last executing test programs: 12.057816405s ago: executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2}) 11.085845848s ago: executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x44, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10.80322643s ago: executing program 0: memfd_create(&(0x7f00000000c0)='/dev/zero\x00', 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000002c0)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) 10.685886897s ago: executing program 3: pipe(&(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x2, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) 10.651767118s ago: executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x8004, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0xffff, 0x0, 0x3fa, 0x0, "fe1d0e1cff001704000000341300"}}) 10.565195848s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) recvfrom$inet(r3, 0x0, 0x0, 0x12020, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000080)=@in={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x20}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0xc0844123, &(0x7f0000000200)) 10.532147259s ago: executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdc) 10.4772203s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) memfd_create(&(0x7f0000000200)='}\xa4-}{\x00', 0x0) 9.628604898s ago: executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x541b, 0x0) msgctl$IPC_RMID(r0, 0x0) 9.612402215s ago: executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100003, 0xf4}, 0x20) 9.567325849s ago: executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x204002, &(0x7f0000000480)={[{@noadinicb}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@nostrict}, {@dmode={'dmode', 0x3d, 0x6}}, {@partition={'partition', 0x3d, 0x16f}}, {@adinicb}, {@shortad}]}, 0xfc, 0xc3d, &(0x7f0000002700)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x227b, 0x1000000000000) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000003c0)={0x8, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3", 0x0, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0xfffffecc}], 0x1) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r5, 0x81fd) splice(r0, 0x0, r1, 0x0, 0xffffffe1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$mixer(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) 9.533847669s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) poll(0x0, 0x0, 0x100e7f1) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000100), 0xc) recvmsg$qrtr(r1, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x38, 0x0) connect$qrtr(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000280), 0xb) io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x4009f24, 0x10, 0x0, 0x18f}) clock_gettime(0x0, &(0x7f0000000140)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)}], 0x1) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0xfdfe) write$FUSE_INIT(r4, &(0x7f000001aa80)={0x50, 0x0, r5, {0x7, 0x28, 0x40, 0x882a0}}, 0x50) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) 9.474002184s ago: executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f00000020c0)) 9.413067858s ago: executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0}) 9.338100529s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6b}]}, 0x34}}, 0x0) 9.292221683s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) open(0x0, 0x1f0302, 0x149) 5.493307569s ago: executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x804008, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x5c, 0x1fb, &(0x7f0000002440)="$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") r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$inet(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) sendmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) set_mempolicy_home_node(&(0x7f0000fec000/0x2000)=nil, 0x2000, 0x0, 0x2) read(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x4ca]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x81, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8c1b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x12767, &(0x7f0000027300)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 5.491575035s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RLCREATE(r3, &(0x7f0000000900)={0x18, 0xf, 0x2, {{0x0, 0x2}, 0x6}}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x1}}, {@usrquota}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) copy_file_range(r5, &(0x7f00000001c0), r4, 0x0, 0xffffffffa003e45c, 0x700000000000000) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x7800}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000003140)=""/4094, &(0x7f0000000e00)=0xffe) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, 0x0, 0x0) 5.409150769s ago: executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r2, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x0, 0x2}, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000000), 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000}) 4.952623257s ago: executing program 3: pipe(&(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x2, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) 4.488204228s ago: executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100003, 0xf4}, 0x20) 4.265750903s ago: executing program 4: futex(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x100) poll(0x0, 0x0, 0x100) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001340)={0x10}, 0x10}], 0x1}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept$inet6(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.312936078s ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.245308528s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.8740589s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}}, 0x0) 2.182498685s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3dc, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x314, 0x1398, 0x1398, 0x314, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'team_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x0, 0x5}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1dc, 0x1fc, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private1, @local, @remote, @empty, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @loopback, @mcast1, @loopback, @remote, @mcast2, @local, @private2, @mcast1, @remote]}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x438) 650.757019ms ago: executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r4 = dup(r3) write$uinput_user_dev(r4, &(0x7f0000001100)={'syz1\x00'}, 0x45c) syz_emit_ethernet(0x88, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000523a00fe8000000000001500000000000000bb000000000000000000000000000000010002000000000000c910200100000000000000000000000000000001000000000100907800000000601cd27100000000fc020000000000000000000000000000fc02000000000000000000000000000011d3186ee6e57e8ae078ed0da55b91a7cc8408228e65bd142b"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) tee(r1, r0, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200002, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000080)='us}jquota=\n\xf5\x81p\xef\xb0md\xad\x8e\xa6\xea\xf1b\xa6`\xa7\xe1\x8c*.A\x14#h\xf9\x15\xe1\xb0\xd2\x10\x86R\xb54\x16\x91\x97h\x0f\x19\x1a\x87x\xdf4~~Y\x03u%\xb2\xe8\x8f5r\x14\x8c\xc0\x11:6\xa4\x90\x7f\xb5\x13\x13(\"\xe0\x06\x13\xbf\xbc\x05\xbf\x9aH{\xd2\xc9\x996\xdcT\xae\x894\f\x13\f0\xa5h\x8f\xb0\xb7f^\x86C \xd7lP') 324.135908ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x45}, {0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 153.509805ms ago: executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 0s ago: executing program 0: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x204002, &(0x7f0000000480)={[{@noadinicb}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@nostrict}, {@dmode={'dmode', 0x3d, 0x6}}, {@partition={'partition', 0x3d, 0x16f}}, {@adinicb}, {@shortad}]}, 0xfc, 0xc3d, &(0x7f0000002700)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x227b, 0x1000000000000) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000003c0)={0x8, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3", 0x0, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0xfffffecc}], 0x1) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r5, 0x81fd) splice(r0, 0x0, r1, 0x0, 0xffffffe1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$mixer(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) kernel console output (not intermixed with test programs): 579] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 447.705186][T10579] EXT4-fs (loop3): Remounting filesystem read-only [ 447.722159][T10579] EXT4-fs (loop3): 1 truncate cleaned up [ 447.768648][T10579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.837751][ T9052] bcachefs (loop1): dirent points to inode that does not point back: [ 447.837751][ T9052] u64s 7 type dirent 4096:6783475523080972787:U32_MAX len 0 ver 0: file1 -> 4101 type reg [ 447.837751][ T9052] inum: 4101 mode=100755 [ 447.837751][ T9052] flags= (15300000) [ 447.837751][ T9052] journal_seq=4 [ 447.837751][ T9052] bi_size=10 [ 447.837751][ T9052] bi_sectors=8 [ 447.837751][ T9052] bi_version=0 [ 447.837751][ T9052] bi_atime=2336883131 [ 447.837751][ T9052] bi_ctime=2346883235 [ 447.837751][ T9052] bi_mtime=2336883131 [ 447.837751][ T9052] bi_otime=2336883131 [ 447.837751][ T9052] bi_uid=0 [ 447.837751][ T9052] bi_gid=256 [ 447.837751][ T9052] bi_nlink=0 [ 447.837751][ T9052] bi_generation=0 [ 447.837751][ T9052] bi_dev=0 [ 447.837751][ T9052] bi_data_checksum=0 [ 447.837751][ T9052] bi_compression=0 [ 447.837751][ T9052] bi_project=0 [ 447.837751][ T9052] bi_background_compression=0 [ 447.837751][ T9052] bi_data_replicas=0 [ 447.837751][ T9052] bi_promote_target=0 [ 447.837751][ T9052] bi_foreground_target=0 [ 447.837751][ T9052] bi_background_target=0 [ 447.837751][ T9052] bi_erasure_code=0 [ 447.837751][ T9052] bi_fields_set=4096 [ 447.837751][ T9052] bi_dir=6783475523080972787 [ 447.837751][ T9052] bi_dir_offset=0 [ 447.837751][ T9052] bi_subvol=0 [ 447.837751][ T9052] bi_parent_subvol=0 [ 447.837751][ T9052] bi_nocow=0 [ 447.837751][ T9052] [ 447.998625][ T9052] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 13 [ 448.009123][T10579] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 448.121747][ T9239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.552826][ T2432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.593134][ T5151] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 448.621758][ T9052] bcachefs (loop1): shutting down [ 448.721302][ T9052] bcachefs (loop1): shutdown complete [ 448.817048][ T5151] usb 1-1: Using ep0 maxpacket: 8 [ 448.868570][ T5151] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.956858][ T2432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.972545][ T5151] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.013622][ T5151] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.078305][ T5151] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.153995][ T5151] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.179611][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.198536][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.210375][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.223606][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.231881][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.240443][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 449.269689][ T2432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.273362][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.435288][ T2432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.458948][ T5151] usb 1-1: GET_CAPABILITIES returned 0 [ 449.493289][ T5151] usbtmc 1-1:16.0: can't read capabilities [ 449.517545][ T5151] usb 1-1: USB disconnect, device number 10 [ 449.994031][ T2432] bridge_slave_1: left allmulticast mode [ 449.999736][ T2432] bridge_slave_1: left promiscuous mode [ 450.037139][ T2432] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.075478][ T2432] bridge_slave_0: left allmulticast mode [ 450.081164][ T2432] bridge_slave_0: left promiscuous mode [ 450.107696][ T2432] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.318870][T10655] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 451.056657][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.067585][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.092367][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.116702][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.138166][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 451.146900][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.229968][ T2432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.253004][ T2432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.265410][ T2432] bond0 (unregistering): Released all slaves [ 451.323610][ T5113] Bluetooth: hci2: command tx timeout [ 451.340342][T10622] chnl_net:caif_netlink_parms(): no params data found [ 451.446771][T10668] loop4: detected capacity change from 0 to 32768 [ 451.472804][T10668] btrfs: Unknown parameter 'appraise' [ 451.802185][T10668] loop4: detected capacity change from 0 to 1024 [ 451.810529][T10668] hfsplus: uid requires an argument [ 451.816468][T10668] hfsplus: unable to parse mount options [ 451.939690][T10622] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.973303][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.988967][T10622] bridge_slave_0: entered allmulticast mode [ 452.119517][T10622] bridge_slave_0: entered promiscuous mode [ 452.146594][T10622] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.163316][T10622] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.193613][T10622] bridge_slave_1: entered allmulticast mode [ 452.225584][T10622] bridge_slave_1: entered promiscuous mode [ 452.328327][ T2432] hsr_slave_0: left promiscuous mode [ 452.343299][ T2432] hsr_slave_1: left promiscuous mode [ 452.401964][ T2432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.417589][ T2432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.445639][ T2432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.473634][ T2432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.500305][T10689] loop3: detected capacity change from 0 to 32768 [ 452.531281][ T2432] veth1_macvtap: left promiscuous mode [ 452.537247][ T2432] veth0_macvtap: left promiscuous mode [ 452.561182][ T2432] veth1_vlan: left promiscuous mode [ 452.581941][ T2432] veth0_vlan: left promiscuous mode [ 452.640276][T10689] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 452.670535][T10689] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 452.709458][T10689] bcachefs (loop3): alloc_read... done [ 452.719778][T10689] bcachefs (loop3): stripes_read... done [ 452.725606][T10689] bcachefs (loop3): snapshots_read... done [ 452.734029][T10689] bcachefs (loop3): journal_replay... done [ 452.739945][T10689] bcachefs (loop3): resume_logged_ops... done [ 452.759123][T10689] bcachefs (loop3): going read-write [ 452.778115][T10689] bcachefs (loop3): done starting filesystem [ 452.898282][T10719] loop0: detected capacity change from 0 to 4096 [ 452.931309][ T9239] bcachefs (loop3): shutting down [ 452.955514][ T9239] bcachefs (loop3): going read-only [ 452.960752][ T9239] bcachefs (loop3): finished waiting for writes to stop [ 453.023510][ T9239] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 453.044632][ T9239] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 453.064065][ T9239] bcachefs (loop3): shutdown complete, journal seq 15 [ 453.071859][ T9239] bcachefs (loop3): marking filesystem clean [ 453.103489][ T9239] bcachefs (loop3): shutdown complete [ 453.250433][ T5113] Bluetooth: hci4: command tx timeout [ 453.403872][ T5113] Bluetooth: hci2: command tx timeout [ 454.004110][T10726] loop4: detected capacity change from 0 to 64 [ 454.027393][T10726] hfs: get root inode failed [ 454.364713][T10732] loop4: detected capacity change from 0 to 512 [ 454.385173][T10732] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 454.413791][T10732] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 454.425966][ T2432] team0 (unregistering): Port device team_slave_1 removed [ 454.440614][T10732] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 454.473227][T10732] System zones: 0-2, 18-18, 34-34 [ 454.494230][T10732] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 454.552596][T10732] EXT4-fs (loop4): 1 truncate cleaned up [ 454.559440][ T2432] team0 (unregistering): Port device team_slave_0 removed [ 454.574504][T10732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.591217][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 454.857068][T10745] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 454.865382][T10745] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 454.873605][T10745] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 454.882787][T10745] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 455.375512][ T5113] Bluetooth: hci4: command tx timeout [ 455.483520][ T5113] Bluetooth: hci2: command tx timeout [ 456.745507][T10622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.776877][T10622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.907369][T10622] team0: Port device team_slave_0 added [ 456.951372][T10622] team0: Port device team_slave_1 added [ 457.006341][ T6232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.193879][T10622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.200859][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.239447][T10622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.268839][T10669] chnl_net:caif_netlink_parms(): no params data found [ 457.409337][ T5113] Bluetooth: hci4: command tx timeout [ 457.432347][T10622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.453170][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.500344][T10622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.563310][ T5113] Bluetooth: hci2: command tx timeout [ 457.797753][T10622] hsr_slave_0: entered promiscuous mode [ 457.814017][T10622] hsr_slave_1: entered promiscuous mode [ 458.030622][T10770] loop4: detected capacity change from 0 to 32768 [ 458.254430][T10669] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.293342][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.317599][T10770] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 458.333535][T10669] bridge_slave_0: entered allmulticast mode [ 458.343723][T10669] bridge_slave_0: entered promiscuous mode [ 458.356508][T10770] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 458.419686][T10770] bcachefs (loop4): alloc_read... done [ 458.437140][ T2432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.447835][T10770] bcachefs (loop4): stripes_read... done [ 458.453861][T10770] bcachefs (loop4): snapshots_read... done [ 458.462555][T10770] bcachefs (loop4): journal_replay... done [ 458.474271][T10770] bcachefs (loop4): resume_logged_ops... done [ 458.489586][T10669] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.498090][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.511395][T10770] bcachefs (loop4): going read-write [ 458.524445][T10770] bcachefs (loop4): done starting filesystem [ 458.531046][T10669] bridge_slave_1: entered allmulticast mode [ 458.548416][T10669] bridge_slave_1: entered promiscuous mode [ 458.633665][ T6232] bcachefs (loop4): shutting down [ 458.643423][ T6232] bcachefs (loop4): going read-only [ 458.667700][ T6232] bcachefs (loop4): finished waiting for writes to stop [ 458.677550][ T2432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.698866][ T6232] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 458.729756][ T6232] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 458.751191][T10669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.770227][ T6232] bcachefs (loop4): shutdown complete, journal seq 15 [ 458.782938][ T6232] bcachefs (loop4): marking filesystem clean [ 458.801459][T10669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.828099][T10796] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.852758][ T6232] bcachefs (loop4): shutdown complete [ 458.878881][ T2432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.984121][T10669] team0: Port device team_slave_0 added [ 459.135659][ T2432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.182489][T10669] team0: Port device team_slave_1 added [ 459.398668][T10669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.424725][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.455992][T10669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.483451][ T5112] Bluetooth: hci4: command tx timeout [ 459.519717][T10669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.544464][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.613181][T10669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.729795][T10669] hsr_slave_0: entered promiscuous mode [ 459.740491][T10669] hsr_slave_1: entered promiscuous mode [ 459.752363][T10669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.766727][T10669] Cannot create hsr debugfs directory [ 459.949741][T10807] loop4: detected capacity change from 0 to 32768 [ 459.967405][T10807] XFS: attr2 mount option is deprecated. [ 459.979267][T10807] XFS: ikeep mount option is deprecated. [ 459.985104][T10807] XFS: noikeep mount option is deprecated. [ 459.992991][ T2432] bridge_slave_1: left allmulticast mode [ 460.003148][ T2432] bridge_slave_1: left promiscuous mode [ 460.008896][ T2432] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.032167][T10807] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 460.053999][ T2432] bridge_slave_0: left allmulticast mode [ 460.059695][ T2432] bridge_slave_0: left promiscuous mode [ 460.066425][ T2432] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.098829][T10807] XFS (loop4): Ending clean mount [ 460.120716][T10807] XFS (loop4): Quotacheck needed: Please wait. [ 460.212902][T10807] XFS (loop4): Quotacheck: Done. [ 460.272981][ T6232] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 460.763853][T10825] loop3: detected capacity change from 0 to 4096 [ 461.038110][ T2432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.063748][ T2432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.090080][T10831] loop3: detected capacity change from 0 to 512 [ 461.104416][ T2432] bond0 (unregistering): Released all slaves [ 461.122730][T10831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.132760][T10829] loop4: detected capacity change from 0 to 32768 [ 461.147534][T10831] ext4 filesystem being mounted at /root/syzkaller-testdir1560701887/syzkaller.t3QvFk/88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.243621][ T9239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.292775][T10829] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 461.331461][T10829] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 461.434016][T10829] bcachefs (loop4): alloc_read... done [ 461.439574][T10829] bcachefs (loop4): stripes_read... done [ 461.448337][T10829] bcachefs (loop4): snapshots_read... done [ 461.479264][T10829] bcachefs (loop4): journal_replay... done [ 461.485933][T10829] bcachefs (loop4): resume_logged_ops... done [ 461.503741][T10829] bcachefs (loop4): going read-write [ 461.517332][T10829] bcachefs (loop4): done starting filesystem [ 461.583299][ T29] audit: type=1804 audit(1718519796.412:176): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1589615497/syzkaller.g0LBxZ/212/file0/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4098 res=1 errno=0 [ 461.663834][ T6232] bcachefs (loop4): shutting down [ 461.668902][ T6232] bcachefs (loop4): going read-only [ 461.688945][ T6232] bcachefs (loop4): finished waiting for writes to stop [ 461.709391][T10622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 461.713329][ T6232] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 461.735269][T10622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 461.739346][ T6232] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 461.770573][ T6232] bcachefs (loop4): shutdown complete, journal seq 14 [ 461.786789][ T6232] bcachefs (loop4): marking filesystem clean [ 461.789152][T10846] loop3: detected capacity change from 0 to 32768 [ 461.818716][ T6232] bcachefs (loop4): shutdown complete [ 461.841690][T10622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 461.862829][T10622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 461.911034][ T2432] hsr_slave_0: left promiscuous mode [ 461.923101][ T2432] hsr_slave_1: left promiscuous mode [ 461.937664][ T2432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.945298][ T2432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.955769][ T2432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.963457][ T2432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.989966][T10846] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 462.011652][T10846] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 462.044262][ T2432] veth1_macvtap: left promiscuous mode [ 462.050349][ T2432] veth0_macvtap: left promiscuous mode [ 462.056097][ T2432] veth1_vlan: left promiscuous mode [ 462.061432][ T2432] veth0_vlan: left promiscuous mode [ 462.124905][T10846] bcachefs (loop3): alloc_read... done [ 462.130450][T10846] bcachefs (loop3): stripes_read... done [ 462.182654][T10846] bcachefs (loop3): snapshots_read... done [ 462.199728][T10846] bcachefs (loop3): journal_replay... done [ 462.209919][T10846] bcachefs (loop3): resume_logged_ops... done [ 462.221157][T10846] bcachefs (loop3): going read-write [ 462.242439][T10846] bcachefs (loop3): done starting filesystem [ 462.378796][ T9239] bcachefs (loop3): shutting down [ 462.389297][ T9239] bcachefs (loop3): going read-only [ 462.400352][ T9239] bcachefs (loop3): finished waiting for writes to stop [ 462.544184][ T9239] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 462.628468][ T9239] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 462.648173][ T9239] bcachefs (loop3): shutdown complete, journal seq 15 [ 462.658515][ T9239] bcachefs (loop3): marking filesystem clean [ 462.746774][ T9239] bcachefs (loop3): shutdown complete [ 462.818152][T10864] loop0: detected capacity change from 0 to 4096 [ 462.839685][T10864] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 462.922205][T10864] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 464.072871][ T2432] team0 (unregistering): Port device team_slave_1 removed [ 464.165614][ T2432] team0 (unregistering): Port device team_slave_0 removed [ 466.515022][T10871] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 466.559306][T10882] veth0_vlan: entered allmulticast mode [ 466.598951][T10883] veth0_vlan: left promiscuous mode [ 466.604391][T10883] veth0_vlan: entered promiscuous mode [ 466.609884][T10883] veth0_vlan: left allmulticast mode [ 466.817991][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.851961][T10622] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.897880][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.905073][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.934177][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.941304][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.053230][ T29] audit: type=1804 audit(1718519801.892:177): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2127629534/syzkaller.M8Lbus/90/bus" dev="sda1" ino=1950 res=1 errno=0 [ 467.079433][ T29] audit: type=1800 audit(1718519801.892:178): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 467.170097][ T29] audit: type=1804 audit(1718519802.012:179): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2127629534/syzkaller.M8Lbus/90/bus" dev="sda1" ino=1950 res=1 errno=0 [ 467.270069][T10669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 467.300744][T10669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 467.364569][T10669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.391554][T10669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.705553][T10669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.730822][T10889] loop4: detected capacity change from 0 to 32768 [ 467.760010][T10889] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas: bad nr_required in entry (unknown data_type 255): 255/255 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 6 6 7 10 11 11 11 28 33 34 45 45 56 80 127] [ 467.760010][T10889] replicas (size 40): [ 467.760010][T10889] (unknown data_type 255): 255/255 [127 0 0 0 0 7 0 6 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 28 0 [ 467.783472][T10669] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.035574][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.042764][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.076169][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.083441][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.195420][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.320928][T10622] veth0_vlan: entered promiscuous mode [ 468.359343][T10622] veth1_vlan: entered promiscuous mode [ 468.529659][T10622] veth0_macvtap: entered promiscuous mode [ 468.597892][T10622] veth1_macvtap: entered promiscuous mode [ 468.656428][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.672369][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.689656][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.700251][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.723105][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.760633][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.793561][T10622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.819742][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.861915][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.912206][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.942943][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.962990][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.983251][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.116489][T10622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.615979][T10931] loop3: detected capacity change from 0 to 4096 [ 469.666559][T10931] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 469.681084][T10622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.762256][T10622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.775528][T10622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.784320][T10622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.802573][T10931] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 470.080406][T10669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.078467][T10941] veth0_vlan: entered allmulticast mode [ 471.109765][T10942] veth0_vlan: left promiscuous mode [ 471.115964][T10942] veth0_vlan: entered promiscuous mode [ 471.121448][T10942] veth0_vlan: left allmulticast mode [ 471.249716][T10945] loop4: detected capacity change from 0 to 256 [ 471.277002][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.298271][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.327017][T10669] veth0_vlan: entered promiscuous mode [ 471.379205][T10669] veth1_vlan: entered promiscuous mode [ 471.402370][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.422749][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.481270][T10669] veth0_macvtap: entered promiscuous mode [ 471.508643][T10947] loop3: detected capacity change from 0 to 4096 [ 471.517688][T10669] veth1_macvtap: entered promiscuous mode [ 471.527461][T10947] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 471.568447][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.579153][T10947] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 471.591695][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.612908][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.630018][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.647637][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.672817][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.683374][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.694570][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.706435][T10669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.807227][ T8248] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 471.899140][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.912356][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.410208][ T8248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.415219][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.920491][ T8248] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 475.273384][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.294994][ T8248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.304009][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.334825][ T8248] usb 5-1: config 0 descriptor?? [ 475.342509][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.352847][ T8248] usb 5-1: can't set config #0, error -71 [ 475.366421][ T8248] usb 5-1: USB disconnect, device number 17 [ 475.372860][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.385559][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.400675][T10669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.475738][T10669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.485028][T10957] loop0: detected capacity change from 0 to 64 [ 475.508878][T10669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.519574][T10669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.536746][T10669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.695584][ T5362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.726691][ T5362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.772238][ T5362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.790045][ T5362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.054099][T10974] PKCS7: Unknown OID: [4] 0.0(bad) [ 476.059748][T10974] PKCS7: Only support pkcs7_signedData type [ 476.389631][T10975] loop3: detected capacity change from 0 to 32768 [ 476.500750][T10971] jfs_rename did not expect dtDelete to return rc = -2 [ 476.519016][T10971] ERROR: (device loop3): jfs_rename: [ 476.519016][T10971] [ 476.630521][T10971] jfs_mkdir: dtSearch returned -17 [ 477.257640][T10983] loop4: detected capacity change from 0 to 4096 [ 477.442857][T10983] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 477.672344][T10998] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 477.796674][T10983] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 477.926279][ T29] audit: type=1326 audit(1718519812.772:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 477.992126][ T29] audit: type=1326 audit(1718519812.772:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.017715][ T29] audit: type=1326 audit(1718519812.792:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.046861][ T29] audit: type=1326 audit(1718519812.792:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.070934][ T29] audit: type=1326 audit(1718519812.792:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.391471][ T29] audit: type=1326 audit(1718519812.792:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.423149][ T29] audit: type=1326 audit(1718519812.802:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.455561][ T9295] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 478.480041][T11012] loop2: detected capacity change from 0 to 128 [ 478.489152][ T29] audit: type=1326 audit(1718519812.802:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.519701][T11012] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 478.521833][ T29] audit: type=1326 audit(1718519812.802:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.550482][T11012] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 478.575971][T11012] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 478.578991][ T29] audit: type=1326 audit(1718519812.802:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11004 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x7ffc0000 [ 478.608967][T11012] UDF-fs: Scanning with blocksize 512 failed [ 478.633296][ T9295] usb 1-1: device descriptor read/64, error -71 [ 478.662364][T11012] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 478.749732][T11012] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 478.769756][T11012] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 478.793076][T11012] UDF-fs: Scanning with blocksize 1024 failed [ 478.820751][T11012] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 478.842026][T11012] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 478.862288][T11012] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 478.891655][T11012] UDF-fs: Scanning with blocksize 2048 failed [ 478.898785][T11012] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 478.909743][T11012] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 478.919813][T11012] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 478.928545][T11012] UDF-fs: Scanning with blocksize 4096 failed [ 478.933260][ T9295] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 478.935256][T11012] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 479.753374][ T9295] usb 1-1: device descriptor read/64, error -71 [ 479.894223][ T9295] usb usb1-port1: attempt power cycle [ 479.988369][T11026] loop4: detected capacity change from 0 to 4096 [ 479.998685][T11026] ntfs3: loop4: ino=3, Correct links count -> 2. [ 480.117621][T11028] loop3: detected capacity change from 0 to 4096 [ 480.143236][T11028] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 480.218540][T11028] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 480.297156][T11033] loop1: detected capacity change from 0 to 4096 [ 480.313136][ T9295] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 480.497961][ T9295] usb 1-1: device descriptor read/8, error -71 [ 480.685021][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 480.804096][ T9295] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 480.880915][ T9295] usb 1-1: device descriptor read/8, error -71 [ 480.989513][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.138030][ T9295] usb usb1-port1: unable to enumerate USB device [ 481.145114][ T9] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.157685][ T9] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.167986][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 481.174817][ T9] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 481.183897][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.961443][ T9] usb 5-1: config 0 descriptor?? [ 482.254230][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 482.283174][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 482.299324][ T9] usb 5-1: USB disconnect, device number 18 [ 482.322419][T11062] loop0: detected capacity change from 0 to 128 [ 482.356631][T11062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.498900][T11062] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 482.537494][T11062] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 482.559671][T11062] UDF-fs: Scanning with blocksize 512 failed [ 482.601501][T11062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.612047][T11068] PKCS7: Unknown OID: [4] 0.0(bad) [ 482.617308][T11068] PKCS7: Only support pkcs7_signedData type [ 482.715471][T11062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.860327][T11068] loop2: detected capacity change from 0 to 32768 [ 482.882782][T11062] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 482.902929][T11068] jfs_rename did not expect dtDelete to return rc = -2 [ 482.908822][T11062] UDF-fs: Scanning with blocksize 1024 failed [ 482.910718][T11068] ERROR: (device loop2): jfs_rename: [ 482.910718][T11068] [ 482.937042][T11068] jfs_mkdir: dtSearch returned -17 [ 483.169643][T11062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 483.215073][ T6232] ntfs3: loop4: failed to convert "0000" to cp949 [ 483.221778][ T6232] ntfs3: loop4: failed to convert name for inode 1e. [ 483.262322][T11062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 483.294921][ T6232] ntfs3: loop4: failed to convert "0000" to cp949 [ 483.301383][ T6232] ntfs3: loop4: failed to convert name for inode 1e. [ 483.384845][T11062] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 483.386815][ T6232] ntfs3: loop4: failed to convert "0000" to cp949 [ 483.402486][T11062] UDF-fs: Scanning with blocksize 2048 failed [ 483.508597][ T6232] ntfs3: loop4: failed to convert name for inode 1e. [ 483.628023][T11062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 483.684795][T11062] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 483.712588][T11062] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 483.735930][T11062] UDF-fs: Scanning with blocksize 4096 failed [ 483.756739][T11062] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 483.903243][ T4868] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 484.078383][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.109416][ T4868] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 484.133090][ T4868] usb 2-1: config 1 has no interface number 1 [ 484.139224][ T4868] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.163346][ T4868] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 484.196483][ T4868] usb 2-1: string descriptor 0 read error: -22 [ 484.202791][ T4868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.245413][ T4868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.302786][ T4868] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 484.984591][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.351811][ T4868] usb 2-1: USB disconnect, device number 9 [ 485.617767][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.829812][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 485.829830][ T29] audit: type=1326 audit(1718519820.672:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 486.232635][ T29] audit: type=1326 audit(1718519820.692:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 486.486536][ T29] audit: type=1326 audit(1718519820.692:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 486.543937][ T51] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.727356][ T4480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 486.730620][ T29] audit: type=1326 audit(1718519820.692:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 486.785679][T11105] loop2: detected capacity change from 0 to 128 [ 486.819757][ T29] audit: type=1326 audit(1718519820.692:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 486.844111][ T29] audit: type=1326 audit(1718519820.702:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 486.881548][ T4480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.028406][ T4480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.041211][ T4480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.049388][ T4480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 487.056975][ T4480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.112607][ T29] audit: type=1326 audit(1718519820.702:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 487.180982][ T29] audit: type=1326 audit(1718519820.702:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 487.218670][ T29] audit: type=1326 audit(1718519820.702:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38c7cea9 code=0x7ffc0000 [ 487.241002][ T29] audit: type=1326 audit(1718519820.702:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa38c7bbef code=0x7ffc0000 [ 487.280139][ T51] bridge_slave_1: left allmulticast mode [ 487.285995][ T51] bridge_slave_1: left promiscuous mode [ 487.291802][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.302837][ T51] bridge_slave_0: left allmulticast mode [ 487.308649][ T51] bridge_slave_0: left promiscuous mode [ 487.314586][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.403569][ T9295] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 487.615381][ T9295] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d96, bcdDevice=5c.dc [ 487.639764][ T9295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.652638][ T9295] usb 3-1: config 0 descriptor?? [ 487.678832][T11110] loop1: detected capacity change from 0 to 32768 [ 487.689236][T11110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11110) [ 487.728381][T11110] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 487.740677][T11110] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 487.755167][T11110] BTRFS info (device loop1): using free-space-tree [ 488.222402][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.237094][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.248656][ T51] bond0 (unregistering): Released all slaves [ 488.359960][T11143] loop0: detected capacity change from 0 to 256 [ 488.384096][ T4868] usb 3-1: USB disconnect, device number 7 [ 488.414835][T11143] exfat: Unknown parameter 'Y[+ʻmK' [ 488.428642][T10669] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 488.526877][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 488.532957][ T4480] Bluetooth: hci3: command 0x0406 tx timeout [ 488.919748][ T51] hsr_slave_0: left promiscuous mode [ 488.989022][ T5113] Bluetooth: hci4: ISO packet too small [ 488.989875][T11145] PKCS7: Unknown OID: [4] 0.0(bad) [ 489.011792][ T51] hsr_slave_1: left promiscuous mode [ 489.022233][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.065543][T11145] PKCS7: Only support pkcs7_signedData type [ 489.372968][T11156] loop3: detected capacity change from 0 to 32768 [ 489.385739][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.388058][T11157] ptrace attach of "/root/syz-executor.1 exec"[10669] was attempted by "/root/syz-executor.1 exec"[11157] [ 489.393128][ T5113] Bluetooth: hci0: command tx timeout [ 489.423507][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.446051][T11145] jfs_rename did not expect dtDelete to return rc = -2 [ 489.454364][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.454882][T11145] ERROR: (device loop3): jfs_rename: [ 489.454882][T11145] [ 489.510451][T11145] jfs_mkdir: dtSearch returned -17 [ 489.814858][ T51] veth1_macvtap: left promiscuous mode [ 489.820489][ T51] veth0_macvtap: left promiscuous mode [ 489.832399][ T51] veth1_vlan: left promiscuous mode [ 490.930501][T11173] loop2: detected capacity change from 0 to 1764 [ 490.985368][T11173] iso9660: Unknown parameter 'H5' [ 491.182247][T11182] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.194585][T11182] loop2: detected capacity change from 0 to 64 [ 491.408934][T11184] loop2: detected capacity change from 0 to 2048 [ 491.435180][T11184] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 491.465296][T11184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.487295][ T5113] Bluetooth: hci0: command tx timeout [ 492.339876][ T5156] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 492.582470][ T5156] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 492.598968][ T5156] usb 4-1: config 1 has no interface number 1 [ 492.609550][ T5156] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 492.637920][ T5156] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 492.652062][ T51] team0 (unregistering): Port device team_slave_1 removed [ 492.655367][ T5156] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.680618][ T5156] usb 4-1: string descriptor 0 read error: -22 [ 492.687090][ T5156] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.696972][ T5156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.740525][ T51] team0 (unregistering): Port device team_slave_0 removed [ 492.767048][ T9295] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 492.953156][ T5156] usb 4-1: USB disconnect, device number 11 [ 492.980107][ T9295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.992219][ T9295] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 30 [ 493.010529][ T9295] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.021361][ T9295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.029625][ T9295] usb 1-1: Product: syz [ 493.036015][ T9295] usb 1-1: Manufacturer: syz [ 493.040639][ T9295] usb 1-1: SerialNumber: syz [ 493.375854][T11100] chnl_net:caif_netlink_parms(): no params data found [ 493.520271][T11199] loop1: detected capacity change from 0 to 1024 [ 493.563633][ T5113] Bluetooth: hci0: command tx timeout [ 493.656462][T11100] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.674458][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.681701][T11100] bridge_slave_0: entered allmulticast mode [ 493.693890][T11100] bridge_slave_0: entered promiscuous mode [ 493.704528][ T2445] hfsplus: b-tree write err: -5, ino 4 [ 493.706539][T11100] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.717484][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.726962][T11100] bridge_slave_1: entered allmulticast mode [ 493.737770][T11100] bridge_slave_1: entered promiscuous mode [ 493.752047][T11208] Smack: duplicate mount options [ 493.827197][T11100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.876886][T11100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.996011][T11100] team0: Port device team_slave_0 added [ 494.006487][T11100] team0: Port device team_slave_1 added [ 494.071505][T11100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.083539][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.113231][T11100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.127250][T11100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.134507][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.162926][T11100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.179078][ T9295] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 494.185828][ T9295] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 494.193608][ T9295] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 494.211524][T11218] loop1: detected capacity change from 0 to 1764 [ 494.220510][T11218] iso9660: Unknown parameter 'H5' [ 494.246852][T11100] hsr_slave_0: entered promiscuous mode [ 494.253944][T11100] hsr_slave_1: entered promiscuous mode [ 494.260253][T11100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.272684][T11100] Cannot create hsr debugfs directory [ 494.376768][ T9295] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 494.552242][ T9295] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 494.593522][ T4868] usb 1-1: USB disconnect, device number 15 [ 494.603838][ T4868] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 494.686213][ T5156] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 494.820109][T11227] loop2: detected capacity change from 0 to 2048 [ 494.840873][T11227] NILFS (loop2): invalid segment: Sequence number mismatch [ 494.849081][T11227] NILFS (loop2): trying rollback from an earlier position [ 494.881508][T11227] NILFS (loop2): recovery complete [ 494.900698][T11228] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.936586][ T5156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.981441][ T5156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.001501][ T5156] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 495.032571][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.085761][ T5156] usb 2-1: config 0 descriptor?? [ 495.335413][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 495.335455][ T29] audit: type=1800 audit(1718519830.182:329): pid=11230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 495.653567][ T5113] Bluetooth: hci0: command tx timeout [ 495.948783][ T5156] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.18 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 496.017197][T11100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.068090][T11100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.112568][T11100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 496.161146][T11100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 496.434770][T11100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.459830][T11100] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.490393][ T4868] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.497593][ T4868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.558779][ T4868] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.566061][ T4868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.401505][ T8] usb 2-1: USB disconnect, device number 10 [ 497.980086][T11249] veth0_vlan: entered allmulticast mode [ 498.349549][T11250] veth0_vlan: left promiscuous mode [ 498.354915][T11250] veth0_vlan: entered promiscuous mode [ 498.360396][T11250] veth0_vlan: left allmulticast mode [ 498.483148][ T4868] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 498.564855][T11100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.573102][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.685157][ T4868] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 498.711181][ T4868] usb 3-1: config 1 has no interface number 1 [ 498.723150][ T4868] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.753242][ T4868] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 498.773525][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 498.780904][T11267] loop3: detected capacity change from 0 to 1764 [ 498.783115][ T4868] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.809253][T11267] iso9660: Unknown parameter 'H5' [ 498.813453][ T4868] usb 3-1: string descriptor 0 read error: -22 [ 498.824423][ T4868] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.831788][T11263] loop0: detected capacity change from 0 to 4096 [ 498.833636][ T4868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.879887][T11263] NILFS (loop0): invalid segment: Checksum error in segment payload [ 498.917434][T11263] NILFS (loop0): trying rollback from an earlier position [ 498.932168][T11100] veth0_vlan: entered promiscuous mode [ 498.936116][T11263] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 498.959661][T11100] veth1_vlan: entered promiscuous mode [ 498.985105][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 28517, setting to 64 [ 498.999121][T11100] veth0_macvtap: entered promiscuous mode [ 499.002826][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 499.009401][T11100] veth1_macvtap: entered promiscuous mode [ 499.042490][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 499.056721][ T25] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 499.084675][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 499.093767][ T4868] usb 3-1: USB disconnect, device number 8 [ 499.100031][ T25] usb 2-1: Manufacturer: syz [ 499.114447][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.131924][ T25] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 499.143153][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.161670][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.172917][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.182919][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.207203][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.224110][T11270] could not allocate digest TFM handle sha256-arm64-neon [ 499.231761][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.260132][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.284978][T11100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.317453][T11276] loop3: detected capacity change from 0 to 512 [ 499.345162][T11276] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 499.362750][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.379999][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.384431][T11276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 499.390506][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.429339][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.449929][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.478198][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.498489][T11279] loop1: detected capacity change from 0 to 512 [ 499.506959][T11100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.520060][T11276] EXT4-fs (loop3): 1 truncate cleaned up [ 499.534913][T11279] EXT4-fs: Mount option(s) incompatible with ext2 [ 499.534972][T11100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.552457][T11276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.590770][T11100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.695603][T11100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.758414][T11277] loop1: detected capacity change from 0 to 1024 [ 499.766184][T11100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.786147][T11100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.815087][T11277] hfsplus: unable to parse mount options [ 499.829171][T11100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.082394][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.104516][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.177804][T11277] loop1: detected capacity change from 0 to 4096 [ 500.206480][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.209571][ T9239] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir1560701887/syzkaller.t3QvFk/113/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 500.288365][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.302397][ T9239] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 500.345417][T11277] ntfs3: loop1: failed to convert "0000" to iso8859-9 [ 500.353499][T11277] ntfs3: loop1: failed to convert name for inode 1e. [ 500.448737][ T9239] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir1560701887/syzkaller.t3QvFk/113/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 500.491893][ T9239] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 500.519539][T11289] loop0: detected capacity change from 0 to 2048 [ 500.603456][ T9239] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir1560701887/syzkaller.t3QvFk/113/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 500.798240][ T9239] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 500.839631][T11296] loop4: detected capacity change from 0 to 8 [ 500.859499][ T9239] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir1560701887/syzkaller.t3QvFk/113/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 500.885520][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.905404][T11296] SQUASHFS error: lzo decompression failed, data probably corrupt [ 500.911205][ T9239] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 500.932935][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.947736][T11296] SQUASHFS error: Failed to read block 0x91: -5 [ 500.956836][ T9239] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir1560701887/syzkaller.t3QvFk/113/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 500.985348][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.993830][T11296] SQUASHFS error: Unable to read metadata cache entry [8f] [ 501.000469][ T9239] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 501.002517][T11296] SQUASHFS error: Unable to read inode 0x11f [ 501.131575][T11300] veth0_vlan: entered allmulticast mode [ 501.264589][T11301] veth0_vlan: left promiscuous mode [ 501.270034][T11301] veth0_vlan: entered promiscuous mode [ 501.275794][T11301] veth0_vlan: left allmulticast mode [ 501.726126][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.736333][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.265397][ T25] usb 2-1: USB disconnect, device number 11 [ 503.376878][T11311] loop4: detected capacity change from 0 to 512 [ 504.291199][T11321] loop4: detected capacity change from 0 to 256 [ 504.338724][T11317] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 504.404226][T11317] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.2'. [ 504.463395][T11317] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 504.843978][ T9239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.476906][T11330] loop1: detected capacity change from 0 to 512 [ 505.501540][ T2445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.513425][T11330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 505.560544][T11330] EXT4-fs (loop1): 1 truncate cleaned up [ 505.593824][T11330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.753185][ T5151] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 505.771606][ T2445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.940669][ T2445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.964596][ T5151] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 505.990772][ T5151] usb 5-1: config 1 has no interface number 1 [ 506.004850][ T5151] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.030892][ T5151] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 506.075075][ T5151] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.120011][ T5151] usb 5-1: string descriptor 0 read error: -22 [ 506.140089][ T5151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.142920][T11340] loop0: detected capacity change from 0 to 1024 [ 506.167102][ T5151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.187951][ T2445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.405812][ T29] audit: type=1804 audit(1718519841.072:330): pid=11340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/" dev="pidfs" ino=11639 res=1 errno=0 [ 507.133482][ T5151] usb 5-1: USB disconnect, device number 19 [ 507.318076][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.329423][ T2445] macvlan3: left allmulticast mode [ 507.355290][T10669] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1115700556/syzkaller.BGQtCn/17/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 507.382288][ T2445] macvlan3: left promiscuous mode [ 507.393250][ T2445] bridge0: port 3(macvlan3) entered disabled state [ 507.401856][T10669] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 507.429731][ T2445] bridge_slave_1: left allmulticast mode [ 507.431883][T10669] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1115700556/syzkaller.BGQtCn/17/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 507.435668][ T2445] bridge_slave_1: left promiscuous mode [ 507.468103][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.468360][T10669] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 507.479530][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 507.517657][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 507.525839][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 507.539927][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 507.547590][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.549208][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 507.577877][ T2445] bridge_slave_0: left allmulticast mode [ 507.586487][T11352] loop4: detected capacity change from 0 to 256 [ 507.589266][ T2445] bridge_slave_0: left promiscuous mode [ 507.595274][T10669] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1115700556/syzkaller.BGQtCn/17/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 507.598880][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.641559][T10669] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 507.664484][T10669] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1115700556/syzkaller.BGQtCn/17/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 507.694799][T10669] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 507.734871][T10669] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1115700556/syzkaller.BGQtCn/17/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 507.773483][T10669] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 507.796532][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.292556][ T2445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.306912][ T2445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.317704][ T2445] bond0 (unregistering): Released all slaves [ 508.330576][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 508.599282][T11367] loop2: detected capacity change from 0 to 64 [ 508.634250][T11367] MINIX-fs: bad superblock or unable to read bitmaps [ 508.820469][ T29] audit: type=1326 audit(1718519843.662:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56c387cea9 code=0x0 [ 509.422889][T10669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.643371][ T5112] Bluetooth: hci1: command tx timeout [ 509.890787][ T2445] hsr_slave_0: left promiscuous mode [ 509.911370][ T2445] hsr_slave_1: left promiscuous mode [ 510.014593][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.041872][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.066147][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.089569][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.153893][T11384] loop4: detected capacity change from 0 to 2048 [ 510.176858][T11384] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 510.181797][ T2445] veth1_macvtap: left promiscuous mode [ 510.231606][T11384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.280480][ T2445] veth0_macvtap: left promiscuous mode [ 510.339006][ T2445] veth1_vlan: left promiscuous mode [ 510.369946][ T2445] veth0_vlan: left promiscuous mode [ 510.977040][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.998600][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 511.018114][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 511.026622][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 511.046143][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 511.054576][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 511.724831][ T5113] Bluetooth: hci1: command tx timeout [ 512.033118][ T5156] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 512.235603][ T5156] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 512.250593][ T5156] usb 5-1: config 1 has no interface number 1 [ 512.264929][ T5156] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.289010][ T5156] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 512.310588][ T5156] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 512.366414][ T5156] usb 5-1: string descriptor 0 read error: -22 [ 512.373187][ T5156] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.390359][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.561317][ T2445] team0 (unregistering): Port device team_slave_1 removed [ 512.827167][ T5156] usb 5-1: USB disconnect, device number 20 [ 512.856294][ T2445] team0 (unregistering): Port device team_slave_0 removed [ 513.165584][ T5113] Bluetooth: hci4: command tx timeout [ 513.617443][ T29] audit: type=1326 audit(1718519847.782:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa38c7cea9 code=0x0 [ 513.778679][T11411] loop2: detected capacity change from 0 to 8 [ 513.786172][T11411] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 513.820162][ T5113] Bluetooth: hci1: command tx timeout [ 514.335874][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 515.247883][ T5113] Bluetooth: hci4: command tx timeout [ 515.296267][T11349] chnl_net:caif_netlink_parms(): no params data found [ 515.479663][T11429] loop4: detected capacity change from 0 to 2048 [ 515.490421][T11429] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 515.529289][T11429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.829493][T11349] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.859091][T11349] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.878533][T11349] bridge_slave_0: entered allmulticast mode [ 515.884889][ T5113] Bluetooth: hci1: command tx timeout [ 515.901532][T11349] bridge_slave_0: entered promiscuous mode [ 515.933832][T11349] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.951524][T11349] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.960229][T11349] bridge_slave_1: entered allmulticast mode [ 515.988314][T11349] bridge_slave_1: entered promiscuous mode [ 516.286930][T11349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.367181][ T2445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.407282][T11441] loop4: detected capacity change from 0 to 64 [ 516.425532][T11349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.449081][T11388] chnl_net:caif_netlink_parms(): no params data found [ 516.495736][T11441] MINIX-fs: bad superblock or unable to read bitmaps [ 516.624679][ T2445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.694716][T11444] loop2: detected capacity change from 0 to 64 [ 516.894938][T11349] team0: Port device team_slave_0 added [ 517.121354][T11444] MINIX-fs: bad superblock or unable to read bitmaps [ 517.166162][ T2445] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.223907][T11349] team0: Port device team_slave_1 added [ 517.333173][ T5113] Bluetooth: hci4: command tx timeout [ 517.761809][ T2445] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.866822][T11446] loop4: detected capacity change from 0 to 32768 [ 517.917231][T11446] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 517.932575][T11446] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 517.976174][T11388] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.006348][T11388] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.013968][T11388] bridge_slave_0: entered allmulticast mode [ 518.021338][T11388] bridge_slave_0: entered promiscuous mode [ 518.033716][T11349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.044505][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.134051][T11446] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 518.153484][T11349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.191322][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 518.198704][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 518.200622][T11349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.219365][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.257394][T11349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.303198][T11388] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.330693][T11388] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.353374][T11388] bridge_slave_1: entered allmulticast mode [ 518.371108][T11388] bridge_slave_1: entered promiscuous mode [ 518.481473][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 282ms [ 518.509626][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 518.532809][T11446] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 518.559593][T11349] hsr_slave_0: entered promiscuous mode [ 518.578889][T11349] hsr_slave_1: entered promiscuous mode [ 518.596849][T11349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.614781][T11349] Cannot create hsr debugfs directory [ 518.715607][T11388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.759841][T11388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.053628][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 519.085382][T11388] team0: Port device team_slave_0 added [ 519.212907][ T2445] bridge_slave_1: left allmulticast mode [ 519.222166][T11467] loop0: detected capacity change from 0 to 512 [ 519.239483][ T2445] bridge_slave_1: left promiscuous mode [ 519.251698][T11467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 519.263374][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.285113][ T2445] bridge_slave_0: left allmulticast mode [ 519.291990][ T2445] bridge_slave_0: left promiscuous mode [ 519.311672][T11467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.335358][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.393276][T11467] ext4 filesystem being mounted at /root/syzkaller-testdir2127629534/syzkaller.M8Lbus/132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.414163][ T5113] Bluetooth: hci4: command tx timeout [ 519.517360][ T9192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.681780][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.418407][T11482] loop4: detected capacity change from 0 to 2048 [ 520.438238][T11482] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 520.463271][T11482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.883383][ T2445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.896098][ T2445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.907538][ T2445] bond0 (unregistering): Released all slaves [ 520.925561][T11388] team0: Port device team_slave_1 added [ 521.178037][T11388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.192298][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.218254][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.243652][T11388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.198626][T11492] veth0_vlan: entered allmulticast mode [ 522.212763][T11388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.248670][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.281025][T11388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.307981][T11493] veth0_vlan: left promiscuous mode [ 522.313351][T11493] veth0_vlan: entered promiscuous mode [ 522.318838][T11493] veth0_vlan: left allmulticast mode [ 522.438357][T11498] loop0: detected capacity change from 0 to 2048 [ 522.464220][T11498] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 522.535549][T11498] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 522.554091][T11498] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 522.574672][T11498] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 522.597827][ T29] audit: type=1800 audit(1718519857.442:333): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 522.622198][T11388] hsr_slave_0: entered promiscuous mode [ 522.641390][T11388] hsr_slave_1: entered promiscuous mode [ 522.656502][T11388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.670938][T11388] Cannot create hsr debugfs directory [ 523.044132][ T2445] hsr_slave_0: left promiscuous mode [ 523.050329][ T2445] hsr_slave_1: left promiscuous mode [ 523.059831][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.068205][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.126122][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.153605][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.212053][ T2445] veth1_macvtap: left promiscuous mode [ 523.218701][ T2445] veth0_macvtap: left promiscuous mode [ 523.225765][ T2445] veth1_vlan: left promiscuous mode [ 523.231169][ T2445] veth0_vlan: left promiscuous mode [ 523.436914][T11504] loop4: detected capacity change from 0 to 64 [ 523.568365][T11504] MINIX-fs: bad superblock or unable to read bitmaps [ 523.701743][T11507] loop0: detected capacity change from 0 to 64 [ 523.783289][T11507] MINIX-fs: bad superblock or unable to read bitmaps [ 525.129064][ T2445] team0 (unregistering): Port device team_slave_1 removed [ 525.245458][T11508] loop4: detected capacity change from 0 to 32768 [ 525.266521][T11508] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 525.267582][ T2445] team0 (unregistering): Port device team_slave_0 removed [ 525.285499][T11508] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 525.344138][T11508] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 27ms [ 525.380594][ T8248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 525.403935][ T8248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 525.554733][ T8248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 150ms [ 525.562532][ T8248] gfs2: fsid=syz:syz.0: jid=0: Done [ 525.593159][T11508] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 525.916881][T11510] loop0: detected capacity change from 0 to 56519 [ 525.933952][T11510] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 525.942206][T11510] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 525.980301][T11510] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 490 [ 526.011580][T11510] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 526.029481][T11510] gfs2: fsid=syz:syz.0: File system withdrawn [ 526.035748][T11510] CPU: 1 PID: 11510 Comm: syz-executor.0 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 526.046259][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 526.056341][T11510] Call Trace: [ 526.059629][T11510] [ 526.062576][T11510] dump_stack_lvl+0x241/0x360 [ 526.067279][T11510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.072499][T11510] ? __pfx__printk+0x10/0x10 [ 526.077110][T11510] ? kobject_uevent_env+0x54d/0x8e0 [ 526.082330][T11510] ? __wait_on_bit+0xf7/0x2f0 [ 526.087040][T11510] gfs2_withdraw+0xefa/0x1460 [ 526.091755][T11510] ? __pfx_gfs2_withdraw+0x10/0x10 [ 526.096891][T11510] ? __pfx_gfs2_lm+0x10/0x10 [ 526.101511][T11510] ? gfs2_meta_read+0x870/0x9b0 [ 526.106473][T11510] ? __pfx_gfs2_meta_read+0x10/0x10 [ 526.111693][T11510] gfs2_meta_check_ii+0x67/0x80 [ 526.116538][T11510] gfs2_meta_buffer+0x325/0x410 [ 526.121459][T11510] ? __pfx_gfs2_meta_buffer+0x10/0x10 [ 526.126820][T11510] gfs2_inode_refresh+0xe0/0xfc0 [ 526.131752][T11510] ? preempt_schedule_thunk+0x1a/0x30 [ 526.137106][T11510] ? __pfx_gfs2_inode_refresh+0x10/0x10 [ 526.142635][T11510] ? gfs2_glock_nq+0x1250/0x1ab0 [ 526.147571][T11510] gfs2_instantiate+0x190/0x260 [ 526.152433][T11510] gfs2_glock_wait+0x1df/0x2b0 [ 526.157192][T11510] gfs2_lookupi+0x3ee/0x5e0 [ 526.161771][T11510] ? __pfx_gfs2_lookupi+0x10/0x10 [ 526.166782][T11510] ? gfs2_lookup_meta+0x100/0x200 [ 526.171804][T11510] ? crc32_le_base+0x7a0/0xd20 [ 526.176582][T11510] gfs2_lookup_meta+0x100/0x200 [ 526.181416][T11510] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 526.186780][T11510] init_journal+0x1bf/0x2420 [ 526.191359][T11510] ? vsnprintf+0x948/0x1da0 [ 526.195874][T11510] ? vsnprintf+0x1ccd/0x1da0 [ 526.200474][T11510] ? __pfx_init_journal+0x10/0x10 [ 526.205491][T11510] ? __pfx_vsnprintf+0x10/0x10 [ 526.210251][T11510] ? init_sb+0xc37/0x1330 [ 526.214596][T11510] ? lockref_put_or_lock+0x75/0xc0 [ 526.219719][T11510] ? snprintf+0xda/0x120 [ 526.223952][T11510] ? __pfx_snprintf+0x10/0x10 [ 526.228620][T11510] init_inodes+0xdc/0x320 [ 526.232936][T11510] gfs2_fill_super+0x1f55/0x2740 [ 526.237872][T11510] ? __pfx_gfs2_fill_super+0x10/0x10 [ 526.243150][T11510] ? snprintf+0xda/0x120 [ 526.247409][T11510] ? __pfx_lock_release+0x10/0x10 [ 526.252439][T11510] ? do_raw_spin_lock+0x14f/0x370 [ 526.257460][T11510] ? __pfx_snprintf+0x10/0x10 [ 526.262129][T11510] ? init_locking+0xbd/0x210 [ 526.266704][T11510] ? sb_set_blocksize+0xb3/0xf0 [ 526.271542][T11510] ? setup_bdev_super+0x4ad/0x570 [ 526.276568][T11510] get_tree_bdev+0x3f7/0x570 [ 526.281155][T11510] ? __pfx_gfs2_fill_super+0x10/0x10 [ 526.286431][T11510] ? __pfx_get_tree_bdev+0x10/0x10 [ 526.291551][T11510] gfs2_get_tree+0x54/0x220 [ 526.296076][T11510] ? bpf_lsm_capable+0x9/0x10 [ 526.300763][T11510] vfs_get_tree+0x90/0x2a0 [ 526.305186][T11510] do_new_mount+0x2be/0xb40 [ 526.309676][T11510] ? __pfx_do_new_mount+0x10/0x10 [ 526.314687][T11510] __se_sys_mount+0x2d9/0x3c0 [ 526.319370][T11510] ? __pfx___se_sys_mount+0x10/0x10 [ 526.324551][T11510] ? do_syscall_64+0x100/0x230 [ 526.329304][T11510] ? __x64_sys_mount+0x20/0xc0 [ 526.334054][T11510] do_syscall_64+0xf3/0x230 [ 526.338544][T11510] ? clear_bhb_loop+0x35/0x90 [ 526.343218][T11510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.349134][T11510] RIP: 0033:0x7f56c387e5aa [ 526.353553][T11510] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 526.373142][T11510] RSP: 002b:00007f56c45e9ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 526.381537][T11510] RAX: ffffffffffffffda RBX: 00007f56c45e9f80 RCX: 00007f56c387e5aa [ 526.389499][T11510] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f56c45e9f40 [ 526.397486][T11510] RBP: 0000000020000000 R08: 00007f56c45e9f80 R09: 0000000000008c1b [ 526.405474][T11510] R10: 0000000000008c1b R11: 0000000000000202 R12: 0000000020000100 [ 526.413427][T11510] R13: 00007f56c45e9f40 R14: 0000000000012767 R15: 0000000020000340 [ 526.421393][T11510] [ 526.455143][T11510] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 526.835490][T11516] loop0: detected capacity change from 0 to 16 [ 526.848300][T11516] erofs: (device loop0): mounted with root inode @ nid 36. [ 527.354591][T11532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.512470][T11540] IPv6: Can't replace route, no match found [ 527.572235][T11545] loop2: detected capacity change from 0 to 64 [ 527.634640][T11545] MINIX-fs: bad superblock or unable to read bitmaps [ 527.646635][T11547] loop4: detected capacity change from 0 to 24 [ 527.721092][T11349] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 527.757542][T11349] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 527.781581][T11349] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 527.835058][T11349] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 527.917220][T11388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 527.948057][T11388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.036021][T11388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.065173][T11388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 528.331701][T11349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.473259][T11349] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.488581][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.495902][ T9295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.326416][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.333534][ T8248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.486599][T11388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.555356][T11388] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.714248][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.721383][ T9295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.779701][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.786885][ T9295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.010755][T11564] loop4: detected capacity change from 0 to 32768 [ 530.044365][T11564] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11564) [ 530.076377][T11349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.119135][T11564] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 530.133985][T11564] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 530.143887][T11564] BTRFS info (device loop4): using free-space-tree [ 530.278879][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.336667][T11564] BTRFS info (device loop4): rebuilding free space tree [ 530.576911][T11349] veth0_vlan: entered promiscuous mode [ 530.676478][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.713927][T11100] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 530.789716][T11349] veth1_vlan: entered promiscuous mode [ 530.990363][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.108061][T11388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.200850][T11349] veth0_macvtap: entered promiscuous mode [ 531.344330][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.420355][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.432781][T11349] veth1_macvtap: entered promiscuous mode [ 531.448068][ T5112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.459230][ T5112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.467763][T11388] veth0_vlan: entered promiscuous mode [ 531.484444][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.504774][ T5112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 531.514922][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 531.535919][T11388] veth1_vlan: entered promiscuous mode [ 531.582803][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.595112][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.605449][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.616370][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.626778][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.637779][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.649815][T11349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.660731][ T25] libceph: connect (1)[c::]:6789 error -101 [ 531.668226][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 531.688023][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.698871][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.708799][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.719714][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.729796][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.740354][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.751870][T11349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.814794][T11600] ceph: No mds server is up or the cluster is laggy [ 531.849861][T11349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.859119][T11349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.875228][T11349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.888940][T11349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.977136][T11596] loop4: detected capacity change from 0 to 32768 [ 532.042922][ T29] audit: type=1800 audit(1718519866.882:334): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 532.048329][T11596] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 532.064465][ T29] audit: type=1800 audit(1718519866.882:335): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 532.088664][T11388] veth0_macvtap: entered promiscuous mode [ 532.102534][T11388] veth1_macvtap: entered promiscuous mode [ 532.144412][ T78] bridge_slave_1: left allmulticast mode [ 532.151041][ T78] bridge_slave_1: left promiscuous mode [ 532.156130][T11596] XFS (loop4): Ending clean mount [ 532.157385][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.177493][T11596] XFS (loop4): Quotacheck needed: Please wait. [ 532.185982][ T78] bridge_slave_0: left allmulticast mode [ 532.194450][ T78] bridge_slave_0: left promiscuous mode [ 532.200714][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.227797][T11596] XFS (loop4): Quotacheck: Done. [ 532.567457][T11100] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 533.192353][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.210161][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.221429][ T78] bond0 (unregistering): Released all slaves [ 533.642368][T11620] loop4: detected capacity change from 0 to 32768 [ 533.651398][ T5113] Bluetooth: hci3: command tx timeout [ 533.926153][T11620] find_entry called with index >= next_index [ 533.959226][T11620] find_entry called with index >= next_index [ 533.999196][T11620] find_entry called with index >= next_index [ 534.061352][T11620] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=49, index = 1 [ 534.061352][T11620] [ 534.085254][T11620] ERROR: (device loop4): remounting filesystem as read-only [ 534.119979][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.139151][T11620] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=49, index = 3 [ 534.139151][T11620] [ 534.160602][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.171767][T11620] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=49, index = 4 [ 534.171767][T11620] [ 534.184731][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.205424][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.230562][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.241103][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.251279][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.261805][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.284119][T11388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.306503][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.317371][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.375803][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.430318][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.501594][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.560951][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.611666][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.664513][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.758269][T11388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.932132][T11388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.958161][T11388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.992616][T11388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.011673][T11388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.165593][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.192084][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.216405][T11597] chnl_net:caif_netlink_parms(): no params data found [ 535.246015][ T78] hsr_slave_0: left promiscuous mode [ 535.252851][ T78] hsr_slave_1: left promiscuous mode [ 535.259703][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.267327][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.275967][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.284544][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.318485][ T78] veth1_macvtap: left promiscuous mode [ 535.325685][ T78] veth0_macvtap: left promiscuous mode [ 535.331324][ T78] veth1_vlan: left promiscuous mode [ 535.741589][ T5113] Bluetooth: hci3: command tx timeout [ 535.751538][T11657] loop2: detected capacity change from 0 to 64 [ 535.789046][T11657] MINIX-fs: bad superblock or unable to read bitmaps [ 536.070768][T11655] loop4: detected capacity change from 0 to 32768 [ 536.089898][T11655] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11655) [ 536.152657][T11655] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 536.168789][T11655] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 536.190254][T11655] BTRFS info (device loop4): using free-space-tree [ 536.351574][ T78] team0 (unregistering): Port device team_slave_1 removed [ 536.367364][T11655] BTRFS info (device loop4): rebuilding free space tree [ 536.546994][ T78] team0 (unregistering): Port device team_slave_0 removed [ 536.578394][T11100] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 537.677802][T11678] loop4: detected capacity change from 0 to 32768 [ 537.782315][T11678] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 537.804304][ T5113] Bluetooth: hci3: command tx timeout [ 537.821120][T11678] XFS (loop4): Ending clean mount [ 537.850518][T11659] loop2: detected capacity change from 0 to 32768 [ 537.880656][T11659] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 537.888963][T11659] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 537.910865][T11659] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 537.938771][ T5151] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 537.950148][ T5151] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 538.011092][T11677] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 538.041487][ T2445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.053051][ T2445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.072127][ T5151] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 538.085103][ T5151] gfs2: fsid=syz:syz.0: jid=0: Done [ 538.092329][T11659] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 538.276382][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.294047][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.353764][T11597] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.359167][T11694] loop3: detected capacity change from 0 to 4096 [ 538.360880][T11597] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.394866][T11597] bridge_slave_0: entered allmulticast mode [ 538.402632][T11597] bridge_slave_0: entered promiscuous mode [ 538.404394][T11694] NILFS (loop3): invalid segment: Checksum error in segment payload [ 538.422042][T11694] NILFS (loop3): trying rollback from an earlier position [ 538.456764][T11597] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.475015][T11597] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.479899][T11694] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 538.493457][T11597] bridge_slave_1: entered allmulticast mode [ 538.500789][T11597] bridge_slave_1: entered promiscuous mode [ 538.602475][ T2432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.614323][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 538.620927][ T2432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.706913][T11597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.720916][T11597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.928704][T11597] team0: Port device team_slave_0 added [ 538.986021][T11597] team0: Port device team_slave_1 added [ 539.138036][T11597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.160981][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.187488][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.214641][T11597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.236236][T11597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.244528][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.270449][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.276934][T11597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.304032][T11100] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 539.422686][T11597] hsr_slave_0: entered promiscuous mode [ 539.476641][T11597] hsr_slave_1: entered promiscuous mode [ 539.512706][T11597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.548324][T11597] Cannot create hsr debugfs directory [ 539.883450][ T5113] Bluetooth: hci3: command tx timeout [ 540.209457][T11711] loop1: detected capacity change from 0 to 256 [ 540.311794][T11711] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 540.373310][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 540.574180][ T25] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 540.585118][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.594349][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.623080][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.637185][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.648600][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.690602][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.716939][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.744794][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.797589][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.810078][T11597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.831576][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.852859][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.856087][T11597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.884158][T11597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.898446][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.924159][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.935532][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.952114][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.952225][T11597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.960175][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.980577][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.017023][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 541.048126][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 541.067166][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.084644][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 541.118007][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 541.129517][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.143604][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 541.158978][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 541.171274][ T25] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 541.188200][ T25] usb 4-1: Product: syz [ 541.192385][ T25] usb 4-1: Manufacturer: syz [ 541.197210][ T25] usb 4-1: SerialNumber: syz [ 541.215271][ T25] usb 4-1: config 0 descriptor?? [ 541.240203][ T25] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 541.434062][ T25] usb 4-1: USB disconnect, device number 12 [ 541.466396][T11597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.470385][ T25] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 541.556499][T11597] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.596013][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.603229][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.608021][T11726] loop2: detected capacity change from 0 to 64 [ 541.632524][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.639707][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.720467][T11726] MINIX-fs: bad superblock or unable to read bitmaps [ 541.785659][T11728] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 542.187291][T11597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.320518][T11597] veth0_vlan: entered promiscuous mode [ 542.355375][T11597] veth1_vlan: entered promiscuous mode [ 542.447759][T11597] veth0_macvtap: entered promiscuous mode [ 542.475018][T11597] veth1_macvtap: entered promiscuous mode [ 542.517399][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.568016][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.597537][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.626665][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.662081][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.699160][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.759155][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.842130][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.917610][T11597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.997723][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.030911][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.101197][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.129719][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.157118][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.242135][ T29] audit: type=1326 audit(1718519878.072:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f641067cea9 code=0x0 [ 543.290173][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.387901][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.432328][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.636958][T11597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.832181][T11597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.039682][T11597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.112206][T11597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.203935][T11597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.581253][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.637919][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.659265][T11754] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.751496][T11754] Cannot find add_set index 0 as target [ 544.809992][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.894155][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.719013][T11768] loop0: detected capacity change from 0 to 7 [ 545.754967][T11768] Dev loop0: unable to read RDB block 7 [ 545.770878][T11768] loop0: unable to read partition table [ 545.813601][T11768] loop0: partition table beyond EOD, truncated [ 545.819806][T11768] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 545.819806][T11768] ) failed (rc=-5) [ 546.044247][T11761] loop0: detected capacity change from 0 to 32768 [ 546.164053][T11761] JFS: block map error in dbBackSplit [ 546.169905][T11761] ERROR: (device loop0): dbDiscardAG: -EIO [ 546.169905][T11761] [ 546.211065][T11761] ERROR: (device loop0): remounting filesystem as read-only [ 546.225382][T11761] syz-executor.0: attempt to access beyond end of device [ 546.225382][T11761] loop0: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768 [ 546.241632][T11761] JFS: sb_issue_discard(ffff888011dbc000, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 546.253987][T11761] blkno = 50400, nblocks = 400 [ 546.258847][T11761] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 546.258847][T11761] [ 546.261330][T11787] loop4: detected capacity change from 0 to 64 [ 546.336352][T11787] MINIX-fs: bad superblock or unable to read bitmaps [ 547.290867][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 547.408220][T11823] IPv6: Can't replace route, no match found [ 547.703972][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 547.844452][T11831] kvm: pic: level sensitive irq not supported [ 547.844795][T11831] kvm: pic: non byte read [ 547.923173][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 547.945824][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.974534][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.012356][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.056313][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.135463][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.164459][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.422545][ T8] usb 4-1: usb_control_msg returned -71 [ 548.439461][ T8] usbtmc 4-1:16.0: can't read capabilities [ 548.478977][ T8] usb 4-1: USB disconnect, device number 13 [ 548.960900][T11855] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.1'. [ 548.999779][T11804] loop4: detected capacity change from 0 to 32768 [ 549.015255][T11804] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 549.039713][T11804] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 549.091364][ T29] audit: type=1804 audit(1718519883.932:337): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3095687256/syzkaller.5DkIeZ/61/bus" dev="sda1" ino=1951 res=1 errno=0 [ 549.128311][T11804] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 549.145410][ T29] audit: type=1800 audit(1718519883.932:338): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 549.166790][ T9295] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 549.184994][ T9295] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 549.403809][ T9295] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 218ms [ 549.421130][ T9295] gfs2: fsid=syz:syz.0: jid=0: Done [ 549.427586][T11804] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 549.471464][T11866] loop1: detected capacity change from 0 to 256 [ 549.557164][T11866] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 550.352566][T11897] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 550.375230][T11897] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 550.400300][T11897] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 550.425645][T11897] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 550.459693][T11897] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 550.488414][T11897] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 550.513575][T11897] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 550.603429][ T5151] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 550.805051][ T5151] usb 2-1: Using ep0 maxpacket: 8 [ 550.826656][ T5151] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 550.849882][ T5151] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 550.907966][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.747836][T11920] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 551.966559][T11917] loop2: detected capacity change from 0 to 32768 [ 551.975476][T11917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11917) [ 551.998530][T11917] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 552.008998][T11925] nbd4: detected capacity change from 0 to 514 [ 552.011085][T11898] syz-executor.0 (11898): drop_caches: 2 [ 552.021816][T11917] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 552.021899][T11917] BTRFS info (device loop2): using free-space-tree [ 552.037779][T11926] block nbd4: Send control failed (result -89) [ 552.046854][T11926] block nbd4: Request send failed, requeueing [ 552.063244][ T5113] block nbd4: Receive control failed (result -32) [ 552.068559][ T1057] block nbd4: Dead connection, failed to find a fallback [ 552.080635][ T1057] block nbd4: shutting down sockets [ 552.086978][ T1057] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.098494][ T1057] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.108843][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.127681][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.139674][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.156940][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.182451][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.202932][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.228187][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.249547][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.286365][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.320984][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.359720][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.369594][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.378882][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.387998][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.393285][T11917] loop2: detected capacity change from 32768 to 11 [ 552.399802][T11947] syz-executor.2: attempt to access beyond end of device [ 552.399802][T11947] loop2: rw=6145, sector=10472, nr_sectors = 8 limit=11 [ 552.413076][T11926] ldm_validate_partition_table(): Disk read failed. [ 552.417587][T11947] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 552.434245][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.440371][T11947] syz-executor.2: attempt to access beyond end of device [ 552.440371][T11947] loop2: rw=6145, sector=10464, nr_sectors = 8 limit=11 [ 552.460227][T11947] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 552.475765][T11947] BTRFS error (device loop2 state AL): Transaction aborted (error -5) [ 552.477617][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.488280][T11947] BTRFS: error (device loop2 state AL) in free_log_tree:3247: errno=-5 IO failure [ 552.506900][T11947] BTRFS info (device loop2 state EAL): forced readonly [ 552.522657][T11947] BTRFS: error (device loop2 state EAL) in free_log_tree:3247: errno=-5 IO failure [ 552.529759][T11926] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.542263][T11947] BTRFS warning (device loop2 state EAL): Skipping commit of aborted transaction. [ 552.553443][T11947] BTRFS: error (device loop2 state EAL) in cleanup_transaction:1999: errno=-5 IO failure [ 552.565182][T11926] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.585420][T11926] Dev nbd4: unable to read RDB block 0 [ 552.603252][T11926] nbd4: unable to read partition table [ 552.662075][T10622] BTRFS info (device loop2 state EAL): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.336395][ T5165] usb 2-1: USB disconnect, device number 12 [ 556.121564][T12030] loop3: detected capacity change from 0 to 2048 [ 556.182180][T12030] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 556.219637][T12030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.136849][T12053] loop2: detected capacity change from 0 to 64 [ 560.196685][T12053] MINIX-fs: bad superblock or unable to read bitmaps [ 560.283999][T12057] loop1: detected capacity change from 0 to 512 [ 560.393402][T12057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.406404][T12057] ext4 filesystem being mounted at /root/syzkaller-testdir2091744402/syzkaller.KNDWBZ/32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 561.207518][T11388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.156910][T12066] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 562.536324][T12066] team0: Port device netdevsim0 added [ 563.176337][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.182692][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 670.742943][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 670.749934][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12096/1:b..l P12093/1:b..l [ 670.760063][ C0] rcu: (detected by 0, t=10502 jiffies, g=58933, q=527 ncpus=2) [ 670.767786][ C0] task:syz-executor.0 state:R running task stack:26224 pid:12093 tgid:12092 ppid:11597 flags:0x00004006 [ 670.781258][ C0] Call Trace: [ 670.784548][ C0] [ 670.787487][ C0] __schedule+0x1796/0x49d0 [ 670.792026][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 670.797076][ C0] ? __pfx___schedule+0x10/0x10 [ 670.801950][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 670.807956][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 670.813260][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 670.818382][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 670.824127][ C0] irqentry_exit+0x5e/0x90 [ 670.828552][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 670.834544][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 670.839840][ C0] Code: 2b 00 74 08 4c 89 f7 e8 ba 3a 86 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 670.859461][ C0] RSP: 0018:ffffc90004367100 EFLAGS: 00000206 [ 670.865629][ C0] RAX: 0000000000000001 RBX: 1ffff9200086ce2c RCX: 0000000000000001 [ 670.873606][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1f2480 [ 670.881587][ C0] RBP: ffffc90004367258 R08: ffffffff92f74587 R09: 1ffffffff25ee8b0 [ 670.889567][ C0] R10: dffffc0000000000 R11: fffffbfff25ee8b1 R12: 1ffff9200086ce28 [ 670.897544][ C0] R13: dffffc0000000000 R14: ffffc90004367160 R15: 0000000000000246 [ 670.905550][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 670.910585][ C0] ? save_stack+0x11f/0x1f0 [ 670.915101][ C0] ? __pfx_save_stack+0x10/0x10 [ 670.919958][ C0] ? post_alloc_hook+0x1f3/0x230 [ 670.924899][ C0] ? get_page_from_freelist+0x2e43/0x2f00 [ 670.930625][ C0] ? __alloc_pages_noprof+0x256/0x6c0 [ 670.936005][ C0] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 670.941644][ C0] ? shmem_alloc_and_add_folio+0x24d/0xdb0 [ 670.947453][ C0] ? shmem_get_folio_gfp+0x82d/0x1f50 [ 670.952836][ C0] ? shmem_write_begin+0x170/0x4d0 [ 670.957950][ C0] ? generic_perform_write+0x322/0x640 [ 670.963415][ C0] ? shmem_file_write_iter+0xfc/0x120 [ 670.968791][ C0] ? vfs_write+0xa72/0xc90 [ 670.973218][ C0] ? ksys_write+0x1a0/0x2c0 [ 670.977730][ C0] ? do_syscall_64+0xf3/0x230 [ 670.982421][ C0] ? page_ext_get+0x20/0x2a0 [ 670.987033][ C0] page_ext_get+0x3d/0x2a0 [ 670.991462][ C0] ? page_ext_get+0x20/0x2a0 [ 670.996080][ C0] __set_page_owner+0x9e/0x800 [ 671.000858][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 671.007460][ C0] ? __pfx_lock_release+0x10/0x10 [ 671.012490][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 671.017868][ C0] ? do_raw_spin_trylock+0xc8/0x1f0 [ 671.023088][ C0] post_alloc_hook+0x1f3/0x230 [ 671.027870][ C0] get_page_from_freelist+0x2e43/0x2f00 [ 671.033475][ C0] ? __alloc_pages_noprof+0x166/0x6c0 [ 671.038875][ C0] ? prepare_alloc_pages+0x369/0x5d0 [ 671.044181][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 671.049394][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 671.055141][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 671.060617][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 671.066620][ C0] ? xas_load+0x59b/0x5c0 [ 671.070968][ C0] ? mpol_shared_policy_lookup+0x148/0x1f0 [ 671.076796][ C0] shmem_alloc_and_add_folio+0x24d/0xdb0 [ 671.082449][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 671.088613][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 671.093663][ C0] shmem_get_folio_gfp+0x82d/0x1f50 [ 671.098912][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 671.104572][ C0] ? fault_in_readable+0x1a6/0x2b0 [ 671.109699][ C0] shmem_write_begin+0x170/0x4d0 [ 671.114650][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 671.120121][ C0] ? fault_in_iov_iter_readable+0x229/0x280 [ 671.126037][ C0] generic_perform_write+0x322/0x640 [ 671.131360][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 671.137183][ C0] ? preempt_count_add+0x93/0x190 [ 671.142228][ C0] ? mnt_put_write_access_file+0xbb/0x100 [ 671.147964][ C0] ? file_update_time+0x3ac/0x3e0 [ 671.153017][ C0] shmem_file_write_iter+0xfc/0x120 [ 671.158226][ C0] vfs_write+0xa72/0xc90 [ 671.162493][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 671.168320][ C0] ? __pfx_vfs_write+0x10/0x10 [ 671.173119][ C0] ksys_write+0x1a0/0x2c0 [ 671.177474][ C0] ? __pfx_ksys_write+0x10/0x10 [ 671.182345][ C0] ? exc_page_fault+0x590/0x8c0 [ 671.187216][ C0] ? do_syscall_64+0xb6/0x230 [ 671.191912][ C0] do_syscall_64+0xf3/0x230 [ 671.196439][ C0] ? clear_bhb_loop+0x35/0x90 [ 671.201140][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.207053][ C0] RIP: 0033:0x7f8f5ea7bbef [ 671.211577][ C0] RSP: 002b:00007f8f5e5fee80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 671.220002][ C0] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f8f5ea7bbef [ 671.227965][ C0] RDX: 0000000000100000 RSI: 00007f8f54800000 RDI: 0000000000000003 [ 671.235927][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000c37 [ 671.243892][ C0] R10: 00000000000007c8 R11: 0000000000000293 R12: 0000000000000003 [ 671.251851][ C0] R13: 00007f8f5e5fef80 R14: 00007f8f5e5fef40 R15: 00007f8f54800000 [ 671.259906][ C0] [ 671.262922][ C0] task:syz-executor.1 state:R running task stack:26816 pid:12096 tgid:12088 ppid:11388 flags:0x00000006 [ 671.274646][ C0] Call Trace: [ 671.277913][ C0] [ 671.280836][ C0] __schedule+0x1796/0x49d0 [ 671.285350][ C0] ? __pfx___schedule+0x10/0x10 [ 671.290195][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 671.296177][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 671.301459][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 671.306564][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 671.312292][ C0] irqentry_exit+0x5e/0x90 [ 671.316700][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 671.322672][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 671.328815][ C0] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 671.348406][ C0] RSP: 0018:ffffc90004247758 EFLAGS: 00000246 [ 671.354461][ C0] RAX: ffffffff8b78f694 RBX: ffffc90004247838 RCX: ffff888051930000 [ 671.362424][ C0] RDX: ffffc9000ed89000 RSI: 00000000000093c5 RDI: ffffc90004247820 [ 671.370396][ C0] RBP: dffffc0000000000 R08: ffffffff81cc7d38 R09: 1ffffffff25ee8b0 [ 671.378352][ C0] R10: dffffc0000000000 R11: fffffbfff25ee8b1 R12: ffffc90004247820 [ 671.386307][ C0] R13: 1ffff92000848f00 R14: ffffffff81cc7d07 R15: dffffc0000000000 [ 671.394268][ C0] ? filemap_get_entry+0x127/0x4e0 [ 671.399370][ C0] ? filemap_get_entry+0x158/0x4e0 [ 671.404553][ C0] ? xas_load+0x24/0x5c0 [ 671.408786][ C0] xas_load+0x24/0x5c0 [ 671.412840][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 671.417685][ C0] ? filemap_get_entry+0x127/0x4e0 [ 671.422777][ C0] filemap_get_entry+0x1fe/0x4e0 [ 671.427701][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 671.433156][ C0] shmem_get_folio_gfp+0x2a8/0x1f50 [ 671.438358][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 671.443989][ C0] ? fault_in_readable+0x1a6/0x2b0 [ 671.449090][ C0] shmem_write_begin+0x170/0x4d0 [ 671.454016][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 671.459463][ C0] ? fault_in_iov_iter_readable+0x229/0x280 [ 671.465364][ C0] generic_perform_write+0x322/0x640 [ 671.470657][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 671.476456][ C0] ? __pfx_generic_write_checks+0x10/0x10 [ 671.482167][ C0] ? rcu_read_lock_any_held+0xb7/0x160 [ 671.487620][ C0] ? file_update_time+0x2a3/0x3e0 [ 671.492634][ C0] shmem_file_write_iter+0xfc/0x120 [ 671.497831][ C0] vfs_write+0xa72/0xc90 [ 671.502074][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 671.507873][ C0] ? __pfx_vfs_write+0x10/0x10 [ 671.512647][ C0] ksys_write+0x1a0/0x2c0 [ 671.516979][ C0] ? __pfx_ksys_write+0x10/0x10 [ 671.521819][ C0] ? exc_page_fault+0x590/0x8c0 [ 671.526659][ C0] ? do_syscall_64+0xb6/0x230 [ 671.531326][ C0] do_syscall_64+0xf3/0x230 [ 671.535818][ C0] ? clear_bhb_loop+0x35/0x90 [ 671.540485][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.546368][ C0] RIP: 0033:0x7f953787bbef [ 671.550769][ C0] RSP: 002b:00007f953853ae80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 671.559173][ C0] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f953787bbef [ 671.567130][ C0] RDX: 0000000000040000 RSI: 00007f952d600000 RDI: 000000000000000b [ 671.575086][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000044c [ 671.583060][ C0] R10: 00000000000003ba R11: 0000000000000293 R12: 000000000000000b [ 671.591016][ C0] R13: 00007f953853af80 R14: 00007f953853af40 R15: 00007f952d600000 [ 671.598992][ C0] [ 671.601999][ C0] rcu: rcu_preempt kthread starved for 10587 jiffies! g58933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 671.613177][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 671.623129][ C0] rcu: RCU grace-period kthread stack dump: [ 671.628996][ C0] task:rcu_preempt state:R running task stack:26008 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 671.640714][ C0] Call Trace: [ 671.643979][ C0] [ 671.646897][ C0] __schedule+0x1796/0x49d0 [ 671.651407][ C0] ? __pfx___schedule+0x10/0x10 [ 671.656270][ C0] ? __pfx_lock_release+0x10/0x10 [ 671.661292][ C0] ? __asan_memset+0x23/0x50 [ 671.665895][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 671.671700][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 671.678020][ C0] ? schedule+0x90/0x320 [ 671.682268][ C0] schedule+0x14b/0x320 [ 671.686417][ C0] schedule_timeout+0x1be/0x310 [ 671.691260][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 671.696626][ C0] ? __pfx_process_timeout+0x10/0x10 [ 671.701910][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 671.707454][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 671.712302][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 671.717229][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 671.723282][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 671.728548][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 671.734434][ C0] ? finish_swait+0xd4/0x1e0 [ 671.739009][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 671.743589][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 671.748777][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 671.754660][ C0] ? __kthread_parkme+0x169/0x1d0 [ 671.759674][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 671.764856][ C0] kthread+0x2f0/0x390 [ 671.768911][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 671.774093][ C0] ? __pfx_kthread+0x10/0x10 [ 671.778671][ C0] ret_from_fork+0x4b/0x80 [ 671.783076][ C0] ? __pfx_kthread+0x10/0x10 [ 671.787652][ C0] ret_from_fork_asm+0x1a/0x30 [ 671.792413][ C0] [ 671.795418][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 671.801739][ C0] Sending NMI from CPU 0 to CPUs 1: [ 671.806941][ C1] NMI backtrace for cpu 1 [ 671.806953][ C1] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 671.806970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 671.806979][ C1] Workqueue: events_unbound toggle_allocation_gate [ 671.807000][ C1] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 671.807022][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 99 09 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 44 05 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 28 05 [ 671.807034][ C1] RSP: 0018:ffffc90000ab7700 EFLAGS: 00000293 [ 671.807046][ C1] RAX: ffffffff818a20e8 RBX: 1ffff11017288c11 RCX: ffff88801b2d3c00 [ 671.807058][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 671.807067][ C1] RBP: ffffc90000ab78e0 R08: ffffffff818a20b7 R09: 1ffffffff25ee8b0 [ 671.807078][ C1] R10: dffffc0000000000 R11: fffffbfff25ee8b1 R12: dffffc0000000000 [ 671.807090][ C1] R13: ffff8880b9446088 R14: ffff8880b953f8c0 R15: 0000000000000000 [ 671.807101][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 671.807114][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 671.807124][ C1] CR2: 000000000147a3f8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 671.807137][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 671.807146][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 671.807156][ C1] Call Trace: [ 671.807161][ C1] [ 671.807168][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 671.807188][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 671.807211][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 671.807230][ C1] ? nmi_handle+0x2a/0x5a0 [ 671.807258][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 671.807275][ C1] ? nmi_handle+0x14f/0x5a0 [ 671.807294][ C1] ? nmi_handle+0x2a/0x5a0 [ 671.807314][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 671.807334][ C1] ? default_do_nmi+0x63/0x160 [ 671.807354][ C1] ? exc_nmi+0x123/0x1f0 [ 671.807373][ C1] ? end_repeat_nmi+0xf/0x53 [ 671.807394][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 671.807413][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 671.807433][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 671.807453][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 671.807473][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 671.807492][ C1] [ 671.807498][ C1] [ 671.807504][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 671.807525][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 671.807540][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 671.807565][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 671.807586][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 671.807605][ C1] ? __pfx___might_resched+0x10/0x10 [ 671.807622][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 671.807641][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 671.807662][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 671.807678][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 671.807698][ C1] text_poke_bp_batch+0x352/0xb30 [ 671.807721][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 671.807737][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 671.807760][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 671.807783][ C1] text_poke_finish+0x30/0x50 [ 671.807798][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 671.807815][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 671.807837][ C1] static_key_enable+0x1a/0x20 [ 671.807856][ C1] toggle_allocation_gate+0xb5/0x250 [ 671.807871][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 671.807887][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 671.807909][ C1] ? process_scheduled_works+0x945/0x1830 [ 671.807924][ C1] process_scheduled_works+0xa2c/0x1830 [ 671.807954][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 671.807974][ C1] ? assign_work+0x364/0x3d0 [ 671.807991][ C1] worker_thread+0x86d/0xd70 [ 671.808011][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 671.808031][ C1] ? __kthread_parkme+0x169/0x1d0 [ 671.808049][ C1] ? __pfx_worker_thread+0x10/0x10 [ 671.808064][ C1] kthread+0x2f0/0x390 [ 671.808080][ C1] ? __pfx_worker_thread+0x10/0x10 [ 671.808095][ C1] ? __pfx_kthread+0x10/0x10 [ 671.808112][ C1] ret_from_fork+0x4b/0x80 [ 671.808129][ C1] ? __pfx_kthread+0x10/0x10 [ 671.808145][ C1] ret_from_fork_asm+0x1a/0x30 [ 671.808173][ C1]