last executing test programs: 22.703638628s ago: executing program 2 (id=1255): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x7fffffff) 22.702208671s ago: executing program 2 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x128, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x80, 0x0, '#\xf2\xf0\xc4\"\xe3\xb11\xf1@\xdb\xab\xbbj\xe0\xca\xba\xa6s\x9d<\x99=oV\xfavL\x0e\xcb\xf6\x9e\xa3+N\xbfL\x019\bdk\xc1\xe3\x9e\xa6\xd9\xa6\xe2\x13\xe1\x1aD\x900~U\xc5\xb8\xac\xc6:54\x8a\xc8_\x92\xb4*_\xfb\x8c\xfa\xda2\xc8`4\xaemU\x16\x13\xbcs\xbdW\x8c\'\xed\xe9\x1fA;\xf5\x88r0\x9c\xbe2C\x9bgL\x16\x03?9Q\x16\x96\xd7\xa4\xbe\n>}\xb6\x93\xb8!\xc9\xe84K\x16'}}]}, 0x0, 0x0}) getdents64(r2, 0x0, 0x4100) 22.675917083s ago: executing program 2 (id=1262): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="ff", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)='O', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000180)=0x8) 22.475076108s ago: executing program 2 (id=1267): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0xffffffffffffffff}], 0x1, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 22.318870182s ago: executing program 2 (id=1270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x8002, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x9bb0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22.087751627s ago: executing program 2 (id=1273): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) clock_getres(0x0, 0x0) 20.170613334s ago: executing program 3 (id=1292): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x800, 0x0, 0x0) pwrite64(r0, &(0x7f0000000240)="b9", 0xfffffde5, 0x600000600) 19.774908611s ago: executing program 3 (id=1297): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/116, 0x74}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 18.917599048s ago: executing program 3 (id=1299): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000540)=0x12, 0x4) 18.708557751s ago: executing program 3 (id=1302): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0, 0xfc, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801701) 16.216801112s ago: executing program 3 (id=1318): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r5, r6, r1], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000200)={0x0, r8, r1}) 14.633502023s ago: executing program 3 (id=1329): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 2.967103132s ago: executing program 1 (id=1387): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffd}) 2.712902177s ago: executing program 0 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x382d2}, @IFLA_TXQLEN={0x8}]}, 0x30}}, 0x0) 2.350104602s ago: executing program 0 (id=1392): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.173240068s ago: executing program 0 (id=1394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0) 2.068359091s ago: executing program 4 (id=1395): r0 = syz_io_uring_setup(0x5bd9, &(0x7f00000001c0)={0x0, 0x0, 0x3e41}, &(0x7f0000ffb000), &(0x7f0000fff000)) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 2.019038529s ago: executing program 1 (id=1396): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x200818, &(0x7f0000005640), 0x1, 0x55a3, &(0x7f0000005680)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0x1f}) 2.009442812s ago: executing program 0 (id=1397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000006baeac4d610d205c88a800008100000008060001080006040000aaaaaaaaaaaaac1414bbaaaaaaaaaaaaac1414bb2f805b0aef18962891f3ba404ca083a8c7b3d26959ab90b6287ce38fe14262737f6f5bbee5"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.857083394s ago: executing program 4 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) 1.728483042s ago: executing program 4 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0}) 1.70147536s ago: executing program 0 (id=1400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x382d2}, @IFLA_TXQLEN={0x8}]}, 0x30}}, 0x0) 1.431378495s ago: executing program 4 (id=1401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) close_range(r0, 0xffffffffffffffff, 0x0) 1.311115727s ago: executing program 4 (id=1402): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./bus\x00', r1, &(0x7f0000000400)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000380)='./bus\x00', r0, &(0x7f0000000400)='./file1\x00', 0x2) 926.243844ms ago: executing program 1 (id=1403): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9c, &(0x7f0000000000), &(0x7f0000000080)=0x4) 287.140051ms ago: executing program 1 (id=1404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000300)=@framed={{}, [@btf_id]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 221.989052ms ago: executing program 0 (id=1405): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffd}) 154.924146ms ago: executing program 1 (id=1406): r0 = syz_io_uring_setup(0x5bd9, &(0x7f00000001c0)={0x0, 0x0, 0x3e41}, &(0x7f0000ffb000), &(0x7f0000fff000)) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 33.339005ms ago: executing program 4 (id=1407): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1de0, &(0x7f00000003c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x16, 0x20000002, r2) 0s ago: executing program 1 (id=1408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x2882) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000180)={0x18, 0x0, 0x0, {0xffffffa7}}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0xfffe, @loopback}}}, 0x80) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40186f40, 0x20000502) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESTART(r3, 0x125f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) syz_io_uring_setup(0x676a, &(0x7f0000000000)={0x0, 0x91a6, 0x0, 0x2, 0x390, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100)) kernel console output (not intermixed with test programs): 5 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.589" name="/root/syzkaller.dvWrfI/131/file0/control" dev="loop4" ino=125 res=1 errno=0 [ 198.918331][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.004426][ T6563] bcachefs (loop0): shutting down [ 199.017252][ T6563] bcachefs (loop0): going read-only [ 199.027314][ T6563] bcachefs (loop0): finished waiting for writes to stop [ 199.048976][ T6563] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 199.090308][ T6563] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 199.105240][ T6563] bcachefs (loop0): shutdown complete, journal seq 14 [ 199.113393][ T6563] bcachefs (loop0): marking filesystem clean [ 199.157201][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.379521][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 199.403545][ T7249] Cannot find add_set index 0 as target [ 199.425411][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 199.468938][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.524372][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.566903][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.587876][ T25] usb 3-1: config 0 descriptor?? [ 199.605025][ T7236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.239111][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 200.296851][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x7 [ 200.336264][ T25] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 200.434833][ T25] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 201.430474][ T7262] loop1: detected capacity change from 0 to 32768 [ 201.497348][ T7262] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.576284][ T7279] loop3: detected capacity change from 0 to 128 [ 201.585558][ T7279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 201.609207][ T7279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.651554][ T7262] XFS (loop1): Ending clean mount [ 201.702008][ T29] audit: type=1804 audit(1719392326.024:116): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.603" name="/root/syzkaller.MgxFcJ/25/file0/control" dev="loop3" ino=125 res=1 errno=0 [ 201.704611][ T7262] XFS (loop1): Quotacheck needed: Please wait. [ 201.818379][ T25] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 201.917357][ T7262] XFS (loop1): Quotacheck: Done. [ 201.928878][ T5095] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 201.938658][ T5095] Bluetooth: hci1: Injecting HCI hardware error event [ 201.948067][ T5088] Bluetooth: hci1: hardware error 0x00 [ 202.082919][ T7289] 9pnet: Could not find request transport: 0xffffffffffffffff0000000000000000000000000000000000000000 [ 202.141651][ T7293] netlink: 'syz.4.609': attribute type 5 has an invalid length. [ 202.221743][ T6778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.646815][ T7299] Cannot find add_set index 0 as target [ 202.723357][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.615'. [ 202.748203][ T5138] usb 3-1: USB disconnect, device number 6 [ 203.303748][ T7324] loop1: detected capacity change from 0 to 1024 [ 203.509197][ T7325] hfsplus: found bad thread record in catalog [ 203.730965][ T7325] overlay: filesystem on ./bus not supported [ 203.835360][ T7332] loop3: detected capacity change from 0 to 512 [ 203.899114][ T7332] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 203.908312][ T7332] EXT4-fs (loop3): 1 truncate cleaned up [ 203.918758][ T7332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.007406][ T5088] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 204.227793][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.392917][ T7339] loop2: detected capacity change from 0 to 64 [ 205.030886][ T7330] loop4: detected capacity change from 0 to 40427 [ 205.055115][ T7330] F2FS-fs (loop4): invalid crc value [ 205.120443][ T7330] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.341920][ T7330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 205.499336][ T5083] syz-executor: attempt to access beyond end of device [ 205.499336][ T5083] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.552947][ T5083] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 205.661964][ T12] hfsplus: b-tree write err: -5, ino 4 [ 205.809382][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.632'. [ 205.847672][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 205.974203][ T7347] loop2: detected capacity change from 0 to 32768 [ 206.047795][ T7347] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.627 (7347) [ 206.165159][ T7347] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 206.210096][ T7347] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 206.234710][ T7347] BTRFS info (device loop2): using free-space-tree [ 207.971645][ T7406] loop4: detected capacity change from 0 to 64 [ 208.023867][ T5085] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 208.398234][ T7407] loop1: detected capacity change from 0 to 1024 [ 208.403915][ T7366] loop3: detected capacity change from 0 to 40427 [ 208.515587][ T7366] F2FS-fs (loop3): invalid crc value [ 208.577471][ T7366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.605938][ T7421] loop4: detected capacity change from 0 to 1024 [ 208.800777][ T7428] loop2: detected capacity change from 0 to 128 [ 208.862243][ T7428] hpfs: bad mount options. [ 208.865553][ T7429] hfsplus: found bad thread record in catalog [ 208.914546][ T7366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.929278][ T5135] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.027914][ T29] audit: type=1800 audit(1719392333.354:117): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.633" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 209.036274][ T7429] overlay: filesystem on ./bus not supported [ 209.216311][ T7422] f2fs_ckpt-7:3: attempt to access beyond end of device [ 209.216311][ T7422] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.290970][ T7422] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 209.912087][ T7454] loop2: detected capacity change from 0 to 21 [ 209.968306][ T7454] jffs2: rp_size unrepresentable [ 210.268850][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.280522][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.291395][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.318022][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.326918][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.334608][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.345845][ T7457] loop1: detected capacity change from 0 to 1024 [ 210.557294][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.824751][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 210.856743][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.929644][ T7470] sctp: [Deprecated]: syz.3.655 (pid 7470) Use of int in max_burst socket option. [ 210.929644][ T7470] Use struct sctp_assoc_value instead [ 210.929841][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.929966][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.097972][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.176230][ T45] hub 3-1:4.0: USB hub found [ 211.375455][ T7460] chnl_net:caif_netlink_parms(): no params data found [ 211.379483][ T45] hub 3-1:4.0: 2 ports detected [ 211.582659][ T45] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 211.613230][ T45] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 211.692120][ T45] usb 3-1: USB disconnect, device number 7 [ 211.714972][ T12] hfsplus: b-tree write err: -5, ino 4 [ 211.760624][ T7486] loop1: detected capacity change from 0 to 2048 [ 211.790809][ T7486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.830748][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.862667][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.891490][ T7460] bridge_slave_0: entered allmulticast mode [ 211.906025][ T7460] bridge_slave_0: entered promiscuous mode [ 211.962708][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.005413][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.023896][ T7460] bridge_slave_1: entered allmulticast mode [ 212.041295][ T7460] bridge_slave_1: entered promiscuous mode [ 212.147986][ T7478] loop3: detected capacity change from 0 to 32768 [ 212.214507][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.263398][ T7500] loop2: detected capacity change from 0 to 128 [ 212.318769][ T7500] hpfs: bad mount options. [ 212.330017][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.408381][ T5088] Bluetooth: hci5: command tx timeout [ 212.411481][ T7478] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 212.468607][ T7478] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 212.538579][ T7460] team0: Port device team_slave_0 added [ 212.591151][ T7460] team0: Port device team_slave_1 added [ 212.739139][ T7513] loop4: detected capacity change from 0 to 256 [ 212.765125][ T7515] loop1: detected capacity change from 0 to 256 [ 212.802261][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.830680][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.902250][ T7460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.957178][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.985141][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.093562][ T7460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.978316][ T7520] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 214.302616][ T7460] hsr_slave_0: entered promiscuous mode [ 214.343993][ T7460] hsr_slave_1: entered promiscuous mode [ 214.405956][ T7460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.431134][ T7460] Cannot create hsr debugfs directory [ 214.453000][ T7511] loop2: detected capacity change from 0 to 32768 [ 214.487895][ T5088] Bluetooth: hci5: command tx timeout [ 214.501172][ T7511] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.669 (7511) [ 214.541999][ T7511] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 214.564575][ T7511] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 214.587106][ T7511] BTRFS info (device loop2): using free-space-tree [ 214.633815][ T7542] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [SR]L3 index 0 [ 214.785242][ T7561] loop3: detected capacity change from 0 to 256 [ 214.938268][ T29] audit: type=1804 audit(1719392339.254:118): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.680" name="/root/syzkaller.dvWrfI/154/bus" dev="sda1" ino=1983 res=1 errno=0 [ 215.283678][ T5085] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 215.425297][ T7460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.756497][ T7460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.842741][ T7587] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [SR]L3 index 0 [ 215.972493][ T7460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.215026][ T7460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.435650][ T7606] loop2: detected capacity change from 0 to 4096 [ 216.461709][ T7606] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 216.517658][ T7606] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 216.567280][ T5088] Bluetooth: hci5: command tx timeout [ 216.695924][ T7460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.726570][ T7460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.754437][ T7606] ntfs3: loop2: ino=21, "bus" attr_set_size [ 216.779614][ T7460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.855066][ T7460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.865569][ T7625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.701'. [ 216.883287][ T7625] netlink: 43 bytes leftover after parsing attributes in process `syz.3.701'. [ 216.893200][ T12] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 216.955728][ T7625] netlink: 'syz.3.701': attribute type 5 has an invalid length. [ 217.016384][ T7625] netlink: 43 bytes leftover after parsing attributes in process `syz.3.701'. [ 217.328134][ T7637] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 217.443728][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.540964][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.610212][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.617415][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.665738][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.672909][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.657149][ T5088] Bluetooth: hci5: command tx timeout [ 220.337005][ C0] sched: RT throttling activated [ 222.349237][ T29] audit: type=1800 audit(1719392346.674:119): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.700" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 223.589948][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.644685][ T7673] loop2: detected capacity change from 0 to 256 [ 223.957768][ T29] audit: type=1804 audit(1719392348.284:120): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.720" name="/root/syzkaller.MgxFcJ/52/bus" dev="sda1" ino=1985 res=1 errno=0 [ 224.061169][ T7460] veth0_vlan: entered promiscuous mode [ 224.827684][ T7460] veth1_vlan: entered promiscuous mode [ 224.971000][ T7460] veth0_macvtap: entered promiscuous mode [ 225.012791][ T7460] veth1_macvtap: entered promiscuous mode [ 225.071100][ T7685] netlink: 'syz.2.721': attribute type 3 has an invalid length. [ 225.089792][ T7685] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 225.101547][ T7685] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.721'. [ 225.149459][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.187841][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.198015][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.229542][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.249156][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.313101][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.346227][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.363025][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.395130][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.412953][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.425640][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.526249][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.590701][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.624778][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.639223][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.665951][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.682812][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.720803][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.785513][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.856552][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.888847][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.932075][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.969527][ T7460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.009800][ T7460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.042341][ T7460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.081654][ T7460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.348444][ T7705] ptrace attach of "./syz-executor exec"[6375] was attempted by "./syz-executor exec"[7705] [ 226.378578][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.410200][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.487998][ T7686] loop1: detected capacity change from 0 to 32768 [ 226.514013][ T7686] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.722 (7686) [ 226.674065][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.721062][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.824623][ T7686] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.865921][ T7686] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 226.906306][ T7686] BTRFS info (device loop1): using free-space-tree [ 227.625739][ T7752] loop3: detected capacity change from 0 to 64 [ 227.808501][ T6778] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.136146][ T7757] loop2: detected capacity change from 0 to 32768 [ 228.182063][ T5095] Bluetooth: hci6: sending frame failed (-49) [ 228.190478][ T5088] Bluetooth: hci6: Entering manufacturer mode failed (-49) [ 228.325851][ T7757] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 228.335098][ T7757] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 228.858920][ T7769] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 228.870019][ T7769] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 229.265133][ T7773] loop1: detected capacity change from 0 to 1024 [ 229.773832][ T7776] hfsplus: found bad thread record in catalog [ 229.916467][ T7776] overlay: filesystem on ./bus not supported [ 230.446723][ T7781] loop2: detected capacity change from 0 to 32768 [ 230.477049][ T7781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.750 (7781) [ 230.498748][ T29] audit: type=1800 audit(1719392354.544:121): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.738" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 230.503778][ T7781] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.527858][ T7781] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 230.536548][ T7781] BTRFS info (device loop2): using free-space-tree [ 232.170625][ T5085] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.171001][ T7815] netlink: 'syz.2.752': attribute type 3 has an invalid length. [ 233.198616][ T7813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.757'. [ 233.216852][ T7815] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 233.263954][ T7815] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.752'. [ 233.280922][ T7816] loop4: detected capacity change from 0 to 128 [ 234.101907][ T7813] netlink: 43 bytes leftover after parsing attributes in process `syz.3.757'. [ 234.310994][ T7813] netlink: 'syz.3.757': attribute type 5 has an invalid length. [ 234.377917][ T7813] netlink: 43 bytes leftover after parsing attributes in process `syz.3.757'. [ 234.538093][ T6341] hfsplus: b-tree write err: -5, ino 4 [ 234.681296][ T7823] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 234.692060][ T7823] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 235.421263][ T7854] tc_dump_action: action bad kind [ 235.427853][ T7853] loop3: detected capacity change from 0 to 2048 [ 235.538085][ T7848] ɶƣ0GCTw: entered promiscuous mode [ 236.110278][ T7857] loop1: detected capacity change from 0 to 128 [ 236.857377][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 236.888998][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 237.265160][ T7882] loop3: detected capacity change from 0 to 2048 [ 237.534207][ T7882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.017415][ T7891] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 238.606068][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.855994][ T7874] loop1: detected capacity change from 0 to 32768 [ 238.888754][ T7904] loop2: detected capacity change from 0 to 2048 [ 238.959588][ T7874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.779 (7874) [ 239.183718][ T7874] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.411635][ T7913] loop3: detected capacity change from 0 to 1024 [ 239.419903][ T7913] EXT4-fs: Ignoring removed orlov option [ 239.547259][ T7913] EXT4-fs (loop3): Test dummy encryption mode enabled [ 239.558828][ T7913] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 239.675422][ T7913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.965927][ T7874] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 239.989624][ T7874] BTRFS info (device loop1): using free-space-tree [ 240.057891][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 240.093702][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 240.148366][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 240.219101][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 240.259969][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 240.291720][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 240.324870][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 240.365719][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 240.400478][ T7913] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 240.453915][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 240.454896][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 240.546584][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 240.579340][ T7938] ebt_among: dst integrity fail: 200 [ 240.621852][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 240.622647][ T7874] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 240.692285][ T7874] BTRFS error (device loop1): open_ctree failed [ 240.812983][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.979715][ T7902] loop4: detected capacity change from 0 to 32768 [ 241.147468][ T7902] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.374000][ T7902] XFS (loop4): Ending clean mount [ 241.464410][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 241.986196][ T5083] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.495872][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 242.663943][ T7981] loop2: detected capacity change from 0 to 512 [ 242.746088][ T7981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.781575][ T8003] loop4: detected capacity change from 0 to 64 [ 242.791734][ T7981] ext4 filesystem being mounted at /root/syzkaller.aMOswQ/182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.918651][ T7977] netlink: 84 bytes leftover after parsing attributes in process `syz.2.806'. [ 242.963057][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.806'. [ 243.290998][ T29] audit: type=1800 audit(1719392367.604:122): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.823" name="bus" dev="sda1" ino=1987 res=0 errno=0 [ 243.339387][ T5085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.473132][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'. [ 243.682274][ T8037] loop3: detected capacity change from 0 to 64 [ 243.691347][ T8034] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 243.799997][ T8034] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 243.955290][ T8041] loop4: detected capacity change from 0 to 2048 [ 244.039070][ T8046] loop3: detected capacity change from 0 to 2048 [ 244.055071][ T8041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.099245][ T8041] ext4 filesystem being mounted at /root/syzkaller.dvWrfI/184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.249511][ T8041] fscrypt (loop4, inode 13): Error -61 getting encryption context [ 244.321161][ T29] audit: type=1800 audit(1719392368.654:123): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.838" name="bus" dev="sda1" ino=1975 res=0 errno=0 [ 244.370663][ T8057] xt_cluster: you have exceeded the maximum number of cluster nodes (2147483647 > 32) [ 244.392375][ T5083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.870093][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 244.998221][ T8067] binder: 8066:8067 ioctl c0306201 200003c0 returned -14 [ 245.288509][ T8077] netlink: 'syz.1.847': attribute type 10 has an invalid length. [ 245.347646][ T8077] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 245.489300][ T5141] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.589216][ T8083] netlink: 830 bytes leftover after parsing attributes in process `syz.2.851'. [ 245.641716][ T29] audit: type=1326 audit(1719392369.974:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x0 [ 245.659135][ T8087] loop4: detected capacity change from 0 to 2048 [ 245.708245][ T5141] usb 4-1: Using ep0 maxpacket: 16 [ 245.717189][ T5141] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 245.751349][ T5141] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 245.774186][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.818280][ T5141] usb 4-1: Product: syz [ 245.822533][ T5141] usb 4-1: Manufacturer: syz [ 245.844272][ T5141] usb 4-1: SerialNumber: syz [ 245.861392][ T5141] usb 4-1: config 0 descriptor?? [ 245.880751][ T5141] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 245.890108][ T5141] usb 4-1: Detected FT232R [ 246.096680][ T5141] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 246.353673][ T5141] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 246.372448][ T8098] binder: 8097:8098 ioctl c0306201 200003c0 returned -14 [ 246.584363][ T5141] usb 4-1: USB disconnect, device number 4 [ 246.657305][ T5141] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 246.696007][ T5141] ftdi_sio 4-1:0.0: device disconnected [ 246.976716][ T8111] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 247.014653][ T8114] loop2: detected capacity change from 0 to 512 [ 247.065641][ T8114] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 247.144110][ T8114] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 247.168442][ T8114] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 247.208456][ T8114] System zones: 0-2, 18-18, 34-35 [ 247.215249][ T8114] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.359617][ T5085] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 247.545535][ T8117] loop4: detected capacity change from 0 to 8192 [ 247.580470][ T8117] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "c" [ 247.690960][ T8126] loop2: detected capacity change from 0 to 2048 [ 247.766470][ T29] audit: type=1326 audit(1719392372.094:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8127 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5231575ae9 code=0x7ffc0000 [ 247.795068][ T29] audit: type=1326 audit(1719392372.124:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8127 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5231575ae9 code=0x7ffc0000 [ 247.854087][ T29] audit: type=1326 audit(1719392372.124:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8127 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5231575ae9 code=0x7ffc0000 [ 247.999467][ T29] audit: type=1326 audit(1719392372.124:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8127 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5231575ae9 code=0x7ffc0000 [ 248.078353][ T29] audit: type=1326 audit(1719392372.174:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8127 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5231575ae9 code=0x7ffc0000 [ 248.116774][ T29] audit: type=1326 audit(1719392372.174:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8127 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5231575ae9 code=0x7ffc0000 [ 248.156315][ T29] audit: type=1326 audit(1719392372.214:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8127 comm="syz.0.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f523156cb67 code=0x7ffc0000 [ 248.265188][ T8141] syz.4.875 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 248.624519][ T8152] loop4: detected capacity change from 0 to 1764 [ 250.195349][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 250.195372][ T29] audit: type=1326 audit(1719392374.524:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 250.316423][ T29] audit: type=1326 audit(1719392374.524:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 250.414227][ T29] audit: type=1326 audit(1719392374.564:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 250.436531][ T29] audit: type=1326 audit(1719392374.564:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 250.463714][ T29] audit: type=1326 audit(1719392374.564:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 250.639745][ T5088] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 250.824364][ T29] audit: type=1326 audit(1719392374.564:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 251.237177][ T29] audit: type=1326 audit(1719392374.564:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 251.343715][ T29] audit: type=1326 audit(1719392374.564:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 251.367125][ T29] audit: type=1326 audit(1719392374.564:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 251.397319][ T29] audit: type=1326 audit(1719392374.564:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb024d75ae9 code=0x7ffc0000 [ 251.449713][ T8198] loop4: detected capacity change from 0 to 1764 [ 252.202282][ T8193] loop2: detected capacity change from 0 to 8192 [ 252.256717][ T8193] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "c" [ 252.456949][ T8211] netlink: 'syz.0.903': attribute type 9 has an invalid length. [ 252.489450][ T8211] netlink: 173196 bytes leftover after parsing attributes in process `syz.0.903'. [ 252.639320][ T8217] loop3: detected capacity change from 0 to 8 [ 252.671253][ T8217] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 254.429531][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 254.563391][ T8235] veth1_macvtap: left promiscuous mode [ 254.633286][ T8235] macsec0: entered promiscuous mode [ 254.715652][ T8235] macsec0: entered allmulticast mode [ 254.739584][ T5088] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 254.767102][ T5088] Bluetooth: hci5: Injecting HCI hardware error event [ 254.826740][ T5088] Bluetooth: hci5: hardware error 0x00 [ 254.887591][ T8225] veth1_macvtap: entered promiscuous mode [ 254.988084][ T8225] veth1_macvtap: entered allmulticast mode [ 254.995894][ T8225] macsec0: left promiscuous mode [ 255.207158][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 255.207179][ T29] audit: type=1326 audit(1719392379.534:299): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5231511539 code=0x7ffc0000 [ 255.347130][ T29] audit: type=1326 audit(1719392379.534:300): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f523156cb67 code=0x7ffc0000 [ 255.446207][ T8269] loop3: detected capacity change from 0 to 8 [ 255.953789][ T29] audit: type=1326 audit(1719392379.534:301): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5231511539 code=0x7ffc0000 [ 256.160668][ T8262] loop4: detected capacity change from 0 to 4096 [ 256.168011][ T8269] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 256.193822][ T29] audit: type=1326 audit(1719392379.534:302): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f523156cb67 code=0x7ffc0000 [ 256.194253][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.215519][ T29] audit: type=1326 audit(1719392379.534:303): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5231511539 code=0x7ffc0000 [ 256.223855][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.243242][ T29] audit: type=1326 audit(1719392379.534:304): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f523156cb67 code=0x7ffc0000 [ 256.271450][ T29] audit: type=1326 audit(1719392379.534:305): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5231511539 code=0x7ffc0000 [ 256.297461][ T8262] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 256.308058][ T29] audit: type=1326 audit(1719392379.534:306): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f523156cb67 code=0x7ffc0000 [ 256.338975][ T29] audit: type=1326 audit(1719392379.534:307): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5231511539 code=0x7ffc0000 [ 256.491415][ T29] audit: type=1326 audit(1719392379.534:308): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f523156cb67 code=0x7ffc0000 [ 256.574742][ T8262] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 256.693025][ T8285] nbd: must specify at least one socket [ 256.754415][ T5095] Bluetooth: hci0: link tx timeout [ 256.761149][ T5095] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 256.778435][ T4480] Bluetooth: hci0: link tx timeout [ 256.790730][ T4480] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 256.877090][ T5141] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 256.898489][ T8287] loop3: detected capacity change from 0 to 4096 [ 256.949111][ T63] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 256.955093][ T8287] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.967225][ T5088] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 256.969584][ T8287] ntfs3: loop3: Failed to load $Extend (-22). [ 256.982373][ T8287] ntfs3: loop3: Failed to initialize $Extend. [ 257.107332][ T5141] usb 1-1: Using ep0 maxpacket: 16 [ 257.126395][ T5141] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 257.172916][ T5141] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 257.191681][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.224030][ T5141] usb 1-1: Product: syz [ 257.236683][ T5141] usb 1-1: Manufacturer: syz [ 257.251111][ T5141] usb 1-1: SerialNumber: syz [ 257.283052][ T5141] usb 1-1: config 0 descriptor?? [ 257.329300][ T5141] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 257.352100][ T5141] usb 1-1: Detected FT232R [ 257.411772][ T8292] loop1: detected capacity change from 0 to 8192 [ 257.556299][ T8304] loop3: detected capacity change from 0 to 256 [ 257.567950][ T5141] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 257.589455][ T8304] exfat: Deprecated parameter 'namecase' [ 257.595284][ T8304] exfat: Deprecated parameter 'utf8' [ 257.601301][ T8304] exfat: Deprecated parameter 'namecase' [ 257.623875][ T8304] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 257.792576][ T5141] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 257.902231][ T8319] loop2: detected capacity change from 0 to 2048 [ 257.954367][ T8322] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.028894][ T5141] usb 1-1: USB disconnect, device number 4 [ 258.063421][ T5141] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 258.094168][ T8321] loop3: detected capacity change from 0 to 4096 [ 258.105988][ T5141] ftdi_sio 1-1:0.0: device disconnected [ 258.146640][ T8321] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 258.160690][ T8326] nbd: must specify at least one socket [ 258.170062][ T8321] ntfs3: loop3: Failed to load $Extend (-22). [ 258.176286][ T8321] ntfs3: loop3: Failed to initialize $Extend. [ 258.291764][ T8322] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 258.327227][ T8322] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 258.361507][ T8322] Remounting filesystem read-only [ 258.368979][ T1038] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 258.417151][ T1038] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 258.438071][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.489419][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.511026][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.520590][ T1038] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 258.529872][ T1038] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 258.538374][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.551141][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.561054][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.572568][ T1038] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 258.587306][ T1038] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 258.595321][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.614910][ T8328] netlink: 830 bytes leftover after parsing attributes in process `syz.3.951'. [ 258.648570][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.671026][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.683088][ T1038] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 258.694595][ T1038] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 258.705432][ T1038] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 258.714138][ T1038] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 258.721773][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.733426][ T1038] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 258.740444][ T8330] can0: slcan on ptm0. [ 258.745518][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.755207][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.783515][ T1038] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 258.807497][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 258.818097][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.833157][ T1038] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 258.843845][ T8329] can0 (unregistered): slcan off ptm0. [ 258.854597][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.875865][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.908998][ T1038] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 258.916364][ T1038] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.966178][ T5085] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 258.976550][ T5085] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 258.989326][ T5085] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 258.997136][ T5085] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 259.004475][ T5085] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 259.021275][ T5085] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 259.035995][ T5085] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 259.047683][ T5085] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 259.055027][ T5085] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.091534][ T5085] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.115900][ T5085] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.133893][ T5085] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 259.143461][ T5085] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 259.151026][ T5085] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.166732][ T5085] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.175791][ T5085] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.261340][ T8334] loop4: detected capacity change from 0 to 8192 [ 259.305360][ T8340] xt_cluster: you have exceeded the maximum number of cluster nodes (2147483647 > 32) [ 259.799923][ T8352] syz.4.959 uses obsolete (PF_INET,SOCK_PACKET) [ 260.442032][ T8338] loop1: detected capacity change from 0 to 40427 [ 260.482058][ T8359] can0: slcan on ptm0. [ 260.508067][ T8338] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(1) blocks(1024) [ 260.536400][ T8338] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 260.555464][ T8338] F2FS-fs (loop1): Invalid uid value -1 [ 260.627477][ T8358] can0 (unregistered): slcan off ptm0. [ 261.017477][ T8367] nbd: must specify at least one socket [ 261.455210][ T8375] loop3: detected capacity change from 0 to 47 [ 261.728323][ T8341] loop2: detected capacity change from 0 to 32768 [ 261.827133][ T5092] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 261.861672][ T8388] loop4: detected capacity change from 0 to 256 [ 261.976560][ T8388] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x82619b74, utbl_chksum : 0xe619d30d) [ 262.049446][ T5092] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 262.051137][ T8341] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 262.076654][ T5092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.087859][ T8341] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 262.110436][ T5092] usb 4-1: config 0 descriptor?? [ 262.114457][ T8393] can0: slcan on ptm0. [ 262.134928][ T5092] ums-usbat 4-1:0.0: USB Mass Storage device detected [ 262.163599][ T5092] ums-usbat 4-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 262.174754][ T8341] bcachefs (loop2): alloc_read... done [ 262.183791][ T8341] bcachefs (loop2): stripes_read... done [ 262.192087][ T8341] bcachefs (loop2): snapshots_read... done [ 262.200730][ T8341] bcachefs (loop2): journal_replay... done [ 262.206895][ T8341] bcachefs (loop2): resume_logged_ops... done [ 262.215465][ T8341] bcachefs (loop2): going read-write [ 262.239475][ T8392] can0 (unregistered): slcan off ptm0. [ 262.267732][ T8341] bcachefs (loop2): done starting filesystem [ 263.101471][ T5085] bcachefs (loop2): shutting down [ 263.106552][ T5085] bcachefs (loop2): going read-only [ 263.138009][ T5085] bcachefs (loop2): finished waiting for writes to stop [ 263.170908][ T5085] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 263.193254][ T5085] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 263.248437][ T5085] bcachefs (loop2): shutdown complete, journal seq 9 [ 263.258438][ T5085] bcachefs (loop2): marking filesystem clean [ 263.437508][ T5085] bcachefs (loop2): shutdown complete [ 263.619541][ T8425] loop1: detected capacity change from 0 to 2048 [ 263.686938][ T8425] loop1: p1 < > p3 [ 263.735111][ T8425] loop1: p3 start 4284289 is beyond EOD, truncated [ 263.793085][ T8412] loop4: detected capacity change from 0 to 40427 [ 263.858564][ T8412] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(1) blocks(1024) [ 263.887219][ T8412] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 263.901753][ T8412] F2FS-fs (loop4): Invalid uid value -1 [ 264.102016][ T8429] can0: slcan on ptm0. [ 264.221178][ T8428] can0 (unregistered): slcan off ptm0. [ 264.364873][ T8435] tipc: Enabling of bearer rejected, failed to enable media [ 264.395514][ T8415] MINIX-fs: deleted inode referenced: 9 [ 264.995664][ T8460] can0: slcan on ptm0. [ 265.000858][ T8456] loop1: detected capacity change from 0 to 2048 [ 265.007698][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 265.058580][ T8456] loop1: p1 < > p3 [ 265.066738][ T8456] loop1: p3 start 4284289 is beyond EOD, truncated [ 265.082133][ T8459] can0 (unregistered): slcan off ptm0. [ 265.219811][ T45] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 265.259619][ T45] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 265.284750][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.457791][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.473717][ T8450] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 265.587433][ T45] usb 4-1: USB disconnect, device number 5 [ 266.181439][ T8478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1010'. [ 267.822163][ T8464] loop2: detected capacity change from 0 to 40427 [ 267.850740][ T8464] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(1) blocks(1024) [ 267.867042][ T8464] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 267.895083][ T8464] F2FS-fs (loop2): Invalid uid value -1 [ 267.922000][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 267.922021][ T29] audit: type=1804 audit(1719392392.254:410): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1017" name="/root/syzkaller.dvWrfI/228/bus" dev="sda1" ino=1953 res=1 errno=0 [ 268.043404][ T8499] loop3: detected capacity change from 0 to 47 [ 268.367249][ T5092] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 268.470809][ T45] usb 1-1: USB disconnect, device number 5 [ 268.571384][ T5092] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 268.615850][ T5092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.652242][ T5092] usb 4-1: config 0 descriptor?? [ 268.672227][ T5092] ums-usbat 4-1:0.0: USB Mass Storage device detected [ 268.715509][ T5092] ums-usbat 4-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 268.725283][ T8504] loop2: detected capacity change from 0 to 2048 [ 268.806181][ T8504] loop2: p2 < > p4 [ 268.825605][ T8504] loop2: p4 size 8192 extends beyond EOD, truncated [ 269.474613][ T8527] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1029'. [ 269.847216][ T5141] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 270.059435][ T5141] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 270.077072][ T8518] MINIX-fs: deleted inode referenced: 9 [ 270.248911][ T5141] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.259039][ T5141] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.268252][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.291844][ T8532] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 270.452528][ T8500] loop4: detected capacity change from 0 to 512 [ 270.469476][ T8500] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 270.520262][ T8500] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.1017: bad orphan inode 15 [ 270.552134][ T8500] ext4_test_bit(bit=14, block=18) = 1 [ 270.567471][ T8500] is_bad_inode(inode)=0 [ 270.571992][ T8500] NEXT_ORPHAN(inode)=1023 [ 270.576672][ T8500] max_ino=32 [ 270.580741][ T8500] i_nlink=0 [ 270.610975][ T8500] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.1017: corrupted xattr block 19: e_value size too large [ 270.632817][ T8500] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 270.648988][ T8500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.668502][ T8500] ext2 filesystem being mounted at /root/syzkaller.dvWrfI/228/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 272.205470][ T5092] usb 4-1: USB disconnect, device number 6 [ 272.654120][ T5083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.309142][ T25] usb 3-1: USB disconnect, device number 8 [ 273.421770][ T8586] loop2: detected capacity change from 0 to 8 [ 273.428927][ T8587] loop4: detected capacity change from 0 to 64 [ 273.478286][ T8586] squashfs image failed sanity check [ 273.557602][ T8590] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 273.751357][ T8589] loop3: detected capacity change from 0 to 4096 [ 274.576647][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 274.592427][ T5083] hfs: walked past end of dir [ 274.613326][ T8589] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 274.623148][ T5083] hfs: walked past end of dir [ 274.676608][ T8589] ntfs3: loop3: Failed to load $MFT (-22). [ 274.691253][ T8586] loop2: detected capacity change from 0 to 512 [ 274.720977][ T8586] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 274.763553][ T8586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 274.773959][ T8586] System zones: 0-1, 15-15, 18-18, 34-34 [ 274.781126][ T8586] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.809004][ T8586] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 274.837181][ T8586] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 274.887222][ T8586] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 274.962657][ T8586] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1048: bg 0: block 40: padding at end of block bitmap is not set [ 274.979469][ T8586] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 274.997106][ T8586] EXT4-fs (loop2): 1 truncate cleaned up [ 275.004228][ T8586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.263466][ T5085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.093476][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.290096][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.293995][ T8612] loop3: detected capacity change from 0 to 128 [ 276.335270][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 276.350147][ T29] audit: type=1800 audit(1719392400.684:411): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1060" name="file1" dev="loop3" ino=1048665 res=0 errno=0 [ 276.373678][ T8610] loop2: detected capacity change from 0 to 512 [ 276.378235][ T8612] FAT-fs (loop3): error, corrupted file size (i_pos 196, 617103980) [ 276.410234][ T8612] FAT-fs (loop3): Filesystem has been set read-only [ 276.434227][ T8610] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1059: bg 0: block 127: padding at end of block bitmap is not set [ 276.480238][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.487395][ T8617] loop1: detected capacity change from 0 to 2048 [ 276.514362][ T8610] EXT4-fs (loop2): Remounting filesystem read-only [ 276.539135][ T8610] EXT4-fs (loop2): 1 truncate cleaned up [ 276.545547][ T8617] loop1: p2 < > p4 [ 276.546347][ T8610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.562648][ T8617] loop1: p4 size 8192 extends beyond EOD, truncated [ 276.661958][ T5085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.668819][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.884932][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.917479][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.930363][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.948000][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.971930][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.980408][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.007655][ T51] bridge_slave_1: left allmulticast mode [ 277.013410][ T51] bridge_slave_1: left promiscuous mode [ 277.019365][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.036009][ T51] bridge_slave_0: left allmulticast mode [ 277.042213][ T51] bridge_slave_0: left promiscuous mode [ 277.048850][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.070635][ T8626] loop2: detected capacity change from 0 to 4096 [ 277.099972][ T8626] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 277.144407][ T8626] ntfs3: loop2: Failed to load $MFT (-22). [ 277.359444][ T8641] Device name cannot be null; rc = [-22] [ 277.836927][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.858324][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.877987][ T51] bond0 (unregistering): Released all slaves [ 278.071174][ T29] audit: type=1400 audit(1719392402.404:412): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8645 comm="syz.2.1074" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 278.206309][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 278.245377][ T8650] loop2: detected capacity change from 0 to 512 [ 278.345828][ T8650] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1075: bg 0: block 127: padding at end of block bitmap is not set [ 278.455786][ T8650] EXT4-fs (loop2): Remounting filesystem read-only [ 278.465931][ T8650] EXT4-fs (loop2): 1 truncate cleaned up [ 278.473380][ T8650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.580599][ T5085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.691410][ T51] hsr_slave_0: left promiscuous mode [ 278.703235][ T51] hsr_slave_1: left promiscuous mode [ 278.712366][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.721081][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.735029][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.746939][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.806635][ T51] veth1_macvtap: left promiscuous mode [ 278.812324][ T51] veth0_macvtap: left promiscuous mode [ 278.825159][ T51] veth1_vlan: left promiscuous mode [ 278.830707][ T51] veth0_vlan: left promiscuous mode [ 279.115798][ T5088] Bluetooth: hci4: command tx timeout [ 279.488786][ T29] audit: type=1800 audit(1719392403.804:413): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1081" name="file1" dev="sda1" ino=1980 res=0 errno=0 [ 280.016781][ T8663] loop2: detected capacity change from 0 to 40427 [ 280.502281][ T8671] input: syz0 as /devices/virtual/input/input12 [ 280.851993][ T51] team0 (unregistering): Port device team_slave_1 removed [ 280.913505][ T51] team0 (unregistering): Port device team_slave_0 removed [ 281.129220][ T5088] Bluetooth: hci4: command tx timeout [ 281.739501][ T8627] chnl_net:caif_netlink_parms(): no params data found [ 281.906080][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 281.975523][ T8687] loop1: detected capacity change from 0 to 512 [ 282.065641][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.108122][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.157446][ T8627] bridge_slave_0: entered allmulticast mode [ 282.196479][ T8627] bridge_slave_0: entered promiscuous mode [ 282.206793][ T8687] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1087: bg 0: block 127: padding at end of block bitmap is not set [ 282.350534][ T8687] EXT4-fs (loop1): Remounting filesystem read-only [ 282.417064][ T8687] EXT4-fs (loop1): 1 truncate cleaned up [ 282.432264][ T8687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.544644][ T8700] loop2: detected capacity change from 0 to 1024 [ 282.636473][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.715031][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.748971][ T8700] EXT4-fs: Ignoring removed oldalloc option [ 282.992404][ T8700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.007554][ T8627] bridge_slave_1: entered allmulticast mode [ 283.019981][ T8627] bridge_slave_1: entered promiscuous mode [ 283.032917][ T8700] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 283.083099][ T6778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.207793][ T5088] Bluetooth: hci4: command tx timeout [ 283.222700][ T8703] loop3: detected capacity change from 0 to 512 [ 283.229264][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.243261][ T8703] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.269042][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.282970][ T8703] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 283.319597][ T8707] loop1: detected capacity change from 0 to 64 [ 283.320133][ T8703] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 283.375035][ T8627] team0: Port device team_slave_0 added [ 283.388266][ T8703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 283.399663][ T8627] team0: Port device team_slave_1 added [ 283.407305][ T8703] System zones: 0-2, 18-18, 34-34 [ 283.430884][ T8703] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 283.459920][ T8703] EXT4-fs (loop3): 1 truncate cleaned up [ 283.469543][ T8703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.501204][ T6778] hfs: walked past end of dir [ 283.519185][ T6778] hfs: walked past end of dir [ 283.527114][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.549032][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.616667][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.782550][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.811480][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.837435][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.878647][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.226000][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.242015][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.258657][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.267272][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.275592][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.285551][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.472313][ T8627] hsr_slave_0: entered promiscuous mode [ 284.515458][ T8627] hsr_slave_1: entered promiscuous mode [ 284.557310][ T8627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.565009][ T8627] Cannot create hsr debugfs directory [ 284.898270][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.044419][ T5088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.056297][ T5088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.087506][ T5088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.099355][ T8726] loop2: detected capacity change from 0 to 128 [ 285.113782][ T5088] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.121064][ T8726] FAT-fs (loop2): Directory bread(block 11554) failed [ 285.137425][ T5088] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.152268][ T5088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.152324][ T8726] FAT-fs (loop2): Directory bread(block 11555) failed [ 285.175904][ T8726] FAT-fs (loop2): Directory bread(block 11556) failed [ 285.213369][ T8726] FAT-fs (loop2): Directory bread(block 11557) failed [ 285.220465][ T8726] FAT-fs (loop2): Directory bread(block 11558) failed [ 285.223155][ T1038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.227626][ T8726] FAT-fs (loop2): Directory bread(block 11559) failed [ 285.245176][ T8726] FAT-fs (loop2): Directory bread(block 11560) failed [ 285.252251][ T8726] FAT-fs (loop2): Directory bread(block 11561) failed [ 285.261516][ T8726] FAT-fs (loop2): Directory bread(block 11562) failed [ 285.268527][ T8726] FAT-fs (loop2): Directory bread(block 11563) failed [ 285.287196][ T5095] Bluetooth: hci4: command tx timeout [ 285.319909][ T8726] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 286.304643][ T1038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.332698][ T5095] Bluetooth: hci1: command tx timeout [ 286.449142][ T1038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.621510][ T1038] bond0: (slave netdevsim0): Releasing backup interface [ 286.660964][ T1038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.812056][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 287.004961][ T8741] input: syz0 as /devices/virtual/input/input13 [ 287.116790][ T1038] bridge_slave_1: left allmulticast mode [ 287.127719][ T1038] bridge_slave_1: left promiscuous mode [ 287.137462][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.150008][ T1038] bridge_slave_0: left allmulticast mode [ 287.155716][ T1038] bridge_slave_0: left promiscuous mode [ 287.177436][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.306737][ T5095] Bluetooth: hci6: command tx timeout [ 287.957629][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.987588][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.016205][ T1038] bond0 (unregistering): Released all slaves [ 288.202861][ T8627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.214780][ T8627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.241120][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.257769][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.265113][ T8712] bridge_slave_0: entered allmulticast mode [ 288.281413][ T8712] bridge_slave_0: entered promiscuous mode [ 288.301763][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.309203][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.316675][ T8712] bridge_slave_1: entered allmulticast mode [ 288.324839][ T8712] bridge_slave_1: entered promiscuous mode [ 288.383548][ T8627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.395226][ T8627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.407219][ T5095] Bluetooth: hci1: command tx timeout [ 288.514686][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.571984][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 288.601962][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.799719][ T8712] team0: Port device team_slave_0 added [ 288.803367][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 288.811939][ T8712] team0: Port device team_slave_1 added [ 288.834951][ T1038] hsr_slave_0: left promiscuous mode [ 288.843129][ T1038] hsr_slave_1: left promiscuous mode [ 288.849613][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.857286][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.871668][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.879258][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.909647][ T1038] veth1_macvtap: left promiscuous mode [ 288.915258][ T1038] veth0_macvtap: left promiscuous mode [ 288.921273][ T1038] veth1_vlan: left promiscuous mode [ 288.926670][ T1038] veth0_vlan: left promiscuous mode [ 288.932268][ T8769] loop3: detected capacity change from 0 to 256 [ 289.007855][ T29] audit: type=1800 audit(1719392413.334:414): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1112" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 289.373949][ T5095] Bluetooth: hci6: command tx timeout [ 289.703571][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 289.782256][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 290.418986][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.427373][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.446549][ T8721] bridge_slave_0: entered allmulticast mode [ 290.453877][ T8721] bridge_slave_0: entered promiscuous mode [ 290.463808][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.471053][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.478645][ T8721] bridge_slave_1: entered allmulticast mode [ 290.485739][ T8721] bridge_slave_1: entered promiscuous mode [ 290.491727][ T5095] Bluetooth: hci1: command tx timeout [ 290.520579][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.527739][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.554030][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.568160][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.575124][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.603415][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.674227][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.688440][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.834916][ T8721] team0: Port device team_slave_0 added [ 290.854218][ T8712] hsr_slave_0: entered promiscuous mode [ 290.864359][ T8712] hsr_slave_1: entered promiscuous mode [ 290.872473][ T8712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.880551][ T8712] Cannot create hsr debugfs directory [ 290.905010][ T8721] team0: Port device team_slave_1 added [ 290.998357][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.005414][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.032175][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.044716][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.051782][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.078172][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.221532][ T8721] hsr_slave_0: entered promiscuous mode [ 291.228530][ T8721] hsr_slave_1: entered promiscuous mode [ 291.234929][ T8721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.243045][ T8721] Cannot create hsr debugfs directory [ 291.291439][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.350158][ T8712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.434843][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.447812][ T5095] Bluetooth: hci6: command tx timeout [ 291.477732][ T8712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.522255][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.529472][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.595458][ T8712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.633454][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.640626][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.721589][ T8712] bond0: (slave netdevsim0): Releasing backup interface [ 291.752037][ T8712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.820519][ T8627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.833664][ T8627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.008555][ T8712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.022318][ T8712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.069960][ T8712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.083286][ T8712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.195067][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.324223][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.375581][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.437800][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.444994][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.479951][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.487146][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.567551][ T5095] Bluetooth: hci1: command tx timeout [ 292.579085][ T8721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.596728][ T8721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.618156][ T8721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.632390][ T8721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.763140][ T8627] veth0_vlan: entered promiscuous mode [ 292.840687][ T8627] veth1_vlan: entered promiscuous mode [ 292.882450][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.928655][ T8627] veth0_macvtap: entered promiscuous mode [ 292.950239][ T8627] veth1_macvtap: entered promiscuous mode [ 292.966570][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.997552][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.026282][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.039623][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.051423][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.061431][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.071946][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.082211][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.097001][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.119341][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.150115][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.157428][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.188099][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.209653][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.231466][ T8792] xt_TCPMSS: Only works on TCP SYN packets [ 293.231787][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.260323][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.276153][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.286765][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.302252][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.312880][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.324842][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.351253][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.358584][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.368375][ T8794] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 293.368375][ T8794] The task syz.3.1114 (8794) triggered the difference, watch for misbehavior. [ 293.395025][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.404220][ T8627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.413379][ T8627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.422231][ T8627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.431839][ T8627] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.533108][ T5095] Bluetooth: hci6: command tx timeout [ 293.666395][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.678494][ T8712] veth0_vlan: entered promiscuous mode [ 293.690764][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.763721][ T8712] veth1_vlan: entered promiscuous mode [ 293.787442][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.805416][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.910901][ T8712] veth0_macvtap: entered promiscuous mode [ 293.924719][ T8712] veth1_macvtap: entered promiscuous mode [ 293.993109][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.017753][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.049525][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.076120][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.104103][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.129675][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.148820][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.181146][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.203056][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.213791][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.226717][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.259990][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.279697][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.290513][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.301490][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.312869][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.323097][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.334522][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.345666][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.357516][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.369559][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.381420][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.394407][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.415226][ T8808] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1116'. [ 294.460901][ T8712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.473519][ T8712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.483970][ T8712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.500789][ T8712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.820776][ T8721] veth0_vlan: entered promiscuous mode [ 294.840118][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.849317][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.875943][ T8721] veth1_vlan: entered promiscuous mode [ 295.034387][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.056908][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.074758][ T8721] veth0_macvtap: entered promiscuous mode [ 295.137475][ T8721] veth1_macvtap: entered promiscuous mode [ 295.218125][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.250783][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.293367][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.340089][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.375156][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.406456][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.426760][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.446575][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.481496][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.511541][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.526405][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.546479][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.562641][ T8815] loop3: detected capacity change from 0 to 32768 [ 295.597412][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.643052][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.678810][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.747004][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.779316][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.822844][ T8815] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 295.837127][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.895490][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.918686][ T8815] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 295.927847][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.947014][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.968435][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.986999][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.017048][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.026920][ T8815] bcachefs (loop3): alloc_read... done [ 296.036714][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.045737][ T8815] bcachefs (loop3): stripes_read... done [ 296.066099][ T8815] bcachefs (loop3): snapshots_read... done [ 296.068322][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.091321][ T8815] bcachefs (loop3): journal_replay... done [ 296.118273][ T8721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.147283][ T8721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.175525][ T8721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.184732][ T8815] bcachefs (loop3): resume_logged_ops... done [ 296.198187][ T8721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.227236][ T8815] bcachefs (loop3): going read-write [ 296.288304][ T8815] bcachefs (loop3): done starting filesystem [ 296.422385][ T5088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.433695][ T5088] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.442004][ T5088] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.046441][ T5088] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.055938][ T5088] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 297.063442][ T5088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.317073][ T6375] bcachefs (loop3): shutting down [ 297.343470][ T6375] bcachefs (loop3): going read-only [ 297.363508][ T6375] bcachefs (loop3): finished waiting for writes to stop [ 297.410730][ T6375] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 297.471344][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.484603][ T6375] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 9 [ 297.509862][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.530740][ T6375] bcachefs (loop3): shutdown complete, journal seq 10 [ 297.558253][ T6375] bcachefs (loop3): marking filesystem clean [ 297.645944][ T6375] bcachefs (loop3): shutdown complete [ 297.712339][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.740601][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.140852][ T8840] chnl_net:caif_netlink_parms(): no params data found [ 298.559564][ T8862] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.1124'. [ 298.578195][ T8840] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.585372][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.625973][ T8840] bridge_slave_0: entered allmulticast mode [ 298.662645][ T8840] bridge_slave_0: entered promiscuous mode [ 298.713436][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.747168][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.764331][ T8840] bridge_slave_1: entered allmulticast mode [ 298.784119][ T8840] bridge_slave_1: entered promiscuous mode [ 298.815375][ T8872] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 298.917237][ T8840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.962306][ T8840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.093020][ T8840] team0: Port device team_slave_0 added [ 299.104953][ T8840] team0: Port device team_slave_1 added [ 299.131293][ T4480] Bluetooth: hci7: command tx timeout [ 299.231748][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.260769][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.337126][ T8840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.368824][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.375818][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.427849][ T8840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.592685][ T8840] hsr_slave_0: entered promiscuous mode [ 299.621278][ T8840] hsr_slave_1: entered promiscuous mode [ 299.637699][ T8840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.650313][ T8840] Cannot create hsr debugfs directory [ 300.124059][ T8840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.137540][ T8881] loop1: detected capacity change from 0 to 32768 [ 300.275009][ T8881] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 300.355414][ T8881] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 300.401668][ T8840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.582382][ T8840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.801597][ T8908] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 300.810112][ T8840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.019328][ T8912] loop3: detected capacity change from 0 to 8 [ 301.084270][ T8912] SQUASHFS error: lzo decompression failed, data probably corrupt [ 301.095604][ T8912] SQUASHFS error: Failed to read block 0x91: -5 [ 301.109629][ T8912] SQUASHFS error: Unable to read metadata cache entry [8f] [ 301.176536][ T8912] SQUASHFS error: Unable to read inode 0x11f [ 301.268651][ T4480] Bluetooth: hci7: command tx timeout [ 301.298690][ T8840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.358632][ T8840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.393547][ T8840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.409096][ T8840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.478009][ T8917] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 301.487134][ T8917] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.515133][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.590754][ T8922] netlink: 'syz.1.1152': attribute type 17 has an invalid length. [ 302.606613][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.647749][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.655045][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.702973][ T29] audit: type=1326 audit(1719392427.024:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8921 comm="syz.1.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf9f175ae9 code=0x0 [ 302.723938][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.795603][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.802831][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.288030][ T4480] Bluetooth: hci7: command tx timeout [ 303.441264][ T29] audit: type=1804 audit(1719392427.774:416): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1155" name="/root/syzkaller.kH9qlI/9/cgroup.controllers" dev="sda1" ino=2003 res=1 errno=0 [ 303.499353][ T8934] netlink: 'syz.1.1155': attribute type 11 has an invalid length. [ 303.801393][ T8945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 303.900335][ T8840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.001838][ T8840] veth0_vlan: entered promiscuous mode [ 304.023729][ T8840] veth1_vlan: entered promiscuous mode [ 304.137488][ T8840] veth0_macvtap: entered promiscuous mode [ 304.153294][ T8956] loop4: detected capacity change from 0 to 8 [ 304.168543][ T8840] veth1_macvtap: entered promiscuous mode [ 304.180746][ T8956] SQUASHFS error: lzo decompression failed, data probably corrupt [ 304.199783][ T8956] SQUASHFS error: Failed to read block 0x91: -5 [ 304.206113][ T8956] SQUASHFS error: Unable to read metadata cache entry [8f] [ 304.213759][ T8956] SQUASHFS error: Unable to read inode 0x11f [ 304.369847][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.404818][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.423734][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.435604][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.449140][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.462523][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.472527][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.493314][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.503905][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.524901][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.535425][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.560316][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.571841][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.585027][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.597612][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.605390][ T8960] netlink: 'syz.1.1164': attribute type 64 has an invalid length. [ 304.637258][ T8960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1164'. [ 304.697156][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.736311][ T8962] sg_write: process 410 (syz.3.1165) changed security contexts after opening file descriptor, this is not allowed. [ 304.745346][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.807110][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.831427][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.855502][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.871989][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.883202][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.894457][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.904442][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.940615][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.960952][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.981980][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.003375][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.043063][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.088717][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.124369][ T8840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.158527][ T8840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.176258][ T8840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.188652][ T8840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.369158][ T4480] Bluetooth: hci7: command tx timeout [ 305.408162][ T29] audit: type=1326 audit(1719392429.744:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.429677][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.481754][ T8987] loop4: detected capacity change from 0 to 256 [ 305.491563][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.501274][ T29] audit: type=1326 audit(1719392429.774:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.525556][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.533993][ T8987] FAT-fs (loop4): bogus sectors per cluster 0 [ 305.546724][ T8987] FAT-fs (loop4): Can't find a valid FAT filesystem [ 305.559970][ T29] audit: type=1326 audit(1719392429.774:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.581455][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.608549][ T8988] loop1: detected capacity change from 0 to 512 [ 305.617448][ T29] audit: type=1326 audit(1719392429.774:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.664760][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 305.678485][ T8988] ext4: Unknown parameter 'nouser_xattr' [ 305.686730][ T29] audit: type=1326 audit(1719392429.804:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.714544][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.727119][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.771645][ T29] audit: type=1326 audit(1719392429.804:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.821690][ T29] audit: type=1326 audit(1719392429.804:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.886286][ T29] audit: type=1326 audit(1719392429.804:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1f1b75ae9 code=0x7ffc0000 [ 305.992752][ T8994] netlink: 'syz.4.1177': attribute type 64 has an invalid length. [ 306.037320][ T8994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1177'. [ 306.630792][ T8984] loop3: detected capacity change from 0 to 32768 [ 306.687406][ T9018] loop4: detected capacity change from 0 to 8 [ 306.692477][ T9020] loop1: detected capacity change from 0 to 64 [ 306.741258][ T9018] SQUASHFS error: lzo decompression failed, data probably corrupt [ 306.787856][ T9018] SQUASHFS error: Failed to read block 0x91: -5 [ 306.794185][ T9018] SQUASHFS error: Unable to read metadata cache entry [8f] [ 306.802426][ T9018] SQUASHFS error: Unable to read inode 0x11f [ 306.818400][ T8984] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 306.847911][ T8984] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 308.490194][ T9069] loop4: detected capacity change from 0 to 8 [ 308.527535][ T9069] SQUASHFS error: lzo decompression failed, data probably corrupt [ 308.535449][ T9069] SQUASHFS error: Failed to read block 0x91: -5 [ 308.560148][ T9069] SQUASHFS error: Unable to read metadata cache entry [8f] [ 308.587106][ T9069] SQUASHFS error: Unable to read inode 0x11f [ 308.608007][ T9061] loop1: detected capacity change from 0 to 8192 [ 308.713254][ T9070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.939999][ T9070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.101029][ T9070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.260237][ T9070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.291357][ T9091] loop1: detected capacity change from 0 to 256 [ 309.309981][ T9091] FAT-fs (loop1): bogus sectors per cluster 0 [ 309.332543][ T9091] FAT-fs (loop1): Can't find a valid FAT filesystem [ 309.423041][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 309.506456][ T9070] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.555512][ T9070] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.606345][ T9070] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.654101][ T9070] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.890117][ T9094] loop1: detected capacity change from 0 to 4096 [ 309.920037][ T9094] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 309.987244][ T9094] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 310.073106][ T9087] loop4: detected capacity change from 0 to 32768 [ 310.088074][ T9102] loop3: detected capacity change from 0 to 164 [ 310.183167][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 310.183188][ T29] audit: type=1326 audit(1719392434.514:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.258105][ T9087] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 310.277208][ T29] audit: type=1326 audit(1719392434.514:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.299088][ T29] audit: type=1326 audit(1719392434.514:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.321752][ T29] audit: type=1326 audit(1719392434.554:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.324926][ T9087] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 310.345689][ T29] audit: type=1326 audit(1719392434.554:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.389057][ T29] audit: type=1326 audit(1719392434.554:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.437416][ T29] audit: type=1326 audit(1719392434.554:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.461171][ T29] audit: type=1326 audit(1719392434.554:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.485394][ T29] audit: type=1326 audit(1719392434.554:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.508590][ T29] audit: type=1326 audit(1719392434.554:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf775ae9 code=0x7ffc0000 [ 310.530068][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.670469][ T9127] loop4: detected capacity change from 0 to 2048 [ 311.701305][ T9127] EXT4-fs: Ignoring removed orlov option [ 311.824725][ T9127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.179582][ T6341] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 234: padding at end of block bitmap is not set [ 312.234137][ T6341] EXT4-fs (loop4): Remounting filesystem read-only [ 312.255229][ T8627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.718963][ T8721] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 315.079103][ T9155] netlink: 'syz.3.1237': attribute type 17 has an invalid length. [ 315.730381][ T9179] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 315.742349][ T9179] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 315.815983][ T9153] loop4: detected capacity change from 0 to 32768 [ 315.883813][ T9153] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.005500][ T9153] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 316.055228][ T9153] XFS (loop4): Starting recovery (logdev: internal) [ 316.167625][ T9153] XFS (loop4): Ending recovery (logdev: internal) [ 317.537746][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.544293][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.559188][ T8627] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.615406][ T9220] loop4: detected capacity change from 0 to 8 [ 333.142510][ T9241] loop3: detected capacity change from 0 to 64 [ 333.190980][ T9241] hfs: request for non-existent node 293 in B*Tree [ 333.206641][ T9238] loop1: detected capacity change from 0 to 8 [ 333.217182][ T9241] hfs: request for non-existent node 293 in B*Tree [ 333.224401][ T9241] hfs: get root inode failed [ 333.691590][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 333.691605][ T29] audit: type=1804 audit(1719392458.024:867): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1272" name="/root/syzkaller.MgxFcJ/185/cgroup.controllers" dev="sda1" ino=1998 res=1 errno=0 [ 333.754407][ T9254] netlink: 'syz.3.1272': attribute type 11 has an invalid length. [ 334.647870][ T9274] overlayfs: missing 'lowerdir' [ 334.726277][ T9274] tipc: Started in network mode [ 334.741114][ T9274] tipc: Node identity , cluster identity 4711 [ 334.761014][ T9274] tipc: Failed to set node id, please configure manually [ 334.810286][ T9274] tipc: Enabling of bearer rejected, failed to enable media [ 335.526205][ T9297] loop3: detected capacity change from 0 to 128 [ 335.588016][ T9297] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 335.645991][ T9303] loop1: detected capacity change from 0 to 8 [ 335.725282][ T9297] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 337.978334][ T9335] overlayfs: missing 'lowerdir' [ 338.039292][ T9332] loop4: detected capacity change from 0 to 8 [ 338.133904][ T9335] tipc: Started in network mode [ 338.152843][ T9335] tipc: Node identity , cluster identity 4711 [ 338.165637][ T9335] tipc: Failed to set node id, please configure manually [ 338.175388][ T9335] tipc: Enabling of bearer rejected, failed to enable media [ 338.449805][ T9342] loop1: detected capacity change from 0 to 1024 [ 338.518469][ T29] audit: type=1800 audit(1719392462.844:868): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1307" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 338.629841][ T2911] hfsplus: b-tree write err: -5, ino 4 [ 338.999367][ T9324] loop3: detected capacity change from 0 to 40427 [ 339.049383][ T9324] F2FS-fs (loop3): invalid crc value [ 339.068884][ T9324] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.208900][ T9324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 339.321708][ T9324] syz.3.1302: attempt to access beyond end of device [ 339.321708][ T9324] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 339.391460][ T6375] syz-executor: attempt to access beyond end of device [ 339.391460][ T6375] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 339.406994][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.407635][ T6375] syz-executor: attempt to access beyond end of device [ 339.407635][ T6375] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 339.599767][ T8759] syz.3.1109: attempt to access beyond end of device [ 339.599767][ T8759] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 339.637484][ T8759] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 339.710160][ T9369] loop4: detected capacity change from 0 to 4096 [ 339.770624][ T9369] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 339.828214][ T9369] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 339.860981][ T9369] ntfs3: loop4: Failed to load $Extend (-22). [ 339.876310][ T9369] ntfs3: loop4: Failed to initialize $Extend. [ 339.949189][ T9380] loop1: detected capacity change from 0 to 8 [ 341.099819][ T63] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.318711][ T63] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.475798][ T63] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.589987][ T63] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.650220][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.769709][ T63] bridge_slave_1: left allmulticast mode [ 342.775593][ T63] bridge_slave_1: left promiscuous mode [ 342.789430][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.851575][ T63] bridge_slave_0: left allmulticast mode [ 342.878244][ T63] bridge_slave_0: left promiscuous mode [ 342.884066][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.014907][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.033169][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.041886][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.052324][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.083086][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.091520][ T9414] loop4: detected capacity change from 0 to 8192 [ 343.099491][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.133380][ T9425] loop4: detected capacity change from 0 to 32768 [ 345.204260][ T5095] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 345.217139][ T5095] Bluetooth: hci2: command tx timeout [ 345.231870][ T5095] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 345.249706][ T9425] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.249736][ T5095] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 345.273985][ T5095] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 345.290434][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.301125][ T5095] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 345.311347][ T5095] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 345.321066][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.350379][ T63] bond0 (unregistering): Released all slaves [ 345.360434][ T9425] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 345.401331][ T9425] XFS (loop4): Starting recovery (logdev: internal) [ 345.550479][ T9425] XFS (loop4): Ending recovery (logdev: internal) [ 345.725579][ T8627] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 346.122051][ T63] hsr_slave_0: left promiscuous mode [ 346.169958][ T63] hsr_slave_1: left promiscuous mode [ 346.197558][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.209651][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.440136][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.457178][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.534602][ T9463] xt_TCPMSS: Only works on TCP SYN packets [ 346.716051][ T63] veth1_macvtap: left promiscuous mode [ 346.921926][ T63] veth0_macvtap: left promiscuous mode [ 347.235393][ T63] veth1_vlan: left promiscuous mode [ 347.258509][ T63] veth0_vlan: left promiscuous mode [ 347.287385][ T5095] Bluetooth: hci2: command tx timeout [ 347.377230][ T5095] Bluetooth: hci8: command tx timeout [ 348.467221][ T63] team0 (unregistering): Port device team_slave_1 removed [ 348.523618][ T63] team0 (unregistering): Port device team_slave_0 removed [ 349.375487][ T5095] Bluetooth: hci2: command tx timeout [ 349.447389][ T5095] Bluetooth: hci8: command tx timeout [ 349.519407][ T9494] loop4: detected capacity change from 0 to 256 [ 349.528402][ T9494] exfat: Deprecated parameter 'namecase' [ 349.534223][ T9494] exfat: Deprecated parameter 'namecase' [ 349.547709][ T9494] exfat: Deprecated parameter 'namecase' [ 349.620865][ T9494] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 349.714155][ T5140] kernel write not supported for file /9496/net/fib_triestat (pid: 5140 comm: kworker/0:6) [ 349.732143][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 349.872575][ T29] audit: type=1400 audit(1719392474.204:869): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=9502 comm="syz.4.1368" name="53" dev="sda1" ino=1958 [ 350.978628][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.985934][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.011007][ T9522] loop4: detected capacity change from 0 to 128 [ 351.020164][ T9416] bridge_slave_0: entered allmulticast mode [ 351.035881][ T9416] bridge_slave_0: entered promiscuous mode [ 351.059999][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 351.100232][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.118643][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.141468][ T9416] bridge_slave_1: entered allmulticast mode [ 351.153482][ T9416] bridge_slave_1: entered promiscuous mode [ 351.339865][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.414175][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.449427][ T5095] Bluetooth: hci2: command tx timeout [ 351.528379][ T5095] Bluetooth: hci8: command tx timeout [ 351.581758][ T9416] team0: Port device team_slave_0 added [ 351.599149][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.606493][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.617591][ T9435] bridge_slave_0: entered allmulticast mode [ 351.625534][ T9435] bridge_slave_0: entered promiscuous mode [ 351.635892][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.645220][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.663332][ T9435] bridge_slave_1: entered allmulticast mode [ 351.675422][ T9435] bridge_slave_1: entered promiscuous mode [ 351.687078][ T5141] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 351.699454][ T9416] team0: Port device team_slave_1 added [ 351.804825][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.887512][ T5141] usb 5-1: Using ep0 maxpacket: 32 [ 351.894950][ T5141] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 351.907404][ T5141] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 351.926505][ T5141] usb 5-1: config 0 interface 0 has no altsetting 1 [ 351.945189][ T5141] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00aa, bcdDevice=7f.f8 [ 351.965561][ T5141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.975529][ T5141] usb 5-1: Product: syz [ 351.992755][ T5141] usb 5-1: Manufacturer: syz [ 352.002840][ T5141] usb 5-1: SerialNumber: syz [ 352.010602][ T5141] usb 5-1: config 0 descriptor?? [ 352.138017][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.152463][ T9542] loop1: detected capacity change from 0 to 1024 [ 352.183894][ T9542] hfsplus: failed to load root directory [ 352.193898][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.205431][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.233604][ T9416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.268162][ T5141] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 352.275303][ T5141] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 352.276821][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.306031][ T5141] usb 5-1: USB disconnect, device number 3 [ 352.312111][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.312152][ T9416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.396548][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.421379][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.520961][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.759587][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.789111][ T9416] hsr_slave_0: entered promiscuous mode [ 352.815307][ T9416] hsr_slave_1: entered promiscuous mode [ 352.831798][ T9416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.842839][ T9416] Cannot create hsr debugfs directory [ 352.862496][ T9435] team0: Port device team_slave_0 added [ 352.873131][ T9435] team0: Port device team_slave_1 added [ 353.033593][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.056765][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.096823][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.115972][ T9564] loop4: detected capacity change from 0 to 4096 [ 353.121580][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.140378][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.180875][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.191729][ T9565] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.339263][ T9567] input: syz0 as /devices/virtual/input/input14 [ 353.345978][ T9435] hsr_slave_0: entered promiscuous mode [ 353.356805][ T9435] hsr_slave_1: entered promiscuous mode [ 353.387376][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.414196][ T9435] Cannot create hsr debugfs directory [ 353.607542][ T5095] Bluetooth: hci8: command tx timeout [ 353.891906][ T63] bridge_slave_1: left allmulticast mode [ 353.911218][ T63] bridge_slave_1: left promiscuous mode [ 353.917454][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.945640][ T63] bridge_slave_0: left allmulticast mode [ 353.977735][ T63] bridge_slave_0: left promiscuous mode [ 353.983667][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.305435][ T9577] loop1: detected capacity change from 0 to 32768 [ 354.332976][ T9577] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1396 (9577) [ 354.383075][ T9577] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 354.413557][ T9577] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 354.423105][ T9577] BTRFS info (device loop1): using free-space-tree [ 354.673285][ T8721] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 355.172000][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.175028][ T9589] loop4: detected capacity change from 0 to 40427 [ 355.209554][ T9589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 355.210075][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.247692][ T63] bond0 (unregistering): Released all slaves [ 355.304581][ T9589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 355.427558][ T9605] f2fs_ckpt-7:4: attempt to access beyond end of device [ 355.427558][ T9605] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 355.464853][ T9605] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 355.511689][ T9605] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 355.774750][ T9622] ubi1: attaching mtd0 [ 355.779604][ T9622] ubi1 error: ubi_attach_mtd_dev: bad VID header (12) or data offsets (76) [ 356.568196][ T30] INFO: task syz-executor:6563 blocked for more than 143 seconds. [ 356.603690][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 356.627021][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.640922][ T30] task:syz-executor state:D stack:20288 pid:6563 tgid:6563 ppid:1 flags:0x00004006 [ 356.662627][ T30] Call Trace: [ 356.670459][ T30] [ 356.675744][ T30] __schedule+0x1796/0x49d0 [ 356.694855][ T30] ? __pfx___schedule+0x10/0x10 [ 356.700837][ T9622] syz.1.1408 (9622) used greatest stack depth: 17392 bytes left [ 356.710834][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.715920][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 356.721942][ T30] ? schedule+0x90/0x320 [ 356.726228][ T30] schedule+0x14b/0x320 [ 356.732896][ T30] __bch2_fs_stop+0x35b/0x540 [ 356.737710][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 356.742969][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 356.749170][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 356.754250][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 356.759626][ T30] generic_shutdown_super+0x136/0x2d0 [ 356.765052][ T30] bch2_kill_sb+0x41/0x50 [ 356.769483][ T30] deactivate_locked_super+0xc4/0x130 [ 356.774900][ T30] cleanup_mnt+0x41f/0x4b0 [ 356.779571][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 356.784898][ T30] task_work_run+0x24f/0x310 [ 356.789641][ T30] ? __pfx_task_work_run+0x10/0x10 [ 356.794879][ T30] ? __x64_sys_umount+0x126/0x170 [ 356.800172][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 356.806207][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 356.812139][ T30] do_syscall_64+0x100/0x230 [ 356.816867][ T30] ? clear_bhb_loop+0x35/0x90 [ 356.823912][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.830072][ T30] RIP: 0033:0x7f2d1e976e17 [ 356.836809][ T30] RSP: 002b:00007ffc412eb498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 356.845416][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2d1e976e17 [ 356.853481][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc412eb550 [ 356.861613][ T30] RBP: 00007ffc412eb550 R08: 0000000000000000 R09: 0000000000000000 [ 356.869696][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc412ec600 [ 356.877836][ T30] R13: 00007f2d1e9e364a R14: 000000000003020f R15: 00007ffc412ec640 [ 356.886985][ T30] [ 356.890133][ T30] [ 356.890133][ T30] Showing all locks held in the system: [ 356.908610][ T30] 1 lock held by ksoftirqd/0/16: [ 356.913652][ T30] #0: ffff8880b943e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 356.942587][ T30] 1 lock held by khungtaskd/30: [ 356.947728][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 356.967019][ T30] 5 locks held by kworker/u8:4/63: [ 356.972191][ T30] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 356.983578][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 356.994284][ T30] #2: ffffffff8f5c8250 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 357.003930][ T30] #3: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 357.023430][ T30] #4: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 357.049119][ T30] 2 locks held by getty/4842: [ 357.056752][ T30] #0: ffff88802a8cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 357.077033][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 357.097098][ T30] 3 locks held by kworker/1:5/5141: [ 357.102762][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 357.124749][ T30] #1: ffffc90004687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 357.143835][ T30] #2: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 357.153422][ T30] 2 locks held by kworker/u8:12/6341: [ 357.161113][ T30] 1 lock held by syz-executor/6563: [ 357.166381][ T30] #0: ffff888021f080e0 (&type->s_umount_key#73){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 357.176754][ T30] 1 lock held by syz.0.1050/8592: [ 357.181875][ T30] #0: ffff888021f080e0 (&type->s_umount_key#73){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 357.191931][ T30] 1 lock held by syz.2.1101/8733: [ 357.197031][ T30] #0: ffff888021f080e0 (&type->s_umount_key#73){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 357.208581][ T30] 7 locks held by syz-executor/9416: [ 357.213922][ T30] #0: ffff88803016c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 357.222955][ T30] #1: ffff88802d225088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 357.232918][ T30] #2: ffff8880230f9f08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 357.246511][ T30] #3: ffffffff8eee2148 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 357.263462][ T30] #4: ffff88802f7860e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 357.275788][ T30] #5: ffff888022eb3250 (&devlink->lock_key#7){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 357.286240][ T30] #6: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: unregister_nexthop_notifier+0x17/0x40 [ 357.296589][ T30] 1 lock held by syz-executor/9435: [ 357.301916][ T30] #0: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 357.311621][ T30] [ 357.311648][ T63] hsr_slave_0: left promiscuous mode [ 357.313955][ T30] ============================================= [ 357.313955][ T30] [ 357.313978][ T30] NMI backtrace for cpu 1 [ 357.313996][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 357.341977][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 357.352061][ T30] Call Trace: [ 357.355351][ T30] [ 357.358298][ T30] dump_stack_lvl+0x241/0x360 [ 357.363030][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.368279][ T30] ? __pfx__printk+0x10/0x10 [ 357.372898][ T30] ? vprintk_emit+0x631/0x770 [ 357.377602][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 357.382649][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 357.387608][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 357.393078][ T30] ? _printk+0xd5/0x120 [ 357.397249][ T30] ? __pfx__printk+0x10/0x10 [ 357.401852][ T30] ? __wake_up_klogd+0xcc/0x110 [ 357.406721][ T30] ? __pfx__printk+0x10/0x10 [ 357.411328][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 357.416370][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 357.422363][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 357.428360][ T30] watchdog+0xfde/0x1020 [ 357.432615][ T30] ? watchdog+0x1ea/0x1020 [ 357.437050][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.441737][ T30] kthread+0x2f0/0x390 [ 357.445819][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.450515][ T30] ? __pfx_kthread+0x10/0x10 [ 357.455218][ T30] ret_from_fork+0x4b/0x80 [ 357.459653][ T30] ? __pfx_kthread+0x10/0x10 [ 357.464272][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.469078][ T30] [ 357.474181][ T30] Sending NMI from CPU 1 to CPUs 0: [ 357.480866][ C0] NMI backtrace for cpu 0 [ 357.480881][ C0] CPU: 0 PID: 5132 Comm: kworker/0:4 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 357.480902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 357.480915][ C0] Workqueue: events nsim_dev_trap_report_work [ 357.480953][ C0] RIP: 0010:preempt_count_add+0x140/0x190 [ 357.480985][ C0] Code: 5c ff ff ff 48 c7 c1 e0 96 76 94 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff 48 c7 c7 e0 96 76 94 e8 f5 ed 92 00 e9 ed fe ff ff <48> c7 c1 e0 96 76 94 80 e1 07 80 c1 03 38 c1 0f 8c 07 ff ff ff 48 [ 357.481001][ C0] RSP: 0018:ffffc900045374e8 EFLAGS: 00000202 [ 357.481016][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff94769603 [ 357.481029][ C0] RDX: ffff888064503c00 RSI: 0000000000000001 RDI: 0000000000000001 [ 357.481041][ C0] RBP: ffffc900045375e0 R08: ffffffff8140f091 R09: ffffc900045376d0 [ 357.481054][ C0] R10: 0000000000000003 R11: ffffffff8181dd90 R12: ffff888064503c00 [ 357.481067][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 357.481080][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 357.481095][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.481109][ C0] CR2: 00007f9f410ce2d8 CR3: 000000007d2b4000 CR4: 00000000003506f0 [ 357.481124][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.481135][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.481146][ C0] Call Trace: [ 357.481153][ C0] [ 357.481161][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 357.481182][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 357.481203][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 357.481242][ C0] ? nmi_handle+0x2a/0x5a0 [ 357.481278][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 357.481299][ C0] ? nmi_handle+0x14f/0x5a0 [ 357.481324][ C0] ? nmi_handle+0x2a/0x5a0 [ 357.481352][ C0] ? preempt_count_add+0x140/0x190 [ 357.481378][ C0] ? default_do_nmi+0x63/0x160 [ 357.481399][ C0] ? exc_nmi+0x123/0x1f0 [ 357.481418][ C0] ? end_repeat_nmi+0xf/0x53 [ 357.481445][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 357.481464][ C0] ? unwind_next_frame+0xa1/0x2a00 [ 357.481490][ C0] ? preempt_count_add+0x140/0x190 [ 357.481518][ C0] ? preempt_count_add+0x140/0x190 [ 357.481547][ C0] ? preempt_count_add+0x140/0x190 [ 357.481574][ C0] [ 357.481580][ C0] [ 357.481587][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 357.481617][ C0] unwind_next_frame+0xc1/0x2a00 [ 357.481647][ C0] ? consume_skb+0xb1/0x160 [ 357.481668][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 357.481694][ C0] ? __kernel_text_address+0xd/0x40 [ 357.481719][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 357.481744][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 357.481763][ C0] arch_stack_walk+0x151/0x1b0 [ 357.481793][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 357.481823][ C0] stack_trace_save+0x118/0x1d0 [ 357.481841][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 357.481863][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.481884][ C0] kasan_save_track+0x3f/0x80 [ 357.481909][ C0] ? kasan_save_track+0x3f/0x80 [ 357.481932][ C0] ? kasan_save_free_info+0x40/0x50 [ 357.481958][ C0] ? poison_slab_object+0xe0/0x150 [ 357.481985][ C0] ? __kasan_slab_free+0x37/0x60 [ 357.482010][ C0] ? kfree+0x149/0x360 [ 357.482028][ C0] ? skb_release_data+0x676/0x880 [ 357.482049][ C0] ? consume_skb+0xb1/0x160 [ 357.482067][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 357.482121][ C0] ? skb_release_data+0x676/0x880 [ 357.482142][ C0] kasan_save_free_info+0x40/0x50 [ 357.482164][ C0] poison_slab_object+0xe0/0x150 [ 357.482191][ C0] __kasan_slab_free+0x37/0x60 [ 357.482217][ C0] ? skb_release_data+0x676/0x880 [ 357.482238][ C0] kfree+0x149/0x360 [ 357.482260][ C0] skb_release_data+0x676/0x880 [ 357.482289][ C0] consume_skb+0xb1/0x160 [ 357.482310][ C0] nsim_dev_trap_report_work+0x765/0xaa0 [ 357.482347][ C0] ? process_scheduled_works+0x945/0x1830 [ 357.482364][ C0] process_scheduled_works+0xa2c/0x1830 [ 357.482399][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.482423][ C0] ? assign_work+0x364/0x3d0 [ 357.482443][ C0] worker_thread+0x86d/0xd70 [ 357.482471][ C0] ? __kthread_parkme+0x169/0x1d0 [ 357.482492][ C0] ? __pfx_worker_thread+0x10/0x10 [ 357.482511][ C0] kthread+0x2f0/0x390 [ 357.482531][ C0] ? __pfx_worker_thread+0x10/0x10 [ 357.482550][ C0] ? __pfx_kthread+0x10/0x10 [ 357.482571][ C0] ret_from_fork+0x4b/0x80 [ 357.482593][ C0] ? __pfx_kthread+0x10/0x10 [ 357.482614][ C0] ret_from_fork_asm+0x1a/0x30 [ 357.482648][ C0] [ 357.486442][ T63] hsr_slave_1: left promiscuous mode [ 357.498268][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 357.498291][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 357.498318][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 357.498333][ T30] Call Trace: [ 357.498344][ T30] [ 357.498356][ T30] dump_stack_lvl+0x241/0x360 [ 357.498403][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.498439][ T30] ? __pfx__printk+0x10/0x10 [ 357.498469][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.498505][ T30] ? vscnprintf+0x5d/0x90 [ 357.498533][ T30] panic+0x349/0x860 [ 357.498568][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 357.498597][ T30] ? __pfx_panic+0x10/0x10 [ 357.498626][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 357.498662][ T30] ? __irq_work_queue_local+0x137/0x410 [ 357.498690][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 357.498725][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 357.498750][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 357.498780][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 357.498811][ T30] watchdog+0x101d/0x1020 [ 357.498841][ T30] ? watchdog+0x1ea/0x1020 [ 357.498875][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.498901][ T30] kthread+0x2f0/0x390 [ 357.498931][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.498956][ T30] ? __pfx_kthread+0x10/0x10 [ 357.498986][ T30] ret_from_fork+0x4b/0x80 [ 357.499017][ T30] ? __pfx_kthread+0x10/0x10 [ 357.499047][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.499097][ T30] [ 357.501585][ T30] Kernel Offset: disabled