last executing test programs: 18.511580321s ago: executing program 3 (id=597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0xa0]}}, 0x0, 0x1c, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 14.775762714s ago: executing program 0 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.200893191s ago: executing program 0 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='naa.600140', 0xa) r1 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsmount(r1, 0x0, 0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 11.151881959s ago: executing program 2 (id=608): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000700), 0x1, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 11.140595041s ago: executing program 0 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_uring_setup(0x715, &(0x7f0000000180)={0x0, 0x2312, 0x800, 0xffffffff, 0x2fd}) 10.18942884s ago: executing program 2 (id=610): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r5, 0x124, 0x14, 0x17, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 7.620241259s ago: executing program 3 (id=612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7.480246462s ago: executing program 2 (id=613): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.468281634s ago: executing program 3 (id=614): unshare(0x24020400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/247, 0xf7, 0xaa) rseq(0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@any, 0x8}}}, 0xa) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x3808081, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/477, @ANYRESOCT, @ANYRES16], 0x1, 0x326, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0xfffffffd, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x84000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, {0xfffffffffffffffd, 0x10000000000000}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0xffffffff, 0x3c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x8}, {{@in=@multicast1, 0x0, 0x6c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3507, 0x1, 0x0, 0x85}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x6}]}]}, 0x17c}}, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x2, 0x32}, 0xa, @in=@empty, 0x0, 0x4, 0x0, 0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000b40)={0x2, {{0xa, 0x4e20, 0x1, @mcast2}}}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000011, &(0x7f0000000040), 0x3e, 0x529, &(0x7f0000000680)="$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") r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 7.300342482s ago: executing program 0 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.159816256s ago: executing program 2 (id=616): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.554583687s ago: executing program 1 (id=617): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000006280)=[{&(0x7f0000001700)}], 0x1) 6.391551174s ago: executing program 1 (id=618): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r0, &(0x7f0000000680), &(0x7f0000000880)=""/37}, 0x20) 6.028123915s ago: executing program 1 (id=619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8}, 0x2102) 5.795703433s ago: executing program 3 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpid() recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x90001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18d0010}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") openat$incfs(0xffffffffffffff9c, 0x0, 0x1832c1, 0x9c37611dc13d0da6) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.651263897s ago: executing program 2 (id=621): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r5, 0x124, 0x14, 0x17, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.832094874s ago: executing program 1 (id=622): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000010000000000001000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 4.283528246s ago: executing program 3 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_uring_setup(0x715, &(0x7f0000000180)={0x0, 0x2312, 0x800, 0xffffffff, 0x2fd}) 3.766453992s ago: executing program 1 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x20000002, 0x0, 0x0, 0x400000) syz_open_procfs(0x0, &(0x7f0000000900)='net/netlink\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) unlink(0x0) 2.621220223s ago: executing program 1 (id=625): syz_emit_ethernet(0x1bf5, &(0x7f00000045c0)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x94) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 870.219755ms ago: executing program 3 (id=626): syz_open_dev$video(0x0, 0xa7, 0x0) openat(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x104}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 489.776769ms ago: executing program 0 (id=627): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 144.990667ms ago: executing program 0 (id=628): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, 0x0, 0xfffffdcf) 0s ago: executing program 2 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000800000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 77.496845][ T5761] cgroup: Unknown subsys name 'net' [ 77.634534][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.325892][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.974873][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.983548][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.994233][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.013605][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.022580][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.031533][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.040962][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.050262][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.058284][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.066151][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.074290][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.080905][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.087395][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.097988][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.106533][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.114228][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.122005][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.131870][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.140773][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.154039][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.161678][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.171269][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.179095][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.187364][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.637946][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.665362][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.729269][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.849252][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 81.876580][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.884395][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.891905][ T5777] bridge_slave_0: entered allmulticast mode [ 81.899396][ T5777] bridge_slave_0: entered promiscuous mode [ 81.908461][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.915691][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.923522][ T5777] bridge_slave_1: entered allmulticast mode [ 81.931292][ T5777] bridge_slave_1: entered promiscuous mode [ 81.991177][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.000530][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.008270][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.015646][ T5773] bridge_slave_0: entered allmulticast mode [ 82.024138][ T5773] bridge_slave_0: entered promiscuous mode [ 82.059330][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.069338][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.076629][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.085217][ T5773] bridge_slave_1: entered allmulticast mode [ 82.092261][ T5773] bridge_slave_1: entered promiscuous mode [ 82.135834][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.143245][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.151413][ T5778] bridge_slave_0: entered allmulticast mode [ 82.158492][ T5778] bridge_slave_0: entered promiscuous mode [ 82.191052][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.216801][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.224363][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.231942][ T5778] bridge_slave_1: entered allmulticast mode [ 82.239351][ T5778] bridge_slave_1: entered promiscuous mode [ 82.250004][ T5777] team0: Port device team_slave_0 added [ 82.269499][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.311645][ T5777] team0: Port device team_slave_1 added [ 82.332666][ T5773] team0: Port device team_slave_0 added [ 82.339650][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.346830][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.354253][ T5782] bridge_slave_0: entered allmulticast mode [ 82.361916][ T5782] bridge_slave_0: entered promiscuous mode [ 82.371164][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.378653][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.385857][ T5782] bridge_slave_1: entered allmulticast mode [ 82.393139][ T5782] bridge_slave_1: entered promiscuous mode [ 82.402570][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.415926][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.434791][ T5773] team0: Port device team_slave_1 added [ 82.511580][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.518789][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.547549][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.566778][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.574408][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.600978][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.615302][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.631031][ T5778] team0: Port device team_slave_0 added [ 82.638243][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.645446][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.675062][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.687503][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.694566][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.721731][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.743433][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.764218][ T5778] team0: Port device team_slave_1 added [ 82.833098][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.840364][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.867622][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.904389][ T5782] team0: Port device team_slave_0 added [ 82.911493][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.919255][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.946001][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.977341][ T5773] hsr_slave_0: entered promiscuous mode [ 82.984069][ T5773] hsr_slave_1: entered promiscuous mode [ 82.992765][ T5782] team0: Port device team_slave_1 added [ 83.018185][ T5777] hsr_slave_0: entered promiscuous mode [ 83.025470][ T5777] hsr_slave_1: entered promiscuous mode [ 83.032261][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.041380][ T5777] Cannot create hsr debugfs directory [ 83.116701][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.124085][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.150779][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.184369][ T5778] hsr_slave_0: entered promiscuous mode [ 83.191836][ T5778] hsr_slave_1: entered promiscuous mode [ 83.198204][ T5781] Bluetooth: hci1: command tx timeout [ 83.199266][ T51] Bluetooth: hci0: command tx timeout [ 83.209684][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.218111][ T5778] Cannot create hsr debugfs directory [ 83.236039][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.243330][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.271237][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.288001][ T5781] Bluetooth: hci3: command tx timeout [ 83.293973][ T51] Bluetooth: hci2: command tx timeout [ 83.435748][ T5782] hsr_slave_0: entered promiscuous mode [ 83.443379][ T5782] hsr_slave_1: entered promiscuous mode [ 83.450589][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.458735][ T5782] Cannot create hsr debugfs directory [ 83.713517][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.739575][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.752283][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.762722][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.819604][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.843412][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.855461][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.865619][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.966212][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.995274][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.009273][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.024494][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.115858][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.129735][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.141365][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.152036][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.231975][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.260598][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.325143][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.340195][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.354717][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.391860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.399271][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.412234][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.419537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.432679][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.439879][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.454870][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.476381][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.483575][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.510241][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.517729][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.527779][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.535079][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.622594][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.655636][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.667132][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.734314][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.786584][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.831511][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.838962][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.876581][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.883925][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.170360][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.240845][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.278839][ T51] Bluetooth: hci0: command tx timeout [ 85.278859][ T5781] Bluetooth: hci1: command tx timeout [ 85.359047][ T5781] Bluetooth: hci2: command tx timeout [ 85.359264][ T51] Bluetooth: hci3: command tx timeout [ 85.386103][ T5778] veth0_vlan: entered promiscuous mode [ 85.407378][ T5778] veth1_vlan: entered promiscuous mode [ 85.444342][ T5773] veth0_vlan: entered promiscuous mode [ 85.490734][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.503176][ T5773] veth1_vlan: entered promiscuous mode [ 85.542729][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.609112][ T5773] veth0_macvtap: entered promiscuous mode [ 85.622506][ T5773] veth1_macvtap: entered promiscuous mode [ 85.632870][ T5778] veth0_macvtap: entered promiscuous mode [ 85.656312][ T5782] veth0_vlan: entered promiscuous mode [ 85.675847][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.695677][ T5778] veth1_macvtap: entered promiscuous mode [ 85.722937][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.744811][ T5777] veth0_vlan: entered promiscuous mode [ 85.764225][ T5782] veth1_vlan: entered promiscuous mode [ 85.772833][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.783952][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.793053][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.802836][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.835451][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.852493][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.864195][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.879864][ T5777] veth1_vlan: entered promiscuous mode [ 85.903791][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.915624][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.936995][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.951738][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.963162][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.973099][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.984462][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.096036][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.099280][ T5777] veth0_macvtap: entered promiscuous mode [ 86.116225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.158023][ T5782] veth0_macvtap: entered promiscuous mode [ 86.169126][ T5782] veth1_macvtap: entered promiscuous mode [ 86.212386][ T5777] veth1_macvtap: entered promiscuous mode [ 86.248698][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.256626][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.289819][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.294470][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.309456][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.322346][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.333124][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.344465][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.363350][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.371814][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.382523][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.393645][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.405631][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.415799][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.430653][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.442380][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.488465][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.499884][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.512356][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.523178][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.536336][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.579542][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.582939][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.598333][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.606990][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.621992][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.632965][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.644548][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.655694][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.668592][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.692965][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.729933][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.739363][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.748687][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.783650][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.800354][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.810556][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.822650][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.358190][ T51] Bluetooth: hci1: command tx timeout [ 87.363792][ T51] Bluetooth: hci0: command tx timeout [ 87.437191][ T51] Bluetooth: hci3: command tx timeout [ 87.442856][ T51] Bluetooth: hci2: command tx timeout [ 88.227634][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.235527][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.502105][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.632545][ T5850] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 88.641323][ T5850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.650143][ T5850] vhci_hcd vhci_hcd.0: Device attached [ 88.915576][ T5851] vhci_hcd: connection closed [ 88.922803][ T59] vhci_hcd: stop threads [ 89.034617][ T59] vhci_hcd: release socket [ 89.039624][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.040587][ T59] vhci_hcd: disconnect device [ 89.078228][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.127978][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.139078][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.230012][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.252592][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.317650][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.438258][ T51] Bluetooth: hci0: command tx timeout [ 89.562558][ T5781] Bluetooth: hci1: command tx timeout [ 89.592303][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.601314][ T51] Bluetooth: hci2: command tx timeout [ 89.607184][ T51] Bluetooth: hci3: command tx timeout [ 89.623942][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.709662][ T23] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.738083][ T23] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 89.762271][ T23] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 89.836798][ T5860] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 89.998769][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 90.218597][ T23] usb 4-1: config 1 interface 1 has no altsetting 0 [ 90.242727][ T5864] syz.2.6[5864]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.409073][ T23] usb 4-1: string descriptor 0 read error: -22 [ 90.429436][ T5864] loop2: detected capacity change from 0 to 256 [ 90.436774][ T23] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 90.507193][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.585613][ T5868] loop1: detected capacity change from 0 to 256 [ 90.667919][ T2134] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.683591][ T5868] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.877462][ T2134] usb 1-1: Using ep0 maxpacket: 16 [ 90.903659][ T2134] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.954803][ T2134] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.056046][ T2134] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.077616][ T2134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.123571][ T2134] usb 1-1: Product: syz [ 91.188522][ T2134] usb 1-1: Manufacturer: syz [ 91.193309][ T2134] usb 1-1: SerialNumber: syz [ 91.724528][ T23] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 91.839297][ T2134] usb 1-1: 0:2 : does not exist [ 91.868943][ T2134] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 91.880625][ T23] usb 4-1: USB disconnect, device number 2 [ 91.920395][ T2134] usb 1-1: USB disconnect, device number 2 [ 92.041500][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 92.068488][ T5815] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.380168][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.391769][ T5815] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.401344][ T5815] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 92.411252][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.421840][ T5815] usb 3-1: config 0 descriptor?? [ 92.432769][ T5815] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 92.440402][ T5815] dvb-usb: bulk message failed: -22 (3/0) [ 93.253051][ T175] cfg80211: failed to load regulatory.db [ 93.280986][ T5815] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 93.301452][ T5815] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 93.310815][ T5815] usb 3-1: media controller created [ 93.319199][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.338300][ T5888] loop3: detected capacity change from 0 to 128 [ 93.356294][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 93.373526][ T5888] ======================================================= [ 93.373526][ T5888] WARNING: The mand mount option has been deprecated and [ 93.373526][ T5888] and is ignored by this kernel. Remove the mand [ 93.373526][ T5888] option from the mount to silence this warning. [ 93.373526][ T5888] ======================================================= [ 93.387279][ T5815] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 94.697765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.107250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.183369][ T5815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 95.212407][ T5815] dvb-usb: schedule remote query interval to 150 msecs. [ 95.221699][ T5815] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.235167][ T5888] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 95.260282][ T5815] usb 3-1: USB disconnect, device number 2 [ 95.314172][ T5888] hpfs: filesystem error: improperly stopped [ 95.445747][ T5888] hpfs: You really don't want any checks? You are crazy... [ 95.559001][ T5895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.570648][ T5888] hpfs: hpfs_map_sector(): read error [ 95.577742][ T5888] hpfs: code page support is disabled [ 95.584745][ T5888] hpfs: hpfs_map_4sectors(): unaligned read [ 95.591212][ T5888] hpfs: hpfs_map_4sectors(): unaligned read [ 95.598846][ T5888] hpfs: filesystem error: unable to find root dir [ 95.616458][ T5888] hpfs: hpfs_map_4sectors(): unaligned read [ 95.657624][ T5895] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.679056][ T5815] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.760613][ T5895] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.832784][ T5895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.865262][ T5895] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.904332][ T5895] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.931985][ T5901] loop3: detected capacity change from 0 to 256 [ 95.939986][ T5895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.967662][ T5895] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.074214][ T5895] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.137877][ T5895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.157367][ T5895] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.198154][ T5895] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.258480][ T5903] loop3: detected capacity change from 0 to 256 [ 96.289897][ T5903] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 97.327046][ T5897] loop2: detected capacity change from 0 to 32768 [ 97.437822][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.466907][ T5897] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.864258][ T5897] XFS (loop2): Ending clean mount [ 97.917546][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.936350][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.997805][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.159810][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.202444][ T5927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 98.209052][ T5927] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.217951][ T5927] vhci_hcd vhci_hcd.0: Device attached [ 98.249091][ T5897] XFS (loop2): Quotacheck needed: Please wait. [ 98.465798][ T5929] vhci_hcd: connection closed [ 98.467433][ T23] vhci_hcd: vhci_device speed not set [ 98.600547][ T48] vhci_hcd: stop threads [ 98.604879][ T48] vhci_hcd: release socket [ 98.621622][ T5897] XFS (loop2): Quotacheck: Done. [ 98.628155][ T48] vhci_hcd: disconnect device [ 98.666208][ T23] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 98.675096][ T23] usb 35-1: enqueue for inactive port 0 [ 99.542698][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.227202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.555744][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.563383][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.563940][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.657560][ T23] vhci_hcd: vhci_device speed not set [ 100.742962][ T5778] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.030490][ T5946] loop0: detected capacity change from 0 to 32768 [ 101.058120][ T5946] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.27 (5946) [ 101.136863][ T5946] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 101.149198][ T5946] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.158547][ T5946] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.168435][ T5946] BTRFS info (device loop0): use zstd compression, level 3 [ 101.176089][ T5946] BTRFS info (device loop0): force clearing of disk cache [ 101.183349][ T5946] BTRFS info (device loop0): enabling disk space caching [ 101.190849][ T5946] BTRFS info (device loop0): disk space caching is enabled [ 101.298135][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.358005][ T5946] BTRFS info (device loop0): enabling ssd optimizations [ 101.365281][ T5946] BTRFS info (device loop0): auto enabling async discard [ 101.377165][ T5946] BTRFS info (device loop0): rebuilding free space tree [ 101.419180][ T5946] BTRFS info (device loop0): disabling free space tree [ 101.427001][ T5946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.442320][ T5946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.784323][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 101.965801][ T5972] loop3: detected capacity change from 0 to 32768 [ 102.164008][ T5972] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 102.341780][ T5814] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 102.363845][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.374130][ T5814] usb 2-1: config 0 has no interface number 0 [ 102.382582][ T5814] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 102.393881][ T5814] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 102.438414][ T5814] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 102.482797][ T5985] kernel profiling enabled (shift: 23) [ 102.556390][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.566401][ T5985] loop2: detected capacity change from 0 to 128 [ 102.606932][ T5985] omfs: sysblock size (-58445445) is out of range [ 102.627339][ T5972] XFS (loop3): Ending clean mount [ 102.672790][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.681373][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.701032][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.713103][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.727696][ T5985] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.763217][ T5814] usb 2-1: Product: syz [ 102.810602][ T5986] Illegal XDP return value 1048578 on prog (id 2) dev N/A, expect packet loss! [ 102.880754][ T5814] usb 2-1: Manufacturer: syz [ 102.965366][ T5814] usb 2-1: SerialNumber: syz [ 103.076147][ T5814] usb 2-1: config 0 descriptor?? [ 103.086278][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 103.102702][ T5814] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 103.118558][ T5782] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 103.321508][ T5846] usb 2-1: USB disconnect, device number 2 [ 104.471993][ T5866] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (5866) [ 104.937526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.347164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 105.655674][ T5999] fuse: Invalid rootmode [ 106.457672][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.546628][ T6013] loop0: detected capacity change from 0 to 128 [ 106.579428][ T6013] omfs: sysblock size (-58445445) is out of range [ 106.727983][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 106.842933][ T5815] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 106.946117][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.156221][ T5815] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 107.287448][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.332063][ T5815] usb 2-1: Product: syz [ 107.357975][ T5815] usb 2-1: Manufacturer: syz [ 107.362829][ T5815] usb 2-1: SerialNumber: syz [ 107.399528][ T5815] usb 2-1: config 0 descriptor?? [ 107.432227][ T5815] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 107.657117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.767112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.787105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.820011][ T5815] gspca_sunplus: reg_r err -110 [ 109.168311][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.148173][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 110.172041][ T5846] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.176302][ T6035] fuse: Bad value for 'rootmode' [ 110.191384][ T5846] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.210836][ T5846] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 110.227506][ T5846] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 110.246683][ T5846] usb 4-1: Product: syz [ 110.251294][ T5846] usb 4-1: Manufacturer: syz [ 110.276370][ T5846] hub 4-1:4.0: USB hub found [ 110.337321][ T5815] sunplus: probe of 2-1:0.0 failed with error -110 [ 110.375529][ T5815] usb 2-1: USB disconnect, device number 3 [ 110.489221][ T5846] hub 4-1:4.0: 2 ports detected [ 110.747108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.777086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.747076][ C0] sched: RT throttling activated [ 111.763668][ T5846] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 111.817952][ T5846] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 111.926664][ T5846] usb 4-1: USB disconnect, device number 3 [ 112.130449][ T6054] loop2: detected capacity change from 0 to 128 [ 112.156842][ T6054] omfs: sysblock size (-58445445) is out of range [ 114.063994][ T6065] fuse: Bad value for 'rootmode' [ 114.122032][ T6067] netlink: 'syz.2.57': attribute type 5 has an invalid length. [ 114.138027][ T6067] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.147405][ T6067] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.157237][ T6067] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.165989][ T6067] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.187023][ T6067] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.196204][ T6067] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.205432][ T6067] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.214570][ T6067] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.897155][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.573441][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.584115][ T5815] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.593993][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.605891][ T5815] usb 3-1: config 0 descriptor?? [ 117.616217][ T5815] pwc: Askey VC010 type 2 USB webcam detected. [ 117.705310][ T5815] pwc: send_video_command error -71 [ 117.723572][ T5815] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 117.747931][ T5815] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 117.835066][ T6094] fuse: Bad value for 'rootmode' [ 117.978385][ T5815] usb 3-1: USB disconnect, device number 3 [ 121.452518][ T6108] loop3: detected capacity change from 0 to 32768 [ 121.489927][ T6108] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.68 (6108) [ 122.171899][ T6119] loop0: detected capacity change from 0 to 131072 [ 123.587420][ T6119] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 123.595799][ T6119] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 123.604382][ T6119] F2FS-fs (loop0): Test dummy encryption mode enabled [ 123.630474][ T6119] F2FS-fs (loop0): invalid crc value [ 123.662994][ T6119] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.711451][ T6119] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 123.739066][ T6119] F2FS-fs (loop0): Start checkpoint disabled! [ 123.786342][ T6119] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 123.793811][ T6119] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 125.257949][ T6140] fuse: Unknown parameter 'use00000000000000000000' [ 126.897690][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.107409][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 128.559868][ T23] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 128.592583][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.637457][ T23] usb 3-1: Product: syz [ 128.653026][ T23] usb 3-1: Manufacturer: syz [ 128.705436][ T23] usb 3-1: SerialNumber: syz [ 128.896408][ T23] usb 3-1: config 0 descriptor?? [ 129.135868][ T23] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 129.700658][ T23] ssu100: probe of 3-1:0.0 failed with error -71 [ 129.738332][ T23] usb 3-1: USB disconnect, device number 4 [ 131.470456][ T6190] overlayfs: missing 'lowerdir' [ 133.079301][ T6200] loop0: detected capacity change from 0 to 128 [ 133.160906][ T6200] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.203159][ T6205] loop1: detected capacity change from 0 to 128 [ 133.220786][ T6205] omfs: sysblock size (-58445445) is out of range [ 133.232164][ T6203] Cannot find add_set index 0 as target [ 133.322155][ T6200] hpfs: filesystem error: improperly stopped [ 133.410436][ T6200] hpfs: You really don't want any checks? You are crazy... [ 133.532562][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.550636][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.611929][ T6200] hpfs: hpfs_map_sector(): read error [ 133.696445][ T6200] hpfs: code page support is disabled [ 133.814825][ T6200] hpfs: hpfs_map_4sectors(): unaligned read [ 133.905902][ T6200] hpfs: hpfs_map_4sectors(): unaligned read [ 133.954792][ T6200] hpfs: filesystem error: unable to find root dir [ 134.006335][ T6200] hpfs: hpfs_map_4sectors(): unaligned read [ 134.521565][ T35] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.674711][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 135.387477][ T2134] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.476341][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.561884][ T35] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 136.067747][ T2134] usb 1-1: Using ep0 maxpacket: 16 [ 136.086984][ T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.097755][ T2134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.134841][ T2134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.173699][ T35] usb 3-1: config 0 descriptor?? [ 136.239572][ T2134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.288010][ T35] pwc: Askey VC010 type 2 USB webcam detected. [ 136.368169][ T2134] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.454694][ T2134] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.508808][ T2134] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.536109][ T2134] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.568198][ T2134] usb 1-1: Manufacturer: syz [ 136.604996][ T2134] usb 1-1: config 0 descriptor?? [ 136.628198][ T6233] overlayfs: missing 'lowerdir' [ 136.684832][ T35] pwc: recv_control_msg error -32 req 02 val 2b00 [ 136.697214][ T35] pwc: recv_control_msg error -32 req 02 val 2700 [ 136.715185][ T35] pwc: recv_control_msg error -32 req 02 val 2c00 [ 136.735553][ T35] pwc: recv_control_msg error -32 req 04 val 1000 [ 137.059400][ T35] pwc: recv_control_msg error -32 req 04 val 1400 [ 137.553301][ T35] pwc: recv_control_msg error -32 req 02 val 2000 [ 138.240164][ T35] pwc: recv_control_msg error -71 req 02 val 2100 [ 138.247475][ T35] pwc: recv_control_msg error -71 req 04 val 1500 [ 138.257803][ T35] pwc: recv_control_msg error -71 req 02 val 2500 [ 138.267534][ T2134] rc_core: IR keymap rc-hauppauge not found [ 138.273618][ T2134] Registered IR keymap rc-empty [ 138.281546][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.308677][ T35] pwc: recv_control_msg error -71 req 02 val 2400 [ 138.337420][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.353386][ T35] pwc: recv_control_msg error -71 req 02 val 2600 [ 138.385724][ T35] pwc: recv_control_msg error -71 req 02 val 2900 [ 138.394083][ T2134] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 138.439571][ T35] pwc: recv_control_msg error -71 req 02 val 2800 [ 138.463240][ T2134] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 138.482738][ T35] pwc: recv_control_msg error -71 req 04 val 1100 [ 138.491546][ T35] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.542476][ T35] pwc: Registered as video103. [ 138.561545][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.578497][ T35] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 138.609875][ T6246] FAULT_INJECTION: forcing a failure. [ 138.609875][ T6246] name failslab, interval 1, probability 0, space 0, times 1 [ 138.623513][ T35] usb 3-1: USB disconnect, device number 5 [ 138.630106][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.677360][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.705937][ T6246] CPU: 1 PID: 6246 Comm: syz.1.102 Not tainted syzkaller #0 [ 138.713591][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.723971][ T6246] Call Trace: [ 138.727316][ T6246] [ 138.730361][ T6246] dump_stack_lvl+0x18c/0x250 [ 138.735060][ T6246] ? show_regs_print_info+0x20/0x20 [ 138.740289][ T6246] ? load_image+0x420/0x420 [ 138.744818][ T6246] ? __might_sleep+0xe0/0xe0 [ 138.749423][ T6246] ? __lock_acquire+0x7d80/0x7d80 [ 138.754463][ T6246] should_fail_ex+0x394/0x4c0 [ 138.759186][ T6246] should_failslab+0x9/0x20 [ 138.763694][ T6246] slab_pre_alloc_hook+0x59/0x300 [ 138.768744][ T6246] ? memcg_list_lru_alloc+0x335/0xb00 [ 138.774134][ T6246] ? memcg_list_lru_alloc+0x335/0xb00 [ 138.779531][ T6246] __kmem_cache_alloc_node+0x53/0x250 [ 138.784935][ T6246] ? memcg_list_lru_alloc+0x335/0xb00 [ 138.790335][ T6246] __kmalloc+0xa7/0x240 [ 138.794695][ T6246] memcg_list_lru_alloc+0x335/0xb00 [ 138.799927][ T6246] ? memcg_reparent_list_lrus+0x860/0x860 [ 138.805687][ T6246] ? get_obj_cgroup_from_current+0xd4/0x280 [ 138.811629][ T6246] ? get_obj_cgroup_from_current+0xd4/0x280 [ 138.817648][ T6246] slab_pre_alloc_hook+0x2ad/0x300 [ 138.822809][ T6246] ? slab_pre_alloc_hook+0xb1/0x300 [ 138.828128][ T6246] kmem_cache_alloc_lru+0x4d/0x2b0 [ 138.833353][ T6246] ? bdev_alloc_inode+0x28/0x60 [ 138.838227][ T6246] bdev_alloc_inode+0x28/0x60 [ 138.843033][ T6246] ? bd_init_fs_context+0xa0/0xa0 [ 138.848124][ T6246] new_inode_pseudo+0x63/0x1d0 [ 138.852978][ T6246] new_inode+0x22/0x1d0 [ 138.857166][ T6246] ? init_timer_key+0x161/0x2a0 [ 138.862066][ T6246] bdev_alloc+0x24/0x340 [ 138.866324][ T6246] __alloc_disk_node+0x12b/0x570 [ 138.871280][ T6246] __blk_alloc_disk+0x2e/0x80 [ 138.875971][ T6246] dm_create+0x46f/0xf90 [ 138.880348][ T6246] dev_create+0x1f8/0x400 [ 138.884729][ T6246] ? list_devices+0x820/0x820 [ 138.889424][ T6246] ? __might_fault+0xaa/0x120 [ 138.894128][ T6246] ? __might_fault+0xc6/0x120 [ 138.898833][ T6246] ? __might_fault+0xaa/0x120 [ 138.903517][ T6246] ? list_devices+0x820/0x820 [ 138.908226][ T6246] dm_ctl_ioctl+0x975/0xd00 [ 138.912935][ T6246] ? list_devices+0x820/0x820 [ 138.917647][ T6246] ? dm_poll+0x120/0x120 [ 138.921960][ T6246] ? bpf_lsm_file_ioctl+0x9/0x10 [ 138.927558][ T6246] ? security_file_ioctl+0x80/0xa0 [ 138.932836][ T6246] ? dm_poll+0x120/0x120 [ 138.937110][ T6246] __se_sys_ioctl+0xfd/0x170 [ 138.941731][ T6246] do_syscall_64+0x55/0xb0 [ 138.946173][ T6246] ? clear_bhb_loop+0x40/0x90 [ 138.950975][ T6246] ? clear_bhb_loop+0x40/0x90 [ 138.955844][ T6246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.961784][ T6246] RIP: 0033:0x7f5cf919e159 [ 138.966247][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.985903][ T6246] RSP: 002b:00007f5cf9feb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.994379][ T6246] RAX: ffffffffffffffda RBX: 00007f5cf9425fa0 RCX: 00007f5cf919e159 [ 139.002410][ T6246] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 139.010516][ T6246] RBP: 00007f5cf923506b R08: 0000000000000000 R09: 0000000000000000 [ 139.018514][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.026676][ T6246] R13: 00007f5cf9426038 R14: 00007f5cf9425fa0 R15: 00007ffd1a57af88 [ 139.034703][ T6246] [ 139.066955][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.117258][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.147266][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.187619][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.217563][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.257253][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.288114][ T2134] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.462423][ T35] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.482644][ T2134] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 139.491236][ T2134] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.511001][ T2134] usb 1-1: USB disconnect, device number 3 [ 139.657239][ T35] usb 3-1: Using ep0 maxpacket: 32 [ 139.682005][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.734910][ T35] usb 3-1: config 0 has no interfaces? [ 139.746915][ T6254] loop0: detected capacity change from 0 to 128 [ 139.769064][ T6254] omfs: sysblock size (-58445445) is out of range [ 141.460536][ T35] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.501844][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.511645][ T35] usb 3-1: Product: syz [ 141.515946][ T35] usb 3-1: Manufacturer: syz [ 141.521103][ T35] usb 3-1: SerialNumber: syz [ 141.529990][ T6209] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.541988][ T35] usb 3-1: config 0 descriptor?? [ 141.551380][ T35] usb 3-1: can't set config #0, error -71 [ 141.612426][ T35] usb 3-1: USB disconnect, device number 6 [ 141.995382][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 143.639846][ T6266] overlayfs: missing 'lowerdir' [ 143.717164][ T27] audit: type=1326 audit(1790996827.197:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 143.742152][ T27] audit: type=1326 audit(1790996827.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 143.783755][ T27] audit: type=1326 audit(1790996827.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 143.812830][ T6273] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.824249][ T27] audit: type=1326 audit(1790996827.227:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 143.851497][ T27] audit: type=1326 audit(1790996827.227:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 143.946194][ T6278] random: crng reseeded on system resumption [ 143.967388][ T35] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.340247][ T6281] loop3: detected capacity change from 0 to 128 [ 145.129053][ T27] audit: type=1326 audit(1790996827.227:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 145.336290][ T6281] Bluetooth: MGMT ver 1.22 [ 145.369129][ T27] audit: type=1326 audit(1790996827.227:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 145.515906][ T27] audit: type=1326 audit(1790996827.227:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 145.565676][ T27] audit: type=1326 audit(1790996827.227:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 145.586047][ T35] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.590759][ T27] audit: type=1326 audit(1790996827.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24ab19e159 code=0x7ffc0000 [ 145.601110][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.631794][ T35] usb 3-1: Product: syz [ 145.636256][ T35] usb 3-1: Manufacturer: syz [ 145.641004][ T35] usb 3-1: SerialNumber: syz [ 145.693773][ T6283] FAULT_INJECTION: forcing a failure. [ 145.693773][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 145.707778][ T6283] CPU: 0 PID: 6283 Comm: syz.1.114 Not tainted syzkaller #0 [ 145.715124][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.725494][ T6283] Call Trace: [ 145.728800][ T6283] [ 145.731857][ T6283] dump_stack_lvl+0x18c/0x250 [ 145.736586][ T6283] ? show_regs_print_info+0x20/0x20 [ 145.741917][ T6283] ? load_image+0x420/0x420 [ 145.746568][ T6283] ? __might_sleep+0xe0/0xe0 [ 145.751213][ T6283] ? __lock_acquire+0x7d80/0x7d80 [ 145.756327][ T6283] ? mtree_load+0x109/0x840 [ 145.760889][ T6283] should_fail_ex+0x394/0x4c0 [ 145.765688][ T6283] should_failslab+0x9/0x20 [ 145.765780][ T6283] slab_pre_alloc_hook+0x59/0x300 [ 145.775507][ T6283] ? can_vma_merge_before+0x6e/0x280 [ 145.780846][ T6283] kmem_cache_alloc+0x5a/0x2c0 [ 145.785661][ T6283] ? vm_area_dup+0x27/0x270 [ 145.790194][ T6283] vm_area_dup+0x27/0x270 [ 145.794554][ T6283] __split_vma+0x1a8/0xc20 [ 145.799015][ T6283] ? mmap_write_unlock+0x160/0x160 [ 145.804193][ T6283] ? split_vma+0x8f/0x110 [ 145.808654][ T6283] userfaultfd_ioctl+0x3f7f/0x4a60 [ 145.813818][ T6283] ? userfaultfd_poll+0x1c0/0x1c0 [ 145.819113][ T6283] ? do_vfs_ioctl+0x156c/0x1cc0 [ 145.824343][ T6283] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 145.830289][ T6283] ? tomoyo_path_number_perm+0x217/0x5e0 [ 145.836060][ T6283] ? __lock_acquire+0x7d80/0x7d80 [ 145.841669][ T6283] ? slab_free_freelist_hook+0x130/0x1a0 [ 145.847338][ T6283] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 145.853223][ T6283] ? __kmem_cache_free+0xba/0x1f0 [ 145.858312][ T6283] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 145.863996][ T6283] ? tomoyo_path_number_perm+0x217/0x5e0 [ 145.869693][ T6283] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 145.875251][ T6283] ? bpf_lsm_file_ioctl+0x9/0x10 [ 145.880409][ T6283] ? security_file_ioctl+0x80/0xa0 [ 145.885583][ T6283] ? userfaultfd_poll+0x1c0/0x1c0 [ 145.890634][ T6283] __se_sys_ioctl+0xfd/0x170 [ 145.895259][ T6283] do_syscall_64+0x55/0xb0 [ 145.899739][ T6283] ? clear_bhb_loop+0x40/0x90 [ 145.904731][ T6283] ? clear_bhb_loop+0x40/0x90 [ 145.909544][ T6283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.915633][ T6283] RIP: 0033:0x7f5cf919e159 [ 145.920164][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.940226][ T6283] RSP: 002b:00007f5cf9feb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.948678][ T6283] RAX: ffffffffffffffda RBX: 00007f5cf9425fa0 RCX: 00007f5cf919e159 [ 145.956872][ T6283] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000004 [ 145.965149][ T6283] RBP: 00007f5cf923506b R08: 0000000000000000 R09: 0000000000000000 [ 145.973403][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.981592][ T6283] R13: 00007f5cf9426038 R14: 00007f5cf9425fa0 R15: 00007ffd1a57af88 [ 145.989860][ T6283] [ 146.166838][ T6285] loop3: detected capacity change from 0 to 128 [ 146.176445][ T6285] omfs: sysblock size (-58445445) is out of range [ 146.346294][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 146.379235][ T6212] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.410276][ T5818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.709167][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.722868][ T5818] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 146.732622][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.823091][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.117'. [ 147.567136][ T5818] usb 1-1: Product: syz [ 147.571457][ T5818] usb 1-1: Manufacturer: syz [ 147.576221][ T5818] usb 1-1: SerialNumber: syz [ 147.617380][ T5818] usb 1-1: can't set config #1, error -71 [ 147.635233][ T5818] usb 1-1: USB disconnect, device number 4 [ 148.561287][ T6305] overlayfs: missing 'lowerdir' [ 149.467272][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 149.497586][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 151.461349][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 151.785109][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 151.817619][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 151.847725][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 151.935747][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 152.080820][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 152.301572][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 152.561710][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 152.751309][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 152.933347][ T35] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 152.995545][ T35] lan78xx: probe of 3-1:1.0 failed with error -71 [ 153.080942][ T35] usb 3-1: USB disconnect, device number 7 [ 153.218484][ T6335] loop3: detected capacity change from 0 to 8 [ 153.365160][ T6335] SQUASHFS error: Unable to read directory block [1d0:0] [ 154.412552][ T6343] netlink: 'syz.2.128': attribute type 5 has an invalid length. [ 155.047886][ T6347] overlayfs: missing 'lowerdir' [ 155.219450][ T6352] loop3: detected capacity change from 0 to 128 [ 155.227279][ T6352] omfs: sysblock size (-58445445) is out of range [ 155.307176][ T6209] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.583639][ T6358] loop1: detected capacity change from 0 to 32768 [ 155.638860][ T6358] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 155.832473][ T6364] loop3: detected capacity change from 0 to 128 [ 156.338214][ T6212] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 157.178287][ T6376] loop3: detected capacity change from 0 to 8 [ 157.415134][ T6381] loop2: detected capacity change from 0 to 128 [ 157.557530][ T6381] omfs: sysblock size (-58445445) is out of range [ 158.302541][ T6378] loop1: detected capacity change from 0 to 8 [ 159.512730][ T6384] overlayfs: missing 'lowerdir' [ 159.578318][ T6389] loop0: detected capacity change from 0 to 128 [ 160.850904][ T6397] loop3: detected capacity change from 0 to 32768 [ 160.890390][ T6397] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 160.890817][ T6398] loop1: detected capacity change from 0 to 32768 [ 160.911621][ T6398] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 160.935078][ T6400] Zero length message leads to an empty skb [ 161.692135][ T6407] loop1: detected capacity change from 0 to 128 [ 162.129036][ T6402] loop2: detected capacity change from 0 to 128 [ 162.141561][ T6402] omfs: sysblock size (-58445445) is out of range [ 162.236111][ T6410] loop3: detected capacity change from 0 to 128 [ 162.908714][ T6415] loop3: detected capacity change from 0 to 128 [ 162.916250][ T6415] omfs: sysblock size (-58445445) is out of range [ 163.130591][ T6420] loop1: detected capacity change from 0 to 8 [ 164.067918][ T6426] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.187672][ T6426] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.672931][ T6440] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 165.739223][ T6440] team0: Port device netdevsim0 added [ 165.905498][ T6442] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 166.025312][ T6442] team0: Port device netdevsim0 removed [ 166.066714][ T6442] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 166.716677][ T6442] syz.1.163 (6442) used greatest stack depth: 20552 bytes left [ 167.101602][ T6448] loop1: detected capacity change from 0 to 40427 [ 167.129707][ T6448] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 167.137709][ T6448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 167.200557][ T6448] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.337525][ T6448] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 167.344649][ T6448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.372760][ T6454] loop2: detected capacity change from 0 to 8 [ 168.078792][ T6461] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.107233][ T6461] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.857984][ T6495] kAFS: No cell specified [ 172.781204][ T6502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 172.797446][ T6502] veth0_to_bond: entered promiscuous mode [ 172.803483][ T6502] veth0_to_bond: entered allmulticast mode [ 172.849631][ T6501] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.086328][ T6501] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 175.220972][ T6527] loop0: detected capacity change from 0 to 128 [ 175.414709][ T6527] omfs: sysblock size (-58445445) is out of range [ 176.993553][ T6540] overlayfs: missing 'lowerdir' [ 178.606167][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.197'. [ 179.822939][ T6564] loop2: detected capacity change from 0 to 32768 [ 179.869582][ T6564] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 180.731945][ T6565] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 180.804011][ T6562] loop3: detected capacity change from 0 to 128 [ 180.882389][ T6574] overlayfs: missing 'lowerdir' [ 180.891807][ T6562] omfs: sysblock size (-58445445) is out of range [ 181.113535][ T6579] loop0: detected capacity change from 0 to 512 [ 183.350418][ T6593] loop3: detected capacity change from 0 to 1024 [ 183.410192][ T6593] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 183.481251][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 183.580591][ T6598] loop2: detected capacity change from 0 to 8 [ 184.473469][ T6604] overlayfs: missing 'lowerdir' [ 186.909977][ T6616] loop0: detected capacity change from 0 to 512 [ 186.934385][ T6616] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.979359][ T6630] loop1: detected capacity change from 0 to 32768 [ 189.044523][ T6630] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 190.327491][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.224'. [ 190.336666][ T6636] veth0_to_bond: entered promiscuous mode [ 190.367144][ T6636] veth0_to_bond: entered allmulticast mode [ 190.392870][ T6565] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 190.569135][ T6637] loop1: detected capacity change from 0 to 4096 [ 190.600809][ T6637] ntfs3: Bad value for 'gid' [ 191.021728][ T6637] loop1: detected capacity change from 0 to 32768 [ 191.029990][ T6637] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 191.310837][ T6577] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 191.392836][ T6642] 9pnet_fd: Insufficient options for proto=fd [ 192.561719][ T6648] capability: warning: `syz.1.226' uses 32-bit capabilities (legacy support in use) [ 192.636104][ T6652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.669102][ T6653] loop2: detected capacity change from 0 to 8 [ 192.698304][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 192.781445][ T6655] random: crng reseeded on system resumption [ 193.541660][ T6655] loop0: detected capacity change from 0 to 128 [ 194.580918][ T6670] loop1: detected capacity change from 0 to 128 [ 194.774124][ T6668] loop0: detected capacity change from 0 to 32768 [ 194.789679][ T6668] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 194.800714][ T6668] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 194.809626][ T6668] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 194.819229][ T6668] BTRFS info (device loop0): use zstd compression, level 3 [ 194.826662][ T6668] BTRFS info (device loop0): force clearing of disk cache [ 194.834282][ T6668] BTRFS info (device loop0): enabling disk space caching [ 194.841496][ T6668] BTRFS info (device loop0): disk space caching is enabled [ 194.882977][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.890100][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.939379][ T6668] BTRFS info (device loop0): enabling ssd optimizations [ 194.946484][ T6668] BTRFS info (device loop0): auto enabling async discard [ 194.958433][ T6668] BTRFS info (device loop0): rebuilding free space tree [ 194.986942][ T6668] BTRFS info (device loop0): disabling free space tree [ 194.995278][ T6668] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.005082][ T6668] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.857952][ T5782] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 196.580419][ T6666] loop3: detected capacity change from 0 to 32768 [ 196.664114][ T6680] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (6680) [ 196.791592][ T6707] loop1: detected capacity change from 0 to 8 [ 197.449953][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 197.449971][ T27] audit: type=1800 audit(1790996880.937:35): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 197.799252][ T6719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.908929][ T6720] random: crng reseeded on system resumption [ 197.910047][ T35] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 198.386827][ T5781] Bluetooth: hci2: Invalid handle: 0x6465 > 0x0eff [ 198.636729][ T6720] loop1: detected capacity change from 0 to 128 [ 199.290089][ T35] usb 1-1: Using ep0 maxpacket: 16 [ 199.315049][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 199.315918][ T35] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.360851][ T35] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.387364][ T35] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 199.411286][ T35] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.438612][ T35] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 199.467204][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.491109][ T35] usb 1-1: config 0 descriptor?? [ 202.510418][ T35] usbhid 1-1:0.0: can't add hid device: -71 [ 202.516883][ T35] usbhid: probe of 1-1:0.0 failed with error -71 [ 202.552465][ T35] usb 1-1: USB disconnect, device number 5 [ 202.644145][ T6741] loop3: detected capacity change from 0 to 1024 [ 202.698771][ T6741] EXT4-fs: Ignoring removed bh option [ 202.767707][ T6741] EXT4-fs (loop3): stripe (258) is not aligned with cluster size (16), stripe is disabled [ 202.895470][ T6741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.503955][ T6741] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.558522][ T6751] jffs2: notice: (6751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.692876][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.685692][ T6755] loop3: detected capacity change from 0 to 8 [ 208.984533][ T6775] loop1: detected capacity change from 0 to 8 [ 209.483495][ T6779] loop0: detected capacity change from 0 to 128 [ 209.502770][ T6779] omfs: sysblock size (-58445445) is out of range [ 209.702472][ T6680] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.191302][ T6794] loop1: detected capacity change from 0 to 8 [ 213.505685][ T6787] loop0: detected capacity change from 0 to 32768 [ 213.588806][ T6796] loop1: detected capacity change from 0 to 32768 [ 213.597351][ T6796] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 213.619646][ T27] audit: type=1800 audit(1790996897.107:36): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.262" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 213.757304][ T6577] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.825563][ T6815] fuse: Unknown parameter '0x0000000000000003' [ 217.952774][ T6828] loop0: detected capacity change from 0 to 8 [ 220.038449][ T6839] loop3: detected capacity change from 0 to 32768 [ 220.051279][ T6839] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 220.167388][ T6842] loop0: detected capacity change from 0 to 8 [ 220.492372][ T6844] loop3: detected capacity change from 0 to 128 [ 222.390760][ T6849] fuse: Unknown parameter '0x0000000000000003' [ 224.302061][ T6862] FAULT_INJECTION: forcing a failure. [ 224.302061][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 224.357298][ T6862] CPU: 1 PID: 6862 Comm: syz.0.287 Not tainted syzkaller #0 [ 224.364761][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 224.374879][ T6862] Call Trace: [ 224.378192][ T6862] [ 224.381168][ T6862] dump_stack_lvl+0x18c/0x250 [ 224.385945][ T6862] ? show_regs_print_info+0x20/0x20 [ 224.391208][ T6862] ? load_image+0x420/0x420 [ 224.392503][ T6864] loop3: detected capacity change from 0 to 512 [ 224.395744][ T6862] ? __might_sleep+0xe0/0xe0 [ 224.403684][ T6864] EXT4-fs: Ignoring removed nobh option [ 224.406673][ T6862] ? __lock_acquire+0x7d80/0x7d80 [ 224.417514][ T6862] should_fail_ex+0x394/0x4c0 [ 224.422265][ T6862] should_failslab+0x9/0x20 [ 224.426812][ T6862] slab_pre_alloc_hook+0x59/0x300 [ 224.431876][ T6862] kmem_cache_alloc+0x5a/0x2c0 [ 224.436698][ T6862] ? sk_prot_alloc+0x57/0x210 [ 224.441430][ T6862] sk_prot_alloc+0x57/0x210 [ 224.446067][ T6862] ? sk_alloc+0x24/0x350 [ 224.450390][ T6862] sk_alloc+0x3a/0x350 [ 224.454630][ T6862] unix_create1+0xb0/0x780 [ 224.459156][ T6862] ? bpf_lsm_socket_post_create+0x9/0x10 [ 224.465021][ T6862] unix_stream_connect+0x24d/0xd60 [ 224.470184][ T6862] p9_fd_create_unix+0x21a/0x440 [ 224.475217][ T6862] ? p9_pollwake+0x160/0x160 [ 224.479839][ T6862] ? lockdep_hardirqs_on+0x98/0x150 [ 224.485108][ T6862] ? p9_client_create+0x78a/0x1050 [ 224.490270][ T6862] ? __kmem_cache_free+0xba/0x1f0 [ 224.495475][ T6862] p9_client_create+0x827/0x1050 [ 224.500588][ T6862] ? do_trace_9p_fid_put+0x20/0x20 [ 224.505742][ T6862] ? lockdep_softirqs_off+0x440/0x440 [ 224.511533][ T6862] ? __raw_spin_lock_init+0x45/0x100 [ 224.516888][ T6862] v9fs_session_init+0x1aa/0x1960 [ 224.521986][ T6862] ? v9fs_show_options+0x700/0x700 [ 224.527268][ T6862] v9fs_mount+0xd0/0xb40 [ 224.531575][ T6862] ? kfree+0x31/0x1a0 [ 224.535785][ T6862] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 224.541649][ T6862] ? vfs_parse_fs_param+0x420/0x420 [ 224.546983][ T6862] legacy_get_tree+0xea/0x180 [ 224.552051][ T6862] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 224.557983][ T6862] vfs_get_tree+0x8c/0x280 [ 224.562535][ T6862] do_new_mount+0x24a/0xa40 [ 224.567266][ T6862] __se_sys_mount+0x2e7/0x3d0 [ 224.572334][ T6862] ? __x64_sys_mount+0xc0/0xc0 [ 224.577217][ T6862] ? lockdep_hardirqs_on+0x98/0x150 [ 224.582424][ T6862] ? __x64_sys_mount+0x20/0xc0 [ 224.587222][ T6862] do_syscall_64+0x55/0xb0 [ 224.591693][ T6862] ? clear_bhb_loop+0x40/0x90 [ 224.596466][ T6862] ? clear_bhb_loop+0x40/0x90 [ 224.601262][ T6862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.607301][ T6862] RIP: 0033:0x7f24ab19e159 [ 224.611822][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.631535][ T6862] RSP: 002b:00007f24ac141028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.639982][ T6862] RAX: ffffffffffffffda RBX: 00007f24ab425fa0 RCX: 00007f24ab19e159 [ 224.648397][ T6862] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000040 [ 224.656381][ T6862] RBP: 00007f24ab23506b R08: 0000200000000280 R09: 0000000000000000 [ 224.664887][ T6862] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.673038][ T6862] R13: 00007f24ab426038 R14: 00007f24ab425fa0 R15: 00007ffce3addee8 [ 224.681215][ T6862] [ 224.727647][ T6862] 9pnet_fd: p9_fd_create_unix (6862): problem connecting socket: ./proc: -12 [ 226.232431][ T6872] loop1: detected capacity change from 0 to 8 [ 227.951675][ T6864] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 228.997316][ T6877] fuse: Unknown parameter '0x0000000000000003' [ 232.983083][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 233.054923][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 233.400693][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 233.661003][ T6900] ceph: No mds server is up or the cluster is laggy [ 233.732140][ T6907] loop2: detected capacity change from 0 to 32768 [ 233.769537][ T6907] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 233.927808][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 234.713633][ T6903] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 234.730117][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 234.777206][ T6914] veth0_to_bond: entered promiscuous mode [ 234.804898][ T6914] veth0_to_bond: entered allmulticast mode [ 236.312686][ T6923] fuse: Unknown parameter '0x0000000000000003' [ 236.623783][ T6929] loop0: detected capacity change from 0 to 8 [ 241.294785][ T6949] loop3: detected capacity change from 0 to 512 [ 243.317592][ T6949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.377272][ T6949] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.579004][ T6962] loop1: detected capacity change from 0 to 8 [ 245.409334][ T6961] SQUASHFS error: Unable to read directory block [1d0:0] [ 245.531933][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.442150][ T6970] input: syz1 as /devices/virtual/input/input8 [ 253.211196][ T7007] loop2: detected capacity change from 0 to 8 [ 254.855368][ T7007] SQUASHFS error: Unable to read directory block [1d0:0] [ 255.251124][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.320'. [ 256.061406][ T7011] loop2: detected capacity change from 0 to 32768 [ 256.869901][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.876367][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.889444][ T7011] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.929530][ T7011] XFS (loop2): Ending clean mount [ 257.161131][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 258.185657][ T7022] loop1: detected capacity change from 0 to 32768 [ 261.113198][ T7057] loop2: detected capacity change from 0 to 8 [ 261.188389][ T7057] SQUASHFS error: Unable to read directory block [1d0:0] [ 261.778898][ T7061] misc userio: The device must be registered before sending interrupts [ 261.904153][ T7062] loop1: detected capacity change from 0 to 128 [ 262.172550][ T7062] omfs: sysblock size (-58445445) is out of range [ 266.499083][ T7084] loop3: detected capacity change from 0 to 32768 [ 266.538121][ T7084] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 268.460157][ T7040] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 268.950137][ T7098] misc userio: The device must be registered before sending interrupts [ 270.274283][ T5814] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 270.296695][ T7102] ceph: No mds server is up or the cluster is laggy [ 271.608477][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 277.004804][ T7136] loop2: detected capacity change from 0 to 4096 [ 277.147356][ T7136] ntfs3: loop2: ino=19, mi_enum_attr [ 277.153348][ T7136] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 277.348993][ T7140] loop1: detected capacity change from 0 to 8 [ 277.482488][ T7140] SQUASHFS error: Unable to read directory block [1d0:0] [ 279.329407][ T5846] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 280.068846][ T7151] ceph: No mds server is up or the cluster is laggy [ 280.599981][ T7157] loop0: detected capacity change from 0 to 40427 [ 280.819310][ T7157] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable [ 281.593288][ T7164] loop3: detected capacity change from 0 to 128 [ 281.617154][ T7164] omfs: sysblock size (-58445445) is out of range [ 282.081882][ T7137] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.376874][ T7168] loop1: detected capacity change from 0 to 2048 [ 282.409201][ T7168] NILFS (loop1): invalid segment: Magic number mismatch [ 282.416859][ T7168] NILFS (loop1): trying rollback from an earlier position [ 282.625435][ T7168] NILFS (loop1): recovery complete [ 282.666448][ T7175] loop3: detected capacity change from 0 to 8 [ 282.717133][ T7175] SQUASHFS error: Unable to read directory block [1d0:0] [ 283.535735][ T7177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.098314][ T7207] loop0: detected capacity change from 0 to 128 [ 287.176144][ T7207] omfs: sysblock size (-58445445) is out of range [ 288.482726][ T7215] loop2: detected capacity change from 0 to 8 [ 288.598219][ T7215] SQUASHFS error: Unable to read directory block [1d0:0] [ 290.316125][ T7233] loop3: detected capacity change from 0 to 32768 [ 290.332275][ T7233] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 292.750967][ T7137] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 294.389563][ T7273] loop3: detected capacity change from 0 to 32768 [ 294.404604][ T7273] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 295.227306][ T7137] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.430692][ T7280] loop3: detected capacity change from 0 to 128 [ 298.881164][ T7290] loop1: detected capacity change from 0 to 128 [ 298.917623][ T7290] omfs: sysblock size (-58445445) is out of range [ 300.904037][ T7308] loop1: detected capacity change from 0 to 512 [ 300.912095][ T7308] EXT4-fs: Ignoring removed nobh option [ 301.075421][ T7308] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.413: invalid indirect mapped block 256 (level 2) [ 301.192739][ T7308] EXT4-fs (loop1): 2 truncates cleaned up [ 301.226493][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.416012][ T7312] loop3: detected capacity change from 0 to 32768 [ 301.449531][ T7312] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 301.760929][ T7137] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.842124][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.571707][ T7322] loop3: detected capacity change from 0 to 128 [ 305.589955][ T7335] loop3: detected capacity change from 0 to 128 [ 305.655305][ T7335] omfs: sysblock size (-58445445) is out of range [ 307.132766][ T7137] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.578413][ T7345] loop3: detected capacity change from 0 to 8 [ 307.627619][ T7345] SQUASHFS error: Unable to read directory block [1d0:0] [ 309.034240][ T7351] loop3: detected capacity change from 0 to 128 [ 309.182909][ T7351] omfs: sysblock size (-58445445) is out of range [ 309.466087][ T7354] loop1: detected capacity change from 0 to 32768 [ 309.495903][ T7354] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 309.707218][ T7141] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.964206][ T7356] loop1: detected capacity change from 0 to 128 [ 310.638688][ T7358] loop3: detected capacity change from 0 to 4096 [ 310.840619][ T7358] ntfs3: loop3: ino=19, mi_enum_attr [ 310.846587][ T7363] loop1: detected capacity change from 0 to 128 [ 310.863564][ T7363] omfs: sysblock size (-58445445) is out of range [ 310.916056][ T7358] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 313.868260][ T7384] loop1: detected capacity change from 0 to 8 [ 313.890509][ T7382] loop3: detected capacity change from 0 to 8 [ 315.766551][ T7384] SQUASHFS error: Failed to allocate lzo workspace [ 315.774212][ T7384] squashfs image failed sanity check [ 315.929004][ T7382] SQUASHFS error: Unable to read directory block [1d0:0] [ 316.377529][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 316.559421][ T23] usb 1-1: config 0 has no interfaces? [ 316.565268][ T23] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 316.918641][ T7395] loop3: detected capacity change from 0 to 32768 [ 316.933540][ T7395] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 316.950126][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.962092][ T23] usb 1-1: config 0 descriptor?? [ 317.101359][ T7390] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.199067][ T5814] usb 1-1: USB disconnect, device number 6 [ 317.476388][ T7399] loop3: detected capacity change from 0 to 128 [ 317.847858][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.854373][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.568749][ T7405] loop2: detected capacity change from 0 to 128 [ 318.582343][ T7405] omfs: sysblock size (-58445445) is out of range [ 320.150333][ T7413] loop3: detected capacity change from 0 to 128 [ 320.176509][ T7413] omfs: sysblock size (-58445445) is out of range [ 320.482433][ T7412] loop0: detected capacity change from 0 to 4096 [ 321.721826][ T7412] ntfs3: loop0: ino=19, mi_enum_attr [ 321.758967][ T7412] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 323.663007][ T7439] loop3: detected capacity change from 0 to 128 [ 323.982715][ T7439] omfs: sysblock size (-58445445) is out of range [ 325.756590][ T7390] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 326.573630][ T7441] loop1: detected capacity change from 0 to 128 [ 326.611987][ T7441] omfs: sysblock size (-58445445) is out of range [ 327.127180][ T7450] loop0: detected capacity change from 0 to 128 [ 327.841218][ T7450] omfs: sysblock size (-58445445) is out of range [ 329.887517][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 330.189088][ T5885] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 330.215948][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.339006][ T5885] usb 4-1: config 0 descriptor?? [ 331.063333][ T5885] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 331.117190][ T5885] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 331.156399][ T5885] [drm:udl_init] *ERROR* Selecting channel failed [ 331.215428][ T5885] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 331.238621][ T5885] [drm] Initialized udl on minor 2 [ 331.271229][ T5885] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 331.313072][ T5885] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 331.353507][ T5814] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 331.379816][ T5885] usb 4-1: USB disconnect, device number 4 [ 331.394285][ T5814] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 334.063960][ T7481] overlay: Unknown parameter 'dev/cpu/#/msr' [ 335.489038][ T7487] loop1: detected capacity change from 0 to 8 [ 335.640538][ T7487] SQUASHFS error: Unable to read directory block [1d0:0] [ 336.346066][ T7493] loop0: detected capacity change from 0 to 32768 [ 336.397761][ T7493] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 336.410027][ T7493] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 336.419218][ T7493] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 336.429417][ T7493] BTRFS info (device loop0): use zstd compression, level 3 [ 336.436839][ T7493] BTRFS info (device loop0): force clearing of disk cache [ 336.444679][ T7493] BTRFS info (device loop0): enabling disk space caching [ 336.452126][ T7493] BTRFS info (device loop0): disk space caching is enabled [ 336.684889][ T7493] BTRFS info (device loop0): enabling ssd optimizations [ 336.692341][ T7493] BTRFS info (device loop0): auto enabling async discard [ 336.707741][ T7493] BTRFS info (device loop0): rebuilding free space tree [ 336.757850][ T7493] BTRFS info (device loop0): disabling free space tree [ 336.765125][ T7493] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 336.775077][ T7493] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 336.826538][ T7512] tap0: tun_chr_ioctl cmd 1074025677 [ 336.851755][ T7512] tap0: linktype set to 777 [ 338.610534][ T5782] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 341.414168][ T7533] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 341.425302][ T7533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 342.596334][ T7537] loop1: detected capacity change from 0 to 128 [ 342.614785][ T7537] omfs: sysblock size (-58445445) is out of range [ 343.720347][ T7539] loop1: detected capacity change from 0 to 32768 [ 343.729548][ T7539] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.480 (7539) [ 343.753779][ T7539] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 343.764405][ T7539] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 343.773416][ T7539] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 343.783024][ T7539] BTRFS info (device loop1): use zstd compression, level 3 [ 343.790377][ T7539] BTRFS info (device loop1): force clearing of disk cache [ 343.797591][ T7539] BTRFS info (device loop1): enabling disk space caching [ 343.804661][ T7539] BTRFS info (device loop1): disk space caching is enabled [ 344.134192][ T7539] BTRFS info (device loop1): enabling ssd optimizations [ 344.141638][ T7539] BTRFS info (device loop1): auto enabling async discard [ 344.167202][ T7539] BTRFS info (device loop1): rebuilding free space tree [ 344.371953][ T7539] BTRFS info (device loop1): disabling free space tree [ 344.379406][ T7539] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 344.389232][ T7539] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 345.445256][ T5777] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 345.870315][ T7563] loop2: detected capacity change from 0 to 4096 [ 346.894280][ T7563] ntfs3: loop2: ino=19, mi_enum_attr [ 346.975267][ T7572] loop3: detected capacity change from 0 to 128 [ 347.015033][ T7563] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 347.517936][ T7575] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 347.528318][ T7575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 348.400356][ T7572] omfs: sysblock size (-58445445) is out of range [ 348.660960][ T7496] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 348.967476][ T6618] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 349.260257][ T6618] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.892264][ T6618] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.906461][ T6618] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 349.916904][ T6618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.999350][ T6618] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 350.438420][ T2323] pvrusb2: Failed to submit write-control URB status=-2 [ 350.550421][ T7592] loop2: detected capacity change from 0 to 32768 [ 350.574529][ T6618] usb 1-1: USB disconnect, device number 7 [ 350.599776][ T7592] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.491 (7592) [ 350.615639][ T2323] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 350.707049][ T2323] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 350.715757][ T7592] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 350.727211][ T7592] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 350.736262][ T7592] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 350.747014][ T7592] BTRFS info (device loop2): use zstd compression, level 3 [ 350.754475][ T7592] BTRFS info (device loop2): force clearing of disk cache [ 350.762303][ T7592] BTRFS info (device loop2): enabling disk space caching [ 350.769524][ T7592] BTRFS info (device loop2): disk space caching is enabled [ 351.355917][ T7592] BTRFS info (device loop2): enabling ssd optimizations [ 351.363723][ T7592] BTRFS info (device loop2): auto enabling async discard [ 351.378672][ T7592] BTRFS info (device loop2): rebuilding free space tree [ 351.485906][ T7592] BTRFS info (device loop2): disabling free space tree [ 351.493408][ T7592] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 351.503339][ T7592] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 352.366926][ T7616] loop0: detected capacity change from 0 to 32768 [ 352.402308][ T7616] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.493 (7616) [ 352.572299][ T7494] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.588573][ T5778] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 353.204660][ T7621] loop0: detected capacity change from 0 to 128 [ 354.761239][ T7627] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 354.771914][ T7627] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 355.932546][ T7631] loop0: detected capacity change from 0 to 128 [ 356.058616][ T7631] omfs: sysblock size (-58445445) is out of range [ 357.620310][ T5814] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 357.926586][ T5814] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.992557][ T5814] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.112423][ T5814] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 358.179848][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.240731][ T5814] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 358.958088][ T5814] usb 4-1: USB disconnect, device number 5 [ 359.179374][ T5814] pvrusb2: Device being rendered inoperable [ 361.662899][ T7658] overlayfs: missing 'lowerdir' [ 364.448460][ T7674] loop2: detected capacity change from 0 to 32768 [ 364.460235][ T7674] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.505 (7674) [ 364.484485][ T7674] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 364.494983][ T7674] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 364.503832][ T7674] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 364.513478][ T7674] BTRFS info (device loop2): use zstd compression, level 3 [ 364.521030][ T7674] BTRFS info (device loop2): force clearing of disk cache [ 364.528254][ T7674] BTRFS info (device loop2): enabling disk space caching [ 364.535504][ T7674] BTRFS info (device loop2): disk space caching is enabled [ 364.587223][ T7674] BTRFS info (device loop2): enabling ssd optimizations [ 364.594574][ T7674] BTRFS info (device loop2): auto enabling async discard [ 364.609391][ T7674] BTRFS info (device loop2): rebuilding free space tree [ 364.630695][ T7674] BTRFS info (device loop2): disabling free space tree [ 364.638330][ T7674] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 364.648082][ T7674] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 366.095964][ T7699] loop3: detected capacity change from 0 to 128 [ 366.177143][ T7699] omfs: sysblock size (-58445445) is out of range [ 366.210593][ T5778] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 367.436395][ T7676] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (7676) [ 369.288414][ T7723] overlayfs: missing 'lowerdir' [ 370.753761][ T7734] loop3: detected capacity change from 0 to 128 [ 371.390647][ T7734] omfs: sysblock size (-58445445) is out of range [ 378.817486][ T7776] overlayfs: missing 'lowerdir' [ 379.667961][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.674273][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.657731][ T7817] FAULT_INJECTION: forcing a failure. [ 386.657731][ T7817] name failslab, interval 1, probability 0, space 0, times 0 [ 386.691978][ T7817] CPU: 1 PID: 7817 Comm: syz.3.541 Not tainted syzkaller #0 [ 386.699449][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 386.709549][ T7817] Call Trace: [ 386.712934][ T7817] [ 386.715977][ T7817] dump_stack_lvl+0x18c/0x250 [ 386.720977][ T7817] ? show_regs_print_info+0x20/0x20 [ 386.726290][ T7817] ? load_image+0x420/0x420 [ 386.730896][ T7817] ? __might_sleep+0xe0/0xe0 [ 386.735788][ T7817] ? __lock_acquire+0x7d80/0x7d80 [ 386.741001][ T7817] should_fail_ex+0x394/0x4c0 [ 386.745781][ T7817] should_failslab+0x9/0x20 [ 386.750353][ T7817] slab_pre_alloc_hook+0x59/0x300 [ 386.755626][ T7817] kmem_cache_alloc+0x5a/0x2c0 [ 386.760430][ T7817] ? mempool_init_node+0x1e9/0x480 [ 386.765745][ T7817] ? mempool_free+0x320/0x320 [ 386.770463][ T7817] mempool_init_node+0x1e9/0x480 [ 386.775426][ T7817] ? mempool_alloc_slab+0x60/0x60 [ 386.780466][ T7817] ? mempool_free+0x320/0x320 [ 386.785256][ T7817] mempool_create+0x81/0xc0 [ 386.789801][ T7817] ceph_osdc_init+0x4ee/0x8c0 [ 386.794663][ T7817] ceph_create_client+0x246/0x300 [ 386.799793][ T7817] ceph_get_tree+0x1ca/0x1800 [ 386.804622][ T7817] ? bpf_lsm_capable+0x9/0x10 [ 386.809438][ T7817] ? security_capable+0x89/0xb0 [ 386.814307][ T7817] vfs_get_tree+0x8c/0x280 [ 386.818743][ T7817] vfs_cmd_create+0xe3/0x230 [ 386.823465][ T7817] __se_sys_fsconfig+0x70a/0x850 [ 386.828435][ T7817] ? __x64_sys_fsconfig+0xc0/0xc0 [ 386.833496][ T7817] ? lockdep_hardirqs_on+0x98/0x150 [ 386.838847][ T7817] ? __x64_sys_fsconfig+0x20/0xc0 [ 386.843892][ T7817] do_syscall_64+0x55/0xb0 [ 386.848415][ T7817] ? clear_bhb_loop+0x40/0x90 [ 386.853203][ T7817] ? clear_bhb_loop+0x40/0x90 [ 386.858196][ T7817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.864111][ T7817] RIP: 0033:0x7f1f0519e159 [ 386.868668][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.888683][ T7817] RSP: 002b:00007f1f06076028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 386.897407][ T7817] RAX: ffffffffffffffda RBX: 00007f1f05425fa0 RCX: 00007f1f0519e159 [ 386.905403][ T7817] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 386.913397][ T7817] RBP: 00007f1f0523506b R08: 0000000000000000 R09: 0000000000000000 [ 386.921639][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.929970][ T7817] R13: 00007f1f05426038 R14: 00007f1f05425fa0 R15: 00007ffcabd8ac28 [ 386.937975][ T7817] [ 387.462008][ T7822] overlayfs: missing 'workdir' [ 389.981145][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'. [ 393.156573][ T7852] FAULT_INJECTION: forcing a failure. [ 393.156573][ T7852] name failslab, interval 1, probability 0, space 0, times 0 [ 393.172309][ T7852] CPU: 1 PID: 7852 Comm: syz.0.559 Not tainted syzkaller #0 [ 393.179848][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 393.190015][ T7852] Call Trace: [ 393.193313][ T7852] [ 393.196273][ T7852] dump_stack_lvl+0x18c/0x250 [ 393.201007][ T7852] ? show_regs_print_info+0x20/0x20 [ 393.206323][ T7852] ? load_image+0x420/0x420 [ 393.210946][ T7852] ? __might_sleep+0xe0/0xe0 [ 393.215653][ T7852] ? __lock_acquire+0x7d80/0x7d80 [ 393.220712][ T7852] should_fail_ex+0x394/0x4c0 [ 393.225606][ T7852] should_failslab+0x9/0x20 [ 393.230222][ T7852] slab_pre_alloc_hook+0x59/0x300 [ 393.235289][ T7852] kmem_cache_alloc+0x5a/0x2c0 [ 393.240071][ T7852] ? mempool_init_node+0x1e9/0x480 [ 393.245200][ T7852] ? mempool_free+0x320/0x320 [ 393.249894][ T7852] mempool_init_node+0x1e9/0x480 [ 393.255050][ T7852] ? mempool_alloc_slab+0x60/0x60 [ 393.260093][ T7852] ? mempool_free+0x320/0x320 [ 393.264872][ T7852] mempool_create+0x81/0xc0 [ 393.269573][ T7852] ceph_osdc_init+0x4ee/0x8c0 [ 393.274467][ T7852] ceph_create_client+0x246/0x300 [ 393.279524][ T7852] ceph_get_tree+0x1ca/0x1800 [ 393.284410][ T7852] ? bpf_lsm_capable+0x9/0x10 [ 393.289284][ T7852] ? security_capable+0x89/0xb0 [ 393.294155][ T7852] vfs_get_tree+0x8c/0x280 [ 393.298592][ T7852] vfs_cmd_create+0xe3/0x230 [ 393.303216][ T7852] __se_sys_fsconfig+0x70a/0x850 [ 393.308318][ T7852] ? __x64_sys_fsconfig+0xc0/0xc0 [ 393.313465][ T7852] ? lockdep_hardirqs_on+0x98/0x150 [ 393.318853][ T7852] ? __x64_sys_fsconfig+0x20/0xc0 [ 393.323899][ T7852] do_syscall_64+0x55/0xb0 [ 393.328441][ T7852] ? clear_bhb_loop+0x40/0x90 [ 393.333224][ T7852] ? clear_bhb_loop+0x40/0x90 [ 393.337919][ T7852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.344268][ T7852] RIP: 0033:0x7f24ab19e159 [ 393.348732][ T7852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.368622][ T7852] RSP: 002b:00007f24ac141028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 393.377322][ T7852] RAX: ffffffffffffffda RBX: 00007f24ab425fa0 RCX: 00007f24ab19e159 [ 393.385485][ T7852] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 393.393973][ T7852] RBP: 00007f24ab23506b R08: 0000000000000000 R09: 0000000000000000 [ 393.402740][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.410843][ T7852] R13: 00007f24ab426038 R14: 00007f24ab425fa0 R15: 00007ffce3addee8 [ 393.419541][ T7852] [ 393.946225][ T7855] overlayfs: missing 'workdir' [ 397.730870][ T7876] loop0: detected capacity change from 0 to 32768 [ 398.643372][ T7876] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 399.190871][ T7884] loop0: detected capacity change from 0 to 128 [ 399.639853][ T7885] overlayfs: missing 'workdir' [ 402.491981][ T7898] loop1: detected capacity change from 0 to 4096 [ 402.624603][ T7898] ntfs3: loop1: ino=19, mi_enum_attr [ 402.681054][ T7898] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 402.948177][ T7904] FAULT_INJECTION: forcing a failure. [ 402.948177][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 402.972594][ T7898] syz.1.574 (7898) used greatest stack depth: 20432 bytes left [ 402.993214][ T1136] ntfs3: loop1: ino=5, mi_enum_attr [ 403.007102][ T7904] CPU: 0 PID: 7904 Comm: syz.0.577 Not tainted syzkaller #0 [ 403.015349][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 403.025748][ T7904] Call Trace: [ 403.029052][ T7904] [ 403.031999][ T7904] dump_stack_lvl+0x18c/0x250 [ 403.036901][ T7904] ? show_regs_print_info+0x20/0x20 [ 403.042128][ T7904] ? load_image+0x420/0x420 [ 403.046832][ T7904] ? __might_sleep+0xe0/0xe0 [ 403.051641][ T7904] ? __lock_acquire+0x7d80/0x7d80 [ 403.056690][ T7904] should_fail_ex+0x394/0x4c0 [ 403.061482][ T7904] should_failslab+0x9/0x20 [ 403.066016][ T7904] slab_pre_alloc_hook+0x59/0x300 [ 403.071086][ T7904] kmem_cache_alloc+0x5a/0x2c0 [ 403.075887][ T7904] ? mempool_init_node+0x1e9/0x480 [ 403.081208][ T7904] ? mempool_free+0x320/0x320 [ 403.086009][ T7904] mempool_init_node+0x1e9/0x480 [ 403.091057][ T7904] ? mempool_alloc_slab+0x60/0x60 [ 403.096108][ T7904] ? mempool_free+0x320/0x320 [ 403.100891][ T7904] mempool_create+0x81/0xc0 [ 403.105425][ T7904] ceph_osdc_init+0x4ee/0x8c0 [ 403.110143][ T7904] ceph_create_client+0x246/0x300 [ 403.115278][ T7904] ceph_get_tree+0x1ca/0x1800 [ 403.120119][ T7904] ? bpf_lsm_capable+0x9/0x10 [ 403.125109][ T7904] ? security_capable+0x89/0xb0 [ 403.129998][ T7904] vfs_get_tree+0x8c/0x280 [ 403.134523][ T7904] vfs_cmd_create+0xe3/0x230 [ 403.139310][ T7904] __se_sys_fsconfig+0x70a/0x850 [ 403.144271][ T7904] ? __x64_sys_fsconfig+0xc0/0xc0 [ 403.149323][ T7904] ? lockdep_hardirqs_on+0x98/0x150 [ 403.154563][ T7904] ? __x64_sys_fsconfig+0x20/0xc0 [ 403.159724][ T7904] do_syscall_64+0x55/0xb0 [ 403.164191][ T7904] ? clear_bhb_loop+0x40/0x90 [ 403.169000][ T7904] ? clear_bhb_loop+0x40/0x90 [ 403.173711][ T7904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.179824][ T7904] RIP: 0033:0x7f24ab19e159 [ 403.184462][ T7904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.204271][ T7904] RSP: 002b:00007f24ac141028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 403.212799][ T7904] RAX: ffffffffffffffda RBX: 00007f24ab425fa0 RCX: 00007f24ab19e159 [ 403.220908][ T7904] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 403.229151][ T7904] RBP: 00007f24ab23506b R08: 0000000000000000 R09: 0000000000000000 [ 403.237495][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.246290][ T7904] R13: 00007f24ab426038 R14: 00007f24ab425fa0 R15: 00007ffce3addee8 [ 403.254623][ T7904] [ 403.623935][ T7907] loop1: detected capacity change from 0 to 32768 [ 404.514008][ T7907] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 406.108029][ T7915] loop3: detected capacity change from 0 to 128 [ 406.166709][ T7915] omfs: sysblock size (-58445445) is out of range [ 406.178757][ T7877] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 407.265411][ T7938] loop3: detected capacity change from 0 to 4096 [ 407.343068][ T7940] FAULT_INJECTION: forcing a failure. [ 407.343068][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 407.370150][ T7938] ntfs3: loop3: ino=19, mi_enum_attr [ 407.376536][ T7938] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 407.402837][ T7940] CPU: 0 PID: 7940 Comm: syz.2.587 Not tainted syzkaller #0 [ 407.410384][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 407.420577][ T7940] Call Trace: [ 407.423898][ T7940] [ 407.426909][ T7940] dump_stack_lvl+0x18c/0x250 [ 407.431643][ T7940] ? show_regs_print_info+0x20/0x20 [ 407.436964][ T7940] ? load_image+0x420/0x420 [ 407.441516][ T7940] ? __might_sleep+0xe0/0xe0 [ 407.446129][ T7940] ? __lock_acquire+0x7d80/0x7d80 [ 407.451193][ T7940] should_fail_ex+0x394/0x4c0 [ 407.455900][ T7940] should_failslab+0x9/0x20 [ 407.460428][ T7940] slab_pre_alloc_hook+0x59/0x300 [ 407.465660][ T7940] kmem_cache_alloc+0x5a/0x2c0 [ 407.470500][ T7940] ? mempool_init_node+0x1e9/0x480 [ 407.475775][ T7940] ? mempool_free+0x320/0x320 [ 407.480654][ T7940] mempool_init_node+0x1e9/0x480 [ 407.485694][ T7940] ? mempool_alloc_slab+0x60/0x60 [ 407.491478][ T7940] ? mempool_free+0x320/0x320 [ 407.496357][ T7940] mempool_create+0x81/0xc0 [ 407.501061][ T7940] ceph_osdc_init+0x4ee/0x8c0 [ 407.505979][ T7940] ceph_create_client+0x246/0x300 [ 407.511122][ T7940] ceph_get_tree+0x1ca/0x1800 [ 407.515914][ T7940] ? bpf_lsm_capable+0x9/0x10 [ 407.520714][ T7940] ? security_capable+0x89/0xb0 [ 407.525719][ T7940] vfs_get_tree+0x8c/0x280 [ 407.530273][ T7940] vfs_cmd_create+0xe3/0x230 [ 407.535077][ T7940] __se_sys_fsconfig+0x70a/0x850 [ 407.540135][ T7940] ? __x64_sys_fsconfig+0xc0/0xc0 [ 407.545280][ T7940] ? lockdep_hardirqs_on+0x98/0x150 [ 407.550711][ T7940] ? __x64_sys_fsconfig+0x20/0xc0 [ 407.555765][ T7940] do_syscall_64+0x55/0xb0 [ 407.560582][ T7940] ? clear_bhb_loop+0x40/0x90 [ 407.565281][ T7940] ? clear_bhb_loop+0x40/0x90 [ 407.570170][ T7940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.576547][ T7940] RIP: 0033:0x7f38e6f9e159 [ 407.581034][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.600698][ T7940] RSP: 002b:00007f38e7efb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 407.609591][ T7940] RAX: ffffffffffffffda RBX: 00007f38e7225fa0 RCX: 00007f38e6f9e159 [ 407.617584][ T7940] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 407.625777][ T7940] RBP: 00007f38e703506b R08: 0000000000000000 R09: 0000000000000000 [ 407.633884][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.642044][ T7940] R13: 00007f38e7226038 R14: 00007f38e7225fa0 R15: 00007fff7dbfce48 [ 407.650166][ T7940] [ 407.790857][ T59] ntfs3: loop3: ino=5, mi_enum_attr [ 408.086323][ T7942] loop2: detected capacity change from 0 to 32768 [ 408.131587][ T7942] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 408.142462][ T7942] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 408.151605][ T7942] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 408.161214][ T7942] BTRFS info (device loop2): use zstd compression, level 3 [ 408.168470][ T7942] BTRFS info (device loop2): force clearing of disk cache [ 408.175784][ T7942] BTRFS info (device loop2): enabling disk space caching [ 408.183205][ T7942] BTRFS info (device loop2): disk space caching is enabled [ 408.470191][ T7942] BTRFS info (device loop2): enabling ssd optimizations [ 408.477436][ T7942] BTRFS info (device loop2): auto enabling async discard [ 408.487808][ T7942] BTRFS info (device loop2): rebuilding free space tree [ 408.513392][ T7942] BTRFS info (device loop2): disabling free space tree [ 408.520562][ T7942] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 408.530319][ T7942] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 410.090953][ T5778] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 412.157238][ T7985] FAULT_INJECTION: forcing a failure. [ 412.157238][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 412.177199][ T7985] CPU: 1 PID: 7985 Comm: syz.2.596 Not tainted syzkaller #0 [ 412.185387][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 412.195851][ T7985] Call Trace: [ 412.199180][ T7985] [ 412.202154][ T7985] dump_stack_lvl+0x18c/0x250 [ 412.207141][ T7985] ? show_regs_print_info+0x20/0x20 [ 412.212472][ T7985] ? load_image+0x420/0x420 [ 412.217353][ T7985] ? __might_sleep+0xe0/0xe0 [ 412.222271][ T7985] ? __lock_acquire+0x7d80/0x7d80 [ 412.227430][ T7985] should_fail_ex+0x394/0x4c0 [ 412.232503][ T7985] should_failslab+0x9/0x20 [ 412.237092][ T7985] slab_pre_alloc_hook+0x59/0x300 [ 412.242318][ T7985] kmem_cache_alloc+0x5a/0x2c0 [ 412.247390][ T7985] ? mempool_init_node+0x1e9/0x480 [ 412.252628][ T7985] ? mempool_free+0x320/0x320 [ 412.257458][ T7985] mempool_init_node+0x1e9/0x480 [ 412.262720][ T7985] ? mempool_alloc_slab+0x60/0x60 [ 412.268480][ T7985] ? mempool_free+0x320/0x320 [ 412.273729][ T7985] mempool_create+0x81/0xc0 [ 412.278486][ T7985] ceph_osdc_init+0x4ee/0x8c0 [ 412.283689][ T7985] ceph_create_client+0x246/0x300 [ 412.289300][ T7985] ceph_get_tree+0x1ca/0x1800 [ 412.294042][ T7985] ? bpf_lsm_capable+0x9/0x10 [ 412.298869][ T7985] ? security_capable+0x89/0xb0 [ 412.304289][ T7985] vfs_get_tree+0x8c/0x280 [ 412.308814][ T7985] vfs_cmd_create+0xe3/0x230 [ 412.313456][ T7985] __se_sys_fsconfig+0x70a/0x850 [ 412.318881][ T7985] ? __x64_sys_fsconfig+0xc0/0xc0 [ 412.324316][ T7985] ? syscall_enter_from_user_mode+0x2e/0x80 [ 412.330250][ T7985] ? __x64_sys_fsconfig+0x20/0xc0 [ 412.335512][ T7985] do_syscall_64+0x55/0xb0 [ 412.340423][ T7985] ? clear_bhb_loop+0x40/0x90 [ 412.345232][ T7985] ? clear_bhb_loop+0x40/0x90 [ 412.350212][ T7985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.356632][ T7985] RIP: 0033:0x7f38e6f9e159 [ 412.361192][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.381378][ T7985] RSP: 002b:00007f38e7efb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 412.390366][ T7985] RAX: ffffffffffffffda RBX: 00007f38e7225fa0 RCX: 00007f38e6f9e159 [ 412.398366][ T7985] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 412.406465][ T7985] RBP: 00007f38e703506b R08: 0000000000000000 R09: 0000000000000000 [ 412.414897][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.423181][ T7985] R13: 00007f38e7226038 R14: 00007f38e7225fa0 R15: 00007fff7dbfce48 [ 412.431395][ T7985] [ 412.599220][ T7987] syzkaller0: entered promiscuous mode [ 412.611860][ T7987] syzkaller0: entered allmulticast mode [ 412.874601][ T7992] loop1: detected capacity change from 0 to 32768 [ 412.968710][ T7992] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.599 (7992) [ 412.997789][ T7992] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 413.008429][ T7992] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 413.019690][ T7992] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 413.029373][ T7992] BTRFS info (device loop1): use zstd compression, level 3 [ 413.036713][ T7992] BTRFS info (device loop1): force clearing of disk cache [ 413.044004][ T7992] BTRFS info (device loop1): enabling disk space caching [ 413.051853][ T7992] BTRFS info (device loop1): disk space caching is enabled [ 413.410651][ T7992] BTRFS info (device loop1): enabling ssd optimizations [ 413.418328][ T7992] BTRFS info (device loop1): auto enabling async discard [ 413.428318][ T7992] BTRFS info (device loop1): rebuilding free space tree [ 413.501927][ T7992] BTRFS info (device loop1): disabling free space tree [ 413.509914][ T7992] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 413.520419][ T7992] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 415.440185][ T2323] pvrusb2: request_firmware fatal error with code=-110 [ 415.635667][ T2323] pvrusb2: Failure uploading firmware1 [ 415.652102][ T2323] pvrusb2: Device initialization was not successful. [ 415.667656][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 415.696997][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 415.706621][ T6618] pvrusb2: Device being rendered inoperable [ 418.835094][ T8039] FAULT_INJECTION: forcing a failure. [ 418.835094][ T8039] name failslab, interval 1, probability 0, space 0, times 0 [ 418.852858][ T8039] CPU: 1 PID: 8039 Comm: syz.2.606 Not tainted syzkaller #0 [ 418.860229][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 418.870602][ T8039] Call Trace: [ 418.874035][ T8039] [ 418.877006][ T8039] dump_stack_lvl+0x18c/0x250 [ 418.881741][ T8039] ? show_regs_print_info+0x20/0x20 [ 418.887003][ T8039] ? load_image+0x420/0x420 [ 418.891727][ T8039] ? __might_sleep+0xe0/0xe0 [ 418.896450][ T8039] ? __lock_acquire+0x7d80/0x7d80 [ 418.901525][ T8039] should_fail_ex+0x394/0x4c0 [ 418.906256][ T8039] should_failslab+0x9/0x20 [ 418.910976][ T8039] slab_pre_alloc_hook+0x59/0x300 [ 418.916062][ T8039] kmem_cache_alloc+0x5a/0x2c0 [ 418.920966][ T8039] ? mempool_init_node+0x1e9/0x480 [ 418.926400][ T8039] ? mempool_free+0x320/0x320 [ 418.931220][ T8039] mempool_init_node+0x1e9/0x480 [ 418.936213][ T8039] ? mempool_alloc_slab+0x60/0x60 [ 418.941540][ T8039] ? mempool_free+0x320/0x320 [ 418.946265][ T8039] mempool_create+0x81/0xc0 [ 418.950822][ T8039] ceph_osdc_init+0x4ee/0x8c0 [ 418.955652][ T8039] ceph_create_client+0x246/0x300 [ 418.960840][ T8039] ceph_get_tree+0x1ca/0x1800 [ 418.965575][ T8039] ? bpf_lsm_capable+0x9/0x10 [ 418.970385][ T8039] ? security_capable+0x89/0xb0 [ 418.975283][ T8039] vfs_get_tree+0x8c/0x280 [ 418.979750][ T8039] vfs_cmd_create+0xe3/0x230 [ 418.984393][ T8039] __se_sys_fsconfig+0x70a/0x850 [ 418.989465][ T8039] ? __x64_sys_fsconfig+0xc0/0xc0 [ 418.994527][ T8039] ? lockdep_hardirqs_on+0x98/0x150 [ 418.999830][ T8039] ? __x64_sys_fsconfig+0x20/0xc0 [ 419.005001][ T8039] do_syscall_64+0x55/0xb0 [ 419.009439][ T8039] ? clear_bhb_loop+0x40/0x90 [ 419.014401][ T8039] ? clear_bhb_loop+0x40/0x90 [ 419.019102][ T8039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.025017][ T8039] RIP: 0033:0x7f38e6f9e159 [ 419.029449][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.049241][ T8039] RSP: 002b:00007f38e7efb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 419.057822][ T8039] RAX: ffffffffffffffda RBX: 00007f38e7225fa0 RCX: 00007f38e6f9e159 [ 419.065920][ T8039] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 419.073919][ T8039] RBP: 00007f38e703506b R08: 0000000000000000 R09: 0000000000000000 [ 419.082259][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.090248][ T8039] R13: 00007f38e7226038 R14: 00007f38e7225fa0 R15: 00007fff7dbfce48 [ 419.098342][ T8039] [ 422.713546][ T5777] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 423.145532][ T8060] loop3: detected capacity change from 0 to 128 [ 423.371754][ T8062] loop3: detected capacity change from 0 to 512 [ 423.676112][ T8062] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 423.729137][ T8062] EXT4-fs (loop3): orphan cleanup on readonly fs [ 423.753195][ T8062] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.614: bad orphan inode 16 [ 423.781513][ T8062] ext4_test_bit(bit=15, block=18) = 1 [ 423.787250][ T8062] is_bad_inode(inode)=0 [ 423.791570][ T8062] NEXT_ORPHAN(inode)=83886080 [ 423.796377][ T8062] max_ino=32 [ 423.799965][ T8062] i_nlink=0 [ 423.918271][ T7624] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.955213][ T5814] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 423.982303][ T7624] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 424.046773][ T8062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.268061][ T5814] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 424.552942][ T8069] ceph: No mds server is up or the cluster is laggy [ 424.627595][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.140163][ T8085] loop3: detected capacity change from 0 to 32768 [ 425.184097][ T8085] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.620 (8085) [ 425.213309][ T8085] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 425.227621][ T8085] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 425.236871][ T8085] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 425.247203][ T8085] BTRFS info (device loop3): use zstd compression, level 3 [ 425.255440][ T8085] BTRFS info (device loop3): force clearing of disk cache [ 425.263151][ T8085] BTRFS info (device loop3): enabling disk space caching [ 425.270880][ T8085] BTRFS info (device loop3): disk space caching is enabled [ 425.436581][ T8085] BTRFS info (device loop3): enabling ssd optimizations [ 425.444450][ T8085] BTRFS info (device loop3): auto enabling async discard [ 425.456333][ T8085] BTRFS info (device loop3): rebuilding free space tree [ 425.488830][ T8085] BTRFS info (device loop3): disabling free space tree [ 425.496147][ T8085] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 425.506100][ T8085] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 426.316319][ T5773] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 430.683287][ T8131] ------------[ cut here ]------------ [ 430.688928][ T8131] backtracing misuse [ 430.768971][ T8131] WARNING: CPU: 1 PID: 8131 at kernel/bpf/verifier.c:4381 __mark_chain_precision+0x59c2/0x60f0 [ 430.783921][ T8131] Modules linked in: [ 430.787949][ T8131] CPU: 1 PID: 8131 Comm: syz.2.629 Not tainted syzkaller #0 [ 430.795696][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 430.806262][ T8131] RIP: 0010:__mark_chain_precision+0x59c2/0x60f0 [ 430.812859][ T8131] Code: 8c 07 ff ff ff 4c 89 ff e8 bb fb 47 00 e9 fa fe ff ff e8 51 6f ef ff c6 05 1a 96 de 0c 01 48 c7 c7 c0 a6 d0 8a e8 3e 33 b9 ff <0f> 0b b8 f2 ff ff ff e9 25 f4 ff ff e8 2d 6f ef ff e9 19 f4 ff ff [ 430.833102][ T8131] RSP: 0018:ffffc9000bdaed00 EFLAGS: 00010246 [ 430.839318][ T8131] RAX: 7f0690bd3a68e500 RBX: 0000000000000006 RCX: 0000000000080000 [ 430.847364][ T8131] RDX: ffffc9000d5d3000 RSI: 00000000000054d1 RDI: 00000000000054d2 [ 430.855515][ T8131] RBP: ffffc9000bdaeef0 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 430.863695][ T8131] R10: dffffc0000000000 R11: ffffed10171e518b R12: 0000000000000001 [ 430.871948][ T8131] R13: dffffc0000000000 R14: ffff88802f7e7050 R15: 0000000000000001 [ 430.880341][ T8131] FS: 00007f38e7efb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 430.889517][ T8131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.896383][ T8131] CR2: 00007f38e6feb840 CR3: 000000002f4d7000 CR4: 00000000003506e0 [ 430.904465][ T8131] Call Trace: [ 430.907831][ T8131] [ 430.910810][ T8131] ? aa_get_newest_label+0xfd/0x5c0 [ 430.916089][ T8131] ? __virt_addr_valid+0x10c/0x380 [ 430.921336][ T8131] ? __might_fault+0xaa/0x120 [ 430.926067][ T8131] ? __check_ptr_off_reg+0x2fc/0x3e0 [ 430.931479][ T8131] ? check_ptr_off_reg+0x30/0x30 [ 430.936573][ T8131] ? mark_chain_precision+0x20/0x20 [ 430.941940][ T8131] ? bpf_lsm_capable+0x9/0x10 [ 430.946813][ T8131] ? security_capable+0x89/0xb0 [ 430.951815][ T8131] ? __check_reg_arg+0x4ec/0x800 [ 430.956810][ T8131] ? update_loop_inline_state+0x34e/0x530 [ 430.962687][ T8131] check_helper_call+0x42d3/0x6340 [ 430.967885][ T8131] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 430.973588][ T8131] ? check_kfunc_call+0x4ca0/0x4ca0 [ 430.979109][ T8131] ? verbose+0x11e/0x1a0 [ 430.983408][ T8131] ? bpf_vlog_reset+0x299/0x330 [ 430.988387][ T8131] ? print_insn_state+0x100/0x160 [ 430.993638][ T8131] do_check+0x87fb/0xd0a0 [ 430.998139][ T8131] ? __stack_depot_save+0x1f/0x660 [ 431.003383][ T8131] ? __kasan_kmalloc+0x8f/0xa0 [ 431.008223][ T8131] ? __sys_bpf+0x5ba/0x890 [ 431.012673][ T8131] ? __x64_sys_bpf+0x7c/0x90 [ 431.017943][ T8131] ? do_syscall_64+0x55/0xb0 [ 431.022637][ T8131] ? init_func_state+0x2d10/0x2d10 [ 431.027978][ T8131] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 431.033668][ T8131] ? print_verifier_state+0x2e70/0x2e70 [ 431.039322][ T8131] ? btf_check_subprog_arg_match+0x216/0x2a0 [ 431.045365][ T8131] do_check_common+0xacc/0x1410 [ 431.050471][ T8131] bpf_check+0x65df/0xec40 [ 431.055035][ T8131] ? __lock_acquire+0x1336/0x7d80 [ 431.060324][ T8131] ? bpf_get_btf_vmlinux+0x20/0x20 [ 431.065490][ T8131] ? __lock_acquire+0x1262/0x7d80 [ 431.070633][ T8131] ? mark_lock+0x94/0x320 [ 431.075009][ T8131] ? __lock_acquire+0x1336/0x7d80 [ 431.080167][ T8131] ? verify_lock_unused+0x140/0x140 [ 431.085696][ T8131] ? verify_lock_unused+0x140/0x140 [ 431.091123][ T8131] ? verify_lock_unused+0x140/0x140 [ 431.096386][ T8131] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 431.102330][ T8131] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 431.108443][ T8131] ? __lock_acquire+0x7d80/0x7d80 [ 431.113524][ T8131] ? lock_chain_count+0x20/0x20 [ 431.118761][ T8131] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 431.125236][ T8131] ? lockdep_hardirqs_on+0x98/0x150 [ 431.130554][ T8131] ? ktime_get_with_offset+0x103/0x330 [ 431.136071][ T8131] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 431.142424][ T8131] ? ktime_get_real_ts64+0x440/0x440 [ 431.148189][ T8131] ? do_raw_spin_unlock+0x121/0x230 [ 431.153467][ T8131] ? bpf_obj_name_cpy+0x194/0x1e0 [ 431.158937][ T8131] bpf_prog_load+0x10fa/0x1610 [ 431.164229][ T8131] ? map_freeze+0x420/0x420 [ 431.168856][ T8131] ? __might_fault+0xaa/0x120 [ 431.173580][ T8131] ? __might_fault+0xc6/0x120 [ 431.178465][ T8131] ? __might_fault+0xaa/0x120 [ 431.183472][ T8131] ? bpf_lsm_bpf+0x9/0x10 [ 431.187904][ T8131] ? security_bpf+0x7e/0xa0 [ 431.192752][ T8131] __sys_bpf+0x5ba/0x890 [ 431.193700][ T8134] misc userio: No port type given on /dev/userio [ 431.197120][ T8131] ? bpf_link_show_fdinfo+0x560/0x560 [ 431.197152][ T8131] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 431.215518][ T8131] ? lock_chain_count+0x20/0x20 [ 431.220546][ T8131] __x64_sys_bpf+0x7c/0x90 [ 431.225197][ T8131] do_syscall_64+0x55/0xb0 [ 431.229902][ T8131] ? clear_bhb_loop+0x40/0x90 [ 431.234641][ T8131] ? clear_bhb_loop+0x40/0x90 [ 431.239703][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.245928][ T8131] RIP: 0033:0x7f38e6f9e159 [ 431.250582][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.271120][ T8131] RSP: 002b:00007f38e7efb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.280254][ T8131] RAX: ffffffffffffffda RBX: 00007f38e7225fa0 RCX: 00007f38e6f9e159 [ 431.288588][ T8131] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 431.296700][ T8131] RBP: 00007f38e703506b R08: 0000000000000000 R09: 0000000000000000 [ 431.305039][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.313102][ T8131] R13: 00007f38e7226038 R14: 00007f38e7225fa0 R15: 00007fff7dbfce48 [ 431.321175][ T8131] [ 431.324318][ T8131] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 431.331811][ T8131] CPU: 1 PID: 8131 Comm: syz.2.629 Not tainted syzkaller #0 [ 431.339222][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 431.349316][ T8131] Call Trace: [ 431.352630][ T8131] [ 431.355589][ T8131] dump_stack_lvl+0x18c/0x250 [ 431.360324][ T8131] ? show_regs_print_info+0x20/0x20 [ 431.365585][ T8131] ? load_image+0x420/0x420 [ 431.370149][ T8131] panic+0x2ca/0x720 [ 431.374091][ T8131] ? bpf_jit_dump+0xd0/0xd0 [ 431.378654][ T8131] __warn+0x2e0/0x470 [ 431.382677][ T8131] ? __mark_chain_precision+0x59c2/0x60f0 [ 431.388567][ T8131] ? __mark_chain_precision+0x59c2/0x60f0 [ 431.394330][ T8131] report_bug+0x2be/0x4f0 [ 431.398775][ T8131] ? __mark_chain_precision+0x59c2/0x60f0 [ 431.404514][ T8131] ? __mark_chain_precision+0x59c2/0x60f0 [ 431.410340][ T8131] ? __mark_chain_precision+0x59c4/0x60f0 [ 431.416076][ T8131] handle_bug+0xcf/0x120 [ 431.420340][ T8131] exc_invalid_op+0x1a/0x50 [ 431.424964][ T8131] asm_exc_invalid_op+0x1a/0x20 [ 431.430019][ T8131] RIP: 0010:__mark_chain_precision+0x59c2/0x60f0 [ 431.436360][ T8131] Code: 8c 07 ff ff ff 4c 89 ff e8 bb fb 47 00 e9 fa fe ff ff e8 51 6f ef ff c6 05 1a 96 de 0c 01 48 c7 c7 c0 a6 d0 8a e8 3e 33 b9 ff <0f> 0b b8 f2 ff ff ff e9 25 f4 ff ff e8 2d 6f ef ff e9 19 f4 ff ff [ 431.456678][ T8131] RSP: 0018:ffffc9000bdaed00 EFLAGS: 00010246 [ 431.462786][ T8131] RAX: 7f0690bd3a68e500 RBX: 0000000000000006 RCX: 0000000000080000 [ 431.470770][ T8131] RDX: ffffc9000d5d3000 RSI: 00000000000054d1 RDI: 00000000000054d2 [ 431.478838][ T8131] RBP: ffffc9000bdaeef0 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 431.486904][ T8131] R10: dffffc0000000000 R11: ffffed10171e518b R12: 0000000000000001 [ 431.495039][ T8131] R13: dffffc0000000000 R14: ffff88802f7e7050 R15: 0000000000000001 [ 431.503053][ T8131] ? aa_get_newest_label+0xfd/0x5c0 [ 431.508376][ T8131] ? __virt_addr_valid+0x10c/0x380 [ 431.513724][ T8131] ? __might_fault+0xaa/0x120 [ 431.518446][ T8131] ? __check_ptr_off_reg+0x2fc/0x3e0 [ 431.523955][ T8131] ? check_ptr_off_reg+0x30/0x30 [ 431.529011][ T8131] ? mark_chain_precision+0x20/0x20 [ 431.534294][ T8131] ? bpf_lsm_capable+0x9/0x10 [ 431.539081][ T8131] ? security_capable+0x89/0xb0 [ 431.543977][ T8131] ? __check_reg_arg+0x4ec/0x800 [ 431.549447][ T8131] ? update_loop_inline_state+0x34e/0x530 [ 431.555182][ T8131] check_helper_call+0x42d3/0x6340 [ 431.560314][ T8131] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 431.565892][ T8131] ? check_kfunc_call+0x4ca0/0x4ca0 [ 431.571116][ T8131] ? verbose+0x11e/0x1a0 [ 431.575376][ T8131] ? bpf_vlog_reset+0x299/0x330 [ 431.580248][ T8131] ? print_insn_state+0x100/0x160 [ 431.585299][ T8131] do_check+0x87fb/0xd0a0 [ 431.589833][ T8131] ? __stack_depot_save+0x1f/0x660 [ 431.595142][ T8131] ? __kasan_kmalloc+0x8f/0xa0 [ 431.599919][ T8131] ? __sys_bpf+0x5ba/0x890 [ 431.604362][ T8131] ? __x64_sys_bpf+0x7c/0x90 [ 431.609048][ T8131] ? do_syscall_64+0x55/0xb0 [ 431.613871][ T8131] ? init_func_state+0x2d10/0x2d10 [ 431.618996][ T8131] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 431.624814][ T8131] ? print_verifier_state+0x2e70/0x2e70 [ 431.630376][ T8131] ? btf_check_subprog_arg_match+0x216/0x2a0 [ 431.636731][ T8131] do_check_common+0xacc/0x1410 [ 431.641614][ T8131] bpf_check+0x65df/0xec40 [ 431.646149][ T8131] ? __lock_acquire+0x1336/0x7d80 [ 431.651290][ T8131] ? bpf_get_btf_vmlinux+0x20/0x20 [ 431.656429][ T8131] ? __lock_acquire+0x1262/0x7d80 [ 431.661561][ T8131] ? mark_lock+0x94/0x320 [ 431.665995][ T8131] ? __lock_acquire+0x1336/0x7d80 [ 431.671049][ T8131] ? verify_lock_unused+0x140/0x140 [ 431.676272][ T8131] ? verify_lock_unused+0x140/0x140 [ 431.681484][ T8131] ? verify_lock_unused+0x140/0x140 [ 431.687223][ T8131] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 431.693162][ T8131] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 431.699181][ T8131] ? __lock_acquire+0x7d80/0x7d80 [ 431.704305][ T8131] ? lock_chain_count+0x20/0x20 [ 431.709191][ T8131] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 431.715834][ T8131] ? lockdep_hardirqs_on+0x98/0x150 [ 431.721071][ T8131] ? ktime_get_with_offset+0x103/0x330 [ 431.726748][ T8131] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 431.733187][ T8131] ? ktime_get_real_ts64+0x440/0x440 [ 431.738747][ T8131] ? do_raw_spin_unlock+0x121/0x230 [ 431.744077][ T8131] ? bpf_obj_name_cpy+0x194/0x1e0 [ 431.749221][ T8131] bpf_prog_load+0x10fa/0x1610 [ 431.754100][ T8131] ? map_freeze+0x420/0x420 [ 431.758639][ T8131] ? __might_fault+0xaa/0x120 [ 431.763514][ T8131] ? __might_fault+0xc6/0x120 [ 431.768403][ T8131] ? __might_fault+0xaa/0x120 [ 431.773093][ T8131] ? bpf_lsm_bpf+0x9/0x10 [ 431.777508][ T8131] ? security_bpf+0x7e/0xa0 [ 431.782066][ T8131] __sys_bpf+0x5ba/0x890 [ 431.786519][ T8131] ? bpf_link_show_fdinfo+0x560/0x560 [ 431.791922][ T8131] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 431.797936][ T8131] ? lock_chain_count+0x20/0x20 [ 431.802828][ T8131] __x64_sys_bpf+0x7c/0x90 [ 431.807256][ T8131] do_syscall_64+0x55/0xb0 [ 431.811692][ T8131] ? clear_bhb_loop+0x40/0x90 [ 431.816398][ T8131] ? clear_bhb_loop+0x40/0x90 [ 431.821091][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.827086][ T8131] RIP: 0033:0x7f38e6f9e159 [ 431.831511][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.851134][ T8131] RSP: 002b:00007f38e7efb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.859565][ T8131] RAX: ffffffffffffffda RBX: 00007f38e7225fa0 RCX: 00007f38e6f9e159 [ 431.867546][ T8131] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 431.875625][ T8131] RBP: 00007f38e703506b R08: 0000000000000000 R09: 0000000000000000 [ 431.883782][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.891768][ T8131] R13: 00007f38e7226038 R14: 00007f38e7225fa0 R15: 00007fff7dbfce48 [ 431.899760][ T8131] [ 431.903072][ T8131] Kernel Offset: disabled [ 431.907429][ T8131] Rebooting in 86400 seconds..