last executing test programs: 59.358701465s ago: executing program 1 (id=33): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x0, 0x64, 0x246, 0x8, 0x5, 0xfffffffffffffff8, 0x800000001, 0x9, 0xf6b}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 58.615026664s ago: executing program 1 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e800", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) 58.300654172s ago: executing program 1 (id=38): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4}, 0x5) 58.119398376s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 57.919372491s ago: executing program 1 (id=43): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 57.343122616s ago: executing program 1 (id=46): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0xf1}], 0x1, 0x40000022, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 57.058738033s ago: executing program 32 (id=46): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0xf1}], 0x1, 0x40000022, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 21.726491486s ago: executing program 4 (id=246): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 20.723474292s ago: executing program 4 (id=255): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x82, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f00001f2000/0x2000)=nil, 0x2000, 0x2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) 20.421404899s ago: executing program 4 (id=256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 19.426635314s ago: executing program 4 (id=262): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 19.188169921s ago: executing program 4 (id=265): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) 19.080202803s ago: executing program 4 (id=266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47", 0x2f}, {&(0x7f0000000400)="6c23fe5e77b828dcd600126a9a4b5ef3ae578c4751f2456ea314b6d95e238e7d4733c114f56680e6905a48b50920a132c32365698bad56173e669d4b9b5bee30cc0285481b820174ec37cd79c02361701b0bc2550749b4fd1ca6ef7a66c704f71b977eb0dd0289c6c0fb9283712acd80db2b9918", 0x74}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) 3.925099722s ago: executing program 33 (id=266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47", 0x2f}, {&(0x7f0000000400)="6c23fe5e77b828dcd600126a9a4b5ef3ae578c4751f2456ea314b6d95e238e7d4733c114f56680e6905a48b50920a132c32365698bad56173e669d4b9b5bee30cc0285481b820174ec37cd79c02361701b0bc2550749b4fd1ca6ef7a66c704f71b977eb0dd0289c6c0fb9283712acd80db2b9918", 0x74}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) 3.62227822s ago: executing program 3 (id=331): quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 3.302018678s ago: executing program 3 (id=334): socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.150045022s ago: executing program 0 (id=335): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xfffffffe}, @my=0x1, 0x0, 0x0, 0x421, 0x0, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 2.990676995s ago: executing program 3 (id=336): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c61200010600080019"], 0x58}}, 0x0) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x46c02, 0x0) 2.744905401s ago: executing program 0 (id=338): socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) 2.622380904s ago: executing program 2 (id=339): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000}) 2.457956369s ago: executing program 2 (id=340): init_module(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1.687965528s ago: executing program 0 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="0200", 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)="00000080", 0x4, 0x0) 1.243971589s ago: executing program 0 (id=342): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9804}}, 0x2e) 1.146902272s ago: executing program 2 (id=343): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="bcb0b6080bc2", 0x6}, {&(0x7f0000000340)="54d9b7a069fb02b4e96e12d872dd182e2becb6f1457b6e0aabe3427159015f4c4a57a21bc3f122b2f904000000cea665", 0x30}, {&(0x7f0000000380)="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", 0x593}], 0x3}}], 0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000e40)=""/4096, 0x1000, 0x40010120, 0x0, 0x0) 1.064010684s ago: executing program 0 (id=344): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x4000840) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 994.581665ms ago: executing program 2 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xf2b, 0x4, 0x1, 0x400}]}}]}}]}, 0x44}}, 0x0) 787.09556ms ago: executing program 3 (id=346): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 550.425837ms ago: executing program 2 (id=347): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@deltclass={0x24, 0x29, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x1, 0x8}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r0) 472.328538ms ago: executing program 3 (id=348): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x8004, &(0x7f0000000000), 0x0, 0x751, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) 34.958729ms ago: executing program 2 (id=349): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) listen(r1, 0x5) 594.41µs ago: executing program 0 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ff007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dc94992ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f", 0x5}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4", 0x1b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 79.141133][ T5767] cgroup: Unknown subsys name 'net' [ 79.260353][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.915565][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.720526][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.730191][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.738100][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.741979][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.752814][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.761146][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.762066][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.769483][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.782885][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.790576][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.798525][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.806289][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.813582][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.816634][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.829378][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.830769][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.837703][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.846443][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.851541][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.866121][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.869629][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.883465][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.883550][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.898973][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.389307][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 83.409509][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 83.537716][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.569657][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 83.658684][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.669676][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.677172][ T5780] bridge_slave_0: entered allmulticast mode [ 83.684984][ T5780] bridge_slave_0: entered promiscuous mode [ 83.703155][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.710307][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.718280][ T5780] bridge_slave_1: entered allmulticast mode [ 83.725577][ T5780] bridge_slave_1: entered promiscuous mode [ 83.733166][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.740291][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.748021][ T5781] bridge_slave_0: entered allmulticast mode [ 83.755148][ T5781] bridge_slave_0: entered promiscuous mode [ 83.780999][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.788268][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.795942][ T5781] bridge_slave_1: entered allmulticast mode [ 83.803252][ T5781] bridge_slave_1: entered promiscuous mode [ 83.904854][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.916853][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.929962][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.002186][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.034543][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.043291][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.050462][ T5778] bridge_slave_0: entered allmulticast mode [ 84.059127][ T5778] bridge_slave_0: entered promiscuous mode [ 84.068055][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.075397][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.082747][ T5778] bridge_slave_1: entered allmulticast mode [ 84.089757][ T5778] bridge_slave_1: entered promiscuous mode [ 84.117375][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.124690][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.132256][ T5779] bridge_slave_0: entered allmulticast mode [ 84.139212][ T5779] bridge_slave_0: entered promiscuous mode [ 84.152901][ T5780] team0: Port device team_slave_0 added [ 84.180182][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.187753][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.195227][ T5779] bridge_slave_1: entered allmulticast mode [ 84.202681][ T5779] bridge_slave_1: entered promiscuous mode [ 84.214229][ T5780] team0: Port device team_slave_1 added [ 84.233515][ T5781] team0: Port device team_slave_0 added [ 84.243409][ T5781] team0: Port device team_slave_1 added [ 84.284824][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.339612][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.359848][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.367054][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.394469][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.409185][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.421245][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.430982][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.438557][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.464974][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.486579][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.493743][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.520282][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.559522][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.566561][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.592891][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.607191][ T5778] team0: Port device team_slave_0 added [ 84.617151][ T5778] team0: Port device team_slave_1 added [ 84.635200][ T5779] team0: Port device team_slave_0 added [ 84.650123][ T5779] team0: Port device team_slave_1 added [ 84.741462][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.748510][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.778421][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.796378][ T5780] hsr_slave_0: entered promiscuous mode [ 84.803868][ T5780] hsr_slave_1: entered promiscuous mode [ 84.815643][ T5781] hsr_slave_0: entered promiscuous mode [ 84.822888][ T5781] hsr_slave_1: entered promiscuous mode [ 84.829295][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.837292][ T5781] Cannot create hsr debugfs directory [ 84.843848][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.850809][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.876978][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.890174][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.897235][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.923308][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.935612][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.943212][ T51] Bluetooth: hci0: command tx timeout [ 84.943232][ T5790] Bluetooth: hci2: command tx timeout [ 84.949113][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.956463][ T5790] Bluetooth: hci3: command tx timeout [ 84.980544][ T51] Bluetooth: hci1: command tx timeout [ 84.994127][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.110184][ T5778] hsr_slave_0: entered promiscuous mode [ 85.117192][ T5778] hsr_slave_1: entered promiscuous mode [ 85.123998][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.132253][ T5778] Cannot create hsr debugfs directory [ 85.160867][ T5779] hsr_slave_0: entered promiscuous mode [ 85.168824][ T5779] hsr_slave_1: entered promiscuous mode [ 85.175677][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.183702][ T5779] Cannot create hsr debugfs directory [ 85.616416][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.632188][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.643731][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.655378][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.719233][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.735646][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.762391][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.776071][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.868698][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.887062][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.906197][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.924473][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.002406][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.054413][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.065677][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.076938][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.091207][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.103776][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.134263][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.141681][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.170580][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.177804][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.256838][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.327803][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.374942][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.382183][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.401024][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.408286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.459498][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.540336][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.596501][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.605786][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.613003][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.658632][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.699063][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.706298][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.732211][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.739403][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.767193][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.774456][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.845445][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.955385][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.022042][ T5787] Bluetooth: hci3: command tx timeout [ 87.027527][ T5787] Bluetooth: hci1: command tx timeout [ 87.033867][ T5790] Bluetooth: hci2: command tx timeout [ 87.039315][ T5790] Bluetooth: hci0: command tx timeout [ 87.089098][ T5780] veth0_vlan: entered promiscuous mode [ 87.155096][ T5780] veth1_vlan: entered promiscuous mode [ 87.304263][ T5780] veth0_macvtap: entered promiscuous mode [ 87.320375][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.336914][ T5780] veth1_macvtap: entered promiscuous mode [ 87.444435][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.478320][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.525617][ T5781] veth0_vlan: entered promiscuous mode [ 87.537956][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.560949][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.571211][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.581263][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.646537][ T5781] veth1_vlan: entered promiscuous mode [ 87.698453][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.717256][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.865420][ T5781] veth0_macvtap: entered promiscuous mode [ 87.914907][ T5781] veth1_macvtap: entered promiscuous mode [ 87.931318][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.954192][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.978916][ T5778] veth0_vlan: entered promiscuous mode [ 88.031414][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.039332][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.079014][ T5779] veth0_vlan: entered promiscuous mode [ 88.091163][ T5778] veth1_vlan: entered promiscuous mode [ 88.126696][ T5779] veth1_vlan: entered promiscuous mode [ 88.146996][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.159231][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.173581][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.209800][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.227250][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.239470][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.284576][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.300905][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.318982][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.329888][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.377211][ T5778] veth0_macvtap: entered promiscuous mode [ 88.446496][ T5778] veth1_macvtap: entered promiscuous mode [ 88.483548][ T5779] veth0_macvtap: entered promiscuous mode [ 88.491916][ T5845] syz.2.5[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.523047][ T5779] veth1_macvtap: entered promiscuous mode [ 88.569416][ T5845] loop2: detected capacity change from 0 to 1156 [ 88.579051][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.591229][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.611199][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.623160][ T5845] ISOFS: unable to read i-node block [ 88.628714][ T5845] isofs_fill_super: get root inode failed [ 88.650036][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.676010][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.757553][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.771916][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.785503][ T5845] overlayfs: failed to verify upper (1/file0, ino=24, err=-116) [ 88.795685][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.806878][ T5845] overlayfs: failed to verify index dir 'upper' xattr [ 88.808346][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.821712][ T5845] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 88.826084][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.845032][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.857986][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.877727][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.889946][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.900708][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.912894][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.925383][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.940256][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.949730][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.968167][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.990656][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.000670][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.015575][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.030407][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.068002][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.080377][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.096924][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.107586][ T5787] Bluetooth: hci2: command tx timeout [ 89.113852][ T5794] Bluetooth: hci3: command tx timeout [ 89.119301][ T5794] Bluetooth: hci1: command tx timeout [ 89.121983][ T5790] Bluetooth: hci0: command tx timeout [ 89.133395][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.146404][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.168671][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.209928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.219366][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.224661][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.234821][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.244218][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.253059][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.446776][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.471250][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.514759][ T5854] loop1: detected capacity change from 0 to 1024 [ 89.528767][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.554772][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.630774][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.670120][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.710044][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.733887][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.909151][ T1028] hfsplus: b-tree write err: -5, ino 3 [ 89.945834][ T5781] hfsplus: node 4:3 still has 2 user(s)! [ 90.185171][ T5868] loop3: detected capacity change from 0 to 128 [ 90.265719][ T5868] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.293582][ T5868] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.807248][ T5889] process 'syz.0.14' launched './file1' with NULL argv: empty string added [ 91.182764][ T5790] Bluetooth: hci0: command tx timeout [ 91.188248][ T5790] Bluetooth: hci2: command tx timeout [ 91.194005][ T5787] Bluetooth: hci1: command tx timeout [ 91.199429][ T5787] Bluetooth: hci3: command tx timeout [ 91.304344][ T5898] loop0: detected capacity change from 0 to 512 [ 91.331794][ T5898] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.346633][ T5898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.364586][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.401131][ T5898] EXT4-fs (loop0): 1 truncate cleaned up [ 91.408989][ T5898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.610111][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.083219][ T8] cfg80211: failed to load regulatory.db [ 92.351917][ T27] audit: type=1326 audit(1787019625.511:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.3.24" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec5559e0d9 code=0x0 [ 92.628567][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 93.022841][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.035114][ T5937] loop1: detected capacity change from 0 to 512 [ 93.075731][ T5940] loop3: detected capacity change from 0 to 164 [ 93.098708][ T5940] isofs_fill_super: root inode is not a directory. Corrupted media? [ 93.141200][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.224553][ T5937] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.237408][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.266357][ T5839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.307344][ T5839] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.337516][ T5839] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 93.369472][ T5839] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 93.397052][ T5839] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 93.409595][ T5943] capability: warning: `syz.1.33' uses deprecated v2 capabilities in a way that may be insecure [ 93.441487][ T5839] usb 1-1: config 1 interface 1 has no altsetting 0 [ 93.457106][ T5839] usb 1-1: string descriptor 0 read error: -22 [ 93.481755][ T5839] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 93.490874][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.512848][ T5931] loop2: detected capacity change from 0 to 32768 [ 93.624415][ T5931] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.709531][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.876045][ T5931] XFS (loop2): Ending clean mount [ 93.904730][ T5931] XFS (loop2): Quotacheck needed: Please wait. [ 94.001205][ T5931] XFS (loop2): Quotacheck: Done. [ 94.259057][ T5839] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 94.305857][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.375579][ T5839] usb 1-1: USB disconnect, device number 2 [ 95.273218][ T1028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.338196][ T5978] loop3: detected capacity change from 0 to 128 [ 95.425942][ T1028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.615088][ T1028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.828079][ T1028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.880466][ T5986] loop2: detected capacity change from 0 to 1024 [ 96.226708][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.244197][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.256602][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.281256][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.302229][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.314578][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.577428][ T6003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.54'. [ 96.680240][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.54'. [ 98.381813][ T5790] Bluetooth: hci1: command tx timeout [ 98.440919][ T5995] chnl_net:caif_netlink_parms(): no params data found [ 98.811394][ C1] sched: RT throttling activated [ 98.894956][ T1028] hsr_slave_0: left promiscuous mode [ 98.937545][ T1028] hsr_slave_1: left promiscuous mode [ 98.950764][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.979649][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.003509][ T6038] loop2: detected capacity change from 0 to 131072 [ 99.011145][ T6038] ======================================================= [ 99.011145][ T6038] WARNING: The mand mount option has been deprecated and [ 99.011145][ T6038] and is ignored by this kernel. Remove the mand [ 99.011145][ T6038] option from the mount to silence this warning. [ 99.011145][ T6038] ======================================================= [ 99.085916][ T6038] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 99.093083][ T6038] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.111878][ T6038] F2FS-fs (loop2): invalid crc value [ 99.196653][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.221537][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.231975][ T6038] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.277011][ T1028] bridge_slave_1: left allmulticast mode [ 99.291653][ T1028] bridge_slave_1: left promiscuous mode [ 99.298608][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.349907][ T6038] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.357411][ T6038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 99.390293][ T1028] bridge_slave_0: left allmulticast mode [ 99.396762][ T1028] bridge_slave_0: left promiscuous mode [ 99.412564][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.493518][ T1028] veth1_macvtap: left promiscuous mode [ 99.507945][ T1028] veth0_macvtap: left promiscuous mode [ 99.521051][ T6038] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 99.529730][ T1028] veth1_vlan: left promiscuous mode [ 99.561968][ T1028] veth0_vlan: left promiscuous mode [ 99.973387][ T6007] Zero length message leads to an empty skb [ 100.185029][ T6073] loop0: detected capacity change from 0 to 512 [ 100.289128][ T6073] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.70: iget: bad i_size value: 38620345925642 [ 100.374253][ T8] libceph: connect (1)[c::]:6789 error -101 [ 100.405236][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 100.422042][ T6073] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.70: couldn't read orphan inode 15 (err -117) [ 100.443898][ T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 100.460623][ T8] libceph: connect (1)[c::]:6789 error -101 [ 100.468135][ T5790] Bluetooth: hci1: command tx timeout [ 100.489837][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 100.492712][ T6073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.720945][ T6091] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.70: bg 0: block 5: invalid block bitmap [ 100.730497][ T5851] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 100.762222][ T8] libceph: connect (1)[c::]:6789 error -101 [ 100.768313][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 100.781266][ T6091] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 284 with error 28 [ 100.813382][ T6091] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.813382][ T6091] [ 100.875179][ T6091] EXT4-fs (loop0): Total free blocks count 0 [ 100.889836][ T6091] EXT4-fs (loop0): Free/Dirty block details [ 100.910210][ T6091] EXT4-fs (loop0): free_blocks=0 [ 100.925501][ T6091] EXT4-fs (loop0): dirty_blocks=288 [ 100.941271][ T6091] EXT4-fs (loop0): Block reservation details [ 100.958343][ T6091] EXT4-fs (loop0): i_reserved_data_blocks=288 [ 101.106560][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.116782][ T6079] ceph: No mds server is up or the cluster is laggy [ 101.136534][ T6085] ceph: No mds server is up or the cluster is laggy [ 101.475217][ T6099] syz.3.75 uses obsolete (PF_INET,SOCK_PACKET) [ 101.807860][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 101.879772][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 101.928211][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.006063][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.022233][ T6110] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.406060][ T1028] bond0 (unregistering): Released all slaves [ 102.515581][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.542106][ T5790] Bluetooth: hci1: command tx timeout [ 102.578712][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.586690][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.596696][ T5995] bridge_slave_0: entered allmulticast mode [ 102.604272][ T5995] bridge_slave_0: entered promiscuous mode [ 102.621786][ T2198] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.631563][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.639483][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.683520][ T5995] bridge_slave_1: entered allmulticast mode [ 102.712120][ T5995] bridge_slave_1: entered promiscuous mode [ 102.771180][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.787005][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.849843][ T2198] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.862834][ T2198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.897757][ T2198] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.910862][ T5995] team0: Port device team_slave_0 added [ 102.916734][ T2198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.916778][ T2198] usb 1-1: SerialNumber: syz [ 102.975014][ T5995] team0: Port device team_slave_1 added [ 103.047673][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.060769][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.094263][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.120613][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.144969][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.203711][ T2198] usb 1-1: 0:2 : does not exist [ 103.208711][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.280152][ T2198] usb 1-1: USB disconnect, device number 3 [ 103.423367][ T5995] hsr_slave_0: entered promiscuous mode [ 103.442279][ T5995] hsr_slave_1: entered promiscuous mode [ 103.472603][ T5995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.480235][ T5995] Cannot create hsr debugfs directory [ 104.089709][ T6119] loop3: detected capacity change from 0 to 40427 [ 104.122211][ T6119] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 104.130625][ T6119] F2FS-fs (loop3): Image doesn't support compression [ 104.152720][ T5995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.171618][ T6119] F2FS-fs (loop3): Image doesn't support compression [ 104.179044][ T6119] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 104.203732][ T5995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.244937][ T5995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.262571][ T6119] F2FS-fs (loop3): invalid crc value [ 104.295680][ T5995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.308138][ T6119] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.488465][ T6119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.531803][ T970] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.622045][ T5790] Bluetooth: hci1: command tx timeout [ 104.639796][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.721688][ T27] audit: type=1800 audit(1787019637.871:3): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.82" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 104.769773][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.776620][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 104.806483][ T6119] syz.3.82: attempt to access beyond end of device [ 104.806483][ T6119] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 104.812197][ T970] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 104.847572][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.854839][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.868875][ T970] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.900222][ T970] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.926677][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.933979][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.961527][ T970] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.001500][ T970] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.046087][ T970] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.065110][ T5778] syz-executor: attempt to access beyond end of device [ 105.065110][ T5778] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 105.113947][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.149658][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.197215][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.385507][ T970] usb 1-1: usb_control_msg returned -32 [ 105.411464][ T970] usbtmc 1-1:16.0: can't read capabilities [ 105.733532][ T6150] loop2: detected capacity change from 0 to 32768 [ 105.765900][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.857452][ T6150] [ 105.857452][ T6150] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.857452][ T6150] [ 106.018084][ T6150] ERROR: (device loop2): diWrite: ixpxd invalid [ 106.018084][ T6150] [ 106.063511][ T6150] ERROR: (device loop2): txCommit: [ 106.063511][ T6150] [ 106.273779][ T5780] [ 106.273779][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.273779][ T5780] [ 106.295418][ T5780] [ 106.295418][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.295418][ T5780] [ 106.488771][ T970] usb 1-1: USB disconnect, device number 4 [ 106.674067][ T5995] veth0_vlan: entered promiscuous mode [ 106.721207][ T5995] veth1_vlan: entered promiscuous mode [ 106.852732][ T6186] input: syz1 as /devices/virtual/input/input5 [ 106.886639][ T5995] veth0_macvtap: entered promiscuous mode [ 106.935547][ T5995] veth1_macvtap: entered promiscuous mode [ 106.995473][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.041421][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.071701][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.106697][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.117502][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.128382][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.141054][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.180779][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.211910][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.233710][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.262507][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.273024][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.284539][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.329105][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.365615][ T6196] loop3: detected capacity change from 0 to 256 [ 107.385829][ T5995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.426364][ T5995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.456355][ T5995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.479388][ T5995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.716431][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.744627][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.839602][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.856762][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.018466][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.348814][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 109.256875][ T6253] netlink: 27 bytes leftover after parsing attributes in process `syz.4.113'. [ 109.351487][ T5839] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.481046][ T6259] loop4: detected capacity change from 0 to 512 [ 109.543732][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.556026][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.572891][ T6259] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.584379][ T5839] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 109.584411][ T5839] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.589253][ T5839] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 109.617393][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 109.625599][ T5839] usb 3-1: Product: syz [ 109.629839][ T5839] usb 3-1: Manufacturer: syz [ 109.639010][ T6249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.649391][ T5839] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 109.676992][ T5839] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 109.957151][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.977219][ T8] usb 3-1: USB disconnect, device number 2 [ 110.030461][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 110.061915][ T8] garmin_gps 3-1:1.0: device disconnected [ 110.353158][ T6284] netlink: 'syz.4.121': attribute type 10 has an invalid length. [ 110.378170][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.387035][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.432520][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.439791][ T6284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.448374][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.455634][ T6284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.505585][ T6284] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.677863][ T6284] syz.4.121 (6284) used greatest stack depth: 20840 bytes left [ 110.812644][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 111.518633][ T6312] loop4: detected capacity change from 0 to 512 [ 111.615037][ T6312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.648307][ T6312] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.756617][ T6312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 112.687034][ T6323] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.733405][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.138189][ T6323] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.162032][ T6378] capability: warning: `syz.3.135' uses 32-bit capabilities (legacy support in use) [ 113.189398][ T28] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.233731][ T28] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.364954][ T6323] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.480081][ T6384] input: syz0 as /devices/virtual/input/input6 [ 113.687546][ T6323] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.771639][ T6423] loop4: detected capacity change from 0 to 128 [ 114.838161][ T6423] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 114.853308][ T6423] hpfs: filesystem error: improperly stopped [ 114.859533][ T6423] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 114.875904][ T6423] hpfs: You really don't want any checks? You are crazy... [ 114.891749][ T6423] hpfs: Code page index out of array [ 114.903173][ T6423] hpfs: code page support is disabled [ 114.923498][ T6423] hpfs: hpfs_map_4sectors(): unaligned read [ 114.947401][ T6423] hpfs: hpfs_map_4sectors(): unaligned read [ 114.965005][ T6423] hpfs: filesystem error: unable to find root dir [ 115.517671][ T6443] bridge0: entered allmulticast mode [ 115.904801][ T6456] loop3: detected capacity change from 0 to 1024 [ 116.003763][ T6460] loop4: detected capacity change from 0 to 1024 [ 116.032266][ T6460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.185886][ T6460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.247772][ T6460] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.500265][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.272500][ T5839] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.497175][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 117.517578][ T5839] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 117.572677][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.615933][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.660272][ T5839] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.725739][ T5839] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.765508][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.791233][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 118.039517][ T5839] usb 1-1: GET_CAPABILITIES returned 0 [ 118.063913][ T5839] usbtmc 1-1:16.0: can't read capabilities [ 118.373607][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 118.395656][ T5839] usb 1-1: USB disconnect, device number 5 [ 118.979506][ T6503] loop2: detected capacity change from 0 to 32768 [ 119.092403][ T6503] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.183629][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 119.225184][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.172'. [ 119.359250][ T6503] XFS (loop2): Ending clean mount [ 119.491783][ T27] audit: type=1800 audit(1787019652.641:4): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.174" name="dbroot" dev="configfs" ino=9927 res=0 errno=0 [ 119.608019][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.429205][ T6564] loop3: detected capacity change from 0 to 256 [ 120.508217][ T6564] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 120.631606][ T5851] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 120.645916][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 120.655091][ T27] audit: type=1800 audit(1787019653.811:5): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.181" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 120.697060][ T6564] syz.3.181: attempt to access beyond end of device [ 120.697060][ T6564] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 120.716810][ T6570] netlink: 48 bytes leftover after parsing attributes in process `syz.2.183'. [ 120.749095][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 120.886285][ T5851] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 120.911626][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.925634][ T5851] usb 5-1: Product: syz [ 120.929883][ T5851] usb 5-1: Manufacturer: syz [ 120.942339][ T5851] usb 5-1: SerialNumber: syz [ 120.990745][ T5851] usb 5-1: config 0 descriptor?? [ 121.035643][ T5851] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 121.091124][ T6573] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 122.031568][ T6604] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.049582][ T6604] overlayfs: failed to set xattr on upper [ 122.080451][ T6604] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.098196][ T6604] overlayfs: ...falling back to index=off. [ 122.261591][ T5851] gspca_stk1135: reg_w 0xd err -71 [ 122.268695][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.287135][ T5851] gspca_stk1135: Sensor write failed [ 122.314275][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.341590][ T5851] gspca_stk1135: Sensor write failed [ 122.349749][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.370048][ T5851] gspca_stk1135: Sensor read failed [ 122.391487][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.398007][ T5851] gspca_stk1135: Sensor read failed [ 122.415016][ T5851] gspca_stk1135: Detected sensor type unknown (0x0) [ 122.458484][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.467439][ T5851] gspca_stk1135: Sensor read failed [ 122.486611][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.506877][ T5851] gspca_stk1135: Sensor read failed [ 122.531463][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.566396][ T5851] gspca_stk1135: Sensor write failed [ 122.591624][ T5851] gspca_stk1135: serial bus timeout: status=0x00 [ 122.608306][ T5851] gspca_stk1135: Sensor write failed [ 122.620568][ T6617] loop2: detected capacity change from 0 to 512 [ 122.634841][ T5851] stk1135: probe of 5-1:0.0 failed with error -71 [ 122.677066][ T5851] usb 5-1: USB disconnect, device number 2 [ 122.968655][ T6617] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.196: corrupted inode contents [ 123.008704][ T6617] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #16: comm syz.2.196: mark_inode_dirty error [ 123.036024][ T6617] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.196: corrupted inode contents [ 123.059749][ T6617] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #16: comm syz.2.196: mark_inode_dirty error [ 123.138230][ T6617] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.196: corrupted inode contents [ 123.163571][ T6617] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 123.211597][ T6617] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.196: corrupted inode contents [ 123.262120][ T6617] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.196: mark_inode_dirty error [ 123.305915][ T6617] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 123.356395][ T6617] EXT4-fs (loop2): 1 truncate cleaned up [ 123.372419][ T6358] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 123.390249][ T6617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.422307][ T6358] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:14: Failed to release dquot type 1 [ 123.448393][ T6617] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.656066][ T6617] Bluetooth: MGMT ver 1.22 [ 123.765614][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.911883][ T23] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 124.132084][ T23] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 124.165469][ T23] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 124.200562][ T23] usb 4-1: config 150 has no interface number 0 [ 124.209419][ T23] usb 4-1: config 150 interface 204 has no altsetting 0 [ 124.253741][ T23] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 124.273312][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.299451][ T23] usb 4-1: Product: syz [ 124.319700][ T23] usb 4-1: Manufacturer: syz [ 124.328945][ T23] usb 4-1: SerialNumber: syz [ 124.385567][ T6640] loop4: detected capacity change from 0 to 32768 [ 124.549700][ T6640] JBD2: Ignoring recovery information on journal [ 124.563773][ T6640] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 124.576094][ T6640] JBD2: bad block at offset 32 [ 124.613606][ T6640] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 124.640044][ T23] xr_serial 4-1:150.204: skipping garbage [ 124.681551][ T23] xr_serial 4-1:150.204: xr_serial converter detected [ 124.853067][ T6640] (syz.4.202,6640,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 124.934519][ T6640] (syz.4.202,6640,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 124.952909][ T6640] (syz.4.202,6640,0):ocfs2_mknod:298 ERROR: status = -2 [ 124.959967][ T6640] (syz.4.202,6640,0):ocfs2_mknod:502 ERROR: status = -2 [ 124.971428][ T6640] (syz.4.202,6640,0):ocfs2_mkdir:659 ERROR: status = -2 [ 125.161056][ T5995] ocfs2: Unmounting device (7,4) on (node local) [ 125.440040][ T23] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 125.671685][ T970] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.697976][ T5851] usb 4-1: USB disconnect, device number 2 [ 125.728448][ T5851] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 125.759048][ T5851] xr_serial 4-1:150.204: device disconnected [ 125.891882][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.928188][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.941011][ T970] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.956197][ T970] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 125.964899][ T970] usb 1-1: Manufacturer: syz [ 125.990050][ T9] IPVS: starting estimator thread 0... [ 125.996445][ T970] usb 1-1: config 0 descriptor?? [ 126.103031][ T6690] IPVS: using max 18 ests per chain, 43200 per kthread [ 127.036558][ T970] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input7 [ 127.164401][ T970] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input8 [ 127.220160][ T970] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input9 [ 127.269114][ T970] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input10 [ 127.324867][ T6725] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 127.342077][ T970] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 127.381721][ T970] usb 1-1: USB disconnect, device number 6 [ 127.737742][ T6728] fido_id[6728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 127.809795][ T6703] loop4: detected capacity change from 0 to 32768 [ 127.896966][ T6703] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 127.923593][ T6703] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.192690][ T6703] XFS (loop4): Ending clean mount [ 128.254056][ T6703] XFS (loop4): Quotacheck needed: Please wait. [ 128.384742][ T6703] XFS (loop4): Quotacheck: Done. [ 128.574781][ T6756] loop3: detected capacity change from 0 to 512 [ 128.651157][ T6756] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.230: iget: bad i_size value: 38620345925642 [ 128.665782][ T6762] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 128.685876][ T6756] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.230: couldn't read orphan inode 15 (err -117) [ 128.753028][ T6756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.002575][ T5995] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.081695][ T6356] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:13: bg 0: block 5: invalid block bitmap [ 129.127323][ T6356] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28 [ 129.150397][ T6356] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.150397][ T6356] [ 129.165467][ T6356] EXT4-fs (loop3): Total free blocks count 0 [ 129.172568][ T6356] EXT4-fs (loop3): Free/Dirty block details [ 129.180036][ T6356] EXT4-fs (loop3): free_blocks=0 [ 129.185464][ T6356] EXT4-fs (loop3): dirty_blocks=16 [ 129.190623][ T6356] EXT4-fs (loop3): Block reservation details [ 129.197363][ T6356] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 129.272313][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.810374][ T6789] loop3: detected capacity change from 0 to 256 [ 129.872983][ T6789] exfat: Deprecated parameter 'namecase' [ 129.892035][ T6789] exfat: Deprecated parameter 'namecase' [ 129.944790][ T6789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 130.254755][ T6789] exFAT-fs (loop3): invalid start cluster (4278190088) [ 131.391548][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.571531][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 131.595733][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 131.614831][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.642663][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.659201][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.674379][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.689218][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.715718][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.716972][ T6846] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 131.999787][ T9] usb 3-1: usb_control_msg returned -32 [ 132.018973][ T9] usbtmc 3-1:16.0: can't read capabilities [ 133.005010][ T23] usb 3-1: USB disconnect, device number 3 [ 133.030380][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.043149][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.793450][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.011494][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 134.021860][ T9] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 134.052306][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.076494][ T9] usb 1-1: Product: syz [ 134.091291][ T9] usb 1-1: Manufacturer: syz [ 134.119662][ T9] usb 1-1: SerialNumber: syz [ 134.134825][ T9] usb 1-1: config 0 descriptor?? [ 134.153327][ T9] usb 1-1: selecting invalid altsetting 1 [ 134.179506][ T9] technisat-usb2: could not set alternate setting to 0 [ 134.358021][ T9] technisat-usb2: firmware version: 233.0 [ 134.371490][ T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 134.784179][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.822559][ T9] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 134.852124][ T9] usb 1-1: media controller created [ 134.858905][ T9] technisat-usb2: i2c-error: out failed 53 = -22 [ 134.872317][ T9] dvb-usb: MAC address reading failed. [ 134.938657][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.975087][ T6897] technisat-usb2: i2c-error: out failed 00 = -22 [ 134.986633][ T6908] loop2: detected capacity change from 0 to 32768 [ 135.044375][ T6908] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 135.060820][ T9] DVB: Unable to find symbol stv090x_attach() [ 135.063615][ T6908] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.075803][ T9] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 135.201764][ T9] rc_core: IR keymap rc-technisat-usb2 not found [ 135.211418][ T9] Registered IR keymap rc-empty [ 135.220874][ T9] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 135.234749][ T9] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 135.253881][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 135.262100][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 135.297332][ T9] usb 1-1: USB disconnect, device number 7 [ 135.492845][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 135.578110][ T6908] XFS (loop2): Ending clean mount [ 135.632568][ T6908] XFS (loop2): Quotacheck needed: Please wait. [ 135.696028][ T6908] XFS (loop2): Quotacheck: Done. [ 135.710598][ T6919] loop3: detected capacity change from 0 to 32768 [ 135.787471][ T6919] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.094129][ T6939] syz.2.272 (6939) used greatest stack depth: 20088 bytes left [ 136.218909][ T6919] XFS (loop3): Ending clean mount [ 136.245321][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.274380][ T6919] XFS (loop3): Quotacheck needed: Please wait. [ 136.391862][ T6919] XFS (loop3): Quotacheck: Done. [ 136.715600][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.140162][ T6957] loop0: detected capacity change from 0 to 32768 [ 138.216173][ T6957] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.280 (6957) [ 138.373745][ T6957] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 138.424183][ T6957] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 138.444479][ T6957] BTRFS info (device loop0): using free space tree [ 138.681996][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.701637][ T6957] BTRFS info (device loop0): enabling ssd optimizations [ 138.708688][ T6957] BTRFS info (device loop0): auto enabling async discard [ 138.857558][ T27] audit: type=1800 audit(1787019672.021:6): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.280" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 138.941847][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.974539][ T9] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.033808][ T9] usb 4-1: string descriptor 0 read error: -22 [ 139.040323][ T9] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 139.084462][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.390580][ T6991] loop2: detected capacity change from 0 to 32768 [ 139.478301][ T6991] JBD2: Ignoring recovery information on journal [ 139.575924][ T6991] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.653062][ T5779] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 140.207911][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 141.011670][ T7036] loop2: detected capacity change from 0 to 1024 [ 141.059176][ T7036] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 141.163084][ T7036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.871900][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.007454][ T7048] jffs2: notice: (7048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.657683][ T7061] loop2: detected capacity change from 0 to 2048 [ 142.704159][ T7061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.849418][ T7061] syz.2.297 (pid 7061) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 142.966543][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.134408][ T7070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.299'. [ 143.346584][ T7070] team0 (unregistering): Port device team_slave_0 removed [ 143.405002][ T7070] team0 (unregistering): Port device team_slave_1 removed [ 144.398577][ T7091] loop0: detected capacity change from 0 to 1024 [ 144.437594][ T7091] EXT4-fs: Ignoring removed bh option [ 144.535054][ T7091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.704864][ T27] audit: type=1800 audit(1787019677.851:7): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.304" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 144.723503][ T7091] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.096541][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.424195][ T6992] usb 4-1: 1:1: usb_set_interface failed (-110) [ 145.450793][ T970] usb 4-1: USB disconnect, device number 3 [ 146.230634][ T7129] netlink: 'syz.2.311': attribute type 11 has an invalid length. [ 147.275703][ T7157] input: syz0 as /devices/virtual/input/input12 [ 148.310327][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 148.372410][ T7183] IPv6: sit1: Disabled Multicast RS [ 149.658351][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.672244][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.680697][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.691763][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.700565][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.708702][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.799412][ T23] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 150.023070][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 150.040614][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 150.078138][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 6400, setting to 64 [ 150.131951][ T23] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 150.161498][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.169574][ T23] usb 4-1: Product: syz [ 150.199952][ T23] usb 4-1: Manufacturer: syz [ 150.211491][ T23] usb 4-1: SerialNumber: syz [ 150.224059][ T7211] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.247335][ T23] oti6858 4-1:1.0: oti6858 converter detected [ 150.275280][ T23] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 150.477719][ T7215] chnl_net:caif_netlink_parms(): no params data found [ 150.506647][ T7218] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.818790][ T23] usb 4-1: USB disconnect, device number 4 [ 150.835033][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.842598][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.849852][ T7215] bridge_slave_0: entered allmulticast mode [ 150.858141][ T7215] bridge_slave_0: entered promiscuous mode [ 150.877910][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.885207][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.892537][ T7215] bridge_slave_1: entered allmulticast mode [ 150.900091][ T7215] bridge_slave_1: entered promiscuous mode [ 150.903652][ T23] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 150.952842][ T23] oti6858 4-1:1.0: device disconnected [ 150.964046][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.019218][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.135552][ T7215] team0: Port device team_slave_0 added [ 151.164604][ T7215] team0: Port device team_slave_1 added [ 151.318458][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.336147][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.367696][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.400690][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.420349][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.471955][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.722150][ T7215] hsr_slave_0: entered promiscuous mode [ 151.744318][ T5787] Bluetooth: hci1: command tx timeout [ 151.770817][ T7215] hsr_slave_1: entered promiscuous mode [ 151.843716][ T7215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.871552][ T7215] Cannot create hsr debugfs directory [ 151.999983][ T7270] loop3: detected capacity change from 0 to 2048 [ 152.062002][ T7270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.096411][ T7270] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.307094][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.520954][ T7215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.539540][ T7215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.558463][ T7215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.576153][ T7215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.721815][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.757572][ T7215] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.782098][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.789357][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.826754][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.834092][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.951184][ T7215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.218419][ T7215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.689225][ T7215] veth0_vlan: entered promiscuous mode [ 153.714829][ T7215] veth1_vlan: entered promiscuous mode [ 153.763991][ T7215] veth0_macvtap: entered promiscuous mode [ 153.778422][ T7215] veth1_macvtap: entered promiscuous mode [ 153.814378][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.831681][ T5787] Bluetooth: hci1: command tx timeout [ 153.840785][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.852117][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.864413][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.874616][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.885389][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.895974][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.908853][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.921522][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.944534][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.959999][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.971455][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.987879][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.998311][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.009407][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.024820][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.038331][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.054264][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.068481][ T7215] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.077720][ T7215] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.086841][ T7215] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.096259][ T7215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.219501][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.245590][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.300024][ T6356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.316141][ T6356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.913249][ T5787] Bluetooth: hci1: command tx timeout [ 157.992721][ T5787] Bluetooth: hci1: command tx timeout [ 194.466076][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472722][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.781584][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 206.796412][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 245.804056][ T6356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.918517][ T6356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.036999][ T6356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.129890][ T6356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.360216][ T6356] hsr_slave_0: left promiscuous mode [ 247.369628][ T6356] hsr_slave_1: left promiscuous mode [ 247.376317][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.386123][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.400262][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.407988][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.416359][ T6356] bridge_slave_1: left allmulticast mode [ 247.422349][ T6356] bridge_slave_1: left promiscuous mode [ 247.428140][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.444478][ T6356] bridge_slave_0: left allmulticast mode [ 247.450187][ T6356] bridge_slave_0: left promiscuous mode [ 247.460792][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.500920][ T6356] veth1_macvtap: left promiscuous mode [ 247.506746][ T6356] veth0_macvtap: left promiscuous mode [ 247.512988][ T6356] veth1_vlan: left promiscuous mode [ 247.518392][ T6356] veth0_vlan: left promiscuous mode [ 248.159913][ T6356] team0 (unregistering): Port device team_slave_1 removed [ 248.207469][ T6356] team0 (unregistering): Port device team_slave_0 removed [ 248.255046][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.303399][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.669973][ T6356] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 248.680926][ T6356] bond0 (unregistering): Released all slaves [ 255.906158][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.914834][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.351580][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 304.547316][ T29] INFO: task jbd2/sda1-8:5105 blocked for more than 143 seconds. [ 304.555143][ T29] Not tainted syzkaller #0 [ 304.560086][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.568956][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5105 ppid:2 flags:0x00004000 [ 304.578986][ T29] Call Trace: [ 304.586246][ T29] [ 304.589318][ T29] __schedule+0x15ae/0x4660 [ 304.594162][ T29] ? asan.module_dtor+0x20/0x20 [ 304.599082][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 304.604466][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 304.610427][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 304.615754][ T29] schedule+0xbd/0x170 [ 304.619880][ T29] io_schedule+0x80/0xd0 [ 304.624210][ T29] bit_wait_io+0x11/0xd0 [ 304.628504][ T29] __wait_on_bit+0x9f/0x2c0 [ 304.633101][ T29] ? bit_wait+0xd0/0xd0 [ 304.637304][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 304.642887][ T29] ? bit_wait+0xd0/0xd0 [ 304.647090][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 304.652308][ T29] ? do_raw_write_lock+0x11e/0x260 [ 304.657487][ T29] ? bit_waitqueue+0x30/0x30 [ 304.662177][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 304.667267][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 304.675355][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 304.683179][ T29] ? lock_chain_count+0x20/0x20 [ 304.688105][ T29] ? _raw_spin_unlock+0x40/0x40 [ 304.693124][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 304.698809][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 304.709423][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 304.715672][ T29] ? timer_delete_sync+0x20/0x20 [ 304.720666][ T29] ? do_raw_read_unlock+0x80/0x80 [ 304.725952][ T29] ? prepare_to_wait+0x1aa/0x200 [ 304.730954][ T29] kjournald2+0x40f/0x810 [ 304.736434][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 304.744803][ T29] ? wake_bit_function+0x200/0x200 [ 304.749998][ T29] ? _raw_spin_unlock+0x40/0x40 [ 304.754988][ T29] ? __kthread_parkme+0x71/0x1c0 [ 304.759984][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 304.765155][ T29] kthread+0x2fa/0x390 [ 304.769296][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 304.774573][ T29] ? kthread_blkcg+0xd0/0xd0 [ 304.784555][ T29] ret_from_fork+0x48/0x80 [ 304.789078][ T29] ? kthread_blkcg+0xd0/0xd0 [ 304.794822][ T29] ret_from_fork_asm+0x11/0x20 [ 304.799664][ T29] [ 304.802878][ T29] INFO: task syz-executor:5767 blocked for more than 143 seconds. [ 304.810722][ T29] Not tainted syzkaller #0 [ 304.816870][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.825772][ T29] task:syz-executor state:D stack:22856 pid:5767 ppid:5766 flags:0x00004002 [ 304.839287][ T29] Call Trace: [ 304.845778][ T29] [ 304.848858][ T29] __schedule+0x15ae/0x4660 [ 304.853522][ T29] ? mark_lock+0x94/0x320 [ 304.857905][ T29] ? asan.module_dtor+0x20/0x20 [ 304.867079][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 304.873624][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 304.880346][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 304.890683][ T29] schedule+0xbd/0x170 [ 304.894998][ T29] io_schedule+0x80/0xd0 [ 304.899301][ T29] bit_wait_io+0x11/0xd0 [ 304.904763][ T29] __wait_on_bit+0x9f/0x2c0 [ 304.909325][ T29] ? bit_wait+0xd0/0xd0 [ 304.914750][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 304.920272][ T29] ? bit_wait+0xd0/0xd0 [ 304.924514][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 304.929412][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 304.935528][ T29] ? bit_waitqueue+0x30/0x30 [ 304.940176][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 304.946727][ T29] do_get_write_access+0x5c9/0xe00 [ 304.952074][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 304.958240][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 304.967684][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 304.975217][ T29] ? __might_sleep+0xe0/0xe0 [ 304.984842][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 304.990490][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 304.997338][ T29] ext4_dirty_inode+0xcb/0x110 [ 305.004357][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 305.010326][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 305.017752][ T29] file_update_time+0x187/0x1a0 [ 305.025612][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 305.030743][ T29] ? do_wp_page+0x4ce/0x34d0 [ 305.037808][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 305.046470][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.054012][ T29] do_page_mkwrite+0x153/0x3f0 [ 305.058846][ T29] do_wp_page+0xd4d/0x34d0 [ 305.065582][ T29] ? folio_put+0xd0/0xd0 [ 305.069881][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 305.076104][ T29] ? __rwlock_init+0x150/0x150 [ 305.080945][ T29] handle_mm_fault+0x1306/0x4a50 [ 305.086737][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 305.092840][ T29] ? numa_migrate_prep+0x350/0x350 [ 305.098046][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 305.103880][ T29] do_user_addr_fault+0x736/0x12d0 [ 305.109210][ T29] exc_page_fault+0x64/0x100 [ 305.113980][ T29] ? clear_bhb_loop+0x40/0x90 [ 305.118713][ T29] asm_exc_page_fault+0x26/0x30 [ 305.123674][ T29] RIP: 0033:0x7feb8887c662 [ 305.128144][ T29] RSP: 002b:00007ffc7470ad40 EFLAGS: 00010202 [ 305.134470][ T29] RAX: 00007feb86668000 RBX: 00005555746481b0 RCX: 0000000000000007 [ 305.142532][ T29] RDX: 0000000000002980 RSI: 0000555574656818 RDI: 0000000000000080 [ 305.155217][ T29] RBP: 00007ffc7470b240 R08: 0000555574656818 R09: 0000000000000092 [ 305.163304][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc7470b080 [ 305.171403][ T29] R13: 00007ffc7470ae70 R14: 585858582e7a7973 R15: 00007ffc7470adc0 [ 305.179476][ T29] [ 305.182765][ T29] INFO: task syz-executor:7215 blocked for more than 144 seconds. [ 305.193004][ T29] Not tainted syzkaller #0 [ 305.198001][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.206787][ T29] task:syz-executor state:D stack:21800 pid:7215 ppid:7186 flags:0x00004000 [ 305.216137][ T29] Call Trace: [ 305.219461][ T29] [ 305.224533][ T29] __schedule+0x15ae/0x4660 [ 305.229122][ T29] ? mark_lock+0x94/0x320 [ 305.233601][ T29] ? asan.module_dtor+0x20/0x20 [ 305.238504][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.244911][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 305.250885][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 305.260281][ T29] schedule+0xbd/0x170 [ 305.266494][ T29] io_schedule+0x80/0xd0 [ 305.270809][ T29] bit_wait_io+0x11/0xd0 [ 305.278397][ T29] __wait_on_bit+0x9f/0x2c0 [ 305.283062][ T29] ? bit_wait+0xd0/0xd0 [ 305.288076][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 305.300947][ T29] ? bit_wait+0xd0/0xd0 [ 305.306185][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 305.311007][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 305.320491][ T29] ? bit_waitqueue+0x30/0x30 [ 305.325187][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 305.330442][ T29] do_get_write_access+0x5c9/0xe00 [ 305.340920][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 305.350041][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 305.363061][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 305.369298][ T29] __ext4_new_inode+0x13f2/0x3ad0 [ 305.375520][ T29] ? __dquot_initialize+0x229/0xd10 [ 305.380784][ T29] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 305.386652][ T29] ? dquot_initialize+0x20/0x20 [ 305.392816][ T29] ext4_mkdir+0x40b/0xc90 [ 305.397209][ T29] ? ext4_symlink+0x940/0x940 [ 305.402068][ T29] ? inode_permission+0xf3/0x480 [ 305.407126][ T29] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 305.412328][ T29] ? security_inode_mkdir+0xb7/0x100 [ 305.417683][ T29] vfs_mkdir+0x2a5/0x470 [ 305.422165][ T29] do_mkdirat+0x1dc/0x450 [ 305.426549][ T29] ? vfs_mkdir+0x470/0x470 [ 305.431033][ T29] __x64_sys_mkdirat+0x89/0xa0 [ 305.435971][ T29] do_syscall_64+0x55/0xb0 [ 305.440460][ T29] ? clear_bhb_loop+0x40/0x90 [ 305.445322][ T29] ? clear_bhb_loop+0x40/0x90 [ 305.450071][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.456126][ T29] RIP: 0033:0x7fb058d9cf47 [ 305.460603][ T29] RSP: 002b:00007ffc36fe96a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 305.469397][ T29] RAX: ffffffffffffffda RBX: 00007fb058e34a68 RCX: 00007fb058d9cf47 [ 305.477563][ T29] RDX: 00000000000001ff RSI: 00007fb058e34a68 RDI: 00000000ffffff9c [ 305.486750][ T29] RBP: 00007fb0590267b8 R08: 0000000000000000 R09: 0000000000000000 [ 305.495604][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 305.503760][ T29] R13: 0000000000000003 R14: 00007ffc36fe9918 R15: 0000000000000000 [ 305.511924][ T29] [ 305.514999][ T29] INFO: task syz.2.349:7277 blocked for more than 144 seconds. [ 305.522658][ T29] Not tainted syzkaller #0 [ 305.527634][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.536455][ T29] task:syz.2.349 state:D stack:26536 pid:7277 ppid:5780 flags:0x00004004 [ 305.545853][ T29] Call Trace: [ 305.549160][ T29] [ 305.552258][ T29] __schedule+0x15ae/0x4660 [ 305.556844][ T29] ? mark_lock+0x94/0x320 [ 305.561190][ T29] ? asan.module_dtor+0x20/0x20 [ 305.566164][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.571253][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 305.577450][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 305.583896][ T29] schedule+0xbd/0x170 [ 305.588125][ T29] io_schedule+0x80/0xd0 [ 305.600861][ T29] bit_wait_io+0x11/0xd0 [ 305.605388][ T29] __wait_on_bit+0x9f/0x2c0 [ 305.609943][ T29] ? bit_wait+0xd0/0xd0 [ 305.614343][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 305.619877][ T29] ? bit_wait+0xd0/0xd0 [ 305.624344][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 305.629155][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 305.634344][ T29] ? bit_waitqueue+0x30/0x30 [ 305.639008][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 305.644291][ T29] do_get_write_access+0x5c9/0xe00 [ 305.649465][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 305.655557][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 305.661885][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 305.668124][ T29] ? __might_sleep+0xe0/0xe0 [ 305.672814][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 305.678420][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 305.683976][ T29] ext4_dirty_inode+0xcb/0x110 [ 305.688791][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 305.694743][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 305.700585][ T29] file_update_time+0x187/0x1a0 [ 305.705609][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 305.710732][ T29] ? filemap_fault+0x103c/0x1540 [ 305.715788][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 305.721629][ T29] ? pte_alloc_one+0x3b6/0x540 [ 305.726453][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 305.732946][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.738040][ T29] do_page_mkwrite+0x153/0x3f0 [ 305.743414][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 305.748405][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 305.753446][ T29] ? numa_migrate_prep+0x350/0x350 [ 305.758612][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 305.763981][ T29] do_user_addr_fault+0x736/0x12d0 [ 305.769162][ T29] exc_page_fault+0x64/0x100 [ 305.773852][ T29] ? clear_bhb_loop+0x40/0x90 [ 305.778568][ T29] asm_exc_page_fault+0x26/0x30 [ 305.783522][ T29] RIP: 0033:0x7f2e1106ba23 [ 305.787980][ T29] RSP: 002b:00007ffffe77f680 EFLAGS: 00010246 [ 305.794136][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2dc64000 [ 305.802965][ T29] RDX: 0000001b2dc24000 RSI: 0000000000600000 RDI: 00007f2e113e0708 [ 305.810985][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.819101][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 305.827201][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffffe77f910 [ 305.835280][ T29] [ 305.838342][ T29] INFO: task syz.0.350:7279 blocked for more than 144 seconds. [ 305.846045][ T29] Not tainted syzkaller #0 [ 305.850992][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.859734][ T29] task:syz.0.350 state:D stack:27560 pid:7279 ppid:5779 flags:0x00004004 [ 305.869031][ T29] Call Trace: [ 305.872431][ T29] [ 305.875406][ T29] __schedule+0x15ae/0x4660 [ 305.879983][ T29] ? mark_lock+0x94/0x320 [ 305.884745][ T29] ? asan.module_dtor+0x20/0x20 [ 305.889662][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.894830][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 305.900794][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 305.907286][ T29] schedule+0xbd/0x170 [ 305.911469][ T29] io_schedule+0x80/0xd0 [ 305.915775][ T29] bit_wait_io+0x11/0xd0 [ 305.920084][ T29] __wait_on_bit+0x9f/0x2c0 [ 305.924724][ T29] ? bit_wait+0xd0/0xd0 [ 305.928933][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 305.934532][ T29] ? bit_wait+0xd0/0xd0 [ 305.938719][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 305.943558][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 305.948618][ T29] ? bit_waitqueue+0x30/0x30 [ 305.953436][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 305.958685][ T29] do_get_write_access+0x5c9/0xe00 [ 305.963899][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 305.969921][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 305.976173][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 305.982421][ T29] ? __might_sleep+0xe0/0xe0 [ 305.987056][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 305.994646][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 306.000181][ T29] ext4_dirty_inode+0xcb/0x110 [ 306.005763][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 306.011668][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 306.016756][ T29] file_update_time+0x187/0x1a0 [ 306.023691][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 306.028783][ T29] ? filemap_fault+0x103c/0x1540 [ 306.034042][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 306.039806][ T29] ? pte_alloc_one+0x3b6/0x540 [ 306.044806][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 306.051102][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.056408][ T29] do_page_mkwrite+0x153/0x3f0 [ 306.061254][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 306.066495][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 306.074833][ T29] ? numa_migrate_prep+0x350/0x350 [ 306.079985][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 306.085352][ T29] do_user_addr_fault+0x736/0x12d0 [ 306.090637][ T29] exc_page_fault+0x64/0x100 [ 306.095458][ T29] ? clear_bhb_loop+0x40/0x90 [ 306.100189][ T29] asm_exc_page_fault+0x26/0x30 [ 306.105298][ T29] RIP: 0033:0x7f093366ba23 [ 306.110965][ T29] RSP: 002b:00007ffe17be9e40 EFLAGS: 00010246 [ 306.117191][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2da64000 [ 306.125299][ T29] RDX: 0000001b2da24000 RSI: 0000000000600000 RDI: 00007f09339e0708 [ 306.133680][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.142419][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 306.150541][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe17bea0d0 [ 306.158870][ T29] [ 306.162039][ T29] INFO: task syz.3.351:7280 blocked for more than 144 seconds. [ 306.169615][ T29] Not tainted syzkaller #0 [ 306.174831][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.183612][ T29] task:syz.3.351 state:D stack:27560 pid:7280 ppid:5778 flags:0x00004004 [ 306.193090][ T29] Call Trace: [ 306.196413][ T29] [ 306.199372][ T29] __schedule+0x15ae/0x4660 [ 306.203994][ T29] ? mark_lock+0x94/0x320 [ 306.209465][ T29] ? asan.module_dtor+0x20/0x20 [ 306.214480][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.219699][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 306.225761][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 306.231142][ T29] schedule+0xbd/0x170 [ 306.235334][ T29] io_schedule+0x80/0xd0 [ 306.239790][ T29] bit_wait_io+0x11/0xd0 [ 306.244266][ T29] __wait_on_bit+0x9f/0x2c0 [ 306.248824][ T29] ? bit_wait+0xd0/0xd0 [ 306.253080][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 306.258825][ T29] ? bit_wait+0xd0/0xd0 [ 306.263321][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 306.268145][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.273594][ T29] ? bit_waitqueue+0x30/0x30 [ 306.278254][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.283892][ T29] do_get_write_access+0x5c9/0xe00 [ 306.289076][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 306.295488][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 306.303066][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.309333][ T29] ? __might_sleep+0xe0/0xe0 [ 306.314757][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 306.320371][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 306.326170][ T29] ext4_dirty_inode+0xcb/0x110 [ 306.330986][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 306.337012][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 306.342324][ T29] file_update_time+0x187/0x1a0 [ 306.347231][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 306.352919][ T29] ? filemap_fault+0x103c/0x1540 [ 306.357911][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 306.364107][ T29] ? pte_alloc_one+0x3b6/0x540 [ 306.368931][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 306.375705][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.380795][ T29] do_page_mkwrite+0x153/0x3f0 [ 306.386111][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 306.391103][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 306.396510][ T29] ? numa_migrate_prep+0x350/0x350 [ 306.401945][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 306.407270][ T29] do_user_addr_fault+0x736/0x12d0 [ 306.412855][ T29] exc_page_fault+0x64/0x100 [ 306.418263][ T29] ? clear_bhb_loop+0x40/0x90 [ 306.423378][ T29] asm_exc_page_fault+0x26/0x30 [ 306.428269][ T29] RIP: 0033:0x7fec5546ba23 [ 306.433116][ T29] RSP: 002b:00007ffc6cec8e60 EFLAGS: 00010246 [ 306.439223][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2dd64000 [ 306.447304][ T29] RDX: 0000001b2dd24000 RSI: 0000000000600000 RDI: 00007fec557e0708 [ 306.455381][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.464608][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 306.473657][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc6cec90f0 [ 306.481753][ T29] [ 306.484995][ T29] [ 306.484995][ T29] Showing all locks held in the system: [ 306.492985][ T29] 1 lock held by khungtaskd/29: [ 306.497873][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 306.507893][ T29] 2 locks held by getty/5537: [ 306.512664][ T29] #0: ffff8880315b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 306.523677][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 306.533969][ T29] 3 locks held by syz-executor/5767: [ 306.539277][ T29] #0: ffff88807a965720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 306.549278][ T29] #1: ffff88814e122510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 306.559241][ T29] #2: ffff88814e126990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 306.569255][ T29] 3 locks held by syz-executor/7215: [ 306.575024][ T29] #0: ffff88814e122418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 306.584538][ T29] #1: ffff888077312210 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 306.596419][ T29] #2: ffff88814e126990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 306.606423][ T29] 3 locks held by syz.2.349/7277: [ 306.611702][ T29] #0: ffff88807e77b120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 306.628486][ T29] #1: ffff88814e122510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 306.638411][ T29] #2: ffff88814e126990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 306.648166][ T29] 3 locks held by syz.0.350/7279: [ 306.653282][ T29] #0: ffff88802dd73120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 306.663397][ T29] #1: ffff88814e122510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 306.673316][ T29] #2: ffff88814e126990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 306.683223][ T29] 3 locks held by syz.3.351/7280: [ 306.688270][ T29] #0: ffff8880248127a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 306.698340][ T29] #1: ffff88814e122510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 306.708212][ T29] #2: ffff88814e126990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 306.718035][ T29] [ 306.720393][ T29] ============================================= [ 306.720393][ T29] [ 306.729578][ T29] NMI backtrace for cpu 1 [ 306.733980][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 306.741204][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.751283][ T29] Call Trace: [ 306.754590][ T29] [ 306.757548][ T29] dump_stack_lvl+0x18c/0x250 [ 306.762264][ T29] ? __wake_up_klogd+0xd9/0x100 [ 306.767148][ T29] ? show_regs_print_info+0x20/0x20 [ 306.772368][ T29] ? load_image+0x420/0x420 [ 306.776910][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 306.781877][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 306.788066][ T29] ? load_image+0x420/0x420 [ 306.792599][ T29] ? wq_watchdog_touch+0xef/0x170 [ 306.797662][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 306.803766][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 306.809779][ T29] watchdog+0xf59/0xfa0 [ 306.813989][ T29] ? watchdog+0x1e1/0xfa0 [ 306.818349][ T29] kthread+0x2fa/0x390 [ 306.822447][ T29] ? hungtask_pm_notify+0x50/0x50 [ 306.827503][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.832124][ T29] ret_from_fork+0x48/0x80 [ 306.836586][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.841203][ T29] ret_from_fork_asm+0x11/0x20 [ 306.846000][ T29] [ 306.849902][ T29] Sending NMI from CPU 1 to CPUs 0: [ 306.855322][ C0] NMI backtrace for cpu 0 [ 306.855331][ C0] CPU: 0 PID: 6362 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 306.855347][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.855357][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 306.855380][ C0] RIP: 0010:memset_orig+0x36/0xac [ 306.855406][ C0] Code: b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 6c 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 48 89 07 <48> 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 [ 306.855419][ C0] RSP: 0018:ffffc9000420f960 EFLAGS: 00000202 [ 306.855432][ C0] RAX: 0000000000000000 RBX: ffffc9000420f9e0 RCX: 0000000000000002 [ 306.855443][ C0] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff88807da06f40 [ 306.855454][ C0] RBP: 0000000000000001 R08: ffffc9000420f9e0 R09: 0000000000000000 [ 306.855464][ C0] R10: ffff88807da06000 R11: 0000000000000000 R12: 0000000000000001 [ 306.855474][ C0] R13: 0000000000001000 R14: 0000000000000000 R15: 0000000000000001 [ 306.855483][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 306.855497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.855508][ C0] CR2: 00005577f27c9168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 306.855523][ C0] Call Trace: [ 306.855528][ C0] [ 306.855533][ C0] slab_post_alloc_hook+0x86/0x4d0 [ 306.855564][ C0] __kmem_cache_alloc_node+0x194/0x250 [ 306.855589][ C0] ? __alloc_skb+0x138/0x2c0 [ 306.855608][ C0] ? __alloc_skb+0x138/0x2c0 [ 306.855624][ C0] __kmalloc_node_track_caller+0xa4/0x230 [ 306.855650][ C0] ? rcu_is_watching+0x15/0xb0 [ 306.855674][ C0] ? __alloc_skb+0x138/0x2c0 [ 306.855689][ C0] kmalloc_reserve+0x116/0x240 [ 306.855708][ C0] __alloc_skb+0x138/0x2c0 [ 306.855727][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 306.855751][ C0] ? process_scheduled_works+0x975/0x1600 [ 306.855774][ C0] process_scheduled_works+0xa60/0x1600 [ 306.855810][ C0] ? worker_attach_to_pool+0x370/0x370 [ 306.855835][ C0] ? assign_work+0x3cc/0x5d0 [ 306.855859][ C0] worker_thread+0xa5e/0xfe0 [ 306.855893][ C0] kthread+0x2fa/0x390 [ 306.855909][ C0] ? pr_cont_work+0x550/0x550 [ 306.855930][ C0] ? kthread_blkcg+0xd0/0xd0 [ 306.855946][ C0] ret_from_fork+0x48/0x80 [ 306.855966][ C0] ? kthread_blkcg+0xd0/0xd0 [ 306.855982][ C0] ret_from_fork_asm+0x11/0x20 [ 306.856012][ C0] [ 306.875917][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 306.875949][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 306.876008][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.876039][ T29] Call Trace: [ 306.876060][ T29] [ 306.876081][ T29] dump_stack_lvl+0x18c/0x250 [ 306.876162][ T29] ? show_regs_print_info+0x20/0x20 [ 306.876265][ T29] ? load_image+0x420/0x420 [ 306.876397][ T29] panic+0x2ca/0x720 [ 306.876486][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 306.876558][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 306.876630][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 306.876725][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 306.876801][ T29] watchdog+0xf98/0xfa0 [ 306.876874][ T29] ? watchdog+0x1e1/0xfa0 [ 306.876957][ T29] kthread+0x2fa/0x390 [ 306.877017][ T29] ? hungtask_pm_notify+0x50/0x50 [ 306.877075][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.877137][ T29] ret_from_fork+0x48/0x80 [ 306.877207][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.877261][ T29] ret_from_fork_asm+0x11/0x20 [ 306.877378][ T29] [ 306.884009][ T29] Kernel Offset: disabled [ 307.209516][ T29] Rebooting in 86400 seconds..