last executing test programs: 50.670419338s ago: executing program 3 (id=46): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) 49.527045503s ago: executing program 3 (id=53): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.349061349s ago: executing program 3 (id=64): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000080)) 48.158783573s ago: executing program 3 (id=65): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 47.577299626s ago: executing program 3 (id=72): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x5}, 0x5f) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 46.846638722s ago: executing program 3 (id=78): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x2, 0x6, "d45cbb", 0x7fff, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local}}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 46.446366581s ago: executing program 32 (id=78): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x2, 0x6, "d45cbb", 0x7fff, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local}}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 34.937290896s ago: executing program 1 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000500)={{0x70000, 0x996b3f46005b2508, 0x0, 0x5, 0x2, 0x0, 0xf1, 0x0, 0x75, 0xf4, 0x63, 0x6}, {0x2000, 0x1, 0xe, 0x4, 0x9, 0x7f, 0x8, 0x2, 0x3, 0x3, 0x9, 0x40}, {0xffffffff, 0x41000, 0x9, 0x9, 0xb, 0x7, 0x32, 0x0, 0x3, 0x2, 0x38, 0x7f}, {0x100000, 0xe000, 0x8, 0xd, 0xf2, 0x8f, 0xe0, 0x38, 0x6, 0xfc, 0x1, 0x6}, {0x5f000, 0x0, 0xc, 0x2, 0x1, 0x8, 0x9a, 0x26, 0x9, 0x7e, 0x56, 0x7}, {0x41000, 0xa000, 0x0, 0x1, 0x3, 0xc, 0xc3, 0x89, 0x3, 0x1, 0x2, 0x4}, {0x200000, 0x8ab2f98964528a10, 0xe, 0x2, 0x9, 0x1, 0x80, 0x9, 0x72, 0x4, 0x5, 0x1}, {0x0, 0x7000, 0xb, 0x81, 0x2, 0x6, 0x4, 0x3, 0x8, 0x3, 0x9}, {0x10000}, {0xe000, 0x4}, 0x80040000, 0x0, 0xdddd0000, 0x14612c, 0x5, 0xa000, 0x80a0000, 0x1, [0x4, 0xb0, 0x8, 0xb3]}) 34.468530487s ago: executing program 1 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, 0x0, 0x111, 0x5}}, 0x20) 34.244902842s ago: executing program 1 (id=131): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe03}}}, 0x108) 33.983912487s ago: executing program 1 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) 33.735337583s ago: executing program 1 (id=133): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @private=0xa010101}}}], 0x20}}], 0x2, 0x4040090) 33.191410905s ago: executing program 1 (id=137): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xc0, 0x0, 0x0) 32.677349206s ago: executing program 33 (id=137): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xc0, 0x0, 0x0) 3.62153953s ago: executing program 0 (id=308): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) clock_gettime(0x0, &(0x7f00000025c0)) 3.329519247s ago: executing program 0 (id=311): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='source\x00\x9d\xdc\x02\xda\"\xe1\xb8\xa2q&\xbd\x8a\x92\x86!\xbd\x8cU\xca\xa4\xb3\xa7-\x7f;\x8e\xaa\xbd\x99\xd5\xb3\xe6\x18\x19\x95\x95\x10\x15\x9f)=\xff\x83Z\f\xb6\xb3\xdda\x7f\xae\x9c\x8eF\xe9\xa3g\x9fz\x9e\x94\x8c)\xd9\xd1\xbd\xd5\xe5oD\xb5?.\xf6z\x01iD\x14T\xe5 \x8bU\xc5\x12\x9cV\xf0\x04[h\xbf\x80l\x13m\xba4!\xcdN\xf1\x7f\xe9\xb3\xd5\xbbh\x0f\xe2\"\x80\xed\x86 \xd1x\xa3\xd8>:?\x06\xc0\t\xf3\xbdZ\xc59[\xaf7\xc5\x0f0\xa3\xea\x89#\x06u\x10\xac\xe8\x8b\x00'/166, &(0x7f0000000400)='[\xd6\x00\x00\x00::\x00$\xc7d\x8e\x95H\x7fy&V~~\xfc\v\xe8\x00\x88', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.058388583s ago: executing program 0 (id=315): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x810411, &(0x7f0000000480)=ANY=[], 0x1, 0x1ff, &(0x7f0000000680)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 2.856857248s ago: executing program 4 (id=317): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1f, @remote}, 0x10) 2.566323154s ago: executing program 4 (id=319): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) 2.555126534s ago: executing program 5 (id=320): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 2.484176685s ago: executing program 2 (id=321): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$P9_RSTATu(r0, &(0x7f0000000b40)={0x558, 0x7d, 0x4001, {{0x500, 0x204, 0xfffd, 0x40, {0x0, 0x4f, 0x2}, 0x80080000, 0x1, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t]%}\x8f\xaf\xfc\x92\nAv@\x13\xb55\x1f\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x00\x00\x00\x00', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x33f, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy\xa6\x91\xb6\xf8\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xcda\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\a\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xdd\x1aA\xdd=\xe3\x04\xbd|~\xd0\x81\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x11\x03\x06U\xf5biO\x03\x00=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5\x1a\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\b\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\b\rxi\x19\xca\x8bg\x80\xe2\xbf\xb5\x03\xb4\xe6\xd8\xfaF\x8a\x90\xd3m6\xb8={\xe6\xa6\x8d\x80A\xc2\xef\x14\x87\xb2C\xe2\x85=g`\xaf\xef\xde\x9c\xe1\xb1W\v\x93[\n>\xa4\'\xfc\x81S\x99\x0eu\x98\xa4\xc8,)\x87\xf7\x9a\x17\x15c', 0xffffffffffffffff, 0xee01}}, 0x558) 2.330376609s ago: executing program 5 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3, 0x1}}]}}}]}, 0x78}}, 0x0) 2.27308959s ago: executing program 4 (id=323): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001d80)={0x0, 0x2, 0x0, 0x8}) 2.171732052s ago: executing program 2 (id=324): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000900000)=nil, 0x10000, 0x3, 0x11, r0, 0x0) 2.049789495s ago: executing program 4 (id=325): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)="7f", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x432c) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 2.039302025s ago: executing program 5 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000008", 0x3a) 1.927286958s ago: executing program 2 (id=327): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}], 0x1, 0xc040) 1.770461352s ago: executing program 4 (id=328): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000003, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x88, 0x3) 1.736387142s ago: executing program 2 (id=329): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}, 0x0) 1.730912842s ago: executing program 5 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='off', 0x3) 1.579085775s ago: executing program 0 (id=331): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3, 0x5}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1c) 1.426744679s ago: executing program 5 (id=332): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8001000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb91}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.357056341s ago: executing program 2 (id=333): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0xffff) close(0x3) 1.184242124s ago: executing program 0 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x2c4, &(0x7f0000000040)={0x0, 0x1977, 0x8, 0x1, 0x1b1}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 1.178543034s ago: executing program 5 (id=335): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) 808.934622ms ago: executing program 0 (id=336): r0 = syz_usb_connect(0x0, 0x61, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 326.465373ms ago: executing program 2 (id=337): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff9402000002000000f1feffffffffffff0000000000000000070000002d8f380002"], 0xb0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 4 (id=338): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000012c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, 0x0, 0xfffffffffffffc00, &(0x7f000024e000/0x3000)=nil, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 80.461186][ T5761] cgroup: Unknown subsys name 'net' [ 80.597046][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.506457][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.146787][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.162923][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.180896][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.193107][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.201877][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.205705][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.218110][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.218691][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.228421][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.235725][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.250874][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.259796][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.260986][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.275818][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.276148][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.283404][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.298113][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.300036][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.306001][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.315807][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.319948][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.334408][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.348233][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.356788][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.807351][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.852819][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.982216][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 85.008081][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 85.049326][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.058337][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.066113][ T5776] bridge_slave_0: entered allmulticast mode [ 85.073854][ T5776] bridge_slave_0: entered promiscuous mode [ 85.131703][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.138961][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.146585][ T5776] bridge_slave_1: entered allmulticast mode [ 85.154826][ T5776] bridge_slave_1: entered promiscuous mode [ 85.187776][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.195551][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.203359][ T5773] bridge_slave_0: entered allmulticast mode [ 85.210913][ T5773] bridge_slave_0: entered promiscuous mode [ 85.249017][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.256753][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.264075][ T5773] bridge_slave_1: entered allmulticast mode [ 85.271799][ T5773] bridge_slave_1: entered promiscuous mode [ 85.282363][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.295336][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.398210][ T5776] team0: Port device team_slave_0 added [ 85.405000][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.412657][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.420054][ T5774] bridge_slave_0: entered allmulticast mode [ 85.426997][ T5774] bridge_slave_0: entered promiscuous mode [ 85.434764][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.444952][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.452491][ T5777] bridge_slave_0: entered allmulticast mode [ 85.460109][ T5777] bridge_slave_0: entered promiscuous mode [ 85.468580][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.476394][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.484115][ T5777] bridge_slave_1: entered allmulticast mode [ 85.492032][ T5777] bridge_slave_1: entered promiscuous mode [ 85.501208][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.513938][ T5776] team0: Port device team_slave_1 added [ 85.529188][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.537410][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.544942][ T5774] bridge_slave_1: entered allmulticast mode [ 85.551929][ T5774] bridge_slave_1: entered promiscuous mode [ 85.591239][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.636055][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.660357][ T5773] team0: Port device team_slave_0 added [ 85.667772][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.675553][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.702087][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.718643][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.733175][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.744943][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.756401][ T5773] team0: Port device team_slave_1 added [ 85.765862][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.773568][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.801063][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.874832][ T5777] team0: Port device team_slave_0 added [ 85.885703][ T5777] team0: Port device team_slave_1 added [ 85.939273][ T5774] team0: Port device team_slave_0 added [ 85.947258][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.955306][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.981836][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.023400][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.030693][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.057772][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.071711][ T5774] team0: Port device team_slave_1 added [ 86.078244][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.085490][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.115232][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.127598][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.135135][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.161210][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.184768][ T5776] hsr_slave_0: entered promiscuous mode [ 86.192166][ T5776] hsr_slave_1: entered promiscuous mode [ 86.252745][ T5777] hsr_slave_0: entered promiscuous mode [ 86.259053][ T5777] hsr_slave_1: entered promiscuous mode [ 86.265612][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.274292][ T5777] Cannot create hsr debugfs directory [ 86.299772][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.306802][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.333553][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.369459][ T5773] hsr_slave_0: entered promiscuous mode [ 86.376565][ T5773] hsr_slave_1: entered promiscuous mode [ 86.382998][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.390977][ T5773] Cannot create hsr debugfs directory [ 86.397247][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.404683][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.431473][ T5084] Bluetooth: hci2: command tx timeout [ 86.431780][ T5786] Bluetooth: hci3: command tx timeout [ 86.437632][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.444185][ T5788] Bluetooth: hci0: command tx timeout [ 86.454308][ T5084] Bluetooth: hci1: command tx timeout [ 86.674675][ T5774] hsr_slave_0: entered promiscuous mode [ 86.682541][ T5774] hsr_slave_1: entered promiscuous mode [ 86.688680][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.696388][ T5774] Cannot create hsr debugfs directory [ 86.930076][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.969741][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.996674][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.006650][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.096260][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.107821][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.138834][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.161189][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.233990][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.247575][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.273169][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.289275][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.361942][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.373773][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.402811][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.417980][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.429418][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.496964][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.551371][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.558703][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.619832][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.627048][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.706814][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.795727][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.848439][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.855996][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.875739][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.949501][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.005620][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.012849][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.092943][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.134875][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.175980][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.183389][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.199310][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.206520][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.291335][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.298537][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.316451][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.323686][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.403179][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.489819][ T5084] Bluetooth: hci0: command tx timeout [ 88.490583][ T5788] Bluetooth: hci3: command tx timeout [ 88.495272][ T5084] Bluetooth: hci1: command tx timeout [ 88.501149][ T5786] Bluetooth: hci2: command tx timeout [ 88.735663][ T5776] veth0_vlan: entered promiscuous mode [ 88.776744][ T5776] veth1_vlan: entered promiscuous mode [ 88.867406][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.892287][ T5776] veth0_macvtap: entered promiscuous mode [ 88.925492][ T5776] veth1_macvtap: entered promiscuous mode [ 89.026243][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.047512][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.068893][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.097704][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.109471][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.119156][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.128100][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.148646][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.167847][ T5777] veth0_vlan: entered promiscuous mode [ 89.202832][ T5777] veth1_vlan: entered promiscuous mode [ 89.304226][ T5774] veth0_vlan: entered promiscuous mode [ 89.371254][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.380998][ T5774] veth1_vlan: entered promiscuous mode [ 89.386913][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.404454][ T5777] veth0_macvtap: entered promiscuous mode [ 89.422695][ T5773] veth0_vlan: entered promiscuous mode [ 89.459489][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.470301][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.481717][ T5777] veth1_macvtap: entered promiscuous mode [ 89.515038][ T5773] veth1_vlan: entered promiscuous mode [ 89.544202][ T5774] veth0_macvtap: entered promiscuous mode [ 89.566635][ T5774] veth1_macvtap: entered promiscuous mode [ 89.592487][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.616929][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.647724][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.702199][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.714689][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.732552][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.755046][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.779219][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.803451][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.816267][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.828907][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.842747][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.856247][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.879704][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.891306][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.911442][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.957531][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.971914][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.989176][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999021][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.023004][ T5773] veth0_macvtap: entered promiscuous mode [ 90.034981][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.046453][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.062923][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.072586][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.097374][ T5773] veth1_macvtap: entered promiscuous mode [ 90.197707][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.217156][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.233318][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.245487][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.257635][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.268375][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.281691][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.309329][ T5851] misc userio: Can't change port type on an already running userio instance [ 90.351808][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.363554][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.373874][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.384789][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.395587][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.406768][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.419206][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.453211][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.467736][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.477896][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.487876][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.550665][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.558683][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.571692][ T5786] Bluetooth: hci1: command tx timeout [ 90.574318][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.578017][ T5788] Bluetooth: hci0: command tx timeout [ 90.585271][ T5084] Bluetooth: hci2: command tx timeout [ 90.585310][ T5084] Bluetooth: hci3: command tx timeout [ 90.624571][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.717253][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.749867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.785645][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.806301][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.848550][ T5858] syz.3.10[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.872832][ T5858] loop3: detected capacity change from 0 to 64 [ 90.884002][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.904880][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.047917][ T28] audit: type=1800 audit(1788932977.234:2): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 91.092798][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.148475][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.926624][ T5879] loop3: detected capacity change from 0 to 4096 [ 92.106955][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.327516][ T5881] loop1: detected capacity change from 0 to 8192 [ 92.397846][ T5881] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.457884][ T5881] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 92.493060][ T5881] REISERFS (device loop1): using ordered data mode [ 92.509829][ T5881] reiserfs: using flush barriers [ 92.543667][ T5881] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.574203][ T9] cfg80211: failed to load regulatory.db [ 92.620578][ T5881] REISERFS (device loop1): checking transaction log (loop1) [ 92.669749][ T5084] Bluetooth: hci0: command tx timeout [ 92.669805][ T5778] Bluetooth: hci1: command tx timeout [ 92.675219][ T5084] Bluetooth: hci2: command tx timeout [ 92.680740][ T5778] Bluetooth: hci3: command tx timeout [ 92.939122][ T5881] REISERFS (device loop1): Using tea hash to sort names [ 92.967331][ T5881] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 93.695024][ T5887] loop3: detected capacity change from 0 to 40427 [ 93.749818][ T5887] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 93.783523][ T5887] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 93.821678][ T5887] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 93.846674][ T5887] F2FS-fs (loop3): invalid crc value [ 93.877042][ T5887] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.091243][ T5887] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 94.119818][ T5887] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.269237][ T28] audit: type=1800 audit(1788932980.444:3): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 94.289094][ T5893] loop0: detected capacity change from 0 to 40427 [ 94.318412][ T5893] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff [ 94.350119][ T5893] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 94.371855][ T5893] F2FS-fs (loop0): invalid crc value [ 94.405095][ T5893] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.442170][ T5776] syz-executor: attempt to access beyond end of device [ 94.442170][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.464522][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.503510][ T5893] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 94.603761][ T5893] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.815534][ T5893] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 94.927265][ T5893] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x7f0 [ 95.059405][ T5774] syz-executor: attempt to access beyond end of device [ 95.059405][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.086771][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 95.127724][ T5916] loop2: detected capacity change from 0 to 4096 [ 96.143418][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 96.533406][ T5924] loop2: detected capacity change from 0 to 32768 [ 96.882033][ T5940] loop3: detected capacity change from 0 to 256 [ 97.149323][ T28] audit: type=1326 audit(1788932983.334:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.3.38" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24c559e159 code=0x0 [ 98.271148][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 98.422017][ T5955] loop2: detected capacity change from 0 to 40427 [ 98.457196][ T5955] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 98.479698][ T5955] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 98.501204][ T5955] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 98.527593][ T5955] F2FS-fs (loop2): invalid crc value [ 98.595657][ T5955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.603678][ T5956] loop1: detected capacity change from 0 to 40427 [ 98.623447][ T5956] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 98.650587][ T5956] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 98.684839][ T5956] F2FS-fs (loop1): invalid crc value [ 98.721077][ T5956] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.793381][ T5955] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 98.820306][ T5955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.843365][ T5956] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 98.888359][ T5959] loop3: detected capacity change from 0 to 32768 [ 98.938206][ T5956] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.966714][ T5959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.44 (5959) [ 99.007330][ T5956] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 99.042819][ T28] audit: type=1800 audit(1788932985.204:5): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 99.109850][ T5959] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.136166][ T5956] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x7f0 [ 99.156170][ T5777] syz-executor: attempt to access beyond end of device [ 99.156170][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.159706][ T5959] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 99.188241][ T5959] BTRFS info (device loop3): using free space tree [ 99.228232][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.238096][ T5773] syz-executor: attempt to access beyond end of device [ 99.238096][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.289395][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 99.429083][ T5959] BTRFS info (device loop3): enabling ssd optimizations [ 99.455453][ T5959] BTRFS info (device loop3): auto enabling async discard [ 99.992635][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.053264][ T5989] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 100.355875][ T5991] loop2: detected capacity change from 0 to 512 [ 100.410821][ T5991] ======================================================= [ 100.410821][ T5991] WARNING: The mand mount option has been deprecated and [ 100.410821][ T5991] and is ignored by this kernel. Remove the mand [ 100.410821][ T5991] option from the mount to silence this warning. [ 100.410821][ T5991] ======================================================= [ 100.445881][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.663521][ T6017] capability: warning: `syz.1.58' uses deprecated v2 capabilities in a way that may be insecure [ 101.687245][ T6017] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 101.698194][ T6017] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 101.711185][ T6017] overlayfs: failed to get uuid (14/file2, err=-13); falling back to uuid=null. [ 102.013671][ T6021] warning: `syz.1.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.231022][ T6023] process 'syz.1.62' launched './file2' with NULL argv: empty string added [ 102.554307][ T6031] loop3: detected capacity change from 0 to 512 [ 102.583362][ T6031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.646747][ T6031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.678768][ T6031] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.65: bad orphan inode 131083 [ 102.734745][ T6031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.994870][ T5776] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 103.288884][ T6046] loop0: detected capacity change from 0 to 4096 [ 103.336230][ T6046] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 103.474669][ T6053] netlink: 'syz.2.76': attribute type 11 has an invalid length. [ 103.485195][ T6053] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.76'. [ 103.497951][ T6046] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 103.523948][ T6046] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 103.603285][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.692865][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.758351][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.847373][ T5774] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 103.912858][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.929887][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 103.966630][ T5816] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 103.985285][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 103.997440][ T5816] usb 2-1: Product: syz [ 104.006183][ T5816] usb 2-1: Manufacturer: syz [ 104.011395][ T5816] usb 2-1: SerialNumber: syz [ 104.030433][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.031136][ T5816] usb 2-1: config 0 descriptor?? [ 104.218210][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.310604][ T28] audit: type=1400 audit(1788932990.504:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=6058 comm="syz.2.81" [ 104.540338][ T5816] usb 2-1: USB disconnect, device number 2 [ 105.222289][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.241413][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.259738][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.275685][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.290936][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.301946][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.129531][ C0] sched: RT throttling activated [ 107.369996][ T5084] Bluetooth: hci3: command tx timeout [ 107.470061][ T6106] loop0: detected capacity change from 0 to 131072 [ 107.502615][ T6106] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 107.510595][ T6106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 107.518957][ T6106] F2FS-fs (loop0): Test dummy encryption mode enabled [ 107.529170][ T6106] F2FS-fs (loop0): invalid crc value [ 107.548748][ T6106] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.607629][ T6106] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 107.634897][ T6106] F2FS-fs (loop0): Start checkpoint disabled! [ 107.668164][ T6106] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 107.675850][ T6106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 108.049027][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 108.207472][ T4230] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 108.243214][ T11] hsr_slave_0: left promiscuous mode [ 108.260250][ T11] hsr_slave_1: left promiscuous mode [ 108.270180][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.277806][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.310560][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.328374][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.342348][ T11] bridge_slave_1: left allmulticast mode [ 108.358639][ T11] bridge_slave_1: left promiscuous mode [ 108.371705][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.420520][ T11] bridge_slave_0: left allmulticast mode [ 108.436753][ T11] bridge_slave_0: left promiscuous mode [ 108.450890][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.592986][ T11] veth1_macvtap: left promiscuous mode [ 108.610686][ T11] veth0_macvtap: left promiscuous mode [ 108.624653][ T11] veth1_vlan: left promiscuous mode [ 108.640004][ T11] veth0_vlan: left promiscuous mode [ 109.348307][ T6140] loop1: detected capacity change from 0 to 32768 [ 109.351524][ T6148] ima: policy update failed [ 109.355057][ T28] audit: type=1807 audit(1788932995.534:7): UNKNOWN=? res=0 [ 109.367139][ T28] audit: type=1802 audit(1788932995.534:8): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.106" res=0 errno=0 [ 109.389116][ T6140] XFS (loop1): Invalid device [./bus], error=-16 [ 109.439811][ T28] audit: type=1802 audit(1788932995.564:9): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.106" res=0 errno=0 [ 109.449707][ T5084] Bluetooth: hci3: command tx timeout [ 110.272573][ T6158] loop0: detected capacity change from 0 to 512 [ 110.430437][ T6158] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.109: iget: bad i_size value: 38620345925642 [ 110.507479][ T6158] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.109: couldn't read orphan inode 15 (err -117) [ 110.542417][ T6158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.597104][ T6158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.109: bg 0: block 5: invalid block bitmap [ 110.633565][ T6158] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 110.678149][ T6158] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.678149][ T6158] [ 110.701951][ T6158] EXT4-fs (loop0): Total free blocks count 0 [ 110.709101][ T6158] EXT4-fs (loop0): Free/Dirty block details [ 110.751389][ T6158] EXT4-fs (loop0): free_blocks=0 [ 110.756917][ T6158] EXT4-fs (loop0): dirty_blocks=1 [ 110.774153][ T6158] EXT4-fs (loop0): Block reservation details [ 110.793542][ T6158] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 110.972438][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.399014][ T11] team0 (unregistering): Port device team_slave_1 removed [ 111.494602][ T11] team0 (unregistering): Port device team_slave_0 removed [ 111.529731][ T5084] Bluetooth: hci3: command tx timeout [ 111.632960][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.691276][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.419308][ T11] bond0 (unregistering): Released all slaves [ 112.847044][ T6181] loop1: detected capacity change from 0 to 512 [ 112.929209][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.947533][ T6181] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.983944][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.000253][ T6079] bridge_slave_0: entered allmulticast mode [ 113.045767][ T6181] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.118: invalid indirect mapped block 32768 (level 2) [ 113.059714][ T6079] bridge_slave_0: entered promiscuous mode [ 113.097384][ T6181] EXT4-fs (loop1): Remounting filesystem read-only [ 113.139413][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.175984][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.205758][ T6181] EXT4-fs (loop1): 1 orphan inode deleted [ 113.229756][ T6079] bridge_slave_1: entered allmulticast mode [ 113.238134][ T6079] bridge_slave_1: entered promiscuous mode [ 113.253307][ T6181] EXT4-fs (loop1): 1 truncate cleaned up [ 113.268471][ T6181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.387535][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.457079][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.569842][ T788] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 113.586353][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.610523][ T5084] Bluetooth: hci3: command tx timeout [ 113.634237][ T6079] team0: Port device team_slave_0 added [ 113.652001][ T6079] team0: Port device team_slave_1 added [ 113.697083][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.704390][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.801738][ T788] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.810364][ T788] usb 1-1: config 0 has no interface number 0 [ 113.817204][ T788] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.839319][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.852844][ T788] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.872158][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.883142][ T6197] loop1: detected capacity change from 0 to 64 [ 113.900004][ T788] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.914659][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.953348][ T788] usb 1-1: config 0 interface 1 has no altsetting 0 [ 113.965368][ T788] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 113.980971][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.995336][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.021268][ T788] usb 1-1: config 0 descriptor?? [ 114.264966][ T6079] hsr_slave_0: entered promiscuous mode [ 114.342154][ T6079] hsr_slave_1: entered promiscuous mode [ 114.628947][ T6208] loop1: detected capacity change from 0 to 128 [ 114.706743][ T6208] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 114.711361][ T788] uclogic 0003:145F:0212.0001: failed retrieving string descriptor #100: -71 [ 114.742417][ T6208] hpfs: filesystem error: improperly stopped [ 114.765205][ T788] uclogic 0003:145F:0212.0001: failed retrieving pen parameters: -71 [ 114.776891][ T788] uclogic 0003:145F:0212.0001: pen probing failed: -71 [ 114.792147][ T6208] hpfs: You really don't want any checks? You are crazy... [ 114.820195][ T6208] hpfs: hpfs_map_sector(): read error [ 114.835885][ T788] uclogic 0003:145F:0212.0001: failed probing parameters: -71 [ 114.843920][ T6208] hpfs: code page support is disabled [ 114.844945][ T6208] hpfs: hpfs_map_4sectors(): unaligned read [ 114.851252][ T788] uclogic: probe of 0003:145F:0212.0001 failed with error -71 [ 114.883149][ T6208] hpfs: hpfs_map_4sectors(): unaligned read [ 114.893149][ T788] usb 1-1: USB disconnect, device number 2 [ 114.920017][ T6208] hpfs: filesystem error: unable to find root dir [ 115.238793][ T6079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.278002][ T6079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.305846][ T6079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.336507][ T6079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.603647][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.704136][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.753013][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.760340][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.819052][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.826584][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.801776][ T6151] Set syz1 is full, maxelem 65536 reached [ 116.848386][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.475861][ T4230] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.694683][ T4230] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.812658][ T4230] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.869841][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.942194][ T4230] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.994103][ T6079] veth0_vlan: entered promiscuous mode [ 118.035015][ T6079] veth1_vlan: entered promiscuous mode [ 118.092541][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.141301][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 118.181705][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.206674][ T6079] veth0_macvtap: entered promiscuous mode [ 118.231485][ T9] usb 3-1: config 0 descriptor?? [ 118.259149][ T6079] veth1_macvtap: entered promiscuous mode [ 118.359146][ T6280] netlink: 'syz.0.141': attribute type 21 has an invalid length. [ 118.373685][ T6280] netlink: 128 bytes leftover after parsing attributes in process `syz.0.141'. [ 118.450871][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.509683][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.521231][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.537479][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.547641][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.558282][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.573473][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.584358][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.592499][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.602359][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.610428][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.617864][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.628795][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.686326][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.709390][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.720148][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.731560][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.742214][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.753279][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.771506][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.911235][ T6079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.924720][ T6079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.924843][ T9] ath6kl: mismatched byte count 0 vs. expected 12 [ 118.936570][ T6079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.951003][ T6079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.962039][ T9] ath6kl: Failed to init ath6kl core: -22 [ 118.971735][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 118.982804][ T9] ath6kl_usb: probe of 3-1:0.0 failed with error -22 [ 119.119099][ T6291] program syz.0.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.166227][ T5820] usb 3-1: USB disconnect, device number 2 [ 119.529974][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.537882][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.651178][ T6304] Zero length message leads to an empty skb [ 119.822726][ T6309] netlink: 316 bytes leftover after parsing attributes in process `syz.0.149'. [ 119.839196][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.852286][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.074961][ T6281] chnl_net:caif_netlink_parms(): no params data found [ 120.100087][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.330354][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 120.351955][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 120.369858][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.439035][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 120.491550][ T4230] hsr_slave_0: left promiscuous mode [ 120.497221][ T9] pvrusb2: ********** [ 120.507353][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 120.528534][ T4230] hsr_slave_1: left promiscuous mode [ 120.539269][ T9] pvrusb2: Important functionality might not be entirely working. [ 120.556287][ T4230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.579611][ T4230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.586920][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 120.618506][ T9] pvrusb2: ********** [ 120.625853][ T4230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.642667][ T4230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.658688][ T2322] pvrusb2: Invalid write control endpoint [ 120.674142][ T4230] bridge_slave_1: left allmulticast mode [ 120.684219][ T4230] bridge_slave_1: left promiscuous mode [ 120.695517][ T4230] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.722080][ T4230] bridge_slave_0: left allmulticast mode [ 120.728304][ T4230] bridge_slave_0: left promiscuous mode [ 120.745011][ T5084] Bluetooth: hci0: command tx timeout [ 120.759373][ T4230] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.770798][ T2322] pvrusb2: Invalid write control endpoint [ 120.777344][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 120.789219][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 120.797431][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 120.808113][ T2322] pvrusb2: Device being rendered inoperable [ 120.817564][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 120.833184][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 120.864412][ T4230] veth1_macvtap: left promiscuous mode [ 120.888734][ T2322] pvrusb2: Attached sub-driver cx25840 [ 120.898571][ T4230] veth0_macvtap: left promiscuous mode [ 120.912010][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 120.928471][ T4230] veth1_vlan: left promiscuous mode [ 120.929935][ T6312] pvrusb2: Attempted to execute control transfer when device not ok [ 120.934374][ T4230] veth0_vlan: left promiscuous mode [ 120.948719][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 120.988402][ T6339] loop0: detected capacity change from 0 to 8 [ 120.998511][ T27] usb 3-1: USB disconnect, device number 3 [ 121.031399][ T6339] Filesystem uses "unknown" compression. This is not supported [ 121.341912][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.538392][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10 [ 121.551694][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.565580][ T5817] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.575754][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.590499][ T5817] usb 1-1: config 0 descriptor?? [ 122.003497][ T4230] team0 (unregistering): Port device team_slave_1 removed [ 122.037462][ T5817] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 122.057728][ T5817] plantronics 0003:047F:FFFF.0002: parse failed [ 122.075005][ T5817] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 122.128313][ T4230] team0 (unregistering): Port device team_slave_0 removed [ 122.240316][ T4230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.287612][ T5817] usb 1-1: USB disconnect, device number 3 [ 122.372258][ T4230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.809814][ T5084] Bluetooth: hci0: command tx timeout [ 123.166029][ T4230] bond0 (unregistering): Released all slaves [ 123.513031][ T6363] kAFS: bad VL server IP address [ 123.780727][ T6332] batman_adv: batadv0: Adding interface: macvtap1 [ 123.815317][ T6332] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.917757][ T6332] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 124.045692][ T6357] loop2: detected capacity change from 0 to 131072 [ 124.054676][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.062704][ T6357] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 124.071864][ T6357] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 124.080967][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.088798][ T6281] bridge_slave_0: entered allmulticast mode [ 124.096905][ T6281] bridge_slave_0: entered promiscuous mode [ 124.106719][ T6357] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.140168][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.172170][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.180108][ T6281] bridge_slave_1: entered allmulticast mode [ 124.189378][ T6281] bridge_slave_1: entered promiscuous mode [ 124.197403][ T6372] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 124.204139][ T6357] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 124.207457][ T6372] syzkaller1: linktype set to 768 [ 124.212826][ T6357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.383297][ T6281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.463536][ T6281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.587318][ T6381] loop4: detected capacity change from 0 to 512 [ 124.613176][ T6281] team0: Port device team_slave_0 added [ 124.634931][ T6281] team0: Port device team_slave_1 added [ 124.720053][ T6381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.767895][ T6381] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.768786][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.808219][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.835520][ T6281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.861271][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.868303][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.905304][ T5084] Bluetooth: hci0: command tx timeout [ 124.969307][ T6281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.126341][ T6281] hsr_slave_0: entered promiscuous mode [ 125.155720][ T6079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.169025][ T6281] hsr_slave_1: entered promiscuous mode [ 125.212269][ T6281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.232355][ T6281] Cannot create hsr debugfs directory [ 125.391590][ T6397] binder: 6394:6397 ioctl c018620c 200000000240 returned -1 [ 125.443424][ T6396] netlink: 'syz.4.177': attribute type 12 has an invalid length. [ 125.490092][ T6396] netlink: 'syz.4.177': attribute type 29 has an invalid length. [ 125.520494][ T6396] netlink: 148 bytes leftover after parsing attributes in process `syz.4.177'. [ 126.155933][ T6281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.209015][ T6281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.263972][ T6281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.274581][ T6415] loop4: detected capacity change from 0 to 1764 [ 126.313654][ T6281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.331177][ T6415] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 126.728744][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.824204][ T6281] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.888600][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.895911][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.978812][ T5084] Bluetooth: hci0: command tx timeout [ 126.984758][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.992176][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.194097][ T6281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.689701][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.880030][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.891644][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 127.916993][ T5816] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.963294][ T5816] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.967487][ T6456] loop4: detected capacity change from 0 to 8192 [ 127.994331][ T5816] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 128.052540][ T6456] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.074353][ T5816] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.081637][ T6456] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 128.133775][ T5816] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 128.148927][ T6456] REISERFS (device loop4): using ordered data mode [ 128.189666][ T6456] reiserfs: using flush barriers [ 128.200217][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.223487][ T6456] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.251120][ T5816] usb 1-1: config 0 descriptor?? [ 128.280488][ T6456] REISERFS (device loop4): checking transaction log (loop4) [ 128.314713][ T6456] REISERFS (device loop4): Using tea hash to sort names [ 128.342392][ T6456] REISERFS (device loop4): using 3.5.x disk format [ 128.514533][ T6466] loop2: detected capacity change from 0 to 8192 [ 128.857065][ T6475] loop4: detected capacity change from 0 to 8 [ 129.004816][ T5816] usb 1-1: USB disconnect, device number 4 [ 129.097631][ T6281] veth0_vlan: entered promiscuous mode [ 129.142559][ T6281] veth1_vlan: entered promiscuous mode [ 129.278151][ T6281] veth0_macvtap: entered promiscuous mode [ 129.289143][ T6480] loop2: detected capacity change from 0 to 16 [ 129.315205][ T6281] veth1_macvtap: entered promiscuous mode [ 129.322911][ T6480] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 129.382879][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.421798][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.459905][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.507956][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.535516][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.576167][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.621449][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.695717][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.739723][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.782659][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.809611][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.838021][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.862053][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.897850][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.924614][ T6281] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.954658][ T6281] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.984931][ T6281] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.999703][ T6281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.153971][ T6496] loop0: detected capacity change from 0 to 256 [ 130.283517][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.320068][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.430548][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.438628][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.464480][ T6483] loop4: detected capacity change from 0 to 32768 [ 130.502822][ T6483] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.198 (6483) [ 130.600612][ T6483] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 130.650261][ T6483] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 130.699741][ T6483] BTRFS info (device loop4): use zlib compression, level 3 [ 130.740306][ T6483] BTRFS info (device loop4): using free space tree [ 130.967048][ T6483] BTRFS info (device loop4): enabling ssd optimizations [ 131.000552][ T6483] BTRFS info (device loop4): auto enabling async discard [ 131.451621][ T6534] Bluetooth: MGMT ver 1.22 [ 131.751893][ T6079] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 132.384906][ T6564] loop5: detected capacity change from 0 to 256 [ 133.387450][ T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.549358][ T6585] loop5: detected capacity change from 0 to 512 [ 133.557730][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.564985][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.608953][ T6585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.609694][ T788] usb 5-1: Using ep0 maxpacket: 16 [ 133.635903][ T788] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.647087][ T788] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 133.679999][ T788] usb 5-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.720164][ T788] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 133.759642][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.763582][ T6591] loop0: detected capacity change from 0 to 1024 [ 133.782999][ T788] usb 5-1: Product: syz [ 133.785640][ T6585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.787406][ T788] usb 5-1: Manufacturer: syz [ 133.819826][ T788] usb 5-1: SerialNumber: syz [ 133.827678][ T6591] EXT4-fs: Ignoring removed bh option [ 133.840886][ T6585] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.922626][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.096936][ T6281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.117640][ T788] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 134.152502][ T788] snd-usb-audio: probe of 5-1:5.0 failed with error -22 [ 134.163081][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.456408][ T6607] loop2: detected capacity change from 0 to 164 [ 134.660190][ T788] usb 5-1: USB disconnect, device number 2 [ 134.748246][ T6068] udevd[6068]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.391978][ T6653] loop0: detected capacity change from 0 to 1024 [ 136.437542][ T6653] EXT4-fs: Ignoring removed nobh option [ 136.473263][ T9] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 136.479457][ T6653] EXT4-fs: Ignoring removed bh option [ 136.503460][ T6653] EXT4-fs: Ignoring removed nobh option [ 136.590724][ T6653] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 136.643166][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.651066][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.658353][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.665701][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.673033][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.680536][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.687940][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.695312][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.702645][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.709962][ T6659] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 136.781886][ T6653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.854414][ T6664] bridge0: port 3(syz_tun) entered blocking state [ 136.886040][ T6664] bridge0: port 3(syz_tun) entered disabled state [ 136.909961][ T6664] syz_tun: entered allmulticast mode [ 136.941462][ T6664] syz_tun: entered promiscuous mode [ 136.981657][ T6664] bridge0: port 3(syz_tun) entered blocking state [ 136.988185][ T6656] fido_id[6656]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.988700][ T6664] bridge0: port 3(syz_tun) entered forwarding state [ 137.063995][ T6653] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 137.135958][ T28] audit: type=1800 audit(1788933023.324:10): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 137.367494][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.401458][ T6678] loop4: detected capacity change from 0 to 128 [ 137.416476][ T6677] loop5: detected capacity change from 0 to 128 [ 137.486912][ T6678] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 137.593352][ T6678] hpfs: filesystem error: improperly stopped [ 137.607869][ T6681] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 137.617467][ T6678] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 137.640766][ T6678] hpfs: You really don't want any checks? You are crazy... [ 137.698390][ T6678] hpfs: hpfs_map_sector(): read error [ 137.713904][ T6678] hpfs: code page support is disabled [ 137.739581][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 137.753218][ T6678] hpfs: hpfs_map_4sectors(): unaligned read [ 137.781207][ T6678] hpfs: hpfs_map_4sectors(): unaligned read [ 137.787201][ T6678] hpfs: filesystem error: unable to find root dir [ 138.337571][ T6696] loop2: detected capacity change from 0 to 512 [ 138.379797][ T6696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.398280][ T6701] loop4: detected capacity change from 0 to 2048 [ 138.533972][ T6706] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.563972][ T6696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.579686][ T788] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.687873][ T6696] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.769738][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 138.817830][ T788] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 138.849659][ T788] usb 1-1: config 0 has no interface number 0 [ 138.865528][ T788] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 138.865766][ T6706] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 138.883573][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.895811][ T788] usb 1-1: Product: syz [ 138.900488][ T788] usb 1-1: Manufacturer: syz [ 138.905314][ T788] usb 1-1: SerialNumber: syz [ 138.934154][ T788] usb 1-1: config 0 descriptor?? [ 138.956627][ T788] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 138.966305][ T6706] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 138.990246][ T6706] Remounting filesystem read-only [ 139.067104][ T6079] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 139.096559][ T6079] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 139.110848][ T6079] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 139.118644][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.140372][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.166669][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.188539][ T6079] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 139.201705][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.208630][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 139.220810][ T6079] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 139.228357][ T6079] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 139.255247][ T6079] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 139.298646][ T6079] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 139.316882][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 139.364316][ T6079] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 139.419670][ T6079] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 139.427054][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.478821][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.520106][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.555189][ T6079] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 139.581557][ T6079] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 139.589224][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.629591][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.638555][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.656235][ T6079] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 139.664009][ T6079] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 139.680235][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.696710][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.715477][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.755286][ T6079] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 139.763638][ T6079] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 139.777527][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 139.777906][ T9] usb 1-1: USB disconnect, device number 5 [ 139.793959][ T6079] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 139.823077][ T6079] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 139.837752][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 139.863774][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.890892][ T6079] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 139.900781][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 139.943043][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.965651][ T9] quatech2 1-1:0.51: device disconnected [ 139.984705][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.009662][ T6079] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 140.017231][ T6079] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.606170][ T6736] vcan0: tx address claim with dlc 0 [ 142.211508][ T6761] loop0: detected capacity change from 0 to 32768 [ 142.315857][ T6761] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.605794][ T6761] XFS (loop0): Ending clean mount [ 142.889431][ T6794] loop4: detected capacity change from 0 to 512 [ 142.889980][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.963567][ T6794] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 143.010382][ T6794] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.277: corrupted inode contents [ 143.037270][ T6794] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #11: comm syz.4.277: mark_inode_dirty error [ 143.067519][ T6778] loop5: detected capacity change from 0 to 32768 [ 143.134661][ T6794] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.277: invalid indirect mapped block 1 (level 1) [ 143.244641][ T6794] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.277: corrupted inode contents [ 143.333945][ T6794] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 143.392108][ T6794] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.277: corrupted inode contents [ 143.459782][ T6794] EXT4-fs error (device loop4): ext4_truncate:4302: inode #11: comm syz.4.277: mark_inode_dirty error [ 143.500143][ T6794] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 143.548403][ T6794] EXT4-fs (loop4): 1 truncate cleaned up [ 143.601623][ T6794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.756204][ T6794] CacheFiles: mkdir cache failed with error -105 [ 143.799659][ T6794] CacheFiles: Failed to register: -105 [ 143.959133][ T6079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.785595][ T6832] loop0: detected capacity change from 0 to 512 [ 144.863572][ T6832] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 144.910603][ T6832] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.957617][ T6832] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 145.018531][ T6818] loop4: detected capacity change from 0 to 32768 [ 145.039914][ T6832] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.111572][ T6832] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 145.135174][ T6818] read_mapping_page failed! [ 145.149828][ T6832] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #16: comm syz.0.287: inode has both inline data and extents flags [ 145.174361][ T6818] ERROR: (device loop4): txCommit: [ 145.174361][ T6818] [ 145.205551][ T6832] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.287: couldn't read orphan inode 16 (err -117) [ 145.210222][ T6843] read_mapping_page failed! [ 145.276186][ T6832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.305605][ T6843] ERROR: (device loop4): txCommit: [ 145.305605][ T6843] [ 145.435047][ T6832] CacheFiles: Failed to register: -30 [ 145.641399][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.939728][ T28] audit: type=1326 audit(1788933032.114:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.048702][ T28] audit: type=1326 audit(1788933032.114:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.098312][ T28] audit: type=1326 audit(1788933032.164:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.188087][ T28] audit: type=1326 audit(1788933032.164:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.228132][ T6870] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.249888][ T28] audit: type=1326 audit(1788933032.164:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.287346][ T6871] loop2: detected capacity change from 0 to 512 [ 146.325852][ T6871] EXT4-fs: Ignoring removed bh option [ 146.349596][ T28] audit: type=1326 audit(1788933032.164:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.393396][ T6871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.459683][ T28] audit: type=1326 audit(1788933032.174:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.540190][ T6871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.610508][ T27] kernel write not supported for file /dummy_udc (pid: 27 comm: kworker/1:1) [ 146.620147][ T6871] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.624822][ T28] audit: type=1326 audit(1788933032.194:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 146.758787][ T28] audit: type=1326 audit(1788933032.194:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2335b9e159 code=0x7ffc0000 [ 147.021947][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.191532][ T6898] loop2: detected capacity change from 0 to 512 [ 147.687733][ T6919] loop0: detected capacity change from 0 to 16 [ 147.765887][ T6919] erofs: (device loop0): mounted with root inode @ nid 36. [ 147.884774][ T6919] syz.0.315: attempt to access beyond end of device [ 147.884774][ T6919] loop0: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 147.945884][ T6919] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 150.241050][ T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.479857][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 150.520612][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.532213][ T788] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 150.551115][ T788] usb 1-1: config 9 has no interface number 0 [ 150.557400][ T788] usb 1-1: config 9 interface 57 has no altsetting 0 [ 150.613688][ T788] usb 1-1: string descriptor 0 read error: -22 [ 150.624684][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 150.659782][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.249864][ T788] (null): keene_cmd_main failed (-110) [ 151.262165][ T788] video4linux radio48: keene_cmd_main failed (-32) [ 151.276864][ T788] radio-keene 1-1:9.57: V4L2 device registered as radio48 [ 194.977914][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.984696][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.295149][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 207.301995][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 227.774651][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 256.414471][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.424187][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.609732][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 305.689897][ T29] INFO: task jbd2/sda1-8:5101 blocked for more than 143 seconds. [ 305.697982][ T29] Not tainted syzkaller #0 [ 305.703136][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.712794][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5101 ppid:2 flags:0x00004000 [ 305.722583][ T29] Call Trace: [ 305.725913][ T29] [ 305.728894][ T29] __schedule+0x15ae/0x4660 [ 305.733818][ T29] ? asan.module_dtor+0x20/0x20 [ 305.738982][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.744577][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 305.751457][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 305.757004][ T29] schedule+0xbd/0x170 [ 305.761237][ T29] io_schedule+0x80/0xd0 [ 305.765719][ T29] bit_wait_io+0x11/0xd0 [ 305.770843][ T29] __wait_on_bit+0x9f/0x2c0 [ 305.775424][ T29] ? bit_wait+0xd0/0xd0 [ 305.779909][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 305.785627][ T29] ? bit_wait+0xd0/0xd0 [ 305.795430][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 305.800618][ T29] ? do_raw_write_lock+0x11e/0x260 [ 305.805795][ T29] ? bit_waitqueue+0x30/0x30 [ 305.811554][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 305.816831][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 305.823967][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 305.831519][ T29] ? lock_chain_count+0x20/0x20 [ 305.836539][ T29] ? _raw_spin_unlock+0x40/0x40 [ 305.841740][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 305.848627][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 305.864144][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.869732][ T29] ? timer_delete_sync+0x20/0x20 [ 305.876159][ T29] ? do_raw_read_unlock+0x80/0x80 [ 305.881983][ T29] ? prepare_to_wait+0x1aa/0x200 [ 305.887009][ T29] kjournald2+0x40f/0x810 [ 305.893704][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 305.899626][ T29] ? wake_bit_function+0x200/0x200 [ 305.904886][ T29] ? _raw_spin_unlock+0x40/0x40 [ 305.910265][ T29] ? __kthread_parkme+0x71/0x1c0 [ 305.915443][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 305.920551][ T29] kthread+0x2fa/0x390 [ 305.925321][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 305.931165][ T29] ? kthread_blkcg+0xd0/0xd0 [ 305.936076][ T29] ret_from_fork+0x48/0x80 [ 305.941386][ T29] ? kthread_blkcg+0xd0/0xd0 [ 305.946039][ T29] ret_from_fork_asm+0x11/0x20 [ 305.951001][ T29] [ 305.954163][ T29] INFO: task syz-executor:5761 blocked for more than 143 seconds. [ 305.962154][ T29] Not tainted syzkaller #0 [ 305.967249][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.976545][ T29] task:syz-executor state:D stack:22888 pid:5761 ppid:5760 flags:0x00004002 [ 305.986015][ T29] Call Trace: [ 305.989300][ T29] [ 305.994196][ T29] __schedule+0x15ae/0x4660 [ 305.998955][ T29] ? mark_lock+0x94/0x320 [ 306.003537][ T29] ? asan.module_dtor+0x20/0x20 [ 306.008549][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.013943][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 306.021168][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 306.027466][ T29] schedule+0xbd/0x170 [ 306.031912][ T29] io_schedule+0x80/0xd0 [ 306.036827][ T29] bit_wait_io+0x11/0xd0 [ 306.041634][ T29] __wait_on_bit+0x9f/0x2c0 [ 306.046725][ T29] ? bit_wait+0xd0/0xd0 [ 306.051489][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 306.057955][ T29] ? bit_wait+0xd0/0xd0 [ 306.062683][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 306.068117][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.073460][ T29] ? bit_waitqueue+0x30/0x30 [ 306.078537][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.085139][ T29] do_get_write_access+0x5c9/0xe00 [ 306.091646][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 306.098215][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 306.104727][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.111135][ T29] ? __might_sleep+0xe0/0xe0 [ 306.116084][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 306.122155][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 306.127977][ T29] ext4_dirty_inode+0xcb/0x110 [ 306.133769][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 306.140078][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 306.145424][ T29] file_update_time+0x187/0x1a0 [ 306.150521][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 306.155794][ T29] ? do_wp_page+0x4ce/0x34d0 [ 306.160801][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 306.167740][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.199637][ T29] do_page_mkwrite+0x153/0x3f0 [ 306.204618][ T29] do_wp_page+0xd4d/0x34d0 [ 306.209242][ T29] ? folio_put+0xd0/0xd0 [ 306.213682][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.219096][ T29] ? __rwlock_init+0x150/0x150 [ 306.224045][ T29] handle_mm_fault+0x1306/0x4a50 [ 306.229083][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 306.234184][ T29] ? numa_migrate_prep+0x350/0x350 [ 306.239523][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 306.245132][ T29] do_user_addr_fault+0x736/0x12d0 [ 306.250476][ T29] exc_page_fault+0x64/0x100 [ 306.255367][ T29] ? clear_bhb_loop+0x40/0x90 [ 306.260360][ T29] asm_exc_page_fault+0x26/0x30 [ 306.265960][ T29] RIP: 0033:0x7f41e8a701e3 [ 306.270751][ T29] RSP: 002b:00007ffebc4c0b50 EFLAGS: 00010206 [ 306.278362][ T29] RAX: 00007f41e2bf5d7c RBX: 00007ffebc4c0c80 RCX: 0000000000000000 [ 306.286911][ T29] RDX: 00007f41e2bf5d78 RSI: 0000000000000008 RDI: 00007ffebc4c0c80 [ 306.295389][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 306.304494][ T29] R10: 00007ffebc4c0c60 R11: 0000000000000000 R12: 0000000000000000 [ 306.312641][ T29] R13: 000000000000a284 R14: ffffffffffff5d7c R15: 0000000000000000 [ 306.320876][ T29] [ 306.323971][ T29] INFO: task syz.5.335:6969 blocked for more than 143 seconds. [ 306.332089][ T29] Not tainted syzkaller #0 [ 306.348953][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.359028][ T29] task:syz.5.335 state:D stack:27048 pid:6969 ppid:6281 flags:0x00004004 [ 306.369604][ T29] Call Trace: [ 306.390160][ T29] [ 306.393150][ T29] __schedule+0x15ae/0x4660 [ 306.398174][ T29] ? mark_lock+0x94/0x320 [ 306.403534][ T29] ? asan.module_dtor+0x20/0x20 [ 306.408578][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.414271][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 306.420998][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 306.426456][ T29] schedule+0xbd/0x170 [ 306.430659][ T29] io_schedule+0x80/0xd0 [ 306.435215][ T29] bit_wait_io+0x11/0xd0 [ 306.439759][ T29] __wait_on_bit+0x9f/0x2c0 [ 306.444585][ T29] ? bit_wait+0xd0/0xd0 [ 306.448896][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 306.455337][ T29] ? bit_wait+0xd0/0xd0 [ 306.460123][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 306.465130][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.470594][ T29] ? bit_waitqueue+0x30/0x30 [ 306.475434][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.480947][ T29] do_get_write_access+0x5c9/0xe00 [ 306.486422][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 306.493606][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 306.500178][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.508515][ T29] ? __might_sleep+0xe0/0xe0 [ 306.513673][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 306.519675][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 306.525486][ T29] ext4_dirty_inode+0xcb/0x110 [ 306.530856][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 306.538292][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 306.543880][ T29] file_update_time+0x187/0x1a0 [ 306.549224][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 306.554410][ T29] ? filemap_fault+0x103c/0x1540 [ 306.559625][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 306.565501][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 306.572404][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.577928][ T29] ? __pte_offset_map+0x20d/0x280 [ 306.583365][ T29] do_page_mkwrite+0x153/0x3f0 [ 306.588637][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 306.593753][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 306.599257][ T29] ? numa_migrate_prep+0x350/0x350 [ 306.604493][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 306.611968][ T29] do_user_addr_fault+0x736/0x12d0 [ 306.617576][ T29] exc_page_fault+0x64/0x100 [ 306.622507][ T29] asm_exc_page_fault+0x26/0x30 [ 306.627421][ T29] RIP: 0033:0x7f1a8ac72f32 [ 306.632053][ T29] RSP: 002b:00007ffc148fdc20 EFLAGS: 00010202 [ 306.638917][ T29] RAX: 0000000000004008 RBX: 00007f1a8bb55720 RCX: 0000000000000000 [ 306.647252][ T29] RDX: 0000001b2d320000 RSI: 0000000000000008 RDI: 00007f1a8bb55720 [ 306.655914][ T29] RBP: 00000000000005a7 R08: 00007f1a8b010000 R09: 00007f1a8b026038 [ 306.665035][ T29] R10: 0000000000000007 R11: 0000000000000001 R12: ffffffff8a7ce478 [ 306.673376][ T29] R13: 00007f1a8b026038 R14: 000000000000012f R15: ffffffffffffc000 [ 306.681499][ T29] ? mas_find_setup+0x28/0x590 [ 306.686507][ T29] [ 306.689724][ T29] INFO: task syz.0.336:6977 blocked for more than 144 seconds. [ 306.697381][ T29] Not tainted syzkaller #0 [ 306.702424][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.712355][ T29] task:syz.0.336 state:D stack:27048 pid:6977 ppid:5774 flags:0x00004004 [ 306.725013][ T29] Call Trace: [ 306.728896][ T29] [ 306.732326][ T29] __schedule+0x15ae/0x4660 [ 306.738092][ T29] ? mark_lock+0x94/0x320 [ 306.743221][ T29] ? asan.module_dtor+0x20/0x20 [ 306.748843][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.754448][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 306.760721][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 306.766060][ T29] schedule+0xbd/0x170 [ 306.770753][ T29] io_schedule+0x80/0xd0 [ 306.775520][ T29] bit_wait_io+0x11/0xd0 [ 306.780763][ T29] __wait_on_bit+0x9f/0x2c0 [ 306.786534][ T29] ? bit_wait+0xd0/0xd0 [ 306.791448][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 306.797378][ T29] ? bit_wait+0xd0/0xd0 [ 306.801841][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 306.806657][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.813214][ T29] ? bit_waitqueue+0x30/0x30 [ 306.818190][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.823519][ T29] do_get_write_access+0x5c9/0xe00 [ 306.828710][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 306.835181][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 306.841658][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.848199][ T29] ? __might_sleep+0xe0/0xe0 [ 306.853012][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 306.859257][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 306.865214][ T29] ext4_dirty_inode+0xcb/0x110 [ 306.870514][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 306.876557][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 306.881891][ T29] file_update_time+0x187/0x1a0 [ 306.886919][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 306.897602][ T29] ? filemap_fault+0x103c/0x1540 [ 306.902789][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 306.908661][ T29] ? pte_alloc_one+0x3b6/0x540 [ 306.914635][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 306.921527][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.926939][ T29] do_page_mkwrite+0x153/0x3f0 [ 306.932052][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 306.937300][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 306.943317][ T29] ? numa_migrate_prep+0x350/0x350 [ 306.948825][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 306.954392][ T29] do_user_addr_fault+0x736/0x12d0 [ 306.959910][ T29] exc_page_fault+0x64/0x100 [ 306.964771][ T29] asm_exc_page_fault+0x26/0x30 [ 306.970239][ T29] RIP: 0033:0x7f2335a72809 [ 306.974716][ T29] RSP: 002b:00007ffd8b66d250 EFLAGS: 00010202 [ 306.981332][ T29] RAX: 0000001b2db24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 306.989579][ T29] RDX: 0000001b2db23ffc RSI: 00000000005ffde8 RDI: 00007f2336955700 [ 306.997821][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2335e12000 [ 307.006357][ T29] R10: 00007f2336955700 R11: 0000000000000000 R12: 0000000000000000 [ 307.015426][ T29] R13: 0000000000019f49 R14: ffffffff81321a8e R15: 00007f2336955720 [ 307.024364][ T29] ? fpregs_activate+0x8e/0x1b0 [ 307.029622][ T29] [ 307.032708][ T29] INFO: task syz.4.338:6989 blocked for more than 144 seconds. [ 307.040572][ T29] Not tainted syzkaller #0 [ 307.045772][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.055394][ T29] task:syz.4.338 state:D stack:27560 pid:6989 ppid:6079 flags:0x00004004 [ 307.064986][ T29] Call Trace: [ 307.068774][ T29] [ 307.071812][ T29] __schedule+0x15ae/0x4660 [ 307.076373][ T29] ? mark_lock+0x94/0x320 [ 307.080921][ T29] ? asan.module_dtor+0x20/0x20 [ 307.086865][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 307.092260][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 307.098689][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 307.104172][ T29] schedule+0xbd/0x170 [ 307.108512][ T29] io_schedule+0x80/0xd0 [ 307.112917][ T29] bit_wait_io+0x11/0xd0 [ 307.117465][ T29] __wait_on_bit+0x9f/0x2c0 [ 307.123020][ T29] ? bit_wait+0xd0/0xd0 [ 307.127516][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 307.136325][ T29] ? bit_wait+0xd0/0xd0 [ 307.140692][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 307.145802][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 307.151321][ T29] ? bit_waitqueue+0x30/0x30 [ 307.156328][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 307.162013][ T29] do_get_write_access+0x5c9/0xe00 [ 307.167186][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 307.173675][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 307.179988][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 307.186484][ T29] ? __might_sleep+0xe0/0xe0 [ 307.191395][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 307.197544][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 307.203220][ T29] ext4_dirty_inode+0xcb/0x110 [ 307.208036][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 307.214136][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 307.219235][ T29] file_update_time+0x187/0x1a0 [ 307.224979][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 307.230390][ T29] ? filemap_fault+0x103c/0x1540 [ 307.236106][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 307.242058][ T29] ? pte_alloc_one+0x3b6/0x540 [ 307.246875][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 307.253888][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 307.259139][ T29] do_page_mkwrite+0x153/0x3f0 [ 307.264079][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 307.269257][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 307.274662][ T29] ? numa_migrate_prep+0x350/0x350 [ 307.280043][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 307.285638][ T29] do_user_addr_fault+0x736/0x12d0 [ 307.291433][ T29] exc_page_fault+0x64/0x100 [ 307.296548][ T29] ? clear_bhb_loop+0x40/0x90 [ 307.301547][ T29] asm_exc_page_fault+0x26/0x30 [ 307.306457][ T29] RIP: 0033:0x7fcdef66baa3 [ 307.311112][ T29] RSP: 002b:00007fff55d5e950 EFLAGS: 00010246 [ 307.317408][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2f564000 [ 307.326104][ T29] RDX: 0000001b2f524000 RSI: 0000000000600000 RDI: 00007fcdef9e0708 [ 307.334330][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.342802][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 307.351646][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff55d5ebe0 [ 307.360261][ T29] [ 307.363662][ T29] [ 307.363662][ T29] Showing all locks held in the system: [ 307.371800][ T29] 1 lock held by khungtaskd/29: [ 307.377958][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 307.389794][ T29] 4 locks held by kworker/u4:2/32: [ 307.395064][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 307.406842][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 307.416525][ T29] #2: ffff8880b8e295d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 307.427881][ T29] #3: ffffffff97594938 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x500 [ 307.438438][ T29] 2 locks held by getty/5531: [ 307.443717][ T29] #0: ffff88802cce70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 307.454754][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 307.465568][ T29] 3 locks held by syz-executor/5761: [ 307.471842][ T29] #0: ffff88807a653120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 307.482443][ T29] #1: ffff888030d2e510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 307.492993][ T29] #2: ffff88814ea82990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 307.503358][ T29] 3 locks held by syz.5.335/6969: [ 307.509261][ T29] #0: ffff88802c7c1e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 307.519909][ T29] #1: ffff888030d2e510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 307.531360][ T29] #2: ffff88814ea82990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 307.541607][ T29] 3 locks held by syz.0.336/6977: [ 307.546755][ T29] #0: ffff88802586e0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 307.558019][ T29] #1: ffff888030d2e510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 307.568211][ T29] #2: ffff88814ea82990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 307.578143][ T29] 3 locks held by syz.4.338/6989: [ 307.583253][ T29] #0: ffff888017de5720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 307.593690][ T29] #1: ffff888030d2e510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 307.603687][ T29] #2: ffff88814ea82990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 307.615146][ T29] [ 307.617707][ T29] ============================================= [ 307.617707][ T29] [ 307.626312][ T29] NMI backtrace for cpu 0 [ 307.630687][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 307.638120][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.648379][ T29] Call Trace: [ 307.651799][ T29] [ 307.654873][ T29] dump_stack_lvl+0x18c/0x250 [ 307.659901][ T29] ? __wake_up_klogd+0xd9/0x100 [ 307.664794][ T29] ? show_regs_print_info+0x20/0x20 [ 307.670050][ T29] ? load_image+0x420/0x420 [ 307.674761][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 307.679747][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 307.686138][ T29] ? load_image+0x420/0x420 [ 307.690690][ T29] ? wq_watchdog_touch+0xef/0x170 [ 307.695776][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 307.701914][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 307.708040][ T29] watchdog+0xf59/0xfa0 [ 307.712541][ T29] ? watchdog+0x1e1/0xfa0 [ 307.717814][ T29] kthread+0x2fa/0x390 [ 307.722004][ T29] ? hungtask_pm_notify+0x50/0x50 [ 307.727266][ T29] ? kthread_blkcg+0xd0/0xd0 [ 307.732007][ T29] ret_from_fork+0x48/0x80 [ 307.736468][ T29] ? kthread_blkcg+0xd0/0xd0 [ 307.741170][ T29] ret_from_fork_asm+0x11/0x20 [ 307.746810][ T29] [ 307.751081][ T29] Sending NMI from CPU 0 to CPUs 1: [ 307.756446][ C1] NMI backtrace for cpu 1 [ 307.756459][ C1] CPU: 1 PID: 4230 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 307.756474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.756483][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 307.756506][ C1] RIP: 0010:kasan_check_range+0x89/0x290 [ 307.756528][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 8d 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 307.756540][ C1] RSP: 0018:ffffc9000df67aa0 EFLAGS: 00000246 [ 307.756552][ C1] RAX: ffffffff887cb301 RBX: ffffffffffffffff RCX: ffffffff887cb389 [ 307.756563][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888056e76224 [ 307.756572][ C1] RBP: ffff888056e76140 R08: ffff888056e76227 R09: 1ffff1100adcec44 [ 307.756582][ C1] R10: dffffc0000000000 R11: ffffed100adcec44 R12: 0000000000000001 [ 307.756592][ C1] R13: ffff88805d85d9d8 R14: ffffed100adcec45 R15: 1ffff1100adcec44 [ 307.756602][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 307.756614][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.756625][ C1] CR2: 00007fd205c464c0 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 307.756640][ C1] Call Trace: [ 307.756645][ C1] [ 307.756655][ C1] consume_skb+0x39/0x110 [ 307.756674][ C1] nsim_dev_trap_report_work+0x723/0xa90 [ 307.756696][ C1] ? process_scheduled_works+0x975/0x1600 [ 307.756717][ C1] process_scheduled_works+0xa60/0x1600 [ 307.756750][ C1] ? worker_attach_to_pool+0x370/0x370 [ 307.756772][ C1] ? assign_work+0x3cc/0x5d0 [ 307.756792][ C1] worker_thread+0xa5e/0xfe0 [ 307.756817][ C1] ? _raw_spin_unlock+0x40/0x40 [ 307.756830][ C1] ? __kthread_parkme+0x71/0x1c0 [ 307.756850][ C1] kthread+0x2fa/0x390 [ 307.756863][ C1] ? pr_cont_work+0x550/0x550 [ 307.756881][ C1] ? kthread_blkcg+0xd0/0xd0 [ 307.756895][ C1] ret_from_fork+0x48/0x80 [ 307.756912][ C1] ? kthread_blkcg+0xd0/0xd0 [ 307.756926][ C1] ret_from_fork_asm+0x11/0x20 [ 307.756954][ C1] [ 307.762140][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 307.762156][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 307.762177][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.762187][ T29] Call Trace: [ 307.762194][ T29] [ 307.762201][ T29] dump_stack_lvl+0x18c/0x250 [ 307.762232][ T29] ? show_regs_print_info+0x20/0x20 [ 307.762253][ T29] ? load_image+0x420/0x420 [ 307.762282][ T29] panic+0x2ca/0x720 [ 307.762311][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 307.762335][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 307.762357][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 307.762383][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 307.762412][ T29] watchdog+0xf98/0xfa0 [ 307.762437][ T29] ? watchdog+0x1e1/0xfa0 [ 307.762475][ T29] kthread+0x2fa/0x390 [ 307.762493][ T29] ? hungtask_pm_notify+0x50/0x50 [ 307.762516][ T29] ? kthread_blkcg+0xd0/0xd0 [ 307.762534][ T29] ret_from_fork+0x48/0x80 [ 307.762555][ T29] ? kthread_blkcg+0xd0/0xd0 [ 307.762572][ T29] ret_from_fork_asm+0x11/0x20 [ 307.762607][ T29] [ 307.763942][ T29] Kernel Offset: disabled [ 308.093268][ T29] Rebooting in 86400 seconds..