last executing test programs: 25.538808706s ago: executing program 2 (id=417): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 24.462776357s ago: executing program 2 (id=426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 24.235503808s ago: executing program 2 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='\n', 0x1) 24.003367968s ago: executing program 2 (id=433): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 23.467263484s ago: executing program 2 (id=437): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x7b) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x4d) 22.974536577s ago: executing program 2 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 22.328322357s ago: executing program 32 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.026471863s ago: executing program 3 (id=529): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7aa, &(0x7f0000000000)={{@any, 0xffffffff}, @any, 0x7, 0x4, 0x40000, 0x7ffffffffffffffe, 0x7ffffffffffffffc, 0x0, 0x9}) 4.701583068s ago: executing program 3 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x5, 0x2, 0x2, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000700), &(0x7f0000000880)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 4.518762997s ago: executing program 3 (id=534): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.322625056s ago: executing program 3 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000022, 0x0, 0x4}]}) 4.01860366s ago: executing program 1 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x1, 0x0) writev(r0, &(0x7f0000005a00)=[{&(0x7f00000000c0)="ce", 0x1}], 0x1) 3.980139112s ago: executing program 3 (id=542): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x5522, &(0x7f0000000b40)="$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") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@umask={'umask', 0x3d, 0x7fff}}, {@shortad}, {}, {@undelete}, {@shortad}, {@mode={'mode', 0x3d, 0x439}}, {}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid={'gid', 0x3d, 0xee00}}, {@uid_forget}, {@noadinicb}]}, 0x1, 0xc66, &(0x7f0000001bc0)="$eJzs3U9sHNd9B/DfG+2KK7mtmDhVnDQONm2Ryorl6l9MxSrcVU2zDSDLQijmFoArkVIXpkiCpBrZSFumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocipJ6KFjaDogS0CBCgabDGzb6UlRdqyREqU/PnY1Hd35r2Z92bWMzKxb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/8/K54yfSFiv23U3tYucbBADsugvjXzl+cqv7PwDw2Lq03f//AwAAAAAAAAAAAAAAe0WKIp6MFPMX1tNk9b6ncb5Tv3FzYnRs62oHUlVzX1W+/GmcOHnq9BefHznTz/Od2fepv9M+Ha+OXzrXfGnu+vzC9OLi9FRzYrZzZW5q+q63cL/1NztaHYDm9dduTF29utg8+dypDatvDr839MTh4bMjzxx7ul92YnRsbPx2kcZg+do9N6RnuxEe+6OIY5Hi2e/+JLX7D3S4z2PReLDnfrMDVSeOVp2YGB2rOjLTac8ulSsv9g9EEdEcqNTqH6Otz0XU6g+0D9trRSyXzS8bfLTs3vh8e6F9eWa6ebG9sNRZ6szNXky91pb9aUYRZ1LESkSsDd25uXoUUYsU3z60ni7np35Ux+EL1cDg7dvxkJ/8UbazWY9YKR6Bc7aHDUURr0SKn759JK7k60x1rfl8xCtlfj/izTJfjEjlB+N0xLtbfI54NNWiiD8rz//Z9TRVXQ/615XzX21+efbq3EDZ/nXlQ94f7rhSPKT7w4FN+WDs8WtTI4poV1f89XTvf9kBAAAAAAAAAAAAAAAAYKcdiCI+FSle/tc/qMYVRzUu/dDZkd8d/sXBMeNPfcB2yrLPRcRycXdjcvfngYEX08WUHvJY4o+yRhTxh3n83zcfdmMAAAAAAAAAAAAAAAAAAAA+0or4caSheOdIWonBOcU7s9eal9qXZ3qzwvbn/u3Pmd7tdrvN1MtWzsmcyzlXcq7mXMsZRa6fs5VzMudyzpWcqznXcsa+XD9nK+dkzuWcKzlXc67ljFqun7OVs5FzOedKztWcazljj8zdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOCmiiJ9Him99fT1FiohWxGT0cnXoYbcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNpSK+Fymav9e6tawWEan6t+dI+cfpaO0v8+PRGinzxWidy9mustb65kNoP/ennor4UaQYarx164Tn81/vvbv1MYg3v3H73adrvdzXXzn83tAThw+dHRn77FPbvU5bNeDo+c7sjZvNidGxsfGBxbW8948PLBvO+y12putExOLrb7zWnpmZXrj3F+VH4B6r98/kfez9Qb5ItUemqV7sxIuo7YlmPJy+b9B4GBcndl15/383UvzmO//Wv+H37v+N+IXeu1t3+PjZH+2/df9/YfOG7vL+X9tcL9//yzvBVvf/JweWvZD/NlKvRTSWrs/XD0c0Fl9/41jnevva9LXp2dPHj39pZORLp47X90c0rnZmpgde7cjhAgAAAAAAAAAAAAAAAHhwUhG/HSnaP1pPzYi4WY3XGj478syxp/fFvmq81YZx26+OXzrXfGnu+vzC9OLi9FRzYrZzZW5q+m5316iGe02Mju1KZz7QgV1u/4HGS3Pzry90rv3+0pbrDzbOXV5cWmhf2Xp1HIgiojW45GjV4InRsarRM532bFX14paD6T+8eiri3yPFldPN9Lm8LI//3zzCf8P4/+XNG9rB8f+fPXh7/N/HBoqW+0ypiJ9Fit/486fic1U7D8YdxyyX++tIcfTMZ3K52F+W67eh91yB3sjAsux/R4q///nGsv3xkE/eLnviQx3cR0B5/g9Fiu/96XfiV/Oyjc9/2Pr8H9y8oV16/sMnBpYd3PC8gvvuOvn8H4sULz75VvxateR/3/f5H/0nNhzpFb79fI5dOv+/PLBsOO/313eq8wAAAAAAAAAAAI+weiribyLFD8Zq6fm87G6+/ze1eUO79P2vTw4sm8rf/0ux87OedLvdPy734ZuFAAAAADxO6qmIH0eKa0tv3RpDvXH898D4z9+6Pf5zNG1aW/2e75eq5wbs5O//Bg3n/U7ef7cBAAAAAAAAAAAAAAAAAABgT0mpiOfzfOqT1Xj+qW3nU1+NFC//57O5XDpcluvPAz9c/dm4MDd77NzMzFwjltqXZ6ab4/PtK9Nl3U9EivW/+kyuW1Tzq/fnm+/N8X57LvaFSDH2t/2yvbnY+3OT9+YDb3S7ESfKsh+LFP/xdxvL5qmp89zR1XZPlmX/MlJ87R+3Lnv4dtlTZdnvRIoffq3ZL3uwLNt/Puonb5d97spcsQtnBQAAAAAAAAAAAAAAAAAAgI+aeiriTyLFf11fuTWWP8//Xx94W3nzGwPz/W9ys5rnf7ia/3+71/cy/3/1XIHl7fYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPpxRFvBEp5i+sp9Wh8n1P43xn9sbNidGxrasdSFXNfVX58qdx4uSp0198fuRMP9+//k77VLw6fulc86W56/ML04uL01PNidnOlbmp6bvewv3W3+xodQCa11+7MXX16mLz5HOnNqy+Ofze0BOHh8+OPHPs6X7ZidGxsfGBMrX6Pe/9Dmmb5fujiL+IFM9+9yfpB0MRRdxxLP7vwx6LD/js7LYDVSeOVp2YGB2rOjLTac8ulSsv9g9EEdEcqNTqH6MHcC7uSytiuWx+2eCjZffG59sL7csz082L7YWlzlJnbvZi6rW27E8zijiTIlYiYm3ozs3Vo4jXIsW3D62nfxqK2Nc/Dl+4MP6V4ye3b0exi328C2U7m/WIleIROGd72FAU8Q+R4qdvH4l/HoqoRe8nPh/xSpnfj3gzeuc7lR+M0xHvbvE54tFUiyL+pzz/Z9fT20Pl9aB/XTn/1eaXZ6/ODZTtX1fu91750O8PD9IevzY1oogfVlf89fQv/rsGAAAAAAAAAAAAAAAA2EOK+JVI8cI7R1I1PvjWmOLO7LXmpfblmd6wvv7Yv/6Y6W63222mXrZyTuZczrmSc7XKeqzl91Hk+jlbZTa63cn8fjnnSs7VnGs5q8G/0e029+X6OSdzLudcybmacy1n1PL+c7ZyTuZczrmSczXnWs7YI2P3AAAAAAAAAAAAAAAAAACAx0tR/ZPiW19fT92h3vzSk9HLVfOBPvb+PwAA//+mLvFm") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) 3.82163442s ago: executing program 1 (id=544): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c3955bb35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941c34b9a4e7834b582caa4040753b6b3582d93e8201ea879cfaef13ae976e62d0ea91df7e224"], 0x1, 0x442d, &(0x7f0000004480)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0) 2.943323491s ago: executing program 4 (id=549): r0 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 2.189989416s ago: executing program 1 (id=552): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) 1.681769521s ago: executing program 1 (id=555): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18) 1.446607251s ago: executing program 4 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 1.426038822s ago: executing program 3 (id=557): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000300)={0x20, 0x3, 0x0, 0xffffc00000000000}) 1.410979633s ago: executing program 1 (id=558): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.298512378s ago: executing program 0 (id=559): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000100)={0x84}, 0x8) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.127658767s ago: executing program 0 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add syz0 127.0.0.1+70:3\n', 0x18) 1.102213448s ago: executing program 4 (id=561): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 830.495681ms ago: executing program 0 (id=562): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1002810, &(0x7f00000003c0)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 758.553574ms ago: executing program 4 (id=563): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x44080) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) 633.22516ms ago: executing program 0 (id=564): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 502.526526ms ago: executing program 4 (id=565): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000001a40)=ANY=[@ANYBLOB='lastblock=00000000000010000216,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,session=18446744073709551360,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,uid=ignore,shortad,gid=ignore,dmode=00000000000017777757777,uid=ignore,fileset=00000000000000000000,shortad,\x00', @ANYRESOCT], 0x4, 0xc24, &(0x7f0000000d00)="$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") openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0xee00) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xee01, 0x1000) 401.672081ms ago: executing program 0 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="a8", 0x1}, {0x0}], 0x2, 0x8, 0x101) 163.649032ms ago: executing program 0 (id=567): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @opaque="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"}}}}}, 0x0) 106.603414ms ago: executing program 1 (id=568): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x32, 0x0, 0x0) 0s ago: executing program 4 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xb, 0x0, 0x7}}]}}]}, 0x44}}, 0x24008004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 74.978777][ T5764] cgroup: Unknown subsys name 'net' [ 75.114834][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.833469][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.336610][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.347082][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.356565][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.364385][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.377462][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.385742][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.393846][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.404249][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.410118][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.428977][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.436823][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.438004][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.445040][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.459058][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.460712][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.470648][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.473676][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.480779][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.507202][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.515887][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.523808][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.540746][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.553122][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.561128][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.944586][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 79.002987][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.120615][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.141675][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.150355][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.157854][ T5784] bridge_slave_0: entered allmulticast mode [ 79.164684][ T5784] bridge_slave_0: entered promiscuous mode [ 79.205924][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.213315][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.220852][ T5784] bridge_slave_1: entered allmulticast mode [ 79.227668][ T5784] bridge_slave_1: entered promiscuous mode [ 79.258176][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.265333][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.273033][ T5782] bridge_slave_0: entered allmulticast mode [ 79.279885][ T5782] bridge_slave_0: entered promiscuous mode [ 79.296388][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 79.322898][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.330294][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.337524][ T5782] bridge_slave_1: entered allmulticast mode [ 79.345430][ T5782] bridge_slave_1: entered promiscuous mode [ 79.376230][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.416955][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.425946][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.433597][ T5776] bridge_slave_0: entered allmulticast mode [ 79.442149][ T5776] bridge_slave_0: entered promiscuous mode [ 79.456206][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.484420][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.491986][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.499555][ T5776] bridge_slave_1: entered allmulticast mode [ 79.506812][ T5776] bridge_slave_1: entered promiscuous mode [ 79.531719][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.570546][ T5784] team0: Port device team_slave_0 added [ 79.590237][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.624082][ T5784] team0: Port device team_slave_1 added [ 79.630720][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.638394][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.645597][ T5779] bridge_slave_0: entered allmulticast mode [ 79.653517][ T5779] bridge_slave_0: entered promiscuous mode [ 79.674808][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.686989][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.704329][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.713927][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.721419][ T5779] bridge_slave_1: entered allmulticast mode [ 79.728616][ T5779] bridge_slave_1: entered promiscuous mode [ 79.740765][ T5782] team0: Port device team_slave_0 added [ 79.774851][ T5782] team0: Port device team_slave_1 added [ 79.804327][ T5776] team0: Port device team_slave_0 added [ 79.811283][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.818748][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.845560][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.883957][ T5776] team0: Port device team_slave_1 added [ 79.890464][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.897605][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.924293][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.938137][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.957279][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.964596][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.991436][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.031797][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.044364][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.051549][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.077534][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.107439][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.114867][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.143521][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.182480][ T5784] hsr_slave_0: entered promiscuous mode [ 80.188896][ T5784] hsr_slave_1: entered promiscuous mode [ 80.198952][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.205967][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.232106][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.283731][ T5779] team0: Port device team_slave_0 added [ 80.310050][ T5782] hsr_slave_0: entered promiscuous mode [ 80.316599][ T5782] hsr_slave_1: entered promiscuous mode [ 80.323546][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.331469][ T5782] Cannot create hsr debugfs directory [ 80.361122][ T5779] team0: Port device team_slave_1 added [ 80.441173][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.449127][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.475390][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.489113][ T5783] Bluetooth: hci1: command tx timeout [ 80.513298][ T5776] hsr_slave_0: entered promiscuous mode [ 80.519734][ T5776] hsr_slave_1: entered promiscuous mode [ 80.525827][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.533749][ T5776] Cannot create hsr debugfs directory [ 80.553098][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.560769][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.587588][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.597919][ T5783] Bluetooth: hci2: command tx timeout [ 80.598244][ T51] Bluetooth: hci0: command tx timeout [ 80.647971][ T51] Bluetooth: hci3: command tx timeout [ 80.729525][ T5779] hsr_slave_0: entered promiscuous mode [ 80.736649][ T5779] hsr_slave_1: entered promiscuous mode [ 80.743506][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.751491][ T5779] Cannot create hsr debugfs directory [ 80.963569][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.001662][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.012181][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.023218][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.117159][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.128771][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.148801][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.169022][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.255889][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.271608][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.291448][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.322798][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.393823][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.405212][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.415254][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.426116][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.484128][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.502931][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.536432][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.592297][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.599610][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.611086][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.618321][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.642847][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.682683][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.689987][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.700246][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.707552][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.792588][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.803216][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.819390][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.893425][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.932990][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.974039][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.995970][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.003473][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.032092][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.039411][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.062474][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.069731][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.110323][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.117470][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.267040][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.402602][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.460587][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.574331][ T51] Bluetooth: hci1: command tx timeout [ 82.604144][ T5782] veth0_vlan: entered promiscuous mode [ 82.637443][ T5782] veth1_vlan: entered promiscuous mode [ 82.648769][ T51] Bluetooth: hci0: command tx timeout [ 82.658686][ T51] Bluetooth: hci2: command tx timeout [ 82.692058][ T5784] veth0_vlan: entered promiscuous mode [ 82.717343][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.728520][ T51] Bluetooth: hci3: command tx timeout [ 82.734879][ T5784] veth1_vlan: entered promiscuous mode [ 82.782587][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.804445][ T5782] veth0_macvtap: entered promiscuous mode [ 82.819945][ T5782] veth1_macvtap: entered promiscuous mode [ 82.876201][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.896685][ T5784] veth0_macvtap: entered promiscuous mode [ 82.914203][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.933713][ T5784] veth1_macvtap: entered promiscuous mode [ 82.948862][ T5779] veth0_vlan: entered promiscuous mode [ 82.960773][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.971117][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.980393][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.990750][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.041497][ T5779] veth1_vlan: entered promiscuous mode [ 83.060731][ T5776] veth0_vlan: entered promiscuous mode [ 83.105007][ T5776] veth1_vlan: entered promiscuous mode [ 83.113608][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.125039][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.139244][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.151914][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.163006][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.174077][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.186116][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.196551][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.206719][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.216772][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253543][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.263998][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.343920][ T5779] veth0_macvtap: entered promiscuous mode [ 83.357415][ T5779] veth1_macvtap: entered promiscuous mode [ 83.367416][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.383230][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.432304][ T5776] veth0_macvtap: entered promiscuous mode [ 83.454664][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.475587][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.487206][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.498506][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.510611][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.522419][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.534355][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.544451][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.555571][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.567426][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.607105][ T5776] veth1_macvtap: entered promiscuous mode [ 83.663069][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.680145][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.697230][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.706462][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.724358][ T668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.749161][ T668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.831988][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.849716][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.862986][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.868040][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.876941][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.893148][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.903462][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.914348][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.930809][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.996836][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.037892][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.054763][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.067737][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.089362][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.105437][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.119576][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.182785][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.201607][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.214237][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.238077][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.299024][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.311120][ T5841] cgroup: fork rejected by pids controller in /syz2 [ 84.318859][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.368131][ T5844] tipc: Started in network mode [ 84.373663][ T5844] tipc: Node identity ac14140f, cluster identity 4711 [ 84.391103][ T5844] tipc: New replicast peer: 255.255.255.255 [ 84.406189][ T5844] tipc: Enabled bearer , priority 10 [ 84.422017][ T668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.445205][ T668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.648757][ T51] Bluetooth: hci1: command tx timeout [ 84.703065][ T5848] syz.3.4[5848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.725953][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.728203][ T51] Bluetooth: hci2: command tx timeout [ 84.735676][ T5783] Bluetooth: hci0: command tx timeout [ 84.765215][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.928471][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.968824][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.509167][ T5816] tipc: Node number set to 2886997007 [ 85.535078][ T5848] loop3: detected capacity change from 0 to 40427 [ 85.577744][ T5848] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 85.612998][ T5848] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 85.655485][ T5848] F2FS-fs (loop3): invalid crc value [ 85.895827][ T3458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.014868][ T5855] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.038089][ T5848] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 86.045361][ T5848] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.366692][ T5874] loop1: detected capacity change from 0 to 512 [ 86.409155][ T5874] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.458921][ T3458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.462469][ T5874] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.528972][ T5874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.541778][ T5875] loop0: detected capacity change from 0 to 4096 [ 86.599584][ T5874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 86.634599][ T5874] System zones: 1-12 [ 86.650050][ T5875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.650887][ T5874] EXT4-fs (loop1): 1 truncate cleaned up [ 86.669936][ T5874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.728446][ T5783] Bluetooth: hci1: command tx timeout [ 86.790801][ T3458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.808005][ T5783] Bluetooth: hci2: command tx timeout [ 86.809680][ T51] Bluetooth: hci0: command tx timeout [ 86.895184][ T28] audit: type=1800 audit(1789541085.023:2): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 86.905107][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.950318][ T3458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.082119][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.208943][ T5884] capability: warning: `syz.3.15' uses 32-bit capabilities (legacy support in use) [ 87.280596][ T5884] program syz.3.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.380104][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.392093][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.400256][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.413630][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.421348][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.429067][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.557572][ T5892] loop3: detected capacity change from 0 to 512 [ 87.628694][ C0] Illegal XDP return value 16128 on prog (id 2) dev veth1, expect packet loss! [ 87.646193][ T5894] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.886207][ T5922] loop1: detected capacity change from 0 to 512 [ 88.949411][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.025149][ T5930] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.053214][ T5922] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.089469][ T5922] EXT4-fs (loop1): shut down requested (2) [ 89.186285][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.529480][ T51] Bluetooth: hci3: command tx timeout [ 89.665066][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 89.898230][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.117902][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 90.128867][ T788] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 90.147836][ T788] usb 2-1: config 127 has no interface number 0 [ 90.158487][ T788] usb 2-1: config 127 interface 124 has no altsetting 0 [ 90.179362][ T788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 90.189376][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.197594][ T788] usb 2-1: Product: syz [ 90.201887][ T788] usb 2-1: Manufacturer: syz [ 90.207183][ T788] usb 2-1: SerialNumber: syz [ 90.226425][ T5939] loop0: detected capacity change from 0 to 40427 [ 90.252949][ T5939] F2FS-fs (loop0): invalid crc value [ 90.303622][ T5939] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.396989][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.428764][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.462782][ T5887] bridge_slave_0: entered allmulticast mode [ 90.485372][ T5887] bridge_slave_0: entered promiscuous mode [ 90.538804][ T5939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 90.580074][ T5950] loop3: detected capacity change from 0 to 32768 [ 90.586821][ T3458] hsr_slave_0: left promiscuous mode [ 90.599785][ T3458] hsr_slave_1: left promiscuous mode [ 90.634036][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.648630][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.679510][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.697513][ T5939] ======================================================= [ 90.697513][ T5939] WARNING: The mand mount option has been deprecated and [ 90.697513][ T5939] and is ignored by this kernel. Remove the mand [ 90.697513][ T5939] option from the mount to silence this warning. [ 90.697513][ T5939] ======================================================= [ 90.707411][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.757587][ T5939] syz.0.33: attempt to access beyond end of device [ 90.757587][ T5939] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.770768][ T28] audit: type=1800 audit(1789541088.893:3): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 90.802527][ T5939] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.811609][ T3458] bridge_slave_1: left allmulticast mode [ 90.840351][ T3458] bridge_slave_1: left promiscuous mode [ 90.856335][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.894646][ T3458] bridge_slave_0: left allmulticast mode [ 90.907847][ T3458] bridge_slave_0: left promiscuous mode [ 90.923995][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.000196][ T3458] veth1_macvtap: left promiscuous mode [ 91.017215][ T3458] veth0_macvtap: left promiscuous mode [ 91.025646][ T3458] veth1_vlan: left promiscuous mode [ 91.051798][ T3458] veth0_vlan: left promiscuous mode [ 91.188906][ T788] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 91.261376][ T5959] loop3: detected capacity change from 0 to 256 [ 91.320149][ T5959] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 91.450348][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.467924][ T788] usb 2-1: device firmware changed [ 91.528198][ T788] usb 2-1: USB disconnect, device number 2 [ 91.614133][ T51] Bluetooth: hci3: command tx timeout [ 91.867105][ T5964] loop0: detected capacity change from 0 to 1764 [ 92.260583][ T9] cfg80211: failed to load regulatory.db [ 92.342874][ T28] audit: type=1326 audit(1789541090.483:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 92.391536][ T28] audit: type=1326 audit(1789541090.483:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 92.463786][ T28] audit: type=1326 audit(1789541090.513:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 92.511797][ T28] audit: type=1326 audit(1789541090.513:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 92.591181][ T28] audit: type=1326 audit(1789541090.513:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 92.645484][ T28] audit: type=1326 audit(1789541090.513:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 92.685713][ T28] audit: type=1326 audit(1789541090.513:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.1.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 92.792394][ T5977] xt_CT: No such helper "pptp" [ 92.954991][ T3458] team0 (unregistering): Port device team_slave_1 removed [ 93.034022][ T3458] team0 (unregistering): Port device team_slave_0 removed [ 93.095015][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.147205][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.488030][ T5985] loop1: detected capacity change from 0 to 40427 [ 93.511072][ T5985] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 93.542656][ T5985] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 93.558975][ T5985] F2FS-fs (loop1): invalid crc value [ 93.573506][ T5985] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.670141][ T3458] bond0 (unregistering): Released all slaves [ 93.676262][ T5985] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 93.683869][ T5985] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.700084][ T51] Bluetooth: hci3: command tx timeout [ 93.756235][ T5985] syz.1.48: attempt to access beyond end of device [ 93.756235][ T5985] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.782985][ T5985] F2FS-fs (loop1): Remounting filesystem read-only [ 93.814974][ T5985] F2FS-fs (loop1): Remounting filesystem read-only [ 93.880410][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.887641][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.918113][ T5887] bridge_slave_1: entered allmulticast mode [ 93.925649][ T5887] bridge_slave_1: entered promiscuous mode [ 94.056499][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.080921][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.231012][ T5887] team0: Port device team_slave_0 added [ 94.237198][ T5995] program syz.3.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.268855][ T5887] team0: Port device team_slave_1 added [ 94.388906][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.406164][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.471935][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.532626][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.553345][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.597936][ T5766] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.665331][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.810545][ T6007] syz.3.53 (6007) used greatest stack depth: 19016 bytes left [ 94.847903][ T5766] usb 1-1: Using ep0 maxpacket: 16 [ 94.856453][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.875518][ T5887] hsr_slave_0: entered promiscuous mode [ 94.886033][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.897323][ T5766] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 94.912803][ T5887] hsr_slave_1: entered promiscuous mode [ 94.924505][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.964963][ T5766] usb 1-1: config 0 descriptor?? [ 95.166618][ T6017] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.420385][ T5766] hid (null): unknown global tag 0x57 [ 95.604446][ T5766] usb 1-1: string descriptor 0 read error: -71 [ 95.653399][ T5766] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 95.674143][ T5766] letsketch: probe of 0003:6161:4D15.0001 failed with error -32 [ 95.722021][ T5766] usb 1-1: USB disconnect, device number 2 [ 95.770180][ T51] Bluetooth: hci3: command tx timeout [ 96.214761][ T28] audit: type=1326 audit(1789541094.343:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.1.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 96.294289][ T5887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.312980][ T28] audit: type=1326 audit(1789541094.343:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.1.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 96.361915][ T5887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.408716][ T5887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.416076][ T28] audit: type=1326 audit(1789541094.353:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.1.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd298f9e159 code=0x7ffc0000 [ 96.451181][ T5887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.724048][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.755897][ T6058] jffs2: notice: (6058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.775518][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.825677][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.833051][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.922724][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.929978][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.050877][ T6068] bond0: option mode: unable to set because the bond device has slaves [ 97.095925][ T5887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.263470][ T6073] loop3: detected capacity change from 0 to 1024 [ 97.822157][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.976544][ T5887] veth0_vlan: entered promiscuous mode [ 98.024762][ T5887] veth1_vlan: entered promiscuous mode [ 98.141124][ T6096] kernel read not supported for file /eth0 (pid: 6096 comm: syz.1.80) [ 98.178385][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 98.178400][ T28] audit: type=1800 audit(1789541096.323:29): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.80" name="eth0" dev="mqueue" ino=8003 res=0 errno=0 [ 98.276645][ T5887] veth0_macvtap: entered promiscuous mode [ 98.302673][ T5887] veth1_macvtap: entered promiscuous mode [ 98.346595][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.365365][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.379800][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.390955][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.402717][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.418701][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.436282][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.487086][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.514368][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.535257][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.556158][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.576666][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.609171][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.651629][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.697249][ T5887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.715430][ T5887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.726149][ T6112] loop0: detected capacity change from 0 to 2048 [ 98.727022][ T5887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.748394][ T5887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.809367][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.008991][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.098333][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.118236][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.206435][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.232068][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.896611][ T6145] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 99.968719][ T6147] program syz.3.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.008065][ T5766] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.209916][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 101.237866][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.279870][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 101.315045][ T5766] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 101.334958][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.354973][ T5766] usb 3-1: Product: syz [ 101.360489][ T5766] usb 3-1: Manufacturer: syz [ 101.367565][ T5766] usb 3-1: SerialNumber: syz [ 101.391687][ T6203] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 101.392245][ T5766] usb 3-1: config 0 descriptor?? [ 101.403237][ T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.534300][ T6207] scsi_strcpy_devinfo: model string 'moí劌r•™—˜r³ádel' is too long [ 101.621484][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.648190][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.666968][ T23] usb 2-1: Product: syz [ 101.672790][ T23] usb 2-1: Manufacturer: syz [ 101.674677][ T5766] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 101.677427][ T23] usb 2-1: SerialNumber: syz [ 101.689935][ T23] usb 2-1: config 0 descriptor?? [ 101.738059][ T6212] capability: warning: `syz.3.116' uses deprecated v2 capabilities in a way that may be insecure [ 101.911371][ T5766] usb 3-1: USB disconnect, device number 2 [ 101.930845][ T23] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.028110][ T6218] input: syz0 as /devices/virtual/input/input5 [ 102.335271][ T6231] autofs4:pid:6231:autofs_fill_super: could not open pipe file descriptor [ 102.573142][ T23] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 102.609726][ T23] usb 2-1: USB disconnect, device number 3 [ 102.916411][ T6246] loop2: detected capacity change from 0 to 4096 [ 103.151468][ T6246] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.216340][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.266953][ T6246] EXT4-fs (loop2): shut down requested (1) [ 103.370696][ T5887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.527938][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.718519][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 104.740653][ T23] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 104.758220][ T23] usb 3-1: config 0 has no interface number 0 [ 104.765644][ T23] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.778596][ T23] usb 3-1: config 0 interface 85 has no altsetting 0 [ 104.790498][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 104.806561][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.815800][ T23] usb 3-1: Product: syz [ 104.827828][ T23] usb 3-1: Manufacturer: syz [ 104.832835][ T23] usb 3-1: SerialNumber: syz [ 104.863144][ T23] usb 3-1: config 0 descriptor?? [ 104.868541][ T5870] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 104.905258][ T6299] loop0: detected capacity change from 0 to 32768 [ 104.941346][ T6299] (syz.0.147,6299,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.966940][ T6299] (syz.0.147,6299,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.093132][ T6299] JBD2: Ignoring recovery information on journal [ 105.100434][ T5870] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 105.109970][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.148581][ T5870] usb 4-1: config 0 descriptor?? [ 105.170917][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 105.216106][ T6299] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.383572][ T5870] gp8psk: usb in 128 operation failed. [ 105.494455][ T23] appletouch 3-1:0.85: Geyser mode initialized. [ 105.508965][ T23] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 105.587336][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 105.604377][ T5870] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 105.705916][ T27] usb 3-1: USB disconnect, device number 3 [ 105.706062][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 105.806718][ T5870] gp8psk: usb in 149 operation failed. [ 105.813890][ T27] appletouch 3-1:0.85: input: appletouch disconnected [ 105.835299][ T5870] gp8psk: failed to get FPGA version [ 105.862118][ T5870] gp8psk: usb in 138 operation failed. [ 105.867648][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 105.930736][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 105.946891][ T5870] usb 4-1: USB disconnect, device number 2 [ 107.186086][ T6371] loop1: detected capacity change from 0 to 256 [ 107.904391][ T6394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.912207][ T6394] IPv6: NLM_F_CREATE should be set when creating new route [ 107.919578][ T6394] IPv6: NLM_F_CREATE should be set when creating new route [ 107.990233][ T6394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.008355][ T6394] Zero length message leads to an empty skb [ 108.621771][ T6419] loop0: detected capacity change from 0 to 2048 [ 108.673203][ T6422] loop3: detected capacity change from 0 to 128 [ 108.768712][ T6426] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.867439][ T28] audit: type=1800 audit(1789541107.003:30): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.195" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 108.976225][ T28] audit: type=1800 audit(1789541107.023:31): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.195" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 108.997334][ T6428] loop2: detected capacity change from 0 to 256 [ 109.043406][ T6431] loop3: detected capacity change from 0 to 16 [ 109.058763][ T6431] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 109.077678][ T6428] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 109.104294][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3 [ 109.141948][ T6426] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 109.156719][ T5767] udevd[5767]: incorrect cramfs checksum on /dev/loop3 [ 109.196968][ T6426] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 109.199669][ T5767] udevd[5767]: incorrect cramfs checksum on /dev/loop3 [ 109.257934][ T6426] Remounting filesystem read-only [ 109.264507][ T11] NILFS (loop0): discard dirty page: offset=0, ino=15 [ 109.278072][ T11] NILFS (loop0): discard dirty block: blocknr=22, size=1024 [ 109.293943][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.312524][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.331757][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.368581][ T11] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 109.397978][ T11] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 109.405347][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.444944][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.477268][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.498195][ T6435] program syz.2.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.516027][ T5776] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 109.555911][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 109.568824][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.583904][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.601543][ T6437] Bluetooth: MGMT ver 1.22 [ 109.617529][ T5776] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 109.635365][ T5776] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 109.664573][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 109.686194][ T5776] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 109.704578][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.723889][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.741957][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.751781][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 109.759341][ T5776] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 109.768507][ T5776] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 109.776088][ T5776] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 109.784104][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.808280][ T5776] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 109.825774][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.836390][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.846235][ T5776] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 109.855752][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.141536][ T6482] loop2: detected capacity change from 0 to 128 [ 111.243937][ T6482] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.341612][ T6482] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.545995][ T6490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.228'. [ 111.723526][ T5887] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.732855][ T6479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.887716][ T6497] loop2: detected capacity change from 0 to 1024 [ 111.946658][ T6497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.166998][ T5887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.085123][ T6536] loop3: detected capacity change from 0 to 8192 [ 113.125288][ T6536] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.181842][ T6536] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 113.255300][ T6536] REISERFS (device loop3): using ordered data mode [ 113.297911][ T6536] reiserfs: using flush barriers [ 113.318634][ T6536] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.359563][ T6536] REISERFS (device loop3): checking transaction log (loop3) [ 113.408408][ T6536] REISERFS (device loop3): Using r5 hash to sort names [ 113.416033][ T6536] REISERFS (device loop3): using 3.5.x disk format [ 113.440128][ T6536] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 113.730317][ T6559] batadv0: entered promiscuous mode [ 113.788697][ T6559] bond0: entered promiscuous mode [ 113.808133][ T6559] bond_slave_0: entered promiscuous mode [ 113.821125][ T6559] bond_slave_1: entered promiscuous mode [ 113.859663][ T6559] hsr1: entered allmulticast mode [ 113.877822][ T6559] batadv0: entered allmulticast mode [ 113.883189][ T6559] bond0: entered allmulticast mode [ 113.908930][ T6559] bond_slave_0: entered allmulticast mode [ 113.925146][ T6559] bond_slave_1: entered allmulticast mode [ 113.943623][ T6559] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 114.011062][ T6559] batadv0: left promiscuous mode [ 114.059808][ T6559] bond0: left promiscuous mode [ 114.069592][ T6559] bond_slave_0: left promiscuous mode [ 114.098174][ T6559] bond_slave_1: left promiscuous mode [ 114.190327][ T6573] loop0: detected capacity change from 0 to 256 [ 114.196965][ T6571] loop2: detected capacity change from 0 to 512 [ 114.563364][ T51] block nbd0: Receive control failed (result -32) [ 114.831674][ T6588] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.841354][ T6588] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.850260][ T6588] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.859073][ T6588] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.084490][ T6596] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 115.148052][ T5816] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 115.350113][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.377633][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.397236][ T6607] binder: 6605:6607 ioctl c018620c 200000000240 returned -1 [ 115.410575][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.446762][ T5816] usb 4-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 115.474206][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.509950][ T5816] usb 4-1: config 0 descriptor?? [ 115.956702][ T5816] hid-generic 0003:093A:8002.0002: collection stack underflow [ 116.003944][ T5816] hid-generic 0003:093A:8002.0002: item 0 4 0 12 parsing failed [ 116.033196][ T5816] hid-generic: probe of 0003:093A:8002.0002 failed with error -22 [ 116.160893][ T5816] usb 4-1: USB disconnect, device number 3 [ 116.191173][ T6627] i2c i2c-0: new_device: Missing parameters [ 116.439619][ T6616] loop2: detected capacity change from 0 to 32768 [ 116.474075][ T6616] (syz.2.285,6616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.520709][ T6616] (syz.2.285,6616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.586984][ T6616] JBD2: Ignoring recovery information on journal [ 116.661627][ T6616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.903232][ T5887] ocfs2: Unmounting device (7,2) on (node local) [ 117.326588][ T6657] loop0: detected capacity change from 0 to 1024 [ 117.549141][ T5870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.700565][ T6648] loop1: detected capacity change from 0 to 32768 [ 117.755902][ T5870] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 117.774998][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.783843][ T5870] usb 4-1: Product: syz [ 117.794769][ T5870] usb 4-1: Manufacturer: syz [ 117.799159][ T6648] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 117.815244][ T5870] usb 4-1: SerialNumber: syz [ 117.854774][ T5870] usb 4-1: config 0 descriptor?? [ 117.913849][ T6648] XFS (loop1): Ending clean mount [ 117.958265][ T6675] program syz.0.306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.991638][ T28] audit: type=1800 audit(1789541116.133:32): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.296" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 118.109829][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.694011][ T5870] usb 4-1: Firmware version (0.0) predates our first public release. [ 118.714055][ T5870] usb 4-1: Please update to version 0.2 or newer [ 118.848429][ T5870] usb 4-1: USB disconnect, device number 4 [ 118.861622][ T6697] loop0: detected capacity change from 0 to 512 [ 118.910890][ T6697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.944438][ T6697] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.951563][ T6699] loop1: detected capacity change from 0 to 1024 [ 119.023071][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.096785][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.138582][ T6699] EXT4-fs warning (device loop1): ext4_rmdir:3245: inode #11: comm syz.1.315: empty directory 'file0' has too many links (111) [ 119.229949][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.498739][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 119.751131][ T6712] loop3: detected capacity change from 0 to 256 [ 119.831870][ T6712] FAT-fs (loop3): Directory bread(block 64) failed [ 119.864732][ T6712] FAT-fs (loop3): Directory bread(block 65) failed [ 119.889875][ T6712] FAT-fs (loop3): Directory bread(block 66) failed [ 119.927145][ T6712] FAT-fs (loop3): Directory bread(block 67) failed [ 119.959675][ T6712] FAT-fs (loop3): Directory bread(block 68) failed [ 119.966288][ T6712] FAT-fs (loop3): Directory bread(block 69) failed [ 119.995977][ T6712] FAT-fs (loop3): Directory bread(block 70) failed [ 120.021684][ T6712] FAT-fs (loop3): Directory bread(block 71) failed [ 120.042139][ T6712] FAT-fs (loop3): Directory bread(block 72) failed [ 120.067995][ T6712] FAT-fs (loop3): Directory bread(block 73) failed [ 120.217786][ C0] sched: RT throttling activated [ 120.531667][ T6706] loop0: detected capacity change from 0 to 131072 [ 120.544364][ T6706] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 120.552711][ T6706] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 120.561023][ T6706] F2FS-fs (loop0): Test dummy encryption mode enabled [ 120.573322][ T6706] F2FS-fs (loop0): invalid crc value [ 120.596008][ T6706] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.639642][ T6706] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 120.673683][ T6725] ip_tables: iptables: counters copy to user failed while replacing table [ 120.673792][ T6706] F2FS-fs (loop0): Start checkpoint disabled! [ 120.721973][ T6706] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 120.729722][ T6706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 121.055452][ T1096] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 121.495574][ T6720] loop1: detected capacity change from 0 to 32768 [ 121.554671][ T6720] [ 121.554671][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.554671][ T6720] [ 121.632914][ T28] audit: type=1800 audit(1789541119.773:33): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 121.657257][ T6720] [ 121.657257][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.657257][ T6720] [ 121.686587][ T6720] [ 121.686587][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.686587][ T6720] [ 121.738717][ T6720] [ 121.738717][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.738717][ T6720] [ 121.790158][ T6720] [ 121.790158][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.790158][ T6720] [ 121.834306][ T6720] JFS: metapage_get_blocks failed [ 121.856757][ T6720] [ 121.856757][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.856757][ T6720] [ 121.884662][ T112] [ 121.884662][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.884662][ T112] [ 121.905759][ T28] audit: type=1800 audit(1789541120.043:34): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 121.948454][ T6746] ERROR: (device loop1): diWrite: ixpxd invalid [ 121.948454][ T6746] [ 122.037830][ T6746] ERROR: (device loop1): remounting filesystem as read-only [ 122.045224][ T6746] ERROR: (device loop1): txCommit: [ 122.045224][ T6746] [ 122.093909][ T6746] ERROR: (device loop1): diFree: invalid inoext [ 122.093909][ T6746] [ 122.168344][ T6752] bonding: no command found in bonding_masters - use +ifname or -ifname [ 123.562324][ T6793] loop3: detected capacity change from 0 to 1024 [ 123.725917][ T6798] netlink: 96 bytes leftover after parsing attributes in process `syz.0.358'. [ 123.728156][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.757983][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 123.807302][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.358'. [ 123.874664][ T6800] loop1: detected capacity change from 0 to 64 [ 123.959318][ T6802] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 123.976832][ T6802] bond0: option slaves: unable to set because the bond device is up [ 123.978164][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 124.025802][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.064218][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.080713][ T6800] syz.1.359: attempt to access beyond end of device [ 124.080713][ T6800] loop1: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 124.107854][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 124.114438][ T6800] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 124.116943][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.136253][ T9] usb 3-1: config 0 descriptor?? [ 124.159597][ T6800] syz.1.359: attempt to access beyond end of device [ 124.159597][ T6800] loop1: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 124.219268][ T6807] program syz.3.362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.245004][ T6800] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 124.277945][ T6800] syz.1.359: attempt to access beyond end of device [ 124.277945][ T6800] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 124.313535][ T6809] loop0: detected capacity change from 0 to 512 [ 124.318010][ T6800] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 124.347999][ T6800] syz.1.359: attempt to access beyond end of device [ 124.347999][ T6800] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 124.403157][ T6809] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 124.421962][ T6800] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 124.447934][ T6800] syz.1.359: attempt to access beyond end of device [ 124.447934][ T6800] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 124.452306][ T6809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 124.470964][ T6800] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 124.497039][ T6800] syz.1.359: attempt to access beyond end of device [ 124.497039][ T6800] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 124.544014][ T6809] System zones: 0-1, 15-15, 18-18, 34-34 [ 124.552939][ T6800] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 124.585176][ T6809] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.605759][ T6800] syz.1.359: attempt to access beyond end of device [ 124.605759][ T6800] loop1: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 124.623288][ T9] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 124.635029][ T6809] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 124.638044][ T9] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 124.653815][ T6809] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 124.667935][ T9] koneplus 0003:1E7D:2D51.0003: item fetching failed at offset 2/5 [ 124.675969][ T6809] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 124.677162][ T9] koneplus 0003:1E7D:2D51.0003: parse failed [ 124.684193][ T6809] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.363: bad orphan inode 16 [ 124.689285][ T6800] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 124.738011][ T9] koneplus: probe of 0003:1E7D:2D51.0003 failed with error -22 [ 124.751761][ T6809] ext4_test_bit(bit=15, block=18) = 1 [ 124.779403][ T6809] is_bad_inode(inode)=0 [ 124.787938][ T6809] NEXT_ORPHAN(inode)=0 [ 124.792119][ T6809] max_ino=32 [ 124.795657][ T6809] i_nlink=2 [ 124.809322][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.886712][ T9] usb 3-1: USB disconnect, device number 4 [ 124.970944][ T6809] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 125.000153][ T6809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 125.183237][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.930900][ T6846] loop3: detected capacity change from 0 to 8 [ 125.996702][ T6846] squashfs image failed sanity check [ 126.621955][ T6834] loop0: detected capacity change from 0 to 32768 [ 126.653583][ T6834] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.374 (6834) [ 126.722409][ T6834] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 126.744650][ T6834] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.779229][ T6834] BTRFS info (device loop0): using free space tree [ 126.909861][ T6834] BTRFS info (device loop0): enabling ssd optimizations [ 126.928317][ T6880] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 126.928317][ T6880] The task syz.1.388 (6880) triggered the difference, watch for misbehavior. [ 126.930152][ T6834] BTRFS info (device loop0): auto enabling async discard [ 127.355853][ T5776] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 128.057559][ T6901] batman_adv: batadv0: Adding interface: macvtap1 [ 128.070948][ T6901] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.107551][ T6901] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 129.254165][ T28] audit: type=1326 audit(1789541127.393:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.338195][ T28] audit: type=1326 audit(1789541127.393:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.418868][ T28] audit: type=1326 audit(1789541127.393:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.491908][ T28] audit: type=1326 audit(1789541127.393:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.566282][ T28] audit: type=1326 audit(1789541127.393:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.683013][ T28] audit: type=1326 audit(1789541127.393:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.738496][ T28] audit: type=1326 audit(1789541127.393:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.818163][ T28] audit: type=1326 audit(1789541127.393:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.892238][ T28] audit: type=1326 audit(1789541127.393:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1dccb9e159 code=0x7ffc0000 [ 129.987351][ T6953] loop1: detected capacity change from 0 to 512 [ 130.093260][ T6953] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.421: bg 0: block 5: invalid block bitmap [ 130.117304][ T6953] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 130.145040][ T6953] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.421: invalid indirect mapped block 3 (level 2) [ 130.192417][ T6953] EXT4-fs (loop1): 1 orphan inode deleted [ 130.198505][ T6953] EXT4-fs (loop1): 1 truncate cleaned up [ 130.205610][ T6953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.315057][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.356756][ T6962] loop0: detected capacity change from 0 to 4096 [ 130.389194][ T6962] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 130.480622][ T6962] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 130.503536][ T6962] ntfs3: loop0: Failed to load $Extend (-22). [ 130.516641][ T6962] ntfs3: loop0: Failed to initialize $Extend. [ 130.528731][ T6964] loop1: detected capacity change from 0 to 4096 [ 130.543156][ T6964] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 130.941006][ T6966] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 130.959315][ T6966] ucsi_ccg: probe of 0-0008 failed with error -110 [ 130.977945][ T6966] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 131.298470][ T6979] team_slave_0: entered promiscuous mode [ 131.304810][ T6979] team_slave_1: entered promiscuous mode [ 131.320512][ T6979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.389675][ T6981] loop2: detected capacity change from 0 to 2048 [ 131.461370][ T6981] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 131.502385][ T6981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.709256][ T5887] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 131.750367][ T5887] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 132.211734][ T3475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.253555][ T6995] loop0: detected capacity change from 0 to 128 [ 132.355233][ T6995] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.435636][ T6995] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.562642][ T3475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.642665][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.761938][ T3475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.935406][ T3475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.220460][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227440][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.857913][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.027098][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.055576][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.069805][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.111021][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.122585][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.144129][ T7024] loop3: detected capacity change from 0 to 16 [ 134.151999][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.161947][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.169501][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.196629][ T7024] erofs: (device loop3): mounted with root inode @ nid 36. [ 134.246144][ T7026] loop1: detected capacity change from 0 to 512 [ 134.281441][ T9] usb 1-1: config 0 descriptor?? [ 134.316038][ T9] cp210x 1-1:0.0: cp210x converter detected [ 134.396373][ T7026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 134.464405][ T7026] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.607809][ T7026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.648012][ T7026] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 134.678636][ T7026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.716467][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 134.733348][ T7026] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000d40000. [ 134.764271][ T7026] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 134.868250][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 134.962215][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 134.996946][ T9] usb 1-1: USB disconnect, device number 3 [ 135.088836][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.177098][ T9] cp210x 1-1:0.0: device disconnected [ 135.770470][ T7048] program syz.0.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.876958][ T7037] loop3: detected capacity change from 0 to 32768 [ 135.968287][ T7037] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.248142][ T51] Bluetooth: hci3: command tx timeout [ 136.345348][ T7037] XFS (loop3): Ending clean mount [ 136.631777][ T5779] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.829389][ T3475] hsr_slave_0: left promiscuous mode [ 136.885998][ T3475] hsr_slave_1: left promiscuous mode [ 136.915028][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.940312][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.975123][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.999547][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.049607][ T3475] bridge_slave_1: left allmulticast mode [ 137.055327][ T3475] bridge_slave_1: left promiscuous mode [ 137.109866][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.170222][ T3475] bridge_slave_0: left allmulticast mode [ 137.175935][ T3475] bridge_slave_0: left promiscuous mode [ 137.200324][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.336608][ T3475] veth1_macvtap: left promiscuous mode [ 137.352477][ T3475] veth0_macvtap: left promiscuous mode [ 137.373167][ T3475] veth1_vlan: left promiscuous mode [ 137.381381][ T3475] veth0_vlan: left promiscuous mode [ 137.387271][ T3475] net_ratelimit: 39 callbacks suppressed [ 138.225387][ T27] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 138.261064][ T27] wiimote 0005:057E:0306.0004: New device registered [ 138.328164][ T51] Bluetooth: hci3: command tx timeout [ 138.415932][ T7105] loop3: detected capacity change from 0 to 1024 [ 138.447883][ T5815] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.692575][ T5815] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 138.724878][ T5815] usb 2-1: config 1 has no interface number 0 [ 138.762533][ T5815] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 138.778756][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.799699][ T5815] usb 2-1: Product: syz [ 138.803938][ T5815] usb 2-1: Manufacturer: syz [ 138.818753][ T5815] usb 2-1: SerialNumber: syz [ 139.042419][ T7102] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 139.061210][ T7100] wiimote 0005:057E:0306.0004: Device removed [ 139.069857][ T5815] usb 2-1: cannot find UAC_HEADER [ 139.214722][ T7102] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input9 [ 139.237222][ T7114] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 139.351913][ T7102] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input10 [ 139.392596][ T5815] snd-usb-audio: probe of 2-1:1.3 failed with error -22 [ 139.449853][ T5815] usb 2-1: USB disconnect, device number 4 [ 139.473450][ T7102] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input8 [ 139.525417][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.842172][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 139.928687][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 140.066332][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.191014][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.415276][ T51] Bluetooth: hci3: command tx timeout [ 140.754387][ T3475] bond0 (unregistering): Released all slaves [ 140.885918][ T7084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.462'. [ 140.944640][ T7021] chnl_net:caif_netlink_parms(): no params data found [ 141.265489][ T7129] »»»»»»: renamed from vlan0 (while UP) [ 141.733974][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.776135][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.793339][ T7021] bridge_slave_0: entered allmulticast mode [ 141.818851][ T7021] bridge_slave_0: entered promiscuous mode [ 141.844602][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.871444][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.892839][ T7021] bridge_slave_1: entered allmulticast mode [ 141.912020][ T7021] bridge_slave_1: entered promiscuous mode [ 142.074083][ T7021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.122502][ T7021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.285168][ T7021] team0: Port device team_slave_0 added [ 142.315625][ T7021] team0: Port device team_slave_1 added [ 142.485331][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.492597][ T51] Bluetooth: hci3: command tx timeout [ 142.516555][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.546347][ T7021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.560208][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.567201][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.593828][ T7021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.648239][ C0] net_ratelimit: 33 callbacks suppressed [ 142.926965][ T7021] hsr_slave_0: entered promiscuous mode [ 142.965586][ T7021] hsr_slave_1: entered promiscuous mode [ 143.182784][ T7173] loop0: detected capacity change from 0 to 1024 [ 143.204547][ T7173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.280790][ T7173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.373333][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.658363][ T7183] loop0: detected capacity change from 0 to 2048 [ 143.767370][ T7187] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.899254][ T28] audit: type=1800 audit(1789541142.033:44): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.492" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 143.941878][ T7191] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 144.304770][ T7021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.409290][ T7021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.433682][ T7197] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 144.453295][ T7021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.477265][ T7021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.820604][ T7021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.903030][ T7021] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.963703][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.970998][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.083296][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.090630][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.997408][ T7021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.548846][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.733045][ T7021] veth0_vlan: entered promiscuous mode [ 146.742341][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.767335][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.778069][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.787685][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 146.808988][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 146.826411][ T7021] veth1_vlan: entered promiscuous mode [ 146.826778][ T9] usb 2-1: Product: syz [ 146.851966][ T9] usb 2-1: Manufacturer: syz [ 146.920515][ T7021] veth0_macvtap: entered promiscuous mode [ 146.944718][ T7021] veth1_macvtap: entered promiscuous mode [ 146.978006][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 147.001563][ T788] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 147.032874][ T788] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.045478][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.064439][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.083370][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.093968][ T788] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 147.105049][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.116810][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.142121][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.159428][ T788] usb 4-1: config 0 descriptor?? [ 147.166071][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.193580][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.222101][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.234043][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 147.282041][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.305848][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:046D:C299.0005/input/input12 [ 147.316066][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.335820][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.377929][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.400449][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.427827][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.467427][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.501311][ T9] logitech 0003:046D:C299.0005: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.1-1/input0 [ 147.516108][ T7021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.542421][ T7021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.561382][ T9] logitech 0003:046D:C299.0005: Force feedback support for Logitech Gaming Wheels [ 147.572419][ T7021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.603841][ T7021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.635416][ T788] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 147.684767][ T788] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 147.706458][ T788] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 147.716596][ T7021] net_ratelimit: 29 callbacks suppressed [ 147.726318][ T788] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 147.772502][ T788] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 147.831775][ T788] corsair-psu 0003:1B1C:1C09.0006: hidraw1: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 147.878820][ T5814] usb 2-1: USB disconnect, device number 5 [ 147.954180][ T7275] fido_id[7275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 148.008864][ T788] corsair-psu 0003:1B1C:1C09.0006: unable to initialize device (-90) [ 148.085986][ T788] corsair-psu: probe of 0003:1B1C:1C09.0006 failed with error -90 [ 148.174656][ T788] usb 4-1: USB disconnect, device number 5 [ 148.289696][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.297614][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.479190][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.525768][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.438762][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 149.841925][ T7323] loop1: detected capacity change from 0 to 2048 [ 149.949785][ T7323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.032103][ T7323] CacheFiles: Failed to register: -95 [ 152.209804][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 152.600309][ T7376] loop1: detected capacity change from 0 to 32768 [ 152.636867][ T7372] loop3: detected capacity change from 0 to 40427 [ 152.669201][ T7376] JBD2: Ignoring recovery information on journal [ 152.729587][ T7372] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 152.751034][ T7376] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 152.784469][ T7372] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 152.807844][ C1] net_ratelimit: 70 callbacks suppressed [ 152.840483][ T7372] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 152.890597][ T7372] F2FS-fs (loop3): invalid crc value [ 152.929604][ T7372] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.118422][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 153.208944][ T7372] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 153.216035][ T7372] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.788457][ T7422] netlink: 'syz.4.556': attribute type 11 has an invalid length. [ 153.796901][ T7422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.556'. [ 153.844154][ T5779] syz-executor: attempt to access beyond end of device [ 153.844154][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.892090][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.188211][ T7432] kAFS: bad VL server IP address [ 154.764911][ T7445] loop4: detected capacity change from 0 to 2048 [ 154.806686][ T7445] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.840891][ T7445] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 154.865631][ T7445] UDF-fs: Scanning with blocksize 512 failed [ 154.904824][ T7445] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.949264][ T7445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.847864][ C1] net_ratelimit: 46 callbacks suppressed [ 163.047902][ C1] net_ratelimit: 43 callbacks suppressed [ 168.247856][ C1] net_ratelimit: 43 callbacks suppressed [ 173.447877][ C1] net_ratelimit: 45 callbacks suppressed [ 178.648111][ C1] net_ratelimit: 41 callbacks suppressed [ 183.778119][ T64] net_ratelimit: 40 callbacks suppressed [ 189.047853][ C1] net_ratelimit: 46 callbacks suppressed [ 194.247848][ C1] net_ratelimit: 41 callbacks suppressed [ 194.654708][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.661178][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.447889][ C1] net_ratelimit: 46 callbacks suppressed [ 201.847981][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 201.854367][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 201.860498][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 204.647891][ C1] net_ratelimit: 43 callbacks suppressed [ 209.688013][ C0] net_ratelimit: 47 callbacks suppressed [ 214.967827][ C1] net_ratelimit: 39 callbacks suppressed [ 220.087915][ C1] net_ratelimit: 44 callbacks suppressed [ 225.127849][ C0] net_ratelimit: 57 callbacks suppressed [ 230.167897][ C1] net_ratelimit: 52 callbacks suppressed [ 235.207842][ C0] net_ratelimit: 45 callbacks suppressed [ 240.247842][ C1] net_ratelimit: 39 callbacks suppressed [ 245.447808][ C1] net_ratelimit: 47 callbacks suppressed [ 250.647823][ C1] net_ratelimit: 51 callbacks suppressed [ 255.847878][ C1] net_ratelimit: 45 callbacks suppressed [ 256.090738][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.097563][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.047857][ C1] net_ratelimit: 39 callbacks suppressed [ 266.247822][ C1] net_ratelimit: 46 callbacks suppressed [ 271.448854][ C1] net_ratelimit: 33 callbacks suppressed [ 276.647848][ C1] net_ratelimit: 32 callbacks suppressed [ 278.652464][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 281.690295][ T3475] net_ratelimit: 27 callbacks suppressed [ 286.738038][ T12] net_ratelimit: 28 callbacks suppressed [ 291.929730][ C1] net_ratelimit: 37 callbacks suppressed [ 297.048213][ T3475] net_ratelimit: 38 callbacks suppressed [ 300.247939][ T29] INFO: task syz-executor:5764 blocked for more than 143 seconds. [ 300.255835][ T29] Not tainted syzkaller #0 [ 300.260864][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.269756][ T29] task:syz-executor state:D stack:22008 pid:5764 ppid:5763 flags:0x00004002 [ 300.279077][ T29] Call Trace: [ 300.282384][ T29] [ 300.285321][ T29] __schedule+0x15ae/0x4660 [ 300.290081][ T29] ? mark_lock+0x94/0x320 [ 300.294956][ T29] ? asan.module_dtor+0x20/0x20 [ 300.300001][ C0] virtqueue callback for ffff888023e73600 (ffffffff85c745d0) [ 300.300112][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 300.307414][ C0] No more buffers in queue [ 300.312903][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 300.317456][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 300.323653][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 300.329278][ C0] No more buffers in queue [ 300.339703][ T29] schedule+0xbd/0x170 [ 300.343828][ T29] io_schedule+0x80/0xd0 [ 300.348144][ T29] bit_wait_io+0x11/0xd0 [ 300.352426][ T29] __wait_on_bit+0x9f/0x2c0 [ 300.356928][ T29] ? bit_wait+0xd0/0xd0 [ 300.361190][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 300.366762][ T29] ? bit_wait+0xd0/0xd0 [ 300.370980][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 300.375772][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.380874][ T29] ? bit_waitqueue+0x30/0x30 [ 300.385495][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 300.387939][ C0] No more buffers in queue [ 300.391077][ T29] do_get_write_access+0x5c9/0xe00 [ 300.395697][ C0] eth0: xmit ffff8880767de140 42:01:0a:80:00:01 [ 300.400861][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 300.407168][ C0] Added buffer head 9 to ffff888023e73800 [ 300.413337][ C0] virtqueue callback for ffff888023e73800 (ffffffff85c746c0) [ 300.413346][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.419468][ C0] Sent skb ffff8880767de140 [ 300.426697][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.432848][ C0] No more buffers in queue [ 300.451005][ T29] ? __might_sleep+0xe0/0xe0 [ 300.455689][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 300.461408][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 300.467003][ T29] ext4_dirty_inode+0xcb/0x110 [ 300.471987][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 300.477920][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 300.483046][ T29] file_update_time+0x187/0x1a0 [ 300.488088][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 300.493170][ T29] ? do_wp_page+0x4ce/0x34d0 [ 300.497884][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 300.504151][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 300.509446][ T29] do_page_mkwrite+0x153/0x3f0 [ 300.514247][ T29] do_wp_page+0xd4d/0x34d0 [ 300.518753][ T29] ? folio_put+0xd0/0xd0 [ 300.523023][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.528273][ T29] ? __rwlock_init+0x150/0x150 [ 300.533801][ T29] handle_mm_fault+0x1306/0x4a50 [ 300.538853][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 300.543854][ T29] ? numa_migrate_prep+0x350/0x350 [ 300.549134][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 300.554565][ T29] do_user_addr_fault+0x736/0x12d0 [ 300.559853][ T29] exc_page_fault+0x64/0x100 [ 300.564491][ T29] ? clear_bhb_loop+0x40/0x90 [ 300.569413][ T29] asm_exc_page_fault+0x26/0x30 [ 300.574550][ T29] RIP: 0033:0x7f9d7347c6e2 [ 300.579131][ T29] RSP: 002b:00007ffcb2f38160 EFLAGS: 00010202 [ 300.585277][ T29] RAX: 00007f9d7135c000 RBX: 00005555689a8da0 RCX: 0000000000000001 [ 300.593417][ T29] RDX: 0000000000000349 RSI: 00005555689a7b18 RDI: 0000000000000002 [ 300.601634][ T29] RBP: 00007ffcb2f38660 R08: 00005555689a7b48 R09: 0000000000000092 [ 300.609725][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcb2f384a0 [ 300.617873][ T29] R13: 00007ffcb2f38290 R14: 585858582e7a7973 R15: 00007ffcb2f381e0 [ 300.625897][ T29] [ 300.629024][ T29] INFO: task syz.3.557:7451 blocked for more than 143 seconds. [ 300.636950][ T29] Not tainted syzkaller #0 [ 300.642056][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.651154][ T29] task:syz.3.557 state:D stack:27496 pid:7451 ppid:5779 flags:0x00004004 [ 300.660482][ T29] Call Trace: [ 300.663786][ T29] [ 300.666723][ T29] __schedule+0x15ae/0x4660 [ 300.671320][ T29] ? mark_lock+0x94/0x320 [ 300.675694][ T29] ? asan.module_dtor+0x20/0x20 [ 300.680711][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 300.685772][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 300.691744][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 300.696994][ T29] schedule+0xbd/0x170 [ 300.701207][ T29] io_schedule+0x80/0xd0 [ 300.705502][ T29] bit_wait_io+0x11/0xd0 [ 300.709829][ T29] __wait_on_bit+0x9f/0x2c0 [ 300.714377][ T29] ? bit_wait+0xd0/0xd0 [ 300.718707][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 300.724194][ T29] ? bit_wait+0xd0/0xd0 [ 300.728587][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 300.733381][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.738153][ C0] nf_nat: Already setup manip DST for ct ffff88807ac1b380 (status bits 0x188) [ 300.738958][ T29] ? bit_waitqueue+0x30/0x30 [ 300.747594][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 300.752212][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 300.761124][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 300.761823][ C0] nf_nat: Already setup manip DST for ct ffff88807ac1b380 (status bits 0x188) [ 300.766426][ T29] do_get_write_access+0x5c9/0xe00 [ 300.775607][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 300.798768][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 300.804789][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.811071][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.817265][ T29] ? __might_sleep+0xe0/0xe0 [ 300.822125][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 300.828038][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 300.833565][ T29] ext4_dirty_inode+0xcb/0x110 [ 300.838379][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 300.844773][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 300.849927][ T29] file_update_time+0x187/0x1a0 [ 300.854806][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 300.860175][ T29] ? filemap_fault+0x103c/0x1540 [ 300.865169][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 300.871281][ T29] ? pte_alloc_one+0x3b6/0x540 [ 300.876133][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 300.882475][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 300.887578][ T29] do_page_mkwrite+0x153/0x3f0 [ 300.892789][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 300.897735][ C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 300.909436][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 300.914397][ T29] ? numa_migrate_prep+0x350/0x350 [ 300.918984][ C0] virtqueue callback for ffff888141643c00 (ffffffff84a02460) [ 300.919613][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 300.927204][ C0] virtqueue interrupt with no work for ffff888141643a00 [ 300.932670][ T29] do_user_addr_fault+0x736/0x12d0 [ 300.939536][ C0] virtqueue interrupt with no work for ffff888141643800 [ 300.939875][ T9] Added buffer head 0 to ffff888141643c00 [ 300.952955][ T29] exc_page_fault+0x64/0x100 [ 300.963739][ T29] ? clear_bhb_loop+0x40/0x90 [ 300.968787][ T29] asm_exc_page_fault+0x26/0x30 [ 300.973773][ T29] RIP: 0033:0x7f03e526baa3 [ 300.979938][ T29] RSP: 002b:00007ffd10a8ac90 EFLAGS: 00010246 [ 300.986140][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2db64000 [ 300.996188][ T29] RDX: 0000001b2db24000 RSI: 0000000000400000 RDI: 00007f03e55e0708 [ 301.004379][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.012604][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 301.021136][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd10a8af20 [ 301.029182][ T29] [ 301.032226][ T29] INFO: task syz.1.568:7452 blocked for more than 144 seconds. [ 301.039963][ T29] Not tainted syzkaller #0 [ 301.045719][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.054651][ T29] task:syz.1.568 state:D stack:27560 pid:7452 ppid:5782 flags:0x00004004 [ 301.064351][ T29] Call Trace: [ 301.067870][ T29] [ 301.070861][ T29] __schedule+0x15ae/0x4660 [ 301.075530][ T29] ? mark_lock+0x94/0x320 [ 301.080000][ T29] ? asan.module_dtor+0x20/0x20 [ 301.084885][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 301.090142][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 301.096062][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 301.101350][ T29] schedule+0xbd/0x170 [ 301.105457][ T29] io_schedule+0x80/0xd0 [ 301.109789][ T29] bit_wait_io+0x11/0xd0 [ 301.114070][ T29] __wait_on_bit+0x9f/0x2c0 [ 301.118653][ T29] ? bit_wait+0xd0/0xd0 [ 301.122834][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 301.129370][ T29] ? bit_wait+0xd0/0xd0 [ 301.133577][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 301.138410][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 301.143479][ T29] ? bit_waitqueue+0x30/0x30 [ 301.148742][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 301.154073][ T29] do_get_write_access+0x5c9/0xe00 [ 301.159296][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 301.165329][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 301.171574][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 301.177812][ T29] ? __might_sleep+0xe0/0xe0 [ 301.182456][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 301.188269][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 301.193767][ T29] ext4_dirty_inode+0xcb/0x110 [ 301.198745][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 301.204607][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 301.209969][ T29] file_update_time+0x187/0x1a0 [ 301.214976][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 301.220151][ T29] ? filemap_fault+0x103c/0x1540 [ 301.225134][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 301.231035][ T29] ? pte_alloc_one+0x3b6/0x540 [ 301.235830][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 301.242276][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 301.247430][ T29] do_page_mkwrite+0x153/0x3f0 [ 301.252824][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 301.257977][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 301.263039][ T29] ? numa_migrate_prep+0x350/0x350 [ 301.268294][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 301.273634][ T29] do_user_addr_fault+0x736/0x12d0 [ 301.278882][ T29] exc_page_fault+0x64/0x100 [ 301.283509][ T29] ? clear_bhb_loop+0x40/0x90 [ 301.288274][ T29] asm_exc_page_fault+0x26/0x30 [ 301.293186][ T29] RIP: 0033:0x7fd298e6baa3 [ 301.297611][ T29] RSP: 002b:00007ffe9194c1a0 EFLAGS: 00010246 [ 301.303893][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d964000 [ 301.312222][ T29] RDX: 0000001b2d924000 RSI: 0000000000400000 RDI: 00007fd2991e0708 [ 301.320302][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.328510][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 301.337010][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe9194c430 [ 301.345111][ T29] [ 301.348301][ T29] INFO: task syz.0.567:7453 blocked for more than 144 seconds. [ 301.356203][ T29] Not tainted syzkaller #0 [ 301.361767][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.370586][ T29] task:syz.0.567 state:D stack:27560 pid:7453 ppid:5776 flags:0x00004004 [ 301.379893][ T29] Call Trace: [ 301.383214][ T29] [ 301.386157][ T29] __schedule+0x15ae/0x4660 [ 301.390863][ T29] ? mark_lock+0x94/0x320 [ 301.395317][ T29] ? asan.module_dtor+0x20/0x20 [ 301.400255][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 301.405314][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 301.411312][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 301.416563][ T29] schedule+0xbd/0x170 [ 301.420854][ T29] io_schedule+0x80/0xd0 [ 301.425138][ T29] bit_wait_io+0x11/0xd0 [ 301.429436][ T29] __wait_on_bit+0x9f/0x2c0 [ 301.433996][ T29] ? bit_wait+0xd0/0xd0 [ 301.438240][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 301.443724][ T29] ? bit_wait+0xd0/0xd0 [ 301.448059][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 301.452847][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 301.458596][ T29] ? bit_waitqueue+0x30/0x30 [ 301.463228][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 301.468545][ T29] do_get_write_access+0x5c9/0xe00 [ 301.473729][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 301.479805][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 301.486009][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 301.492304][ T29] ? __might_sleep+0xe0/0xe0 [ 301.496957][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 301.502594][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 301.508129][ T29] ext4_dirty_inode+0xcb/0x110 [ 301.512897][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 301.518784][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 301.523866][ T29] file_update_time+0x187/0x1a0 [ 301.528874][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 301.541011][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 301.546071][ T29] ? filemap_fault+0x103c/0x1540 [ 301.551142][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 301.557458][ T29] ? pte_alloc_one+0x3b6/0x540 [ 301.562532][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 301.568891][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 301.573966][ T29] do_page_mkwrite+0x153/0x3f0 [ 301.578861][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 301.583859][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 301.588883][ T29] ? numa_migrate_prep+0x350/0x350 [ 301.594160][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 301.599586][ T29] do_user_addr_fault+0x736/0x12d0 [ 301.604811][ T29] exc_page_fault+0x64/0x100 [ 301.609723][ T29] asm_exc_page_fault+0x26/0x30 [ 301.614632][ T29] RIP: 0033:0x7f48dd66baa3 [ 301.625948][ T29] RSP: 002b:00007ffc986ddc60 EFLAGS: 00010246 [ 301.632267][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d864000 [ 301.640484][ T29] RDX: 0000001b2d824000 RSI: 0000000000400000 RDI: 00007f48dd9e0708 [ 301.648527][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.656604][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 301.665348][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc986ddef0 [ 301.673459][ T29] [ 301.676521][ T29] INFO: task syz.4.569:7455 blocked for more than 144 seconds. [ 301.684177][ T29] Not tainted syzkaller #0 [ 301.689312][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.698181][ T29] task:syz.4.569 state:D stack:27560 pid:7455 ppid:7021 flags:0x00004004 [ 301.707445][ T29] Call Trace: [ 301.710900][ T29] [ 301.713867][ T29] __schedule+0x15ae/0x4660 [ 301.718505][ T29] ? mark_lock+0x94/0x320 [ 301.722868][ T29] ? asan.module_dtor+0x20/0x20 [ 301.727780][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 301.732838][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 301.738900][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 301.744133][ T29] schedule+0xbd/0x170 [ 301.748317][ T29] io_schedule+0x80/0xd0 [ 301.752605][ T29] bit_wait_io+0x11/0xd0 [ 301.756895][ T29] __wait_on_bit+0x9f/0x2c0 [ 301.762436][ T29] ? bit_wait+0xd0/0xd0 [ 301.766642][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 301.772356][ C0] nf_nat: Already setup manip DST for ct ffff88807ac1b380 (status bits 0x188) [ 301.772411][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 301.772495][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 301.772653][ C0] nf_nat: Already setup manip DST for ct ffff88807ac1b380 (status bits 0x188) [ 301.772678][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 301.817959][ T29] ? bit_wait+0xd0/0xd0 [ 301.822173][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 301.826965][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 301.832295][ T29] ? bit_waitqueue+0x30/0x30 [ 301.836968][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 301.842301][ T29] do_get_write_access+0x5c9/0xe00 [ 301.847584][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 301.854195][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 301.860575][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 301.867359][ T29] ? __might_sleep+0xe0/0xe0 [ 301.872189][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 301.877885][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 301.883494][ T29] ext4_dirty_inode+0xcb/0x110 [ 301.888376][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 301.894679][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 301.899895][ T29] file_update_time+0x187/0x1a0 [ 301.904803][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 301.909972][ T29] ? filemap_fault+0x103c/0x1540 [ 301.914986][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 301.920886][ C0] virtqueue callback for ffff888141643c00 (ffffffff84a02460) [ 301.920965][ C0] virtqueue interrupt with no work for ffff888141643a00 [ 301.920978][ C0] virtqueue interrupt with no work for ffff888141643800 [ 301.942626][ T5814] Added buffer head 0 to ffff888141643c00 [ 301.942859][ T29] ? pte_alloc_one+0x3b6/0x540 [ 301.953242][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 301.960735][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 301.965791][ T29] do_page_mkwrite+0x153/0x3f0 [ 301.973694][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 301.978892][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 301.983871][ T29] ? numa_migrate_prep+0x350/0x350 [ 301.989232][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 301.994551][ T29] do_user_addr_fault+0x736/0x12d0 [ 301.999802][ T29] exc_page_fault+0x64/0x100 [ 302.004420][ T29] ? clear_bhb_loop+0x40/0x90 [ 302.009247][ T29] asm_exc_page_fault+0x26/0x30 [ 302.014395][ T29] RIP: 0033:0x7fa237e6baa3 [ 302.019378][ T29] RSP: 002b:00007fffb5ca6790 EFLAGS: 00010246 [ 302.025493][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32464000 [ 302.033556][ T29] RDX: 0000001b32424000 RSI: 0000000000400000 RDI: 00007fa2381e0708 [ 302.041645][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.049735][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 302.057874][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffb5ca6a20 [ 302.065865][ T29] [ 302.069907][ T29] [ 302.069907][ T29] Showing all locks held in the system: [ 302.077908][ T29] 1 lock held by khungtaskd/29: [ 302.082800][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 302.092889][ T29] 4 locks held by kworker/u4:5/668: [ 302.097731][ C1] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 302.098258][ T29] #0: ffff88801d261538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 302.114708][ T3458] net_ratelimit: 30 callbacks suppressed [ 302.114724][ T3458] wireguard: wg0: Sending handshake initiation to peer 7 ([::1]:20002/0%0) [ 302.121692][ T29] #1: ffffc9000398fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 302.129471][ T5870] wireguard: wg1: Invalid MAC of handshake, dropping packet from [::1]:20001/0%0 [ 302.136033][ T29] #2: ffff88814e01a0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 302.170339][ T29] #3: ffff88814e01cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 302.182579][ T29] 2 locks held by getty/5533: [ 302.187309][ T29] #0: ffff88802d2b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 302.197234][ T29] #1: ffffc900032762f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 302.207785][ T29] 3 locks held by syz-executor/5764: [ 302.213183][ T29] #0: ffff88802b3dbaa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 302.223421][ T29] #1: ffff88814e01a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 302.233453][ T29] #2: ffff88814e01e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 302.243492][ T29] 3 locks held by syz.3.557/7451: [ 302.248831][ T29] #0: ffff88801bbf81a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 302.258885][ T29] #1: ffff88814e01a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 302.268810][ T29] #2: ffff88814e01e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 302.279873][ T29] 3 locks held by syz.1.568/7452: [ 302.284925][ T29] #0: ffff88801a6d81a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 302.294966][ T29] #1: ffff88814e01a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 302.304790][ T29] #2: ffff88814e01e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 302.314607][ T29] 3 locks held by syz.0.567/7453: [ 302.319831][ T29] #0: ffff8880318d5720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 302.330003][ T29] #1: ffff88814e01a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 302.340085][ T29] #2: ffff88814e01e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 302.350075][ T29] 3 locks held by syz.4.569/7455: [ 302.355136][ T29] #0: ffff88807d3ebaa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 302.365269][ T29] #1: ffff88814e01a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 302.375166][ T29] #2: ffff88814e01e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 302.385587][ T29] [ 302.388000][ T29] ============================================= [ 302.388000][ T29] [ 302.396447][ T29] NMI backtrace for cpu 1 [ 302.400790][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 302.408000][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.418179][ T29] Call Trace: [ 302.421616][ T29] [ 302.424552][ T29] dump_stack_lvl+0x18c/0x250 [ 302.429337][ T29] ? __wake_up_klogd+0xd9/0x100 [ 302.434236][ T29] ? show_regs_print_info+0x20/0x20 [ 302.439617][ T29] ? load_image+0x420/0x420 [ 302.444241][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 302.449292][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 302.455476][ T29] ? load_image+0x420/0x420 [ 302.460077][ T29] ? wq_watchdog_touch+0xef/0x170 [ 302.465125][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 302.471302][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 302.477305][ T29] watchdog+0xf59/0xfa0 [ 302.481574][ T29] ? watchdog+0x1e1/0xfa0 [ 302.485928][ T29] kthread+0x2fa/0x390 [ 302.490045][ T29] ? hungtask_pm_notify+0x50/0x50 [ 302.495171][ T29] ? kthread_blkcg+0xd0/0xd0 [ 302.499784][ T29] ret_from_fork+0x48/0x80 [ 302.504212][ T29] ? kthread_blkcg+0xd0/0xd0 [ 302.508811][ T29] ret_from_fork_asm+0x11/0x20 [ 302.513600][ T29] [ 302.517467][ T29] Sending NMI from CPU 1 to CPUs 0: [ 302.522946][ C0] NMI backtrace for cpu 0 [ 302.522966][ C0] CPU: 0 PID: 64 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 302.522983][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.522992][ C0] Workqueue: bat_events batadv_nc_worker [ 302.523017][ C0] RIP: 0010:kasan_check_range+0x29/0x290 [ 302.523039][ C0] Code: cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 f9 <49> c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 ff 01 00 00 49 89 ff 49 c1 [ 302.523052][ C0] RSP: 0018:ffffc900015c7788 EFLAGS: 00000012 [ 302.523065][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8168a532 [ 302.523076][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb5d8 [ 302.523095][ C0] RBP: ffffc900015c7a08 R08: ffffffff911eb5e0 R09: ffffffff911eb5d8 [ 302.523106][ C0] R10: dffffc0000000000 R11: fffffbfff223d6bc R12: 0000000000000000 [ 302.523122][ C0] R13: ffff88801fae2930 R14: 00000000000006d1 R15: ffff88801fae2930 [ 302.523134][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 302.523148][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.523159][ C0] CR2: 0000558a06ee1818 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 302.523174][ C0] Call Trace: [ 302.523180][ C0] [ 302.523189][ C0] __lock_acquire+0x952/0x7d80 [ 302.523217][ C0] ? __mod_timer+0x9b0/0xd60 [ 302.523231][ C0] ? verify_lock_unused+0x140/0x140 [ 302.523251][ C0] ? verify_lock_unused+0x140/0x140 [ 302.523274][ C0] lock_acquire+0x19e/0x420 [ 302.523290][ C0] ? batadv_nc_worker+0xd2/0x600 [ 302.523312][ C0] ? batadv_nc_worker+0xd2/0x600 [ 302.523331][ C0] ? read_lock_is_recursive+0x20/0x20 [ 302.523348][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 302.523365][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 302.523383][ C0] ? batadv_nc_worker+0xd2/0x600 [ 302.523402][ C0] batadv_nc_worker+0xef/0x600 [ 302.523420][ C0] ? batadv_nc_worker+0xd2/0x600 [ 302.523439][ C0] ? process_scheduled_works+0x975/0x1600 [ 302.523459][ C0] process_scheduled_works+0xa60/0x1600 [ 302.523489][ C0] ? worker_attach_to_pool+0x370/0x370 [ 302.523509][ C0] ? assign_work+0x3cc/0x5d0 [ 302.523529][ C0] worker_thread+0xa5e/0xfe0 [ 302.523556][ C0] kthread+0x2fa/0x390 [ 302.523570][ C0] ? pr_cont_work+0x550/0x550 [ 302.523588][ C0] ? kthread_blkcg+0xd0/0xd0 [ 302.523603][ C0] ret_from_fork+0x48/0x80 [ 302.523621][ C0] ? kthread_blkcg+0xd0/0xd0 [ 302.523635][ C0] ret_from_fork_asm+0x11/0x20 [ 302.523659][ C0] [ 302.524078][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 302.727712][ C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 13) [ 302.794220][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 302.801461][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.807756][ C0] wireguard: wg1: Sending keepalive packet to peer 22 (127.0.0.1:20003) [ 302.807905][ C0] nf_nat: Already setup manip DST for ct ffff88807ac1b380 (status bits 0x188) [ 302.807953][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 302.808032][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 302.817767][ C0] nf_nat: Already setup manip DST for ct ffff88807ac1b380 (status bits 0x188) [ 302.817801][ C0] nf_nat: Already setup manip SRC for ct ffff88807ac1b380 (status bits 0x188) [ 302.864632][ T29] Call Trace: [ 302.868014][ T29] [ 302.870958][ T29] dump_stack_lvl+0x18c/0x250 [ 302.875658][ T29] ? show_regs_print_info+0x20/0x20 [ 302.880867][ T29] ? load_image+0x420/0x420 [ 302.885390][ T29] panic+0x2ca/0x720 [ 302.889300][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 302.893817][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 302.897744][ C0] wireguard: wg0: Sending keepalive packet to peer 32 ([::1]:20002/0%0) [ 302.907700][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 302.913093][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 302.918971][ C0] virtqueue callback for ffff888141643c00 (ffffffff84a02460) [ 302.919022][ C0] virtqueue interrupt with no work for ffff888141643a00 [ 302.919032][ C0] virtqueue interrupt with no work for ffff888141643800 [ 302.940482][ T29] watchdog+0xf98/0xfa0 [ 302.944673][ T29] ? watchdog+0x1e1/0xfa0 [ 302.949139][ T29] kthread+0x2fa/0x390 [ 302.953319][ T29] ? hungtask_pm_notify+0x50/0x50 [ 302.958372][ T29] ? kthread_blkcg+0xd0/0xd0 [ 302.962987][ T29] ret_from_fork+0x48/0x80 [ 302.967426][ T29] ? kthread_blkcg+0xd0/0xd0 [ 302.972031][ T29] ret_from_fork_asm+0x11/0x20 [ 302.976817][ T29] [ 302.979966][ T29] Kernel Offset: disabled [ 302.984296][ T29] Rebooting in 86400 seconds..