last executing test programs: 3.705359559s ago: executing program 1 (id=476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) 3.162820312s ago: executing program 2 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="306663353a313232373a620afaf6379a248d1d6534518f1095109da34b6d6537a638885eff400aa56f6ea2e5bf276be4483f51727ff6d4f35a49946368", 0x3d) 3.033109485s ago: executing program 2 (id=474): setns(0xc9, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="81006b", 0x3}], 0x1}}], 0x1, 0x40) 2.905486159s ago: executing program 2 (id=478): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x18, 0x2, 0x30c, 0x1}) 2.829435941s ago: executing program 2 (id=479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) poll(&(0x7f0000000100)=[{r1, 0x6086}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.778989941s ago: executing program 0 (id=480): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800005000000010000000000000060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) 2.665434294s ago: executing program 2 (id=482): r0 = fsopen(&(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.655280125s ago: executing program 0 (id=483): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='uid=forget,noadinicb,iocharset=koi8-u,gid=ignore,dmode=000000000000000000004,rootdir=00000000000000000005,iocharset=macinuit,nostrict,mode=00000000000000000004622,\x00'], 0x1, 0xc39, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/4105, 0x1009) 1.539537242s ago: executing program 1 (id=484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.539298892s ago: executing program 2 (id=485): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_connect$uac2(0x4, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) 1.533364182s ago: executing program 0 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) 1.286270358s ago: executing program 3 (id=487): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file1\x00', 0x10000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d4, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c15c2, 0x220) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.284000618s ago: executing program 0 (id=496): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 996.172255ms ago: executing program 3 (id=488): unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000640)=[{0x0, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 768.271001ms ago: executing program 3 (id=489): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) 693.368123ms ago: executing program 3 (id=490): unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x20000010304, @multicast}, 0x12, {0x2, 0x4e22, @rand_addr=0x64010102}}) 692.377533ms ago: executing program 0 (id=491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @mcast1, 0x5}, 0x80, 0x0}, 0x4c810) 612.873585ms ago: executing program 1 (id=492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000009400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 535.503677ms ago: executing program 1 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 534.564437ms ago: executing program 0 (id=503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 366.646261ms ago: executing program 3 (id=495): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd2) 193.756125ms ago: executing program 1 (id=497): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x6180, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) 758.08µs ago: executing program 1 (id=498): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file1\x00', 0x10000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d4, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c15c2, 0x220) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 0s ago: executing program 3 (id=507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 74.178652][ T5764] cgroup: Unknown subsys name 'net' [ 74.313463][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.670926][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.415530][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.425214][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.433516][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.442338][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.451298][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.455889][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.458825][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.474931][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.475043][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.490536][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.496541][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.499136][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.513258][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.531479][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.539625][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.550517][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.570029][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.577779][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.938019][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 77.988269][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.998365][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.112697][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.120535][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.128169][ T5782] bridge_slave_0: entered allmulticast mode [ 78.134952][ T5782] bridge_slave_0: entered promiscuous mode [ 78.168599][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.175815][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.183429][ T5782] bridge_slave_1: entered allmulticast mode [ 78.190641][ T5782] bridge_slave_1: entered promiscuous mode [ 78.209448][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.217011][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.224193][ T5776] bridge_slave_0: entered allmulticast mode [ 78.231701][ T5776] bridge_slave_0: entered promiscuous mode [ 78.268423][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.275824][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.283228][ T5776] bridge_slave_1: entered allmulticast mode [ 78.290001][ T5776] bridge_slave_1: entered promiscuous mode [ 78.309749][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.319075][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.326734][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.333924][ T5775] bridge_slave_0: entered allmulticast mode [ 78.342633][ T5775] bridge_slave_0: entered promiscuous mode [ 78.362046][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.371503][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.379471][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.386987][ T5775] bridge_slave_1: entered allmulticast mode [ 78.393695][ T5775] bridge_slave_1: entered promiscuous mode [ 78.402492][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.415311][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.462751][ T5782] team0: Port device team_slave_0 added [ 78.470845][ T5782] team0: Port device team_slave_1 added [ 78.520718][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.533149][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.544125][ T5776] team0: Port device team_slave_0 added [ 78.551558][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.558991][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.585285][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.619097][ T5776] team0: Port device team_slave_1 added [ 78.625471][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.634566][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.660620][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.674575][ T5775] team0: Port device team_slave_0 added [ 78.683576][ T5775] team0: Port device team_slave_1 added [ 78.715349][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.722695][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.749493][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.781300][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.788504][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.814550][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.827492][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.834467][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.860973][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.879806][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.887413][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.914167][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.961494][ T5782] hsr_slave_0: entered promiscuous mode [ 78.968041][ T5782] hsr_slave_1: entered promiscuous mode [ 79.033352][ T5775] hsr_slave_0: entered promiscuous mode [ 79.039684][ T5775] hsr_slave_1: entered promiscuous mode [ 79.046156][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.054005][ T5775] Cannot create hsr debugfs directory [ 79.078034][ T5776] hsr_slave_0: entered promiscuous mode [ 79.084932][ T5776] hsr_slave_1: entered promiscuous mode [ 79.091650][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.099393][ T5776] Cannot create hsr debugfs directory [ 79.389970][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.415840][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.426815][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.437390][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.488093][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.503375][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.523306][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.537692][ T5779] Bluetooth: hci2: command tx timeout [ 79.537705][ T51] Bluetooth: hci0: command tx timeout [ 79.555573][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.608564][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.620023][ T5779] Bluetooth: hci1: command tx timeout [ 79.621401][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.646514][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.657818][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.791288][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.805183][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.833923][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.865957][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.873362][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.883977][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.891149][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.909118][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.919311][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.936049][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.943185][ T4750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.961111][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.968301][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.002119][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.032553][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.039748][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.080174][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.087398][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.394387][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.523088][ T5782] veth0_vlan: entered promiscuous mode [ 80.544149][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.560050][ T5782] veth1_vlan: entered promiscuous mode [ 80.589665][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.653129][ T5782] veth0_macvtap: entered promiscuous mode [ 80.665346][ T5776] veth0_vlan: entered promiscuous mode [ 80.682806][ T5782] veth1_macvtap: entered promiscuous mode [ 80.699094][ T5776] veth1_vlan: entered promiscuous mode [ 80.724034][ T5775] veth0_vlan: entered promiscuous mode [ 80.748629][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.769985][ T5775] veth1_vlan: entered promiscuous mode [ 80.791878][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.808356][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.818741][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.828174][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.839625][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890119][ T5776] veth0_macvtap: entered promiscuous mode [ 80.922984][ T5776] veth1_macvtap: entered promiscuous mode [ 80.971130][ T5775] veth0_macvtap: entered promiscuous mode [ 81.012556][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.027665][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.042609][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.084094][ T5775] veth1_macvtap: entered promiscuous mode [ 81.117314][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.155157][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.174114][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.201506][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.201527][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.217371][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.242555][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.249354][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.260520][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.307006][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.320102][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.331378][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.344890][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.359653][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.373711][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.386679][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.398998][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.412317][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.424300][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.450967][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.464893][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.475489][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.484929][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.498183][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.510971][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.618378][ T5779] Bluetooth: hci0: command tx timeout [ 81.618776][ T51] Bluetooth: hci2: command tx timeout [ 81.650930][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.672650][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.698205][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.706709][ T51] Bluetooth: hci1: command tx timeout [ 81.728160][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.810113][ T5822] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 81.824104][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.839490][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.899443][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.912046][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.244675][ T5835] syz.0.5[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.266468][ T5804] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.282088][ T5835] loop0: detected capacity change from 0 to 512 [ 82.335208][ T5835] EXT4-fs: inline encryption not supported [ 82.370047][ T5835] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.446303][ T5835] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.468197][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 82.497285][ T5804] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 82.532479][ T5835] EXT4-fs (loop0): 1 truncate cleaned up [ 82.549148][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.570280][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.584650][ T5804] usb 3-1: Product: syz [ 82.601115][ T5804] usb 3-1: Manufacturer: syz [ 82.624115][ T5804] usb 3-1: SerialNumber: syz [ 82.631646][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.661682][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.670680][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.684785][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.706906][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.728796][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.734959][ T5835] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #12: comm syz.0.5: bad extra_isize 62 (inode size 256) [ 82.810370][ T5835] EXT4-fs (loop0): Remounting filesystem read-only [ 82.823102][ T5835] EXT4-fs warning (device loop0): ext4_rename_delete:3780: inode #12: comm syz.0.5: Deleting old file: nlink 2, error=-5 [ 82.891956][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.911993][ T5804] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 82.955282][ T5804] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.997723][ T5804] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 83.026889][ T5804] usb 3-1: media controller created [ 83.066540][ T5845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 83.095308][ T5845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 83.109870][ T27] audit: type=1807 audit(1791574579.490:2): UNKNOWN=? res=0 [ 83.111100][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.117561][ T27] audit: type=1802 audit(1791574579.490:3): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.7" res=0 errno=0 [ 83.128845][ T5847] ima: policy update failed [ 83.154710][ T5845] Zero length message leads to an empty skb [ 83.184815][ T27] audit: type=1802 audit(1791574579.560:4): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.7" res=0 errno=0 [ 83.295025][ T5804] zl10353_read_register: readreg error (reg=127, ret==-71) [ 83.461851][ T5804] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 83.493437][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 83.530590][ T5804] usb 3-1: USB disconnect, device number 2 [ 83.663986][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.673759][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.682698][ T5841] bridge_slave_0: entered allmulticast mode [ 83.691541][ T5841] bridge_slave_0: entered promiscuous mode [ 83.699355][ T5779] Bluetooth: hci2: command tx timeout [ 83.699365][ T51] Bluetooth: hci0: command tx timeout [ 83.715522][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.722914][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.731434][ T5841] bridge_slave_1: entered allmulticast mode [ 83.740078][ T5841] bridge_slave_1: entered promiscuous mode [ 83.786256][ T5779] Bluetooth: hci1: command tx timeout [ 83.794951][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.808786][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.866304][ T5841] team0: Port device team_slave_0 added [ 83.875153][ T5841] team0: Port device team_slave_1 added [ 83.906789][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.914285][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.945692][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.960260][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.968864][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.002384][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.102813][ T5841] hsr_slave_0: entered promiscuous mode [ 84.115523][ T5841] hsr_slave_1: entered promiscuous mode [ 84.123327][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.141310][ T5841] Cannot create hsr debugfs directory [ 84.432751][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'. [ 84.603457][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.620654][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.627956][ T5871] loop0: detected capacity change from 0 to 32768 [ 84.640668][ T5871] ======================================================= [ 84.640668][ T5871] WARNING: The mand mount option has been deprecated and [ 84.640668][ T5871] and is ignored by this kernel. Remove the mand [ 84.640668][ T5871] option from the mount to silence this warning. [ 84.640668][ T5871] ======================================================= [ 84.683378][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.709793][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.728137][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.816188][ T5779] Bluetooth: hci3: command tx timeout [ 84.837754][ T5871] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.911870][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.933671][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.948242][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.956878][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.014941][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.026098][ T4750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.054265][ T5871] XFS (loop0): Ending clean mount [ 85.081308][ T5871] XFS (loop0): Quotacheck needed: Please wait. [ 85.148819][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.172129][ T5871] XFS (loop0): Quotacheck: Done. [ 85.366220][ T5904] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 85.400897][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.624478][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.664821][ T5910] loop2: detected capacity change from 0 to 2048 [ 85.732774][ T5910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.752933][ T5841] veth0_vlan: entered promiscuous mode [ 85.779699][ T5779] Bluetooth: hci0: command tx timeout [ 85.781580][ T51] Bluetooth: hci2: command tx timeout [ 85.807374][ T5841] veth1_vlan: entered promiscuous mode [ 85.866140][ T51] Bluetooth: hci1: command tx timeout [ 85.897839][ T5841] veth0_macvtap: entered promiscuous mode [ 85.908002][ T5912] loop3: detected capacity change from 0 to 2048 [ 85.910106][ T5841] veth1_macvtap: entered promiscuous mode [ 85.990130][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.030742][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.031462][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.068761][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.079776][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.126387][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.152682][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.164582][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.185013][ T5912] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 86.207715][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.218836][ T5912] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 86.225431][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.253909][ T5919] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 86.261922][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.267079][ T5912] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.267079][ T5912] [ 86.267126][ T5912] EXT4-fs (loop3): Total free blocks count 0 [ 86.267142][ T5912] EXT4-fs (loop3): Free/Dirty block details [ 86.267193][ T5912] EXT4-fs (loop3): free_blocks=2415919504 [ 86.267236][ T5912] EXT4-fs (loop3): dirty_blocks=64 [ 86.298417][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.308699][ T5919] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.308699][ T5919] [ 86.318170][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.334667][ T5919] EXT4-fs (loop3): Total free blocks count 0 [ 86.342093][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.363451][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.393836][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.408899][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.423076][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.432115][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.615836][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.639424][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.663760][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.683558][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.776185][ T5806] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.896771][ T51] Bluetooth: hci3: command tx timeout [ 86.956175][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.968293][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.984366][ T5806] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.994700][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.014293][ T5806] usb 3-1: config 0 descriptor?? [ 87.148826][ T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.180935][ T8] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.195250][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.202515][ T8] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 87.209740][ T5941] loop1: detected capacity change from 0 to 2048 [ 87.212447][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.237270][ T8] usb 1-1: config 0 descriptor?? [ 87.292530][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.386516][ T5941] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 87.427580][ T5941] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 87.461339][ T5948] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 87.511253][ T5941] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.511253][ T5941] [ 87.514242][ T5806] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 87.526252][ T5948] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.526252][ T5948] [ 87.563538][ T5806] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 87.587338][ T5941] EXT4-fs (loop1): Total free blocks count 0 [ 87.593381][ T5941] EXT4-fs (loop1): Free/Dirty block details [ 87.605925][ T5948] EXT4-fs (loop1): Total free blocks count 0 [ 87.612593][ T5948] EXT4-fs (loop1): Free/Dirty block details [ 87.628547][ T5948] EXT4-fs (loop1): free_blocks=2415919504 [ 87.738212][ T8] input: HID 12ba:0100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:12BA:0100.0002/input/input6 [ 87.839493][ T5806] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 87.941667][ T5806] usb 3-1: USB disconnect, device number 3 [ 87.970563][ T8] sony 0003:12BA:0100.0002: input,hiddev0,hidraw1: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0 [ 88.071217][ T8] usb 1-1: USB disconnect, device number 2 [ 88.221785][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 88.363984][ T5957] fido_id[5957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 88.450670][ T5962] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 88.733248][ T5968] loop3: detected capacity change from 0 to 512 [ 88.784350][ T5968] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.50: inode has both inline data and extents flags [ 88.836780][ T5968] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.50: couldn't read orphan inode 15 (err -117) [ 88.867797][ T5968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.977904][ T51] Bluetooth: hci3: command tx timeout [ 89.039233][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.091781][ T5978] Bluetooth: MGMT ver 1.22 [ 89.265368][ T5987] loop3: detected capacity change from 0 to 256 [ 89.397438][ T5991] capability: warning: `syz.0.59' uses 32-bit capabilities (legacy support in use) [ 89.415929][ T5991] program syz.0.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.641372][ T6001] loop0: detected capacity change from 0 to 512 [ 89.660312][ T6001] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.65: inode has both inline data and extents flags [ 89.681228][ T6001] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.65: couldn't read orphan inode 15 (err -117) [ 89.694685][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.748669][ T6004] veth1_to_bond: entered allmulticast mode [ 89.755774][ T6003] veth1_to_bond: left allmulticast mode [ 89.785828][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.796364][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.871307][ T6006] loop0: detected capacity change from 0 to 256 [ 89.889643][ T6006] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 90.000024][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.011986][ T4750] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 90.016166][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.052280][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.084012][ T23] usb 2-1: config 0 descriptor?? [ 90.087246][ T6010] Cannot find set identified by id 0 to match [ 90.198049][ T2916] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.272719][ T2916] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.369666][ T2916] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.463636][ T2916] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.531374][ T23] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 90.583136][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input7 [ 90.781483][ T23] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 91.056875][ T51] Bluetooth: hci3: command tx timeout [ 91.183865][ T23] usb 2-1: USB disconnect, device number 2 [ 91.313164][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.322975][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.342050][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.356798][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.366872][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.374220][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.070712][ T6043] loop1: detected capacity change from 0 to 2048 [ 92.126460][ T6043] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.247408][ T6048] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.373734][ T6024] chnl_net:caif_netlink_parms(): no params data found [ 92.429104][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.446336][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.446529][ T790] cfg80211: failed to load regulatory.db [ 92.454986][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.470823][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.479656][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.488362][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.519949][ T6057] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 92.626327][ T6057] Remounting filesystem read-only [ 93.039647][ T6077] Cannot find set identified by id 0 to match [ 93.158788][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.166199][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.175064][ T6024] bridge_slave_0: entered allmulticast mode [ 93.184903][ T6024] bridge_slave_0: entered promiscuous mode [ 93.269996][ T2916] hsr_slave_0: left promiscuous mode [ 93.292524][ T2916] hsr_slave_1: left promiscuous mode [ 93.304836][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.323766][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.352493][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.371195][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.398872][ T2916] bridge_slave_1: left allmulticast mode [ 93.408202][ T2916] bridge_slave_1: left promiscuous mode [ 93.417419][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.440135][ T2916] bridge_slave_0: left allmulticast mode [ 93.451382][ T2916] bridge_slave_0: left promiscuous mode [ 93.457358][ T5779] Bluetooth: hci0: command tx timeout [ 93.483560][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.552566][ T2916] veth1_macvtap: left promiscuous mode [ 93.564289][ T2916] veth0_macvtap: left promiscuous mode [ 93.580743][ T2916] veth1_vlan: left promiscuous mode [ 93.590232][ T2916] veth0_vlan: left promiscuous mode [ 94.494832][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 94.533203][ T2916] team0 (unregistering): Port device team_slave_0 removed [ 94.572821][ T2916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.576458][ T5779] Bluetooth: hci1: command tx timeout [ 94.620835][ T2916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.903473][ T2916] bond0 (unregistering): Released all slaves [ 94.963742][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.974202][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.983773][ T6024] bridge_slave_1: entered allmulticast mode [ 94.995811][ T6024] bridge_slave_1: entered promiscuous mode [ 95.073423][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.086330][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.176646][ T6024] team0: Port device team_slave_0 added [ 95.185628][ T6024] team0: Port device team_slave_1 added [ 95.275433][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.282787][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.317579][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.331561][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.344384][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.372231][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.488147][ T6024] hsr_slave_0: entered promiscuous mode [ 95.497704][ T6024] hsr_slave_1: entered promiscuous mode [ 95.516266][ T6024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.523936][ T6024] Cannot create hsr debugfs directory [ 95.536268][ T5779] Bluetooth: hci0: command tx timeout [ 95.540819][ T6054] chnl_net:caif_netlink_parms(): no params data found [ 95.802406][ T2916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.835157][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.845270][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.855372][ T6054] bridge_slave_0: entered allmulticast mode [ 95.862689][ T6054] bridge_slave_0: entered promiscuous mode [ 95.872778][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.880816][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.888269][ T6054] bridge_slave_1: entered allmulticast mode [ 95.895059][ T6054] bridge_slave_1: entered promiscuous mode [ 95.935044][ T2916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.980370][ T6054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.993649][ T6054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.032461][ T2916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.091506][ T6054] team0: Port device team_slave_0 added [ 96.102830][ T6054] team0: Port device team_slave_1 added [ 96.130422][ T2916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.211504][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.223651][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.253037][ T6054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.272753][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.281507][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.316477][ T6054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.438947][ T6054] hsr_slave_0: entered promiscuous mode [ 96.447453][ T6054] hsr_slave_1: entered promiscuous mode [ 96.454766][ T6054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.464760][ T6054] Cannot create hsr debugfs directory [ 96.657153][ T5779] Bluetooth: hci1: command tx timeout [ 96.961675][ T6024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.975676][ T6024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.063876][ T6024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.092876][ T6024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.183626][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.223131][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.249391][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.257960][ T4750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.270511][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.278147][ T4750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.616784][ T5779] Bluetooth: hci0: command tx timeout [ 97.719203][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.919849][ T6024] veth0_vlan: entered promiscuous mode [ 98.022199][ T6024] veth1_vlan: entered promiscuous mode [ 98.078598][ T2916] hsr_slave_0: left promiscuous mode [ 98.089487][ T2916] hsr_slave_1: left promiscuous mode [ 98.102062][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.116229][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.124753][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.138934][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.150839][ T2916] bridge_slave_1: left allmulticast mode [ 98.161763][ T2916] bridge_slave_1: left promiscuous mode [ 98.172476][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.185951][ T2916] bridge_slave_0: left allmulticast mode [ 98.201213][ T2916] bridge_slave_0: left promiscuous mode [ 98.207555][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.248221][ T2916] veth1_macvtap: left promiscuous mode [ 98.253827][ T2916] veth0_macvtap: left promiscuous mode [ 98.266935][ T2916] veth1_vlan: left promiscuous mode [ 98.272434][ T2916] veth0_vlan: left promiscuous mode [ 98.746339][ T5779] Bluetooth: hci1: command tx timeout [ 98.911676][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 98.952364][ T2916] team0 (unregistering): Port device team_slave_0 removed [ 98.990411][ T2916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.030389][ T2916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.314587][ T2916] bond0 (unregistering): Released all slaves [ 99.385058][ T6054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.419500][ T6054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.458066][ T6054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.469084][ T6054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.534404][ T6024] veth0_macvtap: entered promiscuous mode [ 99.573363][ T6024] veth1_macvtap: entered promiscuous mode [ 99.652452][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.667682][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.678004][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.689219][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.699669][ T5779] Bluetooth: hci0: command tx timeout [ 99.707780][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.734795][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.745715][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.756531][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.767650][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.779201][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.809438][ T6024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.831537][ T6024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.840720][ T6024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.854666][ T6024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.884565][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.980688][ T6054] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.011160][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.018379][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.043522][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.050720][ T4750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.081385][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.091657][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.172282][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.199067][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.575782][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.680970][ T6054] veth0_vlan: entered promiscuous mode [ 100.688711][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 100.692951][ T6190] loop0: detected capacity change from 0 to 2048 [ 100.706273][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.717890][ T6190] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.742368][ T6054] veth1_vlan: entered promiscuous mode [ 100.773680][ T6194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.817088][ T5779] Bluetooth: hci1: command tx timeout [ 100.841851][ T6054] veth0_macvtap: entered promiscuous mode [ 100.857150][ T6054] veth1_macvtap: entered promiscuous mode [ 100.879143][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.891976][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.911818][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.929643][ T6190] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 100.946179][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.959068][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.975844][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.986166][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.988689][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.011221][ T6190] Remounting filesystem read-only [ 101.031145][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.041171][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.065389][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.086113][ T5819] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.094035][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.123373][ T5819] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 101.126195][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.142794][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.163898][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.178980][ T6054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.198214][ T6054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.242445][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.271676][ T27] audit: type=1400 audit(1791574597.630:5): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=6202 comm="syz.3.97" name="foo" offset=35 [ 101.280716][ T6054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.317130][ T6054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.329868][ T6206] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 101.338806][ T6054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.348521][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 101.357911][ T6054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.367206][ T6206] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 101.379645][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 101.392170][ T6206] iwpm_send_hello: Unable to send a nlmsg [ 101.588835][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.626127][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.685346][ T4750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.735567][ T4750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.810764][ T5819] gud 2-1:1.0: Failed to get properties (error=-5) [ 101.836438][ T5819] gud: probe of 2-1:1.0 failed with error -5 [ 102.113877][ T5804] usb 2-1: USB disconnect, device number 3 [ 102.571670][ T6213] loop0: detected capacity change from 0 to 40427 [ 102.604879][ T6213] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 102.627282][ T6213] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 102.700353][ T6213] F2FS-fs (loop0): invalid crc value [ 103.024534][ T6213] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 103.035025][ T6213] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.055399][ T6259] loop3: detected capacity change from 0 to 512 [ 103.146223][ T6259] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.116: invalid indirect mapped block 8 (level 1) [ 103.175535][ T6259] EXT4-fs (loop3): 1 truncate cleaned up [ 103.194887][ T6259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.575324][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.739190][ T6267] loop3: detected capacity change from 0 to 128 [ 103.762574][ T6267] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 103.874577][ T6267] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 103.924870][ T6272] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 104.448424][ T6271] loop0: detected capacity change from 0 to 32768 [ 104.816522][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.898637][ T6294] loop0: detected capacity change from 0 to 1024 [ 104.937590][ T6294] EXT4-fs error (device loop0): __ext4_fill_super:5517: comm syz.0.130: inode #2: comm syz.0.130: iget: illegal inode # [ 104.977063][ T6294] EXT4-fs (loop0): get root inode failed [ 104.984237][ T6294] EXT4-fs (loop0): mount failed [ 104.986841][ T6280] loop3: detected capacity change from 0 to 40427 [ 105.004633][ T6280] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.008217][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.018633][ T6280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.041217][ T6280] F2FS-fs (loop3): invalid crc value [ 105.059163][ T6280] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.072414][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.091661][ T5770] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.114018][ T9] usb 3-1: string descriptor 0 read error: -22 [ 105.126446][ T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 105.146136][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.192188][ T6280] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.198610][ T9] etas_es58x 3-1:1.0: Starting (null) (null) (Serial Number (null)) [ 105.206308][ T6280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.245520][ T9] etas_es58x 3-1:1.0: could not retrieve the product info string [ 105.455076][ T6290] etas_es58x 3-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 105.469151][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 105.477056][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 105.494899][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 105.502717][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 105.510616][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 105.518413][ T6290] etas_es58x 3-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 105.532426][ T6292] loop1: detected capacity change from 0 to 32768 [ 105.547639][ T23] usb 3-1: USB disconnect, device number 4 [ 105.568730][ T23] etas_es58x 3-1:1.0: Disconnecting (null) (null) [ 105.671528][ T27] audit: type=1800 audit(1791574602.050:6): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 105.753488][ T6292] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 105.753488][ T6292] [ 106.250198][ T6301] loop0: detected capacity change from 0 to 32768 [ 106.293431][ T6301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.131 (6301) [ 106.367351][ T6301] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.382496][ T6301] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 106.397717][ T6301] BTRFS info (device loop0): setting nodatasum [ 106.414209][ T6301] BTRFS info (device loop0): force zlib compression, level 3 [ 106.424209][ T6301] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 106.454802][ T6301] BTRFS info (device loop0): use lzo compression, level 0 [ 106.464927][ T6301] BTRFS info (device loop0): turning on flush-on-commit [ 106.512194][ T6301] BTRFS info (device loop0): enabling auto defrag [ 106.546255][ T6301] BTRFS info (device loop0): max_inline at 4096 [ 106.586121][ T6301] BTRFS info (device loop0): using free space tree [ 106.791392][ T6301] BTRFS info (device loop0): enabling ssd optimizations [ 106.953468][ T6330] loop2: detected capacity change from 0 to 8192 [ 106.994873][ T5782] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.060850][ T27] audit: type=1800 audit(1791574603.440:7): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.136" name="file0" dev="loop2" ino=1048653 res=0 errno=0 [ 107.183924][ T6348] loop1: detected capacity change from 0 to 512 [ 107.222083][ T6348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.309939][ T6348] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.138: invalid indirect mapped block 9 (level 0) [ 107.386594][ T6348] EXT4-fs (loop1): 1 truncate cleaned up [ 107.406848][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.530509][ T5770] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5770) [ 107.706226][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.290361][ T6383] loop2: detected capacity change from 0 to 256 [ 108.431843][ T6387] Bluetooth: MGMT ver 1.22 [ 109.253240][ T6410] loop0: detected capacity change from 0 to 256 [ 109.311756][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 109.356364][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 109.463117][ T6418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.539385][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 109.548692][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 109.567374][ T23] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 109.578150][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.588267][ T23] usb 2-1: Product: syz [ 109.593494][ T23] usb 2-1: Manufacturer: syz [ 109.598912][ T23] usb 2-1: SerialNumber: syz [ 109.610516][ T23] oti6858 2-1:1.0: oti6858 converter detected [ 109.631820][ T23] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 109.989405][ T27] audit: type=1400 audit(1791574606.370:8): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=6437 comm="syz.3.170" name="foo" offset=60 [ 110.070482][ T23] usb 2-1: USB disconnect, device number 4 [ 110.100622][ T23] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 110.117871][ T23] oti6858 2-1:1.0: device disconnected [ 110.193713][ T6444] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 110.208738][ T2916] Bluetooth: hci4: Frame reassembly failed (-84) [ 110.813064][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 111.209398][ T790] kernel write not supported for file /vcsa (pid: 790 comm: kworker/1:2) [ 111.499560][ T6469] mmap: syz.3.183 (6469) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.531305][ T6471] Falling back ldisc for ttyS3. [ 111.666249][ T5804] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.747449][ T6477] loop3: detected capacity change from 0 to 4096 [ 111.764657][ T6477] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.778922][ T6477] NILFS (loop3): mounting unchecked fs [ 111.789936][ T6479] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 111.811183][ T6477] NILFS (loop3): recovery complete [ 111.818765][ T6480] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.859049][ T5804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.883788][ T5804] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.920749][ T5804] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.03 [ 111.952708][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.963459][ T5804] usb 3-1: Product: syz [ 111.976975][ T5804] usb 3-1: Manufacturer: syz [ 111.981655][ T5804] usb 3-1: SerialNumber: syz [ 112.169841][ T6488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.209865][ T5804] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 112.259627][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 112.271373][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.448485][ T5804] usb 3-1: USB disconnect, device number 5 [ 112.469406][ T5804] usblp0: removed [ 112.539337][ T6496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 112.566309][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 112.607724][ T6495] loop1: detected capacity change from 0 to 8192 [ 112.701582][ T6487] loop3: detected capacity change from 0 to 32768 [ 112.750176][ T6487] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 112.833830][ T6487] XFS (loop3): Ending clean mount [ 113.002277][ T6024] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 113.222218][ T6515] tun0: tun_chr_ioctl cmd 2147767507 [ 113.649116][ T6529] loop3: detected capacity change from 0 to 512 [ 113.762686][ T6529] EXT4-fs (loop3): 1 truncate cleaned up [ 113.810252][ T6529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.926275][ T27] audit: type=1800 audit(1791574610.300:9): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.202" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 114.075399][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.232228][ T6541] loop2: detected capacity change from 0 to 22 [ 114.250656][ T6541] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 114.305683][ T6541] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 114.406030][ C1] sched: RT throttling activated [ 114.500536][ T6521] loop1: detected capacity change from 0 to 131072 [ 114.522310][ T6521] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 114.530996][ T6521] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.543882][ T6521] F2FS-fs (loop1): invalid crc value [ 114.561110][ T6521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.648473][ T6521] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.655786][ T6521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 114.679299][ T6521] F2FS-fs (loop1): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix. [ 114.734000][ T6554] loop2: detected capacity change from 0 to 1024 [ 115.361881][ T6574] loop0: detected capacity change from 0 to 1024 [ 115.446299][ T790] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.651109][ T790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.670402][ T790] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.689231][ T790] usb 2-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 115.703234][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.723692][ T790] usb-storage 2-1:1.0: USB Mass Storage device detected [ 115.993754][ T6595] loop2: detected capacity change from 0 to 512 [ 116.064311][ T6595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.088785][ T6595] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.169378][ T790] usb-storage: probe of 2-1:1.0 failed with error -5 [ 116.179433][ T6603] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 116.195151][ T790] usb 2-1: USB disconnect, device number 5 [ 116.273104][ T6054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.361583][ T6606] netlink: 'syz.3.237': attribute type 39 has an invalid length. [ 116.800256][ T6623] loop0: detected capacity change from 0 to 8 [ 117.154762][ T6633] loop1: detected capacity change from 0 to 128 [ 117.250358][ T27] audit: type=1800 audit(1791574613.630:10): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.246" name="bus" dev="loop1" ino=1048669 res=0 errno=0 [ 117.606143][ T5804] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.798378][ T5804] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.815768][ T5804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.834846][ T5804] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.853701][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.869254][ T5804] usb 4-1: Product: syz [ 117.873954][ T5804] usb 4-1: Manufacturer: syz [ 117.883737][ T5804] usb 4-1: SerialNumber: syz [ 117.895069][ T5804] usb 4-1: config 0 descriptor?? [ 117.938486][ T5804] usb 4-1: selecting invalid altsetting 0 [ 118.180928][ T5804] usb 4-1: USB disconnect, device number 2 [ 118.425697][ T6669] netlink: 'syz.2.262': attribute type 3 has an invalid length. [ 118.434262][ T6669] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.262'. [ 118.573894][ T6663] loop0: detected capacity change from 0 to 32768 [ 118.606239][ T5806] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.663985][ T6673] loop2: detected capacity change from 0 to 4096 [ 118.689247][ T6663] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.722496][ T6673] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 118.751179][ T6663] (syz.0.259,6663,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 118.834897][ T5806] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 118.870794][ T5806] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 118.890712][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 118.897519][ T6673] ntfs3: loop2: ino=19, mi_enum_attr [ 118.903206][ T6673] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 118.914769][ T5806] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.951198][ T5806] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 118.961887][ T6673] ntfs3: loop2: ino=19, mi_enum_attr [ 118.981142][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.990720][ T6673] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 119.014568][ T6667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.026364][ T6667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.055747][ T5806] pl2303 2-1:1.0: pl2303 converter detected [ 119.113161][ T5806] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 119.183804][ T6683] loop0: detected capacity change from 0 to 512 [ 119.233813][ T6683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.276424][ T6683] EXT4-fs (loop0): 1 truncate cleaned up [ 119.284874][ T6683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.386675][ T6667] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 119.425222][ T6691] warning: `syz.2.271' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.436990][ T6667] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 119.457124][ T6667] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 119.467923][ T6667] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 119.490656][ T6667] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 119.657570][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.809825][ T6699] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.838130][ T6664] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 119.851237][ T6664] pl2303 ttyUSB0: error sending break = -32 [ 119.868215][ T23] usb 2-1: USB disconnect, device number 6 [ 119.896843][ T5806] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.897055][ T23] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 119.930495][ T23] pl2303 2-1:1.0: device disconnected [ 120.111601][ T5806] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 120.140300][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.156308][ T5806] usb 3-1: Product: syz [ 120.160899][ T5806] usb 3-1: Manufacturer: syz [ 120.165723][ T5806] usb 3-1: SerialNumber: syz [ 120.401264][ T6701] loop0: detected capacity change from 0 to 40427 [ 120.423469][ T6701] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 120.433869][ T6701] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.451712][ T6701] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 120.487093][ T6701] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.642577][ T6701] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.653487][ T6701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.762749][ T6718] loop1: detected capacity change from 0 to 8192 [ 120.807418][ T6713] loop3: detected capacity change from 0 to 32768 [ 120.832676][ T6718] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.866493][ T6718] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 120.893104][ T5806] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 120.925427][ T27] audit: type=1800 audit(1791574617.290:11): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 120.946720][ T6718] REISERFS (device loop1): using ordered data mode [ 120.953251][ T6718] reiserfs: using flush barriers [ 120.996630][ T6718] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.039261][ T23] usb 3-1: USB disconnect, device number 6 [ 121.051123][ T27] audit: type=1800 audit(1791574617.300:12): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 121.075701][ T6718] REISERFS (device loop1): checking transaction log (loop1) [ 121.175985][ T6718] REISERFS (device loop1): Using rupasov hash to sort names [ 121.184458][ T6718] REISERFS (device loop1): using 3.5.x disk format [ 121.283297][ T6718] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.316488][ T6718] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.340358][ T6718] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.376437][ T6718] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 121.406673][ T6718] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 121.479888][ T6718] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.506550][ T6718] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.931412][ T6722] loop3: detected capacity change from 0 to 32768 [ 121.961461][ T6722] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 122.102622][ T6735] loop2: detected capacity change from 0 to 256 [ 122.258028][ T5770] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 122.436928][ T6744] loop3: detected capacity change from 0 to 64 [ 122.510157][ T6726] loop0: detected capacity change from 0 to 32768 [ 122.616149][ T27] audit: type=1800 audit(1791574618.990:13): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.284" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 122.651996][ T6726] ERROR: (device loop0): diWrite: ixpxd invalid [ 122.651996][ T6726] [ 122.708524][ T6726] ERROR: (device loop0): remounting filesystem as read-only [ 122.743611][ T6726] ERROR: (device loop0): txCommit: [ 122.743611][ T6726] [ 122.878023][ T6750] nfsd: exp_rootfh path not found ainx\ [ 122.964613][ T6752] process 'syz.0.298' launched './file0' with NULL argv: empty string added [ 123.384869][ T6746] loop1: detected capacity change from 0 to 32768 [ 123.400435][ T6746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.295 (6746) [ 123.437743][ T6746] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.452453][ T6746] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 123.463480][ T6746] BTRFS info (device loop1): using free space tree [ 123.584109][ T6746] BTRFS info (device loop1): enabling ssd optimizations [ 123.600303][ T6746] BTRFS info (device loop1): auto enabling async discard [ 123.632509][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.703947][ T5841] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.816839][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.837798][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 123.878052][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.906411][ T23] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.915471][ T23] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 123.961041][ T23] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.979736][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.999663][ T23] usb 1-1: config 1 interface 1 has no altsetting 0 [ 124.017649][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 124.036388][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.039217][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.048821][ T23] usb 1-1: Product: syz [ 124.081601][ T23] usb 1-1: Manufacturer: syz [ 124.096945][ T23] usb 1-1: SerialNumber: syz [ 124.106748][ T9] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 124.119613][ T6796] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 124.144341][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.201591][ T9] metro_usb 3-1:1.0: Metrologic USB to Serial converter detected [ 124.231840][ T9] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 124.331987][ T23] usb 1-1: selecting invalid altsetting 0 [ 124.404227][ T6804] loop1: detected capacity change from 0 to 64 [ 124.409284][ T6026] usb 3-1: USB disconnect, device number 7 [ 124.442978][ T6026] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 124.481324][ T6026] metro_usb 3-1:1.0: device disconnected [ 124.527991][ T23] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 124.747426][ T6817] vivid-002: disconnect [ 124.754692][ T6813] vivid-002: reconnect [ 124.755483][ T23] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 124.852518][ T23] usb 1-1: USB disconnect, device number 3 [ 124.910153][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.025251][ T6823] loop1: detected capacity change from 0 to 2048 [ 125.087594][ T6823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.909247][ T6859] kAFS: bad VL server IP address [ 126.049129][ T6867] loop0: detected capacity change from 0 to 1024 [ 126.264895][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 126.592969][ T6888] loop3: detected capacity change from 0 to 1024 [ 126.600744][ T6888] EXT4-fs: Ignoring removed oldalloc option [ 126.607712][ T6888] EXT4-fs: Ignoring removed orlov option [ 126.655844][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.656262][ T6890] loop1: detected capacity change from 0 to 256 [ 126.718923][ T6888] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.792826][ T6888] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.353: Freeing blocks not in datazone - block = 0, count = 16 [ 126.864524][ T11] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 126.918244][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 126.946988][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.946988][ T11] [ 126.986306][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 127.013840][ T11] EXT4-fs (loop3): Free/Dirty block details [ 127.020045][ T11] EXT4-fs (loop3): free_blocks=16 [ 127.035399][ T11] EXT4-fs (loop3): dirty_blocks=16 [ 127.045543][ T11] EXT4-fs (loop3): Block reservation details [ 127.066466][ T11] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 127.083600][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.133214][ T6900] loop2: detected capacity change from 0 to 2048 [ 127.148997][ T6900] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 127.191363][ T6902] loop1: detected capacity change from 0 to 128 [ 127.209027][ T6900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.231177][ T6902] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 127.340635][ T6902] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 127.354378][ T6906] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 127.382928][ T6906] bond1 (unregistering): Released all slaves [ 127.696340][ T5779] Bluetooth: hci1: command tx timeout [ 127.879076][ T6926] loop1: detected capacity change from 0 to 8 [ 127.967803][ T6926] SQUASHFS error: Unable to read directory block [629:fe] [ 128.097324][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 128.107521][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 128.115110][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.125200][ T5779] Workqueue: hci3 hci_rx_work [ 128.129965][ T5779] Call Trace: [ 128.133293][ T5779] [ 128.134860][ T6918] loop2: detected capacity change from 0 to 32768 [ 128.136235][ T5779] dump_stack_lvl+0x18c/0x250 [ 128.147433][ T5779] ? show_regs_print_info+0x20/0x20 [ 128.152673][ T5779] ? load_image+0x420/0x420 [ 128.157335][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 128.162485][ T5779] ? __lock_acquire+0x7eb0/0x7eb0 [ 128.167534][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 128.172253][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 128.177587][ T5779] kobject_add_internal+0x617/0xc90 [ 128.182814][ T5779] kobject_add+0x164/0x240 [ 128.187245][ T5779] ? kobject_init+0x1d0/0x1d0 [ 128.191934][ T5779] ? get_device_parent+0x366/0x390 [ 128.197079][ T5779] device_add+0x3fa/0xc40 [ 128.201436][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 128.206379][ T5779] le_conn_complete_evt+0xe9a/0x1480 [ 128.211705][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 128.217969][ T5779] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 128.223611][ T5779] ? mutex_unlock+0x10/0x10 [ 128.228112][ T5779] ? skb_pull_data+0xf0/0x1f0 [ 128.232886][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 128.238450][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 128.244535][ T5779] hci_event_packet+0x7b4/0x1280 [ 128.249494][ T5779] ? __lock_acquire+0x7eb0/0x7eb0 [ 128.254528][ T5779] ? lock_chain_count+0x20/0x20 [ 128.259382][ T5779] ? bis_list+0x290/0x290 [ 128.263716][ T5779] ? kcov_remote_start+0x513/0x810 [ 128.268841][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 128.274058][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 128.279355][ T5779] hci_rx_work+0x43a/0xd60 [ 128.283797][ T5779] ? process_scheduled_works+0x975/0x1600 [ 128.289530][ T5779] process_scheduled_works+0xa60/0x1600 [ 128.295106][ T5779] ? worker_attach_to_pool+0x370/0x370 [ 128.300580][ T5779] ? assign_work+0x3cc/0x5d0 [ 128.305184][ T5779] worker_thread+0xa5e/0xfe0 [ 128.309809][ T5779] kthread+0x2fa/0x390 [ 128.313964][ T5779] ? pr_cont_work+0x550/0x550 [ 128.318650][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 128.323246][ T5779] ret_from_fork+0x48/0x80 [ 128.327676][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 128.332267][ T5779] ret_from_fork_asm+0x11/0x20 [ 128.337070][ T5779] [ 128.345627][ T5779] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.360163][ T5779] Bluetooth: hci3: failed to register connection device [ 128.961259][ T6950] loop0: detected capacity change from 0 to 8 [ 129.033557][ T6955] netlink: 'syz.3.380': attribute type 30 has an invalid length. [ 129.174476][ T6955] bond1: option arp_missed_max: invalid value (0) [ 129.203814][ T6955] bond1: option arp_missed_max: allowed values 1 - 255 [ 129.229305][ T6955] bond1 (unregistering): Released all slaves [ 129.284188][ T27] audit: type=1400 audit(1791574625.660:14): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=6964 comm="syz.1.385" [ 129.367390][ T6965] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 129.792474][ T6985] dvmrp8: entered allmulticast mode [ 129.936995][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 130.325685][ T7013] netlink: 'syz.2.406': attribute type 25 has an invalid length. [ 130.340154][ T7013] netlink: 'syz.2.406': attribute type 28 has an invalid length. [ 130.356196][ T790] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.382821][ T7015] loop0: detected capacity change from 0 to 1024 [ 130.449707][ T7015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.473558][ T7015] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.475330][ T7017] loop3: detected capacity change from 0 to 1024 [ 130.533911][ T41] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 130.583007][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 130.600010][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 130.609134][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.609134][ T41] [ 130.611606][ T790] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.623486][ T41] EXT4-fs (loop0): Total free blocks count 0 [ 130.634352][ T41] EXT4-fs (loop0): Free/Dirty block details [ 130.656216][ T790] usb 2-1: config 0 has no interface number 0 [ 130.656462][ T41] EXT4-fs (loop0): free_blocks=0 [ 130.674282][ T790] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.676187][ T41] EXT4-fs (loop0): dirty_blocks=16 [ 130.691936][ T41] EXT4-fs (loop0): Block reservation details [ 130.695023][ T790] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.701384][ T41] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 130.716773][ T2942] hfsplus: bad catalog file entry [ 130.722432][ T790] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 130.743443][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.743784][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.768691][ T790] usb 2-1: config 0 descriptor?? [ 131.390984][ T790] uclogic 0003:28BD:0094.0004: pen parameters not found [ 131.407543][ T790] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 131.430271][ T790] usb 2-1: USB disconnect, device number 7 [ 131.748194][ T7058] loop2: detected capacity change from 0 to 2048 [ 131.777024][ T7058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.810094][ T7058] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.831313][ T7062] loop3: detected capacity change from 0 to 1024 [ 131.840740][ T7062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.850375][ T7062] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 131.861963][ T7062] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.873748][ T7062] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: comm syz.3.424: inode #1: comm syz.3.424: iget: illegal inode # [ 131.890544][ T7062] EXT4-fs (loop3): no journal found [ 131.895887][ T7062] EXT4-fs (loop3): can't get journal size [ 131.905506][ T27] audit: type=1800 audit(1791574628.280:15): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.423" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 131.926438][ T7062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e118, mo2=0002] [ 131.934773][ T7062] EXT4-fs (loop3): failed to initialize system zone (-22) [ 131.953827][ T7062] EXT4-fs (loop3): mount failed [ 132.023355][ T6054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.039232][ T7065] capability: warning: `syz.1.426' uses deprecated v2 capabilities in a way that may be insecure [ 132.536475][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.607427][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.614645][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.658885][ T7086] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.027233][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 133.166240][ T5804] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.348304][ T5804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.358643][ T5804] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.370193][ T5804] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.388881][ T5804] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 133.394353][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.404424][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.405373][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.436341][ T5804] usb 1-1: Product: syz [ 133.440560][ T5804] usb 1-1: Manufacturer: syz [ 133.445150][ T5804] usb 1-1: SerialNumber: syz [ 133.517801][ T7104] loop2: detected capacity change from 0 to 40427 [ 133.542267][ T7104] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 133.553787][ T7104] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 133.565350][ T7104] F2FS-fs (loop2): invalid crc value [ 133.668461][ T7104] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 133.675589][ T7104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.749207][ T7104] syz.2.443: attempt to access beyond end of device [ 133.749207][ T7104] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 133.819257][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 133.832214][ T7115] netlink: 56 bytes leftover after parsing attributes in process `syz.1.445'. [ 133.842833][ T6054] syz-executor: attempt to access beyond end of device [ 133.842833][ T6054] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.860126][ T6054] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 133.867521][ T7115] tipc: Failed to obtain node identity [ 133.873035][ T7115] tipc: Enabling of bearer rejected, failed to enable media [ 133.892858][ T7116] syz.1.445: attempt to access beyond end of device [ 133.892858][ T7116] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 133.919607][ T7116] exFAT-fs (loop1): unable to read boot sector [ 133.925925][ T7116] exFAT-fs (loop1): failed to read boot sector [ 133.937273][ T7116] exFAT-fs (loop1): failed to recognize exfat type [ 134.104035][ T5804] usb 1-1: USB disconnect, device number 4 [ 134.110124][ C0] usb 1-1: comm data receiver aborted. [ 134.265984][ T7122] udevd[7122]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.514738][ T7131] loop9: detected capacity change from 0 to 255852544 [ 134.556251][ T5819] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 134.743380][ T5819] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 134.766116][ T5819] usb 4-1: config 0 has no interface number 0 [ 134.778906][ T5819] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 134.829643][ T5819] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 134.867297][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 134.868413][ T2916] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.916288][ T5819] usb 4-1: Manufacturer: syz [ 134.920959][ T5819] usb 4-1: SerialNumber: syz [ 134.961435][ T5819] usb 4-1: config 0 descriptor?? [ 134.988923][ T7141] mt6360: probe of 0-0034 failed with error -5 [ 135.000625][ T7141] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 135.145498][ T7150] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 135.157825][ T7150] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 135.166301][ T7150] page_type: 0xffffffff() [ 135.174087][ T7150] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 135.186311][ T7150] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 135.194966][ T7150] page dumped because: unmovable page [ 135.202705][ T7150] page_owner info is not present (never set?) [ 135.289515][ T7152] program syz.2.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.299364][ T51] Bluetooth: hci3: command tx timeout [ 135.488166][ T7148] loop1: detected capacity change from 0 to 40427 [ 135.517594][ T7148] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 135.524169][ T7148] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 135.534503][ T7148] F2FS-fs (loop1): invalid crc value [ 135.608743][ T5819] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input10 [ 135.676150][ T7148] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 135.694110][ T7148] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.774626][ T7148] syz.1.456: attempt to access beyond end of device [ 135.774626][ T7148] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 135.808176][ T5841] syz-executor: attempt to access beyond end of device [ 135.808176][ T5841] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.813216][ T5819] usb 4-1: USB disconnect, device number 3 [ 135.825822][ T5841] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 136.103323][ T7162] 9p: Unknown access argument 18446744073709551615: -34 [ 136.440360][ T7170] loop1: detected capacity change from 0 to 256 [ 136.499493][ T27] audit: type=1800 audit(1791574632.880:16): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="file1" dev="loop1" ino=1048675 res=0 errno=0 [ 136.896317][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 136.896449][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 137.010126][ T2942] Bluetooth: hci4: Frame reassembly failed (-84) [ 137.401460][ T7184] loop0: detected capacity change from 0 to 1024 [ 137.495850][ T7184] hfsplus: xattr searching failed [ 137.509967][ T7184] hfsplus: xattr searching failed [ 137.517621][ T7184] hfsplus: xattr searching failed [ 137.550831][ T7184] hfsplus: b-tree write err: -5, ino 3 [ 137.680971][ T2942] hfsplus: bad catalog file entry [ 138.008568][ T7188] loop3: detected capacity change from 0 to 40427 [ 138.044140][ T7188] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 138.052816][ T7188] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 138.070970][ T7188] F2FS-fs (loop3): invalid crc value [ 138.087808][ T7205] loop0: detected capacity change from 0 to 2048 [ 138.113680][ T7205] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 138.137279][ T7205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.254310][ T7188] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 138.262619][ T7188] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.316635][ T7188] syz.3.470: attempt to access beyond end of device [ 138.316635][ T7188] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 138.350957][ T6024] syz-executor: attempt to access beyond end of device [ 138.350957][ T6024] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.368244][ T6024] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 139.056510][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 139.063444][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 139.436248][ T5819] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.452257][ T7222] loop3: detected capacity change from 0 to 1024 [ 139.551620][ T7222] hfsplus: xattr searching failed [ 139.564235][ T7222] hfsplus: xattr searching failed [ 139.572889][ T7222] hfsplus: xattr searching failed [ 139.605399][ T7222] hfsplus: b-tree write err: -5, ino 3 [ 139.636392][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 139.645520][ T5819] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 139.654348][ T5819] usb 3-1: config 0 has no interface number 0 [ 139.661330][ T2942] hfsplus: bad catalog file entry [ 139.668230][ T5819] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 139.695413][ T5819] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 139.728951][ T5819] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 139.747926][ T5819] usb 3-1: config 0 interface 196 has no altsetting 0 [ 139.780262][ T5819] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 139.789836][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.806993][ T5819] usb 3-1: Product: syz [ 139.811219][ T5819] usb 3-1: Manufacturer: syz [ 139.815847][ T5819] usb 3-1: SerialNumber: syz [ 139.841922][ T5819] usb 3-1: config 0 descriptor?? [ 139.853864][ T7215] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.171986][ T7237] loop1: detected capacity change from 0 to 1024 [ 140.187065][ T7237] EXT4-fs: Ignoring removed orlov option [ 140.242447][ T7237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.353894][ T7246] loop3: detected capacity change from 0 to 2048 [ 140.431375][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.465564][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.527800][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.702990][ T7254] loop1: detected capacity change from 0 to 1024 [ 140.704359][ T7252] loop3: detected capacity change from 0 to 1024 [ 140.721179][ T7252] EXT4-fs: Ignoring removed orlov option [ 140.787394][ T7252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.222212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.179504][ T5819] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 142.188275][ T5819] ipheth: probe of 3-1:0.196 failed with error -71 [ 142.200668][ T5819] usb 3-1: USB disconnect, device number 8 [ 142.346959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.256806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.296508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.336551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.258936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.296528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.336533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.378134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.820096][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.826820][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.016717][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.136308][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 210.190916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.376442][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 232.736580][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 256.259232][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.265665][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 299.136369][ T28] INFO: task kworker/u4:0:11 blocked for more than 143 seconds. [ 299.144151][ T28] Not tainted syzkaller #0 [ 299.150045][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.158806][ T28] task:kworker/u4:0 state:D stack:20784 pid:11 ppid:2 flags:0x00004000 [ 299.168101][ T28] Workqueue: writeback wb_workfn (flush-8:0) [ 299.174147][ T28] Call Trace: [ 299.177489][ T28] [ 299.180441][ T28] __schedule+0x15ae/0x4660 [ 299.187949][ T28] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 299.194413][ T28] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 299.200775][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 299.206850][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.211906][ T28] ? asan.module_dtor+0x20/0x20 [ 299.216885][ T28] ? blk_check_plugged+0x250/0x250 [ 299.222027][ T28] ? rq_wait_inc_below+0x11f/0x1a0 [ 299.227407][ T28] ? wq_worker_sleeping+0x63/0x240 [ 299.232555][ T28] schedule+0xbd/0x170 [ 299.236877][ T28] io_schedule+0x80/0xd0 [ 299.242211][ T28] rq_qos_wait+0x22b/0x360 [ 299.246858][ T28] ? wbt_inflight_cb+0x2f0/0x2f0 [ 299.251821][ T28] ? rq_depth_scale_down+0x2f0/0x2f0 [ 299.257219][ T28] ? rq_qos_wait+0x360/0x360 [ 299.261861][ T28] ? wbt_exit+0xb0/0xb0 [ 299.266103][ T28] ? blk_bio_list_merge+0xd0/0xd0 [ 299.273219][ T28] wbt_wait+0x34a/0x580 [ 299.279514][ T28] ? rwb_trace_step+0x320/0x320 [ 299.284408][ T28] ? dd_depth_updated+0x110/0x110 [ 299.293499][ T28] ? rwb_trace_step+0x320/0x320 [ 299.302776][ T28] __rq_qos_throttle+0x65/0xb0 [ 299.309223][ T28] blk_mq_submit_bio+0x8fb/0x2220 [ 299.314265][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.321539][ T28] ? blk_mq_plug_issue_direct+0x550/0x550 [ 299.329479][ T28] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 299.335769][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 299.343360][ T28] ? ktime_get+0x7f/0x280 [ 299.347929][ T28] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 299.354205][ T28] ? ktime_get_real_ts64+0x440/0x440 [ 299.363939][ T28] __submit_bio+0x12b/0x260 [ 299.368547][ T28] ? blk_free_queue_rcu+0x40/0x40 [ 299.373663][ T28] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 299.380392][ T28] ? __folio_end_writeback+0xe10/0xe10 [ 299.385890][ T28] ? __mod_lruvec_page_state+0xa5/0x410 [ 299.392284][ T28] ? should_fail_request+0x70/0x70 [ 299.397556][ T28] ? submit_bio_noacct+0xfba/0x1b30 [ 299.402799][ T28] ext4_bio_write_folio+0x16a4/0x22d0 [ 299.408306][ T28] mpage_submit_folio+0x231/0x3c0 [ 299.413365][ T28] mpage_process_page_bufs+0x6bf/0x8c0 [ 299.419747][ T28] mpage_prepare_extent_to_map+0xecd/0x1f80 [ 299.425708][ T28] ? trace_ext4_writepages+0x1c0/0x1c0 [ 299.432323][ T28] ? kmem_cache_alloc+0x1a6/0x2c0 [ 299.440627][ T28] ext4_do_writepages+0xb46/0x3990 [ 299.445839][ T28] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 299.454054][ T28] ? rcu_read_lock_any_held+0xb4/0x140 [ 299.461686][ T28] ? __lock_acquire+0x1431/0x7eb0 [ 299.466878][ T28] ext4_writepages+0x1dd/0x350 [ 299.471690][ T28] ? ext4_read_folio+0x2f0/0x2f0 [ 299.476824][ T28] ? __rwlock_init+0x150/0x150 [ 299.481621][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 299.487853][ T28] ? ext4_read_folio+0x2f0/0x2f0 [ 299.494128][ T28] do_writepages+0x351/0x590 [ 299.499934][ T28] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 299.505720][ T28] ? writeback_sb_inodes+0x4bd/0x1020 [ 299.511192][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.516318][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 299.521387][ T28] __writeback_single_inode+0x14e/0xee0 [ 299.527093][ T28] writeback_sb_inodes+0x813/0x1020 [ 299.532371][ T28] ? queue_io+0x530/0x530 [ 299.537424][ T28] __writeback_inodes_wb+0x114/0x240 [ 299.542777][ T28] wb_writeback+0x472/0xbe0 [ 299.547394][ T28] ? queue_io+0x2c1/0x530 [ 299.551758][ T28] ? percpu_ref_tryget+0x250/0x250 [ 299.557178][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 299.563211][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.568707][ T28] wb_workfn+0xad7/0xe60 [ 299.572989][ T28] ? inode_wait_for_writeback+0x230/0x230 [ 299.578805][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 299.584807][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.589910][ T28] ? read_lock_is_recursive+0x20/0x20 [ 299.595779][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.601124][ T28] ? process_scheduled_works+0x975/0x1600 [ 299.606942][ T28] ? process_scheduled_works+0x975/0x1600 [ 299.612722][ T28] process_scheduled_works+0xa60/0x1600 [ 299.618406][ T28] ? worker_attach_to_pool+0x370/0x370 [ 299.624005][ T28] ? assign_work+0x3cc/0x5d0 [ 299.628679][ T28] worker_thread+0xa5e/0xfe0 [ 299.633288][ T28] kthread+0x2fa/0x390 [ 299.637436][ T28] ? pr_cont_work+0x550/0x550 [ 299.642133][ T28] ? kthread_blkcg+0xd0/0xd0 [ 299.646820][ T28] ret_from_fork+0x48/0x80 [ 299.651266][ T28] ? kthread_blkcg+0xd0/0xd0 [ 299.655868][ T28] ret_from_fork_asm+0x11/0x20 [ 299.660751][ T28] [ 299.663840][ T28] INFO: task jbd2/sda1-8:5104 blocked for more than 143 seconds. [ 299.671839][ T28] Not tainted syzkaller #0 [ 299.676873][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.685547][ T28] task:jbd2/sda1-8 state:D stack:25736 pid:5104 ppid:2 flags:0x00004000 [ 299.695448][ T28] Call Trace: [ 299.698909][ T28] [ 299.701846][ T28] __schedule+0x15ae/0x4660 [ 299.706434][ T28] ? asan.module_dtor+0x20/0x20 [ 299.711312][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.716430][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 299.722349][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 299.727602][ T28] schedule+0xbd/0x170 [ 299.731772][ T28] io_schedule+0x80/0xd0 [ 299.736093][ T28] bit_wait_io+0x11/0xd0 [ 299.740368][ T28] __wait_on_bit+0x9f/0x2c0 [ 299.744890][ T28] ? bit_wait+0xd0/0xd0 [ 299.749155][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 299.754639][ T28] ? bit_wait+0xd0/0xd0 [ 299.758887][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 299.763758][ T28] ? do_raw_write_lock+0x11e/0x260 [ 299.768991][ T28] ? bit_waitqueue+0x30/0x30 [ 299.773692][ T28] ? do_raw_read_unlock+0x3d/0x80 [ 299.779222][ T28] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 299.785621][ T28] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 299.792441][ T28] ? lock_chain_count+0x20/0x20 [ 299.798043][ T28] ? _raw_spin_unlock+0x40/0x40 [ 299.802960][ T28] ? __try_to_del_timer_sync+0x1c2/0x280 [ 299.808653][ T28] ? __timer_delete_sync+0x23d/0x2e0 [ 299.813953][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.819060][ T28] ? timer_delete_sync+0x20/0x20 [ 299.824007][ T28] ? do_raw_read_unlock+0x80/0x80 [ 299.829120][ T28] ? prepare_to_wait+0x1aa/0x200 [ 299.834083][ T28] kjournald2+0x40f/0x810 [ 299.838477][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 299.843692][ T28] ? wake_bit_function+0x200/0x200 [ 299.848913][ T28] ? _raw_spin_unlock+0x40/0x40 [ 299.853778][ T28] ? __kthread_parkme+0x71/0x1c0 [ 299.858942][ T28] ? __kthread_parkme+0x15b/0x1c0 [ 299.864008][ T28] kthread+0x2fa/0x390 [ 299.868176][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 299.873404][ T28] ? kthread_blkcg+0xd0/0xd0 [ 299.878090][ T28] ret_from_fork+0x48/0x80 [ 299.882526][ T28] ? kthread_blkcg+0xd0/0xd0 [ 299.887338][ T28] ret_from_fork_asm+0x11/0x20 [ 299.892156][ T28] [ 299.895193][ T28] INFO: task syz-executor:5764 blocked for more than 144 seconds. [ 299.903756][ T28] Not tainted syzkaller #0 [ 299.908763][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.917504][ T28] task:syz-executor state:D stack:22888 pid:5764 ppid:5763 flags:0x00004002 [ 299.926844][ T28] Call Trace: [ 299.930143][ T28] [ 299.933086][ T28] __schedule+0x15ae/0x4660 [ 299.937778][ T28] ? mark_lock+0x94/0x320 [ 299.942130][ T28] ? asan.module_dtor+0x20/0x20 [ 299.947049][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.952272][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 299.958228][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 299.963490][ T28] schedule+0xbd/0x170 [ 299.967669][ T28] io_schedule+0x80/0xd0 [ 299.971930][ T28] bit_wait_io+0x11/0xd0 [ 299.976238][ T28] __wait_on_bit+0x9f/0x2c0 [ 299.980756][ T28] ? bit_wait+0xd0/0xd0 [ 299.984920][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 299.990451][ T28] ? bit_wait+0xd0/0xd0 [ 299.994619][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 299.999630][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.005412][ T28] ? bit_waitqueue+0x30/0x30 [ 300.010127][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 300.015344][ T28] do_get_write_access+0x5c9/0xe00 [ 300.020538][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 300.026610][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.032785][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.039002][ T28] ? __might_sleep+0xe0/0xe0 [ 300.043629][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 300.049258][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 300.054745][ T28] ext4_dirty_inode+0xcb/0x110 [ 300.059625][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 300.065448][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 300.070605][ T28] file_update_time+0x187/0x1a0 [ 300.075482][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 300.080593][ T28] ? do_wp_page+0x4ce/0x34d0 [ 300.085199][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 300.091488][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.096597][ T28] do_page_mkwrite+0x153/0x3f0 [ 300.101379][ T28] do_wp_page+0xd4d/0x34d0 [ 300.106488][ T28] ? folio_put+0xd0/0xd0 [ 300.110784][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.115924][ T28] ? __rwlock_init+0x150/0x150 [ 300.120779][ T28] handle_mm_fault+0x1306/0x4a50 [ 300.125732][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 300.130729][ T28] ? numa_migrate_prep+0x350/0x350 [ 300.135872][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 300.141207][ T28] do_user_addr_fault+0x736/0x12d0 [ 300.146397][ T28] exc_page_fault+0x64/0x100 [ 300.150997][ T28] ? clear_bhb_loop+0x40/0x90 [ 300.155670][ T28] asm_exc_page_fault+0x26/0x30 [ 300.160593][ T28] RIP: 0033:0x7f2c0147c762 [ 300.165021][ T28] RSP: 002b:00007ffc01802820 EFLAGS: 00010202 [ 300.171152][ T28] RAX: 00007f2bff300000 RBX: 000055556ce6c140 RCX: 0000000000000003 [ 300.179186][ T28] RDX: 0000000000001579 RSI: 000055556ce6cd60 RDI: 0000000000000008 [ 300.187235][ T28] RBP: 00007ffc01802d20 R08: 000055556ce6cd98 R09: 0000000000000091 [ 300.195218][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc01802b60 [ 300.203263][ T28] R13: 00007ffc01802950 R14: 585858582e7a7973 R15: 00007ffc018028a0 [ 300.211778][ T28] [ 300.214833][ T28] INFO: task syz.0.503:7239 blocked for more than 144 seconds. [ 300.222571][ T28] Not tainted syzkaller #0 [ 300.227608][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.236378][ T28] task:syz.0.503 state:D stack:27048 pid:7239 ppid:5782 flags:0x00004004 [ 300.245619][ T28] Call Trace: [ 300.248944][ T28] [ 300.251897][ T28] __schedule+0x15ae/0x4660 [ 300.256510][ T28] ? mark_lock+0x94/0x320 [ 300.260856][ T28] ? asan.module_dtor+0x20/0x20 [ 300.265717][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.270861][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 300.277130][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 300.282374][ T28] schedule+0xbd/0x170 [ 300.286547][ T28] io_schedule+0x80/0xd0 [ 300.290811][ T28] bit_wait_io+0x11/0xd0 [ 300.295158][ T28] __wait_on_bit+0x9f/0x2c0 [ 300.299725][ T28] ? bit_wait+0xd0/0xd0 [ 300.303898][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 300.310217][ T28] ? bit_wait+0xd0/0xd0 [ 300.314417][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 300.319250][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.324296][ T28] ? bit_waitqueue+0x30/0x30 [ 300.329096][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 300.334319][ T28] do_get_write_access+0x5c9/0xe00 [ 300.340137][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 300.346207][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.352400][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.358707][ T28] ? __might_sleep+0xe0/0xe0 [ 300.363319][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 300.368939][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 300.374443][ T28] ext4_dirty_inode+0xcb/0x110 [ 300.379274][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 300.385116][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 300.390194][ T28] file_update_time+0x187/0x1a0 [ 300.395080][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 300.400189][ T28] ? filemap_fault+0x103c/0x1540 [ 300.405143][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 300.410960][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 300.418160][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.423311][ T28] ? __pte_offset_map+0x20d/0x280 [ 300.428440][ T28] do_page_mkwrite+0x153/0x3f0 [ 300.433228][ T28] handle_mm_fault+0x1a2c/0x4a50 [ 300.438396][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 300.443363][ T28] ? numa_migrate_prep+0x350/0x350 [ 300.448613][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 300.453956][ T28] do_user_addr_fault+0x736/0x12d0 [ 300.459148][ T28] exc_page_fault+0x64/0x100 [ 300.463752][ T28] ? clear_bhb_loop+0x40/0x90 [ 300.468501][ T28] asm_exc_page_fault+0x26/0x30 [ 300.473372][ T28] RIP: 0033:0x7f37bac72829 [ 300.477895][ T28] RSP: 002b:00007fffa4394380 EFLAGS: 00010202 [ 300.483999][ T28] RAX: 0000001b2dd22000 RBX: ffffffff894a2f82 RCX: 0000001b2dd21ff8 [ 300.492043][ T28] RDX: 0000001b2d72421c RSI: 0000000000000008 RDI: 00007f37bbb55720 [ 300.500127][ T28] RBP: 000000000000018a R08: 00007f37bb010000 R09: 00007f37bb012000 [ 300.508181][ T28] R10: 00000000894a2f86 R11: 0000000000000001 R12: 00007f37bb026038 [ 300.516949][ T28] R13: 0000000000000bb1 R14: ffffffff894a2469 R15: 00007f37bbb55720 [ 300.524965][ T28] ? in6_dev_get+0x2f9/0x410 [ 300.529630][ T28] ? __ip6_rt_update_pmtu+0x6a2/0xd40 [ 300.535031][ T28] [ 300.538099][ T28] INFO: task syz.3.507:7251 blocked for more than 144 seconds. [ 300.545646][ T28] Not tainted syzkaller #0 [ 300.550791][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.559517][ T28] task:syz.3.507 state:D stack:27048 pid:7251 ppid:6024 flags:0x00004004 [ 300.568836][ T28] Call Trace: [ 300.572124][ T28] [ 300.575053][ T28] __schedule+0x15ae/0x4660 [ 300.580253][ T28] ? mark_lock+0x94/0x320 [ 300.584601][ T28] ? asan.module_dtor+0x20/0x20 [ 300.589534][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.594599][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 300.600592][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 300.605820][ T28] schedule+0xbd/0x170 [ 300.609967][ T28] io_schedule+0x80/0xd0 [ 300.614219][ T28] bit_wait_io+0x11/0xd0 [ 300.619272][ T28] __wait_on_bit+0x9f/0x2c0 [ 300.623812][ T28] ? bit_wait+0xd0/0xd0 [ 300.628062][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 300.633538][ T28] ? bit_wait+0xd0/0xd0 [ 300.637792][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 300.642665][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.647764][ T28] ? bit_waitqueue+0x30/0x30 [ 300.652368][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 300.657889][ T28] do_get_write_access+0x5c9/0xe00 [ 300.663025][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 300.669181][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.675373][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.681631][ T28] ? __might_sleep+0xe0/0xe0 [ 300.686301][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 300.691864][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 300.697392][ T28] ext4_dirty_inode+0xcb/0x110 [ 300.702165][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 300.708116][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 300.713185][ T28] file_update_time+0x187/0x1a0 [ 300.718145][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 300.723722][ T28] ? filemap_fault+0x103c/0x1540 [ 300.728789][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 300.734543][ T28] ? pte_alloc_one+0x3b6/0x540 [ 300.739517][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 300.745818][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.750910][ T28] do_page_mkwrite+0x153/0x3f0 [ 300.755715][ T28] handle_mm_fault+0x1a2c/0x4a50 [ 300.760741][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 300.765704][ T28] ? numa_migrate_prep+0x350/0x350 [ 300.771088][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 300.776444][ T28] do_user_addr_fault+0x736/0x12d0 [ 300.781595][ T28] exc_page_fault+0x64/0x100 [ 300.786259][ T28] asm_exc_page_fault+0x26/0x30 [ 300.791122][ T28] RIP: 0033:0x7f55e1e72889 [ 300.795539][ T28] RSP: 002b:00007fff6fcf3fb0 EFLAGS: 00010202 [ 300.801702][ T28] RAX: 0000001b34f24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 300.809733][ T28] RDX: 0000001b34f23ffc RSI: 00000000005ffde8 RDI: 00007f55e2d55700 [ 300.817782][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f55e2212000 [ 300.826423][ T28] R10: 00007f55e2d55700 R11: 0000000000000000 R12: 0000000000000000 [ 300.834423][ T28] R13: 000000000001b8d6 R14: ffffffff81322060 R15: 00007f55e2d55720 [ 300.842480][ T28] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 300.848610][ T28] [ 300.851625][ T28] INFO: task syz.1.498:7253 blocked for more than 145 seconds. [ 300.859246][ T28] Not tainted syzkaller #0 [ 300.864191][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.872923][ T28] task:syz.1.498 state:D stack:25384 pid:7253 ppid:5841 flags:0x00004004 [ 300.882378][ T28] Call Trace: [ 300.885655][ T28] [ 300.888628][ T28] __schedule+0x15ae/0x4660 [ 300.893165][ T28] ? mark_lock+0x94/0x320 [ 300.897607][ T28] ? asan.module_dtor+0x20/0x20 [ 300.902566][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.908561][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 300.914492][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 300.919826][ T28] schedule+0xbd/0x170 [ 300.924615][ T28] io_schedule+0x80/0xd0 [ 300.928957][ T28] bit_wait_io+0x11/0xd0 [ 300.933218][ T28] __wait_on_bit+0x9f/0x2c0 [ 300.937803][ T28] ? bit_wait+0xd0/0xd0 [ 300.941972][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 300.947506][ T28] ? bit_wait+0xd0/0xd0 [ 300.951681][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 300.956509][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.961600][ T28] ? bit_waitqueue+0x30/0x30 [ 300.966259][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 300.971478][ T28] do_get_write_access+0x5c9/0xe00 [ 300.976667][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 300.982668][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.989049][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.995221][ T28] ? __might_sleep+0xe0/0xe0 [ 300.999895][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 301.005460][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 301.011008][ T28] ext4_dirty_inode+0xcb/0x110 [ 301.015797][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 301.021736][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 301.027527][ T28] file_update_time+0x187/0x1a0 [ 301.032428][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 301.038513][ T28] ? filemap_fault+0x103c/0x1540 [ 301.043508][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 301.049340][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 301.055596][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 301.060924][ T28] ? __pte_offset_map+0x20d/0x280 [ 301.065956][ T28] do_page_mkwrite+0x153/0x3f0 [ 301.070783][ T28] handle_mm_fault+0x1a2c/0x4a50 [ 301.075771][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 301.080807][ T28] ? numa_migrate_prep+0x350/0x350 [ 301.085949][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 301.091398][ T28] do_user_addr_fault+0x736/0x12d0 [ 301.096790][ T28] exc_page_fault+0x64/0x100 [ 301.101397][ T28] asm_exc_page_fault+0x26/0x30 [ 301.106301][ T28] RIP: 0033:0x7fce10a72fb2 [ 301.110730][ T28] RSP: 002b:00007ffd7c20cc40 EFLAGS: 00010202 [ 301.116851][ T28] RAX: 0000000000001008 RBX: 00007fce11955720 RCX: 0000000000000000 [ 301.124834][ T28] RDX: 0000001b2de23000 RSI: 0000000000000008 RDI: 00007fce11955720 [ 301.133429][ T28] RBP: 0000000000000a67 R08: 0000000000000000 R09: 00007fce10e26038 [ 301.141630][ T28] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff841956dd [ 301.149696][ T28] R13: 00007fce10e26038 R14: 0000000000000200 R15: fffffffffffff000 [ 301.157783][ T28] ? blk_mq_rq_ctx_init+0x17d/0x610 [ 301.163036][ T28] [ 301.166138][ T28] [ 301.166138][ T28] Showing all locks held in the system: [ 301.173882][ T28] 4 locks held by kworker/u4:0/11: [ 301.179076][ T28] #0: ffff88814127e138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 301.190394][ T28] #1: ffffc90000107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 301.202895][ T28] #2: ffff88807fc460e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 301.214002][ T28] #3: ffff88807fc48c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 301.224523][ T28] 1 lock held by khungtaskd/28: [ 301.229447][ T28] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 301.239965][ T28] 6 locks held by kworker/u4:9/2977: [ 301.245272][ T28] #0: ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 301.255257][ T28] #1: ffff8880b8c28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 301.264048][ T28] #2: ffff88801fa88768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 301.274115][ T28] #3: ffff888060a4cdc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xac/0x1100 [ 301.283803][ T28] #4: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xb1/0x320 [ 301.294365][ T28] #5: ffffffff98336928 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x9e/0x520 [ 301.305007][ T28] 2 locks held by getty/5534: [ 301.309781][ T28] #0: ffff8880324620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 301.319725][ T28] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 301.329868][ T28] 3 locks held by syz-executor/5764: [ 301.335608][ T28] #0: ffff888078aaea20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 301.345674][ T28] #1: ffff88807fc46510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 301.355482][ T28] #2: ffff88807fc4a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 301.365234][ T28] 3 locks held by syz.0.503/7239: [ 301.370304][ T28] #0: ffff88807bbf5720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 301.380585][ T28] #1: ffff88807fc46510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 301.390410][ T28] #2: ffff88807fc4a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 301.400124][ T28] 3 locks held by syz.3.507/7251: [ 301.405157][ T28] #0: ffff88807bbf60a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 301.415121][ T28] #1: ffff88807fc46510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 301.425005][ T28] #2: ffff88807fc4a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 301.434911][ T28] 3 locks held by syz.1.498/7253: [ 301.440775][ T28] #0: ffff888031bf0b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 301.450811][ T28] #1: ffff88807fc46510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 301.461265][ T28] #2: ffff88807fc4a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 301.471077][ T28] [ 301.473416][ T28] ============================================= [ 301.473416][ T28] [ 301.481901][ T28] NMI backtrace for cpu 1 [ 301.486242][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 301.493880][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.503922][ T28] Call Trace: [ 301.507191][ T28] [ 301.510126][ T28] dump_stack_lvl+0x18c/0x250 [ 301.514805][ T28] ? __wake_up_klogd+0xd9/0x100 [ 301.519644][ T28] ? show_regs_print_info+0x20/0x20 [ 301.524856][ T28] ? load_image+0x420/0x420 [ 301.529384][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 301.534317][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 301.540489][ T28] ? load_image+0x420/0x420 [ 301.545006][ T28] ? wq_watchdog_touch+0xef/0x170 [ 301.550061][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 301.556120][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 301.562090][ T28] watchdog+0xf59/0xfa0 [ 301.566255][ T28] ? watchdog+0x1e1/0xfa0 [ 301.570579][ T28] kthread+0x2fa/0x390 [ 301.574734][ T28] ? hungtask_pm_notify+0x50/0x50 [ 301.579765][ T28] ? kthread_blkcg+0xd0/0xd0 [ 301.584362][ T28] ret_from_fork+0x48/0x80 [ 301.588774][ T28] ? kthread_blkcg+0xd0/0xd0 [ 301.593366][ T28] ret_from_fork_asm+0x11/0x20 [ 301.598146][ T28] [ 301.602022][ T28] Sending NMI from CPU 1 to CPUs 0: [ 301.607469][ C0] NMI backtrace for cpu 0 [ 301.607480][ C0] CPU: 0 PID: 41 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 301.607495][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.607503][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 301.607525][ C0] RIP: 0010:unwind_next_frame+0xe08/0x2990 [ 301.607543][ C0] Code: 8d 0c 00 00 49 89 dc e8 f6 ce 4b 00 49 83 c6 10 4c 89 f7 e8 ba 27 00 00 48 89 c5 49 8d 5c 24 01 48 8b 44 24 50 42 0f b6 04 38 <84> c0 0f 85 fb 15 00 00 48 89 d8 48 c1 e8 03 48 89 44 24 40 42 0f [ 301.607555][ C0] RSP: 0018:ffffc90000b1ed78 EFLAGS: 00000282 [ 301.607566][ C0] RAX: 0000000000000000 RBX: ffffffff9082ffe1 RCX: ffff88801de79e00 [ 301.607577][ C0] RDX: 0000000000000000 RSI: ffffffff8dda0900 RDI: 0000000000000004 [ 301.607586][ C0] RBP: ffffc90000b1f6e0 R08: ffff88801de79e00 R09: 0000000000000008 [ 301.607596][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff9082ffe0 [ 301.607605][ C0] R13: ffffc90000b1ee48 R14: ffffffff9082ffdd R15: dffffc0000000000 [ 301.607617][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 301.607629][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.607639][ C0] CR2: 00005564006af660 CR3: 00000000312cd000 CR4: 00000000003506f0 [ 301.607652][ C0] Call Trace: [ 301.607657][ C0] [ 301.607668][ C0] ? cfg80211_inform_bss_frame_data+0xb22/0x1330 [ 301.607690][ C0] ? cfg80211_inform_bss_frame_data+0xb22/0x1330 [ 301.607710][ C0] ? stack_trace_save+0x100/0x100 [ 301.607728][ C0] arch_stack_walk+0x144/0x190 [ 301.607746][ C0] ? cfg80211_inform_bss_frame_data+0xb22/0x1330 [ 301.607769][ C0] stack_trace_save+0xaa/0x100 [ 301.607786][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 301.607808][ C0] kasan_set_track+0x4e/0x70 [ 301.607824][ C0] ? kasan_set_track+0x4e/0x70 [ 301.607839][ C0] ? kasan_save_free_info+0x28/0x40 [ 301.607856][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 301.607872][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 301.607886][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 301.607904][ C0] ? ieee80211_inform_bss+0xb33/0xfd0 [ 301.607921][ C0] ? rdev_inform_bss+0x106/0x410 [ 301.607941][ C0] ? cfg80211_inform_bss_frame_data+0xb22/0x1330 [ 301.607984][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 301.608003][ C0] kasan_save_free_info+0x28/0x40 [ 301.608020][ C0] ____kasan_slab_free+0x126/0x1f0 [ 301.608039][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 301.608057][ C0] ? ieee80211_inform_bss+0xb33/0xfd0 [ 301.608074][ C0] __kmem_cache_free+0xba/0x1f0 [ 301.608096][ C0] ieee80211_inform_bss+0xb33/0xfd0 [ 301.608124][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 301.608143][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 301.608165][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 301.608189][ C0] rdev_inform_bss+0x106/0x410 [ 301.608211][ C0] cfg80211_inform_bss_frame_data+0xb22/0x1330 [ 301.608239][ C0] ? cfg80211_parse_ml_sta_data+0x1a80/0x1a80 [ 301.608279][ C0] ? ieee80211_bss_info_update+0x387/0x9f0 [ 301.608297][ C0] ? ieee80211_bss_info_update+0x387/0x9f0 [ 301.608316][ C0] ieee80211_bss_info_update+0x789/0x9f0 [ 301.608337][ C0] ? ieee80211_inform_bss+0xfd0/0xfd0 [ 301.608361][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 301.608380][ C0] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 301.608396][ C0] ? verify_lock_unused+0x140/0x140 [ 301.608419][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0 [ 301.608436][ C0] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 301.608455][ C0] ? mark_lock+0x94/0x320 [ 301.608473][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 301.608489][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 301.608505][ C0] ? lock_chain_count+0x20/0x20 [ 301.608520][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 301.608544][ C0] ? kcov_remote_start+0x8b/0x810 [ 301.608563][ C0] ? skb_dequeue+0x124/0x160 [ 301.608586][ C0] ieee80211_iface_work+0x730/0xc90 [ 301.608606][ C0] cfg80211_wiphy_work+0x228/0x260 [ 301.608621][ C0] ? process_scheduled_works+0x975/0x1600 [ 301.608641][ C0] process_scheduled_works+0xa60/0x1600 [ 301.608673][ C0] ? worker_attach_to_pool+0x370/0x370 [ 301.608694][ C0] ? assign_work+0x3cc/0x5d0 [ 301.608714][ C0] worker_thread+0xa5e/0xfe0 [ 301.608737][ C0] ? _raw_spin_unlock+0x40/0x40 [ 301.608755][ C0] ? __kthread_parkme+0x71/0x1c0 [ 301.608774][ C0] kthread+0x2fa/0x390 [ 301.608788][ C0] ? pr_cont_work+0x550/0x550 [ 301.608805][ C0] ? kthread_blkcg+0xd0/0xd0 [ 301.608820][ C0] ret_from_fork+0x48/0x80 [ 301.608836][ C0] ? kthread_blkcg+0xd0/0xd0 [ 301.608851][ C0] ret_from_fork_asm+0x11/0x20 [ 301.608877][ C0] [ 301.609595][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 302.063350][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 302.070545][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.080635][ T28] Call Trace: [ 302.083912][ T28] [ 302.086840][ T28] dump_stack_lvl+0x18c/0x250 [ 302.091522][ T28] ? show_regs_print_info+0x20/0x20 [ 302.096720][ T28] ? load_image+0x420/0x420 [ 302.101257][ T28] panic+0x2ca/0x720 [ 302.105167][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 302.109674][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 302.115220][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 302.120598][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 302.126784][ T28] watchdog+0xf98/0xfa0 [ 302.130939][ T28] ? watchdog+0x1e1/0xfa0 [ 302.135277][ T28] kthread+0x2fa/0x390 [ 302.139427][ T28] ? hungtask_pm_notify+0x50/0x50 [ 302.144449][ T28] ? kthread_blkcg+0xd0/0xd0 [ 302.149034][ T28] ret_from_fork+0x48/0x80 [ 302.153449][ T28] ? kthread_blkcg+0xd0/0xd0 [ 302.158038][ T28] ret_from_fork_asm+0x11/0x20 [ 302.162810][ T28] [ 302.166102][ T28] Kernel Offset: disabled [ 302.170420][ T28] Rebooting in 86400 seconds..