last executing test programs: 7.875082319s ago: executing program 0 (id=145): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.648914444s ago: executing program 0 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffe) accept$inet6(r0, 0x0, 0x0) shutdown(r0, 0x0) 7.302931312s ago: executing program 0 (id=148): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) fcntl$notify(r0, 0x402, 0x80000030) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='net\x00') getdents64(r1, &(0x7f0000000900)=""/4096, 0x1000) 7.040490888s ago: executing program 0 (id=151): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 6.58581066s ago: executing program 0 (id=154): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) 6.137576131s ago: executing program 0 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000002c0)={0x2, 0x6}) 5.807339419s ago: executing program 32 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000002c0)={0x2, 0x6}) 5.288063421s ago: executing program 1 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 4.622321968s ago: executing program 1 (id=176): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r1, 0x402, 0x10) getdents64(r0, 0xffffffffffffffff, 0x43) 4.462737811s ago: executing program 1 (id=178): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$key(0xf, 0x3, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0) 4.226035997s ago: executing program 3 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 3.930009715s ago: executing program 2 (id=182): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) setresuid(0x0, 0xee00, 0x0) fchown(r0, 0x0, 0x0) 3.912724685s ago: executing program 3 (id=183): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0xc7, 0x4, 0x0, 0x1, 0x2000000000010}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x100800, 0x20000}, 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 3.529262184s ago: executing program 2 (id=184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 3.013367997s ago: executing program 2 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.8619312s ago: executing program 3 (id=186): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x5, 0x8003, 0x3}) 2.695035454s ago: executing program 3 (id=187): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x2804f1e, &(0x7f0000000000)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000240)="$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") chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x180) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000e00)={0x17c04, r0, 0x4008009, 0x24000003, 0x400000006, 0x3}) 2.606894116s ago: executing program 2 (id=188): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0xa03) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc}) 2.49839288s ago: executing program 1 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 2.374187562s ago: executing program 2 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.179056517s ago: executing program 1 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0fc5:1227:nh', 0xc) 2.095812619s ago: executing program 3 (id=192): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42000) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.967615262s ago: executing program 1 (id=193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.731410608s ago: executing program 3 (id=194): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x2, 0x1, 0x0, '+c'}, @global=@item_012={0x1, 0x1, 0x3, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, 'C'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_4={0x3, 0x1, 0x3, "35848577"}]}}, 0x0}, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=195): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) read(r0, &(0x7f0000000840)=""/40, 0x28) openat$sequencer2(0xffffff9c, 0x0, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 91.792392][ T5767] cgroup: Unknown subsys name 'net' [ 91.932138][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.683539][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.850700][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.860271][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.862643][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.873457][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.891428][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.902362][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.910403][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.918866][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.926048][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.935213][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.943347][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.966939][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.975612][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.983724][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.993156][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.002010][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.005176][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.012259][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.025427][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.032677][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.034528][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.048090][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.054934][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.058177][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.636299][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 96.666260][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 96.761635][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 96.806934][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 96.847515][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.854985][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.862555][ T5782] bridge_slave_0: entered allmulticast mode [ 96.870728][ T5782] bridge_slave_0: entered promiscuous mode [ 96.950190][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.957649][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.965831][ T5782] bridge_slave_1: entered allmulticast mode [ 96.978337][ T5782] bridge_slave_1: entered promiscuous mode [ 97.066124][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.073779][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.080993][ T5783] bridge_slave_0: entered allmulticast mode [ 97.089518][ T5783] bridge_slave_0: entered promiscuous mode [ 97.109813][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.133422][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.142917][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.150222][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.157998][ T5783] bridge_slave_1: entered allmulticast mode [ 97.165695][ T5783] bridge_slave_1: entered promiscuous mode [ 97.178969][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.187056][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.194472][ T5779] bridge_slave_0: entered allmulticast mode [ 97.202167][ T5779] bridge_slave_0: entered promiscuous mode [ 97.248197][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.255558][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.262773][ T5779] bridge_slave_1: entered allmulticast mode [ 97.270262][ T5779] bridge_slave_1: entered promiscuous mode [ 97.317956][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.349965][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.360362][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.368025][ T5780] bridge_slave_0: entered allmulticast mode [ 97.378436][ T5780] bridge_slave_0: entered promiscuous mode [ 97.390648][ T5782] team0: Port device team_slave_0 added [ 97.400600][ T5782] team0: Port device team_slave_1 added [ 97.408805][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.431132][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.453568][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.460832][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.470290][ T5780] bridge_slave_1: entered allmulticast mode [ 97.477673][ T5780] bridge_slave_1: entered promiscuous mode [ 97.500081][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.513762][ T5783] team0: Port device team_slave_0 added [ 97.556327][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.563692][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.590452][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.629579][ T5783] team0: Port device team_slave_1 added [ 97.658375][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.666518][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.693259][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.716273][ T5779] team0: Port device team_slave_0 added [ 97.740081][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.754674][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.788089][ T5779] team0: Port device team_slave_1 added [ 97.808416][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.822298][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.848924][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.878295][ T5782] hsr_slave_0: entered promiscuous mode [ 97.885229][ T5782] hsr_slave_1: entered promiscuous mode [ 97.927300][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.934443][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.960554][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.976986][ T5796] Bluetooth: hci2: command tx timeout [ 98.005017][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.012021][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.038826][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.065929][ T5780] team0: Port device team_slave_0 added [ 98.104096][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.111132][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.134839][ T5785] Bluetooth: hci1: command tx timeout [ 98.139518][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.153546][ T5090] Bluetooth: hci3: command tx timeout [ 98.159291][ T5796] Bluetooth: hci0: command tx timeout [ 98.176674][ T5780] team0: Port device team_slave_1 added [ 98.205162][ T5783] hsr_slave_0: entered promiscuous mode [ 98.211787][ T5783] hsr_slave_1: entered promiscuous mode [ 98.218551][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.226714][ T5783] Cannot create hsr debugfs directory [ 98.305717][ T5779] hsr_slave_0: entered promiscuous mode [ 98.312669][ T5779] hsr_slave_1: entered promiscuous mode [ 98.320035][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.328430][ T5779] Cannot create hsr debugfs directory [ 98.366778][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.374031][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.400406][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.420145][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.427218][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.453255][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.644470][ T5780] hsr_slave_0: entered promiscuous mode [ 98.651042][ T5780] hsr_slave_1: entered promiscuous mode [ 98.658388][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.666123][ T5780] Cannot create hsr debugfs directory [ 98.795634][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.816157][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.871879][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.908974][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.066971][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.080875][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.104973][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.116622][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.202124][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.242145][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.254132][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.268315][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.366006][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.380511][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.407520][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.421328][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.490490][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.564116][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.580339][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.605326][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.613056][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.642723][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.650005][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.701007][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.725696][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.732981][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.756477][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.763760][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.804538][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.817380][ T23] cfg80211: failed to load regulatory.db [ 99.881819][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.939800][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.965354][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.972608][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.004991][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.012190][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.053282][ T5796] Bluetooth: hci2: command tx timeout [ 100.068079][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.102484][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.109744][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.189610][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.196923][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.213780][ T5796] Bluetooth: hci1: command tx timeout [ 100.224699][ T5796] Bluetooth: hci0: command tx timeout [ 100.230201][ T5796] Bluetooth: hci3: command tx timeout [ 100.381385][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.587383][ T5782] veth0_vlan: entered promiscuous mode [ 100.638092][ T5782] veth1_vlan: entered promiscuous mode [ 100.738545][ T5782] veth0_macvtap: entered promiscuous mode [ 100.781440][ T5782] veth1_macvtap: entered promiscuous mode [ 100.824865][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.851479][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.877945][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.897470][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.917932][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.928545][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.940190][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.949449][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.070006][ T5783] veth0_vlan: entered promiscuous mode [ 101.149840][ T5783] veth1_vlan: entered promiscuous mode [ 101.163919][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.208272][ T5779] veth0_vlan: entered promiscuous mode [ 101.226394][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.251751][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.289560][ T5779] veth1_vlan: entered promiscuous mode [ 101.331114][ T5783] veth0_macvtap: entered promiscuous mode [ 101.349654][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.366368][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.404845][ T5783] veth1_macvtap: entered promiscuous mode [ 101.419114][ T5780] veth0_vlan: entered promiscuous mode [ 101.464900][ T5780] veth1_vlan: entered promiscuous mode [ 101.496822][ T5779] veth0_macvtap: entered promiscuous mode [ 101.516397][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.531891][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.551108][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.581427][ T5779] veth1_macvtap: entered promiscuous mode [ 101.601255][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.616489][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.629252][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.671246][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.680634][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.691230][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.700564][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.758500][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.771431][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.787775][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.799524][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.813482][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.821761][ T5780] veth0_macvtap: entered promiscuous mode [ 101.880610][ T5780] veth1_macvtap: entered promiscuous mode [ 101.899376][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.911490][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.928956][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.940008][ T5854] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.940708][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.969646][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.040169][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.049927][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.060705][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.070557][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.090114][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.106092][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.116651][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.127551][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.139466][ T5796] Bluetooth: hci2: command tx timeout [ 102.145103][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.156085][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.169142][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.229875][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.241865][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.254652][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.272107][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.287781][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.300546][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.303444][ T5796] Bluetooth: hci3: command tx timeout [ 102.316176][ T5090] Bluetooth: hci0: command tx timeout [ 102.317927][ T5785] Bluetooth: hci1: command tx timeout [ 102.330605][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.347534][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.365015][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.374587][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.385586][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.395202][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.412646][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.504592][ T5768] IPVS: starting estimator thread 0... [ 102.564469][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.572518][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.614004][ T5860] IPVS: using max 20 ests per chain, 48000 per kthread [ 102.662468][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.684236][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.739699][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.765176][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.905034][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.928374][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.075288][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.094435][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.201356][ T5865] syz.3.4 (5865) used greatest stack depth: 19888 bytes left [ 103.410928][ T5871] Zero length message leads to an empty skb [ 103.805855][ T5883] cgroup: fork rejected by pids controller in /syz1 [ 104.033484][ T5892] zero sized request [ 104.095016][ T5895] syz.2.21[5895]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.185202][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 104.217252][ T5785] Bluetooth: hci2: command tx timeout [ 104.310245][ T5895] loop2: detected capacity change from 0 to 8192 [ 104.338509][ T5895] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 104.375760][ T5785] Bluetooth: hci1: command tx timeout [ 104.376114][ T5796] Bluetooth: hci3: command tx timeout [ 104.473839][ T5895] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 104.513278][ T5895] ntfs3: loop2: Failed to load $Extend (-2). [ 104.519376][ T5895] ntfs3: loop2: Failed to initialize $Extend. [ 104.693895][ T1123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.758007][ T5905] loop3: detected capacity change from 0 to 256 [ 104.846334][ T5905] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 105.004244][ T1123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.471039][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 105.522223][ T5915] dummy0: entered promiscuous mode [ 105.716074][ T5920] sd 0:0:1:0: PR command failed: 1026 [ 105.721622][ T5920] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 105.728876][ T5920] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 105.810239][ T1123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.967039][ T1123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.988911][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.004577][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.024772][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.063430][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.075840][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.085511][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.208600][ T5935] comedi comedi4: bad chanlist[0]=0x000000d1 chan=209 range length=2 [ 106.445237][ T5937] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 106.552504][ T5940] loop3: detected capacity change from 0 to 1024 [ 106.666187][ T5940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.725563][ T5940] EXT4-fs error (device loop3): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.3.41: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 106.919883][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.159479][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 107.265135][ T5960] loop2: detected capacity change from 0 to 128 [ 107.294514][ T5960] EXT4-fs: Ignoring removed orlov option [ 107.374996][ T5960] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.430314][ T5960] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.510577][ T5960] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz.2.46: No space for directory leaf checksum. Please run e2fsck -D. [ 107.527543][ T5960] EXT4-fs error (device loop2): __ext4_find_entry:1698: inode #11: comm syz.2.46: checksumming directory block 0 [ 107.774407][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.889830][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 108.040560][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.071509][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.093223][ T5926] bridge_slave_0: entered allmulticast mode [ 108.100934][ T5926] bridge_slave_0: entered promiscuous mode [ 108.124402][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.135942][ T5796] Bluetooth: hci0: command tx timeout [ 108.162468][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.170631][ T5926] bridge_slave_1: entered allmulticast mode [ 108.178303][ T5926] bridge_slave_1: entered promiscuous mode [ 108.196271][ T5988] loop0: detected capacity change from 0 to 2048 [ 108.339162][ T5992] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.366027][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.482395][ T28] audit: type=1800 audit(1791205268.809:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.52" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 108.509303][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.538359][ T5988] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 108.708823][ T5926] team0: Port device team_slave_0 added [ 108.743638][ T6000] loop3: detected capacity change from 0 to 512 [ 108.872225][ T5926] team0: Port device team_slave_1 added [ 108.961517][ T6006] mmap: syz.0.59 (6006) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.984247][ T6000] EXT4-fs (loop3): Test dummy encryption mode enabled [ 108.991298][ T6000] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.023236][ T6000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.089514][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.57: bad orphan inode 131083 [ 109.112612][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.267889][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.298899][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.372950][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.472141][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.495227][ T6000] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 109.496840][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.583067][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.689962][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.956254][ T1123] hsr_slave_0: left promiscuous mode [ 109.966999][ T1123] hsr_slave_1: left promiscuous mode [ 109.991336][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.010713][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.035864][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.066282][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.082320][ T1123] bridge_slave_1: left allmulticast mode [ 110.102969][ T1123] bridge_slave_1: left promiscuous mode [ 110.110540][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.149550][ T1123] bridge_slave_0: left allmulticast mode [ 110.163367][ T1123] bridge_slave_0: left promiscuous mode [ 110.169329][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.257736][ T1123] veth1_macvtap: left promiscuous mode [ 110.273722][ T1123] veth0_macvtap: left promiscuous mode [ 110.279770][ T1123] veth1_vlan: left promiscuous mode [ 110.300203][ T1123] veth0_vlan: left promiscuous mode [ 110.686500][ T6054] loop0: detected capacity change from 0 to 128 [ 110.875275][ T6054] syz.0.72: attempt to access beyond end of device [ 110.875275][ T6054] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 110.929918][ T6060] syz.0.72: attempt to access beyond end of device [ 110.929918][ T6060] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 110.948857][ T6060] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 111.719498][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 111.850403][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 111.886457][ T6066] loop3: detected capacity change from 0 to 40427 [ 111.899279][ T6066] ======================================================= [ 111.899279][ T6066] WARNING: The mand mount option has been deprecated and [ 111.899279][ T6066] and is ignored by this kernel. Remove the mand [ 111.899279][ T6066] option from the mount to silence this warning. [ 111.899279][ T6066] ======================================================= [ 111.958526][ T6066] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 111.975549][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.024710][ T6066] F2FS-fs (loop3): invalid crc value [ 112.058053][ T6075] use of bytesused == 0 is deprecated and will be removed in the future, [ 112.084358][ T6066] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.090910][ T6075] use the actual size instead. [ 112.129170][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.254116][ T6066] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.902355][ T1123] bond0 (unregistering): Released all slaves [ 112.978001][ T5926] hsr_slave_0: entered promiscuous mode [ 112.984782][ T5926] hsr_slave_1: entered promiscuous mode [ 112.991237][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.998954][ T5926] Cannot create hsr debugfs directory [ 113.036918][ T6078] macvtap1: entered promiscuous mode [ 113.249983][ T6086] rnbd_client L203: map_device: Unknown parameter or missing value 'se' [ 113.528369][ T6094] loop2: detected capacity change from 0 to 1024 [ 113.632157][ T6094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.663079][ T6094] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.774186][ T6101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.813003][ T28] audit: type=1800 audit(1791205275.142:3): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.87" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.877469][ T6094] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.87: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.965990][ T6094] EXT4-fs error (device loop2): ext4_ext_remove_space:2957: inode #15: comm syz.2.87: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 114.124762][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.808908][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.861117][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.885149][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.912755][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.219694][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.302472][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.349869][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.357131][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.411228][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.418548][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.037537][ T6162] bonding: bond0 is being created... [ 116.088710][ T6162] bonding: bond0 already exists [ 116.108576][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.257051][ T5926] veth0_vlan: entered promiscuous mode [ 116.311407][ T5926] veth1_vlan: entered promiscuous mode [ 116.478402][ T5926] veth0_macvtap: entered promiscuous mode [ 116.519323][ T5926] veth1_macvtap: entered promiscuous mode [ 116.585846][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 116.589389][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.627171][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.658626][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.682948][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.713006][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.743045][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.775377][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.797158][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 116.838215][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.861503][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.882107][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.905253][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.933882][ T6159] syz.3.106 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 116.952903][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.976707][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.999168][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.047270][ T5926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.072885][ T5926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.094316][ T5926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.112449][ T5926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.353021][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.371944][ T6188] pim6reg: entered allmulticast mode [ 117.381234][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.429747][ T6187] pim6reg: left allmulticast mode [ 117.530119][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.549965][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.303994][ T6225] loop1: detected capacity change from 0 to 512 [ 118.383029][ T6225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.410820][ T6225] EXT4-fs (loop1): 1 truncate cleaned up [ 118.448121][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.530923][ T28] audit: type=1800 audit(1791205279.852:4): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.124" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 118.636513][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 118.779123][ T5926] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.329245][ T6266] loop1: detected capacity change from 0 to 512 [ 119.435833][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.618199][ T6266] fs-verity: sha256 using implementation "sha256-avx2" [ 119.683359][ T6266] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.135: verity is only allowed on extent-based files [ 119.749498][ T6278] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.135: verity is only allowed on extent-based files [ 119.901635][ T5926] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.377025][ T6297] loop3: detected capacity change from 0 to 4096 [ 120.398243][ T6297] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 120.585406][ T6297] ntfs: volume version 3.1. [ 121.070485][ T6315] loop2: detected capacity change from 0 to 128 [ 121.345437][ T6317] loop0: detected capacity change from 0 to 2048 [ 121.406378][ T6317] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 121.432024][ T6317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.616564][ T5782] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 121.654228][ T5782] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 122.145745][ T6334] netem: change failed [ 122.231482][ T1086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.318672][ T1086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.388779][ T1086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.519579][ T1086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.246100][ T6363] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 123.296937][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.307556][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.316919][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.352746][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.361012][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.371949][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.535504][ T6374] netlink: 'syz.2.174': attribute type 5 has an invalid length. [ 123.756008][ T6382] loop2: detected capacity change from 0 to 64 [ 123.997849][ T5779] hfs: node 4:3 still has 1 user(s)! [ 124.202740][ T5859] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.335556][ T6399] loop2: detected capacity change from 0 to 4096 [ 124.353783][ T6399] EXT4-fs: inline encryption not supported [ 124.395665][ T6399] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.405311][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 124.422739][ T6399] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.438083][ T5859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.465685][ T6399] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 124.467565][ T5859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.475780][ T6399] System zones: 0-5 [ 124.497505][ T5859] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.507255][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.518280][ T6399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.532233][ T5859] usb 2-1: Product: syz [ 124.544031][ T5859] usb 2-1: Manufacturer: syz [ 124.549224][ T5859] usb 2-1: SerialNumber: syz [ 124.708555][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.823730][ T5859] usb 2-1: 0:2 : does not exist [ 124.839667][ T5859] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 124.995041][ T5859] usb 2-1: USB disconnect, device number 2 [ 125.079699][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 125.122391][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.236446][ T1086] hsr_slave_0: left promiscuous mode [ 125.258779][ T1086] hsr_slave_1: left promiscuous mode [ 125.301392][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.316471][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.336150][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.353064][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.405062][ T1086] bridge_slave_1: left allmulticast mode [ 125.410828][ T1086] bridge_slave_1: left promiscuous mode [ 125.417738][ T5796] Bluetooth: hci2: command tx timeout [ 125.435834][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.457928][ T1086] bridge_slave_0: left allmulticast mode [ 125.469715][ T1086] bridge_slave_0: left promiscuous mode [ 125.480108][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.577899][ T1086] veth1_macvtap: left promiscuous mode [ 125.591888][ T1086] veth0_macvtap: left promiscuous mode [ 125.604413][ T1086] veth1_vlan: left promiscuous mode [ 125.609898][ T1086] veth0_vlan: left promiscuous mode [ 125.629304][ T6421] loop3: detected capacity change from 0 to 512 [ 125.691557][ T6421] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.187: iget: bad extended attribute block 134217728 [ 125.760476][ T6421] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.187: couldn't read orphan inode 15 (err -117) [ 125.802550][ T6421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.953038][ T28] audit: type=1800 audit(1791205287.282:5): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.187" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 125.994430][ T6421] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.187: invalid indirect mapped block 768 (level 1) [ 126.122167][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.606239][ T174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.804747][ T174] usb 2-1: Using ep0 maxpacket: 32 [ 126.807680][ T5784] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 126.841998][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.869088][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.889152][ T174] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.898889][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.914182][ T174] usb 2-1: config 0 descriptor?? [ 126.960541][ T174] hub 2-1:0.0: USB hub found [ 127.023349][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.052604][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.062612][ T5784] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.088628][ T5784] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.100063][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.137644][ T5784] usb 4-1: config 0 descriptor?? [ 127.154509][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 127.229067][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 127.298041][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.381029][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.493294][ T5796] Bluetooth: hci2: command tx timeout [ 127.939203][ T1086] bond0 (unregistering): Released all slaves [ 128.360472][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.369442][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.377596][ T6365] bridge_slave_0: entered allmulticast mode [ 128.386597][ T6365] bridge_slave_0: entered promiscuous mode [ 128.399414][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.408345][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.430670][ T6365] bridge_slave_1: entered allmulticast mode [ 128.448143][ T6365] bridge_slave_1: entered promiscuous mode [ 128.531979][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.578261][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.620050][ T1086] IPVS: stop unused estimator thread 0... [ 128.662077][ T6365] team0: Port device team_slave_0 added [ 128.703611][ T6365] team0: Port device team_slave_1 added [ 128.771851][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.788464][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.823559][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.842583][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.857288][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.893397][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.011174][ T6365] hsr_slave_0: entered promiscuous mode [ 129.028067][ T6365] hsr_slave_1: entered promiscuous mode [ 129.490052][ T6365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.519032][ T6365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.532625][ T6365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.548344][ T6365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.573208][ T5796] Bluetooth: hci2: command tx timeout [ 129.829238][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.872084][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.912277][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.919591][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.967547][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.974848][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.450516][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.200763][ T6365] veth0_vlan: entered promiscuous mode [ 131.236017][ T6365] veth1_vlan: entered promiscuous mode [ 131.327684][ T6365] veth0_macvtap: entered promiscuous mode [ 131.366333][ T6365] veth1_macvtap: entered promiscuous mode [ 131.401140][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.413742][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.425006][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.440632][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.456198][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.469083][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.487994][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.521998][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.534460][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.551217][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.563006][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.582210][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.600631][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.614352][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.637787][ T6365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.654899][ T5796] Bluetooth: hci2: command tx timeout [ 131.660163][ T6365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.670079][ T6365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.682342][ T6365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.874921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.898674][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.956342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.965659][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.064024][ T174] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 132.089352][ T174] usbhid 2-1:0.0: can't add hid device: -32 [ 132.100108][ T174] usbhid: probe of 2-1:0.0 failed with error -32 [ 132.231512][ T5784] usbhid 4-1:0.0: can't add hid device: -32 [ 132.238268][ T5784] usbhid: probe of 4-1:0.0 failed with error -32 [ 135.657530][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.664789][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.096225][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.102662][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.653294][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 245.263002][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 250.383087][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 258.538514][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.546602][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.813237][ T29] INFO: task kworker/u4:13:2936 blocked for more than 143 seconds. [ 275.821326][ T29] Not tainted syzkaller #0 [ 275.826419][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.835282][ T29] task:kworker/u4:13 state:D stack:21976 pid:2936 ppid:2 flags:0x00004000 [ 275.844699][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 275.850922][ T29] Call Trace: [ 275.857917][ T29] [ 275.860945][ T29] __schedule+0x15ae/0x4660 [ 275.868147][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 275.879834][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 275.886275][ T29] ? preempt_schedule_common+0x82/0xc0 [ 275.891802][ T29] ? asan.module_dtor+0x20/0x20 [ 275.904521][ T29] ? blk_check_plugged+0x250/0x250 [ 275.909754][ T29] ? wq_worker_sleeping+0x63/0x240 [ 275.918565][ T29] schedule+0xbd/0x170 [ 275.923953][ T29] io_schedule+0x80/0xd0 [ 275.928279][ T29] bit_wait_io+0x11/0xd0 [ 275.932590][ T29] __wait_on_bit+0x9f/0x2c0 [ 275.940523][ T29] ? bit_wait+0xd0/0xd0 [ 275.946891][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 275.952442][ T29] ? bit_wait+0xd0/0xd0 [ 275.960190][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 275.967357][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 275.973965][ T29] ? bit_waitqueue+0x30/0x30 [ 275.978794][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 275.984678][ T29] do_get_write_access+0x5c9/0xe00 [ 275.989893][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 275.996220][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 276.002464][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 276.008956][ T29] ext4_mb_mark_diskspace_used+0x1c3/0x14b0 [ 276.016051][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 276.021156][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 276.027469][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 276.032795][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 276.037877][ T29] ? rcu_is_watching+0x15/0xb0 [ 276.042718][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 276.048573][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 276.055489][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 276.060884][ T29] ? __might_sleep+0xe0/0xe0 [ 276.065617][ T29] ? ext4_ext_release+0x10/0x10 [ 276.070523][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.076982][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 276.082514][ T29] ext4_map_blocks+0x9db/0x1a90 [ 276.087562][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 276.092869][ T29] ? rcu_is_watching+0x15/0xb0 [ 276.103536][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 276.109292][ T29] ext4_do_writepages+0x1463/0x3990 [ 276.118101][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 276.125233][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 276.130851][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 276.142854][ T29] ext4_writepages+0x1dd/0x350 [ 276.147723][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 276.152695][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 276.160473][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 276.166189][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 276.171455][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 276.180544][ T29] do_writepages+0x351/0x590 [ 276.185337][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 276.191118][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 276.200353][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.205599][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 276.210691][ T29] __writeback_single_inode+0x14e/0xee0 [ 276.216529][ T29] writeback_sb_inodes+0x813/0x1020 [ 276.221846][ T29] ? queue_io+0x530/0x530 [ 276.226498][ T29] __writeback_inodes_wb+0x114/0x240 [ 276.231873][ T29] wb_writeback+0x472/0xbe0 [ 276.236563][ T29] ? queue_io+0x341/0x530 [ 276.240952][ T29] ? percpu_ref_tryget+0x250/0x250 [ 276.246389][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 276.252426][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.257757][ T29] wb_workfn+0xad7/0xe60 [ 276.262108][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 276.267965][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 276.274114][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.279843][ T29] ? read_lock_is_recursive+0x20/0x20 [ 276.285369][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.290638][ T29] ? process_scheduled_works+0x975/0x1600 [ 276.296649][ T29] ? process_scheduled_works+0x975/0x1600 [ 276.302458][ T29] process_scheduled_works+0xa60/0x1600 [ 276.308263][ T29] ? worker_attach_to_pool+0x370/0x370 [ 276.313894][ T29] ? assign_work+0x3cc/0x5d0 [ 276.318582][ T29] worker_thread+0xa5e/0xfe0 [ 276.323389][ T29] kthread+0x2fa/0x390 [ 276.327528][ T29] ? pr_cont_work+0x550/0x550 [ 276.332327][ T29] ? kthread_blkcg+0xd0/0xd0 [ 276.337192][ T29] ret_from_fork+0x48/0x80 [ 276.341643][ T29] ? kthread_blkcg+0xd0/0xd0 [ 276.346339][ T29] ret_from_fork_asm+0x11/0x20 [ 276.351214][ T29] [ 276.354735][ T29] INFO: task syz-executor:6365 blocked for more than 143 seconds. [ 276.362590][ T29] Not tainted syzkaller #0 [ 276.367641][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.376938][ T29] task:syz-executor state:D stack:21712 pid:6365 ppid:6336 flags:0x00004000 [ 276.387214][ T29] Call Trace: [ 276.390572][ T29] [ 276.393686][ T29] __schedule+0x15ae/0x4660 [ 276.398402][ T29] ? lock_chain_count+0x20/0x20 [ 276.403388][ T29] ? asan.module_dtor+0x20/0x20 [ 276.408302][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 276.413693][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.419937][ T29] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 276.425985][ T29] schedule+0xbd/0x170 [ 276.430105][ T29] io_schedule+0x80/0xd0 [ 276.434510][ T29] bit_wait_io+0x11/0xd0 [ 276.438817][ T29] __wait_on_bit+0x9f/0x2c0 [ 276.443639][ T29] ? bit_wait+0xd0/0xd0 [ 276.447869][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 276.453616][ T29] ? bit_wait+0xd0/0xd0 [ 276.457863][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 276.462672][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 276.467964][ T29] ? bit_waitqueue+0x30/0x30 [ 276.472873][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 276.478154][ T29] do_get_write_access+0x5c9/0xe00 [ 276.484317][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 276.490389][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 276.496713][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 276.504121][ T29] __ext4_new_inode+0x140c/0x3aa0 [ 276.510116][ T29] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 276.516922][ T29] ? dquot_initialize+0x20/0x20 [ 276.521835][ T29] ext4_mkdir+0x40b/0xc90 [ 276.526305][ T29] ? ext4_symlink+0x940/0x940 [ 276.531041][ T29] ? inode_permission+0xf3/0x480 [ 276.536484][ T29] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 276.541594][ T29] ? security_inode_mkdir+0xb7/0x100 [ 276.547005][ T29] vfs_mkdir+0x2a5/0x470 [ 276.551331][ T29] do_mkdirat+0x1dc/0x450 [ 276.556206][ T29] ? vfs_mkdir+0x470/0x470 [ 276.560706][ T29] __x64_sys_mkdirat+0x89/0xa0 [ 276.565624][ T29] do_syscall_64+0x55/0xb0 [ 276.570106][ T29] ? clear_bhb_loop+0x40/0x90 [ 276.574927][ T29] ? clear_bhb_loop+0x40/0x90 [ 276.579846][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.586078][ T29] RIP: 0033:0x7f78a4d9d007 [ 276.590563][ T29] RSP: 002b:00007ffc19e7a988 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 276.599250][ T29] RAX: ffffffffffffffda RBX: 00007f78a4e34afc RCX: 00007f78a4d9d007 [ 276.608071][ T29] RDX: 00000000000001ff RSI: 00007f78a4e34afc RDI: 00000000ffffff9c [ 276.618913][ T29] RBP: 00007f78a50267b8 R08: 0000000000000000 R09: 0000000000000000 [ 276.628348][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 276.636624][ T29] R13: 0000000000000003 R14: 00007ffc19e7abf8 R15: 0000000000000000 [ 276.644775][ T29] [ 276.647848][ T29] INFO: task syz.1.193:6441 blocked for more than 144 seconds. [ 276.655565][ T29] Not tainted syzkaller #0 [ 276.660545][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.669531][ T29] task:syz.1.193 state:D stack:27048 pid:6441 ppid:5926 flags:0x00004004 [ 276.678948][ T29] Call Trace: [ 276.682293][ T29] [ 276.686564][ T29] __schedule+0x15ae/0x4660 [ 276.691194][ T29] ? mark_lock+0x94/0x320 [ 276.695807][ T29] ? asan.module_dtor+0x20/0x20 [ 276.700738][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.705886][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 276.711857][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 276.717243][ T29] schedule+0xbd/0x170 [ 276.721398][ T29] io_schedule+0x80/0xd0 [ 276.725834][ T29] bit_wait_io+0x11/0xd0 [ 276.730135][ T29] __wait_on_bit+0x9f/0x2c0 [ 276.734823][ T29] ? bit_wait+0xd0/0xd0 [ 276.739042][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 276.744620][ T29] ? bit_wait+0xd0/0xd0 [ 276.748838][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 276.753786][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 276.758881][ T29] ? bit_waitqueue+0x30/0x30 [ 276.763788][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 276.769065][ T29] do_get_write_access+0x5c9/0xe00 [ 276.775000][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 276.781089][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 276.789485][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 276.795823][ T29] ? __might_sleep+0xe0/0xe0 [ 276.800476][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 276.807246][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 276.812905][ T29] ext4_dirty_inode+0xcb/0x110 [ 276.817752][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 276.823788][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 276.828915][ T29] file_update_time+0x187/0x1a0 [ 276.833924][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 276.839009][ T29] ? filemap_fault+0x103c/0x1540 [ 276.844129][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 276.849919][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 276.856305][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.861389][ T29] ? __pte_offset_map+0x20d/0x280 [ 276.866608][ T29] do_page_mkwrite+0x153/0x3f0 [ 276.871444][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 276.876581][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 276.881628][ T29] ? numa_migrate_prep+0x350/0x350 [ 276.887111][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 276.893234][ T29] do_user_addr_fault+0x736/0x12d0 [ 276.898455][ T29] exc_page_fault+0x64/0x100 [ 276.903532][ T29] asm_exc_page_fault+0x26/0x30 [ 276.908455][ T29] RIP: 0033:0x7f432ce72f72 [ 276.913007][ T29] RSP: 002b:00007fffe12825a0 EFLAGS: 00010202 [ 276.919157][ T29] RAX: 0000000000001008 RBX: 00007f432dd55720 RCX: 0000000000000000 [ 276.927337][ T29] RDX: 0000001b2e423000 RSI: 0000000000000008 RDI: 00007f432dd55720 [ 276.935510][ T29] RBP: 000000000000063d R08: 0000000000000000 R09: 00007f432d226038 [ 276.943685][ T29] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff8554c3dc [ 276.951718][ T29] R13: 00007f432d226038 R14: 0000000000000200 R15: fffffffffffff000 [ 276.959822][ T29] ? __pm_runtime_idle+0x2c/0x1a0 [ 276.965072][ T29] [ 276.968215][ T29] INFO: task syz.3.194:6446 blocked for more than 144 seconds. [ 276.978667][ T29] Not tainted syzkaller #0 [ 276.983765][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.993578][ T29] task:syz.3.194 state:D stack:27048 pid:6446 ppid:5783 flags:0x00004004 [ 277.002948][ T29] Call Trace: [ 277.007540][ T29] [ 277.010541][ T29] __schedule+0x15ae/0x4660 [ 277.015642][ T29] ? mark_lock+0x94/0x320 [ 277.020414][ T29] ? asan.module_dtor+0x20/0x20 [ 277.025440][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 277.030644][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 277.038475][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 277.043823][ T29] schedule+0xbd/0x170 [ 277.047942][ T29] io_schedule+0x80/0xd0 [ 277.052203][ T29] bit_wait_io+0x11/0xd0 [ 277.056693][ T29] __wait_on_bit+0x9f/0x2c0 [ 277.061263][ T29] ? bit_wait+0xd0/0xd0 [ 277.065576][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 277.071081][ T29] ? bit_wait+0xd0/0xd0 [ 277.075365][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 277.080177][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 277.085335][ T29] ? bit_waitqueue+0x30/0x30 [ 277.089980][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 277.096059][ T29] do_get_write_access+0x5c9/0xe00 [ 277.101336][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 277.107860][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 277.114309][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 277.120568][ T29] ? __might_sleep+0xe0/0xe0 [ 277.125318][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 277.130930][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 277.136576][ T29] ext4_dirty_inode+0xcb/0x110 [ 277.141401][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 277.147354][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 277.152440][ T29] file_update_time+0x187/0x1a0 [ 277.157493][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 277.162579][ T29] ? filemap_fault+0x103c/0x1540 [ 277.167676][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 277.173972][ T29] ? pte_alloc_one+0x3b6/0x540 [ 277.178814][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 277.185244][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 277.190334][ T29] do_page_mkwrite+0x153/0x3f0 [ 277.195247][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 277.200985][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 277.206127][ T29] ? numa_migrate_prep+0x350/0x350 [ 277.211320][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 277.216937][ T29] do_user_addr_fault+0x736/0x12d0 [ 277.222153][ T29] exc_page_fault+0x64/0x100 [ 277.226924][ T29] asm_exc_page_fault+0x26/0x30 [ 277.231896][ T29] RIP: 0033:0x7f86f7a72849 [ 277.236458][ T29] RSP: 002b:00007ffea99f6800 EFLAGS: 00010202 [ 277.242578][ T29] RAX: 0000001b2e424000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 277.250674][ T29] RDX: 0000001b2e423ffc RSI: 00000000005ffde8 RDI: 00007f86f8955700 [ 277.258796][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f86f7e12000 [ 277.267198][ T29] R10: 00007f86f8955700 R11: 0000000000000000 R12: 0000000000000000 [ 277.275343][ T29] R13: 00000000000111cb R14: ffffffff8132211e R15: 00007f86f8955720 [ 277.283718][ T29] ? fpregs_activate+0x8e/0x1b0 [ 277.288674][ T29] [ 277.291750][ T29] INFO: task syz.2.195:6451 blocked for more than 144 seconds. [ 277.300069][ T29] Not tainted syzkaller #0 [ 277.305163][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.313962][ T29] task:syz.2.195 state:D stack:27560 pid:6451 ppid:5779 flags:0x00004004 [ 277.323513][ T29] Call Trace: [ 277.326867][ T29] [ 277.329853][ T29] __schedule+0x15ae/0x4660 [ 277.334855][ T29] ? mark_lock+0x94/0x320 [ 277.339251][ T29] ? asan.module_dtor+0x20/0x20 [ 277.344220][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 277.349308][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 277.356423][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 277.361688][ T29] schedule+0xbd/0x170 [ 277.365874][ T29] io_schedule+0x80/0xd0 [ 277.370169][ T29] bit_wait_io+0x11/0xd0 [ 277.374559][ T29] __wait_on_bit+0x9f/0x2c0 [ 277.379130][ T29] ? bit_wait+0xd0/0xd0 [ 277.383428][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 277.388942][ T29] ? bit_wait+0xd0/0xd0 [ 277.393218][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 277.398037][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 277.404256][ T29] ? bit_waitqueue+0x30/0x30 [ 277.408938][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 277.414705][ T29] do_get_write_access+0x5c9/0xe00 [ 277.419911][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 277.425998][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 277.432235][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 277.438710][ T29] ? __might_sleep+0xe0/0xe0 [ 277.443456][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 277.449068][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 277.454766][ T29] ext4_dirty_inode+0xcb/0x110 [ 277.459593][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 277.465589][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 277.470734][ T29] file_update_time+0x187/0x1a0 [ 277.475751][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 277.480828][ T29] ? filemap_fault+0x103c/0x1540 [ 277.485903][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 277.491764][ T29] ? pte_alloc_one+0x3b6/0x540 [ 277.497104][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 277.503502][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 277.509155][ T29] do_page_mkwrite+0x153/0x3f0 [ 277.514150][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 277.519169][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 277.524244][ T29] ? numa_migrate_prep+0x350/0x350 [ 277.529438][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 277.534891][ T29] do_user_addr_fault+0x736/0x12d0 [ 277.540187][ T29] exc_page_fault+0x64/0x100 [ 277.545118][ T29] ? clear_bhb_loop+0x40/0x90 [ 277.549861][ T29] asm_exc_page_fault+0x26/0x30 [ 277.554875][ T29] RIP: 0033:0x7fc31046bae3 [ 277.559346][ T29] RSP: 002b:00007fff1c292040 EFLAGS: 00010246 [ 277.565564][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2dd64000 [ 277.573797][ T29] RDX: 0000001b2dd24000 RSI: 0000000000600000 RDI: 00007fc3107e1708 [ 277.581845][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.589998][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 277.598141][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff1c2922d0 [ 277.606304][ T29] [ 277.610040][ T29] [ 277.610040][ T29] Showing all locks held in the system: [ 277.618021][ T29] 1 lock held by khungtaskd/29: [ 277.622998][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 277.633103][ T29] 3 locks held by kworker/u4:9/1111: [ 277.638475][ T29] 6 locks held by kworker/u4:13/2936: [ 277.643970][ T29] #0: ffff888141e5a938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 277.655640][ T29] #1: ffffc9000be77d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 277.668267][ T29] #2: ffff88807e47c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 277.678972][ T29] #3: ffff88807e47ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 277.689852][ T29] #4: ffff88814e798990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.699790][ T29] #5: ffff888077095288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 277.710282][ T29] 2 locks held by getty/5536: [ 277.715204][ T29] #0: ffff888030fea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 277.725392][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 277.736438][ T29] 3 locks held by syz-executor/5767: [ 277.741774][ T29] #0: ffff88807b439e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.752401][ T29] #1: ffff88807e47c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.762387][ T29] #2: ffff88814e798990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.772374][ T29] 3 locks held by syz-executor/6365: [ 277.777782][ T29] #0: ffff88807e47c418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 277.787071][ T29] #1: ffff88805b523610 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 277.797953][ T29] #2: ffff88814e798990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.808898][ T29] 3 locks held by syz.1.193/6441: [ 277.815109][ T29] #0: ffff88807b4ca7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.825254][ T29] #1: ffff88807e47c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.835213][ T29] #2: ffff88814e798990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.845076][ T29] 3 locks held by syz.3.194/6446: [ 277.850141][ T29] #0: ffff88802eeec420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.860221][ T29] #1: ffff88807e47c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.870140][ T29] #2: ffff88814e798990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.880130][ T29] 3 locks held by syz.2.195/6451: [ 277.885255][ T29] #0: ffff88807b4cc420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.895388][ T29] #1: ffff88807e47c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.905318][ T29] #2: ffff88814e798990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.915945][ T29] [ 277.918330][ T29] ============================================= [ 277.918330][ T29] [ 277.926930][ T29] NMI backtrace for cpu 1 [ 277.931365][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 277.938623][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.948730][ T29] Call Trace: [ 277.952189][ T29] [ 277.955146][ T29] dump_stack_lvl+0x18c/0x250 [ 277.959891][ T29] ? __wake_up_klogd+0xd9/0x100 [ 277.964774][ T29] ? show_regs_print_info+0x20/0x20 [ 277.969995][ T29] ? load_image+0x420/0x420 [ 277.974531][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 277.979491][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 277.985688][ T29] ? load_image+0x420/0x420 [ 277.990244][ T29] ? wq_watchdog_touch+0xef/0x170 [ 277.995412][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 278.001540][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 278.007561][ T29] watchdog+0xf59/0xfa0 [ 278.011773][ T29] ? watchdog+0x1e1/0xfa0 [ 278.016143][ T29] kthread+0x2fa/0x390 [ 278.020250][ T29] ? hungtask_pm_notify+0x50/0x50 [ 278.025311][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.029937][ T29] ret_from_fork+0x48/0x80 [ 278.034391][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.039014][ T29] ret_from_fork_asm+0x11/0x20 [ 278.043828][ T29] [ 278.047643][ T29] Sending NMI from CPU 1 to CPUs 0: [ 278.053246][ C0] NMI backtrace for cpu 0 [ 278.053258][ C0] CPU: 0 PID: 5829 Comm: kworker/0:3 Not tainted syzkaller #0 [ 278.053290][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.053301][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 278.053337][ C0] RIP: 0010:lock_release+0x134/0x8c0 [ 278.053363][ C0] Code: 04 28 84 c0 0f 85 38 05 00 00 83 3b 00 0f 85 6e 04 00 00 4c 89 74 24 10 43 c6 44 2f 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 <9c> 8f 84 24 a0 00 00 00 48 8b 84 24 a0 00 00 00 48 89 44 24 50 43 [ 278.053383][ C0] RSP: 0018:ffffc9000477fa40 EFLAGS: 00000246 [ 278.053396][ C0] RAX: 0000000000000000 RBX: ffff88807fb728e4 RCX: 5617d011982bdc00 [ 278.053408][ C0] RDX: 0000000000000000 RSI: ffffffff8b1d4000 RDI: ffffffff8b1d3fc0 [ 278.053418][ C0] RBP: ffffc9000477fb48 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 278.053430][ C0] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffffffff85b94442 [ 278.053442][ C0] R13: dffffc0000000000 R14: ffff88807fb71e00 R15: 1ffff920008eff54 [ 278.053454][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 278.053468][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.053479][ C0] CR2: 000055ea46136660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 278.053494][ C0] Call Trace: [ 278.053500][ C0] [ 278.053511][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 278.053535][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 278.053554][ C0] ? __rwlock_init+0x150/0x150 [ 278.053581][ C0] _raw_spin_unlock+0x16/0x40 [ 278.053606][ C0] wg_ratelimiter_gc_entries+0x382/0x450 [ 278.053630][ C0] ? process_scheduled_works+0x975/0x1600 [ 278.053654][ C0] process_scheduled_works+0xa60/0x1600 [ 278.053692][ C0] ? worker_attach_to_pool+0x370/0x370 [ 278.053717][ C0] ? assign_work+0x3cc/0x5d0 [ 278.053742][ C0] worker_thread+0xa5e/0xfe0 [ 278.053770][ C0] ? _raw_spin_unlock+0x40/0x40 [ 278.053790][ C0] ? __kthread_parkme+0x71/0x1c0 [ 278.053812][ C0] kthread+0x2fa/0x390 [ 278.053828][ C0] ? pr_cont_work+0x550/0x550 [ 278.053862][ C0] ? kthread_blkcg+0xd0/0xd0 [ 278.053879][ C0] ret_from_fork+0x48/0x80 [ 278.053899][ C0] ? kthread_blkcg+0xd0/0xd0 [ 278.053916][ C0] ret_from_fork_asm+0x11/0x20 [ 278.053947][ C0] [ 278.057279][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 278.285828][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 278.293096][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.303194][ T29] Call Trace: [ 278.306533][ T29] [ 278.309497][ T29] dump_stack_lvl+0x18c/0x250 [ 278.314231][ T29] ? show_regs_print_info+0x20/0x20 [ 278.319473][ T29] ? load_image+0x420/0x420 [ 278.324034][ T29] panic+0x2ca/0x720 [ 278.327975][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 278.332515][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 278.338106][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 278.343523][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 278.349729][ T29] watchdog+0xf98/0xfa0 [ 278.353933][ T29] ? watchdog+0x1e1/0xfa0 [ 278.358335][ T29] kthread+0x2fa/0x390 [ 278.362461][ T29] ? hungtask_pm_notify+0x50/0x50 [ 278.367531][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.372195][ T29] ret_from_fork+0x48/0x80 [ 278.376665][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.381320][ T29] ret_from_fork_asm+0x11/0x20 [ 278.386182][ T29] [ 278.389920][ T29] Kernel Offset: disabled [ 278.394303][ T29] Rebooting in 86400 seconds..