last executing test programs: 36.827972115s ago: executing program 1 (id=1303): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) chdir(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f00000021c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 35.503310486s ago: executing program 1 (id=1306): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) socket(0x22, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x41, 0x4, 0x35, @remote, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 33.994587214s ago: executing program 1 (id=1310): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12.513709463s ago: executing program 3 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) openat$misdntimer(0xffffff9c, 0x0, 0x41, 0x0) open_tree(r5, 0x0, 0x81000) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) 10.650396094s ago: executing program 3 (id=1385): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="61636c2c6e6f757365725f1a640037722c6e6761636c2c757365725f78617421db2c757365725f78617474722c00faf3e6410bb3d6329f3ac3a41b66b50b7fc0de1e3ecd3ab6a6016a0095c886382185"], 0x1, 0x177, &(0x7f0000000240)="$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") mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x8003, 0x0) 10.372564439s ago: executing program 3 (id=1396): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4103082c1116480401020200c52cf7c25975e005b02f8847eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 7.023229306s ago: executing program 3 (id=1393): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@nodiscard}, {@six_active_logs}, {@discard_unit_section}, {@discard}, {@inline_xattr}, {@fault_type={'fault_type', 0x3d, 0x7}}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@barrier}, {@age_extent_cache}, {@user_xattr}, {@quota}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) 5.99514342s ago: executing program 0 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000800) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r2, 0x8b15, &(0x7f0000000080)) 5.942687335s ago: executing program 4 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) openat$misdntimer(0xffffff9c, 0x0, 0x41, 0x0) open_tree(r5, 0x0, 0x81000) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) 5.840836454s ago: executing program 2 (id=1399): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 5.739743923s ago: executing program 0 (id=1400): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) 5.738815784s ago: executing program 2 (id=1401): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) close(r0) 3.982292535s ago: executing program 4 (id=1402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x12, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x100000}}, 0x40) 3.878195194s ago: executing program 2 (id=1403): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4103082c1116480401020200c52cf7c25975e005b02f8847eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 3.806570611s ago: executing program 4 (id=1404): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000084c, &(0x7f0000000440)=ANY=[], 0x81, 0x1505, &(0x7f00000036c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) 3.786557403s ago: executing program 0 (id=1405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 3.716999699s ago: executing program 3 (id=1406): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, {{0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}}]}, 0x18c) 2.696332602s ago: executing program 4 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x100, 0x10}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 1.866665149s ago: executing program 3 (id=1408): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodatasum}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000640)=0x140000, 0xd000, 0x0) 1.85781486s ago: executing program 0 (id=1409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1.807313534s ago: executing program 4 (id=1410): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.748687009s ago: executing program 2 (id=1411): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1.471046675s ago: executing program 1 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x100000, 0xff, 0xff, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x46, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.464958155s ago: executing program 0 (id=1421): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1.462368466s ago: executing program 2 (id=1422): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x2, {0x2, 0x0, @broadcast}, 'ip6_vti0\x00'}) 1.458561716s ago: executing program 4 (id=1423): socket$inet6(0xa, 0x0, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x0, 0x7) fstat(0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC], 0x2, 0x1f6, &(0x7f0000000600)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 224.695429ms ago: executing program 1 (id=1412): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) close(r0) 224.399379ms ago: executing program 2 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) openat$misdntimer(0xffffff9c, 0x0, 0x41, 0x0) open_tree(r5, 0x0, 0x81000) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) 223.167889ms ago: executing program 0 (id=1425): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) chdir(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f00000021c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) 0s ago: executing program 1 (id=1414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) unshare(0x68040200) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x2c, r1, 0x22af6f5a04337dcd, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) kernel console output (not intermixed with test programs): [ 54.226495][ T4329] WARNING: The mand mount option has been deprecated and [ 54.226495][ T4329] and is ignored by this kernel. Remove the mand [ 54.226495][ T4329] option from the mount to silence this warning. [ 54.226495][ T4329] ======================================================= [ 54.330975][ T4329] EXT4-fs (loop4): 1 orphan inode deleted [ 54.332444][ T4329] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.387833][ T4343] tipc: Started in network mode [ 54.389054][ T4343] tipc: Node identity 7f000001, cluster identity 4711 [ 54.391376][ T4343] tipc: Enabled bearer , priority 10 [ 54.791077][ T4370] loop1: detected capacity change from 0 to 128 [ 54.839628][ T4373] vhci_hcd: invalid port number 0 [ 55.058219][ T4390] x_tables: duplicate underflow at hook 2 [ 55.087405][ T26] kauditd_printk_skb: 77 callbacks suppressed [ 55.087421][ T26] audit: type=1326 audit(55.060:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.101535][ T26] audit: type=1326 audit(55.070:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa49bb87c code=0x7ffc0000 [ 55.152258][ T26] audit: type=1326 audit(55.090:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.171234][ T26] audit: type=1326 audit(55.090:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.216672][ T26] audit: type=1326 audit(55.190:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.252347][ T26] audit: type=1326 audit(55.220:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.259316][ T26] audit: type=1326 audit(55.230:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.279067][ T26] audit: type=1326 audit(55.230:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.298673][ T26] audit: type=1326 audit(55.230:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.303431][ T26] audit: type=1326 audit(55.230:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa48c69e8 code=0x7ffc0000 [ 55.420752][ T4412] loop4: detected capacity change from 0 to 512 [ 55.504302][ T4068] tipc: Node number set to 2130706433 [ 55.523016][ T4412] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,inode_readahead_blks=0x0000000000000800,nodiscard,,errors=continue. Quota mode: writeback. [ 55.683909][ T4430] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 55.695236][ T4429] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.127'. [ 56.182814][ T4444] ODEBUG: Out of memory. ODEBUG disabled [ 56.243413][ T4447] device gretap0 entered promiscuous mode [ 56.327575][ T4449] vhci_hcd: default hub control req: 040d v0000 i0000 l0 [ 56.622503][ T4465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'. [ 56.915225][ T4478] loop4: detected capacity change from 0 to 1024 [ 56.985148][ T4483] atomic_op 0000000033bdd81b conn xmit_atomic 0000000000000000 [ 57.012501][ T4478] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.300672][ T4505] tipc: Started in network mode [ 58.305409][ T4505] tipc: Node identity 7f000001, cluster identity 4711 [ 58.310742][ T4505] tipc: Enabled bearer , priority 10 [ 58.863626][ T4512] hub 6-0:1.0: USB hub found [ 58.870532][ T4512] hub 6-0:1.0: 8 ports detected [ 59.150398][ T4523] hub 6-0:1.0: USB hub found [ 59.151640][ T4523] hub 6-0:1.0: 8 ports detected [ 59.250637][ T4528] loop3: detected capacity change from 0 to 256 [ 59.308789][ T7] tipc: Node number set to 2130706433 [ 59.895947][ T4553] netlink: 'syz.4.178': attribute type 27 has an invalid length. [ 61.336777][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.379241][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.426254][ T4568] loop1: detected capacity change from 0 to 512 [ 61.445899][ T4568] EXT4-fs (loop1): Ignoring removed oldalloc option [ 61.453188][ T4568] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.184: Parent and EA inode have the same ino 15 [ 61.456858][ T4568] EXT4-fs (loop1): Remounting filesystem read-only [ 61.458365][ T4568] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.184: couldn't truncate inode 15 (err -30) [ 61.461930][ T4568] EXT4-fs (loop1): 1 orphan inode deleted [ 61.463118][ T4568] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 61.645457][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 61.645471][ T26] audit: type=1326 audit(61.620:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4574 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0bbf9e8 code=0x7ffc0000 [ 61.654103][ T26] audit: type=1326 audit(61.620:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4574 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=239 compat=0 ip=0xffffa0bbf9e8 code=0x7ffc0000 [ 61.658843][ T26] audit: type=1326 audit(61.620:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4574 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0bbf9e8 code=0x7ffc0000 [ 62.011206][ T4553] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.013282][ T4553] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.016040][ T4553] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.017995][ T4553] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.191888][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 62.197997][ T4560] device syz_tun entered promiscuous mode [ 62.207351][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 62.215677][ T4561] device syz_tun left promiscuous mode [ 62.246499][ T4566] netlink: 'syz.2.183': attribute type 195 has an invalid length. [ 62.253769][ T4549] Falling back ldisc for ttyS3. [ 62.391585][ T4591] loop2: detected capacity change from 0 to 256 [ 62.688172][ T26] audit: type=1326 audit(62.660:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 62.693592][ T26] audit: type=1326 audit(62.660:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 62.718018][ T26] audit: type=1326 audit(62.680:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 62.727345][ T26] audit: type=1326 audit(62.680:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 62.740952][ T26] audit: type=1326 audit(62.680:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 62.791890][ T4616] loop2: detected capacity change from 0 to 256 [ 62.883997][ T4620] tipc: Started in network mode [ 62.885399][ T4620] tipc: Node identity 7f000001, cluster identity 4711 [ 62.887212][ T4620] tipc: Enabled bearer , priority 10 [ 62.904514][ T4616] FAT-fs (loop2): Unrecognized mount option "00000000000000000000ÿÿ" or missing value [ 62.944447][ T4624] ALSA: seq fatal error: cannot create timer (-22) [ 63.075297][ T4619] Falling back ldisc for ttyS3. [ 63.210902][ T26] audit: type=1326 audit(63.180:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 63.216312][ T26] audit: type=1326 audit(63.180:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 63.267840][ T4639] ipt_ECN: cannot use operation on non-tcp rule [ 63.899729][ T4063] tipc: Node number set to 2130706433 [ 63.977875][ T4658] loop1: detected capacity change from 0 to 256 [ 64.218931][ T4669] loop2: detected capacity change from 0 to 164 [ 64.223836][ T4665] device geneve0 entered promiscuous mode [ 64.234600][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 64.236669][ T4667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.260778][ T4669] attempt to access beyond end of device [ 64.260778][ T4669] loop2: rw=524288, want=263332, limit=164 [ 64.263434][ T4669] attempt to access beyond end of device [ 64.263434][ T4669] loop2: rw=0, want=263332, limit=164 [ 64.279611][ T4670] loop4: detected capacity change from 0 to 128 [ 64.301451][ T4667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.499735][ T4677] Falling back ldisc for ttyS3. [ 64.544061][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.665751][ T4691] loop1: detected capacity change from 0 to 512 [ 64.737883][ T4691] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.918808][ T4708] device geneve0 entered promiscuous mode [ 65.216990][ T4740] loop1: detected capacity change from 0 to 512 [ 65.303596][ T4740] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.229: casefold flag without casefold feature [ 65.315939][ T4740] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.229: couldn't read orphan inode 15 (err -117) [ 65.319047][ T4740] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.356430][ T4742] Falling back ldisc for ttyS3. [ 65.462898][ T4751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'. [ 65.567687][ T4755] device geneve0 entered promiscuous mode [ 65.713652][ T4757] Falling back ldisc for ttyS3. [ 65.744377][ T4765] tipc: Started in network mode [ 65.749182][ T4765] tipc: Node identity 7f000001, cluster identity 4711 [ 65.765662][ T4765] tipc: Enabled bearer , priority 10 [ 65.845246][ T4776] loop4: detected capacity change from 0 to 128 [ 65.963351][ T4776] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 66.071359][ T4776] attempt to access beyond end of device [ 66.071359][ T4776] loop4: rw=3, want=6952, limit=128 [ 66.108116][ T4776] attempt to access beyond end of device [ 66.108116][ T4776] loop4: rw=2051, want=7894, limit=128 [ 66.356585][ T4804] x_tables: duplicate underflow at hook 1 [ 66.433719][ T4808] device geneve0 entered promiscuous mode [ 66.643980][ T4814] Falling back ldisc for ttyS3. [ 66.732071][ T4834] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 66.773610][ T4174] tipc: Node number set to 2130706433 [ 66.790446][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 66.790460][ T26] audit: type=1326 audit(66.760:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.809095][ T26] audit: type=1326 audit(66.760:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.812757][ T4837] Cannot find add_set index 0 as target [ 66.831618][ T4837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.262'. [ 66.833589][ T26] audit: type=1326 audit(66.770:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.833635][ T26] audit: type=1326 audit(66.770:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.834194][ T26] audit: type=1326 audit(66.790:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.883122][ T26] audit: type=1326 audit(66.790:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.885859][ T4846] loop1: detected capacity change from 0 to 128 [ 66.901697][ T26] audit: type=1326 audit(66.790:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.918443][ T26] audit: type=1326 audit(66.790:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.928849][ T26] audit: type=1326 audit(66.790:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 66.951118][ T26] audit: type=1326 audit(66.790:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 67.122843][ T4848] loop2: detected capacity change from 0 to 8192 [ 67.137251][ T4856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 67.158066][ T4848] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.182871][ T4848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.266'. [ 67.395087][ T4871] usb usb1: usbfs: process 4871 (syz.4.275) did not claim interface 0 before use [ 67.661515][ T4891] loop1: detected capacity change from 0 to 1024 [ 67.698276][ T4891] EXT4-fs (loop1): Ignoring removed bh option [ 67.749317][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 67.853575][ T4898] mmap: syz.2.286 (4898) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 68.209261][ T4927] loop1: detected capacity change from 0 to 2048 [ 68.292761][ T4927] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.390173][ T4942] loop2: detected capacity change from 0 to 512 [ 68.395238][ T4940] loop3: detected capacity change from 0 to 1024 [ 68.471494][ T4940] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.476476][ T4940] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.497401][ T4940] JBD2: no valid journal superblock found [ 68.714528][ T4940] EXT4-fs (loop3): error loading journal [ 68.789571][ T4942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.304: inode #1: comm syz.2.304: iget: illegal inode # [ 68.795239][ T4942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.304: error while reading EA inode 1 err=-117 [ 68.827345][ T4942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.304: inode #1: comm syz.2.304: iget: illegal inode # [ 68.858986][ T4942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.304: error while reading EA inode 1 err=-117 [ 68.872291][ T4942] EXT4-fs (loop2): 1 orphan inode deleted [ 68.883629][ T4942] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 69.307832][ T4968] loop3: detected capacity change from 0 to 512 [ 69.360439][ T4968] EXT4-fs (loop3): inline encryption not supported [ 69.420766][ T4968] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noblock_validity,grpquota,max_dir_size_kb=0x000000000000eec9,grpid,inlinecrypt,nombcache,grpquota,,errors=continue. Quota mode: writeback. [ 69.488576][ T4978] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 69.493804][ T4978] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 69.523773][ T4981] netlink: 'syz.1.318': attribute type 39 has an invalid length. [ 69.626335][ T25] cfg80211: failed to load regulatory.db [ 69.626582][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.629660][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.715896][ T4986] loop3: detected capacity change from 0 to 2048 [ 69.779231][ T4986] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.908075][ T4997] loop2: detected capacity change from 0 to 4096 [ 70.981162][ T4997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.910203][ T5061] hub 6-0:1.0: USB hub found [ 72.938878][ T5061] hub 6-0:1.0: 8 ports detected [ 74.111018][ T5091] loop4: detected capacity change from 0 to 2048 [ 74.137025][ T5097] udc-core: couldn't find an available UDC or it's busy [ 74.138660][ T5097] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.196597][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.647074][ T5126] udc-core: couldn't find an available UDC or it's busy [ 75.648684][ T5126] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.049490][ T5138] capability: warning: `syz.4.374' uses deprecated v2 capabilities in a way that may be insecure [ 76.060507][ T5137] loop2: detected capacity change from 0 to 512 [ 76.289910][ T5137] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 76.505943][ T5150] loop4: detected capacity change from 0 to 64 [ 76.595583][ T5150] hfs: file_umask requires a value [ 76.596900][ T5150] hfs: unable to parse mount options [ 76.673228][ T5153] loop2: detected capacity change from 0 to 2048 [ 76.795307][ T5153] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.324986][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 77.382899][ T26] kauditd_printk_skb: 104 callbacks suppressed [ 77.382911][ T26] audit: type=1326 audit(77.346:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7fc00000 [ 77.526019][ T26] audit: type=1326 audit(77.496:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5173 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.547565][ T26] audit: type=1326 audit(77.516:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5173 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.561697][ T26] audit: type=1326 audit(77.526:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5173 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.683242][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.686526][ T26] audit: type=1326 audit(77.656:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.711055][ T26] audit: type=1326 audit(77.676:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.730603][ T26] audit: type=1326 audit(77.696:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.749742][ T26] audit: type=1326 audit(77.696:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.786033][ T26] audit: type=1326 audit(77.696:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 77.808064][ T5182] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 77.814714][ T5182] netlink: 'syz.2.389': attribute type 2 has an invalid length. [ 77.860432][ T26] audit: type=1326 audit(77.826:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb0c1a9e8 code=0x7fc00000 [ 77.923621][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 78.043815][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 78.203758][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 78.205532][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.207368][ T25] usb 1-1: Product: syz [ 78.208327][ T25] usb 1-1: Manufacturer: syz [ 78.209352][ T25] usb 1-1: SerialNumber: syz [ 78.231121][ T25] usb 1-1: config 0 descriptor?? [ 78.393043][ T5204] loop2: detected capacity change from 0 to 2048 [ 78.482342][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.506972][ T5209] udc-core: couldn't find an available UDC or it's busy [ 78.508576][ T5209] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.748769][ T5211] loop4: detected capacity change from 0 to 2048 [ 78.806195][ T5211] UDF-fs: bad mount option "18446744073709551615" or missing value [ 79.023317][ T5218] loop3: detected capacity change from 0 to 512 [ 79.070402][ T5218] EXT4-fs (loop3): Unrecognized mount option "async" or missing value [ 79.176619][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 79.249746][ T5223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'. [ 79.254490][ T5223] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 79.594784][ T3602] usb 1-1: USB disconnect, device number 2 [ 80.206430][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 80.342883][ T5281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.422'. [ 80.355054][ T5268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.420'. [ 80.361618][ T5268] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 80.402975][ T5283] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 80.453399][ T5285] udc-core: couldn't find an available UDC or it's busy [ 80.462360][ T5285] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.089438][ T4020] Bluetooth: hci0: Unknown advertising packet type: 0xfc00 [ 81.162780][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 81.265055][ T5317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.438'. [ 81.269942][ T5317] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 81.313232][ T5327] loop1: detected capacity change from 0 to 256 [ 81.342577][ T5327] exFAT-fs (loop1): bogus fat length [ 81.346785][ T5327] exFAT-fs (loop1): failed to read boot sector [ 81.348093][ T5327] exFAT-fs (loop1): failed to recognize exfat type [ 81.457465][ T5322] udc-core: couldn't find an available UDC or it's busy [ 81.459080][ T5322] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.042343][ T5363] sock: sock_timestamping_bind_phc: sock not bind to device [ 82.156151][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 82.261267][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 82.370594][ T5377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'. [ 82.382085][ T5377] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 82.744970][ T3602] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 82.746782][ T3602] Bluetooth: hci1: Injecting HCI hardware error event [ 82.749433][ T4020] Bluetooth: hci1: hardware error 0x00 [ 83.095926][ T5414] loop2: detected capacity change from 0 to 512 [ 83.141830][ T5414] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.175944][ T5421] netlink: 'syz.3.467': attribute type 4 has an invalid length. [ 83.182596][ T5414] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.465: casefold flag without casefold feature [ 83.200478][ T5414] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.465: couldn't read orphan inode 15 (err -117) [ 83.220704][ T5414] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,resgid=0x0000000000000000,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 84.123035][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 84.146199][ T5470] udc-core: couldn't find an available UDC or it's busy [ 84.148011][ T5470] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.149549][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 84.225229][ T5465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.472'. [ 84.304559][ T5483] udc-core: couldn't find an available UDC or it's busy [ 84.308024][ T5483] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.498049][ T5501] udc-core: couldn't find an available UDC or it's busy [ 84.499667][ T5501] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.695828][ T5507] udc-core: couldn't find an available UDC or it's busy [ 84.697648][ T5507] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.735119][ T3602] libceph: connect (1)[c::]:6789 error -101 [ 84.736937][ T3602] libceph: mon0 (1)[c::]:6789 connect error [ 84.740588][ T3602] libceph: connect (1)[c::]:6789 error -101 [ 84.742023][ T3602] libceph: mon0 (1)[c::]:6789 connect error [ 84.823068][ T5509] ceph: No mds server is up or the cluster is laggy [ 84.868148][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 84.995733][ T5521] loop1: detected capacity change from 0 to 164 [ 85.151643][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 85.230144][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 85.485602][ T4034] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 85.501371][ T5562] loop4: detected capacity change from 0 to 2048 [ 85.529977][ T5562] UDF-fs: bad mount option "00000000000000000003" or missing value [ 85.631446][ T5569] loop4: detected capacity change from 0 to 128 [ 85.642821][ T5569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 85.647959][ T5569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.731502][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 85.783754][ T4067] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 85.785522][ T4067] Bluetooth: hci4: Injecting HCI hardware error event [ 85.787165][ T4034] Bluetooth: hci4: hardware error 0x00 [ 85.834434][ T5582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.856727][ T5583] udc-core: couldn't find an available UDC or it's busy [ 85.868627][ T5583] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.200835][ T5594] udc-core: couldn't find an available UDC or it's busy [ 86.203884][ T5594] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.411531][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 86.551595][ T5616] loop1: detected capacity change from 0 to 128 [ 86.614912][ T5616] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 86.620781][ T5616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.698723][ T5621] capability: warning: `syz.1.545' uses 32-bit capabilities (legacy support in use) [ 86.744610][ T5627] udc-core: couldn't find an available UDC or it's busy [ 86.749882][ T5627] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.830179][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 88.514488][ T5658] binder: 5657:5658 tried to acquire reference to desc 0, got 1 instead [ 88.516459][ T5658] binder_alloc: 5657: binder_alloc_buf, no vma [ 88.518273][ T5658] binder: 5657:5658 transaction failed 29189/-3, size 0-0 line 3085 [ 88.545739][ T4063] binder: undelivered TRANSACTION_ERROR: 29189 [ 88.645491][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 88.650532][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 88.695145][ T5676] loop3: detected capacity change from 0 to 512 [ 88.800223][ T5676] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.815778][ T5689] netlink: 68 bytes leftover after parsing attributes in process `syz.4.575'. [ 88.844844][ T5676] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.570: Directory hole found for htree leaf block 0 [ 88.905035][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 88.995668][ T5698] nbd1: detected capacity change from 0 to 6 [ 89.135876][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 89.135890][ T26] audit: type=1326 audit(89.106:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5708 comm="syz.2.583" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x0 [ 89.275003][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 89.295311][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 89.653631][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.690725][ T4022] block nbd1: Receive control failed (result -104) [ 89.903577][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 89.986764][ T5727] loop3: detected capacity change from 0 to 8 [ 90.027807][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.059494][ T5727] SQUASHFS error: zlib decompression failed, data probably corrupt [ 90.067681][ T5727] SQUASHFS error: Failed to read block 0x9b: -5 [ 90.069264][ T5727] SQUASHFS error: Unable to read metadata cache entry [99] [ 90.071187][ T5727] SQUASHFS error: Unable to read inode 0x127 [ 90.103774][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.184252][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.263765][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.344226][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.424082][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.513083][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.596485][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.650688][ T5772] loop2: detected capacity change from 0 to 512 [ 90.678787][ T5772] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.716911][ T5772] EXT4-fs (loop2): 1 orphan inode deleted [ 90.718266][ T5772] EXT4-fs (loop2): 1 truncate cleaned up [ 90.719691][ T5772] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 90.756200][ T25] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 90.758225][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.759961][ T25] usb 1-1: Product: syz [ 90.760836][ T25] usb 1-1: Manufacturer: syz [ 90.761866][ T25] usb 1-1: SerialNumber: syz [ 90.778905][ T25] usb 1-1: config 0 descriptor?? [ 90.998609][ T5784] udc-core: couldn't find an available UDC or it's busy [ 91.001298][ T5784] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.027442][ T7] usb 1-1: USB disconnect, device number 3 [ 91.440178][ T5792] loop4: detected capacity change from 0 to 256 [ 91.489489][ T5792] exfat: Unknown parameter 'keep_last_dots' [ 91.871632][ T5814] loop4: detected capacity change from 0 to 512 [ 91.946615][ T5814] attempt to access beyond end of device [ 91.946615][ T5814] loop4: rw=0, want=1022040, limit=512 [ 91.961119][ T5814] EXT2-fs (loop4): error: ext2_readdir: bad page in #2 [ 92.058319][ T5820] udc-core: couldn't find an available UDC or it's busy [ 92.059901][ T5820] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.875403][ T5846] loop4: detected capacity change from 0 to 64 [ 92.916685][ T5845] loop3: detected capacity change from 0 to 64 [ 92.992439][ T5845] binder: 5844:5845 transaction failed 29189/-22, size 0-0 line 2917 [ 93.249142][ T5855] udc-core: couldn't find an available UDC or it's busy [ 93.250772][ T5855] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.142507][ T5887] udc-core: couldn't find an available UDC or it's busy [ 94.145765][ T5887] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.300430][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 94.469083][ T5916] device syzkaller0 entered promiscuous mode [ 94.669407][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 95.012061][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 96.539524][ T6116] device syzkaller0 entered promiscuous mode [ 96.698971][ T6127] device syzkaller0 entered promiscuous mode [ 96.980052][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 97.463273][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 97.799607][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 97.940482][ T6232] device syzkaller0 entered promiscuous mode [ 98.015593][ T6242] device syzkaller0 entered promiscuous mode [ 98.207502][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 98.510845][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 98.861856][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 99.546934][ T6328] chnl_net:caif_netlink_parms(): no params data found [ 99.550601][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 100.014977][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.016779][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.019941][ T6328] device bridge_slave_0 entered promiscuous mode [ 100.104970][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 100.136987][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.138952][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.141690][ T6328] device bridge_slave_1 entered promiscuous mode [ 100.258426][ T6397] loop2: detected capacity change from 0 to 128 [ 100.265957][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.270248][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.000580][ T6328] team0: Port device team_slave_0 added [ 101.245074][ T4063] Bluetooth: hci5: command 0x0409 tx timeout [ 101.252058][ T6328] team0: Port device team_slave_1 added [ 101.331007][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.332665][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.413516][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.417386][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.418886][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.432152][ T6407] udc-core: couldn't find an available UDC or it's busy [ 101.434050][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.453673][ T6407] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.506141][ T6328] device hsr_slave_0 entered promiscuous mode [ 101.543907][ T6328] device hsr_slave_1 entered promiscuous mode [ 101.583582][ T6328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.586341][ T6328] Cannot create hsr debugfs directory [ 101.709230][ T6328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.787339][ T6328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.869669][ T6328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.971916][ T6328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.401044][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 102.980785][ T6328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.095297][ T6328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.265842][ T6328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.315645][ T6328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.381578][ T4174] Bluetooth: hci5: command 0x041b tx timeout [ 103.384330][ T6428] loop3: detected capacity change from 0 to 512 [ 103.475623][ T6428] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.477696][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.492620][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.495165][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.501069][ T6328] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.508012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.694723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.712607][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.714533][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.967717][ T6443] loop2: detected capacity change from 0 to 2048 [ 104.028004][ T6443] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.092232][ T4913] udevd[4913]: incorrect nilfs2 checksum on /dev/loop2 [ 104.167297][ T4913] udevd[4913]: incorrect nilfs2 checksum on /dev/loop2 [ 104.301461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.304176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.306829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.309068][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.311271][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.315338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.318047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.320681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.323617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.326212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.328982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.331377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.334809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.337247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.339718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.349742][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.375062][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.481646][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 104.595075][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'. [ 105.336173][ T6457] loop2: detected capacity change from 0 to 512 [ 105.483786][ T4069] Bluetooth: hci5: command 0x040f tx timeout [ 106.430753][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.436824][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.438783][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.517562][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.520220][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.541599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.545043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.573834][ T6475] udc-core: couldn't find an available UDC or it's busy [ 106.579785][ T6475] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.593814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.596211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.599847][ T6328] device veth0_vlan entered promiscuous mode [ 106.615230][ T6328] device veth1_vlan entered promiscuous mode [ 106.749359][ T6328] device veth0_macvtap entered promiscuous mode [ 106.764099][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.766538][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.768704][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.771259][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.787668][ T6328] device veth1_macvtap entered promiscuous mode [ 106.808777][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.811516][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.824884][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.827665][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.829954][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.832064][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.834835][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.837167][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.839340][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.841661][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.846381][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.848094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.850658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.855249][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.857389][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.894090][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.896927][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.900071][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.902859][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.040765][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.115068][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.749451][ T4069] Bluetooth: hci5: command 0x0419 tx timeout [ 107.756378][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.786093][ T6328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.788006][ T6328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.789839][ T6328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.791596][ T6328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.828687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.831242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.839906][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 108.019864][ T1665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.035479][ T1665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.056269][ T6491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'. [ 108.158188][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.832950][ T26] audit: type=1326 audit(108.796:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 108.837879][ T26] audit: type=1326 audit(108.796:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 108.842280][ T26] audit: type=1326 audit(108.796:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 108.844855][ T6494] loop3: detected capacity change from 0 to 256 [ 108.856655][ T6492] loop2: detected capacity change from 0 to 256 [ 108.883187][ T26] audit: type=1326 audit(108.796:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 108.911613][ T5002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.913372][ T5002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.920002][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.926373][ T26] audit: type=1326 audit(108.796:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 108.930924][ T26] audit: type=1326 audit(108.796:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 108.976537][ T26] audit: type=1326 audit(108.796:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 108.991440][ T26] audit: type=1326 audit(108.796:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 109.021467][ T26] audit: type=1326 audit(108.796:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 109.057023][ T26] audit: type=1326 audit(108.806:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 111.459135][ T6518] loop1: detected capacity change from 0 to 512 [ 111.495698][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 113.263521][ T6535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 113.431290][ T6539] loop2: detected capacity change from 0 to 512 [ 113.596651][ T6539] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.599449][ T6539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.410709][ T6539] EXT4-fs (loop2): 1 truncate cleaned up [ 114.412191][ T6539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.580979][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 116.683063][ T6569] loop1: detected capacity change from 0 to 512 [ 116.715059][ T6568] loop4: detected capacity change from 0 to 512 [ 116.767034][ T6569] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.786070][ T6569] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 116.798940][ T6569] EXT4-fs (loop1): 1 truncate cleaned up [ 116.800138][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 117.011960][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 118.824656][ T6584] loop3: detected capacity change from 0 to 2048 [ 118.926344][ T6584] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noinit_itable,init_itable=0x0000000000000080,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 118.935791][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.962'. [ 119.139477][ T6584] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.964: bg 0: block 234: padding at end of block bitmap is not set [ 119.157852][ T6584] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 356 with error 28 [ 119.254515][ T6584] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.254515][ T6584] [ 119.256771][ T6584] EXT4-fs (loop3): Total free blocks count 0 [ 119.258091][ T6584] EXT4-fs (loop3): Free/Dirty block details [ 119.259415][ T6584] EXT4-fs (loop3): free_blocks=0 [ 119.430115][ T6584] EXT4-fs (loop3): dirty_blocks=368 [ 119.435766][ T6584] EXT4-fs (loop3): Block reservation details [ 119.445799][ T6584] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 119.544023][ T149] block nbd1: Possible stuck request 0000000062ed548b: control (read@0,3072B). Runtime 30 seconds [ 119.727765][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 120.010681][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.020845][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.023409][ T6589] device bridge_slave_0 entered promiscuous mode [ 120.030257][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.033033][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.040011][ T6589] device bridge_slave_1 entered promiscuous mode [ 120.079278][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.095854][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.462455][ T4063] Bluetooth: hci6: command 0x0409 tx timeout [ 121.523098][ T6622] loop3: detected capacity change from 0 to 128 [ 121.560228][ T6622] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.129177][ T6589] team0: Port device team_slave_0 added [ 122.153587][ T6589] team0: Port device team_slave_1 added [ 122.202436][ T6629] loop3: detected capacity change from 0 to 1024 [ 122.248162][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.249812][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.276656][ T6629] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 122.279136][ T6629] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.280190][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.285891][ T6629] EXT4-fs error (device loop3): __ext4_get_inode_loc:4320: comm syz.3.971: Invalid inode table block 0 in block_group 0 [ 122.300881][ T6629] EXT4-fs (loop3): Remounting filesystem read-only [ 122.302113][ T6629] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 122.382444][ T599] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.399321][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.400939][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.409661][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.438950][ T6629] EXT4-fs error (device loop3): ext4_quota_write:6591: inode #3: comm syz.3.971: mark_inode_dirty error [ 122.441717][ T6629] __quota_error: 39 callbacks suppressed [ 122.441730][ T6629] Quota error (device loop3): write_blk: dquota write failed [ 122.456567][ T6629] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 122.467272][ T6629] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.971: Failed to acquire dquot type 0 [ 122.473214][ T6629] EXT4-fs (loop3): 1 truncate cleaned up [ 122.482297][ T6589] device hsr_slave_0 entered promiscuous mode [ 122.485919][ T6629] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000008,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 122.504039][ T6589] device hsr_slave_1 entered promiscuous mode [ 122.553654][ T6589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.556681][ T6589] Cannot create hsr debugfs directory [ 122.558151][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 122.604743][ T599] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.702813][ T599] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.765278][ T6651] loop3: detected capacity change from 0 to 2048 [ 122.894854][ T599] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.740473][ T4174] Bluetooth: hci6: command 0x041b tx timeout [ 125.347251][ T599] tipc: Disabling bearer [ 125.351362][ T599] tipc: Left network mode [ 125.781180][ T6689] loop2: detected capacity change from 0 to 512 [ 125.793910][ T4066] Bluetooth: hci6: command 0x040f tx timeout [ 127.088767][ T6589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.951780][ T4174] Bluetooth: hci6: command 0x0419 tx timeout [ 128.026566][ T6589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.066511][ T6589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.096021][ T6589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.349788][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.302531][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.308339][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.317104][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.327929][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.351422][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.371335][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.373026][ T4079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.437461][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.554383][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.557085][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.559471][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.561036][ T4079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.563270][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.584139][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.586974][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.590857][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.781585][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.200897][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.203368][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.209930][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.212152][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.227592][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.229703][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.234651][ T6589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.337003][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.339049][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.346705][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.361980][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.365125][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.378208][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.382042][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.390180][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.392492][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.407255][ T6589] device veth0_vlan entered promiscuous mode [ 130.414728][ T6589] device veth1_vlan entered promiscuous mode [ 130.432710][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.435243][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.437408][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.439997][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.443721][ T6589] device veth0_macvtap entered promiscuous mode [ 130.448330][ T6589] device veth1_macvtap entered promiscuous mode [ 130.461554][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.464391][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.466519][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.468632][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.470730][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.472994][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.475248][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.477630][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.479858][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.482531][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.493853][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.497191][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.499594][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.503056][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.505777][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.508585][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.510804][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.512923][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.516190][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.518263][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.520469][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.522476][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.525129][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.527256][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.529306][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.532669][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.622438][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.625240][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.629561][ T6589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.631517][ T6589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.633375][ T6589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.639183][ T6589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.726297][ T5051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.728275][ T5051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.732002][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.749193][ T5087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.751164][ T5087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.762657][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.992642][ T6746] loop4: detected capacity change from 0 to 4096 [ 131.163967][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.250080][ T599] device hsr_slave_0 left promiscuous mode [ 132.364701][ T599] device hsr_slave_1 left promiscuous mode [ 132.595600][ T599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.600554][ T599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.230013][ T599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.231853][ T599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.233466][ C1] sched: RT throttling activated [ 133.254473][ T599] device bridge_slave_1 left promiscuous mode [ 133.256865][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.364801][ T599] device bridge_slave_0 left promiscuous mode [ 133.366351][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.504598][ T599] device veth1_macvtap left promiscuous mode [ 133.506277][ T599] device veth0_macvtap left promiscuous mode [ 133.507836][ T599] device veth1_vlan left promiscuous mode [ 133.509177][ T599] device veth0_vlan left promiscuous mode [ 134.670894][ T599] team0 (unregistering): Port device team_slave_1 removed [ 134.681145][ T599] team0 (unregistering): Port device team_slave_0 removed [ 134.691608][ T599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.732867][ T599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.880387][ T599] bond0 (unregistering): Released all slaves [ 135.122743][ T6791] loop3: detected capacity change from 0 to 1024 [ 135.177557][ T6792] loop1: detected capacity change from 0 to 4096 [ 136.824957][ T6791] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 136.830180][ T6791] EXT4-fs (loop3): Ignoring removed orlov option [ 136.832761][ T6791] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.948835][ T4069] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.208607][ T6791] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,discard,nomblk_io_submit,data_err=ignore,noquota,dioread_nolock,resgid=0x0000000000000000,nojournal_checksum,orlov,,errors=continue. Quota mode: none. [ 137.234159][ T6791] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1020: corrupted in-inode xattr [ 138.120133][ T6813] loop2: detected capacity change from 0 to 512 [ 138.383581][ T4069] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 138.385358][ T4069] usb 1-1: can't read configurations, error -71 [ 138.417520][ T6813] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 138.458778][ T6813] EXT4-fs (loop2): 1 truncate cleaned up [ 138.460085][ T6813] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,sysvgroups,data_err=abort,,errors=continue. Quota mode: writeback. [ 139.142378][ T6833] loop1: detected capacity change from 0 to 16 [ 139.191756][ T6833] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0xa808ce41, 0xc32427af expected [ 141.758371][ T6851] loop3: detected capacity change from 0 to 40427 [ 141.791184][ T6850] loop4: detected capacity change from 0 to 32768 [ 141.818984][ T6851] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 141.820994][ T6851] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 141.854675][ T6850] gfs2: Bad value for 'quota' [ 141.897019][ T6851] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.967901][ T6851] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 141.969738][ T6851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.230670][ T6863] loop1: detected capacity change from 0 to 40427 [ 142.283110][ T6863] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.285010][ T6863] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.300807][ T6863] F2FS-fs (loop1): invalid crc value [ 142.328752][ T6863] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.451014][ T6863] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.452797][ T6863] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.407334][ T6897] loop2: detected capacity change from 0 to 47 [ 143.421418][ T6898] loop4: detected capacity change from 0 to 1024 [ 143.472042][ T6888] loop3: detected capacity change from 0 to 32768 [ 143.828022][ T6904] loop2: detected capacity change from 0 to 4096 [ 143.921388][ T26] audit: type=1326 audit(143.886:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaee59e8 code=0x7fc00000 [ 143.936517][ T26] audit: type=1326 audit(143.896:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffbaee59e8 code=0x7fc00000 [ 143.952713][ T26] audit: type=1326 audit(143.896:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaee59e8 code=0x7fc00000 [ 144.105181][ T6912] udc-core: couldn't find an available UDC or it's busy [ 144.106881][ T6912] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.951643][ T26] audit: type=1326 audit(144.916:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaee59e8 code=0x7ffc0000 [ 144.974543][ T26] audit: type=1326 audit(144.946:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbaee59e8 code=0x7ffc0000 [ 144.986292][ T26] audit: type=1326 audit(144.946:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaee59e8 code=0x7ffc0000 [ 145.113658][ T26] audit: type=1326 audit(144.946:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbaee59e8 code=0x7ffc0000 [ 145.138957][ T26] audit: type=1326 audit(144.946:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaee59e8 code=0x7ffc0000 [ 145.153624][ T26] audit: type=1326 audit(144.946:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbaee59e8 code=0x7ffc0000 [ 145.158617][ T26] audit: type=1326 audit(144.946:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaee59e8 code=0x7ffc0000 [ 145.180536][ T6930] loop2: detected capacity change from 0 to 8 [ 146.054300][ T6932] tipc: Started in network mode [ 146.055482][ T6932] tipc: Node identity 1, cluster identity 4711 [ 146.056844][ T6932] tipc: Node number set to 1 [ 146.412648][ T6949] loop2: detected capacity change from 0 to 512 [ 146.473624][ T6949] EXT4-fs (loop2): inline encryption not supported [ 146.545493][ T6949] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1071: bg 0: block 248: padding at end of block bitmap is not set [ 146.572249][ T6949] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1071: Failed to acquire dquot type 1 [ 146.590901][ T6949] EXT4-fs (loop2): 1 truncate cleaned up [ 146.598986][ T6949] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inlinecrypt,,errors=continue. Quota mode: writeback. [ 146.806760][ T6940] loop4: detected capacity change from 0 to 32768 [ 146.935552][ T6940] XFS (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 146.937814][ T6940] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 146.939513][ T6940] XFS (loop4): DAX and reflink cannot be used together! [ 147.095338][ T6964] loop3: detected capacity change from 0 to 4096 [ 148.948085][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 148.948098][ T26] audit: type=1326 audit(148.916:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.2.1078" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 148.975886][ T26] audit: type=1326 audit(148.916:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.2.1078" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 149.216094][ T6996] device syzkaller1 entered promiscuous mode [ 150.418180][ T149] block nbd1: Possible stuck request 0000000062ed548b: control (read@0,3072B). Runtime 60 seconds [ 150.648467][ T7011] device veth0_vlan left promiscuous mode [ 150.738199][ T6990] loop1: detected capacity change from 0 to 32768 [ 150.803425][ T6990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1081 (6990) [ 150.810815][ T26] audit: type=1326 audit(150.776:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 150.823151][ T26] audit: type=1326 audit(150.786:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 150.829270][ T26] audit: type=1326 audit(150.786:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 150.840160][ T26] audit: type=1326 audit(150.786:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 150.852248][ T26] audit: type=1326 audit(150.786:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 151.014556][ T26] audit: type=1326 audit(150.786:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 151.020277][ T26] audit: type=1326 audit(150.786:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 151.026958][ T26] audit: type=1326 audit(150.786:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb0c1a9e8 code=0x7ffc0000 [ 151.042549][ T6990] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 151.045109][ T6990] BTRFS info (device loop1): using free space tree [ 151.046606][ T6990] BTRFS info (device loop1): has skinny extents [ 152.075173][ T7041] loop2: detected capacity change from 0 to 2048 [ 153.030002][ T6990] BTRFS error (device loop1): open_ctree failed [ 153.211432][ T7058] loop3: detected capacity change from 0 to 4096 [ 153.309227][ T7065] loop4: detected capacity change from 0 to 256 [ 153.490095][ T7074] loop4: detected capacity change from 0 to 2048 [ 153.671786][ T7074] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.082912][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 154.082925][ T26] audit: type=1326 audit(154.036:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 154.613011][ T26] audit: type=1326 audit(154.566:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 154.645126][ T26] audit: type=1326 audit(154.606:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 154.678799][ T26] audit: type=1326 audit(154.626:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 154.809324][ T26] audit: type=1326 audit(154.756:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 154.827498][ T26] audit: type=1326 audit(154.786:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 155.013542][ T26] audit: type=1326 audit(154.786:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 156.766085][ T26] audit: type=1326 audit(154.786:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 156.794622][ T26] audit: type=1326 audit(154.786:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 156.967044][ T26] audit: type=1326 audit(154.786:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 157.105542][ T7109] loop1: detected capacity change from 0 to 1024 [ 158.247741][ T7109] hfsplus: unable to find HFS+ superblock [ 158.487310][ T7113] loop2: detected capacity change from 0 to 256 [ 158.647501][ T7113] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.269718][ T7113] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 160.834463][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1131'. [ 161.535432][ T7147] udc-core: couldn't find an available UDC or it's busy [ 161.537163][ T7147] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 161.605625][ T7147] vhci_hcd: invalid port number 0 [ 162.022779][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 162.022792][ T26] audit: type=1326 audit(161.986:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 162.264363][ T26] audit: type=1326 audit(162.006:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 163.030295][ T26] audit: type=1326 audit(162.006:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 163.078757][ T26] audit: type=1326 audit(162.006:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 163.116495][ T26] audit: type=1326 audit(162.006:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 163.118338][ T7166] loop1: detected capacity change from 0 to 256 [ 163.121110][ T26] audit: type=1326 audit(162.006:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 163.129554][ T7164] loop4: detected capacity change from 0 to 16 [ 163.148418][ T26] audit: type=1326 audit(162.006:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 164.063259][ T7164] erofs: Unknown parameter 'user_pattr' [ 164.093603][ T7166] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.095235][ T26] audit: type=1326 audit(162.006:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 164.101050][ T26] audit: type=1326 audit(162.006:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 164.106733][ T26] audit: type=1326 audit(162.006:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 164.120438][ T7166] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 164.310752][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 164.987979][ T7182] loop4: detected capacity change from 0 to 256 [ 165.043271][ T7182] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.079607][ T7182] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 168.983633][ T4064] Bluetooth: hci3: command 0x0406 tx timeout [ 168.992675][ T4064] Bluetooth: hci2: command 0x0406 tx timeout [ 169.680384][ T7228] loop3: detected capacity change from 0 to 256 [ 169.729310][ T7228] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.752548][ T7228] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 171.255443][ T7241] binder: 7238:7241 got reply transaction with no transaction stack [ 171.257232][ T7241] binder: 7238:7241 transaction failed 29201/-71, size 0-0 line 2822 [ 171.821980][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.171281][ T7260] loop3: detected capacity change from 0 to 256 [ 173.216702][ T7260] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.272884][ T7260] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 173.375069][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1168'. [ 173.505975][ T7270] udc-core: couldn't find an available UDC or it's busy [ 173.507586][ T7270] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.148439][ T7275] loop2: detected capacity change from 0 to 256 [ 174.435345][ T7268] loop4: detected capacity change from 0 to 40427 [ 174.524435][ T7275] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.530787][ T7268] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 174.537631][ T7275] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 174.805193][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 174.805208][ T26] audit: type=1326 audit(174.766:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.1173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 174.805242][ T26] audit: type=1326 audit(174.766:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.1173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 175.492392][ T7286] loop1: detected capacity change from 0 to 16 [ 175.519689][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 175.574310][ T7286] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 175.588940][ T7286] cramfs: empty filesystem [ 175.708266][ T7292] loop4: detected capacity change from 0 to 512 [ 175.872704][ T26] audit: type=1326 audit(175.836:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.1179" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x0 [ 175.903922][ T7299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1180'. [ 175.963616][ T7292] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 177.110335][ T7322] loop1: detected capacity change from 0 to 2048 [ 177.972983][ T7322] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.997606][ T7322] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.001779][ T7322] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 178.019949][ T7322] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.019949][ T7322] [ 178.022132][ T7322] EXT4-fs (loop1): Total free blocks count 0 [ 178.023409][ T7322] EXT4-fs (loop1): Free/Dirty block details [ 178.046498][ T7322] EXT4-fs (loop1): free_blocks=2415919104 [ 178.047833][ T7322] EXT4-fs (loop1): dirty_blocks=48 [ 178.049110][ T7322] EXT4-fs (loop1): Block reservation details [ 178.056417][ T7322] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 178.154423][ T1665] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.157678][ T1665] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.157678][ T1665] [ 178.290663][ T7341] udc-core: couldn't find an available UDC or it's busy [ 178.292591][ T7341] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.672416][ T7326] loop2: detected capacity change from 0 to 40427 [ 178.757025][ T7326] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 178.758929][ T7326] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.773748][ T7326] F2FS-fs (loop2): invalid crc value [ 178.801116][ T7326] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.861778][ T7326] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 178.863276][ T7326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 178.901935][ T7326] attempt to access beyond end of device [ 178.901935][ T7326] loop2: rw=2051, want=45064, limit=40427 [ 179.034809][ T7326] attempt to access beyond end of device [ 179.034809][ T7326] loop2: rw=2051, want=131072, limit=40427 [ 179.061653][ T7326] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 179.061700][ T7326] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 179.093919][ T7353] loop3: detected capacity change from 0 to 256 [ 180.229287][ T7365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.259063][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.984594][ T149] block nbd1: Possible stuck request 0000000062ed548b: control (read@0,3072B). Runtime 90 seconds [ 181.391486][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 181.414269][ T7385] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1210'. [ 182.974697][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.083366][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.845275][ T7420] loop3: detected capacity change from 0 to 512 [ 185.034501][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 185.194158][ T7420] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.1222: invalid block [ 185.196877][ T7420] EXT4-fs (loop3): Remounting filesystem read-only [ 185.198338][ T7420] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1222: couldn't read orphan inode 11 (err -117) [ 185.227024][ T7420] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,quota,errors=remount-ro,acl,. Quota mode: writeback. [ 187.032835][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.091191][ T7427] loop4: detected capacity change from 0 to 32768 [ 187.106145][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.348455][ T7427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1225 (7427) [ 187.366631][ T7427] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 187.372328][ T7427] BTRFS info (device loop4): using free space tree [ 187.375612][ T7427] BTRFS info (device loop4): has skinny extents [ 188.442747][ T7427] BTRFS error (device loop4): open_ctree failed [ 188.794875][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1238'. [ 192.213091][ T7522] loop1: detected capacity change from 0 to 1024 [ 192.280967][ T7522] hfsplus: request for non-existent node 3 in B*Tree [ 192.291861][ T7522] hfsplus: request for non-existent node 3 in B*Tree [ 192.407643][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 192.514557][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.523519][ T7475] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.763584][ T7475] usb 1-1: Using ep0 maxpacket: 32 [ 193.842209][ T7540] loop3: detected capacity change from 0 to 256 [ 193.875963][ T7540] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.892303][ T7540] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 194.155106][ T7475] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 194.157552][ T7475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.186471][ T7475] usb 1-1: Product: syz [ 194.235927][ T7475] usb 1-1: Manufacturer: syz [ 194.274370][ T7475] usb 1-1: SerialNumber: syz [ 194.996630][ T7546] loop3: detected capacity change from 0 to 16 [ 195.000094][ T7546] erofs: Unknown parameter 'user_pattr' [ 195.027844][ T7475] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 195.068072][ T7475] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.123568][ T7475] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 195.126539][ T7475] usb 1-1: media controller created [ 195.165876][ T7475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.263236][ T7475] usb 1-1: selecting invalid altsetting 2 [ 195.273563][ T7475] set interface failed [ 195.273932][ T7475] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 195.276507][ T7475] error writing reg: 0xff, val: 0x00 [ 195.354454][ T26] audit: type=1326 audit(195.326:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.359869][ T7475] dvb_usb_mxl111sf: probe of 1-1:123.0 failed with error -22 [ 195.368553][ T26] audit: type=1326 audit(195.326:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.387898][ T26] audit: type=1326 audit(195.356:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.393591][ T7475] usb 1-1: USB disconnect, device number 6 [ 195.408633][ T26] audit: type=1326 audit(195.356:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.423503][ T26] audit: type=1326 audit(195.356:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.428517][ T26] audit: type=1326 audit(195.356:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.432884][ T26] audit: type=1326 audit(195.356:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.450681][ T26] audit: type=1326 audit(195.356:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.476014][ T26] audit: type=1326 audit(195.356:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 195.496275][ T26] audit: type=1326 audit(195.356:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87ba99e8 code=0x7ffc0000 [ 196.639411][ T7544] loop1: detected capacity change from 0 to 32768 [ 199.456653][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1264'. [ 199.886676][ T7588] udc-core: couldn't find an available UDC or it's busy [ 199.888456][ T7588] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 200.800515][ T7594] loop2: detected capacity change from 0 to 2048 [ 200.994436][ T7594] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noinit_itable,init_itable=0x0000000000000080,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 201.793704][ T7600] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 201.838569][ T7605] bridge0: port 3(hsr_slave_1) entered blocking state [ 201.840435][ T7605] bridge0: port 3(hsr_slave_1) entered disabled state [ 201.845931][ T7594] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 236 with error 28 [ 201.848695][ T7594] EXT4-fs (loop2): This should not happen!! Data will be lost [ 201.848695][ T7594] [ 201.850844][ T7594] EXT4-fs (loop2): Total free blocks count 0 [ 201.884154][ T7594] EXT4-fs (loop2): Free/Dirty block details [ 201.885614][ T7594] EXT4-fs (loop2): free_blocks=0 [ 201.886704][ T7594] EXT4-fs (loop2): dirty_blocks=240 [ 201.887782][ T7594] EXT4-fs (loop2): Block reservation details [ 201.889035][ T7594] EXT4-fs (loop2): i_reserved_data_blocks=15 [ 203.043234][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 203.043248][ T26] audit: type=1326 audit(203.006:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 203.154625][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 203.169082][ T26] audit: type=1326 audit(203.006:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 203.192764][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1278'. [ 203.223931][ T26] audit: type=1326 audit(203.006:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 203.253841][ T26] audit: type=1326 audit(203.016:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 204.157851][ T26] audit: type=1326 audit(203.016:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 204.209895][ T26] audit: type=1326 audit(203.016:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 204.233938][ T26] audit: type=1326 audit(203.016:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 204.349968][ T7630] loop4: detected capacity change from 0 to 256 [ 204.355951][ T7634] udc-core: couldn't find an available UDC or it's busy [ 204.360940][ T26] audit: type=1326 audit(203.016:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 204.389851][ T7634] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 204.412472][ T26] audit: type=1326 audit(203.016:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 204.418463][ T26] audit: type=1326 audit(203.016:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb15fe9e8 code=0x7ffc0000 [ 204.435755][ T7636] loop2: detected capacity change from 0 to 256 [ 204.446792][ T7630] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.454014][ T7630] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 206.425758][ T7644] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.956957][ T7653] loop3: detected capacity change from 0 to 512 [ 206.959073][ T7654] binder: 7652:7654 ioctl c0306201 0 returned -14 [ 206.961869][ T7654] binder: 7652:7654 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 206.973785][ T7654] binder: 7654 RLIMIT_NICE not set [ 207.013726][ T7656] binder: 7652:7656 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 207.016644][ T7656] binder: 7652:7656 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.692437][ T7656] binder: 7656 RLIMIT_NICE not set [ 207.722944][ T7653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.782080][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1293'. [ 207.839486][ T7653] EXT4-fs (loop3): 1 truncate cleaned up [ 207.841102][ T7653] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,data=journal,nombcache,block_validity,,errors=continue. Quota mode: none. [ 208.002550][ T7669] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.005460][ T7669] Cannot find add_set index 0 as target [ 208.796079][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 208.796091][ T26] audit: type=1326 audit(208.766:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.802339][ T26] audit: type=1326 audit(208.766:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.843518][ T26] audit: type=1326 audit(208.766:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.855823][ T26] audit: type=1326 audit(208.826:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.877001][ T26] audit: type=1326 audit(208.826:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.881785][ T26] audit: type=1326 audit(208.826:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.963532][ T26] audit: type=1326 audit(208.846:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.968321][ T26] audit: type=1326 audit(208.846:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 208.985990][ T7677] loop3: detected capacity change from 0 to 256 [ 209.010678][ T26] audit: type=1326 audit(208.846:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 209.046019][ T7680] loop2: detected capacity change from 0 to 256 [ 209.048147][ T7680] FAT-fs (loop2): Unrecognized mount option "Ûhortname=mixed" or missing value [ 209.057270][ T26] audit: type=1326 audit(208.846:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 209.072876][ T7677] FAT-fs (loop3): Directory bread(block 64) failed [ 210.003734][ T7677] FAT-fs (loop3): Directory bread(block 65) failed [ 210.005463][ T7677] FAT-fs (loop3): Directory bread(block 66) failed [ 210.008098][ T7677] FAT-fs (loop3): Directory bread(block 67) failed [ 210.009668][ T7677] FAT-fs (loop3): Directory bread(block 68) failed [ 210.011078][ T7677] FAT-fs (loop3): Directory bread(block 69) failed [ 210.013051][ T7677] FAT-fs (loop3): Directory bread(block 70) failed [ 210.015983][ T7677] FAT-fs (loop3): Directory bread(block 71) failed [ 210.017588][ T7677] FAT-fs (loop3): Directory bread(block 72) failed [ 210.021276][ T7677] FAT-fs (loop3): Directory bread(block 73) failed [ 210.170945][ T7686] udc-core: couldn't find an available UDC or it's busy [ 210.172497][ T7686] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.182936][ T7687] udc-core: couldn't find an available UDC or it's busy [ 210.195122][ T7687] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.348350][ T7692] loop1: detected capacity change from 0 to 256 [ 210.405215][ T6982] attempt to access beyond end of device [ 210.405215][ T6982] loop3: rw=1, want=1832, limit=256 [ 210.437854][ T6982] attempt to access beyond end of device [ 210.437854][ T6982] loop3: rw=1, want=5952, limit=256 [ 210.467105][ T6982] attempt to access beyond end of device [ 210.467105][ T6982] loop3: rw=1, want=7760, limit=256 [ 210.628118][ T7695] loop3: detected capacity change from 0 to 256 [ 211.064217][ T149] block nbd1: Possible stuck request 0000000062ed548b: control (read@0,3072B). Runtime 120 seconds [ 211.626592][ T7695] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.637225][ T7695] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 213.066502][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1308'. [ 213.128800][ T7714] loop1: detected capacity change from 0 to 128 [ 213.225717][ T7716] loop2: detected capacity change from 0 to 256 [ 213.281700][ T7716] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.297934][ T7716] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 214.357981][ T7699] loop4: detected capacity change from 0 to 32768 [ 214.440844][ T7714] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.757923][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.760053][ T7736] device batadv_slave_0 entered promiscuous mode [ 214.837586][ T7739] loop3: detected capacity change from 0 to 256 [ 214.890088][ T7744] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 214.921790][ T7742] loop2: detected capacity change from 0 to 2048 [ 215.109216][ T7742] EXT4-fs (loop2): Ignoring removed orlov option [ 216.115738][ T7744] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.204078][ T7742] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 217.356930][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1325'. [ 217.636234][ T7771] loop4: detected capacity change from 0 to 256 [ 219.304222][ T7771] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.350417][ T7771] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 219.378483][ T7778] udc-core: couldn't find an available UDC or it's busy [ 219.379958][ T7778] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 219.647962][ T7785] Cannot find add_set index 0 as target [ 220.990207][ T7794] loop3: detected capacity change from 0 to 16 [ 221.140161][ T7794] erofs: (device loop3): mounted with root inode @ nid 36. [ 221.205780][ T7794] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 221.207692][ T7794] overlayfs: missing 'lowerdir' [ 221.929900][ T7798] loop4: detected capacity change from 0 to 256 [ 221.943219][ T7800] udc-core: couldn't find an available UDC or it's busy [ 221.953151][ T7800] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 222.211199][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1341'. [ 223.324516][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 225.284396][ T7832] chnl_net:caif_netlink_parms(): no params data found [ 225.306089][ T7840] loop2: detected capacity change from 0 to 256 [ 226.243626][ T7840] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.250894][ T7840] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 226.503765][ T7473] Bluetooth: hci4: command 0x0409 tx timeout [ 226.836172][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.837888][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.849677][ T7832] device bridge_slave_0 entered promiscuous mode [ 226.867725][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.879620][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.904261][ T7832] device bridge_slave_1 entered promiscuous mode [ 227.028715][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.044221][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.183771][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1357'. [ 227.969092][ T7832] team0: Port device team_slave_0 added [ 227.973032][ T7832] team0: Port device team_slave_1 added [ 228.059145][ T7866] loop2: detected capacity change from 0 to 256 [ 228.097118][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.098607][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.263215][ T7832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.271327][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.272911][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.313428][ T7832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.349258][ T4098] Bluetooth: hci4: command 0x041b tx timeout [ 229.595893][ T7881] loop2: detected capacity change from 0 to 4096 [ 229.684444][ T7884] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 230.330094][ T7832] device hsr_slave_0 entered promiscuous mode [ 230.442586][ T7891] udc-core: couldn't find an available UDC or it's busy [ 230.451857][ T7891] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 230.494060][ T7832] device hsr_slave_1 entered promiscuous mode [ 230.500938][ T7881] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.532739][ T7881] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1371: bg 0: block 496: padding at end of block bitmap is not set [ 230.776905][ T7832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.779783][ T7832] Cannot create hsr debugfs directory [ 231.391704][ T4098] Bluetooth: hci4: command 0x040f tx timeout [ 231.466136][ T7899] loop3: detected capacity change from 0 to 256 [ 231.522004][ T7899] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.557805][ T7832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.562150][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'. [ 231.595265][ T7899] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 231.600059][ T7832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.792007][ T7910] loop4: detected capacity change from 0 to 256 [ 231.793822][ T7832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.929358][ T4066] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 232.541160][ T7832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.190730][ T4066] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 233.192678][ T4066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.205690][ T4066] usb 1-1: Product: syz [ 233.206646][ T4066] usb 1-1: Manufacturer: syz [ 233.207667][ T4066] usb 1-1: SerialNumber: syz [ 233.222528][ T4066] usb 1-1: config 0 descriptor?? [ 233.227879][ T7919] loop2: detected capacity change from 0 to 256 [ 233.323600][ T7921] loop3: detected capacity change from 0 to 1024 [ 233.347675][ T7919] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 233.417164][ T7921] hfsplus: request for non-existent node 134217728 in B*Tree [ 233.419245][ T7921] hfsplus: request for non-existent node 134217728 in B*Tree [ 233.475266][ T4066] Bluetooth: hci4: command 0x0419 tx timeout [ 233.497762][ T4066] usb 1-1: USB disconnect, device number 7 [ 233.584865][ T7832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.646166][ T7832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.718979][ T7832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.812819][ T7832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.553009][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.578371][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.594274][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.597210][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.663119][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.666862][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.669098][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.670733][ T5002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.675458][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.861694][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.864840][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.867083][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.868707][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.871655][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.877746][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.388600][ T7948] loop3: detected capacity change from 0 to 16 [ 236.474375][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.478664][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.481072][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.486495][ T7948] erofs: Unknown parameter 'nouser_d' [ 236.486908][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.490285][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.492577][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.495277][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1383'. [ 236.497526][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.514086][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.516696][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.526160][ T7832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.722836][ T7957] loop2: detected capacity change from 0 to 256 [ 236.748867][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'. [ 238.602404][ T7968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1389'. [ 238.614533][ T7957] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.629376][ T7957] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 240.295972][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.021464][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.024781][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.143796][ T149] block nbd1: Possible stuck request 0000000062ed548b: control (read@0,3072B). Runtime 150 seconds [ 241.335198][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.337705][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.360550][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.363045][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.366136][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.374689][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.412350][ T7832] device veth0_vlan entered promiscuous mode [ 243.227007][ T7832] device veth1_vlan entered promiscuous mode [ 243.329490][ T8016] loop4: detected capacity change from 0 to 256 [ 243.398608][ T8016] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.408385][ T8016] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 243.512725][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.515077][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.519467][ T7832] device veth0_macvtap entered promiscuous mode [ 243.544664][ T7832] device veth1_macvtap entered promiscuous mode [ 243.565848][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.568002][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.569939][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.572281][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.589023][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.591949][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.599106][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.602544][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.621084][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.624177][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 244.416903][ T9] device hsr_slave_0 left promiscuous mode [ 244.452063][ T9] device hsr_slave_1 left promiscuous mode [ 244.503941][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.505729][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.507879][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.509712][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.511659][ T9] device bridge_slave_1 left promiscuous mode [ 244.513149][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.556454][ T9] device bridge_slave_0 left promiscuous mode [ 244.557998][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.683707][ T9] device veth1_macvtap left promiscuous mode [ 244.685268][ T9] device veth0_macvtap left promiscuous mode [ 244.686684][ T9] device veth1_vlan left promiscuous mode [ 244.688010][ T9] device veth0_vlan left promiscuous mode [ 244.878894][ T9] team0 (unregistering): Port device team_slave_1 removed [ 244.887281][ T9] team0 (unregistering): Port device team_slave_0 removed [ 244.897310][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.951029][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.089134][ T9] bond0 (unregistering): Released all slaves [ 245.244761][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.247005][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.249042][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.251302][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.264353][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.266829][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.272983][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.295603][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.297809][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.309740][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.311951][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.321235][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.331118][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 245.331132][ T26] audit: type=1326 audit(245.296:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.332462][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.343631][ T26] audit: type=1326 audit(245.296:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.354476][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.360309][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.373669][ T26] audit: type=1326 audit(245.316:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.383370][ T7832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.393517][ T7832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.395591][ T7832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.413943][ T26] audit: type=1326 audit(245.326:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.418817][ T26] audit: type=1326 audit(245.326:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.431776][ T7832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.454526][ T26] audit: type=1326 audit(245.346:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=65 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.459197][ T26] audit: type=1326 audit(245.346:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.491755][ T26] audit: type=1326 audit(245.346:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.503280][ T26] audit: type=1326 audit(245.346:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.541910][ T26] audit: type=1326 audit(245.346:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9873a9e8 code=0x7ffc0000 [ 245.541948][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.549029][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.553223][ T7557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.587814][ T7557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.590765][ T7557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.602758][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.779694][ T8029] loop3: detected capacity change from 0 to 32768 [ 245.784702][ T4066] Bluetooth: hci6: command 0x0406 tx timeout [ 245.816886][ T8029] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1408 (8029) [ 245.872453][ T8029] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 245.881070][ T8029] BTRFS info (device loop3): setting nodatasum [ 245.882545][ T8029] BTRFS info (device loop3): using free space tree [ 245.915436][ T8029] BTRFS info (device loop3): has skinny extents [ 248.184002][ T27] INFO: task udevd:4162 blocked for more than 143 seconds. [ 248.185760][ T27] Not tainted 5.15.167-syzkaller #0 [ 248.187378][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.189532][ T27] task:udevd state:D stack: 0 pid: 4162 ppid: 3638 flags:0x00000004 [ 248.195776][ T27] Call trace: [ 248.202095][ T27] __switch_to+0x308/0x5e8 [ 248.207532][ T27] __schedule+0xf10/0x1e48 [ 248.214211][ T27] schedule+0x11c/0x1c8 [ 248.220546][ T27] io_schedule+0x8c/0x194 [ 248.251826][ T27] wait_on_page_bit_common+0x6fc/0xc14 [ 248.253367][ T27] do_read_cache_page+0x760/0x950 [ 248.256241][ T27] read_cache_page+0x68/0x84 [ 248.289303][ T27] read_part_sector+0xe8/0x4d8 [ 248.294806][ T27] adfspart_check_ICS+0xd4/0x5d0 [ 248.310899][ T27] bdev_disk_changed+0x83c/0x1358 [ 248.327022][ T27] blkdev_get_whole+0x2a0/0x344 [ 248.345375][ T27] blkdev_get_by_dev+0x238/0x89c [ 248.351252][ T27] blkdev_open+0x10c/0x274 [ 248.366607][ T27] do_dentry_open+0x780/0xed8 [ 248.378769][ T27] vfs_open+0x7c/0x90 [ 248.383706][ T27] path_openat+0x1ea0/0x26cc [ 248.390666][ T27] do_filp_open+0x1a8/0x3b4 [ 248.403731][ T27] do_sys_openat2+0x128/0x3e0 [ 248.408649][ T27] __arm64_sys_openat+0x1f0/0x240 [ 248.414116][ T27] invoke_syscall+0x98/0x2b8 [ 248.429277][ T27] el0_svc_common+0x138/0x258 [ 248.444657][ T27] do_el0_svc+0x58/0x14c [ 248.448049][ T27] el0_svc+0x7c/0x1f0 [ 248.449034][ T27] el0t_64_sync_handler+0x84/0xe4 [ 248.601426][ T27] el0t_64_sync+0x1a0/0x1a4 [ 248.602480][ T27] INFO: task syz.1.577:5693 blocked for more than 144 seconds. [ 248.604485][ T27] Not tainted 5.15.167-syzkaller #0 [ 248.605792][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.607711][ T27] task:syz.1.577 state:D stack: 0 pid: 5693 ppid: 4019 flags:0x00000001 [ 248.609660][ T27] Call trace: [ 248.610363][ T27] __switch_to+0x308/0x5e8 [ 248.611263][ T27] __schedule+0xf10/0x1e48 [ 248.612243][ T27] schedule+0x11c/0x1c8 [ 248.613098][ T27] schedule_preempt_disabled+0x18/0x2c [ 248.622894][ T27] __mutex_lock_common+0xba0/0x2154 [ 248.624095][ T27] mutex_lock_nested+0xa4/0xf8 [ 248.625264][ T27] blkdev_put+0xe0/0x6b0 [ 248.626170][ T27] blkdev_close+0x74/0xb0 [ 248.627123][ T27] __fput+0x1c4/0x800 [ 248.627891][ T27] ____fput+0x20/0x30 [ 248.639304][ T27] task_work_run+0x130/0x1e4 [ 248.642867][ T27] do_notify_resume+0x262c/0x32b8 [ 248.653154][ T27] el0_svc+0xfc/0x1f0 [ 248.656814][ T27] el0t_64_sync_handler+0x84/0xe4 [ 248.659187][ T27] el0t_64_sync+0x1a0/0x1a4 [ 248.661516][ T27] INFO: task syz.1.577:5694 blocked for more than 144 seconds. [ 248.674788][ T27] Not tainted 5.15.167-syzkaller #0 [ 248.678318][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.683564][ T27] task:syz.1.577 state:D stack: 0 pid: 5694 ppid: 4019 flags:0x00000001 [ 248.685386][ T27] Call trace: [ 248.686132][ T27] __switch_to+0x308/0x5e8 [ 248.687046][ T27] __schedule+0xf10/0x1e48 [ 248.687930][ T27] schedule+0x11c/0x1c8 [ 248.688744][ T27] schedule_preempt_disabled+0x18/0x2c [ 248.689878][ T27] __mutex_lock_common+0xba0/0x2154 [ 248.690932][ T27] mutex_lock_nested+0xa4/0xf8 [ 248.691865][ T27] blkdev_get_by_dev+0x12c/0x89c [ 248.692858][ T27] blkdev_open+0x10c/0x274 [ 248.693901][ T27] do_dentry_open+0x780/0xed8 [ 248.694915][ T27] vfs_open+0x7c/0x90 [ 248.703781][ T27] path_openat+0x1ea0/0x26cc [ 248.704785][ T27] do_filp_open+0x1a8/0x3b4 [ 248.705789][ T27] do_sys_openat2+0x128/0x3e0 [ 248.706794][ T27] __arm64_sys_openat+0x1f0/0x240 [ 248.707952][ T27] invoke_syscall+0x98/0x2b8 [ 248.709040][ T27] el0_svc_common+0x138/0x258 [ 248.710038][ T27] do_el0_svc+0x58/0x14c [ 248.710927][ T27] el0_svc+0x7c/0x1f0 [ 248.711757][ T27] el0t_64_sync_handler+0x84/0xe4 [ 248.712871][ T27] el0t_64_sync+0x1a0/0x1a4 [ 248.721909][ T27] INFO: task syz.1.577:5698 blocked for more than 144 seconds. [ 248.745733][ T27] Not tainted 5.15.167-syzkaller #0 [ 248.747030][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.748944][ T27] task:syz.1.577 state:D stack: 0 pid: 5698 ppid: 4019 flags:0x00000009 [ 248.751281][ T27] Call trace: [ 248.752012][ T27] __switch_to+0x308/0x5e8 [ 248.752983][ T27] __schedule+0xf10/0x1e48 [ 248.754999][ T27] schedule+0x11c/0x1c8 [ 248.755909][ T27] schedule_preempt_disabled+0x18/0x2c [ 248.757003][ T27] __mutex_lock_common+0xba0/0x2154 [ 248.758118][ T27] mutex_lock_nested+0xa4/0xf8 [ 248.759229][ T27] blkdev_put+0xe0/0x6b0 [ 248.760179][ T27] blkdev_close+0x74/0xb0 [ 248.761114][ T27] __fput+0x1c4/0x800 [ 248.761962][ T27] ____fput+0x20/0x30 [ 248.762712][ T27] task_work_run+0x130/0x1e4 [ 248.763748][ T27] do_notify_resume+0x262c/0x32b8 [ 248.764858][ T27] el0_svc+0xfc/0x1f0 [ 248.765840][ T27] el0t_64_sync_handler+0x84/0xe4 [ 248.766920][ T27] el0t_64_sync+0x1a0/0x1a4 [ 248.767967][ T27] [ 248.767967][ T27] Showing all locks held in the system: [ 248.769677][ T27] 4 locks held by kworker/u4:0/9: [ 248.770723][ T27] #0: ffff0000c03f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.773028][ T27] #1: ffff80001bc37c00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.778561][ T27] #2: ffff800016be7090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x9bc [ 248.783088][ T27] #3: ffff0000d9c0d3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x11c/0x2dc [ 248.787757][ T27] 1 lock held by khungtaskd/27: [ 248.788723][ T27] #0: ffff800014c917e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 248.791870][ T27] 2 locks held by kworker/0:2/1533: [ 248.792991][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.799200][ T27] #1: ffff800023ad7c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.801936][ T27] 2 locks held by getty/3784: [ 248.803123][ T27] #0: ffff0000d37c0098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 248.809174][ T27] #1: ffff80001d5fe2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204 [ 248.811572][ T27] 1 lock held by udevd/4162: [ 248.812736][ T27] #0: ffff0000cbaca118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x12c/0x89c [ 248.815204][ T27] 1 lock held by syz.1.577/5693: [ 248.816322][ T27] #0: ffff0000cbaca118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xe0/0x6b0 [ 248.818483][ T27] 1 lock held by syz.1.577/5694: [ 248.819780][ T27] #0: ffff0000cbaca118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x12c/0x89c [ 248.822162][ T27] 1 lock held by syz.1.577/5698: [ 248.823305][ T27] #0: ffff0000cbaca118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xe0/0x6b0 [ 248.826429][ T27] 3 locks held by kworker/1:10/7473: [ 248.827710][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.830320][ T27] #1: ffff8000208e7c00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.833000][ T27] #2: ffff0000e570f240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x274/0x33c4 [ 248.836513][ T27] 4 locks held by syz.3.1408/8029: [ 248.837852][ T27] #0: ffff0000fb7aa0e0 (&type->s_umount_key#82/1){+.+.}-{3:3}, at: alloc_super+0x1b8/0x844 [ 248.840244][ T27] #1: ffff800015161fa8 (uuid_mutex){+.+.}-{3:3}, at: btrfs_close_devices+0xc4/0x4a0 [ 248.842479][ T27] #2: ffff0000cb888118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xe0/0x6b0 [ 248.844806][ T27] #3: ffff0000cb7e7468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x58/0x210 [ 248.846829][ T27] 2 locks held by kworker/0:11/8086: [ 248.848012][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.850562][ T27] #1: ffff800020e17c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.853424][ T27] 2 locks held by kworker/0:12/8087: [ 248.854698][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.858230][ T27] #1: ffff800020e47c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.861164][ T27] 2 locks held by kworker/0:13/8088: [ 248.862306][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.864814][ T27] #1: ffff800020ef7c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.867522][ T27] 2 locks held by kworker/0:14/8089: [ 248.868717][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.871253][ T27] #1: ffff800020f07c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.873970][ T27] 2 locks held by kworker/0:15/8090: [ 248.875172][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.877529][ T27] #1: ffff800020f17c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.880471][ T27] 2 locks held by kworker/0:16/8091: [ 248.881737][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 248.884329][ T27] #1: ffff800020f27c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 248.887505][ T27] [ 248.888005][ T27] ============================================= [ 248.888005][ T27] [ 248.889938][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 248.891524][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 248.893190][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 248.895346][ T27] Call trace: [ 248.896061][ T27] dump_backtrace+0x0/0x530 [ 248.897056][ T27] show_stack+0x2c/0x3c [ 248.897855][ T27] dump_stack_lvl+0x108/0x170 [ 248.898978][ T27] dump_stack+0x1c/0x58 [ 248.899893][ T27] panic+0x304/0x8bc [ 248.900784][ T27] hung_task_panic+0x0/0x2c [ 248.901866][ T27] kthread+0x37c/0x45c [ 248.902784][ T27] ret_from_fork+0x10/0x20 [ 248.903808][ T27] SMP: stopping secondary CPUs [ 248.904886][ T27] Kernel Offset: disabled [ 248.905814][ T27] CPU features: 0x8,000081c1,21302e40 [ 248.906983][ T27] Memory Limit: none [ 249.231113][ T27] Rebooting in 86400 seconds..