}, 0x0) 36.901567ms ago: executing program 2 (id=1284): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xd8, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d282829882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xd8}], 0x1}, 0x0) 0s ago: executing program 2 (id=1285): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)={0x1c, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x5}, @typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x2000000000000074, 0x4) kernel console output (not intermixed with test programs): 8] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.312164][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.325060][ T4708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.328649][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.331373][ T4708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.334102][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.357342][ T4708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.377781][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.381751][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.385368][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.388111][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.422025][ T4708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.429915][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.432538][ T4708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.461110][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.463791][ T4708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.467094][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.484550][ T4708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.488805][ T4708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.492865][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.508217][ T4708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.510544][ T4708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.512900][ T4708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.521665][ T4708] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.566571][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.569289][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.630658][ T4839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.667154][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.669788][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.681806][ T4839] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.685242][ T4664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.687514][ T4664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.692369][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.709926][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.712865][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.720787][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.722838][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.749627][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.752074][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.754870][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.766509][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.768469][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.775131][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.791494][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.802529][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.804807][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.814316][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.821824][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.827875][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.835720][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.847765][ T4839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.855724][ T4839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.865926][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.868750][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.871771][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.885268][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.892514][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.902633][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.931359][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.225929][ T4839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.228900][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.231026][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.298807][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.301476][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.325469][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.328045][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.348718][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.362638][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.379715][ T4839] device veth0_vlan entered promiscuous mode [ 71.393248][ T4839] device veth1_vlan entered promiscuous mode [ 71.437980][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.440528][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.443044][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.456256][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.467655][ T4839] device veth0_macvtap entered promiscuous mode [ 71.482578][ T4839] device veth1_macvtap entered promiscuous mode [ 71.532181][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.536935][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.539609][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.560034][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.584189][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.590719][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.593417][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.614672][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.617367][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.620091][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.641944][ T4839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.660125][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.662739][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.666024][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.673438][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.695080][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.697857][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.700489][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.722273][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.744752][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.747661][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.750220][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.752963][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.770450][ T4839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.787666][ T4839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.795321][ T4839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.855113][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.865424][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.871655][ T4839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.874003][ T4839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.889929][ T4839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.892309][ T4839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.125270][ T4835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.127566][ T4835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.131153][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.150976][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.153243][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.162454][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.228507][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 72.235235][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 72.328565][ T5087] loop4: detected capacity change from 0 to 1024 [ 73.545614][ T5137] netlink: 64 bytes leftover after parsing attributes in process `syz.4.227'. [ 73.563212][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 75.871451][ T27] audit: type=1326 audit(75.830:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 75.900742][ T27] audit: type=1326 audit(75.850:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 75.922929][ T27] audit: type=1326 audit(75.850:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 75.940916][ T27] audit: type=1326 audit(75.850:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 75.959864][ T27] audit: type=1326 audit(75.850:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbcf430e0 code=0x7ffc0000 [ 75.980013][ T27] audit: type=1326 audit(75.850:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 76.000279][ T27] audit: type=1326 audit(75.850:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 76.026161][ T27] audit: type=1326 audit(75.850:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 76.052306][ T27] audit: type=1326 audit(75.880:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 76.069101][ T27] audit: type=1326 audit(75.880:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf449a8 code=0x7ffc0000 [ 76.190330][ T5246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.945503][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.949211][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.952159][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.007454][ T5351] input: syz1 as /devices/virtual/input/input2 [ 84.266375][ T5364] trusted_key: encrypted_key: keylen parameter is missing [ 84.639104][ T5386] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 84.734586][ T5386] batman_adv: batadv0: Adding interface: team0 [ 84.736559][ T5386] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.788804][ T5386] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 84.832796][ T5389] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 88.348693][ T5389] netlink: 2 bytes leftover after parsing attributes in process `syz.2.321'. [ 88.376062][ T5389] device team0 entered promiscuous mode [ 88.378175][ T5389] device team_slave_0 entered promiscuous mode [ 88.380151][ T5389] device team_slave_1 entered promiscuous mode [ 88.392911][ T5389] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.394939][ T5389] batman_adv: batadv0: Interface activated: team0 [ 88.415055][ T5389] batman_adv: batadv0: Interface deactivated: team0 [ 88.416941][ T5389] batman_adv: batadv0: Removing interface: team0 [ 88.470652][ T5389] bridge0: port 3(team0) entered blocking state [ 88.472498][ T5389] bridge0: port 3(team0) entered disabled state [ 88.507389][ T5389] bridge0: port 3(team0) entered blocking state [ 88.509320][ T5389] bridge0: port 3(team0) entered forwarding state [ 88.518464][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 88.520631][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.522693][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.546614][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.548725][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 88.550708][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.552600][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.583947][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.588217][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.597375][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 88.599432][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.601409][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.603299][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 88.641539][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.644528][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.655635][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.658670][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.660858][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.693844][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.702179][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.704402][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.707987][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.710007][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.712005][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.716210][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.718310][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.720231][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.722416][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.725515][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.727516][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.729456][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.731483][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.733485][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.736139][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.738411][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.740427][ T4334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.761213][ T4334] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 90.749877][ T5398] loop4: detected capacity change from 0 to 32768 [ 90.830538][ T5443] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 90.949162][ T5443] batman_adv: batadv0: Adding interface: team0 [ 90.950972][ T5443] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.037893][ T5443] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 91.038210][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 91.086236][ T5444] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 91.088406][ T5444] netlink: 2 bytes leftover after parsing attributes in process `syz.1.338'. [ 91.136764][ T5444] device team0 entered promiscuous mode [ 91.138478][ T5444] device team_slave_0 entered promiscuous mode [ 91.172281][ T5444] device team_slave_1 entered promiscuous mode [ 91.177298][ T5444] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.258687][ T5444] batman_adv: batadv0: Interface activated: team0 [ 91.260735][ T5444] batman_adv: batadv0: Interface deactivated: team0 [ 91.262576][ T5444] batman_adv: batadv0: Removing interface: team0 [ 91.366655][ T5444] bridge0: port 3(team0) entered blocking state [ 91.369097][ T5444] bridge0: port 3(team0) entered disabled state [ 91.373668][ T5444] bridge0: port 3(team0) entered blocking state [ 91.375560][ T5444] bridge0: port 3(team0) entered forwarding state [ 91.477652][ T5452] loop0: detected capacity change from 0 to 1024 [ 91.716697][ T5421] loop2: detected capacity change from 0 to 32768 [ 91.739631][ T4622] hfsplus: b-tree write err: -5, ino 4 [ 91.813457][ T5464] loop1: detected capacity change from 0 to 512 [ 91.840630][ T5421] XFS (loop2): Mounting V5 Filesystem [ 91.916440][ T5464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.933945][ T5421] XFS (loop2): log mount failed [ 92.126171][ T5476] fuse: Unknown parameter '1844674407370955161500000000000000000000' [ 92.797349][ T5474] Bluetooth: MGMT ver 1.22 [ 92.798893][ T5473] loop0: detected capacity change from 0 to 8192 [ 92.851290][ T5473] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.855227][ T5473] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 92.857924][ T5473] REISERFS (device loop0): using ordered data mode [ 92.859671][ T5473] reiserfs: using flush barriers [ 92.865969][ T5473] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.870954][ T5473] REISERFS (device loop0): checking transaction log (loop0) [ 92.877874][ T5473] REISERFS (device loop0): Using r5 hash to sort names [ 92.882525][ T5473] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 92.965444][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 93.100152][ T5458] loop4: detected capacity change from 0 to 32768 [ 93.129032][ T5458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.342 (5458) [ 93.181993][ T5458] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.192404][ T5458] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 93.201419][ T5458] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 93.217885][ T5458] BTRFS info (device loop4): use zstd compression, level 3 [ 93.221790][ T5458] BTRFS info (device loop4): using free space tree [ 93.255052][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.257606][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.378683][ T5458] BTRFS info (device loop4): enabling ssd optimizations [ 93.425182][ T5486] loop1: detected capacity change from 0 to 32768 [ 93.555336][ T4347] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.609193][ T4708] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.966589][ T5529] fuse: Bad value for 'fd' [ 94.794773][ T4347] usb 1-1: Using ep0 maxpacket: 8 [ 94.798378][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.800827][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.893358][ T5539] loop2: detected capacity change from 0 to 8192 [ 94.914966][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.918185][ T4347] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.920664][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.925745][ T5539] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.927316][ T4347] usb 1-1: config 0 descriptor?? [ 94.929326][ T5539] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 94.933601][ T5539] REISERFS (device loop2): using ordered data mode [ 94.953774][ T5539] reiserfs: using flush barriers [ 94.960286][ T5539] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.986774][ T5539] REISERFS (device loop2): checking transaction log (loop2) [ 95.003614][ T5539] REISERFS (device loop2): Using r5 hash to sort names [ 95.012753][ T5539] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 95.202034][ T4347] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.500173][ T5550] loop2: detected capacity change from 0 to 32768 [ 96.526346][ T5567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.533731][ T5567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.985323][ T5575] loop4: detected capacity change from 0 to 8192 [ 96.997065][ T5575] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.000747][ T5575] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 97.003292][ T5575] REISERFS (device loop4): using ordered data mode [ 97.005546][ T5575] reiserfs: using flush barriers [ 97.015058][ T5575] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.026697][ T5575] REISERFS (device loop4): checking transaction log (loop4) [ 97.033114][ T5575] REISERFS (device loop4): Using r5 hash to sort names [ 97.043368][ T5575] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 97.050075][ T5435] Bluetooth: hci6: Frame reassembly failed (-84) [ 97.377776][ T4347] usb 1-1: USB disconnect, device number 4 [ 97.383778][ T4347] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 97.831875][ T5601] futex_wake_op: syz.3.388 tries to shift op by 32; fix this program [ 99.191207][ T4308] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 99.388117][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.397907][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.409944][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.413880][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.724367][ T5617] loop2: detected capacity change from 0 to 32768 [ 99.997233][ T5628] futex_wake_op: syz.1.400 tries to shift op by 32; fix this program [ 100.424182][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.432481][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.111774][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.132409][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.224075][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.228164][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.821301][ T5674] loop2: detected capacity change from 0 to 512 [ 103.248957][ T5702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.253753][ T5702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.300853][ T5696] binder: 5694:5696 got transaction to invalid handle, 1 [ 103.305331][ T5696] binder: 5696:5694 cannot find target node [ 103.309967][ T5696] binder: 5694:5696 transaction async to 0:0 failed 4/29201/-22, size 0-0 line 3056 [ 103.316662][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.748666][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.984789][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 104.105102][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.114769][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.117444][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.126525][ T14] usb 1-1: config 0 descriptor?? [ 104.259755][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.265553][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.351478][ T5733] loop2: detected capacity change from 0 to 512 [ 104.370056][ T5733] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.392386][ T5733] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 104.411594][ T5733] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.438: inode #15: comm syz.2.438: iget: illegal inode # [ 104.423926][ T14] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.443876][ T5733] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.438: couldn't read orphan inode 15 (err -117) [ 104.680117][ T5733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.235660][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.238124][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.192330][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 106.391510][ T5764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.448'. [ 106.425949][ T4346] usb 1-1: USB disconnect, device number 5 [ 106.432478][ T4346] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 107.678981][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.690003][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.771272][ T5783] loop0: detected capacity change from 0 to 2364 [ 107.848537][ T5506] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.951504][ T5789] loop2: detected capacity change from 0 to 1024 [ 107.964198][ T5789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.999368][ T5789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.079509][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 108.266360][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.289429][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.471754][ T5834] loop4: detected capacity change from 0 to 512 [ 109.474017][ T5834] EXT4-fs: Ignoring removed orlov option [ 109.510403][ T5834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.523290][ T5834] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.577019][ T5834] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.474: bg 0: block 248: padding at end of block bitmap is not set [ 109.608591][ T5834] __quota_error: 4 callbacks suppressed [ 109.608607][ T5834] Quota error (device loop4): write_blk: dquota write failed [ 109.612360][ T5834] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 109.632677][ T5834] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.474: Failed to acquire dquot type 1 [ 109.654019][ T5834] EXT4-fs (loop4): 1 truncate cleaned up [ 109.681859][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.711542][ T5834] EXT4-fs: Ignoring removed orlov option [ 109.713523][ T5834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.728340][ T5834] EXT4-fs error (device loop4): __ext4_remount:6425: comm syz.4.474: Abort forced by user [ 109.792725][ T4708] EXT4-fs (loop4): unmounting filesystem. [ 110.260777][ T4346] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.524842][ T4346] usb 1-1: Using ep0 maxpacket: 8 [ 110.683108][ T4346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.745797][ T4346] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.837140][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.067704][ T4346] usb 1-1: config 0 descriptor?? [ 111.328449][ T4346] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.578686][ T4346] usb 1-1: USB disconnect, device number 6 [ 112.581607][ T4346] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 113.858639][ T5917] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 115.111509][ T5926] loop4: detected capacity change from 0 to 32768 [ 115.327924][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.341808][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.965304][ T5976] loop0: detected capacity change from 0 to 32768 [ 117.187353][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.189976][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.326630][ T5994] loop4: detected capacity change from 0 to 8192 [ 117.344850][ T5994] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.349771][ T5994] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 117.352344][ T5994] REISERFS (device loop4): using ordered data mode [ 117.354072][ T5994] reiserfs: using flush barriers [ 117.380093][ T5994] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.403343][ T5994] REISERFS (device loop4): checking transaction log (loop4) [ 117.419410][ T5994] REISERFS (device loop4): Using r5 hash to sort names [ 117.429567][ T5994] REISERFS (device loop4): using 3.5.x disk format [ 117.438014][ T5994] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 117.668339][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 117.704596][ T6014] team1: Mode changed to "activebackup" [ 118.066960][ T6035] netlink: 68 bytes leftover after parsing attributes in process `syz.3.551'. [ 118.367527][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.377924][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.568673][ T6057] loop2: detected capacity change from 0 to 8192 [ 118.596458][ T6057] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.601510][ T6057] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 118.614532][ T6057] REISERFS (device loop2): using ordered data mode [ 118.616617][ T6057] reiserfs: using flush barriers [ 118.627565][ T6057] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.632910][ T6057] REISERFS (device loop2): checking transaction log (loop2) [ 118.649593][ T6057] REISERFS (device loop2): Using r5 hash to sort names [ 118.651615][ T6057] REISERFS (device loop2): using 3.5.x disk format [ 118.653819][ T6057] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 118.957822][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 119.515648][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.518196][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.139940][ T6150] capability: warning: `syz.2.601' uses deprecated v2 capabilities in a way that may be insecure [ 120.237041][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.239490][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.451234][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'. [ 120.464392][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.484069][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.857630][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 121.074918][ T4352] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.166782][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.171717][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.547303][ T6224] team0: Device ip6_vti0 is of different type [ 121.573024][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.581323][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.595734][ T4352] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 121.598392][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.605607][ T4352] usb 1-1: Product: syz [ 121.606756][ T4352] usb 1-1: Manufacturer: syz [ 121.607904][ T4352] usb 1-1: SerialNumber: syz [ 121.615852][ T4352] usb 1-1: config 0 descriptor?? [ 121.691941][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.694341][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.340433][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.356520][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.357056][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.361234][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.558238][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.563261][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.779388][ T4352] usb 1-1: Firmware version (0.0) predates our first public release. [ 122.781718][ T4352] usb 1-1: Please update to version 0.2 or newer [ 122.852509][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.856788][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.881696][ T4352] usb 1-1: USB disconnect, device number 7 [ 123.944911][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.283588][ T6347] loop4: detected capacity change from 0 to 512 [ 124.306726][ T6347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.321989][ T6347] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.328706][ T6347] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.687: bg 0: block 248: padding at end of block bitmap is not set [ 124.333126][ T6347] Quota error (device loop4): write_blk: dquota write failed [ 124.335407][ T6347] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 124.338088][ T6347] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.687: Failed to acquire dquot type 1 [ 124.343538][ T6347] EXT4-fs (loop4): 1 truncate cleaned up [ 124.345992][ T6347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.464840][ T14] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 124.467519][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.470586][ T14] usb 1-1: Product: syz [ 124.472785][ T14] usb 1-1: Manufacturer: syz [ 124.475125][ T14] usb 1-1: SerialNumber: syz [ 124.487205][ T14] usb 1-1: config 0 descriptor?? [ 124.491526][ T4708] EXT4-fs (loop4): unmounting filesystem. [ 124.826636][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.836723][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.409206][ T6392] loop1: detected capacity change from 0 to 512 [ 125.412548][ T6392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.424196][ T6392] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.428793][ T6392] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.702: bg 0: block 248: padding at end of block bitmap is not set [ 125.432962][ T6392] Quota error (device loop1): write_blk: dquota write failed [ 125.439881][ T6392] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 125.443033][ T6392] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.702: Failed to acquire dquot type 1 [ 125.468493][ T6392] EXT4-fs (loop1): 1 truncate cleaned up [ 125.470929][ T6392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.520939][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 125.645138][ T14] usb 1-1: Firmware version (0.0) predates our first public release. [ 125.647373][ T14] usb 1-1: Please update to version 0.2 or newer [ 125.889859][ T14] usb 1-1: USB disconnect, device number 8 [ 125.946171][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.948632][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.990555][ T6419] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.309848][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.323931][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.480985][ T6428] loop0: detected capacity change from 0 to 8192 [ 126.524911][ T6428] loop0: p1 p2 p3 p4 [ 126.524911][ T6428] p4: [ 126.527439][ T6428] loop0: partition table partially beyond EOD, truncated [ 126.529515][ T6428] loop0: p1 start 17825536 is beyond EOD, truncated [ 126.540329][ T6428] loop0: p2 size 64053 extends beyond EOD, truncated [ 126.558601][ T6428] loop0: p3 start 458496 is beyond EOD, truncated [ 126.567881][ T6428] loop0: p4 size 50331904 extends beyond EOD, truncated [ 126.599995][ T6428] loop0: p5 start 17825536 is beyond EOD, truncated [ 126.615300][ T6428] loop0: p6 size 64053 extends beyond EOD, truncated [ 126.618987][ T6428] loop0: p7 size 50331904 extends beyond EOD, truncated [ 127.309079][ T6439] loop2: detected capacity change from 0 to 32768 [ 127.363674][ T6439] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 127.363674][ T6439] [ 127.381375][ T6439] ERROR: (device loop2): remounting filesystem as read-only [ 127.387942][ T6439] read_mapping_page failed! [ 127.393730][ T6439] bread failed! [ 127.450894][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.471481][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.984075][ T6473] loop1: detected capacity change from 0 to 512 [ 128.002937][ T6473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.038728][ T6473] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.048112][ T6473] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.731: bg 0: block 248: padding at end of block bitmap is not set [ 128.052510][ T6473] Quota error (device loop1): write_blk: dquota write failed [ 128.062473][ T6473] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 128.072597][ T6473] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.731: Failed to acquire dquot type 1 [ 128.078789][ T6473] EXT4-fs (loop1): 1 truncate cleaned up [ 128.083216][ T6473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.134735][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.374855][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 128.387228][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 128.409253][ T6491] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 128.471172][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 128.494844][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.502362][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.515465][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.533174][ T14] usb 1-1: config 0 descriptor?? [ 128.578134][ T6493] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 130.497690][ T6527] loop1: detected capacity change from 0 to 32768 [ 130.521725][ T6527] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 130.521725][ T6527] [ 130.534991][ T6527] ERROR: (device loop1): remounting filesystem as read-only [ 130.537597][ T6527] read_mapping_page failed! [ 130.539164][ T6527] bread failed! [ 130.932748][ T14] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 130.941685][ T14] usb 1-1: USB disconnect, device number 9 [ 130.944748][ T14] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 131.704905][ T4298] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 131.707370][ T4298] Bluetooth: hci2: Injecting HCI hardware error event [ 131.710961][ T4308] Bluetooth: hci2: hardware error 0x00 [ 131.930774][ T6563] loop1: detected capacity change from 0 to 512 [ 131.992974][ T6563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.045953][ T6563] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.071667][ T6563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.763: bg 0: block 248: padding at end of block bitmap is not set [ 132.117628][ T6563] Quota error (device loop1): write_blk: dquota write failed [ 132.119718][ T6563] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 132.152781][ T6563] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.763: Failed to acquire dquot type 1 [ 132.156407][ T6567] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.201057][ T6563] EXT4-fs (loop1): 1 truncate cleaned up [ 132.215242][ T6563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.359331][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 132.521824][ T6560] loop4: detected capacity change from 0 to 32768 [ 132.585589][ T6560] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 132.585589][ T6560] [ 132.589685][ T6560] ERROR: (device loop4): remounting filesystem as read-only [ 132.594258][ T6560] read_mapping_page failed! [ 132.595969][ T6560] bread failed! [ 133.346242][ T6598] loop2: detected capacity change from 0 to 512 [ 133.389666][ T6598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.052466][ T4298] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 134.057409][ T4298] Bluetooth: hci3: Injecting HCI hardware error event [ 134.061033][ T4302] Bluetooth: hci3: hardware error 0x00 [ 134.160984][ T6598] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.163860][ T6598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.777: bg 0: block 248: padding at end of block bitmap is not set [ 134.175752][ T6598] Quota error (device loop2): write_blk: dquota write failed [ 134.177868][ T6598] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 134.185212][ T4308] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.210755][ T6598] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.777: Failed to acquire dquot type 1 [ 134.290356][ T6598] EXT4-fs (loop2): 1 truncate cleaned up [ 134.328431][ T6598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.531905][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 134.784736][ T4088] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.819596][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.823465][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.874023][ T6620] loop1: detected capacity change from 0 to 32768 [ 134.892266][ T6620] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 134.892266][ T6620] [ 134.897351][ T6620] ERROR: (device loop1): remounting filesystem as read-only [ 134.900434][ T6620] read_mapping_page failed! [ 134.901660][ T6620] bread failed! [ 134.984802][ T4088] usb 1-1: device descriptor read/64, error -71 [ 135.254947][ T4088] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.945851][ T4308] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 135.948949][ T4308] Bluetooth: hci1: Injecting HCI hardware error event [ 135.963677][ T4307] Bluetooth: hci1: hardware error 0x00 [ 136.237930][ T6650] loop4: detected capacity change from 0 to 512 [ 136.244768][ T4088] usb 1-1: device descriptor read/64, error -71 [ 136.325867][ T6650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.366620][ T6650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.369685][ T6650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.794: bg 0: block 248: padding at end of block bitmap is not set [ 136.379961][ T6650] Quota error (device loop4): write_blk: dquota write failed [ 136.382019][ T6650] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 136.403209][ T6650] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.794: Failed to acquire dquot type 1 [ 136.409001][ T4088] usb usb1-port1: attempt power cycle [ 136.421908][ T6650] EXT4-fs (loop4): 1 truncate cleaned up [ 136.455216][ T6650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.505168][ T4302] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 136.590868][ T4708] EXT4-fs (loop4): unmounting filesystem. [ 136.767276][ T6669] loop1: detected capacity change from 0 to 512 [ 136.773759][ T6669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.788999][ T6669] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.793036][ T6669] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.800: bg 0: block 248: padding at end of block bitmap is not set [ 136.797604][ T6669] Quota error (device loop1): write_blk: dquota write failed [ 136.799649][ T6669] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 136.802201][ T6669] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.800: Failed to acquire dquot type 1 [ 136.821837][ T6669] EXT4-fs (loop1): 1 truncate cleaned up [ 136.832912][ T6669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.835868][ T4088] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.944800][ T4088] usb 1-1: device descriptor read/8, error -71 [ 136.972729][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 136.973520][ T6673] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 137.220822][ T4088] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 137.254229][ T6667] loop2: detected capacity change from 0 to 32768 [ 137.294113][ T6667] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 137.294113][ T6667] [ 137.314880][ T4088] usb 1-1: device descriptor read/8, error -71 [ 137.321653][ T6667] ERROR: (device loop2): remounting filesystem as read-only [ 137.323734][ T6667] read_mapping_page failed! [ 137.328158][ T6667] bread failed! [ 137.441221][ T4088] usb usb1-port1: unable to enumerate USB device [ 137.651218][ T6690] loop4: detected capacity change from 0 to 512 [ 137.697580][ T6690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.741881][ T6690] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.762557][ T6690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.809: bg 0: block 248: padding at end of block bitmap is not set [ 137.787760][ T6690] Quota error (device loop4): write_blk: dquota write failed [ 137.789815][ T6690] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 137.814821][ T6690] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.809: Failed to acquire dquot type 1 [ 138.012963][ T6690] EXT4-fs (loop4): 1 truncate cleaned up [ 138.293383][ T6690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.577841][ T6703] loop2: detected capacity change from 0 to 512 [ 138.580954][ T6703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.584844][ T4307] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 138.603228][ T6703] EXT4-fs (loop2): orphan cleanup on readonly fs [ 138.629112][ T6703] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.811: bg 0: block 248: padding at end of block bitmap is not set [ 138.644563][ T4708] EXT4-fs (loop4): unmounting filesystem. [ 138.690493][ T6703] Quota error (device loop2): write_blk: dquota write failed [ 138.692514][ T6703] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 138.723655][ T6703] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.811: Failed to acquire dquot type 1 [ 138.741974][ T6703] EXT4-fs (loop2): 1 truncate cleaned up [ 138.757574][ T6703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.962842][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 140.087025][ T6715] loop4: detected capacity change from 0 to 32768 [ 140.113018][ T6715] read_mapping_page failed! [ 140.114345][ T6715] bread failed! [ 140.115547][ T6715] jfs_create: dtInsert returned -EIO [ 140.116975][ T6715] ERROR: (device loop4): txAbort: [ 140.116975][ T6715] [ 140.130547][ T6715] ERROR: (device loop4): remounting filesystem as read-only [ 140.184897][ T4307] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 140.187436][ T4307] Bluetooth: hci5: Injecting HCI hardware error event [ 140.190919][ T4302] Bluetooth: hci5: hardware error 0x00 [ 140.214906][ T4346] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.408280][ T4346] usb 1-1: device descriptor read/64, error -71 [ 140.695067][ T4346] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.884937][ T4346] usb 1-1: device descriptor read/64, error -71 [ 141.004969][ T4346] usb usb1-port1: attempt power cycle [ 141.306330][ T6753] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 141.524797][ T4346] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 141.734914][ T4346] usb 1-1: device descriptor read/8, error -71 [ 142.004818][ T4346] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 142.094782][ T4346] usb 1-1: device descriptor read/8, error -71 [ 142.215446][ T4346] usb usb1-port1: unable to enumerate USB device [ 142.504849][ T4302] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 143.827311][ T4307] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.831698][ T4308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.835229][ T4308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.838387][ T4307] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.840878][ T4307] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.846176][ T4308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.940870][ T6798] input: syz1 as /devices/virtual/input/input4 [ 144.509479][ T6808] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 144.640704][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.645276][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.779207][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.946580][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.952570][ T6788] chnl_net:caif_netlink_parms(): no params data found [ 145.089561][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.267597][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.283591][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.286762][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.289553][ T6788] device bridge_slave_0 entered promiscuous mode [ 145.920925][ T4307] Bluetooth: hci6: command tx timeout [ 146.274652][ C1] sched: RT throttling activated [ 146.286337][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.288334][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.290968][ T6788] device bridge_slave_1 entered promiscuous mode [ 146.355782][ T6842] input: syz1 as /devices/virtual/input/input5 [ 146.405172][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.426100][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.516169][ T6788] team0: Port device team_slave_0 added [ 146.521088][ T6788] team0: Port device team_slave_1 added [ 146.562263][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.564199][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.583739][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.588156][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.589990][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.614752][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.717686][ T6788] device hsr_slave_0 entered promiscuous mode [ 146.768236][ T6788] device hsr_slave_1 entered promiscuous mode [ 146.782171][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.789278][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.808028][ T6788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.810161][ T6788] Cannot create hsr debugfs directory [ 147.832534][ T6876] input: syz1 as /devices/virtual/input/input6 [ 148.264793][ T4307] Bluetooth: hci6: command tx timeout [ 149.030464][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.032838][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.119978][ T6911] loop2: detected capacity change from 0 to 1024 [ 149.155724][ T6911] FAULT_INJECTION: forcing a failure. [ 149.155724][ T6911] name failslab, interval 1, probability 0, space 0, times 1 [ 149.174833][ T6911] CPU: 1 PID: 6911 Comm: syz.2.876 Not tainted 6.1.102-syzkaller #0 [ 149.177060][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 149.179666][ T6911] Call trace: [ 149.180564][ T6911] dump_backtrace+0x1c8/0x1f4 [ 149.181788][ T6911] show_stack+0x2c/0x3c [ 149.182834][ T6911] dump_stack_lvl+0x108/0x170 [ 149.184076][ T6911] dump_stack+0x1c/0x5c [ 149.185182][ T6911] should_fail_ex+0x3c0/0x51c [ 149.186495][ T6911] __should_failslab+0xc8/0x128 [ 149.187817][ T6911] should_failslab+0x10/0x28 [ 149.189076][ T6911] __kmem_cache_alloc_node+0x80/0x388 [ 149.190562][ T6911] __kmalloc+0xc4/0x1c4 [ 149.191672][ T6911] __hfs_bnode_create+0xe4/0x6d4 [ 149.193055][ T6911] hfsplus_bnode_find+0x200/0xedc [ 149.194472][ T6911] hfsplus_brec_find+0x134/0x4a0 [ 149.195809][ T6911] hfsplus_find_attr+0x1e0/0x33c [ 149.197123][ T6911] __hfsplus_getxattr+0x2b8/0x870 [ 149.198487][ T6911] hfsplus_getxattr+0xac/0xe4 [ 149.199727][ T6911] hfsplus_security_getxattr+0x48/0x5c [ 149.201222][ T6911] __vfs_getxattr+0x34c/0x368 [ 149.202544][ T6911] cap_inode_need_killpriv+0x50/0x78 [ 149.203975][ T6911] security_inode_need_killpriv+0x6c/0xa4 [ 149.205561][ T6911] __file_remove_privs+0x1c4/0x52c [ 149.206943][ T6911] file_remove_privs+0x24/0x34 [ 149.208180][ T6911] __generic_file_write_iter+0xbc/0x388 [ 149.209730][ T6911] generic_file_write_iter+0xb8/0x2b4 [ 149.211249][ T6911] vfs_write+0x610/0x91c [ 149.212397][ T6911] __arm64_sys_pwrite64+0x188/0x220 [ 149.213834][ T6911] invoke_syscall+0x98/0x2c0 [ 149.215097][ T6911] el0_svc_common+0x138/0x258 [ 149.216366][ T6911] do_el0_svc+0x64/0x218 [ 149.217574][ T6911] el0_svc+0x58/0x168 [ 149.218672][ T6911] el0t_64_sync_handler+0x84/0xf0 [ 149.220069][ T6911] el0t_64_sync+0x18c/0x190 [ 149.234322][ T6911] hfsplus: xattr searching failed [ 149.262201][ T6788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.296492][ T6788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.348581][ T6918] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 149.378511][ T6788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.474099][ T6788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.746478][ T6929] input: syz1 as /devices/virtual/input/input7 [ 150.354885][ T4302] Bluetooth: hci6: command tx timeout [ 150.531788][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.594178][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.605228][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.607723][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.615398][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.622581][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.625270][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.627205][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.655477][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.658123][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.660634][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.690762][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.692766][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.702481][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.705977][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.708809][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.712170][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.819778][ T6945] FAULT_INJECTION: forcing a failure. [ 150.819778][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 150.836163][ T6945] CPU: 0 PID: 6945 Comm: syz.4.886 Not tainted 6.1.102-syzkaller #0 [ 150.838431][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 150.841130][ T6945] Call trace: [ 150.841992][ T6945] dump_backtrace+0x1c8/0x1f4 [ 150.843249][ T6945] show_stack+0x2c/0x3c [ 150.844404][ T6945] dump_stack_lvl+0x108/0x170 [ 150.845668][ T6945] dump_stack+0x1c/0x5c [ 150.846853][ T6945] should_fail_ex+0x3c0/0x51c [ 150.848120][ T6945] __should_failslab+0xc8/0x128 [ 150.849415][ T6945] should_failslab+0x10/0x28 [ 150.850713][ T6945] kmem_cache_alloc+0x8c/0x37c [ 150.851997][ T6945] skb_clone+0x19c/0x304 [ 150.853169][ T6945] __netlink_deliver_tap+0x364/0x6e4 [ 150.854547][ T6945] netlink_deliver_tap+0x1ac/0x1b0 [ 150.855919][ T6945] netlink_unicast+0x640/0x898 [ 150.857225][ T6945] netlink_sendmsg+0x834/0xb18 [ 150.858494][ T6945] ____sys_sendmsg+0x55c/0x848 [ 150.859766][ T6945] __sys_sendmsg+0x26c/0x33c [ 150.861063][ T6945] __arm64_sys_sendmsg+0x80/0x94 [ 150.862547][ T6945] invoke_syscall+0x98/0x2c0 [ 150.863817][ T6945] el0_svc_common+0x138/0x258 [ 150.865088][ T6945] do_el0_svc+0x64/0x218 [ 150.866274][ T6945] el0_svc+0x58/0x168 [ 150.867348][ T6945] el0t_64_sync_handler+0x84/0xf0 [ 150.868676][ T6945] el0t_64_sync+0x18c/0x190 [ 150.895225][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.897737][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.109748][ T6951] loop0: detected capacity change from 0 to 512 [ 151.119342][ T6951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.128076][ T6951] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.130895][ T6951] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.889: bg 0: block 248: padding at end of block bitmap is not set [ 151.136460][ T6951] Quota error (device loop0): write_blk: dquota write failed [ 151.138501][ T6951] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 151.141333][ T6951] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.889: Failed to acquire dquot type 1 [ 151.155559][ T6951] EXT4-fs (loop0): 1 truncate cleaned up [ 151.156707][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.159546][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.162317][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.163266][ T6951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.166366][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.170081][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.180415][ T6788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.184292][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.339608][ T4297] EXT4-fs (loop0): unmounting filesystem. [ 151.379553][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.384952][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.422207][ T6962] input: syz1 as /devices/virtual/input/input8 [ 152.190594][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.193077][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.377108][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.384355][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.392350][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.425067][ T4302] Bluetooth: hci6: command tx timeout [ 152.444363][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.448350][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.542031][ T9] device hsr_slave_0 left promiscuous mode [ 152.587169][ T9] device hsr_slave_1 left promiscuous mode [ 152.651548][ T6988] loop2: detected capacity change from 0 to 1024 [ 152.674792][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.676904][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.686446][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.688497][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.703014][ T6988] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 152.703630][ T9] bridge0: port 3(team0) entered disabled state [ 152.758187][ T6988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.902'. [ 152.795933][ T6993] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.819748][ T9] device bridge_slave_1 left promiscuous mode [ 152.823696][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.750665][ T9] device bridge_slave_0 left promiscuous mode [ 153.752466][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.995041][ T9] device veth1_macvtap left promiscuous mode [ 153.996792][ T9] device veth0_macvtap left promiscuous mode [ 153.998503][ T9] device veth1_vlan left promiscuous mode [ 154.000090][ T9] device veth0_vlan left promiscuous mode [ 154.073224][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.075745][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.365624][ T7051] loop0: detected capacity change from 0 to 512 [ 155.379796][ T7051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.393659][ T7051] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.402789][ T7051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.928: bg 0: block 248: padding at end of block bitmap is not set [ 155.407447][ T7051] Quota error (device loop0): write_blk: dquota write failed [ 155.409470][ T7051] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 155.412090][ T7051] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.928: Failed to acquire dquot type 1 [ 155.417819][ T7051] EXT4-fs (loop0): 1 truncate cleaned up [ 155.455694][ T7051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.536365][ T4297] EXT4-fs (loop0): unmounting filesystem. [ 155.747399][ T7066] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 156.101748][ T7074] loop4: detected capacity change from 0 to 512 [ 156.119925][ T7074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.148987][ T7074] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.153545][ T7074] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.938: bg 0: block 248: padding at end of block bitmap is not set [ 156.171914][ T7074] Quota error (device loop4): write_blk: dquota write failed [ 156.173991][ T7074] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 156.181364][ T7074] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.938: Failed to acquire dquot type 1 [ 156.189192][ T7074] EXT4-fs (loop4): 1 truncate cleaned up [ 156.191268][ T7074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.203547][ T7068] loop0: detected capacity change from 0 to 32768 [ 156.243246][ T7068] XFS (loop0): Mounting V5 Filesystem [ 156.251808][ T4708] EXT4-fs (loop4): unmounting filesystem. [ 156.335189][ T7068] XFS (loop0): Ending clean mount [ 156.352801][ T7068] XFS (loop0): Quotacheck needed: Please wait. [ 156.418364][ T7068] XFS (loop0): Quotacheck: Done. [ 156.580554][ T7068] XFS (loop0): User initiated shutdown received. [ 156.582577][ T7068] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x124/0x15c (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 156.586748][ T7068] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 156.592414][ T7092] FAULT_INJECTION: forcing a failure. [ 156.592414][ T7092] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.600907][ T7092] CPU: 0 PID: 7092 Comm: syz.0.934 Not tainted 6.1.102-syzkaller #0 [ 156.603032][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 156.605659][ T7092] Call trace: [ 156.606523][ T7092] dump_backtrace+0x1c8/0x1f4 [ 156.607782][ T7092] show_stack+0x2c/0x3c [ 156.608907][ T7092] dump_stack_lvl+0x108/0x170 [ 156.610136][ T7092] dump_stack+0x1c/0x5c [ 156.611285][ T7092] should_fail_ex+0x3c0/0x51c [ 156.612586][ T7092] should_fail+0x14/0x24 [ 156.613696][ T7092] should_fail_usercopy+0x20/0x30 [ 156.615063][ T7092] simple_read_from_buffer+0xd4/0x248 [ 156.616527][ T7092] proc_fail_nth_read+0x198/0x234 [ 156.617848][ T7092] vfs_read+0x280/0x8b4 [ 156.618927][ T7092] ksys_read+0x15c/0x26c [ 156.620066][ T7092] __arm64_sys_read+0x7c/0x90 [ 156.621330][ T7092] invoke_syscall+0x98/0x2c0 [ 156.622619][ T7092] el0_svc_common+0x138/0x258 [ 156.623901][ T7092] do_el0_svc+0x64/0x218 [ 156.625034][ T7092] el0_svc+0x58/0x168 [ 156.626133][ T7092] el0t_64_sync_handler+0x84/0xf0 [ 156.627457][ T7092] el0t_64_sync+0x18c/0x190 [ 156.657078][ T7098] loop4: detected capacity change from 0 to 2048 [ 156.663803][ T4297] XFS (loop0): Unmounting Filesystem [ 156.735616][ T7099] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.797127][ T7098] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 156.803259][ T7098] Remounting filesystem read-only [ 156.805496][ T7098] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 156.847687][ T4708] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 156.850705][ T4708] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 156.852606][ T4708] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 156.854475][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.857597][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.859881][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.862410][ T4708] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 156.864161][ T4708] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 156.866277][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.868651][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.870963][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.873986][ T4708] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 156.882908][ T4708] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 156.884983][ T4708] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 156.886940][ T4708] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 156.888861][ T4708] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 156.890871][ T4708] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 156.892651][ T4708] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 156.894537][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.896968][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.899351][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.903327][ T4708] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 156.905803][ T4708] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 156.907779][ T4708] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 156.909704][ T4708] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 156.912345][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.914766][ T4708] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 156.916608][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.918854][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.921166][ T4708] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 156.923145][ T4708] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.395666][ T7110] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.525127][ T9] device team_slave_1 left promiscuous mode [ 157.536514][ T9] team0 (unregistering): Port device team_slave_1 removed [ 157.765661][ T9] device team_slave_0 left promiscuous mode [ 157.770017][ T9] team0 (unregistering): Port device team_slave_0 removed [ 158.007933][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.014461][ T7124] loop0: detected capacity change from 0 to 2048 [ 158.052956][ T7125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.060160][ T7124] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 158.070507][ T7124] Remounting filesystem read-only [ 158.072036][ T7124] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 158.089466][ T4297] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 158.091888][ T4297] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 158.093718][ T4297] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 158.101162][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.103582][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.106243][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.108855][ T4297] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 158.110665][ T4297] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 158.112584][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.115066][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.117442][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.120079][ T4297] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 158.121904][ T4297] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 158.123828][ T4297] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 158.125875][ T4297] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 158.127801][ T4297] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 158.129742][ T4297] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 158.131756][ T4297] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 158.133649][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.136316][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.138621][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.142549][ T4297] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 158.145080][ T4297] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 158.147050][ T4297] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 158.149082][ T4297] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 158.151111][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.153548][ T4297] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 158.155578][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.157990][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.160416][ T4297] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 158.162453][ T4297] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.227140][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.234572][ T7129] loop0: detected capacity change from 0 to 512 [ 158.245781][ T7129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.249904][ T7129] EXT4-fs (loop0): orphan cleanup on readonly fs [ 158.253984][ T7129] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.957: bg 0: block 248: padding at end of block bitmap is not set [ 158.266038][ T7129] Quota error (device loop0): write_blk: dquota write failed [ 158.268115][ T7129] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 158.270763][ T7129] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.957: Failed to acquire dquot type 1 [ 158.274579][ T7129] EXT4-fs (loop0): 1 truncate cleaned up [ 158.284272][ T7129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.314281][ T4297] EXT4-fs (loop0): unmounting filesystem. [ 158.744801][ T4302] Bluetooth: hci4: command 0x0406 tx timeout [ 159.057958][ T7142] loop0: detected capacity change from 0 to 2048 [ 159.084948][ T7142] FAULT_INJECTION: forcing a failure. [ 159.084948][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 159.088317][ T7142] CPU: 1 PID: 7142 Comm: syz.0.963 Not tainted 6.1.102-syzkaller #0 [ 159.090484][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.093083][ T7142] Call trace: [ 159.093320][ T7143] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.093926][ T7142] dump_backtrace+0x1c8/0x1f4 [ 159.098082][ T7142] show_stack+0x2c/0x3c [ 159.099213][ T7142] dump_stack_lvl+0x108/0x170 [ 159.100421][ T7142] dump_stack+0x1c/0x5c [ 159.101546][ T7142] should_fail_ex+0x3c0/0x51c [ 159.102822][ T7142] __should_failslab+0xc8/0x128 [ 159.104159][ T7142] should_failslab+0x10/0x28 [ 159.105399][ T7142] kmem_cache_alloc+0x8c/0x37c [ 159.106677][ T7142] getname_flags+0xd0/0x48c [ 159.107888][ T7142] __arm64_sys_renameat2+0xb4/0xfc [ 159.109311][ T7142] invoke_syscall+0x98/0x2c0 [ 159.110555][ T7142] el0_svc_common+0x138/0x258 [ 159.111822][ T7142] do_el0_svc+0x64/0x218 [ 159.112991][ T7142] el0_svc+0x58/0x168 [ 159.114036][ T7142] el0t_64_sync_handler+0x84/0xf0 [ 159.115403][ T7142] el0t_64_sync+0x18c/0x190 [ 160.719037][ T9] bond0 (unregistering): Released all slaves [ 160.788780][ T7160] loop0: detected capacity change from 0 to 512 [ 160.792177][ T7160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.796505][ T7160] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.800317][ T7160] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.970: bg 0: block 248: padding at end of block bitmap is not set [ 160.812261][ T7160] Quota error (device loop0): write_blk: dquota write failed [ 160.814548][ T7160] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 160.817909][ T7160] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.970: Failed to acquire dquot type 1 [ 160.821837][ T7160] EXT4-fs (loop0): 1 truncate cleaned up [ 160.823925][ T7160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 160.851199][ T4297] EXT4-fs (loop0): unmounting filesystem. [ 160.984233][ T6788] device veth0_vlan entered promiscuous mode [ 161.003063][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.005863][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.012993][ T6788] device veth1_vlan entered promiscuous mode [ 161.035589][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.039089][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.041555][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.061917][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.064596][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.068548][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.088899][ T6788] device veth0_macvtap entered promiscuous mode [ 161.093865][ T6788] device veth1_macvtap entered promiscuous mode [ 161.131768][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.134528][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.160979][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.163842][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.169174][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.181047][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.183725][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.209782][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.231669][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.234580][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.252543][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.261379][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.264048][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.267551][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.272722][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.286659][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.289425][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.291958][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.306777][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.320215][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.324983][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.327786][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.330566][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.333147][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.355596][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.365803][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.368971][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.371763][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.401820][ T6788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.407874][ T6788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.410275][ T6788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.412582][ T6788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.709826][ T7189] FAULT_INJECTION: forcing a failure. [ 161.709826][ T7189] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 161.714033][ T7189] CPU: 0 PID: 7189 Comm: syz.0.982 Not tainted 6.1.102-syzkaller #0 [ 161.716190][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 161.718963][ T7189] Call trace: [ 161.719833][ T7189] dump_backtrace+0x1c8/0x1f4 [ 161.721099][ T7189] show_stack+0x2c/0x3c [ 161.722244][ T7189] dump_stack_lvl+0x108/0x170 [ 161.723181][ T5480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.723540][ T7189] dump_stack+0x1c/0x5c [ 161.727019][ T7189] should_fail_ex+0x3c0/0x51c [ 161.727383][ T5480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.728321][ T7189] should_fail_alloc_page+0x74/0xb8 [ 161.728342][ T7189] prepare_alloc_pages+0x1c0/0x508 [ 161.733013][ T7189] __alloc_pages+0x150/0x730 [ 161.733349][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.734275][ T7189] __folio_alloc+0x1c/0x48 [ 161.734294][ T7189] vma_alloc_folio+0x394/0x8d8 [ 161.738730][ T7189] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 161.740385][ T7189] handle_mm_fault+0x1e44/0x3ef0 [ 161.741724][ T7189] do_page_fault+0x330/0x890 [ 161.742963][ T7189] do_translation_fault+0x94/0xc8 [ 161.744350][ T7189] do_mem_abort+0x74/0x200 [ 161.745614][ T7189] el0_da+0x70/0x184 [ 161.746659][ T7189] el0t_64_sync_handler+0xcc/0xf0 [ 161.747989][ T7189] el0t_64_sync+0x18c/0x190 [ 161.754491][ T7189] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 161.758184][ T7189] loop0: detected capacity change from 0 to 8 [ 161.794144][ T7189] SQUASHFS error: zlib decompression failed, data probably corrupt [ 161.800596][ T4622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.803084][ T4622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.810033][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.812437][ T7189] SQUASHFS error: Failed to read block 0x9b: -5 [ 161.821504][ T7189] SQUASHFS error: Unable to read metadata cache entry [99] [ 161.823525][ T7189] SQUASHFS error: Unable to read inode 0x127 [ 162.196927][ T7199] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.813207][ T7195] loop1: detected capacity change from 0 to 32768 [ 162.902783][ T7195] read_mapping_page failed! [ 162.904063][ T7195] bread failed! [ 162.921130][ T7195] jfs_create: dtInsert returned -EIO [ 162.927352][ T7195] ERROR: (device loop1): txAbort: [ 162.927352][ T7195] [ 162.942401][ T7195] ERROR: (device loop1): remounting filesystem as read-only [ 163.164297][ T7214] loop4: detected capacity change from 0 to 512 [ 163.194202][ T7214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.203719][ T7214] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.223577][ T7214] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.991: bg 0: block 248: padding at end of block bitmap is not set [ 163.229915][ T7214] Quota error (device loop4): write_blk: dquota write failed [ 163.232005][ T7214] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 163.244756][ T7214] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.991: Failed to acquire dquot type 1 [ 163.258291][ T7214] EXT4-fs (loop4): 1 truncate cleaned up [ 163.265342][ T7214] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.361730][ T7211] loop0: detected capacity change from 0 to 32768 [ 163.372925][ T7211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.989 (7211) [ 163.380899][ T7211] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.383673][ T7211] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 163.387655][ T7211] BTRFS info (device loop0): using free space tree [ 163.403586][ T4708] EXT4-fs (loop4): unmounting filesystem. [ 163.587262][ T7237] sch_fq: defrate 0 ignored. [ 163.618452][ T7211] BTRFS info (device loop0): enabling ssd optimizations [ 163.829561][ T7230] loop4: detected capacity change from 0 to 8192 [ 163.853985][ T7230] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.857717][ T7230] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 163.860235][ T7230] REISERFS (device loop4): using ordered data mode [ 163.861905][ T7230] reiserfs: using flush barriers [ 163.882160][ T4297] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.885017][ T7230] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.893639][ T7230] REISERFS (device loop4): checking transaction log (loop4) [ 163.919395][ T7230] REISERFS (device loop4): Using r5 hash to sort names [ 163.921584][ T7230] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 163.934844][ T7230] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 164.246576][ T7244] loop2: detected capacity change from 0 to 32768 [ 164.265532][ T7244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.994 (7244) [ 164.404206][ T7244] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.413040][ T7244] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 164.425727][ T7244] BTRFS info (device loop2): using free space tree [ 164.591236][ T7271] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 164.811978][ T7244] BTRFS info (device loop2): enabling ssd optimizations [ 164.852477][ T7244] FAULT_INJECTION: forcing a failure. [ 164.852477][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 164.880792][ T7244] CPU: 0 PID: 7244 Comm: syz.2.994 Not tainted 6.1.102-syzkaller #0 [ 164.883035][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 164.885737][ T7244] Call trace: [ 164.886627][ T7244] dump_backtrace+0x1c8/0x1f4 [ 164.887878][ T7244] show_stack+0x2c/0x3c [ 164.889011][ T7244] dump_stack_lvl+0x108/0x170 [ 164.890268][ T7244] dump_stack+0x1c/0x5c [ 164.891405][ T7244] should_fail_ex+0x3c0/0x51c [ 164.892680][ T7244] __should_failslab+0xc8/0x128 [ 164.893990][ T7244] should_failslab+0x10/0x28 [ 164.895224][ T7244] __kmem_cache_alloc_node+0x80/0x388 [ 164.896602][ T7244] __kmalloc+0xc4/0x1c4 [ 164.897755][ T7244] tomoyo_realpath_from_path+0xc8/0x4cc [ 164.899244][ T7244] tomoyo_path_number_perm+0x1dc/0x688 [ 164.900718][ T7244] tomoyo_file_ioctl+0x2c/0x3c [ 164.902011][ T7244] security_file_ioctl+0x80/0xbc [ 164.903348][ T7244] __arm64_sys_ioctl+0xa8/0x1c8 [ 164.904669][ T7244] invoke_syscall+0x98/0x2c0 [ 164.905888][ T7244] el0_svc_common+0x138/0x258 [ 164.907172][ T7244] do_el0_svc+0x64/0x218 [ 164.908325][ T7244] el0_svc+0x58/0x168 [ 164.909421][ T7244] el0t_64_sync_handler+0x84/0xf0 [ 164.910799][ T7244] el0t_64_sync+0x18c/0x190 [ 164.934857][ T7244] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.952384][ T7289] loop1: detected capacity change from 0 to 512 [ 164.960300][ T4295] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.966470][ T7289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.986697][ T7289] EXT4-fs (loop1): orphan cleanup on readonly fs [ 165.030337][ T7289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1002: bg 0: block 248: padding at end of block bitmap is not set [ 165.074384][ T7289] Quota error (device loop1): write_blk: dquota write failed [ 165.169546][ T7289] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 165.172327][ T7289] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.1002: Failed to acquire dquot type 1 [ 165.202000][ T7289] EXT4-fs (loop1): 1 truncate cleaned up [ 165.246336][ T7289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.362350][ T6788] EXT4-fs (loop1): unmounting filesystem. [ 165.430035][ T7302] FAULT_INJECTION: forcing a failure. [ 165.430035][ T7302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.433795][ T7302] CPU: 1 PID: 7302 Comm: syz.1.1006 Not tainted 6.1.102-syzkaller #0 [ 165.436000][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 165.438774][ T7302] Call trace: [ 165.439656][ T7302] dump_backtrace+0x1c8/0x1f4 [ 165.440895][ T7302] show_stack+0x2c/0x3c [ 165.442051][ T7302] dump_stack_lvl+0x108/0x170 [ 165.443353][ T7302] dump_stack+0x1c/0x5c [ 165.444504][ T7302] should_fail_ex+0x3c0/0x51c [ 165.445801][ T7302] should_fail_alloc_page+0x74/0xb8 [ 165.447194][ T7302] prepare_alloc_pages+0x1c0/0x508 [ 165.448542][ T7302] __alloc_pages+0x150/0x730 [ 165.449767][ T7302] __folio_alloc+0x1c/0x48 [ 165.450934][ T7302] vma_alloc_folio+0x394/0x8d8 [ 165.452248][ T7302] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 165.453955][ T7302] handle_mm_fault+0x1e44/0x3ef0 [ 165.455269][ T7302] do_page_fault+0x330/0x890 [ 165.456504][ T7302] do_translation_fault+0x94/0xc8 [ 165.457860][ T7302] do_mem_abort+0x74/0x200 [ 165.459038][ T7302] el0_da+0x70/0x184 [ 165.460114][ T7302] el0t_64_sync_handler+0xcc/0xf0 [ 165.461425][ T7302] el0t_64_sync+0x18c/0x190 [ 165.556609][ T7302] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 165.710912][ T7316] FAULT_INJECTION: forcing a failure. [ 165.710912][ T7316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.714773][ T7316] CPU: 0 PID: 7316 Comm: syz.4.1013 Not tainted 6.1.102-syzkaller #0 [ 165.716954][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 165.719665][ T7316] Call trace: [ 165.720544][ T7316] dump_backtrace+0x1c8/0x1f4 [ 165.721849][ T7316] show_stack+0x2c/0x3c [ 165.722950][ T7316] dump_stack_lvl+0x108/0x170 [ 165.724189][ T7316] dump_stack+0x1c/0x5c [ 165.725329][ T7316] should_fail_ex+0x3c0/0x51c [ 165.726618][ T7316] should_fail+0x14/0x24 [ 165.727816][ T7316] should_fail_usercopy+0x20/0x30 [ 165.729207][ T7316] do_ipt_set_ctl+0x2a4/0x110c [ 165.730521][ T7316] nf_setsockopt+0x270/0x290 [ 165.731773][ T7316] ip_setsockopt+0x118/0x128 [ 165.733055][ T7316] raw_setsockopt+0x100/0x294 [ 165.734295][ T7316] sock_common_setsockopt+0xb0/0xcc [ 165.734759][ T4347] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 165.735728][ T7316] __sys_setsockopt+0x3a8/0x70c [ 165.738952][ T7316] __arm64_sys_setsockopt+0xb8/0xd4 [ 165.740364][ T7316] invoke_syscall+0x98/0x2c0 [ 165.741604][ T7316] el0_svc_common+0x138/0x258 [ 165.742884][ T7316] do_el0_svc+0x64/0x218 [ 165.744122][ T7316] el0_svc+0x58/0x168 [ 165.745200][ T7316] el0t_64_sync_handler+0x84/0xf0 [ 165.746586][ T7316] el0t_64_sync+0x18c/0x190 [ 165.974728][ T4347] usb 1-1: Using ep0 maxpacket: 8 [ 166.097926][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.100955][ T4347] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.111087][ T4347] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.113501][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.133266][ T7302] loop1: detected capacity change from 0 to 32768 [ 166.151701][ T7320] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 166.158424][ T7308] loop2: detected capacity change from 0 to 32768 [ 166.161151][ T4347] usb 1-1: config 0 descriptor?? [ 166.176927][ T7302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1006 (7302) [ 166.196844][ T4347] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 166.208285][ T7302] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.220783][ T7302] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 166.234136][ T7302] BTRFS info (device loop1): using free space tree [ 166.454432][ T7302] BTRFS info (device loop1): enabling ssd optimizations [ 166.513459][ T6788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.384595][ T7370] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1026'. [ 167.402904][ T7357] loop4: detected capacity change from 0 to 32768 [ 167.439521][ T7357] read_mapping_page failed! [ 167.441148][ T7357] bread failed! [ 167.443250][ T7357] jfs_create: dtInsert returned -EIO [ 167.451079][ T7357] ERROR: (device loop4): txAbort: [ 167.451079][ T7357] [ 167.453443][ T7357] ERROR: (device loop4): remounting filesystem as read-only [ 167.603614][ T7377] loop4: detected capacity change from 0 to 512 [ 167.616157][ T7377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.622829][ T7377] EXT4-fs (loop4): orphan cleanup on readonly fs [ 167.627228][ T7377] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1029: bg 0: block 248: padding at end of block bitmap is not set [ 167.631668][ T7377] Quota error (device loop4): write_blk: dquota write failed [ 167.633813][ T7377] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 167.637465][ T7377] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1029: Failed to acquire dquot type 1 [ 167.644455][ T7377] EXT4-fs (loop4): 1 truncate cleaned up [ 167.658083][ T7377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.719079][ T4708] EXT4-fs (loop4): unmounting filesystem. [ 167.974398][ T7391] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 168.286780][ T7400] FAULT_INJECTION: forcing a failure. [ 168.286780][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.312050][ T7400] CPU: 0 PID: 7400 Comm: syz.2.1038 Not tainted 6.1.102-syzkaller #0 [ 168.314265][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.316900][ T7400] Call trace: [ 168.317802][ T7400] dump_backtrace+0x1c8/0x1f4 [ 168.319089][ T7400] show_stack+0x2c/0x3c [ 168.320232][ T7400] dump_stack_lvl+0x108/0x170 [ 168.321515][ T7400] dump_stack+0x1c/0x5c [ 168.322644][ T7400] should_fail_ex+0x3c0/0x51c [ 168.323863][ T7400] should_fail+0x14/0x24 [ 168.325057][ T7400] should_fail_usercopy+0x20/0x30 [ 168.326432][ T7400] io_submit_one+0xb8/0x15b8 [ 168.327608][ T7400] __arm64_sys_io_submit+0x248/0x3c8 [ 168.329055][ T7400] invoke_syscall+0x98/0x2c0 [ 168.330298][ T7400] el0_svc_common+0x138/0x258 [ 168.331619][ T7400] do_el0_svc+0x64/0x218 [ 168.332803][ T7400] el0_svc+0x58/0x168 [ 168.333986][ T7400] el0t_64_sync_handler+0x84/0xf0 [ 168.335396][ T7400] el0t_64_sync+0x18c/0x190 [ 168.539587][ T4352] usb 1-1: USB disconnect, device number 18 [ 169.413769][ T7419] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1046'. [ 169.576667][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.579300][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.906807][ T7436] loop2: detected capacity change from 0 to 32768 [ 170.300866][ T7445] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 171.123293][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.138473][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.466374][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.468784][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.721958][ T7487] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.965784][ T7471] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1065'. [ 173.683718][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.696877][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.740060][ T7502] loop1: detected capacity change from 0 to 32768 [ 173.885178][ T4352] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 174.134954][ T4352] usb 1-1: Using ep0 maxpacket: 8 [ 174.255091][ T4352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.259839][ T4352] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.267932][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.456316][ T4352] usb 1-1: config 0 descriptor?? [ 174.495952][ T4352] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 174.632322][ T7532] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1090'. [ 174.866016][ T7540] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.457940][ T7549] loop4: detected capacity change from 0 to 8192 [ 175.462169][ T7549] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.466768][ T7549] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 175.469362][ T7549] REISERFS (device loop4): using ordered data mode [ 175.471295][ T7549] reiserfs: using flush barriers [ 175.532816][ T7549] REISERFS warning (device loop4): sh-458 journal_init_dev: cannot init journal device unknown-block(2,0): -6 [ 175.557141][ T7549] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 175.563965][ T7549] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 175.735249][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.739902][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.571877][ T7569] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1102'. [ 176.640307][ T4347] usb 1-1: USB disconnect, device number 19 [ 176.663810][ T7573] loop4: detected capacity change from 0 to 64 [ 176.669105][ T7573] hfs: unable to parse mount options [ 176.754775][ T7580] loop2: detected capacity change from 0 to 64 [ 176.980022][ T7589] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.403220][ T7602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.415382][ T7602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.769683][ T7598] loop2: detected capacity change from 0 to 32768 [ 177.778941][ T7598] XFS: noikeep mount option is deprecated. [ 177.803508][ T7598] XFS (loop2): Mounting V5 Filesystem [ 177.829837][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.847924][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.930029][ T7598] XFS (loop2): Ending clean mount [ 177.966457][ T7598] XFS (loop2): Quotacheck needed: Please wait. [ 178.023073][ T7598] XFS (loop2): Quotacheck: Done. [ 178.172886][ T4295] XFS (loop2): Unmounting Filesystem [ 178.290216][ T7629] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1124'. [ 178.576366][ T7624] loop0: detected capacity change from 0 to 32768 [ 178.619426][ T7624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1121 (7624) [ 178.634325][ T7624] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.643501][ T7624] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 178.653768][ T7624] BTRFS info (device loop0): using free space tree [ 178.872462][ T7639] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.958709][ T7624] BTRFS info (device loop0): enabling ssd optimizations [ 179.346698][ T4297] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.350884][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.361779][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.904938][ T7682] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1138'. [ 180.058964][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.065841][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.166290][ T7675] loop4: detected capacity change from 0 to 32768 [ 180.181951][ T7675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1135 (7675) [ 180.324298][ T7675] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.327225][ T7675] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 180.329446][ T7675] BTRFS info (device loop4): using free space tree [ 180.338986][ T7676] loop0: detected capacity change from 0 to 32768 [ 180.362834][ T7676] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1134 (7676) [ 180.381667][ T7694] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 180.383894][ T4715] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4715) [ 180.495670][ T7675] BTRFS info (device loop4): enabling ssd optimizations [ 180.521437][ T7675] FAULT_INJECTION: forcing a failure. [ 180.521437][ T7675] name failslab, interval 1, probability 0, space 0, times 0 [ 180.525015][ T7675] CPU: 1 PID: 7675 Comm: syz.4.1135 Not tainted 6.1.102-syzkaller #0 [ 180.527144][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 180.529884][ T7675] Call trace: [ 180.530736][ T7675] dump_backtrace+0x1c8/0x1f4 [ 180.532012][ T7675] show_stack+0x2c/0x3c [ 180.533100][ T7675] dump_stack_lvl+0x108/0x170 [ 180.534327][ T7675] dump_stack+0x1c/0x5c [ 180.535431][ T7675] should_fail_ex+0x3c0/0x51c [ 180.536739][ T7675] __should_failslab+0xc8/0x128 [ 180.538058][ T7675] should_failslab+0x10/0x28 [ 180.539236][ T7675] kmem_cache_alloc+0x8c/0x37c [ 180.540497][ T7675] getname_flags+0xd0/0x48c [ 180.541726][ T7675] __arm64_sys_mkdirat+0x80/0xa8 [ 180.543055][ T7675] invoke_syscall+0x98/0x2c0 [ 180.544346][ T7675] el0_svc_common+0x138/0x258 [ 180.545568][ T7675] do_el0_svc+0x64/0x218 [ 180.546709][ T7675] el0_svc+0x58/0x168 [ 180.547757][ T7675] el0t_64_sync_handler+0x84/0xf0 [ 180.549086][ T7675] el0t_64_sync+0x18c/0x190 [ 180.670436][ T4708] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.735574][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.755955][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.406288][ T7748] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1156'. [ 181.520599][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.523127][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.712400][ T7757] FAULT_INJECTION: forcing a failure. [ 181.712400][ T7757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.718298][ T7757] CPU: 1 PID: 7757 Comm: syz.1.1159 Not tainted 6.1.102-syzkaller #0 [ 181.720471][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 181.723183][ T7757] Call trace: [ 181.724087][ T7757] dump_backtrace+0x1c8/0x1f4 [ 181.725320][ T7757] show_stack+0x2c/0x3c [ 181.726482][ T7757] dump_stack_lvl+0x108/0x170 [ 181.727762][ T7757] dump_stack+0x1c/0x5c [ 181.728898][ T7757] should_fail_ex+0x3c0/0x51c [ 181.730142][ T7757] should_fail+0x14/0x24 [ 181.731289][ T7757] should_fail_usercopy+0x20/0x30 [ 181.732703][ T7757] sctp_getsockopt_peer_addr_params+0x10c/0x14a0 [ 181.734384][ T7757] sctp_getsockopt+0x628/0x9a8 [ 181.735691][ T7757] sock_common_getsockopt+0xa8/0xc4 [ 181.737058][ T7757] __sys_getsockopt+0x1e8/0x484 [ 181.738341][ T7757] __arm64_sys_getsockopt+0xb8/0xd4 [ 181.739663][ T7757] invoke_syscall+0x98/0x2c0 [ 181.740947][ T7757] el0_svc_common+0x138/0x258 [ 181.742198][ T7757] do_el0_svc+0x64/0x218 [ 181.743364][ T7757] el0_svc+0x58/0x168 [ 181.744370][ T7757] el0t_64_sync_handler+0x84/0xf0 [ 181.745687][ T7757] el0t_64_sync+0x18c/0x190 [ 182.244239][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.248865][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.351226][ T7773] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.897579][ T7790] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1171'. [ 183.177038][ T7798] loop0: detected capacity change from 0 to 1024 [ 183.217165][ T5506] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.598991][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.608372][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.937824][ T7820] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 184.106154][ T7828] FAULT_INJECTION: forcing a failure. [ 184.106154][ T7828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.131267][ T7828] CPU: 0 PID: 7828 Comm: syz.4.1188 Not tainted 6.1.102-syzkaller #0 [ 184.133463][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 184.136324][ T7828] Call trace: [ 184.137306][ T7828] dump_backtrace+0x1c8/0x1f4 [ 184.138538][ T7828] show_stack+0x2c/0x3c [ 184.139673][ T7828] dump_stack_lvl+0x108/0x170 [ 184.140987][ T7828] dump_stack+0x1c/0x5c [ 184.142127][ T7828] should_fail_ex+0x3c0/0x51c [ 184.143402][ T7828] should_fail+0x14/0x24 [ 184.144564][ T7828] should_fail_usercopy+0x20/0x30 [ 184.145944][ T7828] iovec_from_user+0xcc/0x5e0 [ 184.147246][ T7828] __import_iovec+0x84/0x448 [ 184.148562][ T7828] import_iovec+0x88/0xa4 [ 184.149777][ T7828] do_writev+0x1f0/0x3ec [ 184.150907][ T7828] __arm64_sys_writev+0x80/0x94 [ 184.152192][ T7828] invoke_syscall+0x98/0x2c0 [ 184.153470][ T7828] el0_svc_common+0x138/0x258 [ 184.154784][ T7828] do_el0_svc+0x64/0x218 [ 184.155897][ T7828] el0_svc+0x58/0x168 [ 184.157051][ T7828] el0t_64_sync_handler+0x84/0xf0 [ 184.158402][ T7828] el0t_64_sync+0x18c/0x190 [ 184.181104][ T7831] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1189'. [ 184.747288][ T7841] loop1: detected capacity change from 0 to 32768 [ 184.854868][ T7841] XFS (loop1): Mounting V5 Filesystem [ 185.022325][ T7841] XFS (loop1): Ending clean mount [ 185.031581][ T7841] XFS (loop1): Quotacheck needed: Please wait. [ 185.147925][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.150432][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.163052][ T7841] XFS (loop1): Quotacheck: Done. [ 185.228681][ T6788] XFS (loop1): Unmounting Filesystem [ 185.393069][ T7879] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1206'. [ 185.548984][ T7881] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.698693][ T7884] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1202'. [ 185.995978][ T7896] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1212'. [ 186.029336][ T7901] loop1: detected capacity change from 0 to 16 [ 186.048594][ T7902] FAULT_INJECTION: forcing a failure. [ 186.048594][ T7902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.059995][ T7902] CPU: 1 PID: 7902 Comm: syz.4.1212 Not tainted 6.1.102-syzkaller #0 [ 186.062308][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 186.065077][ T7902] Call trace: [ 186.065965][ T7902] dump_backtrace+0x1c8/0x1f4 [ 186.067242][ T7902] show_stack+0x2c/0x3c [ 186.068433][ T7902] dump_stack_lvl+0x108/0x170 [ 186.069421][ T7901] erofs: (device loop1): mounted with root inode @ nid 36. [ 186.069708][ T7902] dump_stack+0x1c/0x5c [ 186.069725][ T7902] should_fail_ex+0x3c0/0x51c [ 186.074427][ T7902] should_fail_alloc_page+0x74/0xb8 [ 186.075875][ T7902] prepare_alloc_pages+0x1c0/0x508 [ 186.077272][ T7902] __alloc_pages+0x150/0x730 [ 186.078545][ T7902] __folio_alloc+0x1c/0x48 [ 186.079789][ T7902] vma_alloc_folio+0x394/0x8d8 [ 186.081102][ T7902] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 186.082829][ T7902] handle_mm_fault+0x1e44/0x3ef0 [ 186.084206][ T7902] do_page_fault+0x330/0x890 [ 186.085534][ T7902] do_translation_fault+0x94/0xc8 [ 186.086990][ T7902] do_mem_abort+0x74/0x200 [ 186.088218][ T7902] el0_da+0x70/0x184 [ 186.089311][ T7902] el0t_64_sync_handler+0xcc/0xf0 [ 186.090743][ T7902] el0t_64_sync+0x18c/0x190 [ 186.104412][ T7902] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 186.270832][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.273193][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.415483][ T7918] FAULT_INJECTION: forcing a failure. [ 186.415483][ T7918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.418962][ T7918] CPU: 0 PID: 7918 Comm: syz.3.1219 Not tainted 6.1.102-syzkaller #0 [ 186.421075][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 186.423640][ T7918] Call trace: [ 186.424502][ T7918] dump_backtrace+0x1c8/0x1f4 [ 186.425743][ T7918] show_stack+0x2c/0x3c [ 186.426870][ T7918] dump_stack_lvl+0x108/0x170 [ 186.428078][ T7918] dump_stack+0x1c/0x5c [ 186.429167][ T7918] should_fail_ex+0x3c0/0x51c [ 186.430378][ T7918] should_fail+0x14/0x24 [ 186.431459][ T7918] should_fail_usercopy+0x20/0x30 [ 186.432837][ T7918] copy_msghdr_from_user+0xb8/0x59c [ 186.434209][ T7918] __sys_sendmsg+0x200/0x33c [ 186.435472][ T7918] __arm64_sys_sendmsg+0x80/0x94 [ 186.436777][ T7918] invoke_syscall+0x98/0x2c0 [ 186.438000][ T7918] el0_svc_common+0x138/0x258 [ 186.439245][ T7918] do_el0_svc+0x64/0x218 [ 186.440355][ T7918] el0_svc+0x58/0x168 [ 186.441424][ T7918] el0t_64_sync_handler+0x84/0xf0 [ 186.442834][ T7918] el0t_64_sync+0x18c/0x190 [ 186.663767][ T7925] FAULT_INJECTION: forcing a failure. [ 186.663767][ T7925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.667601][ T7925] CPU: 1 PID: 7925 Comm: syz.1.1222 Not tainted 6.1.102-syzkaller #0 [ 186.669771][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 186.672529][ T7925] Call trace: [ 186.673415][ T7925] dump_backtrace+0x1c8/0x1f4 [ 186.674694][ T7925] show_stack+0x2c/0x3c [ 186.675790][ T7925] dump_stack_lvl+0x108/0x170 [ 186.677090][ T7925] dump_stack+0x1c/0x5c [ 186.678207][ T7925] should_fail_ex+0x3c0/0x51c [ 186.679425][ T7925] should_fail+0x14/0x24 [ 186.680672][ T7925] should_fail_usercopy+0x20/0x30 [ 186.682021][ T7925] copy_msghdr_from_user+0xb8/0x59c [ 186.683424][ T7925] __sys_sendmmsg+0x2e0/0x7d8 [ 186.684719][ T7925] __arm64_sys_sendmmsg+0xa0/0xbc [ 186.686235][ T7925] invoke_syscall+0x98/0x2c0 [ 186.687435][ T7925] el0_svc_common+0x138/0x258 [ 186.688674][ T7925] do_el0_svc+0x64/0x218 [ 186.689870][ T7925] el0_svc+0x58/0x168 [ 186.690940][ T7925] el0t_64_sync_handler+0x84/0xf0 [ 186.692260][ T7925] el0t_64_sync+0x18c/0x190 [ 187.122805][ T7943] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1230'. [ 187.247298][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.250124][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.373256][ T7948] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 187.387159][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.388923][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.931336][ T4302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.944353][ T4302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.951439][ T4302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.962375][ T4302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.967122][ T4302] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.969421][ T4302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.154823][ T4346] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 188.306765][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 188.383555][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.387685][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.390813][ T7961] device bridge_slave_0 entered promiscuous mode [ 188.395055][ T4346] usb 1-1: Using ep0 maxpacket: 8 [ 188.397096][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.399173][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.401729][ T7961] device bridge_slave_1 entered promiscuous mode [ 188.419913][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.433157][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.514998][ T4346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.517807][ T4346] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.520200][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.534309][ T4346] usb 1-1: config 0 descriptor?? [ 188.575943][ T4346] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 188.878197][ T4464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.917053][ T7961] team0: Port device team_slave_0 added [ 188.920999][ T7961] team0: Port device team_slave_1 added [ 188.944110][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.951383][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.969278][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.036670][ T4464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.044466][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.047858][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.059690][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.226967][ T7961] device hsr_slave_0 entered promiscuous mode [ 189.275558][ T7961] device hsr_slave_1 entered promiscuous mode [ 189.314768][ T7961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.318159][ T7961] Cannot create hsr debugfs directory [ 189.394340][ T4464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.516696][ T4464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.526600][ T7991] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1244'. [ 189.759875][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.762751][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.025021][ T4302] Bluetooth: hci2: command tx timeout [ 190.427479][ T8020] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 190.877141][ T7961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.894672][ T1516] usb 1-1: USB disconnect, device number 20 [ 190.936450][ T7961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.015564][ T7961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.066928][ T7961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.883749][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.909544][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.912335][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.930036][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.012127][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.018501][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.022211][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.024207][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.035519][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.042603][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.051335][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.053373][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.063249][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.104865][ T4302] Bluetooth: hci2: command tx timeout [ 192.357088][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.360784][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.458197][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.460753][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.463514][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.470380][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.472979][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.478932][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.481652][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.484272][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.510175][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.512829][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.543401][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.551743][ T8058] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1258'. [ 192.555993][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.609075][ T4464] device hsr_slave_0 left promiscuous mode [ 192.661005][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.663530][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.666937][ T4464] device hsr_slave_1 left promiscuous mode [ 192.744905][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.746968][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.750694][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.756434][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.764011][ T4464] device bridge_slave_1 left promiscuous mode [ 192.766366][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.815807][ T4464] device bridge_slave_0 left promiscuous mode [ 192.817535][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.014985][ T4464] device veth1_macvtap left promiscuous mode [ 193.016766][ T4464] device veth0_macvtap left promiscuous mode [ 193.018562][ T4464] device veth1_vlan left promiscuous mode [ 193.021393][ T4464] device veth0_vlan left promiscuous mode [ 193.416730][ T8087] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 194.184935][ T4302] Bluetooth: hci2: command tx timeout [ 194.732701][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.737509][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.199505][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.202290][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.690622][ T4464] team0 (unregistering): Port device team_slave_1 removed [ 195.847052][ T4464] team0 (unregistering): Port device team_slave_0 removed [ 196.026817][ T4464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.246221][ T4464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.264862][ T4302] Bluetooth: hci2: command tx timeout [ 196.984940][ T28] INFO: task syz.3.99:4635 blocked for more than 143 seconds. [ 196.987048][ T28] Not tainted 6.1.102-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 196.994853][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 196.997213][ T28] task:syz.3.99 state:D stack:0 pid:4635 ppid:4309 flags:0x00000009 [ 196.999694][ T28] Call trace: [ 197.000596][ T28] __switch_to+0x320/0x754 [ 197.001772][ T28] __schedule+0xef4/0x1d44 [ 197.023328][ T28] schedule+0xc4/0x170 [ 197.029540][ T28] io_schedule+0x8c/0x188 [ 197.030831][ T28] folio_wait_bit_common+0x65c/0xb90 [ 197.033445][ T28] __folio_lock+0x2c/0x3c [ 197.052865][ T28] release_metapage+0x168/0xc84 [ 197.060447][ T28] __get_metapage+0xb0c/0x1050 [ 197.061741][ T28] jfs_readdir+0x1ed4/0x37bc [ 197.062945][ T28] iterate_dir+0x1f4/0x4ec [ 197.064092][ T28] __arm64_sys_getdents64+0x1c4/0x4a0 [ 197.070072][ T28] invoke_syscall+0x98/0x2c0 [ 197.071324][ T28] el0_svc_common+0x138/0x258 [ 197.072537][ T28] do_el0_svc+0x64/0x218 [ 197.073631][ T28] el0_svc+0x58/0x168 [ 197.082773][ T28] el0t_64_sync_handler+0x84/0xf0 [ 197.092875][ T28] el0t_64_sync+0x18c/0x190 [ 197.094307][ T28] [ 197.094307][ T28] Showing all locks held in the system: [ 197.096551][ T28] 1 lock held by rcu_tasks_kthre/12: [ 197.097928][ T28] #0: ffff800015b95070 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 197.100720][ T28] 1 lock held by rcu_tasks_trace/13: [ 197.102088][ T28] #0: ffff800015b95870 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 197.131774][ T28] 3 locks held by kworker/0:1/14: [ 197.133155][ T28] #0: ffff0000d568dd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.136227][ T28] #1: ffff80001afa7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.139513][ T28] #2: ffff800017fe3608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.141818][ T28] 1 lock held by khungtaskd/28: [ 197.143121][ T28] #0: ffff800015b94ea0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 197.161875][ T28] 2 locks held by getty/4051: [ 197.163205][ T28] #0: ffff0000d60e9098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 197.181616][ T28] #1: ffff80001bea02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 197.184358][ T28] 3 locks held by kworker/0:7/4348: [ 197.185894][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.188760][ T28] #1: ffff80001e7b7c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.191576][ T28] #2: ffff800017fe3608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.193787][ T28] 4 locks held by kworker/u4:8/4464: [ 197.203152][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.206175][ T28] #1: ffff80001f0a7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.208862][ T28] #2: ffff800017fd77d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 197.211348][ T28] #3: ffff800017fe3608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.213642][ T28] 2 locks held by syz.3.99/4635: [ 197.221991][ T28] #0: ffff0000cb5eefe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x124/0x16c [ 197.224464][ T28] #1: ffff0000df380580 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: iterate_dir+0x124/0x4ec [ 197.227513][ T28] 3 locks held by kworker/0:12/7251: [ 197.228927][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.231703][ T28] #1: ffff80001fc07c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.234439][ T28] #2: ffff800017fe3608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.236950][ T28] 1 lock held by syz-executor/7961: [ 197.238279][ T28] #0: ffff800017fe3608 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 197.240713][ T28] 1 lock held by syz.3.1267/8079: [ 197.242026][ T28] #0: ffff800017fe3608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.244330][ T28] 3 locks held by syz.0.1277/8109: [ 197.245904][ T28] #0: ffff80001803e3d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 197.248058][ T28] #1: ffff80001803e288 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 197.250464][ T28] #2: ffff800017fe3608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.252784][ T28] 2 locks held by syz.4.1283/8125: [ 197.254117][ T28] #0: ffff80001803e3d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 197.256397][ T28] #1: ffff80001803e288 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 197.259057][ T28] 2 locks held by syz.2.1285/8132: [ 197.260343][ T28] #0: ffff80001803e3d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 197.262623][ T28] #1: ffff80001803e288 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 197.265218][ T28] [ 197.265844][ T28] ============================================= [ 197.265844][ T28] [ 197.268056][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 197.269897][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.102-syzkaller #0 [ 197.271935][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.274491][ T28] Call trace: [ 197.275457][ T28] dump_backtrace+0x1c8/0x1f4 [ 197.276679][ T28] show_stack+0x2c/0x3c [ 197.277772][ T28] dump_stack_lvl+0x108/0x170 [ 197.278973][ T28] dump_stack+0x1c/0x5c [ 197.280021][ T28] panic+0x300/0x804 [ 197.281091][ T28] hung_task_panic+0x0/0x2c [ 197.282276][ T28] kthread+0x250/0x2d8 [ 197.283376][ T28] ret_from_fork+0x10/0x20 [ 197.284553][ T28] SMP: stopping secondary CPUs [ 197.285870][ T28] Kernel Offset: disabled [ 197.287001][ T28] CPU features: 0x00000,02070084,26017203 [ 197.288490][ T28] Memory Limit: none [ 197.872400][ T28] Rebooting in 86400 seconds..