last executing test programs: 48.805047144s ago: executing program 4 (id=382): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80047437, 0xffefff1f00000000) 48.676005895s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x1040000, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r5, 0xa29, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r7, 0x9, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) mount$cgroup(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x814001, &(0x7f0000000980)={[], [{@uid_eq}]}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@inlinecrypt}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) socket(0xa, 0x2, 0x0) fchown(r8, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 47.247901867s ago: executing program 4 (id=388): socket$pppoe(0x18, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601010000000000000000eb7af834050005000a000000050004000000000014000780080006400000000008000840000000f00900020073797a3000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 44.091904807s ago: executing program 4 (id=414): r0 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000000, r1) 43.9497205s ago: executing program 4 (id=417): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000280)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@fsync_mode_posix}, {@discard_unit_segment}, {@background_gc_on}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@atgc}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0x36ce}}]}, 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = dup(r1) pwritev2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, &(0x7f0000000640)=0xe000, 0xd8c2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x20000) fallocate(r0, 0x20, 0x0, 0x2000) 42.605429244s ago: executing program 4 (id=427): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) socket(0x23, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 34.318602706s ago: executing program 2 (id=456): syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x4, 'zN'}]}}}}}}}, 0x0) 34.212971505s ago: executing program 2 (id=457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) write$UHID_CREATE2(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011d24d8e78b100000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000001500080002000000400000005f0000000800000045638045add89869a2bf2f0832d2c67ed7b4fa406a"], 0x12d) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "5ef40e7ab852acb6", "582f7cccfda6a677c372675d88becd932053048ac5a438b0e48fdb55bdc83053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) 30.966861894s ago: executing program 2 (id=466): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 30.914506179s ago: executing program 0 (id=467): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 30.798674009s ago: executing program 2 (id=468): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240)) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0, 0x0, 0xfffffffffffffd4c) socket$nl_netfilter(0x10, 0x3, 0xc) 30.695429419s ago: executing program 0 (id=469): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6f}, &(0x7f0000000140)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, 0x0, 0x0) 30.320362463s ago: executing program 0 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x2, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 30.189549715s ago: executing program 0 (id=472): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) 30.072726246s ago: executing program 0 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.059776497s ago: executing program 3 (id=474): r0 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000000, r1) 29.890108673s ago: executing program 0 (id=475): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) write$UHID_CREATE2(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011d24d8e78b100000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000001500080002000000400000005f0000000800000045638045add89869a2bf2f0832d2c67ed7b4fa406a"], 0x12d) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "5ef40e7ab852acb6", "582f7cccfda6a677c372675d88becd932053048ac5a438b0e48fdb55bdc83053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) 29.80920664s ago: executing program 3 (id=476): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6f}, &(0x7f0000000140)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0x200, 0x8000, 0x9, 0x2, 0x7fffffff, 0x7, 0x1, r1}, 0x20) sendto$inet6(r2, &(0x7f00000000c0)="044aac", 0x3, 0x20000845, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB]) 28.843714239s ago: executing program 3 (id=478): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 28.773254465s ago: executing program 2 (id=479): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000340)={[{@utf8no}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}]}, 0x2, 0x217, &(0x7f00000004c0)="$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") fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365722efa"], 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 28.672173394s ago: executing program 3 (id=480): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6f}, &(0x7f0000000140)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, 0x0, 0x0) 28.373958392s ago: executing program 3 (id=481): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) 28.268576122s ago: executing program 3 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x1040000, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r5, 0xa29, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r7, 0x9, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) mount$cgroup(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x814001, &(0x7f0000000980)={[], [{@uid_eq}]}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@inlinecrypt}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) socket(0xa, 0x2, 0x0) fchown(r8, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 28.217934046s ago: executing program 2 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d4bc096add53bdf40042f5ea2cbcbff7eb51c2d1cef517fb350794d2df04b9a6"}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "118d02ec66a76eb5165661f1790c8a211066a2231237e0141a2ee6d1638fe56c"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x2, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 3.636722796s ago: executing program 1 (id=521): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) 3.548895724s ago: executing program 1 (id=522): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6f}, &(0x7f0000000140)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, 0x0, 0x0) 2.494015591s ago: executing program 1 (id=523): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[]) 2.199667518s ago: executing program 1 (id=524): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@err_ro}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 718.818064ms ago: executing program 1 (id=525): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000001200)="$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") syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x6a) syz_80211_join_ibss(0x0, &(0x7f0000000240)=@default_ibss_ssid, 0x6, 0x0) r4 = accept(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") llistxattr(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x1403, 0x403, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}}, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40240, 0x0) syz_open_pts(r5, 0xc041) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r7, 0x80047437, 0xffefff1f00000000) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): 63.639366][ T4400] Injecting memory failure for pfn 0x13480e at process virtual address 0x2059c000 [ 63.641853][ T4608] loop0: detected capacity change from 0 to 40427 [ 63.645447][ T4518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.653417][ T4400] Memory failure: 0x13480e: recovery action for dirty LRU page: Recovered [ 63.661039][ T4400] Injecting memory failure for pfn 0x13480f at process virtual address 0x2059d000 [ 63.672511][ T4400] Memory failure: 0x13480f: recovery action for dirty LRU page: Recovered [ 63.674650][ T4608] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 63.678857][ T4400] Injecting memory failure for pfn 0x134810 at process virtual address 0x2059e000 [ 63.681273][ T4608] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.690516][ T4518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.752511][ T4400] Memory failure: 0x134810: recovery action for dirty LRU page: Recovered [ 63.754274][ T4400] Injecting memory failure for pfn 0x134811 at process virtual address 0x2059f000 [ 63.757997][ T4400] Memory failure: 0x134811: recovery action for dirty LRU page: Recovered [ 63.759821][ T4400] Injecting memory failure for pfn 0x134812 at process virtual address 0x205a0000 [ 63.761743][ T4608] F2FS-fs (loop0): invalid crc value [ 63.772491][ T4400] Memory failure: 0x134812: recovery action for dirty LRU page: Recovered [ 63.774254][ T4400] Injecting memory failure for pfn 0x134813 at process virtual address 0x205a1000 [ 63.776191][ T4400] Memory failure: 0x134813: recovery action for dirty LRU page: Recovered [ 63.778037][ T4400] Injecting memory failure for pfn 0x134814 at process virtual address 0x205a2000 [ 63.789049][ T4400] Memory failure: 0x134814: recovery action for dirty LRU page: Recovered [ 63.791134][ T4400] Injecting memory failure for pfn 0x134815 at process virtual address 0x205a3000 [ 63.797753][ T4608] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.802662][ T4400] Memory failure: 0x134815: recovery action for dirty LRU page: Recovered [ 63.822359][ T4400] Injecting memory failure for pfn 0x134816 at process virtual address 0x205a4000 [ 63.830670][ T4400] Memory failure: 0x134816: recovery action for dirty LRU page: Recovered [ 63.834614][ T4400] Injecting memory failure for pfn 0x134817 at process virtual address 0x205a5000 [ 63.848513][ T4400] Memory failure: 0x134817: recovery action for dirty LRU page: Recovered [ 63.850723][ T4400] Injecting memory failure for pfn 0x134818 at process virtual address 0x205a6000 [ 63.859708][ T4400] Memory failure: 0x134818: recovery action for dirty LRU page: Recovered [ 63.861673][ T4518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.892500][ T134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.895273][ T134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.895741][ T4400] Injecting memory failure for pfn 0x134819 at process virtual address 0x205a7000 [ 63.896843][ T4608] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.900580][ T4608] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.906346][ T4518] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.941918][ T4400] Memory failure: 0x134819: recovery action for dirty LRU page: Recovered [ 63.943514][ T4608] syz.0.64: attempt to access beyond end of device [ 63.943514][ T4608] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 63.943861][ T4400] Injecting memory failure for pfn 0x13481a at process virtual address 0x205a8000 [ 63.949774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.951943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.954608][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.956238][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.958099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.981351][ T4400] Memory failure: 0x13481a: recovery action for dirty LRU page: Recovered [ 63.990032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.991889][ T4400] Injecting memory failure for pfn 0x13481b at process virtual address 0x205a9000 [ 63.999440][ T4614] loop1: detected capacity change from 0 to 32768 [ 64.001887][ T4615] loop2: detected capacity change from 0 to 32768 [ 64.018395][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.019055][ T4400] Memory failure: 0x13481b: recovery action for dirty LRU page: Recovered [ 64.020037][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.023567][ T4400] Injecting memory failure for pfn 0x13481c at process virtual address 0x205aa000 [ 64.026450][ T4400] Memory failure: 0x13481c: recovery action for dirty LRU page: Recovered [ 64.028219][ T4400] Injecting memory failure for pfn 0x13481d at process virtual address 0x205ab000 [ 64.030190][ T4400] Memory failure: 0x13481d: recovery action for dirty LRU page: Recovered [ 64.031930][ T4400] Injecting memory failure for pfn 0x13481e at process virtual address 0x205ac000 [ 64.032042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.052954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.063697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.064934][ T4400] Memory failure: 0x13481e: recovery action for dirty LRU page: Recovered [ 64.067078][ T4400] Injecting memory failure for pfn 0x13481f at process virtual address 0x205ad000 [ 64.069912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.079696][ T4400] Memory failure: 0x13481f: recovery action for dirty LRU page: Recovered [ 64.081409][ T4400] Injecting memory failure for pfn 0x134820 at process virtual address 0x205ae000 [ 64.085788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.085918][ T4614] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 64.085918][ T4614] [ 64.099092][ T4615] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.101703][ T4400] Memory failure: 0x134820: recovery action for dirty LRU page: Recovered [ 64.102756][ T4615] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 64.106180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.108678][ T4614] ERROR: (device loop1): remounting filesystem as read-only [ 64.112152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.114797][ T4615] BTRFS info (device loop2): using free space tree [ 64.118889][ T4614] ERROR: (device loop1): diWrite: ixpxd invalid [ 64.118889][ T4614] [ 64.121071][ T4400] Injecting memory failure for pfn 0x134821 at process virtual address 0x205af000 [ 64.130033][ T4518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.134460][ T4614] ERROR: (device loop1): txAbort: [ 64.134460][ T4614] [ 64.136340][ T4400] Memory failure: 0x134821: recovery action for dirty LRU page: Recovered [ 64.138074][ T4400] Injecting memory failure for pfn 0x134822 at process virtual address 0x205b0000 [ 64.143580][ T4518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.154830][ T4400] Memory failure: 0x134822: recovery action for dirty LRU page: Recovered [ 64.155721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.156785][ T4400] Injecting memory failure for pfn 0x134823 at process virtual address 0x205b1000 [ 64.161142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.164083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.164504][ T4400] Memory failure: 0x134823: recovery action for dirty LRU page: Recovered [ 64.174195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.180946][ T4400] Injecting memory failure for pfn 0x134824 at process virtual address 0x205b2000 [ 64.191078][ T4400] Memory failure: 0x134824: recovery action for dirty LRU page: Recovered [ 64.193815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.195618][ T4400] Injecting memory failure for pfn 0x134825 at process virtual address 0x205b3000 [ 64.199867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.204113][ T4400] Memory failure: 0x134825: recovery action for dirty LRU page: Recovered [ 64.206231][ T4400] Injecting memory failure for pfn 0x134826 at process virtual address 0x205b4000 [ 64.215180][ T4400] Memory failure: 0x134826: recovery action for dirty LRU page: Recovered [ 64.217128][ T4400] Injecting memory failure for pfn 0x134827 at process virtual address 0x205b5000 [ 64.219504][ T4400] Memory failure: 0x134827: recovery action for dirty LRU page: Recovered [ 64.249068][ T4400] Injecting memory failure for pfn 0x134828 at process virtual address 0x205b6000 [ 64.270828][ T4400] Memory failure: 0x134828: recovery action for dirty LRU page: Recovered [ 64.289694][ T4400] Injecting memory failure for pfn 0x134829 at process virtual address 0x205b7000 [ 64.302489][ T4400] Memory failure: 0x134829: recovery action for dirty LRU page: Recovered [ 64.304363][ T4400] Injecting memory failure for pfn 0x13482a at process virtual address 0x205b8000 [ 64.310540][ T4400] Memory failure: 0x13482a: recovery action for dirty LRU page: Recovered [ 64.340509][ T4400] Injecting memory failure for pfn 0x13482b at process virtual address 0x205b9000 [ 64.356318][ T4400] Memory failure: 0x13482b: recovery action for dirty LRU page: Recovered [ 64.358059][ T4400] Injecting memory failure for pfn 0x13482c at process virtual address 0x205ba000 [ 64.360023][ T4400] Memory failure: 0x13482c: recovery action for dirty LRU page: Recovered [ 64.361893][ T4400] Injecting memory failure for pfn 0x13482d at process virtual address 0x205bb000 [ 64.387370][ T4400] Memory failure: 0x13482d: recovery action for dirty LRU page: Recovered [ 64.389295][ T4400] Injecting memory failure for pfn 0x13482e at process virtual address 0x205bc000 [ 64.391285][ T4615] BTRFS info (device loop2): enabling ssd optimizations [ 64.420988][ T4400] Memory failure: 0x13482e: recovery action for dirty LRU page: Recovered [ 64.442170][ T4400] Injecting memory failure for pfn 0x13482f at process virtual address 0x205bd000 [ 64.469092][ T4400] Memory failure: 0x13482f: recovery action for dirty LRU page: Recovered [ 64.470852][ T4400] Injecting memory failure for pfn 0x134830 at process virtual address 0x205be000 [ 64.523114][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.524748][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.611572][ T4400] Memory failure: 0x134830: recovery action for dirty LRU page: Recovered [ 64.613676][ T4400] Injecting memory failure for pfn 0x134831 at process virtual address 0x205bf000 [ 64.623243][ T4400] Memory failure: 0x134831: recovery action for dirty LRU page: Recovered [ 64.625076][ T4400] Injecting memory failure for pfn 0x134832 at process virtual address 0x205c0000 [ 64.631807][ T4400] Memory failure: 0x134832: recovery action for dirty LRU page: Recovered [ 64.634454][ T4400] Injecting memory failure for pfn 0x134833 at process virtual address 0x205c1000 [ 64.636722][ T4400] Memory failure: 0x134833: recovery action for dirty LRU page: Recovered [ 64.639279][ T4400] Injecting memory failure for pfn 0x134834 at process virtual address 0x205c2000 [ 64.641477][ T4400] Memory failure: 0x134834: recovery action for dirty LRU page: Recovered [ 64.643650][ T4400] Injecting memory failure for pfn 0x134835 at process virtual address 0x205c3000 [ 64.646102][ T4400] Memory failure: 0x134835: recovery action for dirty LRU page: Recovered [ 64.647895][ T4400] Injecting memory failure for pfn 0x134836 at process virtual address 0x205c4000 [ 64.650104][ T4400] Memory failure: 0x134836: recovery action for dirty LRU page: Recovered [ 64.651974][ T4400] Injecting memory failure for pfn 0x134837 at process virtual address 0x205c5000 [ 64.658457][ T4651] loop1: detected capacity change from 0 to 128 [ 64.658812][ T4623] loop4: detected capacity change from 0 to 32768 [ 64.664007][ T4651] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 64.664340][ T4400] Memory failure: 0x134837: recovery action for dirty LRU page: Recovered [ 64.667791][ T4400] Injecting memory failure for pfn 0x134838 at process virtual address 0x205c6000 [ 64.668013][ T4651] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 65.103020][ T4400] Memory failure: 0x134838: recovery action for dirty LRU page: Recovered [ 65.109122][ T4400] Injecting memory failure for pfn 0x134839 at process virtual address 0x205c7000 [ 65.114498][ T4400] Memory failure: 0x134839: recovery action for dirty LRU page: Recovered [ 65.121216][ T4400] Injecting memory failure for pfn 0x13483a at process virtual address 0x205c8000 [ 65.131951][ T4400] Memory failure: 0x13483a: recovery action for dirty LRU page: Recovered [ 65.140387][ T4400] Injecting memory failure for pfn 0x13483b at process virtual address 0x205c9000 [ 65.148117][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.165593][ T4623] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 65.286872][ T4400] Memory failure: 0x13483b: recovery action for dirty LRU page: Recovered [ 65.288785][ T4400] Injecting memory failure for pfn 0x13483c at process virtual address 0x205ca000 [ 65.292024][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.294634][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.296957][ T4400] Memory failure: 0x13483c: recovery action for dirty LRU page: Recovered [ 65.299000][ T4400] Injecting memory failure for pfn 0x13483d at process virtual address 0x205cb000 [ 65.307742][ T4518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.319947][ T4300] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.323442][ T4400] Memory failure: 0x13483d: recovery action for dirty LRU page: Recovered [ 65.325213][ T4400] Injecting memory failure for pfn 0x13483e at process virtual address 0x205cc000 [ 65.327260][ T4400] Memory failure: 0x13483e: recovery action for dirty LRU page: Recovered [ 65.411325][ T4400] Injecting memory failure for pfn 0x13483f at process virtual address 0x205cd000 [ 65.556894][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.559670][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.575639][ T4294] ocfs2: Unmounting device (7,4) on (node local) [ 65.660155][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.664669][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.671005][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.677723][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.722160][ T4518] device veth0_vlan entered promiscuous mode [ 65.765485][ T4518] device veth1_vlan entered promiscuous mode [ 65.873993][ T4400] Memory failure: 0x13483f: recovery action for dirty LRU page: Recovered [ 65.876025][ T4400] Injecting memory failure for pfn 0x134840 at process virtual address 0x205ce000 [ 65.895592][ T4400] Memory failure: 0x134840: recovery action for dirty LRU page: Recovered [ 65.897357][ T4400] Injecting memory failure for pfn 0x134841 at process virtual address 0x205cf000 [ 65.905173][ T4663] loop4: detected capacity change from 0 to 128 [ 65.911289][ T4663] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 65.916203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.918456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.920778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.921958][ T4663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.939961][ T4400] Memory failure: 0x134841: recovery action for dirty LRU page: Recovered [ 65.941877][ T4400] Injecting memory failure for pfn 0x134842 at process virtual address 0x205d0000 [ 65.951283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.956808][ T4518] device veth0_macvtap entered promiscuous mode [ 65.970650][ T4518] device veth1_macvtap entered promiscuous mode [ 65.976995][ T4400] Memory failure: 0x134842: recovery action for dirty LRU page: Recovered [ 65.978819][ T4400] Injecting memory failure for pfn 0x134843 at process virtual address 0x205d1000 [ 65.980806][ T4400] Memory failure: 0x134843: recovery action for dirty LRU page: Recovered [ 65.993027][ T4400] Injecting memory failure for pfn 0x134844 at process virtual address 0x205d2000 [ 66.016553][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.021216][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.029152][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.031394][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.049698][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.051920][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.108524][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.110771][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.117532][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.119692][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.127090][ T4400] Memory failure: 0x134844: recovery action for dirty LRU page: Recovered [ 66.128994][ T4400] Injecting memory failure for pfn 0x134845 at process virtual address 0x205d3000 [ 66.168570][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.190385][ T4666] loop1: detected capacity change from 0 to 2048 [ 66.202153][ T4666] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.234454][ T4666] syz.1.74: attempt to access beyond end of device [ 66.234454][ T4666] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 66.241470][ T4666] syz.1.74: attempt to access beyond end of device [ 66.241470][ T4666] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 66.244400][ T4666] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 66.247169][ T4666] vivid-000: disconnect [ 66.250780][ T4668] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.256314][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.267200][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.282201][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.297273][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.311814][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.326505][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.340618][ T4669] 9pnet_fd: Insufficient options for proto=fd [ 66.350773][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.366973][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.383368][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.398447][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.430799][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.582836][ T4400] Memory failure: 0x134845: recovery action for dirty LRU page: Recovered [ 66.592804][ T4400] Injecting memory failure for pfn 0x134846 at process virtual address 0x205d4000 [ 66.601480][ T4400] Memory failure: 0x134846: recovery action for dirty LRU page: Recovered [ 66.602472][ T4518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.605165][ T4518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.606931][ T4518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607382][ T4400] Injecting memory failure for pfn 0x134847 at process virtual address 0x205d5000 [ 66.608719][ T4518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.612818][ T4400] Memory failure: 0x134847: recovery action for dirty LRU page: Recovered [ 66.614631][ T4400] Injecting memory failure for pfn 0x134848 at process virtual address 0x205d6000 [ 66.620211][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.626048][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.628007][ T4400] Memory failure: 0x134848: recovery action for dirty LRU page: Recovered [ 66.636276][ T4400] Injecting memory failure for pfn 0x134849 at process virtual address 0x205d7000 [ 66.639792][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.760193][ T4661] vivid-000: reconnect [ 66.777322][ T4673] ptrace attach of "./syz-executor exec"[4300] was attempted by "0WN|\x1bZm\x07`ΞG8h=$G`TƵ>-(̤in$HnJ9^܍ K)i\x22c^\x22AӒW8*( +|B x\x0a@U\x0cV7\x1bTi⁺nǛd m\x1b\x1b1F#L*3jB1.=n\x1bO\x0a\x07EA7L{R} gէW5JSzb4l@ޤ}[,UR@ފa\x0b{NB9{*/{+&CCŇiwaY&QF+18<`e_OS9B~;T/Zd6^\x09*:#YUD,lD S‰4BH[YbՃ#\x0dO ~K\x07QDР6$ak~hsHa\x07Y_%`e\x22C܏*vDqdR}79] x0p{]%. m=5׷_ElR8\x5c1c\x0aӹv&e3Q\x0cVU+kl)q)^Nw!m)!W\x07@TINY3-xUx#IE\x0c̹4~czͭoxD@\x0c-o>w\x0auN/c0 \x0cZ)杯H\x22UP/|Q2(rf~j6^Gvįe\x0aT 1 [ 75.460876][ T4304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.464772][ T4304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.467324][ T4304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.469484][ T4304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.471314][ T4304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.493354][ T4477] [ 75.493354][ T4477] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.493354][ T4477] [ 75.495646][ T4477] [ 75.495646][ T4477] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.495646][ T4477] [ 75.499118][ T92] [ 75.499118][ T92] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.499118][ T92] [ 75.502004][ T4518] [ 75.502004][ T4518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.502004][ T4518] [ 75.506016][ T4518] [ 75.506016][ T4518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.506016][ T4518] [ 75.522080][ T4384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.535278][ T4763] vivid-000: reconnect [ 75.541604][ T4775] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 75.598820][ T4775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.807160][ T4384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.887828][ T4785] loop0: detected capacity change from 0 to 1024 [ 76.025963][ T4384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.080757][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.087433][ T4785] siw: device registration error -23 [ 76.399991][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 76.584972][ T4304] Bluetooth: hci5: command tx timeout [ 76.917971][ T4776] chnl_net:caif_netlink_parms(): no params data found [ 77.251801][ T4815] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 77.897720][ T4311] Bluetooth: hci3: command tx timeout [ 78.195235][ T4827] binder: 4825:4827 tried to acquire reference to desc 0, got 1 instead [ 78.235756][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.237343][ T4776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.239422][ T4776] device bridge_slave_0 entered promiscuous mode [ 78.252536][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.254068][ T4776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.256941][ T4776] device bridge_slave_1 entered promiscuous mode [ 78.259323][ T4827] binder: release 4825:4827 transaction 5 out, still active [ 78.312821][ T4827] binder: undelivered TRANSACTION_COMPLETE [ 78.400724][ T4776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.404790][ T4776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.410209][ T22] binder: send failed reply for transaction 5, target dead [ 78.471374][ T4833] loop4: detected capacity change from 0 to 47 [ 78.501604][ T4833] MINIX-fs: bad superblock [ 78.523641][ T4808] loop3: detected capacity change from 0 to 32768 [ 78.544167][ T4776] team0: Port device team_slave_0 added [ 78.549705][ T4313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.663534][ T4808] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 78.729606][ T4776] team0: Port device team_slave_1 added [ 78.777016][ T4518] ocfs2: Unmounting device (7,3) on (node local) [ 78.909986][ T4846] loop4: detected capacity change from 0 to 1024 [ 78.928029][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.929631][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.942416][ T4776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.073493][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.075143][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.102778][ T4776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.111767][ T4846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.116374][ T4846] siw: device registration error -23 [ 79.229451][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 79.244411][ T4844] loop1: detected capacity change from 0 to 32768 [ 79.324494][ T4844] JBD2: Ignoring recovery information on journal [ 79.353308][ T4862] loop4: detected capacity change from 0 to 1024 [ 79.361331][ T4862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.487082][ T4844] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 79.506483][ T4776] device hsr_slave_0 entered promiscuous mode [ 79.547589][ T4862] overlayfs: upper fs needs to support d_type. [ 79.555137][ T4862] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.557768][ T4862] overlayfs: failed to set xattr on upper [ 79.563593][ T4776] device hsr_slave_1 entered promiscuous mode [ 79.573123][ T4862] overlayfs: ...falling back to index=off,metacopy=off. [ 79.592559][ T4776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.595105][ T4776] Cannot create hsr debugfs directory [ 79.618198][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 79.941182][ T4852] loop3: detected capacity change from 0 to 32768 [ 79.943926][ T4311] Bluetooth: hci3: command tx timeout [ 80.179451][ T4852] XFS (loop3): Mounting V5 Filesystem [ 80.384771][ T4896] loop1: detected capacity change from 0 to 2048 [ 80.563761][ T4896] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.734128][ T4896] syz.1.130: attempt to access beyond end of device [ 80.734128][ T4896] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 80.743395][ T4898] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.792958][ T4896] syz.1.130: attempt to access beyond end of device [ 80.792958][ T4896] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 80.796103][ T4896] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 80.816287][ T4896] vivid-000: disconnect [ 80.928088][ T4852] XFS (loop3): Ending clean mount [ 80.933029][ T4883] vivid-000: reconnect [ 81.095250][ T4881] loop4: detected capacity change from 0 to 40427 [ 81.115303][ T4881] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 81.137933][ T4881] F2FS-fs (loop4): invalid crc value [ 81.157963][ T4518] XFS (loop3): Unmounting Filesystem [ 81.174038][ T4881] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.179020][ T4890] loop0: detected capacity change from 0 to 32768 [ 81.250960][ T4881] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.260653][ T4890] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 81.279042][ T4881] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 81.312474][ T4881] syz.4.129: attempt to access beyond end of device [ 81.312474][ T4881] loop4: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 81.406884][ T4299] ocfs2: Unmounting device (7,0) on (node local) [ 81.568212][ T4384] device hsr_slave_0 left promiscuous mode [ 81.624036][ T4384] device hsr_slave_1 left promiscuous mode [ 81.692628][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.694346][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.707409][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.709000][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.713439][ T4384] device bridge_slave_1 left promiscuous mode [ 81.715931][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.774516][ T4933] loop4: detected capacity change from 0 to 1024 [ 81.793355][ T4384] device bridge_slave_0 left promiscuous mode [ 81.794765][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.801000][ T4933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.807654][ T4933] siw: device registration error -23 [ 81.814692][ T4939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.138'. [ 81.842212][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 82.032440][ T4304] Bluetooth: hci3: command tx timeout [ 82.053764][ T4384] device veth1_macvtap left promiscuous mode [ 82.055349][ T4384] device veth0_macvtap left promiscuous mode [ 82.056643][ T4384] device veth1_vlan left promiscuous mode [ 82.057927][ T4384] device veth0_vlan left promiscuous mode [ 83.999035][ T4956] loop1: detected capacity change from 0 to 32768 [ 84.051995][ T4956] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 84.079011][ T4960] loop3: detected capacity change from 0 to 40427 [ 84.083436][ T4960] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 84.092772][ T4960] F2FS-fs (loop3): invalid crc value [ 84.103329][ T4311] Bluetooth: hci3: command tx timeout [ 84.120894][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 84.128362][ T4960] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.149417][ T4960] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.169936][ T4960] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 84.173397][ T4960] syz.3.146: attempt to access beyond end of device [ 84.173397][ T4960] loop3: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 84.395548][ T4970] loop3: detected capacity change from 0 to 1024 [ 84.411519][ T4970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.428435][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 85.606492][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 85.794768][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.034275][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.458390][ T4384] bond0 (unregistering): Released all slaves [ 88.857856][ T4970] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 88.989773][ T4982] netlink: 'syz.4.150': attribute type 3 has an invalid length. [ 89.050190][ T4990] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 89.065424][ T4518] EXT4-fs (loop3): unmounting filesystem. [ 89.107445][ T4990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.464619][ T5004] loop4: detected capacity change from 0 to 2048 [ 90.761043][ T5004] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.776824][ T5007] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.777569][ T5004] syz.4.155: attempt to access beyond end of device [ 90.777569][ T5004] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 90.797107][ T5002] syz.4.155: attempt to access beyond end of device [ 90.797107][ T5002] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 90.800154][ T5002] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 90.803842][ T5002] vivid-000: disconnect [ 90.909907][ T4994] vivid-000: reconnect [ 90.913569][ T4776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.005554][ T4776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.026029][ T5018] 9pnet_fd: Insufficient options for proto=fd [ 91.033796][ T5020] loop4: detected capacity change from 0 to 47 [ 91.051920][ T5020] MINIX-fs: bad superblock [ 91.064313][ T4776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.105293][ T4776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.164834][ T4998] loop1: detected capacity change from 0 to 32768 [ 91.345150][ T4998] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.471192][ T5034] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 92.127834][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 92.157970][ T4776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.217728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.219773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.244138][ T4776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.252883][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.255061][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.256939][ T5006] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.258417][ T5006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.260233][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.262204][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.278135][ T5009] loop0: detected capacity change from 0 to 40427 [ 92.300301][ T5006] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.301814][ T5006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.310336][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.318263][ T5009] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 92.322726][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.356288][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.358713][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.363598][ T5009] F2FS-fs (loop0): invalid crc value [ 92.365214][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.385206][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.388975][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.391224][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.400676][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.406959][ T5009] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.414136][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.434198][ T4776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.437007][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.454197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.456488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.462558][ T5045] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 92.502758][ T5009] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.526834][ T5050] loop1: detected capacity change from 0 to 1024 [ 92.533828][ T5009] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 92.536183][ T5009] syz.0.157: attempt to access beyond end of device [ 92.536183][ T5009] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 92.552989][ T5045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.554566][ T5050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.561846][ T5050] siw: device registration error -23 [ 92.681763][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 93.228989][ T5072] loop1: detected capacity change from 0 to 2048 [ 93.792536][ T5072] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.013546][ T5072] syz.1.169: attempt to access beyond end of device [ 94.013546][ T5072] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 94.057897][ T5072] syz.1.169: attempt to access beyond end of device [ 94.057897][ T5072] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 94.060853][ T5072] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 94.083019][ T5072] vivid-000: disconnect [ 94.105506][ T5074] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.218649][ T5064] vivid-000: reconnect [ 94.334504][ T5041] loop3: detected capacity change from 0 to 32768 [ 94.374837][ T5041] [ 94.374837][ T5041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.374837][ T5041] [ 94.386940][ T5041] [ 94.386940][ T5041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.386940][ T5041] [ 94.410158][ T5080] 9pnet_fd: Insufficient options for proto=fd [ 94.411680][ T5041] [ 94.411680][ T5041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.411680][ T5041] [ 94.431621][ T5041] [ 94.431621][ T5041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.431621][ T5041] [ 94.442621][ T5041] [ 94.442621][ T5041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.442621][ T5041] [ 94.464912][ T92] [ 94.464912][ T92] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.464912][ T92] [ 94.523883][ T4518] [ 94.523883][ T4518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.523883][ T4518] [ 94.526082][ T4518] [ 94.526082][ T4518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.526082][ T4518] [ 94.627422][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.629113][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.655260][ T4776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.708993][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.711276][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.756401][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.758508][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.760652][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.768311][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.776427][ T4776] device veth0_vlan entered promiscuous mode [ 94.881004][ T5099] loop1: detected capacity change from 0 to 1024 [ 94.959796][ T5099] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.989035][ T5099] siw: device registration error -23 [ 95.072609][ T5108] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 95.740275][ T4776] device veth1_vlan entered promiscuous mode [ 95.748124][ T5095] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 95.766119][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.769154][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.809883][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 95.867397][ T4776] device veth0_macvtap entered promiscuous mode [ 95.883365][ T5117] netlink: 44 bytes leftover after parsing attributes in process `syz.0.181'. [ 95.885428][ T5117] netlink: 52 bytes leftover after parsing attributes in process `syz.0.181'. [ 95.889933][ T5119] loop1: detected capacity change from 0 to 256 [ 95.891763][ T5119] exfat: Deprecated parameter 'namecase' [ 95.897326][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.899782][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.902037][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.925439][ T4776] device veth1_macvtap entered promiscuous mode [ 95.954750][ T5119] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 95.961364][ T5083] loop4: detected capacity change from 0 to 32768 [ 95.982206][ T5083] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 96.038909][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.041135][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.044083][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.046270][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.048317][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.050463][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.059980][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.063119][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.065327][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.067450][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.070864][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.075510][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.078155][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.080161][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.082927][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.084869][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.087299][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.089246][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.091448][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.094905][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.097089][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.100264][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.104788][ T4776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.106789][ T4776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.108687][ T4776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.110552][ T4776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.145856][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.148137][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.151268][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.180642][ T4294] ocfs2: Unmounting device (7,4) on (node local) [ 96.202663][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.205121][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.400701][ T5133] loop3: detected capacity change from 0 to 2048 [ 96.440757][ T5133] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.749544][ T5133] syz.3.182: attempt to access beyond end of device [ 96.749544][ T5133] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 96.785614][ T5133] syz.3.182: attempt to access beyond end of device [ 96.785614][ T5133] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 96.788655][ T5133] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 96.799804][ T5133] vivid-000: disconnect [ 96.832891][ T5134] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.924885][ T5122] vivid-000: reconnect [ 97.063234][ T5136] 9pnet_fd: Insufficient options for proto=fd [ 97.207900][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.209634][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.365874][ T5129] loop0: detected capacity change from 0 to 32768 [ 97.473524][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.506487][ T5155] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 97.601392][ T5162] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 98.544902][ T5129] JBD2: Ignoring recovery information on journal [ 98.589401][ T5129] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.646932][ T398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.649270][ T398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.669773][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.751918][ T5174] loop1: detected capacity change from 0 to 1024 [ 98.765378][ T4299] ocfs2: Unmounting device (7,0) on (node local) [ 98.882807][ T5174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.898603][ T5174] siw: device registration error -23 [ 99.074677][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 99.231472][ T5197] ptrace attach of "./syz-executor exec"[4518] was attempted by ""[5197] [ 99.973372][ T5175] loop4: detected capacity change from 0 to 32768 [ 100.006671][ T5175] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 100.887211][ T4294] ocfs2: Unmounting device (7,4) on (node local) [ 101.073513][ T5200] device ip_vti0 entered promiscuous mode [ 101.075280][ T5200] device vlan2 entered promiscuous mode [ 101.119805][ T5231] 9pnet_fd: Insufficient options for proto=fd [ 101.268760][ T5237] loop2: detected capacity change from 0 to 1024 [ 101.290323][ T5233] loop1: detected capacity change from 0 to 4096 [ 101.361292][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.377453][ T5223] loop0: detected capacity change from 0 to 32768 [ 101.548763][ T4776] EXT4-fs (loop2): unmounting filesystem. [ 101.554565][ T5223] JBD2: Ignoring recovery information on journal [ 102.966011][ T5223] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.061787][ T4299] ocfs2: Unmounting device (7,0) on (node local) [ 103.448606][ T4384] device hsr_slave_0 left promiscuous mode [ 103.482959][ T4384] device hsr_slave_1 left promiscuous mode [ 103.491931][ T5272] 9pnet_fd: Insufficient options for proto=fd [ 103.542155][ T5260] loop0: detected capacity change from 0 to 32768 [ 103.582435][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.584355][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.588298][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.590758][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.592752][ T5260] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.607184][ T4384] device bridge_slave_1 left promiscuous mode [ 103.608855][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.632084][ T4299] ocfs2: Unmounting device (7,0) on (node local) [ 103.635910][ T4384] device bridge_slave_0 left promiscuous mode [ 103.635939][ T5280] loop4: detected capacity change from 0 to 1024 [ 103.637641][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.661022][ T5280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.792618][ T4384] device veth1_macvtap left promiscuous mode [ 103.794236][ T4384] device veth0_macvtap left promiscuous mode [ 103.795702][ T4384] device veth1_vlan left promiscuous mode [ 103.796984][ T4384] device veth0_vlan left promiscuous mode [ 105.252603][ T5304] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 107.086091][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 107.285678][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 107.483164][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.703948][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.209296][ T4384] bond0 (unregistering): Released all slaves [ 110.530108][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 110.569778][ T5314] 9pnet_fd: Insufficient options for proto=fd [ 110.663387][ T5320] loop3: detected capacity change from 0 to 256 [ 110.666150][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 110.682972][ T5319] device bridge_slave_1 left promiscuous mode [ 110.694314][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.910841][ T5330] loop4: detected capacity change from 0 to 2048 [ 110.914491][ T27] audit: type=1326 audit(110.870:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb714a6e8 code=0x7ffc0000 [ 110.919187][ T27] audit: type=1326 audit(110.870:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb714a6e8 code=0x7ffc0000 [ 110.925833][ T5319] bridge1: port 1(bridge_slave_1) entered blocking state [ 110.927347][ T5319] bridge1: port 1(bridge_slave_1) entered disabled state [ 110.929398][ T5319] device bridge_slave_1 entered promiscuous mode [ 110.984867][ T27] audit: type=1326 audit(110.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb714a6e8 code=0x7ffc0000 [ 110.989871][ T27] audit: type=1326 audit(110.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb714a71c code=0x7ffc0000 [ 111.055893][ T27] audit: type=1326 audit(110.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb7148e20 code=0x7ffc0000 [ 111.084831][ T27] audit: type=1326 audit(110.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffb714a78c code=0x7ffc0000 [ 111.110977][ T27] audit: type=1326 audit(110.880:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb7148c84 code=0x7ffc0000 [ 111.140546][ T27] audit: type=1326 audit(110.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb714a210 code=0x7ffc0000 [ 111.170512][ T27] audit: type=1326 audit(110.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb714905c code=0x7ffc0000 [ 111.196505][ T27] audit: type=1326 audit(110.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb714905c code=0x7ffc0000 [ 111.743969][ T5330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.969624][ T4294] EXT4-fs (loop4): unmounting filesystem. [ 112.113670][ T5352] loop1: detected capacity change from 0 to 2048 [ 112.131014][ T5352] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.616974][ T5353] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.618004][ T5352] syz.1.240: attempt to access beyond end of device [ 112.618004][ T5352] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 112.629298][ T5348] syz.1.240: attempt to access beyond end of device [ 112.629298][ T5348] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 112.632067][ T5348] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 112.676404][ T5354] device veth0 entered promiscuous mode [ 112.677698][ T5354] device vlan3 entered promiscuous mode [ 112.811975][ T5365] 9pnet_fd: Insufficient options for proto=fd [ 112.988175][ T5376] delete_channel: no stack [ 113.890085][ T5388] loop2: detected capacity change from 0 to 256 [ 114.354638][ T5403] loop1: detected capacity change from 0 to 2048 [ 114.452948][ T5403] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.631040][ T5403] syz.1.261: attempt to access beyond end of device [ 114.631040][ T5403] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 114.673763][ T5403] syz.1.261: attempt to access beyond end of device [ 114.673763][ T5403] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 114.676654][ T5403] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 114.707769][ T5404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.047944][ T5409] loop3: detected capacity change from 0 to 2048 [ 115.234132][ T5409] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 115.235981][ T5409] System zones: 0-7 [ 115.241071][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.073769][ T4518] EXT4-fs (loop3): unmounting filesystem. [ 116.291450][ T5425] loop0: detected capacity change from 0 to 32768 [ 116.293676][ T5425] jfs: Unrecognized mount option "umask=" or missing value [ 117.268957][ T5437] netlink: 'syz.0.272': attribute type 3 has an invalid length. [ 117.389162][ T5437] loop0: detected capacity change from 0 to 2048 [ 117.400056][ T5437] UDF-fs: bad mount option "Uif" or missing value [ 117.738896][ T5443] loop3: detected capacity change from 0 to 256 [ 117.870405][ T5445] loop1: detected capacity change from 0 to 1024 [ 118.028808][ T4343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.031049][ T4343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.040227][ T4343] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 118.066497][ T5450] loop0: detected capacity change from 0 to 2048 [ 118.159293][ T5450] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 118.165063][ T5450] System zones: 0-7 [ 118.172178][ T5450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.374161][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 118.529851][ T5464] x_tables: unsorted entry at hook 2 [ 119.634846][ T5481] loop3: detected capacity change from 0 to 256 [ 119.699136][ T5484] loop2: detected capacity change from 0 to 1024 [ 119.703712][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 119.705302][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 119.716980][ T22] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 120.077311][ T5489] loop3: detected capacity change from 0 to 2048 [ 120.171209][ T5489] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 120.175576][ T5489] System zones: 0-7 [ 120.180349][ T5489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.215613][ T5491] loop2: detected capacity change from 0 to 32768 [ 120.220010][ T5491] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.298 (5491) [ 120.230584][ T5491] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 120.232848][ T5491] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 120.235021][ T5491] BTRFS info (device loop2): using free space tree [ 120.289264][ T4518] EXT4-fs (loop3): unmounting filesystem. [ 120.477612][ T5491] BTRFS info (device loop2): enabling ssd optimizations [ 120.479593][ T5473] loop0: detected capacity change from 0 to 32768 [ 120.527699][ T5473] (syz.0.291,5473,1):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 120.531120][ T5473] (syz.0.291,5473,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 120.531150][ T5473] (syz.0.291,5473,1):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 120.549183][ T5473] (syz.0.291,5473,1):ocfs2_initialize_super:2252 ERROR: status = -22 [ 120.554581][ T5473] (syz.0.291,5473,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 120.701289][ T5331] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.572867][ T4776] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 122.044520][ T5541] loop1: detected capacity change from 0 to 2048 [ 122.127177][ T5544] ptrace attach of "./syz-executor exec"[4518] was attempted by "./syz-executor exec"[5544] [ 122.783513][ T5541] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 122.785343][ T5541] System zones: 0-7 [ 122.794760][ T5541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.912704][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 123.053839][ T5543] loop2: detected capacity change from 0 to 40427 [ 123.056317][ T5543] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 123.061593][ T5543] F2FS-fs (loop2): invalid crc value [ 123.084901][ T5543] F2FS-fs (loop2): Found nat_bits in checkpoint [ 123.120360][ T5543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.134542][ T5543] syz.2.308: attempt to access beyond end of device [ 123.134542][ T5543] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 123.179113][ T4776] syz-executor: attempt to access beyond end of device [ 123.179113][ T4776] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 123.276555][ T5551] loop3: detected capacity change from 0 to 32768 [ 123.279154][ T5551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.311 (5551) [ 123.314402][ T5551] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.316666][ T5551] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 123.324709][ T5551] BTRFS info (device loop3): turning on sync discard [ 123.326234][ T5551] BTRFS info (device loop3): use zlib compression, level 3 [ 123.327984][ T5551] BTRFS info (device loop3): using free space tree [ 123.512328][ T5551] BTRFS info (device loop3): enabling ssd optimizations [ 124.415968][ T5580] loop2: detected capacity change from 0 to 32768 [ 124.423561][ T5580] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.314 (5580) [ 124.429503][ T4518] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.474113][ T5308] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.621934][ T4311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.625457][ T4311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.627948][ T4311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.632174][ T4311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.639059][ T4311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.641200][ T4311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.158921][ T5623] binder: 5613:5623 ioctl 4018620d 0 returned -22 [ 125.942897][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944072][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.163487][ T5596] chnl_net:caif_netlink_parms(): no params data found [ 126.317983][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.322369][ T5609] loop1: detected capacity change from 0 to 40427 [ 126.324715][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.326923][ T5596] device bridge_slave_0 entered promiscuous mode [ 126.330271][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.332088][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.334043][ T5609] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 126.337294][ T5596] device bridge_slave_1 entered promiscuous mode [ 126.340107][ T5609] F2FS-fs (loop1): invalid crc value [ 126.340659][ T5636] loop3: detected capacity change from 0 to 1024 [ 126.370238][ T5609] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.383283][ T5593] loop0: detected capacity change from 0 to 40427 [ 126.398365][ T5593] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 126.400125][ T5593] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.404420][ T5609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.416815][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.418075][ T5609] syz.1.323: attempt to access beyond end of device [ 126.418075][ T5609] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 126.419658][ T5636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.423683][ T5593] F2FS-fs (loop0): invalid crc value [ 126.428695][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.443700][ T5593] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.478727][ T4293] syz-executor: attempt to access beyond end of device [ 126.478727][ T4293] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 126.485851][ T5593] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 126.487879][ T5593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.500041][ T5593] syz.0.320: attempt to access beyond end of device [ 126.500041][ T5593] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 126.517982][ T5636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.330'. [ 126.536931][ T5596] team0: Port device team_slave_0 added [ 126.552809][ T5596] team0: Port device team_slave_1 added [ 126.620802][ T4518] EXT4-fs (loop3): unmounting filesystem. [ 126.627982][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.637235][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.656131][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.660492][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.662066][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.668446][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.752593][ T4304] Bluetooth: hci4: command tx timeout [ 126.854978][ T5596] device hsr_slave_0 entered promiscuous mode [ 126.882754][ T5596] device hsr_slave_1 entered promiscuous mode [ 126.944309][ T5654] loop1: detected capacity change from 0 to 2048 [ 127.015855][ T5654] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 127.017655][ T5654] System zones: 0-7 [ 127.019111][ T5654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.173419][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 127.361649][ T5666] loop0: detected capacity change from 0 to 1024 [ 127.634887][ T4342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 127.637725][ T4342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 127.828780][ T4342] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 127.944960][ T5668] loop1: detected capacity change from 0 to 164 [ 128.306462][ T5672] loop2: detected capacity change from 0 to 1024 [ 128.327966][ T5596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.353855][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.374274][ T5672] siw: device registration error -23 [ 128.474197][ T5596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.515120][ T5682] netlink: 76 bytes leftover after parsing attributes in process `syz.2.341'. [ 128.633756][ T4776] EXT4-fs (loop2): unmounting filesystem. [ 128.671507][ T5596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.832599][ T4304] Bluetooth: hci4: command tx timeout [ 128.855522][ T5596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.081121][ T5683] loop3: detected capacity change from 0 to 40427 [ 129.091298][ T5683] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.095667][ T5683] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.109829][ T5683] F2FS-fs (loop3): invalid crc value [ 129.132668][ T5679] loop0: detected capacity change from 0 to 40427 [ 129.136072][ T5679] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 129.140107][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.150055][ T5679] F2FS-fs (loop0): invalid crc value [ 129.167835][ T5683] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.175160][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.187965][ T5679] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.201628][ T5683] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.208388][ T5683] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.214024][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.228702][ T5683] syz.3.343: attempt to access beyond end of device [ 129.228702][ T5683] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 129.234189][ T5679] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.300129][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.328900][ T5679] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 129.348912][ T5679] syz.0.340: attempt to access beyond end of device [ 129.348912][ T5679] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 129.400134][ T5699] loop1: detected capacity change from 0 to 2048 [ 129.509720][ T5699] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 129.511648][ T5699] System zones: 0-7 [ 129.513655][ T5699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.685352][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 129.719798][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.812949][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.815128][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.841206][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.877786][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.886976][ T5705] loop2: detected capacity change from 0 to 1024 [ 129.891189][ T14] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.895816][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.969496][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.971133][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.973962][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.027952][ T14] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 130.030219][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.041128][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.043509][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.044957][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.051627][ T14] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.070106][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.075349][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.104399][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.117417][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.176415][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.178636][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.181164][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.191272][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.197989][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.214769][ T5596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.217784][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.225675][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.230363][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.345810][ T5716] loop0: detected capacity change from 0 to 1024 [ 130.419970][ T5716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.427421][ T5716] siw: device registration error -23 [ 130.473431][ T5716] netlink: 76 bytes leftover after parsing attributes in process `syz.0.353'. [ 130.559472][ T5730] loop3: detected capacity change from 0 to 16 [ 130.572510][ T5730] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.577329][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 130.646647][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.649820][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.656265][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.912333][ T4304] Bluetooth: hci4: command tx timeout [ 130.994844][ T5735] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 130.996888][ T5735] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 131.698139][ T5745] loop1: detected capacity change from 0 to 2048 [ 131.808951][ T5745] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 131.815966][ T5745] System zones: 0-7 [ 131.830104][ T5753] 9pnet_fd: Insufficient options for proto=fd [ 131.866046][ T5745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.120453][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 132.218585][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.229264][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.331903][ T5737] loop2: detected capacity change from 0 to 40427 [ 132.352636][ T5737] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 132.362890][ T5737] F2FS-fs (loop2): invalid crc value [ 132.376290][ T5737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.427812][ T5737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.470155][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.473098][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.476513][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.485483][ T5737] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 132.487883][ T5737] syz.2.357: attempt to access beyond end of device [ 132.487883][ T5737] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 132.494216][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.501786][ T5596] device veth0_vlan entered promiscuous mode [ 132.511949][ T5596] device veth1_vlan entered promiscuous mode [ 132.540435][ T5744] loop0: detected capacity change from 0 to 40427 [ 132.560152][ T5744] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 132.567942][ T5744] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 132.570095][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.572852][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.575207][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.600829][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.603799][ T5744] F2FS-fs (loop0): invalid crc value [ 132.609193][ T5596] device veth0_macvtap entered promiscuous mode [ 132.619142][ T5596] device veth1_macvtap entered promiscuous mode [ 132.625057][ T5744] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.661920][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.669034][ T5744] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 132.670653][ T5744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.671726][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.682998][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.689895][ T5744] syz.0.359: attempt to access beyond end of device [ 132.689895][ T5744] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 132.712326][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.714359][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.716447][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.736072][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.738262][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.773450][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.775562][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.923611][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.926549][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.928666][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.930601][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.937008][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.958711][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.960938][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.964870][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.967585][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.970058][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.992261][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.004869][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.007183][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.014991][ T4304] Bluetooth: hci4: command tx timeout [ 133.069864][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.093937][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.119264][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.136620][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.139205][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.164600][ T5776] loop3: detected capacity change from 0 to 1024 [ 133.173202][ T110] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.174884][ T110] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.340372][ T5596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.359956][ T5596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.361899][ T5596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.374629][ T110] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 133.391680][ T5596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.657870][ T1613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.660025][ T1613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.686342][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.740981][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.743045][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.748722][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.070920][ T5797] loop2: detected capacity change from 0 to 2048 [ 134.885167][ T5797] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 134.886966][ T5797] System zones: 0-7 [ 135.043708][ T5797] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.138189][ T4776] EXT4-fs (loop2): unmounting filesystem. [ 135.270829][ T5818] loop2: detected capacity change from 0 to 256 [ 135.278602][ T5819] 9pnet_fd: Insufficient options for proto=fd [ 135.314291][ T5795] loop4: detected capacity change from 0 to 40427 [ 135.336146][ T5795] F2FS-fs (loop4): invalid crc value [ 135.369704][ T5795] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.404686][ T5795] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 135.407647][ T5795] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 135.428657][ T5795] netlink: 156 bytes leftover after parsing attributes in process `syz.4.373'. [ 135.441699][ T5826] loop2: detected capacity change from 0 to 1024 [ 135.468154][ T5826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.476469][ T5826] siw: device registration error -23 [ 135.619542][ T5835] netlink: 76 bytes leftover after parsing attributes in process `syz.2.381'. [ 135.651377][ T4776] EXT4-fs (loop2): unmounting filesystem. [ 135.962325][ T5839] cgroup: Unknown subsys name 'uid' [ 136.004261][ T5839] loop4: detected capacity change from 0 to 512 [ 136.008302][ T5839] EXT4-fs: inline encryption not supported [ 136.397281][ T5839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.598410][ T5845] loop0: detected capacity change from 0 to 1024 [ 136.603233][ T3873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.604831][ T3873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.082545][ T4311] Bluetooth: hci5: command 0x0406 tx timeout [ 137.126404][ T3873] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.281604][ T5596] EXT4-fs (loop4): unmounting filesystem. [ 137.462574][ T5852] loop2: detected capacity change from 0 to 64 [ 137.465938][ T5852] hfs: umask requires a value [ 137.467234][ T5852] hfs: unable to parse mount options [ 137.516668][ T5860] loop0: detected capacity change from 0 to 2048 [ 137.552112][ T5860] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 137.553995][ T5860] System zones: 0-7 [ 137.555443][ T5860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.680199][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 137.731091][ T5868] 9pnet_fd: Insufficient options for proto=fd [ 137.884995][ T5874] loop3: detected capacity change from 0 to 1024 [ 137.914512][ T5874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.050848][ T5874] netlink: 76 bytes leftover after parsing attributes in process `syz.3.394'. [ 138.171250][ T4518] EXT4-fs (loop3): unmounting filesystem. [ 138.720900][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.401'. [ 139.407865][ T5903] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.460083][ T5889] loop2: detected capacity change from 0 to 40427 [ 139.463256][ T5889] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 139.466122][ T5889] F2FS-fs (loop2): invalid crc value [ 139.468986][ T5889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.496842][ T5889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.514917][ T5889] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 139.517567][ T5889] syz.2.399: attempt to access beyond end of device [ 139.517567][ T5889] loop2: rw=2049, sector=53248, nr_sectors = 120 limit=40427 [ 139.609898][ T5915] 9pnet_fd: Insufficient options for proto=fd [ 139.787193][ T5921] loop0: detected capacity change from 0 to 1024 [ 139.860070][ T5921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 139.872837][ T5921] siw: device registration error -23 [ 140.052695][ T5930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.410'. [ 140.129829][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 140.355599][ T5941] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.511145][ T5924] loop1: detected capacity change from 0 to 32768 [ 140.604777][ T5955] 9pnet_fd: Insufficient options for proto=fd [ 140.678913][ T5924] XFS (loop1): Mounting V5 Filesystem [ 140.853254][ T5965] loop3: detected capacity change from 0 to 17 [ 140.897662][ T5966] loop2: detected capacity change from 0 to 1024 [ 140.926273][ T5621] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.935869][ T5965] loop3: detected capacity change from 0 to 1024 [ 141.035908][ T5944] loop4: detected capacity change from 0 to 40427 [ 141.078238][ T5944] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 141.113898][ T5966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.118326][ T5966] siw: device registration error -23 [ 141.183566][ T5944] F2FS-fs (loop4): invalid crc value [ 141.262656][ T5944] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.319779][ T5924] XFS (loop1): Ending clean mount [ 141.330839][ T5924] XFS (loop1): Quotacheck needed: Please wait. [ 141.349787][ T5944] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.509312][ T5944] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 141.527681][ T5944] syz.4.417: attempt to access beyond end of device [ 141.527681][ T5944] loop4: rw=2049, sector=53248, nr_sectors = 120 limit=40427 [ 141.553563][ T5982] loop0: detected capacity change from 0 to 32768 [ 141.555470][ T5982] XFS: attr2 mount option is deprecated. [ 141.556901][ T5982] XFS: noikeep mount option is deprecated. [ 141.595173][ T5982] XFS (loop0): Mounting V5 Filesystem [ 141.602294][ T5924] XFS (loop1): Quotacheck: Done. [ 141.672427][ T5982] XFS (loop0): Ending clean mount [ 141.678258][ T5982] XFS (loop0): Quotacheck needed: Please wait. [ 141.752641][ T4293] XFS (loop1): Unmounting Filesystem [ 141.764118][ T5982] XFS (loop0): Quotacheck: Done. [ 142.536211][ T6002] syz.4.427 uses obsolete (PF_INET,SOCK_PACKET) [ 143.556189][ T4299] XFS (loop0): Unmounting Filesystem [ 143.994621][ T6018] loop0: detected capacity change from 0 to 17 [ 144.041014][ T6018] loop0: detected capacity change from 0 to 1024 [ 144.822287][ T6027] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.488770][ T6029] loop1: detected capacity change from 0 to 40427 [ 145.531206][ T6029] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 145.569666][ T6029] F2FS-fs (loop1): invalid crc value [ 145.630498][ T6029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.678686][ T6029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.712036][ T6029] F2FS-fs (loop1) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xc44/0x157c [ 145.714633][ T6029] syz.1.437: attempt to access beyond end of device [ 145.714633][ T6029] loop1: rw=2049, sector=53248, nr_sectors = 120 limit=40427 [ 147.424076][ T5979] netlink: 76 bytes leftover after parsing attributes in process `syz.2.423'. [ 147.525600][ T4776] EXT4-fs (loop2): unmounting filesystem. [ 148.388087][ T6060] loop2: detected capacity change from 0 to 17 [ 149.262055][ T6069] loop0: detected capacity change from 0 to 256 [ 149.320163][ T6072] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 149.983194][ T6062] loop1: detected capacity change from 0 to 40427 [ 149.998443][ T6062] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 150.000171][ T6062] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.095415][ T6062] F2FS-fs (loop1): invalid crc value [ 150.160296][ T6062] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.252376][ T6062] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.254031][ T6062] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.295536][ T6062] syz.1.448: attempt to access beyond end of device [ 150.295536][ T6062] loop1: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 150.576542][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 150.668897][ T6102] loop0: detected capacity change from 0 to 2048 [ 151.644346][ T6102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.712853][ T6102] fs-verity: sha512 using implementation "sha512-arm64" [ 151.760182][ T6112] loop3: detected capacity change from 0 to 17 [ 152.046448][ T4304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.050414][ T4304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.059962][ T4302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.083776][ T4302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.100779][ T4302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.121577][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 152.124168][ T4302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.461294][ T6124] loop1: detected capacity change from 0 to 128 [ 152.663164][ T6124] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 153.425484][ T6124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.869716][ T5620] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.966807][ T6112] loop3: detected capacity change from 0 to 1024 [ 154.025475][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 154.291235][ T4311] Bluetooth: hci1: command tx timeout [ 155.573258][ T6171] loop2: detected capacity change from 0 to 256 [ 156.343664][ T4384] device hsr_slave_0 left promiscuous mode [ 156.354253][ T4302] Bluetooth: hci1: command tx timeout [ 156.707062][ T6185] cgroup: Unknown subsys name 'uid' [ 156.713428][ T6185] loop3: detected capacity change from 0 to 512 [ 156.715186][ T6185] EXT4-fs: inline encryption not supported [ 159.190781][ T4311] Bluetooth: hci1: command tx timeout [ 159.438415][ T6191] loop1: detected capacity change from 0 to 17 [ 159.490401][ T6185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.581571][ T6191] loop1: detected capacity change from 0 to 1024 [ 160.316119][ T4384] device hsr_slave_1 left promiscuous mode [ 161.247050][ T4311] Bluetooth: hci1: command tx timeout [ 162.618544][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.620270][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.639609][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.641334][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.658674][ T4384] device bridge_slave_1 left promiscuous mode [ 162.661218][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.379838][ T6216] loop1: detected capacity change from 0 to 32768 [ 163.785732][ T6216] JBD2: Ignoring recovery information on journal [ 163.876296][ T4298] Bluetooth: hci2: command 0x0406 tx timeout [ 163.877609][ T4298] Bluetooth: hci0: command 0x0406 tx timeout [ 163.952767][ T6216] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 164.009107][ T4384] device bridge_slave_0 left promiscuous mode [ 164.010588][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.282526][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 164.557030][ T6220] loop1: detected capacity change from 0 to 17 [ 165.435933][ T4304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.439601][ T4304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.441942][ T4304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.445469][ T4304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.447337][ T4304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.449166][ T4304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.926637][ T6220] loop1: detected capacity change from 0 to 1024 [ 166.623876][ T4298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.627739][ T4298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.630146][ T4298] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.632269][ T4298] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.636514][ T4298] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 166.638177][ T4298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.788101][ T6233] ptrace attach of "./syz-executor exec"[4293] was attempted by "0WN|\x1bZm\x07`ΞG8h=$G`TƵ>-(̤in$HnJ9^܍ K)i\x22c^\x22AӒW8*( +|B x\x0a@U\x0cV7\x1bTi⁺nǛd m\x1b\x1b1F#L*3jB1.=n\x1bO\x0a\x07EA7L{R} gէW5JSzb4l@ޤ}[,UR@ފa\x0b{NB9{*/{+&CCŇiwaY&QF+18<`e_OS9B~;T/Zd6^\x09*:#YUD,lD S‰4BH[YbՃ#\x0dO ~K\x07QDР6$ak~hsHa\x07Y_%`e\x22C܏*vDqdR}79] x0p{]%. m=5׷_ElR8\x5c1c\x0aӹv&e3Q\x0cVU+kl)q)^Nw!m)!W\x07@TINY3-xUx#IE\x0c̹4~czͭoxD@\x0c-o>w\x0auN/c0 \x0cZ)杯H\x22UP/|Q2(rf~j6^Gvįe\x0aT 1 [ 167.302385][ T4304] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.320841][ T4304] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.352842][ T4304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.354960][ T4304] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.356790][ T4304] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.569586][ T4298] Bluetooth: hci4: command tx timeout [ 167.587431][ T4384] device veth1_macvtap left promiscuous mode [ 167.588875][ T4384] device veth0_macvtap left promiscuous mode [ 167.590357][ T4384] device veth1_vlan left promiscuous mode [ 167.591607][ T4384] device veth0_vlan left promiscuous mode [ 168.190296][ T6237] loop1: detected capacity change from 0 to 40427 [ 168.210248][ T6237] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 168.211927][ T6237] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 168.263532][ T6237] F2FS-fs (loop1): invalid crc value [ 168.372589][ T6237] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.473983][ T6237] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 168.475533][ T6237] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.510647][ T6237] syz.1.500: attempt to access beyond end of device [ 168.510647][ T6237] loop1: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 168.675346][ T4298] Bluetooth: hci6: command tx timeout [ 169.478242][ T4304] Bluetooth: hci7: command tx timeout [ 169.654272][ T4298] Bluetooth: hci4: command tx timeout [ 170.541737][ T6248] loop1: detected capacity change from 0 to 32768 [ 170.755384][ T4298] Bluetooth: hci6: command tx timeout [ 170.835048][ T6248] JBD2: Ignoring recovery information on journal [ 170.988067][ T6248] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 171.207854][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 171.448787][ T6252] loop1: detected capacity change from 0 to 17 [ 171.553173][ T4298] Bluetooth: hci7: command tx timeout [ 171.708411][ T4304] Bluetooth: hci4: command tx timeout [ 172.599949][ T5620] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.696356][ T6252] loop1: detected capacity change from 0 to 1024 [ 172.837417][ T4298] Bluetooth: hci6: command tx timeout [ 173.646626][ T4304] Bluetooth: hci7: command tx timeout [ 173.783299][ T4298] Bluetooth: hci4: command tx timeout [ 174.370590][ T6264] loop1: detected capacity change from 0 to 32768 [ 174.684181][ T6264] JBD2: Ignoring recovery information on journal [ 174.807013][ T6264] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.912883][ T4304] Bluetooth: hci6: command tx timeout [ 175.068513][ T4293] ocfs2: Unmounting device (7,1) on (node local) [ 175.316140][ T6268] loop1: detected capacity change from 0 to 128 [ 175.343538][ T6268] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 175.458229][ T6268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.580100][ T6270] loop1: detected capacity change from 0 to 17 [ 175.727770][ T4298] Bluetooth: hci7: command tx timeout [ 175.999647][ T6272] ptrace attach of "./syz-executor exec"[4293] was attempted by "0WN|\x1bZm\x07`ΞG8h=$G`TƵ>-(̤in$HnJ9^܍ K)i\x22c^\x22AӒW8*( +|B x\x0a@U\x0cV7\x1bTi⁺nǛd m\x1b\x1b1F#L*3jB1.=n\x1bO\x0a\x07EA7L{R} gէW5JSzb4l@ޤ}[,UR@ފa\x0b{NB9{*/{+&CCŇiwaY&QF+18<`e_OS9B~;T/Zd6^\x09*:#YUD,lD S‰4BH[YbՃ#\x0dO ~K\x07QDР6$ak~hsHa\x07Y_%`e\x22C܏*vDqdR}79] x0p{]%. m=5׷_ElR8\x5c1c\x0aӹv&e3Q\x0cVU+kl)q)^Nw!m)!W\x07@TINY3-xUx#IE\x0c̹4~czͭoxD@\x0c-o>w\x0auN/c0 \x0cZ)杯H\x22UP/|Q2(rf~j6^Gvįe\x0aT-(̤in$HnJ9^܍ K)i\x22c^\x22AӒW8*( +|B x\x0a@U\x0cV7\x1bTi⁺nǛd m\x1b\x1b1F#L*3jB1.=n\x1bO\x0a\x07EA7L{R} gէW5JSzb4l@ޤ}[,UR@ފa\x0b{NB9{*/{+&CCŇiwaY&QF+18<`e_OS9B~;T/Zd6^\x09*:#YUD,lD S‰4BH[YbՃ#\x0dO ~K\x07QDР6$ak~hsHa\x07Y_%`e\x22C܏*vDqdR}79] x0p{]%. m=5׷_ElR8\x5c1c\x0aӹv&e3Q\x0cVU+kl)q)^Nw!m)!W\x07@TINY3-xUx#IE\x0c̹4~czͭoxD@\x0c-o>w\x0auN/c0 \x0cZ)杯H\x22UP/|Q2(rf~j6^Gvįe\x0aT 1 [ 195.892353][ T4298] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 195.903031][ T4298] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 195.939806][ T4298] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 195.964492][ T4298] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 195.973162][ T4298] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 198.040000][ T4304] Bluetooth: hci8: command tx timeout [ 199.714064][ T4304] Bluetooth: hci3: command 0x0406 tx timeout [ 200.112371][ T4311] Bluetooth: hci8: command tx timeout [ 202.191261][ T4298] Bluetooth: hci8: command tx timeout [ 204.277723][ T4311] Bluetooth: hci8: command tx timeout [ 212.588407][ T4311] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 212.598076][ T4311] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 212.609600][ T4311] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 212.648235][ T4311] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 212.669532][ T4311] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 212.682056][ T4311] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 214.755763][ T4311] Bluetooth: hci9: command tx timeout [ 216.837173][ T4311] Bluetooth: hci9: command tx timeout [ 218.906161][ T4298] Bluetooth: hci9: command tx timeout [ 220.992032][ T4311] Bluetooth: hci9: command tx timeout [ 227.289476][ T4311] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 227.347781][ T4311] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 227.377392][ T4311] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 227.400352][ T4311] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 227.425520][ T4311] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 227.427435][ T4311] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 227.489714][ T4304] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 227.494329][ T4304] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 227.497119][ T4304] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 227.499350][ T4304] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 227.501259][ T4304] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 227.503514][ T4304] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 227.540652][ T4298] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 227.556078][ T4302] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 227.559094][ T4302] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 227.606787][ T4302] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 227.625648][ T4302] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 227.630032][ T4302] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 229.555767][ T4311] Bluetooth: hci10: command tx timeout [ 229.559912][ T4302] Bluetooth: hci11: command tx timeout [ 229.718261][ T4311] Bluetooth: hci12: command tx timeout [ 231.632700][ T4311] Bluetooth: hci11: command tx timeout [ 231.633957][ T4311] Bluetooth: hci10: command tx timeout [ 231.795962][ T4302] Bluetooth: hci12: command tx timeout [ 233.714369][ T4311] Bluetooth: hci11: command tx timeout [ 233.717204][ T4302] Bluetooth: hci10: command tx timeout [ 233.873825][ T4302] Bluetooth: hci12: command tx timeout [ 234.413889][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 235.794584][ T4304] Bluetooth: hci11: command tx timeout [ 235.797153][ T4302] Bluetooth: hci10: command tx timeout [ 235.953569][ T4302] Bluetooth: hci12: command tx timeout [ 239.166719][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 243.941096][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.830613][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.722533][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.859520][ T4311] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 258.864246][ T4311] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 258.866502][ T4311] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 258.868947][ T4311] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 258.870941][ T4311] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 258.873486][ T4311] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 260.919850][ T4302] Bluetooth: hci13: command tx timeout [ 262.994739][ T4302] Bluetooth: hci13: command tx timeout [ 265.073766][ T4311] Bluetooth: hci13: command tx timeout [ 267.157512][ T4302] Bluetooth: hci13: command tx timeout [ 273.159552][ T4311] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 273.172110][ T4311] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 273.183979][ T4311] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 273.228802][ T4311] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 273.258876][ T4311] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 273.268431][ T4311] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 275.396573][ T4311] Bluetooth: hci14: command tx timeout [ 276.516304][ T4302] Bluetooth: hci1: command 0x0406 tx timeout [ 277.470793][ T4311] Bluetooth: hci14: command tx timeout [ 279.560683][ T4302] Bluetooth: hci14: command tx timeout [ 281.632353][ T4302] Bluetooth: hci14: command tx timeout [ 287.934000][ T4302] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 287.945294][ T4302] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 287.948557][ T4302] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 287.958316][ T4304] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 287.997509][ T4304] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 288.037526][ T4304] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 288.089697][ T4311] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 288.093687][ T4311] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 288.095994][ T4311] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 288.098099][ T4311] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 288.100167][ T4311] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 288.101899][ T4311] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 288.144714][ T4302] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 288.158611][ T4302] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 288.177711][ T4302] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 288.215346][ T4302] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 288.234607][ T4302] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 288.244469][ T4302] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 290.111787][ T4295] Bluetooth: hci15: command tx timeout [ 290.197174][ T4302] Bluetooth: hci16: command tx timeout [ 290.357152][ T4295] Bluetooth: hci17: command tx timeout [ 291.875312][ T4298] Bluetooth: hci7: command 0x0406 tx timeout [ 291.876734][ T4298] Bluetooth: hci6: command 0x0406 tx timeout [ 291.878074][ T4298] Bluetooth: hci4: command 0x0406 tx timeout [ 292.202291][ T4304] Bluetooth: hci15: command tx timeout [ 292.276614][ T4302] Bluetooth: hci16: command tx timeout [ 292.430393][ T4302] Bluetooth: hci17: command tx timeout [ 294.273121][ T4302] Bluetooth: hci15: command tx timeout [ 294.354503][ T4302] Bluetooth: hci16: command tx timeout [ 294.514019][ T4302] Bluetooth: hci17: command tx timeout [ 296.358001][ T4302] Bluetooth: hci15: command tx timeout [ 296.432207][ T4302] Bluetooth: hci16: command tx timeout [ 296.591309][ T4302] Bluetooth: hci17: command tx timeout [ 302.590307][ T28] INFO: task syz-executor:6117 blocked for more than 143 seconds. [ 302.591973][ T28] Not tainted 6.1.111-syzkaller #0 [ 302.606408][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.608315][ T28] task:syz-executor state:D stack:0 pid:6117 ppid:1 flags:0x00000009 [ 302.610192][ T28] Call trace: [ 302.610951][ T28] __switch_to+0x320/0x754 [ 302.611925][ T28] __schedule+0xef4/0x1d44 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.632279][ T28] schedule+0xc4/0x170 [ 302.633215][ T28] schedule_preempt_disabled+0x18/0x2c [ 302.634306][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 302.635375][ T28] mutex_lock_nested+0x38/0x44 [ 302.636372][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 302.637449][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 302.638477][ T28] rtnetlink_rcv+0x28/0x38 [ 302.675959][ T28] netlink_unicast+0x65c/0x898 [ 302.676958][ T28] netlink_sendmsg+0x834/0xb18 [ 302.677912][ T28] __sys_sendto+0x3b8/0x508 [ 302.678792][ T28] __arm64_sys_sendto+0xd8/0xf8 [ 302.679849][ T28] invoke_syscall+0x98/0x2c0 [ 302.680815][ T28] el0_svc_common+0x138/0x258 [ 302.681781][ T28] do_el0_svc+0x64/0x218 [ 302.702518][ T28] el0_svc+0x58/0x168 [ 302.703423][ T28] el0t_64_sync_handler+0x84/0xf0 [ 302.704436][ T28] el0t_64_sync+0x18c/0x190 [ 302.705458][ T28] INFO: task syz.0.475:6158 blocked for more than 143 seconds. [ 302.707027][ T28] Not tainted 6.1.111-syzkaller #0 [ 302.708194][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.710023][ T28] task:syz.0.475 state:D stack:0 pid:6158 ppid:4299 flags:0x00000001 [ 302.711965][ T28] Call trace: [ 302.760280][ T28] __switch_to+0x320/0x754 [ 302.761299][ T28] __schedule+0xef4/0x1d44 [ 302.762150][ T28] schedule+0xc4/0x170 [ 302.785533][ T28] schedule_preempt_disabled+0x18/0x2c [ 302.786794][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 302.787838][ T28] mutex_lock_nested+0x38/0x44 [ 302.788869][ T28] rtnl_lock+0x20/0x2c [ 302.789646][ T28] nl802154_pre_doit+0xb8/0x87c [ 302.790674][ T28] genl_rcv_msg+0x8fc/0xc2c [ 302.791611][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 302.812361][ T28] genl_rcv+0x38/0x50 [ 302.813309][ T28] netlink_unicast+0x65c/0x898 [ 302.814226][ T28] netlink_sendmsg+0x834/0xb18 [ 302.815152][ T28] ____sys_sendmsg+0x55c/0x848 [ 302.816076][ T28] __sys_sendmsg+0x26c/0x33c [ 302.816973][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 302.817980][ T28] invoke_syscall+0x98/0x2c0 [ 302.818865][ T28] el0_svc_common+0x138/0x258 [ 302.819827][ T28] do_el0_svc+0x64/0x218 [ 302.820687][ T28] el0_svc+0x58/0x168 [ 302.821459][ T28] el0t_64_sync_handler+0x84/0xf0 [ 302.840228][ T28] el0t_64_sync+0x18c/0x190 [ 302.841674][ T28] INFO: task syz.3.482:6182 blocked for more than 143 seconds. [ 302.843328][ T28] Not tainted 6.1.111-syzkaller #0 [ 302.844494][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.846208][ T28] task:syz.3.482 state:D stack:0 pid:6182 ppid:4518 flags:0x00000001 [ 302.853179][ T28] Call trace: [ 302.853916][ T28] __switch_to+0x320/0x754 [ 302.854784][ T28] __schedule+0xef4/0x1d44 [ 302.855599][ T28] schedule+0xc4/0x170 [ 302.856414][ T28] schedule_preempt_disabled+0x18/0x2c [ 302.857558][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 302.858607][ T28] mutex_lock_nested+0x38/0x44 [ 302.859602][ T28] genl_rcv_msg+0x114/0xc2c [ 302.860526][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 302.861509][ T28] genl_rcv+0x38/0x50 [ 302.888330][ T28] netlink_unicast+0x65c/0x898 [ 302.889455][ T28] netlink_sendmsg+0x834/0xb18 [ 302.890402][ T28] __sys_sendto+0x3b8/0x508 [ 302.891347][ T28] __arm64_sys_sendto+0xd8/0xf8 [ 302.902447][ T28] invoke_syscall+0x98/0x2c0 [ 302.903482][ T28] el0_svc_common+0x138/0x258 [ 302.904542][ T28] do_el0_svc+0x64/0x218 [ 302.905401][ T28] el0_svc+0x58/0x168 [ 302.906200][ T28] el0t_64_sync_handler+0x84/0xf0 [ 302.907213][ T28] el0t_64_sync+0x18c/0x190 [ 302.908128][ T28] INFO: task syz.3.482:6183 blocked for more than 143 seconds. [ 302.909726][ T28] Not tainted 6.1.111-syzkaller #0 [ 302.910915][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.950289][ T28] task:syz.3.482 state:D stack:0 pid:6183 ppid:4518 flags:0x00000001 [ 302.952365][ T28] Call trace: [ 302.953068][ T28] __switch_to+0x320/0x754 [ 302.953947][ T28] __schedule+0xef4/0x1d44 [ 302.954931][ T28] schedule+0xc4/0x170 [ 302.955764][ T28] schedule_preempt_disabled+0x18/0x2c [ 302.956831][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 302.957892][ T28] mutex_lock_nested+0x38/0x44 [ 302.958891][ T28] genl_rcv_msg+0x114/0xc2c [ 302.959735][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 302.960750][ T28] genl_rcv+0x38/0x50 [ 302.961614][ T28] netlink_unicast+0x65c/0x898 [ 303.004085][ T28] netlink_sendmsg+0x834/0xb18 [ 303.005203][ T28] __sys_sendto+0x3b8/0x508 [ 303.006105][ T28] __arm64_sys_sendto+0xd8/0xf8 [ 303.007097][ T28] invoke_syscall+0x98/0x2c0 [ 303.007978][ T28] el0_svc_common+0x138/0x258 [ 303.008923][ T28] do_el0_svc+0x64/0x218 [ 303.009722][ T28] el0_svc+0x58/0x168 [ 303.010552][ T28] el0t_64_sync_handler+0x84/0xf0 [ 303.011583][ T28] el0t_64_sync+0x18c/0x190 [ 303.052340][ T28] INFO: task syz.2.483:6186 blocked for more than 143 seconds. [ 303.054159][ T28] Not tainted 6.1.111-syzkaller #0 [ 303.055294][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.057039][ T28] task:syz.2.483 state:D stack:0 pid:6186 ppid:4776 flags:0x00000001 [ 303.058867][ T28] Call trace: [ 303.059543][ T28] __switch_to+0x320/0x754 [ 303.060484][ T28] __schedule+0xef4/0x1d44 [ 303.061389][ T28] schedule+0xc4/0x170 [ 303.102283][ T28] schedule_preempt_disabled+0x18/0x2c [ 303.103520][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 303.104586][ T28] mutex_lock_nested+0x38/0x44 [ 303.105589][ T28] genl_rcv_msg+0x114/0xc2c [ 303.106477][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 303.107467][ T28] genl_rcv+0x38/0x50 [ 303.108261][ T28] netlink_unicast+0x65c/0x898 [ 303.109265][ T28] netlink_sendmsg+0x834/0xb18 [ 303.110296][ T28] __sys_sendto+0x3b8/0x508 [ 303.111231][ T28] __arm64_sys_sendto+0xd8/0xf8 [ 303.112193][ T28] invoke_syscall+0x98/0x2c0 [ 303.134051][ T28] el0_svc_common+0x138/0x258 [ 303.135116][ T28] do_el0_svc+0x64/0x218 [ 303.135983][ T28] el0_svc+0x58/0x168 [ 303.136776][ T28] el0t_64_sync_handler+0x84/0xf0 [ 303.137822][ T28] el0t_64_sync+0x18c/0x190 [ 303.138814][ T28] [ 303.138814][ T28] Showing all locks held in the system: [ 303.140421][ T28] 2 locks held by init/1: [ 303.141346][ T28] 1 lock held by rcu_tasks_kthre/12: [ 303.185606][ T28] #0: ffff800015ba50f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 303.187956][ T28] 1 lock held by rcu_tasks_trace/13: [ 303.189005][ T28] #0: ffff800015ba58f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 303.191319][ T28] 1 lock held by khungtaskd/28: [ 303.208549][ T28] #0: ffff800015ba4f20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 303.210639][ T28] 1 lock held by klogd/3899: [ 303.211548][ T28] 2 locks held by getty/4057: [ 303.212534][ T28] #0: ffff0000d61c2098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 303.214469][ T28] #1: ffff80001efe32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 303.216512][ T28] 3 locks held by kworker/0:3/4342: [ 303.217791][ T28] #0: ffff0000d5b3bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 303.220076][ T28] #1: ffff800021377c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 303.257695][ T28] #2: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.259666][ T28] 4 locks held by kworker/u4:9/4384: [ 303.260725][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 303.267068][ T28] #1: ffff800021547c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 303.269264][ T28] #2: ffff800017fe6150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 303.271344][ T28] #3: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.292382][ T28] 3 locks held by kworker/u4:12/4452: [ 303.293510][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 303.295724][ T28] #1: ffff800021817c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 303.297811][ T28] #2: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.299505][ T28] 3 locks held by kworker/u4:15/4601: [ 303.300571][ T28] #0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 303.324936][ T28] #1: ffff800021837c20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 303.327075][ T28] #2: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.328781][ T28] 3 locks held by kworker/1:15/5594: [ 303.329864][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 303.331964][ T28] #1: ffff800023df7c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 303.366025][ T28] #2: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.367825][ T28] 3 locks held by kworker/1:16/5595: [ 303.368803][ T28] #0: ffff0000d5b3bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 303.371083][ T28] #1: ffff800022507c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 303.391975][ T28] #2: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.393976][ T28] 1 lock held by syz.4.427/5998: [ 303.394947][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.396593][ T28] 1 lock held by syz-executor/6117: [ 303.397612][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.399551][ T28] 3 locks held by syz.0.475/6158: [ 303.400540][ T28] #0: ffff80001804cdb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 303.423264][ T28] #1: ffff80001804cc68 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 303.425278][ T28] #2: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 303.427017][ T28] 2 locks held by syz.3.482/6182: [ 303.428039][ T28] #0: ffff80001804cdb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 303.429792][ T28] #1: ffff80001804cc68 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 303.431605][ T28] 2 locks held by syz.3.482/6183: [ 303.462631][ T28] #0: ffff80001804cdb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 303.464440][ T28] #1: ffff80001804cc68 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 303.466258][ T28] 2 locks held by syz.2.483/6186: [ 303.467301][ T28] #0: ffff80001804cdb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 303.468953][ T28] #1: ffff80001804cc68 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 303.470800][ T28] 1 lock held by syz-executor/6222: [ 303.471851][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.493498][ T28] 1 lock held by syz-executor/6229: [ 303.494700][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.496594][ T28] 1 lock held by syz-executor/6234: [ 303.497609][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.499524][ T28] 2 locks held by syz.1.526/6305: [ 303.500487][ T28] #0: ffff80001804cdb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 303.502146][ T28] #1: ffff80001804cc68 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 303.530231][ T28] 1 lock held by syz.1.526/6306: [ 303.531328][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.533303][ T28] 1 lock held by syz.1.526/6310: [ 303.534244][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.536173][ T28] 1 lock held by syz-executor/6312: [ 303.537203][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.539105][ T28] 1 lock held by syz-executor/6322: [ 303.540225][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.578892][ T28] 1 lock held by syz-executor/6330: [ 303.580029][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.581933][ T28] 1 lock held by syz-executor/6333: [ 303.590387][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.592524][ T28] 1 lock held by syz-executor/6335: [ 303.593542][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.595557][ T28] 1 lock held by syz-executor/6341: [ 303.596561][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.598534][ T28] 1 lock held by syz-executor/6347: [ 303.599632][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.601708][ T28] 1 lock held by syz-executor/6355: [ 303.635026][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.637102][ T28] 1 lock held by syz-executor/6358: [ 303.638387][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.640373][ T28] 1 lock held by syz-executor/6360: [ 303.641469][ T28] #0: ffff800017ff1f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 303.643568][ T28] [ 303.644070][ T28] ============================================= [ 303.644070][ T28] [ 303.645894][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 303.647242][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 303.648851][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 303.650944][ T28] Call trace: [ 303.651616][ T28] dump_backtrace+0x1c8/0x1f4 [ 303.652675][ T28] show_stack+0x2c/0x3c [ 303.653668][ T28] dump_stack_lvl+0x108/0x170 [ 303.654778][ T28] dump_stack+0x1c/0x58 [ 303.655846][ T28] panic+0x300/0x804 [ 303.656772][ T28] hung_task_panic+0x0/0x2c [ 303.657710][ T28] kthread+0x250/0x2d8 [ 303.658710][ T28] ret_from_fork+0x10/0x20 [ 303.659685][ T28] SMP: stopping secondary CPUs [ 303.660715][ T28] Kernel Offset: disabled [ 303.661903][ T28] CPU features: 0x080000,02070084,26017203 [ 303.663269][ T28] Memory Limit: none [ 304.194327][ T28] pstore: crypto_comp_compress failed, ret = -22! [ 304.227255][ T28] pstore: crypto_comp_compress failed, ret = -22! [ 304.294373][ T28] Rebooting in 86400 seconds..