last executing test programs: 8.032697245s ago: executing program 1 (id=1291): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x20000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}}) 7.535875567s ago: executing program 1 (id=1298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 2.156018287s ago: executing program 0 (id=1345): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) fallocate(r0, 0x0, 0x9, 0x10001) write$binfmt_aout(r0, &(0x7f0000000a80)={{0x10b, 0xc0, 0x40, 0x2ec, 0x62, 0x4, 0x32d, 0xc80}, "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x520) write$P9_RSYMLINK(r0, &(0x7f00000001c0)={0x14, 0x11, 0x2, {0x40, 0x2}}, 0x14) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x1001004, &(0x7f0000000140)={[], [{@obj_user={'obj_user', 0x3d, 'msdos\x00'}}, {@flag='ro'}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x36, 0x30, 0x64, 0x3, 0x30, 0x37, 0x62], 0x2d, [0x34, 0x33, 0x32, 0x65], 0x2d, [0x32, 0x36, 0x64, 0x39], 0x2d, [0x34, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x30, 0x61, 0x30, 0x35, 0x66, 0x39, 0x35]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'msdos\x00'}}]}) 1.953886382s ago: executing program 3 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.674814119s ago: executing program 3 (id=1350): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="800400001900", 0x0, 0x0, 0x10012, 0xfffbffff, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) read$FUSE(r1, 0x0, 0x0) 1.561416062s ago: executing program 1 (id=1351): syz_open_dev$tty20(0xc, 0x4, 0x1) capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2004e000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.291987198s ago: executing program 2 (id=1354): r0 = fanotify_init(0x40, 0x80000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r2, 0x0) getdents64(r2, &(0x7f0000001500)=""/4080, 0xff0) getdents64(r2, 0x0, 0x0) 1.291733928s ago: executing program 3 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) 1.291624738s ago: executing program 0 (id=1356): connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4c22, @loopback}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.162488521s ago: executing program 2 (id=1357): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 991.714895ms ago: executing program 2 (id=1358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 952.365826ms ago: executing program 3 (id=1359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x33, 0x3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 842.348239ms ago: executing program 1 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0x0, 0x5, {0x7, 0x2d, 0x6, 0x108002, 0x8, 0x7ff, 0x1, 0x1, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000380)=@known='security.apparmor\x00') 780.06835ms ago: executing program 2 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) 761.075681ms ago: executing program 0 (id=1362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xe000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0xff, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x10, 0xf, 0x5, 0xff, 0xc6, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x1, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x14}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 678.593963ms ago: executing program 3 (id=1363): io_setup(0x1, &(0x7f0000002500)=0x0) io_destroy(r0) 614.682894ms ago: executing program 2 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c405, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c6e6f646f74732cca6f74732c6e6f646f303030303030306915705730303030303030307d1c349d232e33373774732c6e356f646f74732c6e6f646f09000000000000000000000000000000000000000000a294e14d800e7285147acb1519f41c1bb26a0fe65c754b657cd1e1aca65bc56c3aeb10ee3147c75b45b1adcfabf6980d0f92ec07bfd1725fef432befe4c2f439e5b0998308436eb0249262023005e7d2e981b6d518666f9b6040c22493c52da67fa370e7957861fe8a650472ba61e4174f28252ec1080caba0710ab640d95ad17c563cbfe2fe58084cd1e4ca83fcce9e60cd3e41a6e16678fa7bad72003ce2016b4344330b020fc23fe0853a12d3ce028583dba46168bb6decfa", @ANYRES32=0x0, @ANYBLOB=',nodots,showexec,fmask=00000000000000000000007,umask=00000000000000000000007,nodots,dots,nodots,debug,usefree,\x00'], 0x0, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 458.454178ms ago: executing program 1 (id=1365): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, r2, 0x0) getdents64(r2, &(0x7f0000001500)=""/4080, 0xff0) getdents64(r2, 0x0, 0x0) 453.978028ms ago: executing program 0 (id=1366): fanotify_mark(0xffffffffffffffff, 0x105, 0x800101b, 0xffffffffffffffff, 0x0) 404.96355ms ago: executing program 3 (id=1367): syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') exit(0x80000000) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 239.954254ms ago: executing program 0 (id=1368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xb, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 137.769306ms ago: executing program 1 (id=1369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 121.039937ms ago: executing program 0 (id=1370): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1d, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e9dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}}) fallocate(r0, 0x11, 0x0, 0x2005347) 0s ago: executing program 2 (id=1371): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. syzkaller login: [ 73.867551][ T5763] cgroup: Unknown subsys name 'net' [ 74.034141][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.417617][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.920938][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.929015][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.932072][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.938070][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.951754][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.959104][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.967438][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.973596][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.975068][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.983285][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.989608][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.998088][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.004053][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.010413][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.017525][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.031204][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.031602][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.039554][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.048190][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.053460][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.060431][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.067231][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.075660][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.108125][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.490781][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.532945][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.623853][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.664646][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.685197][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.693279][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.700850][ T5775] bridge_slave_0: entered allmulticast mode [ 77.708123][ T5775] bridge_slave_0: entered promiscuous mode [ 77.726609][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.733958][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.741265][ T5775] bridge_slave_1: entered allmulticast mode [ 77.748869][ T5775] bridge_slave_1: entered promiscuous mode [ 77.812501][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.819722][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.826827][ T5776] bridge_slave_0: entered allmulticast mode [ 77.834612][ T5776] bridge_slave_0: entered promiscuous mode [ 77.868427][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.875593][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.883231][ T5776] bridge_slave_1: entered allmulticast mode [ 77.890029][ T5776] bridge_slave_1: entered promiscuous mode [ 77.907812][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.943171][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.971092][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.978336][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.985470][ T5774] bridge_slave_0: entered allmulticast mode [ 77.992473][ T5774] bridge_slave_0: entered promiscuous mode [ 78.001838][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.009021][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.016142][ T5774] bridge_slave_1: entered allmulticast mode [ 78.024191][ T5774] bridge_slave_1: entered promiscuous mode [ 78.033356][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.046390][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.077933][ T5775] team0: Port device team_slave_0 added [ 78.103049][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.110518][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.117919][ T5777] bridge_slave_0: entered allmulticast mode [ 78.124643][ T5777] bridge_slave_0: entered promiscuous mode [ 78.134006][ T5775] team0: Port device team_slave_1 added [ 78.160634][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.167892][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.175139][ T5777] bridge_slave_1: entered allmulticast mode [ 78.182298][ T5777] bridge_slave_1: entered promiscuous mode [ 78.208643][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.221075][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.232445][ T5776] team0: Port device team_slave_0 added [ 78.241432][ T5776] team0: Port device team_slave_1 added [ 78.266830][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.295958][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.305467][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.331956][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.345571][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.390633][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.397656][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.423734][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.438720][ T5774] team0: Port device team_slave_0 added [ 78.447182][ T5777] team0: Port device team_slave_0 added [ 78.453629][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.462886][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.488930][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.506389][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.513785][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.540803][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.562625][ T5774] team0: Port device team_slave_1 added [ 78.569721][ T5777] team0: Port device team_slave_1 added [ 78.622560][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.629587][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.655702][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.702703][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.712032][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.738194][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.759845][ T5775] hsr_slave_0: entered promiscuous mode [ 78.766399][ T5775] hsr_slave_1: entered promiscuous mode [ 78.776758][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.783899][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.810032][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.826410][ T5776] hsr_slave_0: entered promiscuous mode [ 78.837093][ T5776] hsr_slave_1: entered promiscuous mode [ 78.843616][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.856662][ T5776] Cannot create hsr debugfs directory [ 78.886868][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.894563][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.921032][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.006406][ T5774] hsr_slave_0: entered promiscuous mode [ 79.013310][ T5774] hsr_slave_1: entered promiscuous mode [ 79.020353][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.028336][ T5774] Cannot create hsr debugfs directory [ 79.056514][ T5777] hsr_slave_0: entered promiscuous mode [ 79.062867][ T5777] hsr_slave_1: entered promiscuous mode [ 79.069914][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.077957][ T5777] Cannot create hsr debugfs directory [ 79.158056][ T5787] Bluetooth: hci1: command tx timeout [ 79.158068][ T5782] Bluetooth: hci0: command tx timeout [ 79.158275][ T5782] Bluetooth: hci3: command tx timeout [ 79.163721][ T5787] Bluetooth: hci2: command tx timeout [ 79.452479][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.464082][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.474717][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.490879][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.555772][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.576042][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.598787][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.608390][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.683927][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.702217][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.712044][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.723790][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.752594][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.823152][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.834565][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.846456][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.865003][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.895218][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.925189][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.932441][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.952959][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.960134][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.029991][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.073132][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.084491][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.153418][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.182824][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.231798][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.239011][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.256010][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.263235][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.300733][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.320677][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.327844][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.345053][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.369888][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.387676][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.394759][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.434174][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.448630][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.455760][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.493541][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.500750][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.580469][ T5776] veth0_vlan: entered promiscuous mode [ 80.641622][ T5776] veth1_vlan: entered promiscuous mode [ 80.728017][ T5776] veth0_macvtap: entered promiscuous mode [ 80.750511][ T5776] veth1_macvtap: entered promiscuous mode [ 80.801160][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.820335][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.842281][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.864342][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.874970][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.884019][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.985054][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.113425][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.138616][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.146624][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.214582][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.230569][ T5775] veth0_vlan: entered promiscuous mode [ 81.244343][ T5774] veth0_vlan: entered promiscuous mode [ 81.251578][ T5787] Bluetooth: hci3: command tx timeout [ 81.251645][ T5782] Bluetooth: hci1: command tx timeout [ 81.259166][ T5787] Bluetooth: hci0: command tx timeout [ 81.264302][ T5780] Bluetooth: hci2: command tx timeout [ 81.271825][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.283722][ T5774] veth1_vlan: entered promiscuous mode [ 81.301840][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.343302][ T5775] veth1_vlan: entered promiscuous mode [ 81.414258][ T5774] veth0_macvtap: entered promiscuous mode [ 81.440020][ T5774] veth1_macvtap: entered promiscuous mode [ 81.489973][ T5775] veth0_macvtap: entered promiscuous mode [ 81.514507][ T5775] veth1_macvtap: entered promiscuous mode [ 81.551813][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.581297][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.604014][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.633961][ T5777] veth0_vlan: entered promiscuous mode [ 81.673719][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.690780][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.702842][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.719069][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.741758][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.755018][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.771653][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.785670][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.861117][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.874372][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.883310][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.892336][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.911850][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.922465][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.932600][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.943160][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.954799][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.976198][ T5777] veth1_vlan: entered promiscuous mode [ 81.989546][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.999826][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.008940][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.020386][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.163697][ T5777] veth0_macvtap: entered promiscuous mode [ 82.208144][ T5777] veth1_macvtap: entered promiscuous mode [ 82.240372][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.255865][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.337432][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.353267][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.364147][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.380134][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.391566][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.410723][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.425143][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.444880][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.471764][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.484733][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.494595][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.503109][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.516769][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.534054][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.545456][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.557297][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.604338][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.616824][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.626530][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.640117][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.668877][ T2109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.676807][ T2109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.711497][ T2109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.731851][ T2109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.007084][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.088852][ T5854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.536585][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.556143][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.556328][ T5787] Bluetooth: hci2: command tx timeout [ 84.578615][ T5780] Bluetooth: hci0: command tx timeout [ 84.584019][ T5780] Bluetooth: hci1: command tx timeout [ 84.589495][ T5787] Bluetooth: hci3: command tx timeout [ 84.705169][ T2109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.713260][ T2109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.878400][ T5870] ======================================================= [ 85.878400][ T5870] WARNING: The mand mount option has been deprecated and [ 85.878400][ T5870] and is ignored by this kernel. Remove the mand [ 85.878400][ T5870] option from the mount to silence this warning. [ 85.878400][ T5870] ======================================================= [ 86.603259][ T5782] Bluetooth: hci1: command tx timeout [ 86.603310][ T5780] Bluetooth: hci3: command tx timeout [ 86.609209][ T5782] Bluetooth: hci2: command tx timeout [ 86.614195][ T5787] Bluetooth: hci0: command tx timeout [ 87.330081][ T172] cfg80211: failed to load regulatory.db [ 87.793423][ T5875] mmap: syz.3.9 (5875) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.292789][ T5884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 88.299549][ T5884] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.347398][ T5884] vhci_hcd vhci_hcd.0: Device attached [ 88.475059][ T5891] input: syz0 as /devices/virtual/input/input5 [ 89.351498][ T23] vhci_hcd: vhci_device speed not set [ 89.477193][ T23] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 89.692190][ T5901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.706543][ T5885] vhci_hcd: connection reset by peer [ 89.717587][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 89.728655][ T49] vhci_hcd: stop threads [ 89.744321][ T49] vhci_hcd: release socket [ 89.750131][ T49] vhci_hcd: disconnect device [ 89.793939][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 89.881596][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 89.927103][ T172] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.145841][ T172] usb 2-1: config 6 has an invalid interface number: 7 but max is 0 [ 90.157468][ T172] usb 2-1: config 6 has no interface number 0 [ 90.163749][ T172] usb 2-1: config 6 interface 7 has no altsetting 0 [ 90.180500][ T172] usb 2-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 90.197020][ T172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.205175][ T172] usb 2-1: Product: syz [ 90.212138][ T172] usb 2-1: Manufacturer: syz [ 90.216873][ T172] usb 2-1: SerialNumber: syz [ 90.928494][ T5914] Bluetooth: MGMT ver 1.22 [ 91.125155][ T172] usb 2-1: USB disconnect, device number 2 [ 91.450989][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 93.193088][ T5954] Set syz0 is full, maxelem 0 reached [ 93.246594][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 93.454108][ T5961] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 94.677087][ T23] vhci_hcd: vhci_device speed not set [ 95.193804][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 95.413479][ T5988] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 95.439421][ T5988] syzkaller1: entered promiscuous mode [ 95.445897][ T5988] syzkaller1: entered allmulticast mode [ 95.463335][ T5988] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 96.169561][ T10] device offline error, dev sda, sector 704822 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 96.181936][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88102) [ 96.200152][ T1100] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.227470][ T1100] Buffer I/O error on device sda1, logical block 88064 [ 96.283236][ T2109] device offline error, dev sda, sector 704838 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2 [ 96.377985][ T2109] device offline error, dev sda, sector 705344 op 0x1:(WRITE) flags 0x4000 phys_seg 18 prio class 2 [ 96.381657][ T2109] device offline error, dev sda, sector 705856 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 96.381689][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88232) [ 96.389006][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.389051][ T12] Buffer I/O error on device sda1, logical block 88066 [ 96.389092][ T12] Buffer I/O error on device sda1, logical block 88067 [ 96.389112][ T12] Buffer I/O error on device sda1, logical block 88068 [ 96.389131][ T12] Buffer I/O error on device sda1, logical block 88069 [ 96.389149][ T12] Buffer I/O error on device sda1, logical block 88070 [ 96.389167][ T12] Buffer I/O error on device sda1, logical block 88071 [ 96.389184][ T12] Buffer I/O error on device sda1, logical block 88072 [ 96.389203][ T12] Buffer I/O error on device sda1, logical block 88073 [ 96.389220][ T12] Buffer I/O error on device sda1, logical block 88074 [ 96.410752][ T2109] device offline error, dev sda, sector 706166 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 2 [ 96.410785][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88270) [ 96.410870][ T2109] device offline error, dev sda, sector 706518 op 0x1:(WRITE) flags 0x4000 phys_seg 16 prio class 2 [ 96.411577][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.440245][ T2109] device offline error, dev sda, sector 707024 op 0x1:(WRITE) flags 0x0 phys_seg 10 prio class 2 [ 96.440281][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88378) [ 96.440377][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.440382][ T2109] device offline error, dev sda, sector 707334 op 0x1:(WRITE) flags 0x4000 phys_seg 14 prio class 2 [ 96.592988][ T2109] device offline error, dev sda, sector 707840 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 96.593023][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88480) [ 96.593111][ T2109] device offline error, dev sda, sector 707902 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 96.593132][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88487) [ 96.593162][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88496) [ 96.593190][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88510) [ 96.593218][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88541) [ 96.593227][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.593269][ T2109] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88560) [ 96.594135][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.594276][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.594421][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.595301][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.595503][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 96.636399][ T5100] Aborting journal on device sda1-8. [ 96.638442][ T24] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 96.639430][ T6006] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 96.640958][ T5100] JBD2: I/O error when updating journal superblock for sda1-8. [ 96.655667][ T6006] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 96.655722][ T6006] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 96.655755][ T6006] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 96.655795][ T6006] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 96.655835][ T6006] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 96.656113][ T6006] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 96.656155][ T6006] Buffer I/O error on dev sda1, logical block 657, lost async page write [ 96.656204][ T6006] Buffer I/O error on dev sda1, logical block 4241, lost async page write [ 96.681764][ T6018] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.0.63: Detected aborted journal [ 97.343972][ T6006] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 98.174117][ T5817] IPVS: starting estimator thread 0... [ 98.288209][ T6043] IPVS: using max 19 ests per chain, 45600 per kthread [ 98.682634][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'. [ 98.811917][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.836117][ T6051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 98.842684][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.851689][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 99.182287][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 99.296525][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.445437][ T5842] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 99.477830][ T6052] vhci_hcd: connection closed [ 99.502072][ T5893] usb 1-1: string descriptor 0 read error: -22 [ 99.565154][ T12] vhci_hcd: stop threads [ 99.617289][ T12] vhci_hcd: release socket [ 99.672589][ T5893] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 99.685658][ T12] vhci_hcd: disconnect device [ 99.804734][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 100.130107][ T5893] dw2102: su3000_identify_state [ 100.147083][ T5893] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 100.179069][ T5893] dw2102: su3000_power_ctrl: 1, initialized 0 [ 100.200320][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 100.231680][ T6059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.77'. [ 100.272491][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.279666][ T6059] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 100.306086][ T6059] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 100.316044][ T5893] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 100.344110][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 100.371009][ T6059] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 100.371726][ T5893] usb 1-1: media controller created [ 100.391947][ T6059] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 100.417729][ T28] audit: type=1326 audit(1785488906.667:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 100.451678][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 100.479314][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 100.501895][ T5893] dw2102: i2c transfer failed. [ 100.511691][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 100.556752][ T5893] dw2102: i2c transfer failed. [ 100.563219][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 100.571363][ T28] audit: type=1326 audit(1785488906.667:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 100.601117][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.609472][ T5893] dw2102: i2c transfer failed. [ 100.622789][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 100.634004][ T5893] dw2102: i2c transfer failed. [ 100.648232][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 100.654181][ T5893] dw2102: i2c transfer failed. [ 100.659461][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 100.666725][ T5893] dw2102: i2c transfer failed. [ 100.673096][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 100.683413][ T28] audit: type=1326 audit(1785488906.707:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 100.720548][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.732477][ T5893] dvb-usb: MAC address: 02:02:02:02:02:02 [ 100.781412][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.833958][ T28] audit: type=1326 audit(1785488906.737:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 100.910724][ T5607] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 100.932795][ T28] audit: type=1326 audit(1785488906.737:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 100.957169][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 100.962914][ T5893] dw2102: command 0x0e transfer failed. [ 100.981296][ T6059] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 101.087024][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 101.096580][ T5893] dw2102: command 0x0e transfer failed. [ 101.125084][ T28] audit: type=1326 audit(1785488906.737:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 101.379687][ T28] audit: type=1326 audit(1785488906.747:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 101.426264][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 101.436325][ T5893] dw2102: command 0x0e transfer failed. [ 101.487068][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 101.503325][ T5893] dw2102: command 0x0e transfer failed. [ 101.521112][ T28] audit: type=1326 audit(1785488906.747:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 101.630867][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 101.653864][ T5893] dw2102: command 0x51 transfer failed. [ 101.757987][ T5893] DVB: Unable to find symbol ds3000_attach() [ 101.758014][ T5893] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 101.763308][ T28] audit: type=1326 audit(1785488906.747:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 101.763336][ T28] audit: type=1326 audit(1785488906.747:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.79" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 101.837045][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.928007][ T5893] rc_core: Couldn't load IR keymap rc-su3000 [ 102.038392][ T5893] Registered IR keymap rc-empty [ 102.459623][ T5893] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 102.470110][ T5607] IPVS: starting estimator thread 0... [ 102.504986][ T5893] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 102.615490][ T5893] dvb-usb: schedule remote query interval to 150 msecs. [ 102.622624][ T5893] dw2102: su3000_power_ctrl: 0, initialized 1 [ 102.637269][ T6091] IPVS: using max 26 ests per chain, 62400 per kthread [ 102.641879][ T5893] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 102.725258][ T5893] usb 1-1: USB disconnect, device number 2 [ 102.955384][ T5893] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 103.019163][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 103.319100][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 104.677064][ T5842] vhci_hcd: vhci_device speed not set [ 105.309446][ T6123] binder: 6117:6123 ioctl 401c7012 0 returned -22 [ 105.904544][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 106.309189][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.103'. [ 108.073124][ T5607] IPVS: starting estimator thread 0... [ 108.197415][ T6157] IPVS: using max 18 ests per chain, 43200 per kthread [ 108.574636][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 108.775761][ T6170] Zero length message leads to an empty skb [ 108.978440][ T6174] netlink: 56 bytes leftover after parsing attributes in process `syz.1.113'. [ 109.015351][ T6174] bridge_slave_0: left allmulticast mode [ 109.037883][ T6174] bridge_slave_0: left promiscuous mode [ 109.057215][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.511736][ T6188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.119'. [ 110.241187][ T172] IPVS: starting estimator thread 0... [ 110.357509][ T6214] IPVS: using max 18 ests per chain, 43200 per kthread [ 110.794749][ T6223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.133'. [ 113.650388][ T6249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.144'. [ 113.836142][ T6255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.145'. [ 113.880389][ T6255] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 113.886962][ T6255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.894804][ T6255] vhci_hcd vhci_hcd.0: Device attached [ 114.064427][ T6256] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 0 [ 114.187115][ T172] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 114.203383][ T12] vhci_hcd: stop threads [ 114.267872][ T12] vhci_hcd: release socket [ 114.337543][ T12] vhci_hcd: disconnect device [ 115.286052][ T6265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.149'. [ 115.310640][ T6265] bridge_slave_0: left allmulticast mode [ 115.347115][ T6265] bridge_slave_0: left promiscuous mode [ 115.353159][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.357561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 116.767166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 117.177017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.022069][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 118.199222][ T6290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 118.205794][ T6290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.213715][ T6290] vhci_hcd vhci_hcd.0: Device attached [ 118.327350][ T6291] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 118.590384][ T2109] vhci_hcd: stop threads [ 118.619412][ T2109] vhci_hcd: release socket [ 118.643751][ T2109] vhci_hcd: disconnect device [ 119.737074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.827380][ T172] vhci_hcd: vhci_device speed not set [ 120.916861][ T5607] vhci_hcd: vhci_device speed not set [ 124.037544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 124.914996][ T6337] kvm: pic: non byte read [ 124.920083][ T6337] kvm: pic: non byte read [ 125.088965][ T6348] Write-error on swap-device (8:0:278342) Jul 31 09:08:51 syzkaller kern.alert kernel: [ 125.088965][ T6348] Write-error on swap-device (8:0:278342) [ 125.769772][ T6371] Bluetooth: MGMT ver 1.22 [ 126.170984][ T6395] 8021q: VLANs not supported on gre0 [ 126.689801][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.209'. [ 126.701329][ T6415] bridge_slave_0: left allmulticast mode [ 126.707241][ T6415] bridge_slave_0: left promiscuous mode [ 126.723580][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.078615][ T6417] SET target dimension over the limit! [ 127.710769][ T6440] netlink: 60 bytes leftover after parsing attributes in process `syz.0.219'. [ 127.852627][ T6443] syz.2.220[6443]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 128.249321][ T6462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 128.354678][ T6465] SET target dimension over the limit! [ 128.363062][ T6462] bridge_slave_0: left allmulticast mode [ 128.450480][ T6462] bridge_slave_0: left promiscuous mode [ 128.525569][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.843608][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 129.016773][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 129.016786][ T28] audit: type=1326 audit(1785488935.267:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff43119e019 code=0x0 [ 129.434938][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 129.625110][ T6509] md: loop0 has zero or unknown size, marking faulty! [ 129.633520][ T6509] md: error, md_import_device() returned -22 [ 129.642261][ T6509] md: loop2 has zero or unknown size, marking faulty! [ 129.653639][ T6509] md: error, md_import_device() returned -22 [ 129.662318][ T6509] md: loop3 has zero or unknown size, marking faulty! [ 129.673214][ T6509] md: error, md_import_device() returned -22 [ 130.103855][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.254'. [ 130.187681][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.1.255'. [ 130.660506][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'. [ 130.915146][ T6556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.269'. [ 131.542553][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 132.161068][ T6583] Cannot find add_set index 0 as target [ 132.594129][ T6603] loop1: detected capacity change from 0 to 164 [ 132.603065][ T6601] __nla_validate_parse: 1 callbacks suppressed [ 132.603078][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'. [ 132.668494][ T6603] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 133.004586][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012140][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.302911][ T6618] SET target dimension over the limit! [ 134.012900][ T6632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.300'. [ 135.333805][ T6673] SET target dimension over the limit! [ 135.994159][ T6702] loop1: detected capacity change from 0 to 256 [ 136.029317][ T6702] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.428039][ T6707] SET target dimension over the limit! [ 137.334370][ T6771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.345'. [ 137.673483][ T6780] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.025305][ T6793] SET target dimension over the limit! [ 138.483475][ T6801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.354'. [ 139.097251][ T6830] netlink: 'syz.1.363': attribute type 5 has an invalid length. [ 139.113060][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 139.124209][ T6830] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.269130][ T6833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'. [ 140.189062][ T6839] Cannot find add_set index 0 as target [ 140.236336][ T6846] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.262524][ T6846] gretap0: entered promiscuous mode [ 140.277304][ T6846] vlan2: entered promiscuous mode [ 140.593029][ T6858] netlink: 'syz.1.372': attribute type 5 has an invalid length. [ 140.607583][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 140.638312][ T6858] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.740212][ T6861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.373'. [ 141.392969][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 141.414570][ T6878] loop0: detected capacity change from 0 to 164 [ 141.805847][ T6886] SET target dimension over the limit! [ 142.219892][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.383'. [ 143.095507][ T6931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 143.787739][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.403'. [ 143.909390][ T6950] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 143.915959][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.923819][ T6950] vhci_hcd vhci_hcd.0: Device attached [ 144.065534][ T6952] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 144.318182][ T2109] vhci_hcd: stop threads [ 144.362108][ T2109] vhci_hcd: release socket [ 144.407817][ T2109] vhci_hcd: disconnect device [ 145.638169][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.404'. [ 146.315744][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.414'. [ 146.438683][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.415'. [ 146.517386][ T6989] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 146.523955][ T6989] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.531830][ T6989] vhci_hcd vhci_hcd.0: Device attached [ 146.847389][ T23] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 147.415221][ T6990] vhci_hcd: connection reset by peer [ 147.744794][ T6619] vhci_hcd: stop threads [ 147.782029][ T6619] vhci_hcd: release socket [ 147.812814][ T6619] vhci_hcd: disconnect device [ 147.990638][ T6995] loop3: detected capacity change from 0 to 512 [ 148.379924][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'. [ 148.891403][ T7026] SET target dimension over the limit! [ 149.772776][ T7042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.430'. [ 149.914649][ T7042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 149.921219][ T7042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.929165][ T7042] vhci_hcd vhci_hcd.0: Device attached [ 150.071723][ T7048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.432'. [ 150.571574][ T5893] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 150.759626][ T7044] vhci_hcd: connection closed [ 151.046519][ T59] vhci_hcd: stop threads [ 151.125729][ T59] vhci_hcd: release socket [ 151.178635][ T59] vhci_hcd: disconnect device [ 151.543226][ T7056] loop0: detected capacity change from 0 to 16 [ 151.671437][ T7056] erofs: (device loop0): mounted with root inode @ nid 36. [ 151.967488][ T23] vhci_hcd: vhci_device speed not set [ 152.324360][ T7068] Cannot find add_set index 0 as target [ 152.403276][ T7070] netlink: 'syz.0.439': attribute type 5 has an invalid length. [ 152.434991][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 152.644756][ T7075] capability: warning: `syz.0.441' uses deprecated v2 capabilities in a way that may be insecure [ 153.091459][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 153.146631][ T7088] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 153.153196][ T7088] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.160981][ T7088] vhci_hcd vhci_hcd.0: Device attached [ 153.909629][ T172] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 154.046250][ T7089] vhci_hcd: connection closed [ 154.284959][ T3444] vhci_hcd: stop threads [ 154.329074][ T3444] vhci_hcd: release socket [ 154.335312][ T3444] vhci_hcd: disconnect device [ 154.648439][ T7102] netlink: 'syz.0.450': attribute type 5 has an invalid length. [ 154.656223][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 155.178056][ T7114] Cannot find add_set index 0 as target [ 155.541769][ T7121] loop3: detected capacity change from 0 to 256 [ 155.598793][ T7121] FAT-fs (loop3): Directory bread(block 64) failed [ 155.615709][ T7121] FAT-fs (loop3): Directory bread(block 65) failed [ 155.627286][ T7121] FAT-fs (loop3): Directory bread(block 66) failed [ 155.636381][ T7121] FAT-fs (loop3): Directory bread(block 67) failed [ 155.645666][ T7121] FAT-fs (loop3): Directory bread(block 68) failed [ 155.652908][ T7121] FAT-fs (loop3): Directory bread(block 69) failed [ 155.660464][ T7121] FAT-fs (loop3): Directory bread(block 70) failed [ 155.667470][ T7121] FAT-fs (loop3): Directory bread(block 71) failed [ 155.674435][ T7121] FAT-fs (loop3): Directory bread(block 72) failed [ 155.682396][ T7121] FAT-fs (loop3): Directory bread(block 73) failed [ 155.797431][ T5893] vhci_hcd: vhci_device speed not set [ 155.927310][ T7132] netlink: 92 bytes leftover after parsing attributes in process `syz.1.461'. [ 156.032114][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.073991][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.082116][ T7136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.104762][ T7136] team0: Port device bridge0 added [ 156.121793][ T7139] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 156.143339][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.170667][ T7139] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 156.192644][ T7139] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 156.244363][ T7140] netlink: 144 bytes leftover after parsing attributes in process `syz.3.462'. [ 156.266575][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 156.570614][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.466'. [ 157.848352][ T7152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 157.854930][ T7152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.862676][ T7152] vhci_hcd vhci_hcd.0: Device attached [ 158.136978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 158.350447][ T7155] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 158.420792][ T2929] vhci_hcd: stop threads [ 158.432776][ T2929] vhci_hcd: release socket [ 158.438439][ T2929] vhci_hcd: disconnect device [ 158.957469][ T7174] SET target dimension over the limit! [ 158.998242][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.077641][ T172] vhci_hcd: vhci_device speed not set [ 159.322927][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.404702][ T5817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 159.424168][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 159.439119][ T5817] usb 1-1: Product: syz [ 159.443464][ T5817] usb 1-1: Manufacturer: syz [ 159.455714][ T5817] usb 1-1: SerialNumber: syz [ 159.680000][ T7160] binder: 7159:7160 ioctl c018620c 200000000780 returned -22 [ 159.716841][ T5817] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.804793][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.479'. [ 161.287875][ C0] usblp0: nonzero write bulk status received: -71 [ 161.289598][ T788] usb 1-1: USB disconnect, device number 3 [ 161.313192][ T788] usblp0: removed [ 161.599179][ T7208] kvm: user requested TSC rate below hardware speed [ 161.704222][ T7215] Write-error on swap-device (8:0:278358) Jul 31 09:09:27 syzkaller kern.alert kernel: [ 161.704222][ T7215] Write-error on swap-device (8:0:278358) [ 162.080249][ T7226] loop1: detected capacity change from 0 to 128 [ 162.107834][ T7226] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.317598][ T7231] SET target dimension over the limit! [ 162.808254][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.491'. [ 164.647221][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 164.674096][ T7262] loop3: detected capacity change from 0 to 7 [ 164.698069][ C0] blk_print_req_error: 60 callbacks suppressed [ 164.698083][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.713527][ C0] buffer_io_error: 16 callbacks suppressed [ 164.713540][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.728643][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.737905][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.749807][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.759042][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.770897][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.780133][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.788552][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.797761][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.807217][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.816419][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.824567][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.833793][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.845454][ T7262] ldm_validate_partition_table(): Disk read failed. [ 164.855288][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.864535][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.879284][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.888697][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.897033][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.906303][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 164.921246][ T7262] Dev loop3: unable to read RDB block 0 [ 164.928588][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.949330][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 164.969492][ T7262] loop3: unable to read partition table [ 164.971792][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 164.975441][ T7262] loop3: partition table beyond EOD, truncated [ 164.990186][ T7262] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 165.004890][ T8] usb 4-1: Product: syz [ 165.011791][ T8] usb 4-1: Manufacturer: syz [ 165.016471][ T8] usb 4-1: SerialNumber: syz [ 165.342032][ T7253] binder: 7251:7253 ioctl c018620c 200000000780 returned -22 [ 165.360067][ T7275] SET target dimension over the limit! [ 165.389808][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.670462][ T788] usb 4-1: USB disconnect, device number 2 [ 165.716075][ T788] usblp0: removed [ 166.083726][ T7284] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 167.267818][ T7298] Set syz0 is full, maxelem 0 reached [ 167.577317][ T7292] loop1: detected capacity change from 0 to 32768 [ 167.644445][ T7292] loop1: p1 p3 < > [ 168.069111][ T7313] SET target dimension over the limit! [ 168.409295][ T7320] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 169.351311][ T5767] udevd[5767]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 169.382841][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 169.762987][ T7339] Set syz0 is full, maxelem 0 reached [ 169.777326][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 169.819965][ T7335] kvm: pic: non byte write [ 169.960186][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.980009][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 169.994479][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 170.009856][ T8] usb 3-1: Product: syz [ 170.038706][ T8] usb 3-1: Manufacturer: syz [ 170.043361][ T8] usb 3-1: SerialNumber: syz [ 170.524673][ T7329] binder: 7328:7329 ioctl c018620c 200000000780 returned -22 [ 170.585883][ T7351] SET target dimension over the limit! [ 170.715003][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 170.806747][ T5779] usb 3-1: USB disconnect, device number 2 [ 170.818839][ T5779] usblp0: removed [ 172.781302][ T7375] loop2: detected capacity change from 0 to 764 [ 172.931107][ T7375] rock: directory entry would overflow storage [ 172.942950][ T7375] rock: sig=0x4654, size=5, remaining=4 [ 173.337388][ T7379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.539'. [ 174.283578][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 174.545011][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.548707][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 174.548736][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 174.548756][ T8] usb 3-1: Product: syz [ 174.548771][ T8] usb 3-1: Manufacturer: syz [ 174.548785][ T8] usb 3-1: SerialNumber: syz [ 174.761377][ T7401] binder: 7399:7401 ioctl c018620c 200000000780 returned -22 [ 174.838947][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.255591][ C1] usblp0: nonzero write bulk status received: -71 [ 175.256816][ T8] usb 3-1: USB disconnect, device number 3 [ 175.309056][ T8] usblp0: removed [ 176.563613][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.367774][ T7486] team0: No ports can be present during mode change [ 177.417048][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 177.620151][ T788] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.668952][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 177.692977][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 177.704847][ T788] usb 3-1: Product: syz [ 177.713148][ T788] usb 3-1: Manufacturer: syz [ 177.721188][ T788] usb 3-1: SerialNumber: syz [ 177.946700][ T7470] binder: 7469:7470 ioctl c018620c 200000000780 returned -22 [ 177.981821][ T788] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.292307][ C0] usblp0: nonzero write bulk status received: -71 [ 178.293545][ T788] usb 3-1: USB disconnect, device number 4 [ 178.324650][ T7506] usblp0: removed [ 178.909783][ T7526] 8021q: VLANs not supported on gre0 [ 179.455401][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 179.492798][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 179.516856][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 179.752542][ T7549] capability: warning: `syz.3.591' uses 32-bit capabilities (legacy support in use) [ 180.387035][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 180.588854][ T5893] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.633895][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 180.670965][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 180.699835][ T5893] usb 2-1: Product: syz [ 180.704051][ T5893] usb 2-1: Manufacturer: syz [ 180.734003][ T5893] usb 2-1: SerialNumber: syz [ 180.819644][ T28] audit: type=1326 audit(1785488987.077:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 180.896468][ T28] audit: type=1326 audit(1785488987.077:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 180.926506][ T28] audit: type=1326 audit(1785488987.107:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 180.961876][ T7562] binder: 7561:7562 ioctl c018620c 200000000780 returned -22 [ 180.972668][ T28] audit: type=1326 audit(1785488987.107:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 181.001134][ T28] audit: type=1326 audit(1785488987.107:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 181.023644][ T7577] loop0: detected capacity change from 0 to 764 [ 181.028824][ T5893] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.042749][ T7577] rock: directory entry would overflow storage [ 181.051706][ T7577] rock: sig=0x4654, size=5, remaining=4 [ 181.089233][ T28] audit: type=1326 audit(1785488987.107:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 181.123783][ T28] audit: type=1326 audit(1785488987.107:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 181.149376][ T28] audit: type=1326 audit(1785488987.107:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 181.184378][ T28] audit: type=1326 audit(1785488987.107:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 181.225598][ T28] audit: type=1326 audit(1785488987.107:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43119e019 code=0x7ffc0000 [ 181.362636][ C0] usblp0: nonzero write bulk status received: -71 [ 181.363835][ T788] usb 2-1: USB disconnect, device number 3 [ 181.387676][ T788] usblp0: removed [ 182.245918][ T7617] netlink: 144 bytes leftover after parsing attributes in process `syz.2.618'. [ 182.285396][ T7617] syzkaller0: entered promiscuous mode [ 182.300326][ T7617] syzkaller0: entered allmulticast mode [ 182.857114][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 183.058813][ T788] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.089451][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 183.109276][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 183.126938][ T788] usb 3-1: Product: syz [ 183.137145][ T788] usb 3-1: Manufacturer: syz [ 183.141924][ T788] usb 3-1: SerialNumber: syz [ 183.367127][ T7626] binder: 7625:7626 ioctl c018620c 200000000780 returned -22 [ 183.386342][ T788] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 183.708426][ C1] usblp0: nonzero write bulk status received: -71 [ 183.708821][ T8] usb 3-1: USB disconnect, device number 5 [ 183.746283][ T8] usblp0: removed [ 184.487484][ T7668] loop2: detected capacity change from 0 to 764 [ 184.521418][ T7668] rock: directory entry would overflow storage [ 184.528952][ T7668] rock: sig=0x4654, size=5, remaining=4 [ 184.839663][ T7672] loop5: detected capacity change from 0 to 7 [ 184.861859][ T7672] Dev loop5: unable to read RDB block 7 [ 184.870879][ T7672] loop5: unable to read partition table [ 184.882395][ T7672] loop5: partition table beyond EOD, truncated [ 184.893504][ T7672] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 185.827133][ T28] kauditd_printk_skb: 3846 callbacks suppressed [ 185.827154][ T28] audit: type=1326 audit(1785488992.077:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 185.882217][ T28] audit: type=1326 audit(1785488992.087:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 185.995468][ T28] audit: type=1326 audit(1785488992.097:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 186.051443][ T28] audit: type=1326 audit(1785488992.097:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 186.126268][ T28] audit: type=1326 audit(1785488992.097:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 186.162047][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.645'. [ 187.937049][ T28] audit: type=1326 audit(1785488992.097:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 187.966951][ T28] audit: type=1326 audit(1785488992.097:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 187.993391][ T28] audit: type=1326 audit(1785488992.097:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 188.017845][ T28] audit: type=1326 audit(1785488992.097:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 188.042496][ T28] audit: type=1326 audit(1785488992.097:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615259e019 code=0x7fc00000 [ 188.086669][ T7685] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 188.093246][ T7685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.132912][ T7687] vhci_hcd: connection closed [ 188.135988][ T7685] vhci_hcd vhci_hcd.0: Device attached [ 188.217807][ T2109] vhci_hcd: stop threads [ 188.222181][ T2109] vhci_hcd: release socket [ 188.228105][ T2109] vhci_hcd: disconnect device [ 188.477354][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.656822][ T7693] loop0: detected capacity change from 0 to 764 [ 188.669172][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.682719][ T7693] rock: directory entry would overflow storage [ 188.697984][ T7693] rock: sig=0x4654, size=5, remaining=4 [ 188.728787][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 188.767277][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 188.775441][ T23] usb 2-1: Product: syz [ 188.791360][ T23] usb 2-1: Manufacturer: syz [ 188.800088][ T7696] netlink: 84 bytes leftover after parsing attributes in process `syz.2.649'. [ 188.809249][ T23] usb 2-1: SerialNumber: syz [ 188.955970][ T7700] Illegal XDP return value 4272436000 on prog (id 28) dev N/A, expect packet loss! [ 189.043884][ T7690] binder: 7689:7690 ioctl c018620c 200000000780 returned -22 [ 189.056044][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 189.360596][ C0] usblp0: nonzero write bulk status received: -71 [ 189.368692][ T5817] usb 2-1: USB disconnect, device number 4 [ 189.382270][ T5817] usblp0: removed [ 190.032021][ T7718] loop1: detected capacity change from 0 to 764 [ 190.102192][ T7720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.657'. [ 190.139744][ T7718] rock: directory entry would overflow storage [ 190.222858][ T7718] rock: sig=0x4654, size=5, remaining=4 [ 191.021278][ T7728] 0: reclassify loop, rule prio 0, protocol 03 [ 191.888274][ T7747] loop0: detected capacity change from 0 to 764 [ 191.900930][ T7747] rock: directory entry would overflow storage [ 191.911927][ T7747] rock: sig=0x4654, size=5, remaining=4 [ 192.678456][ T7762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.673'. [ 194.014042][ T7767] xt_connbytes: Forcing CT accounting to be enabled [ 194.133549][ T7772] loop1: detected capacity change from 0 to 764 [ 194.191734][ T7772] rock: directory entry would overflow storage [ 194.242029][ T7772] rock: sig=0x4654, size=5, remaining=4 [ 194.442520][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451286][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.284840][ T7796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.685'. [ 195.323796][ T7788] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 196.835527][ T7802] loop2: detected capacity change from 0 to 764 [ 196.883213][ T7802] rock: directory entry would overflow storage [ 196.891376][ T7802] rock: sig=0x4654, size=5, remaining=4 [ 197.676844][ T7821] loop3: detected capacity change from 0 to 256 [ 198.823812][ T7843] xt_hashlimit: size too large, truncated to 1048576 [ 198.895505][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.700'. [ 200.088304][ T7847] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 200.094976][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.102713][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 200.109391][ T7848] vhci_hcd: connection closed [ 200.137471][ T59] vhci_hcd: stop threads [ 200.272166][ T59] vhci_hcd: release socket [ 200.276644][ T59] vhci_hcd: disconnect device [ 200.422898][ T7852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.640995][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 201.647121][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 201.653127][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 203.622678][ T7921] md: array md0 already initialised! [ 203.634475][ T7921] md: loop0 has zero or unknown size, marking faulty! [ 203.645714][ T7921] md: error, md_import_device() returned -22 [ 203.656170][ T7921] md: loop2 has zero or unknown size, marking faulty! [ 203.670362][ T7921] md: error, md_import_device() returned -22 [ 203.685212][ T7921] md: loop3 has zero or unknown size, marking faulty! [ 203.710781][ T7921] md: error, md_import_device() returned -22 [ 204.385125][ T7942] loop1: detected capacity change from 0 to 256 [ 204.535843][ T7943] md: array md0 already initialised! [ 204.542221][ T7943] md: loop0 has zero or unknown size, marking faulty! [ 204.591700][ T7943] md: error, md_import_device() returned -22 [ 204.652849][ T7947] md: loop2 has zero or unknown size, marking faulty! [ 204.715621][ T7947] md: error, md_import_device() returned -22 [ 204.787149][ T7943] md: loop3 has zero or unknown size, marking faulty! [ 204.824682][ T7943] md: error, md_import_device() returned -22 [ 205.743649][ T7969] netlink: 92 bytes leftover after parsing attributes in process `syz.0.748'. [ 206.518246][ T7997] netlink: 92 bytes leftover after parsing attributes in process `syz.0.759'. [ 207.065016][ T8016] loop4: detected capacity change from 0 to 7 [ 207.114010][ T8016] loop4: [ 207.120644][ T8016] loop4: partition table partially beyond EOD, truncated [ 207.137829][ T8018] netlink: 92 bytes leftover after parsing attributes in process `syz.1.768'. [ 207.769961][ T8037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.813150][ T8037] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 207.835116][ T8037] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 207.848320][ T8037] overlayfs: missing 'lowerdir' [ 208.011683][ T8045] netlink: 92 bytes leftover after parsing attributes in process `syz.2.779'. [ 208.132177][ T8052] loop0: detected capacity change from 0 to 256 [ 208.604598][ T8065] loop1: detected capacity change from 0 to 764 [ 208.618995][ T8065] rock: directory entry would overflow storage [ 208.630695][ T8065] rock: sig=0x4654, size=5, remaining=4 [ 208.670068][ T8068] netlink: 92 bytes leftover after parsing attributes in process `syz.0.789'. [ 208.856107][ T8073] loop0: detected capacity change from 0 to 256 [ 209.504812][ T8088] loop1: detected capacity change from 0 to 764 [ 209.561556][ T8088] rock: directory entry would overflow storage [ 209.581712][ T8088] rock: sig=0x4654, size=5, remaining=4 [ 209.622699][ T8090] netlink: 80 bytes leftover after parsing attributes in process `syz.0.799'. [ 209.845916][ T8095] loop0: detected capacity change from 0 to 256 [ 210.205051][ T8110] loop2: detected capacity change from 0 to 764 [ 210.224538][ T8110] rock: directory entry would overflow storage [ 210.239160][ T8110] rock: sig=0x4654, size=5, remaining=4 [ 210.253585][ T8112] netlink: 80 bytes leftover after parsing attributes in process `syz.0.809'. [ 210.513443][ T8120] loop2: detected capacity change from 0 to 256 [ 211.239649][ T8137] loop1: detected capacity change from 0 to 764 [ 211.265817][ T8137] rock: directory entry would overflow storage [ 211.280950][ T8137] rock: sig=0x4654, size=5, remaining=4 [ 212.509370][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 215.848285][ T8276] loop2: detected capacity change from 0 to 512 [ 215.939794][ T8277] SET target dimension over the limit! [ 216.223391][ T8283] loop0: detected capacity change from 0 to 256 [ 216.778501][ T8306] loop1: detected capacity change from 0 to 256 [ 217.077397][ T8316] loop0: detected capacity change from 0 to 164 [ 217.096439][ T8316] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 217.107336][ T8318] tun0: tun_chr_ioctl cmd 1074025677 [ 217.122206][ T8318] tun0: linktype set to 1 [ 217.637267][ T8323] SET target dimension over the limit! [ 218.030277][ T8346] netlink: 92 bytes leftover after parsing attributes in process `syz.1.894'. [ 218.772459][ T8375] SET target dimension over the limit! [ 219.229595][ T8382] mmap: syz.0.906 (8382): VmData 49217536 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 219.405664][ T8387] loop4: detected capacity change from 0 to 7 [ 219.429594][ T8387] Dev loop4: unable to read RDB block 7 [ 219.457317][ T8387] loop4: unable to read partition table [ 219.464245][ T8387] loop4: partition table beyond EOD, truncated [ 219.473171][ T8387] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 219.776639][ T8394] xt_hashlimit: size too large, truncated to 1048576 [ 220.845808][ T8424] loop4: detected capacity change from 0 to 7 [ 220.860726][ T8424] Dev loop4: unable to read RDB block 7 [ 220.874237][ T8424] loop4: unable to read partition table [ 220.883272][ T8424] loop4: partition table beyond EOD, truncated [ 220.898434][ T8424] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 221.326687][ T8432] SET target dimension over the limit! [ 222.121621][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 222.755102][ T8485] loop3: detected capacity change from 0 to 512 [ 222.875648][ T8487] fuse: root generation should be zero [ 224.099627][ T8555] kvm: pic: single mode not supported [ 224.099838][ T8555] kvm: pic: level sensitive irq not supported [ 224.451929][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 224.451944][ T28] audit: type=1800 audit(1785489030.707:3953): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.973" name="bus" dev="overlay" ino=1245 res=0 errno=0 [ 224.725366][ T8590] loop2: detected capacity change from 0 to 256 [ 224.827424][ T28] audit: type=1800 audit(1785489031.077:3954): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.977" name="file2" dev="loop2" ino=1048599 res=0 errno=0 [ 224.838649][ T8590] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 224.892826][ T8590] FAT-fs (loop2): Filesystem has been set read-only [ 225.321777][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 226.191505][ T8644] loop2: detected capacity change from 0 to 256 [ 226.233873][ T8627] loop0: detected capacity change from 0 to 32768 [ 226.293891][ T8627] loop0: p1 p3 < > [ 226.815328][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 226.816296][ T7586] udevd[7586]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 227.279055][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 227.755419][ T8679] loop3: detected capacity change from 0 to 32768 [ 227.829959][ T8679] loop3: p1 p3 < > [ 228.339660][ T7586] udevd[7586]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 228.350014][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 228.449566][ T8726] Write-error on swap-device (8:0:278366) Jul 31 09:10:34 syzkaller kern.alert kernel: [ 228.449566][ T8726] Write-error on swap-device (8:0:278366) [ 229.115949][ T8728] loop1: detected capacity change from 0 to 32768 [ 229.208116][ T8728] loop1: p1 p3 < > [ 229.477478][ T8763] IPv6: NLM_F_REPLACE set, but no existing node found! [ 229.818298][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 229.829304][ T7586] udevd[7586]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 230.518894][ T8773] loop3: detected capacity change from 0 to 32768 [ 230.578719][ T8773] loop3: p1 p3 < > [ 230.907894][ T8795] loop2: detected capacity change from 0 to 256 [ 231.076055][ T5767] udevd[5767]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 231.085927][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 231.710048][ T8814] syz.3.1062 (8814): /proc/8812/oom_adj is deprecated, please use /proc/8812/oom_score_adj instead. [ 231.891130][ T5817] smpboot: CPU 1 is now offline [ 235.674501][ T8917] SET target dimension over the limit! [ 238.045313][ T8958] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 238.051854][ T8958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.591466][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 238.770649][ T8958] vhci_hcd vhci_hcd.0: Device attached [ 238.814449][ T8959] vhci_hcd: connection closed [ 238.815519][ T12] vhci_hcd: stop threads [ 238.880160][ T12] vhci_hcd: release socket [ 238.884631][ T12] vhci_hcd: disconnect device [ 239.766071][ T8987] loop4: detected capacity change from 0 to 7 [ 239.787970][ T8987] loop4: [ 239.792096][ T8987] loop4: partition table partially beyond EOD, truncated [ 240.380833][ T9001] kvm: pic: non byte write [ 240.647849][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 240.868749][ T5817] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.887551][ T5817] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 240.902220][ T9023] SET target dimension over the limit! [ 240.907940][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 240.916541][ T5817] usb 2-1: Product: syz [ 240.923345][ T5817] usb 2-1: Manufacturer: syz [ 240.928417][ T5817] usb 2-1: SerialNumber: syz [ 241.166043][ T9006] binder: 9005:9006 ioctl c018620c 200000000780 returned -22 [ 241.406744][ T5817] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.653193][ T5817] usb 2-1: USB disconnect, device number 5 [ 241.681741][ T5817] usblp0: removed [ 242.969505][ T9073] loop4: detected capacity change from 0 to 7 [ 242.990904][ T9073] loop4: [ 243.002524][ T9073] loop4: partition table partially beyond EOD, truncated [ 244.006149][ T9101] loop4: detected capacity change from 0 to 7 [ 244.037321][ T9101] loop4: [ 244.040310][ T9101] loop4: partition table partially beyond EOD, truncated [ 244.635757][ T9117] bond1 (unregistering): Released all slaves [ 245.934770][ T9145] syzkaller0: entered promiscuous mode [ 245.957651][ T9145] syzkaller0: entered allmulticast mode [ 246.405851][ T9157] SET target dimension over the limit! [ 248.730206][ T9198] Cannot find add_set index 0 as target [ 249.256990][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 249.450114][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.496331][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 249.529129][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 249.571708][ T8] usb 3-1: Product: syz [ 249.598585][ T8] usb 3-1: Manufacturer: syz [ 249.619230][ T8] usb 3-1: SerialNumber: syz [ 249.861800][ T9206] binder: 9205:9206 ioctl c018620c 200000000780 returned -22 [ 249.905545][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.110785][ T5817] usb 3-1: USB disconnect, device number 6 [ 250.135605][ T5817] usblp0: removed [ 251.480018][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1225'. [ 253.008467][ T9267] loop4: detected capacity change from 0 to 7 [ 253.026311][ T28] audit: type=1326 audit(1785489059.277:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.067073][ T9267] Dev loop4: unable to read RDB block 7 [ 253.090287][ T9267] loop4: unable to read partition table [ 253.120719][ T9267] loop4: partition table beyond EOD, truncated [ 253.144901][ T28] audit: type=1326 audit(1785489059.317:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.170994][ T9267] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 253.226316][ T5138] Dev loop4: unable to read RDB block 7 [ 253.233666][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 253.248183][ T5138] loop4: unable to read partition table [ 253.261203][ T5138] loop4: partition table beyond EOD, truncated [ 253.282818][ T28] audit: type=1326 audit(1785489059.317:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.456990][ T28] audit: type=1326 audit(1785489059.317:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.623282][ T28] audit: type=1326 audit(1785489059.317:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.623309][ T28] audit: type=1326 audit(1785489059.317:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.623330][ T28] audit: type=1326 audit(1785489059.317:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.623350][ T28] audit: type=1326 audit(1785489059.317:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.623370][ T28] audit: type=1326 audit(1785489059.317:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.623389][ T28] audit: type=1326 audit(1785489059.317:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.2.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f20ca19e019 code=0x7ffc0000 [ 253.771698][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.883952][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.895738][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.053664][ T9368] loop4: detected capacity change from 0 to 7 [ 256.090190][ T9368] Dev loop4: unable to read RDB block 7 [ 256.107912][ T9368] loop4: AHDI p2 p3 [ 256.120690][ T9368] loop4: partition table partially beyond EOD, truncated [ 256.150571][ T9368] loop4: p3 start 335544320 is beyond EOD, truncated [ 258.220385][ T9400] loop4: detected capacity change from 0 to 7 [ 258.270050][ T9400] Dev loop4: unable to read RDB block 7 [ 258.314094][ T9400] loop4: AHDI p2 p3 [ 258.335428][ T9400] loop4: partition table partially beyond EOD, truncated [ 258.376034][ T9400] loop4: p3 start 335544320 is beyond EOD, truncated [ 258.751943][ T9415] loop0: detected capacity change from 0 to 256 [ 258.964717][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 259.022222][ T9421] vlan0: entered promiscuous mode [ 260.810618][ T9447] loop3: detected capacity change from 0 to 512 [ 260.887096][ T9447] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 260.962624][ T9447] FAT-fs (loop3): Filesystem has been set read-only [ 263.739527][ T9514] loop2: detected capacity change from 0 to 7 [ 263.797163][ T9514] Dev loop2: unable to read RDB block 7 [ 263.802895][ T9514] loop2: unable to read partition table [ 263.853013][ T9514] loop2: partition table beyond EOD, truncated [ 263.884735][ T9514] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 263.943002][ T9519] loop0: detected capacity change from 0 to 128 [ 263.961457][ T5138] Dev loop2: unable to read RDB block 7 [ 263.986889][ T5138] loop2: unable to read partition table [ 264.005715][ T5138] loop2: partition table beyond EOD, truncated [ 264.054609][ T9519] syz.0.1345: attempt to access beyond end of device [ 264.054609][ T9519] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 264.167817][ T9522] syz.0.1345: attempt to access beyond end of device [ 264.167817][ T9522] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 264.286938][ T9522] buffer_io_error: 10 callbacks suppressed [ 264.286947][ T9522] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 264.348052][ T9522] syz.0.1345: attempt to access beyond end of device [ 264.348052][ T9522] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 264.419636][ T9522] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 264.461041][ T9525] syz.0.1345: attempt to access beyond end of device [ 264.461041][ T9525] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 264.550124][ T9525] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 264.936147][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 265.596410][ T9573] loop2: detected capacity change from 0 to 256 [ 266.041172][ T9584] loop6: detected capacity change from 0 to 7 [ 266.073012][ T9584] [ 266.075366][ T9584] ====================================================== [ 266.082371][ T9584] WARNING: possible circular locking dependency detected [ 266.089385][ T9584] syzkaller #0 Not tainted [ 266.093778][ T9584] ------------------------------------------------------ [ 266.100802][ T9584] syz.0.1370/9584 is trying to acquire lock: [ 266.106775][ T9584] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 266.115820][ T9584] [ 266.115820][ T9584] but task is already holding lock: [ 266.123163][ T9584] ffff888148c84450 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 266.133149][ T9584] [ 266.133149][ T9584] which lock already depends on the new lock. [ 266.133149][ T9584] [ 266.143531][ T9584] [ 266.143531][ T9584] the existing dependency chain (in reverse order) is: [ 266.152520][ T9584] [ 266.152520][ T9584] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 266.160851][ T9584] down_write+0x97/0x200 [ 266.165600][ T9584] set_blocksize+0x247/0x4b0 [ 266.170724][ T9584] sb_min_blocksize+0xbe/0x190 [ 266.175989][ T9584] ext4_fill_super+0x6e7/0x6870 [ 266.181338][ T9584] get_tree_bdev+0x3e5/0x520 [ 266.186430][ T9584] vfs_get_tree+0x8c/0x280 [ 266.191448][ T9584] do_new_mount+0x24a/0xa40 [ 266.196493][ T9584] init_mount+0xde/0x130 [ 266.201264][ T9584] do_mount_root+0x97/0x230 [ 266.206314][ T9584] mount_root_generic+0x1a6/0x3e0 [ 266.211880][ T9584] prepare_namespace+0xc2/0x100 [ 266.217288][ T9584] kernel_init_freeable+0x41a/0x560 [ 266.223094][ T9584] kernel_init+0x1d/0x1c0 [ 266.227934][ T9584] ret_from_fork+0x48/0x80 [ 266.232880][ T9584] ret_from_fork_asm+0x11/0x20 [ 266.238273][ T9584] [ 266.238273][ T9584] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 266.246863][ T9584] down_write+0x97/0x200 [ 266.251646][ T9584] set_blocksize+0x1ff/0x4b0 [ 266.256768][ T9584] sb_min_blocksize+0xbe/0x190 [ 266.262052][ T9584] ext4_fill_super+0x6e7/0x6870 [ 266.267420][ T9584] get_tree_bdev+0x3e5/0x520 [ 266.272518][ T9584] vfs_get_tree+0x8c/0x280 [ 266.277471][ T9584] do_new_mount+0x24a/0xa40 [ 266.282499][ T9584] init_mount+0xde/0x130 [ 266.287279][ T9584] do_mount_root+0x97/0x230 [ 266.292318][ T9584] mount_root_generic+0x1a6/0x3e0 [ 266.297877][ T9584] prepare_namespace+0xc2/0x100 [ 266.303278][ T9584] kernel_init_freeable+0x41a/0x560 [ 266.309041][ T9584] kernel_init+0x1d/0x1c0 [ 266.313889][ T9584] ret_from_fork+0x48/0x80 [ 266.318833][ T9584] ret_from_fork_asm+0x11/0x20 [ 266.324126][ T9584] [ 266.324126][ T9584] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 266.332469][ T9584] down_read+0x46/0x2e0 [ 266.337235][ T9584] super_lock+0x189/0x390 [ 266.342066][ T9584] fs_bdev_mark_dead+0xad/0x1f0 [ 266.347423][ T9584] bdev_mark_dead+0x83/0x1a0 [ 266.352517][ T9584] blk_report_disk_dead+0x21c/0x3e0 [ 266.358237][ T9584] del_gendisk+0x2cb/0x8f0 [ 266.363170][ T9584] sd_remove+0x8d/0x100 [ 266.367832][ T9584] device_release_driver_internal+0x458/0x6f0 [ 266.374408][ T9584] bus_remove_device+0x43b/0x520 [ 266.379875][ T9584] device_del+0x51f/0x910 [ 266.384706][ T9584] __scsi_remove_device+0x1a2/0x390 [ 266.390432][ T9584] scsi_forget_host+0xd0/0x110 [ 266.395730][ T9584] scsi_remove_host+0x1b3/0x730 [ 266.401217][ T9584] virtscsi_remove+0x130/0x1a0 [ 266.406506][ T9584] virtio_dev_remove+0x96/0x1a0 [ 266.411894][ T9584] device_release_driver_internal+0x408/0x6f0 [ 266.418569][ T9584] bus_remove_device+0x43b/0x520 [ 266.424037][ T9584] device_del+0x51f/0x910 [ 266.428870][ T9584] device_unregister+0x20/0xc0 [ 266.434147][ T9584] unregister_virtio_device+0x37/0x60 [ 266.440020][ T9584] virtio_pci_remove+0x7f/0xf0 [ 266.445285][ T9584] pci_device_remove+0x97/0x230 [ 266.450633][ T9584] device_release_driver_internal+0x408/0x6f0 [ 266.457219][ T9584] pci_stop_bus_device+0x108/0x140 [ 266.462849][ T9584] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 266.469861][ T9584] remove_store+0xe6/0x150 [ 266.474787][ T9584] kernfs_fop_write_iter+0x3a4/0x520 [ 266.480576][ T9584] vfs_write+0x474/0x9a0 [ 266.485320][ T9584] ksys_write+0x151/0x260 [ 266.490158][ T9584] do_syscall_64+0x55/0xb0 [ 266.495089][ T9584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.501480][ T9584] [ 266.501480][ T9584] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 266.509721][ T9584] __mutex_lock+0x135/0xc80 [ 266.514723][ T9584] bd_finish_claiming+0x229/0x3f0 [ 266.520260][ T9584] blkdev_get_by_dev+0x469/0x610 [ 266.525727][ T9584] bdev_open_by_dev+0x77/0x100 [ 266.531007][ T9584] setup_bdev_super+0x59/0x660 [ 266.536281][ T9584] mount_bdev+0x1ce/0x2c0 [ 266.541140][ T9584] legacy_get_tree+0xea/0x180 [ 266.546337][ T9584] vfs_get_tree+0x8c/0x280 [ 266.551256][ T9584] do_new_mount+0x24a/0xa40 [ 266.556282][ T9584] init_mount+0xde/0x130 [ 266.561048][ T9584] do_mount_root+0x97/0x230 [ 266.566057][ T9584] mount_root_generic+0x1a6/0x3e0 [ 266.571600][ T9584] prepare_namespace+0xc2/0x100 [ 266.576950][ T9584] kernel_init_freeable+0x41a/0x560 [ 266.582650][ T9584] kernel_init+0x1d/0x1c0 [ 266.587491][ T9584] ret_from_fork+0x48/0x80 [ 266.592410][ T9584] ret_from_fork_asm+0x11/0x20 [ 266.597676][ T9584] [ 266.597676][ T9584] -> #0 (bdev_lock){+.+.}-{3:3}: [ 266.604791][ T9584] __lock_acquire+0x37ef/0x7d80 [ 266.610158][ T9584] lock_acquire+0x19e/0x420 [ 266.615162][ T9584] __mutex_lock+0x135/0xc80 [ 266.620252][ T9584] bd_prepare_to_claim+0x1d9/0x4a0 [ 266.625863][ T9584] truncate_bdev_range+0x4e/0x260 [ 266.631395][ T9584] blkdev_fallocate+0x50d/0x6a0 [ 266.636764][ T9584] vfs_fallocate+0x585/0x6f0 [ 266.641877][ T9584] __x64_sys_fallocate+0xc1/0x110 [ 266.647417][ T9584] do_syscall_64+0x55/0xb0 [ 266.652351][ T9584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.658744][ T9584] [ 266.658744][ T9584] other info that might help us debug this: [ 266.658744][ T9584] [ 266.669042][ T9584] Chain exists of: [ 266.669042][ T9584] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 266.669042][ T9584] [ 266.683287][ T9584] Possible unsafe locking scenario: [ 266.683287][ T9584] [ 266.690712][ T9584] CPU0 CPU1 [ 266.696054][ T9584] ---- ---- [ 266.701393][ T9584] lock(mapping.invalidate_lock); [ 266.706483][ T9584] lock(&sb->s_type->i_mutex_key#8); [ 266.714355][ T9584] lock(mapping.invalidate_lock); [ 266.721962][ T9584] lock(bdev_lock); [ 266.725857][ T9584] [ 266.725857][ T9584] *** DEADLOCK *** [ 266.725857][ T9584] [ 266.733997][ T9584] 2 locks held by syz.0.1370/9584: [ 266.739105][ T9584] #0: ffff888148c842c0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 266.749886][ T9584] #1: ffff888148c84450 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 266.760299][ T9584] [ 266.760299][ T9584] stack backtrace: [ 266.766174][ T9584] CPU: 0 PID: 9584 Comm: syz.0.1370 Not tainted syzkaller #0 [ 266.773521][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.783572][ T9584] Call Trace: [ 266.786834][ T9584] [ 266.789748][ T9584] dump_stack_lvl+0x18c/0x250 [ 266.794417][ T9584] ? load_image+0x420/0x420 [ 266.798901][ T9584] ? show_regs_print_info+0x20/0x20 [ 266.804170][ T9584] ? print_circular_bug+0x12b/0x1a0 [ 266.809352][ T9584] check_noncircular+0x2fc/0x400 [ 266.814293][ T9584] ? print_deadlock_bug+0x5d0/0x5d0 [ 266.819519][ T9584] ? lockdep_lock+0xf5/0x230 [ 266.824124][ T9584] ? _find_first_zero_bit+0xd6/0x100 [ 266.829398][ T9584] __lock_acquire+0x37ef/0x7d80 [ 266.834259][ T9584] ? __bfs+0x27a/0x560 [ 266.838317][ T9584] ? verify_lock_unused+0x140/0x140 [ 266.843575][ T9584] ? check_noncircular+0x18a/0x400 [ 266.848878][ T9584] ? look_up_lock_class+0x75/0x140 [ 266.854002][ T9584] ? print_deadlock_bug+0x5d0/0x5d0 [ 266.859192][ T9584] ? lockdep_lock+0xf5/0x230 [ 266.863809][ T9584] ? lockdep_unlock+0x146/0x2e0 [ 266.868654][ T9584] ? lockdep_lock+0x230/0x230 [ 266.873330][ T9584] lock_acquire+0x19e/0x420 [ 266.877820][ T9584] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 266.883085][ T9584] ? __might_sleep+0xe0/0xe0 [ 266.887656][ T9584] ? read_lock_is_recursive+0x20/0x20 [ 266.893009][ T9584] __mutex_lock+0x135/0xc80 [ 266.897495][ T9584] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 266.902778][ T9584] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 266.908042][ T9584] ? mutex_lock_nested+0x20/0x20 [ 266.912961][ T9584] ? aa_file_perm+0x11b/0xee0 [ 266.917620][ T9584] bd_prepare_to_claim+0x1d9/0x4a0 [ 266.922713][ T9584] ? invalidate_bdev+0xc0/0xc0 [ 266.927550][ T9584] ? truncate_bdev_range+0x260/0x260 [ 266.932812][ T9584] ? down_write+0x16e/0x200 [ 266.937299][ T9584] ? down_read_killable+0x340/0x340 [ 266.942479][ T9584] truncate_bdev_range+0x4e/0x260 [ 266.947492][ T9584] blkdev_fallocate+0x50d/0x6a0 [ 266.952343][ T9584] vfs_fallocate+0x585/0x6f0 [ 266.956929][ T9584] __x64_sys_fallocate+0xc1/0x110 [ 266.961950][ T9584] do_syscall_64+0x55/0xb0 [ 266.966345][ T9584] ? clear_bhb_loop+0x40/0x90 [ 266.971089][ T9584] ? clear_bhb_loop+0x40/0x90 [ 266.975743][ T9584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.981644][ T9584] RIP: 0033:0x7ff43119e019 [ 266.986043][ T9584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.005734][ T9584] RSP: 002b:00007ff4320d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 267.014140][ T9584] RAX: ffffffffffffffda RBX: 00007ff431425fa0 RCX: 00007ff43119e019 [ 267.022096][ T9584] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 267.030050][ T9584] RBP: 00007ff43123500c R08: 0000000000000000 R09: 0000000000000000 [ 267.038091][ T9584] R10: 0000000002005347 R11: 0000000000000246 R12: 0000000000000000 [ 267.046068][ T9584] R13: 00007ff431426038 R14: 00007ff431425fa0 R15: 00007fff1c67bc38 [ 267.054032][ T9584]