[ 76.621746][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. 2023/05/14 04:31:21 ignoring optional flag "sandboxArg"="0" 2023/05/14 04:31:22 parsed 1 programs 2023/05/14 04:31:22 executed programs: 0 [ 81.515430][ T4398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.524239][ T4398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.532297][ T4398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.540732][ T4398] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.548090][ T4398] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.640357][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 81.679694][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.687000][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.694496][ T5344] bridge_slave_0: entered allmulticast mode [ 81.701687][ T5344] bridge_slave_0: entered promiscuous mode [ 81.709689][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.717359][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.724685][ T5344] bridge_slave_1: entered allmulticast mode [ 81.731378][ T5344] bridge_slave_1: entered promiscuous mode [ 81.751319][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.762422][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.783667][ T5344] team0: Port device team_slave_0 added [ 81.792104][ T5344] team0: Port device team_slave_1 added [ 81.808658][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.816069][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.843056][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.855611][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.863248][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.889980][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.917775][ T5344] hsr_slave_0: entered promiscuous mode [ 81.924076][ T5344] hsr_slave_1: entered promiscuous mode [ 82.510054][ T5344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.520568][ T5344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.530683][ T5344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.541549][ T5344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.564235][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.571406][ T5344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.580934][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.588789][ T5344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.645394][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.660514][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.672466][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.682264][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.699547][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 82.714320][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.724923][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.735118][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.744204][ T5006] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.751554][ T5006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.773468][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.782933][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.792474][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.799587][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.808463][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.817766][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.827026][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.838074][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.858964][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.868374][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.877918][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.887911][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.896929][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.910911][ T5344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.924209][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.933816][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.943544][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.104034][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.116812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.131768][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.155379][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.165019][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.186969][ T5344] veth0_vlan: entered promiscuous mode [ 83.197504][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.207140][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.220829][ T5344] veth1_vlan: entered promiscuous mode [ 83.228327][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.237141][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.245358][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.269317][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.278651][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.288930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.300842][ T5344] veth0_macvtap: entered promiscuous mode [ 83.309556][ T5344] veth1_macvtap: entered promiscuous mode [ 83.332649][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.340427][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.348642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.358316][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.367318][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.379251][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.388161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.397715][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.409263][ T5344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.419572][ T5344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.428569][ T5344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.438048][ T5344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.506633][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.520594][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.529615][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.554852][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.565102][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.573417][ T4993] Bluetooth: hci0: command 0x0409 tx timeout [ 83.576831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.156948][ T5415] loop0: detected capacity change from 0 to 63271 [ 84.171467][ T5415] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 84.182238][ T5415] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 84.196527][ T5415] F2FS-fs (loop0): invalid crc value [ 84.209241][ T5415] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.266198][ T5415] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.274204][ T5415] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 84.320120][ T27] audit: type=1800 audit(1684038685.119:2): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4 res=0 errno=0 [ 84.414701][ T5415] syz-executor.0: attempt to access beyond end of device [ 84.414701][ T5415] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=63271 [ 85.387210][ T5468] loop0: detected capacity change from 0 to 63271 [ 85.397523][ T5468] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 85.407065][ T5468] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.420769][ T5468] F2FS-fs (loop0): invalid crc value [ 85.429583][ T5468] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.477194][ T5468] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.484479][ T5468] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 85.504696][ T27] audit: type=1800 audit(1684038686.309:3): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4 res=0 errno=0 [ 85.593155][ T5468] syz-executor.0: attempt to access beyond end of device [ 85.593155][ T5468] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=63271 [ 85.650531][ T4398] Bluetooth: hci0: command 0x041b tx timeout [ 86.497688][ T5514] loop0: detected capacity change from 0 to 63271 [ 86.507009][ T5514] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 86.515658][ T5514] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.528279][ T5514] F2FS-fs (loop0): invalid crc value [ 86.537864][ T5514] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.581917][ T5514] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.589102][ T5514] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 86.638118][ T27] audit: type=1800 audit(1684038687.439:4): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4 res=0 errno=0 2023/05/14 04:31:27 executed programs: 3 [ 86.727358][ T5514] syz-executor.0: attempt to access beyond end of device [ 86.727358][ T5514] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=63271 [ 87.619993][ T5561] loop0: detected capacity change from 0 to 63271 [ 87.628020][ T5561] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 87.636917][ T5561] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.648851][ T5561] F2FS-fs (loop0): invalid crc value [ 87.659062][ T5561] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.699504][ T5561] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.706942][ T5561] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 87.729831][ T4398] Bluetooth: hci0: command 0x040f tx timeout [ 87.748381][ T27] audit: type=1800 audit(1684038688.549:5): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4 res=0 errno=0 [ 87.828798][ T5561] syz-executor.0: attempt to access beyond end of device [ 87.828798][ T5561] loop0: rw=2049, sector=77824, nr_sectors = 3208 limit=63271 [ 87.854976][ T5561] syz-executor.0: attempt to access beyond end of device [ 87.854976][ T5561] loop0: rw=2049, sector=81032, nr_sectors = 888 limit=63271 [ 87.892264][ T5561] [ 87.894632][ T5561] ================================================ [ 87.901132][ T5561] WARNING: lock held when returning to user space! [ 87.907638][ T5561] 6.4.0-rc1-syzkaller-00177-gbb7c241fae62 #0 Not tainted [ 87.914664][ T5561] ------------------------------------------------ [ 87.921165][ T5561] syz-executor.0/5561 is leaving the kernel with locks still held! [ 87.929083][ T5561] 1 lock held by syz-executor.0/5561: [ 87.934459][ T5561] #0: ffff88807cb4c448 (&sbi->node_write){++++}-{3:3}, at: f2fs_write_single_data_page+0xa10/0x1d50 [ 89.809952][ T4398] Bluetooth: hci0: command 0x0419 tx timeout