last executing test programs:
3.115004168s ago: executing program 0 (id=98):
r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000440)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x80085502, &(0x7f0000000480)=0x18)
2.99693123s ago: executing program 3 (id=100):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000b40)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x275a, 0x0)
2.841095544s ago: executing program 3 (id=101):
add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b0500303431323030061c553d030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e4681047", 0x2de, 0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
2.489654392s ago: executing program 1 (id=102):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}}, 0x0)
2.417866554s ago: executing program 2 (id=103):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x127a, 0x0)
2.324414556s ago: executing program 0 (id=104):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940100, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0xa, 0x1, 0x1}, 0x20)
2.314917486s ago: executing program 2 (id=105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x15)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/54, 0x36}], 0x1)
2.14535231s ago: executing program 0 (id=106):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='H', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="46e2", 0x2}], 0x1}}], 0x2, 0x200400d1)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8)
2.140283251s ago: executing program 1 (id=107):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1010801, &(0x7f0000000140)=ANY=[], 0x1, 0x21d, &(0x7f00000005c0)="$eJzsmb9rFEEUx78zu7d7RhEstLA5i4ARzN7unkoai9iKICSilodZQ3STk8sVuYBgsLHxD/AfUUhlYWcjFlYWKggWprRRcGR+5eZu3XUvEhvfpxi+8/bNm3lvd9/CHQiC+G/59PHbh6dXFpbPAziGWYTG/sUb+XDH//0zr2Hkq43jD3cn4zEAQozm/h/2D3AULxc94JEOK8R34V6fNTGXwZWW3ADHOaNvgiGyZxUSLTMwJMZ8Dwy3je4dMSLP2J1evnJ3Lc9iOSRySOXQAcTY+fd2GFYANM0WzDnf5nD7fjcH+lrkmRUNYfcpXKojZDWspap+6nyLHJedEsj7devJ4x05j4w9duqXgO/XpgOGJaMXECKKopaZZomT/2lfPwcyvidv21j+dXNr1nMOD1q1CXFivtLHJqEsHv5urwrxUxxK5OBAt2BqEdRxlueYfgveKq4KposTVPg0S14/Nmlhzss2PLW3+7q46vNhlfcfCNW4ABQuvZ3J82uu5c1VI06OxTnj1scR9gksfSR0/2A+cNbpT77zVWgP1h+0N4fb82vr3dVsNdtI086l+EIcX0zbqjfrsaL/NVV/mnHiN0p8AxZgqzsY9JMtYNBP9uepHkcJYOl576taw1X/45j7IYT9vKi0w9/vob5/oV7H1GzOKz08QRAEQRAEQRAEQRAEQRBEBa13BQtewPxWyex/YkX89Lry/hUAAP//0rVdsA==")
r0 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
2.081456062s ago: executing program 2 (id=108):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='sessname=s', 0xa)
1.940224495s ago: executing program 2 (id=109):
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
1.927388255s ago: executing program 0 (id=110):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872424db6f0e)
897.686619ms ago: executing program 0 (id=111):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000002c0)='./file0\x00', 0x98, &(0x7f0000001180), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
897.510819ms ago: executing program 1 (id=112):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp852'}}, {@part={'part', 0x3d, 0x5}}]}, 0x9, 0x344, &(0x7f0000000d00)="$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")
mkdir(&(0x7f0000000000)='127.0.0.1:/\x00', 0x1bf)
r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
876.07197ms ago: executing program 3 (id=113):
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
keyctl$clear(0x5, 0xfffffffffffffffe)
request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0)
721.285003ms ago: executing program 3 (id=114):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000001200)="070000000000000001000000ffffffff")
455.01617ms ago: executing program 1 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r0, &(0x7f0000000680)='ofb', 0x3)
330.031242ms ago: executing program 2 (id=116):
unshare(0x22020400)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, &(0x7f0000003700))
280.284133ms ago: executing program 3 (id=117):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
preadv(r0, 0x0, 0x0, 0x7, 0x8)
243.930464ms ago: executing program 1 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e6509", 0x5, 0x2)
219.164015ms ago: executing program 0 (id=119):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="5b06c7046185", 0x6}], 0x4, 0x0, 0x0, 0x20000004}], 0x1, 0x8080)
130.401787ms ago: executing program 3 (id=120):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xd}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
128.921957ms ago: executing program 2 (id=121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'vcan0\x00', 0x400})
0s ago: executing program 1 (id=122):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)="306663353a313232373a62616b7e896f62", 0x11)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts.
[ 81.529749][ T5761] cgroup: Unknown subsys name 'net'
[ 81.668827][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 83.371319][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 85.530559][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.541430][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 85.550908][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 85.558312][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.569716][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 85.577644][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.590518][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.608863][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 85.629542][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 85.649121][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.657149][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 85.673765][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 85.689729][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 85.709906][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 85.710730][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 85.734322][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 85.741930][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 85.749435][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 85.757065][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 85.766273][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 85.769403][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 85.787914][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 85.795789][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 85.796211][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 85.857197][ T5772] (null): rxe_set_mtu: Set mtu to 1024
[ 85.875338][ T5779] (null): rxe_set_mtu: Set mtu to 1024
[ 85.893390][ T5778] (null): rxe_set_mtu: Set mtu to 1024
[ 85.899266][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[ 85.906934][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[ 85.916112][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[ 85.923162][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[ 85.949487][ T5777] (null): rxe_set_mtu: Set mtu to 1024
[ 85.955839][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[ 86.025010][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.291138][ T5772] infiniband rxe0: set active
[ 86.297962][ T5772] infiniband rxe0: added rxe_eth0
[ 86.340686][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.411191][ T5772] RDS/IB: rxe0: added
[ 86.416011][ T5772] smc: adding ib device rxe0 with port count 1
[ 86.454244][ T5772] smc: ib device rxe0 port 1 has pnetid
[ 86.504468][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.544644][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.770110][ T5777] chnl_net:caif_netlink_parms(): no params data found
[ 86.792693][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.805849][ T5778] chnl_net:caif_netlink_parms(): no params data found
[ 86.828548][ T5779] chnl_net:caif_netlink_parms(): no params data found
[ 87.171686][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[ 87.403951][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.412112][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.423870][ T5777] bridge_slave_0: entered allmulticast mode
[ 87.431975][ T5777] bridge_slave_0: entered promiscuous mode
[ 87.444842][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.453150][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.463859][ T5778] bridge_slave_0: entered allmulticast mode
[ 87.471466][ T5778] bridge_slave_0: entered promiscuous mode
[ 87.483417][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.498852][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.506198][ T5779] bridge_slave_0: entered allmulticast mode
[ 87.514264][ T5779] bridge_slave_0: entered promiscuous mode
[ 87.527683][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.535171][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.546634][ T5779] bridge_slave_1: entered allmulticast mode
[ 87.554416][ T5779] bridge_slave_1: entered promiscuous mode
[ 87.569817][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.577185][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.584955][ T5777] bridge_slave_1: entered allmulticast mode
[ 87.592905][ T5777] bridge_slave_1: entered promiscuous mode
[ 87.614133][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.621807][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.629653][ T5778] bridge_slave_1: entered allmulticast mode
[ 87.637662][ T5778] bridge_slave_1: entered promiscuous mode
[ 87.690454][ T5772] rxe_eth0 speed is unknown, defaulting to 1000
[ 87.701097][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.759594][ T5780] Bluetooth: hci0: command tx timeout
[ 87.769243][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.782592][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.814269][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.838902][ T5780] Bluetooth: hci2: command tx timeout
[ 87.844934][ T5780] Bluetooth: hci1: command tx timeout
[ 87.850992][ T5086] Bluetooth: hci3: command tx timeout
[ 87.854419][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.925451][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.025679][ T5778] team0: Port device team_slave_0 added
[ 88.052373][ T5777] team0: Port device team_slave_0 added
[ 88.062200][ T5778] team0: Port device team_slave_1 added
[ 88.072396][ T5777] team0: Port device team_slave_1 added
[ 88.108635][ T5779] team0: Port device team_slave_0 added
[ 88.116057][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.125474][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.151623][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.194751][ T5779] team0: Port device team_slave_1 added
[ 88.213488][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.222502][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.248920][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.299975][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.306999][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.333426][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.347567][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.354699][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.381034][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.394516][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.401788][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.427776][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.466622][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.473818][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.500112][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.562610][ T5777] hsr_slave_0: entered promiscuous mode
[ 88.569789][ T5777] hsr_slave_1: entered promiscuous mode
[ 88.629634][ T5778] hsr_slave_0: entered promiscuous mode
[ 88.636550][ T5778] hsr_slave_1: entered promiscuous mode
[ 88.643557][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.651517][ T5778] Cannot create hsr debugfs directory
[ 88.693323][ T5779] hsr_slave_0: entered promiscuous mode
[ 88.702748][ T5779] hsr_slave_1: entered promiscuous mode
[ 88.709355][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.716939][ T5779] Cannot create hsr debugfs directory
[ 89.161542][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.195236][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.226507][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.238199][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.265571][ T5772] chnl_net:caif_netlink_parms(): no params data found
[ 89.349334][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 89.361238][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 89.396290][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 89.410759][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 89.446254][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.453977][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.464661][ T5772] bridge_slave_0: entered allmulticast mode
[ 89.472076][ T5772] bridge_slave_0: entered promiscuous mode
[ 89.481167][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.488336][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.499199][ T5772] bridge_slave_1: entered allmulticast mode
[ 89.506256][ T5772] bridge_slave_1: entered promiscuous mode
[ 89.587732][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.614401][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.636362][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 89.666821][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 89.677485][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 89.689966][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 89.704740][ T5772] team0: Port device team_slave_0 added
[ 89.717821][ T5772] team0: Port device team_slave_1 added
[ 89.793237][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.801833][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.830593][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.843480][ T5780] Bluetooth: hci0: command tx timeout
[ 89.858369][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.866719][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.894160][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.921388][ T5775] Bluetooth: hci3: command tx timeout
[ 89.926879][ T5775] Bluetooth: hci2: command tx timeout
[ 89.935086][ T5780] Bluetooth: hci1: command tx timeout
[ 89.983650][ T5772] hsr_slave_0: entered promiscuous mode
[ 89.990282][ T5772] hsr_slave_1: entered promiscuous mode
[ 89.996591][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 90.009999][ T5772] Cannot create hsr debugfs directory
[ 90.164784][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.208424][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.256769][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.314326][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.325324][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.333527][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.365315][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.402471][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.409725][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.431153][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.438297][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.486686][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.494043][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.509994][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 90.520941][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 90.578469][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 90.596212][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 90.613461][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.663397][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.670816][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.706638][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.714125][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.906846][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 91.022796][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.065541][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.116020][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.176543][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.183810][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.235265][ T55] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.242594][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.284865][ T5778] veth0_vlan: entered promiscuous mode
[ 91.357437][ T5778] veth1_vlan: entered promiscuous mode
[ 91.427755][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.465790][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 91.477427][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 91.516192][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.592195][ T5778] veth0_macvtap: entered promiscuous mode
[ 91.633324][ T5778] veth1_macvtap: entered promiscuous mode
[ 91.722083][ T5779] veth0_vlan: entered promiscuous mode
[ 91.730680][ T5777] veth0_vlan: entered promiscuous mode
[ 91.758072][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.801415][ T5779] veth1_vlan: entered promiscuous mode
[ 91.822719][ T5777] veth1_vlan: entered promiscuous mode
[ 91.834084][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.850880][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.861380][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.870196][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.879942][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.919394][ T5780] Bluetooth: hci0: command tx timeout
[ 91.933607][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.005342][ T5780] Bluetooth: hci1: command tx timeout
[ 92.012245][ T5775] Bluetooth: hci2: command tx timeout
[ 92.017713][ T5775] Bluetooth: hci3: command tx timeout
[ 92.057538][ T5779] veth0_macvtap: entered promiscuous mode
[ 92.077431][ T5777] veth0_macvtap: entered promiscuous mode
[ 92.123847][ T5779] veth1_macvtap: entered promiscuous mode
[ 92.138150][ T5777] veth1_macvtap: entered promiscuous mode
[ 92.198312][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.208124][ T5772] veth0_vlan: entered promiscuous mode
[ 92.214981][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.232118][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 92.245767][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.257854][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.286399][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 92.297911][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.310700][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.324477][ T5772] veth1_vlan: entered promiscuous mode
[ 92.334710][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 92.347062][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.357082][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 92.368062][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.380404][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.411400][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.420219][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.429547][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.438312][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.474358][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 92.486028][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.497260][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 92.508125][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.520311][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.531927][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.542359][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.572047][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.584739][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.594163][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.603035][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.703139][ T5772] veth0_macvtap: entered promiscuous mode
[ 92.756025][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.768523][ T5772] veth1_macvtap: entered promiscuous mode
[ 92.781638][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.915070][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 92.923035][ T5868] syz.0.1[5868]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 92.927878][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.947438][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.954921][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.978433][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 92.990989][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 93.004544][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 93.016264][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 93.034329][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.115416][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 93.126532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.140947][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.149769][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 93.168137][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 93.187287][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 93.197524][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 93.222940][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 93.237608][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.294492][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.321058][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.343910][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.373300][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.404840][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.426127][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.519316][ T55] Bluetooth: hci4: Frame reassembly failed (-84)
[ 93.539323][ T55] Bluetooth: hci4: Frame reassembly failed (-84)
[ 93.714196][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.736606][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.782301][ T5868] loop0: detected capacity change from 0 to 40427
[ 93.808908][ T5868] F2FS-fs (loop0): Invalid SB checksum offset: 0
[ 93.815564][ T5868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 93.831967][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.860514][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.894641][ T5868] F2FS-fs (loop0): invalid crc value
[ 93.999698][ T5780] Bluetooth: hci0: command tx timeout
[ 94.081392][ T5086] Bluetooth: hci1: command tx timeout
[ 94.085464][ T5787] Bluetooth: hci2: command tx timeout
[ 94.086942][ T5780] Bluetooth: hci3: command tx timeout
[ 94.177283][ T5868] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[ 94.187864][ T5868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 94.437389][ T5778] syz-executor: attempt to access beyond end of device
[ 94.437389][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 94.479888][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 94.579649][ T5893] Zero length message leads to an empty skb
[ 94.676660][ T5895] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure
[ 95.094424][ T5905] loop0: detected capacity change from 0 to 1024
[ 95.220171][ T5905] hfsplus: invalid length 29440 has been corrected to 255
[ 95.520131][ T5780] Bluetooth: hci4: command 0x1003 tx timeout
[ 95.527064][ T5775] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 95.660277][ T5925] loop3: detected capacity change from 0 to 128
[ 95.695724][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 95.714105][ T5924] capability: warning: `syz.2.25' uses 32-bit capabilities (legacy support in use)
[ 95.739875][ T5925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 95.760690][ T5925] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 95.910640][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 95.976580][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 96.038593][ T5935] loop1: detected capacity change from 0 to 256
[ 96.120056][ T5839] usb 1-1: Using ep0 maxpacket: 8
[ 96.172773][ T5839] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 96.194035][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 96.224152][ T5935] FAT-fs (loop1): Directory bread(block 64) failed
[ 96.241058][ T5839] usb 1-1: Product: syz
[ 96.247815][ T5935] FAT-fs (loop1): Directory bread(block 65) failed
[ 96.258734][ T5839] usb 1-1: Manufacturer: syz
[ 96.263610][ T5839] usb 1-1: SerialNumber: syz
[ 96.270673][ T5935] FAT-fs (loop1): Directory bread(block 66) failed
[ 96.277413][ T5935] FAT-fs (loop1): Directory bread(block 67) failed
[ 96.295842][ T5839] usb 1-1: config 0 descriptor??
[ 96.305416][ T5935] FAT-fs (loop1): Directory bread(block 68) failed
[ 96.325823][ T5935] FAT-fs (loop1): Directory bread(block 69) failed
[ 96.337508][ T5839] gspca_main: se401-2.14.0 probing 047d:5003
[ 96.365565][ T5935] FAT-fs (loop1): Directory bread(block 70) failed
[ 96.382950][ T5935] FAT-fs (loop1): Directory bread(block 71) failed
[ 96.409263][ T5935] FAT-fs (loop1): Directory bread(block 72) failed
[ 96.426285][ T5935] FAT-fs (loop1): Directory bread(block 73) failed
[ 96.741034][ T5839] gspca_se401: Bayer format not supported!
[ 97.016736][ T8] usb 1-1: USB disconnect, device number 2
[ 97.301804][ T9] cfg80211: failed to load regulatory.db
[ 97.338853][ T5966] loop3: detected capacity change from 0 to 8
[ 97.378049][ T5948] loop2: detected capacity change from 0 to 40427
[ 97.400583][ T5966] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 97.411993][ T5948] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64)
[ 97.419961][ T5966] SQUASHFS error: Failed to read block 0x9b: -5
[ 97.429451][ T5948] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 97.437921][ T5966] SQUASHFS error: Unable to read metadata cache entry [99]
[ 97.448894][ T5948] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[ 97.460585][ T5966] SQUASHFS error: Unable to read inode 0x127
[ 97.483019][ T5948] F2FS-fs (loop2): invalid crc value
[ 97.534463][ T5948] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 97.728196][ T5948] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[ 97.735659][ T5974] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET)
[ 97.762937][ T5948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 97.885894][ T27] audit: type=1800 audit(1792033263.594:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file1" dev="loop2" ino=10 res=0 errno=0
[ 97.941759][ T5979] loop1: detected capacity change from 0 to 1024
[ 97.974349][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.48'.
[ 98.002526][ T5779] syz-executor: attempt to access beyond end of device
[ 98.002526][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 98.036899][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[ 98.421376][ T5991] loop1: detected capacity change from 0 to 8
[ 98.429321][ T5991] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 98.458243][ T5795] udevd[5795]: incorrect cramfs checksum on /dev/loop1
[ 98.565104][ T5795] udevd[5795]: incorrect cramfs checksum on /dev/loop1
[ 98.823248][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[ 98.867923][ T6004] loop1: detected capacity change from 0 to 512
[ 98.933721][ T6004] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.60: bg 0: block 5: invalid block bitmap
[ 99.011247][ T6004] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[ 99.070767][ T6004] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.60: invalid indirect mapped block 3 (level 2)
[ 99.127221][ T6004] EXT4-fs (loop1): 1 orphan inode deleted
[ 99.148261][ T6004] EXT4-fs (loop1): 1 truncate cleaned up
[ 99.160276][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 99.238303][ T27] audit: type=1800 audit(1792033264.954:3): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.60" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 99.322751][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 99.748906][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 99.928944][ T8] usb 2-1: Using ep0 maxpacket: 8
[ 99.946889][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 99.955550][ T8] usb 2-1: config 179 has no interface number 0
[ 99.962175][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 99.980666][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 99.996396][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 100.013452][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 100.025210][ T8] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 100.045381][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 100.054693][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 100.080596][ T6026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 100.527190][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 100.535678][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 100.544960][ T5841] usb 2-1: USB disconnect, device number 2
[ 101.296181][ T6065] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.73'.
[ 101.456816][ T6071] program syz.1.76 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 101.888845][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 101.939672][ T6093] loop0: detected capacity change from 0 to 512
[ 101.957912][ T6093] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.85: inode has both inline data and extents flags
[ 101.973454][ T6093] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.85: couldn't read orphan inode 15 (err -117)
[ 101.993078][ T6093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 102.052866][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 102.078932][ T5839] usb 4-1: Using ep0 maxpacket: 8
[ 102.094937][ T5839] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 102.116326][ T5839] usb 4-1: config 179 has no interface number 0
[ 102.123572][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 102.134914][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 102.146367][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 102.158230][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 102.170326][ T5839] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 102.183986][ T5839] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 102.195254][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 102.210562][ T6078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 102.568483][ T9] usb 4-1: USB disconnect, device number 2
[ 102.568494][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 102.569001][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 102.604547][ T6105] loop0: detected capacity change from 0 to 1024
[ 103.185132][ T6126] loop1: detected capacity change from 0 to 8192
[ 103.198295][ T6128] loop3: detected capacity change from 0 to 256
[ 103.222873][ T6126] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 103.268164][ T6126] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[ 103.309200][ T6126] REISERFS (device loop1): using ordered data mode
[ 103.318080][ T6126] reiserfs: using flush barriers
[ 103.327479][ T6126] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 103.345836][ T6126] REISERFS (device loop1): checking transaction log (loop1)
[ 103.521183][ T6126] REISERFS (device loop1): Using tea hash to sort names
[ 103.534961][ T6126] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[ 103.550552][ T6126] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[ 103.618459][ T6126] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2)
[ 103.681540][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 103.868799][ T23] usb 4-1: Using ep0 maxpacket: 16
[ 103.890732][ T23] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 103.912239][ T23] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 103.935306][ T23] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[ 103.968787][ T23] usb 4-1: config 0 interface 0 has no altsetting 0
[ 103.978992][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 103.996180][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 104.020689][ T23] usb 4-1: config 0 descriptor??
[ 104.097822][ T6143] loop1: detected capacity change from 0 to 16
[ 104.154352][ T6145] rnbd_client L213: map_device: Parameters missing
[ 104.190239][ T6143] erofs: (device loop1): mounted with root inode @ nid 36.
[ 104.226261][ T6143] process 'syz.1.107' launched '/dev/fd/4' with NULL argv: empty string added
[ 104.257175][ T6143] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 104.457360][ T23] hid (null): report_id 34376 is invalid
[ 104.463349][ T23] hid (null): invalid report_size 29285
[ 104.469261][ T23] hid (null): invalid report_size 29285
[ 104.474931][ T23] hid (null): report_id 34376 is invalid
[ 104.480771][ T23] hid (null): report_id 0 is invalid
[ 104.486120][ T23] hid (null): global environment stack underflow
[ 104.492784][ T23] hid (null): unknown global tag 0xc
[ 104.498368][ T23] hid (null): unknown global tag 0xe
[ 104.503763][ T23] hid (null): unknown global tag 0xc
[ 104.509574][ T23] hid (null): unknown global tag 0xc
[ 104.579488][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 104.675084][ T23] usb 4-1: USB disconnect, device number 3
[ 104.788779][ T9] usb 3-1: Using ep0 maxpacket: 8
[ 104.795933][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 104.804570][ T9] usb 3-1: config 179 has no interface number 0
[ 104.811252][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 104.822749][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 104.834182][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 104.845582][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 104.859056][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 104.872475][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 104.881790][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 104.893573][ T6148] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 105.188173][ T5839] usb 3-1: USB disconnect, device number 2
[ 105.188208][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 105.202879][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 105.333549][ T6155] loop1: detected capacity change from 0 to 64
[ 105.404720][ T6152] loop0: detected capacity change from 0 to 8192
[ 105.446783][ T6152] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 105.473362][ T6152] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 105.483487][ T6152] REISERFS (device loop0): using ordered data mode
[ 105.491520][ T6152] reiserfs: using flush barriers
[ 105.507297][ T6152] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 105.526870][ T6152] REISERFS (device loop0): checking transaction log (loop0)
[ 105.588529][ T6155] hfs: request for non-existent node 131072 in B*Tree
[ 105.603322][ T6155] hfs: request for non-existent node 131072 in B*Tree
[ 105.634698][ T6152] REISERFS (device loop0): Using tea hash to sort names
[ 105.659599][ T6152] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[ 105.685711][ T6152] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 105.831338][ T6152] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2)
[ 106.113980][ T6171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.120'.
[ 133.132534][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.141227][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 194.562206][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.568706][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 212.004699][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[ 212.011373][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[ 212.011400][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[ 212.017597][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[ 256.001844][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 256.008246][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 265.599088][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds.
[ 265.613248][ T29] Not tainted syzkaller #0
[ 265.619812][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 265.648770][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5103 ppid:2 flags:0x00004000
[ 265.661148][ T29] Call Trace:
[ 265.666862][ T29]
[ 265.672211][ T29] __schedule+0x15ae/0x4660
[ 265.680182][ T29] ? asan.module_dtor+0x20/0x20
[ 265.689524][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 265.695864][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 265.703956][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 265.710318][ T29] schedule+0xbd/0x170
[ 265.715556][ T29] io_schedule+0x80/0xd0
[ 265.723044][ T29] bit_wait_io+0x11/0xd0
[ 265.729593][ T29] __wait_on_bit+0x9f/0x2c0
[ 265.736210][ T29] ? bit_wait+0xd0/0xd0
[ 265.742728][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 265.750793][ T29] ? bit_wait+0xd0/0xd0
[ 265.759282][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 265.766216][ T29] ? do_raw_write_lock+0x11e/0x260
[ 265.772992][ T29] ? bit_waitqueue+0x30/0x30
[ 265.779860][ T29] ? do_raw_read_unlock+0x3d/0x80
[ 265.786953][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0
[ 265.802495][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[ 265.817013][ T29] ? lock_chain_count+0x20/0x20
[ 265.825883][ T29] ? _raw_spin_unlock+0x40/0x40
[ 265.836180][ T29] ? __try_to_del_timer_sync+0x1c2/0x280
[ 265.844784][ T29] ? __timer_delete_sync+0x23d/0x2e0
[ 265.853711][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 265.860678][ T29] ? timer_delete_sync+0x20/0x20
[ 265.868119][ T29] ? do_raw_read_unlock+0x80/0x80
[ 265.876407][ T29] ? prepare_to_wait+0x1aa/0x200
[ 265.882916][ T29] kjournald2+0x40f/0x810
[ 265.887505][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0
[ 265.896824][ T29] ? wake_bit_function+0x200/0x200
[ 265.906054][ T29] ? _raw_spin_unlock+0x40/0x40
[ 265.914878][ T29] ? __kthread_parkme+0x71/0x1c0
[ 265.928765][ T29] ? __kthread_parkme+0x15b/0x1c0
[ 265.936638][ T29] kthread+0x2fa/0x390
[ 265.944722][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0
[ 265.954163][ T29] ? kthread_blkcg+0xd0/0xd0
[ 265.964287][ T29] ret_from_fork+0x48/0x80
[ 265.970327][ T29] ? kthread_blkcg+0xd0/0xd0
[ 265.975223][ T29] ret_from_fork_asm+0x11/0x20
[ 265.983229][ T29]
[ 265.987433][ T29] INFO: task syz-executor:5761 blocked for more than 143 seconds.
[ 265.998343][ T29] Not tainted syzkaller #0
[ 266.004410][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 266.018780][ T29] task:syz-executor state:D stack:21424 pid:5761 ppid:5760 flags:0x00004002
[ 266.030758][ T29] Call Trace:
[ 266.036604][ T29]
[ 266.046319][ T29] __schedule+0x15ae/0x4660
[ 266.052324][ T29] ? mark_lock+0x94/0x320
[ 266.057506][ T29] ? asan.module_dtor+0x20/0x20
[ 266.065402][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 266.071927][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 266.082239][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 266.091516][ T29] schedule+0xbd/0x170
[ 266.097635][ T29] io_schedule+0x80/0xd0
[ 266.102521][ T29] bit_wait_io+0x11/0xd0
[ 266.109142][ T29] __wait_on_bit+0x9f/0x2c0
[ 266.114044][ T29] ? bit_wait+0xd0/0xd0
[ 266.118510][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 266.125556][ T29] ? bit_wait+0xd0/0xd0
[ 266.132557][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 266.137970][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 266.145877][ T29] ? bit_waitqueue+0x30/0x30
[ 266.153578][ T29] ? do_raw_spin_unlock+0x121/0x230
[ 266.162258][ T29] do_get_write_access+0x5c9/0xe00
[ 266.169609][ T29] jbd2_journal_get_write_access+0x10c/0x140
[ 266.178161][ T29] __ext4_journal_get_write_access+0x208/0x6d0
[ 266.187283][ T29] ? __ext4_journal_ensure_credits+0x450/0x450
[ 266.193930][ T29] ? __might_sleep+0xe0/0xe0
[ 266.200125][ T29] ext4_reserve_inode_write+0x205/0x2a0
[ 266.208770][ T29] __ext4_mark_inode_dirty+0x13f/0x720
[ 266.215842][ T29] ext4_dirty_inode+0xcb/0x110
[ 266.222292][ T29] ? __ext4_expand_extra_isize+0x400/0x400
[ 266.232861][ T29] __mark_inode_dirty+0x2cc/0xc90
[ 266.243554][ T29] file_update_time+0x187/0x1a0
[ 266.249818][ T29] ext4_page_mkwrite+0x1f9/0x11a0
[ 266.256093][ T29] ? do_wp_page+0x4ce/0x34d0
[ 266.263102][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[ 266.271349][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 266.277820][ T29] do_page_mkwrite+0x153/0x3f0
[ 266.284055][ T29] do_wp_page+0xd4d/0x34d0
[ 266.289751][ T29] ? folio_put+0xd0/0xd0
[ 266.294682][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 266.301806][ T29] ? __rwlock_init+0x150/0x150
[ 266.307170][ T29] handle_mm_fault+0x1306/0x4a50
[ 266.314140][ T29] ? handle_mm_fault+0xe6/0x4a50
[ 266.322594][ T29] ? numa_migrate_prep+0x350/0x350
[ 266.328530][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0
[ 266.336804][ T29] do_user_addr_fault+0x736/0x12d0
[ 266.344054][ T29] exc_page_fault+0x64/0x100
[ 266.350801][ T29] ? clear_bhb_loop+0x40/0x90
[ 266.358873][ T29] asm_exc_page_fault+0x26/0x30
[ 266.366400][ T29] RIP: 0033:0x7f247907cae2
[ 266.372175][ T29] RSP: 002b:00007fffd658e4a0 EFLAGS: 00010202
[ 266.379002][ T29] RAX: 00007f2476ed8000 RBX: 000055556d2670e0 RCX: 0000000000000002
[ 266.389132][ T29] RDX: 0000000000000a50 RSI: 000055556d264158 RDI: 0000000000000004
[ 266.397974][ T29] RBP: 00007fffd658e9a0 R08: 000055556d264280 R09: 0000000000000090
[ 266.408886][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffd658e7e0
[ 266.422512][ T29] R13: 00007fffd658e5d0 R14: 585858582e7a7973 R15: 00007fffd658e520
[ 266.433736][ T29]
[ 266.440580][ T29] INFO: task syz.3.120:6170 blocked for more than 144 seconds.
[ 266.449565][ T29] Not tainted syzkaller #0
[ 266.455935][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 266.467591][ T29] task:syz.3.120 state:D stack:27048 pid:6170 ppid:5777 flags:0x00004004
[ 266.480343][ T29] Call Trace:
[ 266.484489][ T29]
[ 266.487898][ T29] __schedule+0x15ae/0x4660
[ 266.495331][ T29] ? mark_lock+0x94/0x320
[ 266.502885][ T29] ? asan.module_dtor+0x20/0x20
[ 266.511349][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 266.518204][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 266.527471][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 266.534758][ T29] schedule+0xbd/0x170
[ 266.546071][ T29] io_schedule+0x80/0xd0
[ 266.552805][ T29] bit_wait_io+0x11/0xd0
[ 266.557751][ T29] __wait_on_bit+0x9f/0x2c0
[ 266.564208][ T29] ? bit_wait+0xd0/0xd0
[ 266.569326][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 266.575424][ T29] ? bit_wait+0xd0/0xd0
[ 266.580913][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 266.586640][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 266.592765][ T29] ? bit_waitqueue+0x30/0x30
[ 266.599081][ T29] ? do_raw_spin_unlock+0x121/0x230
[ 266.604841][ T29] do_get_write_access+0x5c9/0xe00
[ 266.611299][ T29] jbd2_journal_get_write_access+0x10c/0x140
[ 266.617807][ T29] __ext4_journal_get_write_access+0x208/0x6d0
[ 266.626026][ T29] ? __ext4_journal_ensure_credits+0x450/0x450
[ 266.634885][ T29] ? __might_sleep+0xe0/0xe0
[ 266.640634][ T29] ext4_reserve_inode_write+0x205/0x2a0
[ 266.647579][ T29] __ext4_mark_inode_dirty+0x13f/0x720
[ 266.655252][ T29] ext4_dirty_inode+0xcb/0x110
[ 266.662041][ T29] ? __ext4_expand_extra_isize+0x400/0x400
[ 266.668990][ T29] __mark_inode_dirty+0x2cc/0xc90
[ 266.674960][ T29] file_update_time+0x187/0x1a0
[ 266.680761][ T29] ext4_page_mkwrite+0x1f9/0x11a0
[ 266.687101][ T29] ? filemap_fault+0x103c/0x1540
[ 266.692416][ T29] ? mapping_seek_hole_data+0x1330/0x1330
[ 266.698376][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[ 266.705433][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 266.710715][ T29] ? __pte_offset_map+0x20d/0x280
[ 266.717283][ T29] do_page_mkwrite+0x153/0x3f0
[ 266.722330][ T29] handle_mm_fault+0x1a2c/0x4a50
[ 266.727446][ T29] ? handle_mm_fault+0xe6/0x4a50
[ 266.732893][ T29] ? numa_migrate_prep+0x350/0x350
[ 266.738815][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0
[ 266.746246][ T29] do_user_addr_fault+0x736/0x12d0
[ 266.752512][ T29] exc_page_fault+0x64/0x100
[ 266.757984][ T29] ? clear_bhb_loop+0x40/0x90
[ 266.765738][ T29] asm_exc_page_fault+0x26/0x30
[ 266.771442][ T29] RIP: 0033:0x7f5938a72ba9
[ 266.776475][ T29] RSP: 002b:00007ffcfaa8d290 EFLAGS: 00010202
[ 266.783294][ T29] RAX: 0000001b2dd23000 RBX: ffffffff81d2937c RCX: 0000001b2dd22ff8
[ 266.791910][ T29] RDX: 0000001b2d724220 RSI: 0000000000000008 RDI: 00007f5939955720
[ 266.802823][ T29] RBP: 00000000000000cd R08: 00007f5938e10000 R09: 00007f5938e12000
[ 266.816196][ T29] R10: 0000000081d29380 R11: 0000000000000003 R12: 00007f5938e26038
[ 266.824874][ T29] R13: 00000000000002fa R14: ffffffff81d29230 R15: 00007f5939955720
[ 266.835812][ T29] ? alloc_vmap_area+0x2b0/0x1e50
[ 266.842220][ T29] ? alloc_vmap_area+0x3fc/0x1e50
[ 266.849398][ T29]
[ 266.853442][ T29] INFO: task syz.2.121:6172 blocked for more than 144 seconds.
[ 266.864602][ T29] Not tainted syzkaller #0
[ 266.872071][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 266.882038][ T29] task:syz.2.121 state:D stack:27560 pid:6172 ppid:5779 flags:0x00004004
[ 266.893494][ T29] Call Trace:
[ 266.897797][ T29]
[ 266.902089][ T29] __schedule+0x15ae/0x4660
[ 266.907326][ T29] ? mark_lock+0x94/0x320
[ 266.912590][ T29] ? asan.module_dtor+0x20/0x20
[ 266.918097][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 266.926772][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 266.937272][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 266.944268][ T29] schedule+0xbd/0x170
[ 266.950731][ T29] io_schedule+0x80/0xd0
[ 266.956193][ T29] bit_wait_io+0x11/0xd0
[ 266.967810][ T29] __wait_on_bit+0x9f/0x2c0
[ 266.973939][ T29] ? bit_wait+0xd0/0xd0
[ 266.980360][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 266.989301][ T29] ? bit_wait+0xd0/0xd0
[ 266.994589][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 267.000899][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 267.006004][ T29] ? bit_waitqueue+0x30/0x30
[ 267.011497][ T29] ? do_raw_spin_unlock+0x121/0x230
[ 267.017598][ T29] do_get_write_access+0x5c9/0xe00
[ 267.024254][ T29] jbd2_journal_get_write_access+0x10c/0x140
[ 267.031123][ T29] __ext4_journal_get_write_access+0x208/0x6d0
[ 267.037718][ T29] ? __ext4_journal_ensure_credits+0x450/0x450
[ 267.045059][ T29] ? __might_sleep+0xe0/0xe0
[ 267.051075][ T29] ext4_reserve_inode_write+0x205/0x2a0
[ 267.058482][ T29] __ext4_mark_inode_dirty+0x13f/0x720
[ 267.064838][ T29] ext4_dirty_inode+0xcb/0x110
[ 267.070475][ T29] ? __ext4_expand_extra_isize+0x400/0x400
[ 267.078935][ T29] __mark_inode_dirty+0x2cc/0xc90
[ 267.086059][ T29] file_update_time+0x187/0x1a0
[ 267.092968][ T29] ext4_page_mkwrite+0x1f9/0x11a0
[ 267.100833][ T29] ? filemap_fault+0x103c/0x1540
[ 267.107888][ T29] ? mapping_seek_hole_data+0x1330/0x1330
[ 267.116667][ T29] ? pte_alloc_one+0x3b6/0x540
[ 267.123996][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[ 267.131196][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 267.137295][ T29] do_page_mkwrite+0x153/0x3f0
[ 267.142659][ T29] handle_mm_fault+0x1a2c/0x4a50
[ 267.149809][ T29] ? handle_mm_fault+0xe6/0x4a50
[ 267.158721][ T29] ? numa_migrate_prep+0x350/0x350
[ 267.170113][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0
[ 267.176584][ T29] do_user_addr_fault+0x736/0x12d0
[ 267.182239][ T29] exc_page_fault+0x64/0x100
[ 267.186904][ T29] ? clear_bhb_loop+0x40/0x90
[ 267.192253][ T29] asm_exc_page_fault+0x26/0x30
[ 267.197963][ T29] RIP: 0033:0x7f6b2586bea3
[ 267.203791][ T29] RSP: 002b:00007ffc811a8d50 EFLAGS: 00010246
[ 267.210272][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d664000
[ 267.220301][ T29] RDX: 0000001b2d624000 RSI: 0000000000600000 RDI: 00007f6b25be3708
[ 267.228379][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 267.236603][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 267.244996][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc811a8fe0
[ 267.253407][ T29]
[ 267.257577][ T29] INFO: task syz.0.119:6173 blocked for more than 145 seconds.
[ 267.266030][ T29] Not tainted syzkaller #0
[ 267.273297][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 267.282292][ T29] task:syz.0.119 state:D stack:26696 pid:6173 ppid:5778 flags:0x00004004
[ 267.292324][ T29] Call Trace:
[ 267.296170][ T29]
[ 267.300025][ T29] __schedule+0x15ae/0x4660
[ 267.305251][ T29] ? mark_lock+0x94/0x320
[ 267.310089][ T29] ? asan.module_dtor+0x20/0x20
[ 267.315357][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 267.320766][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 267.328747][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 267.334145][ T29] schedule+0xbd/0x170
[ 267.338371][ T29] io_schedule+0x80/0xd0
[ 267.343877][ T29] bit_wait_io+0x11/0xd0
[ 267.348345][ T29] __wait_on_bit+0x9f/0x2c0
[ 267.355179][ T29] ? bit_wait+0xd0/0xd0
[ 267.360413][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 267.366077][ T29] ? bit_wait+0xd0/0xd0
[ 267.370536][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 267.375633][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 267.381700][ T29] ? bit_waitqueue+0x30/0x30
[ 267.386559][ T29] ? do_raw_spin_unlock+0x121/0x230
[ 267.392461][ T29] do_get_write_access+0x5c9/0xe00
[ 267.399004][ T29] jbd2_journal_get_write_access+0x10c/0x140
[ 267.406454][ T29] __ext4_journal_get_write_access+0x208/0x6d0
[ 267.412880][ T29] ? __ext4_journal_ensure_credits+0x450/0x450
[ 267.419407][ T29] ? __might_sleep+0xe0/0xe0
[ 267.424043][ T29] ext4_reserve_inode_write+0x205/0x2a0
[ 267.429926][ T29] __ext4_mark_inode_dirty+0x13f/0x720
[ 267.435927][ T29] ext4_dirty_inode+0xcb/0x110
[ 267.441328][ T29] ? __ext4_expand_extra_isize+0x400/0x400
[ 267.447651][ T29] __mark_inode_dirty+0x2cc/0xc90
[ 267.452814][ T29] file_update_time+0x187/0x1a0
[ 267.457727][ T29] ext4_page_mkwrite+0x1f9/0x11a0
[ 267.465474][ T29] ? filemap_fault+0x103c/0x1540
[ 267.470760][ T29] ? mapping_seek_hole_data+0x1330/0x1330
[ 267.476812][ T29] ? pte_alloc_one+0x3b6/0x540
[ 267.481819][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[ 267.488746][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 267.495969][ T29] do_page_mkwrite+0x153/0x3f0
[ 267.501115][ T29] handle_mm_fault+0x1a2c/0x4a50
[ 267.506658][ T29] ? handle_mm_fault+0xe6/0x4a50
[ 267.512690][ T29] ? numa_migrate_prep+0x350/0x350
[ 267.524453][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0
[ 267.530361][ T29] do_user_addr_fault+0x736/0x12d0
[ 267.535569][ T29] exc_page_fault+0x64/0x100
[ 267.540338][ T29] ? clear_bhb_loop+0x40/0x90
[ 267.545178][ T29] asm_exc_page_fault+0x26/0x30
[ 267.551491][ T29] RIP: 0033:0x7f199ce6bea3
[ 267.556747][ T29] RSP: 002b:00007ffcfbcffd30 EFLAGS: 00010246
[ 267.564860][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d464000
[ 267.575591][ T29] RDX: 0000001b2d424000 RSI: 0000000000600000 RDI: 00007f199d1e3708
[ 267.584473][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 267.593447][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 267.605548][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcfbcfffc0
[ 267.617546][ T29]
[ 267.622805][ T29] INFO: task syz.1.122:6174 blocked for more than 145 seconds.
[ 267.633297][ T29] Not tainted syzkaller #0
[ 267.643422][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 267.653662][ T29] task:syz.1.122 state:D stack:27352 pid:6174 ppid:5772 flags:0x00004004
[ 267.664794][ T29] Call Trace:
[ 267.668859][ T29]
[ 267.672389][ T29] __schedule+0x15ae/0x4660
[ 267.677652][ T29] ? mark_lock+0x94/0x320
[ 267.683442][ T29] ? asan.module_dtor+0x20/0x20
[ 267.688402][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 267.695727][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 267.704619][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 267.711065][ T29] schedule+0xbd/0x170
[ 267.715565][ T29] io_schedule+0x80/0xd0
[ 267.721115][ T29] bit_wait_io+0x11/0xd0
[ 267.725432][ T29] __wait_on_bit+0x9f/0x2c0
[ 267.730532][ T29] ? bit_wait+0xd0/0xd0
[ 267.734757][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 267.741309][ T29] ? bit_wait+0xd0/0xd0
[ 267.746410][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 267.751296][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 267.756919][ T29] ? bit_waitqueue+0x30/0x30
[ 267.762850][ T29] ? do_raw_spin_unlock+0x121/0x230
[ 267.768934][ T29] do_get_write_access+0x5c9/0xe00
[ 267.775138][ T29] jbd2_journal_get_write_access+0x10c/0x140
[ 267.781926][ T29] __ext4_journal_get_write_access+0x208/0x6d0
[ 267.789105][ T29] ? __ext4_journal_ensure_credits+0x450/0x450
[ 267.797023][ T29] ? __might_sleep+0xe0/0xe0
[ 267.803251][ T29] ext4_reserve_inode_write+0x205/0x2a0
[ 267.810076][ T29] __ext4_mark_inode_dirty+0x13f/0x720
[ 267.815799][ T29] ext4_dirty_inode+0xcb/0x110
[ 267.820945][ T29] ? __ext4_expand_extra_isize+0x400/0x400
[ 267.826911][ T29] __mark_inode_dirty+0x2cc/0xc90
[ 267.832883][ T29] file_update_time+0x187/0x1a0
[ 267.838998][ T29] ext4_page_mkwrite+0x1f9/0x11a0
[ 267.847505][ T29] ? filemap_fault+0x103c/0x1540
[ 267.854999][ T29] ? mapping_seek_hole_data+0x1330/0x1330
[ 267.861469][ T29] ? pte_alloc_one+0x3b6/0x540
[ 267.866291][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[ 267.875004][ T29] ? __lock_acquire+0x7eb0/0x7eb0
[ 267.880794][ T29] do_page_mkwrite+0x153/0x3f0
[ 267.885996][ T29] handle_mm_fault+0x1a2c/0x4a50
[ 267.891164][ T29] ? handle_mm_fault+0xe6/0x4a50
[ 267.896162][ T29] ? numa_migrate_prep+0x350/0x350
[ 267.901417][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0
[ 267.906939][ T29] do_user_addr_fault+0x736/0x12d0
[ 267.912382][ T29] exc_page_fault+0x64/0x100
[ 267.917585][ T29] ? clear_bhb_loop+0x40/0x90
[ 267.922684][ T29] asm_exc_page_fault+0x26/0x30
[ 267.927744][ T29] RIP: 0033:0x7f7203a6bea3
[ 267.932395][ T29] RSP: 002b:00007fff992522b0 EFLAGS: 00010246
[ 267.938527][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d564000
[ 267.946740][ T29] RDX: 0000001b2d524000 RSI: 0000000000600000 RDI: 00007f7203de3708
[ 267.955557][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 267.963995][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 267.972235][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff99252540
[ 267.981492][ T29]
[ 267.985039][ T29]
[ 267.985039][ T29] Showing all locks held in the system:
[ 267.993470][ T29] 1 lock held by khungtaskd/29:
[ 268.006685][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 268.017404][ T29] 6 locks held by kworker/u4:7/1135:
[ 268.022840][ T29] #0: ffff888140050138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 268.035479][ T29] #1: ffffc90004a3fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 268.048091][ T29] #2: ffff888032cc80e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[ 268.059102][ T29] #3: ffff888032ccac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[ 268.069715][ T29] #4: ffff888032ccc990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 268.081243][ T29] #5: ffff8880771ef088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90
[ 268.091932][ T29] 2 locks held by kworker/u4:8/3930:
[ 268.098103][ T29] 2 locks held by getty/5531:
[ 268.103894][ T29] #0: ffff88802e8410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 268.113844][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[ 268.127631][ T29] 3 locks held by syz-executor/5761:
[ 268.133594][ T29] #0: ffff88803091a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 268.145396][ T29] #1: ffff888032cc8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[ 268.156828][ T29] #2: ffff888032ccc990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 268.169684][ T29] 2 locks held by kworker/1:5/5839:
[ 268.175560][ T29] #0: ffff8880b8d3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[ 268.191181][ T29] #1: ffff8880b8d28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660
[ 268.201617][ T29] 3 locks held by syz.3.120/6170:
[ 268.209460][ T29] #0: ffff888078cb14a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 268.224347][ T29] #1: ffff888032cc8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[ 268.236812][ T29] #2: ffff888032ccc990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 268.249469][ T29] 3 locks held by syz.2.121/6172:
[ 268.255000][ T29] #0: ffff8880788ad720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 268.268005][ T29] #1: ffff888032cc8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[ 268.283926][ T29] #2: ffff888032ccc990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 268.295436][ T29] 3 locks held by syz.0.119/6173:
[ 268.302879][ T29] #0: ffff888078cb0b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 268.314668][ T29] #1: ffff888032cc8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[ 268.326459][ T29] #2: ffff888032ccc990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 268.336898][ T29] 3 locks held by syz.1.122/6174:
[ 268.343272][ T29] #0: ffff8880788aa7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 268.355886][ T29] #1: ffff888032cc8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[ 268.367856][ T29] #2: ffff888032ccc990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 268.380510][ T29]
[ 268.383831][ T29] =============================================
[ 268.383831][ T29]
[ 268.392783][ T29] NMI backtrace for cpu 0
[ 268.397184][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 268.404410][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 268.414887][ T29] Call Trace:
[ 268.418468][ T29]
[ 268.421720][ T29] dump_stack_lvl+0x18c/0x250
[ 268.426613][ T29] ? __wake_up_klogd+0xd9/0x100
[ 268.431693][ T29] ? show_regs_print_info+0x20/0x20
[ 268.437292][ T29] ? load_image+0x420/0x420
[ 268.442935][ T29] nmi_cpu_backtrace+0x3a6/0x3e0
[ 268.448678][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 268.455261][ T29] ? load_image+0x420/0x420
[ 268.460551][ T29] ? wq_watchdog_touch+0xef/0x170
[ 268.466682][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 268.472935][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 268.481246][ T29] watchdog+0xf59/0xfa0
[ 268.486877][ T29] ? watchdog+0x1e1/0xfa0
[ 268.491640][ T29] kthread+0x2fa/0x390
[ 268.496902][ T29] ? hungtask_pm_notify+0x50/0x50
[ 268.505469][ T29] ? kthread_blkcg+0xd0/0xd0
[ 268.511610][ T29] ret_from_fork+0x48/0x80
[ 268.517102][ T29] ? kthread_blkcg+0xd0/0xd0
[ 268.522175][ T29] ret_from_fork_asm+0x11/0x20
[ 268.527685][ T29]
[ 268.531527][ T29] Sending NMI from CPU 0 to CPUs 1:
[ 268.537267][ C1] NMI backtrace for cpu 1
[ 268.537280][ C1] CPU: 1 PID: 3930 Comm: kworker/u4:8 Not tainted syzkaller #0
[ 268.537296][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 268.537307][ C1] Workqueue: bat_events batadv_nc_worker
[ 268.537329][ C1] RIP: 0010:lock_acquire+0x1d7/0x420
[ 268.537352][ C1] Code: 09 b8 ff ff ff ff 65 0f c1 05 5d ef 99 7e 83 f8 01 0f 85 03 01 00 00 43 c6 44 3c 04 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c <8f> 84 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c
[ 268.537365][ C1] RSP: 0018:ffffc9000dce7978 EFLAGS: 00000046
[ 268.537378][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 75ff61c2fba1a100
[ 268.537389][ C1] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160
[ 268.537400][ C1] RBP: ffffc9000dce7aa0 R08: dffffc0000000000 R09: 1ffffffff23fe2bc
[ 268.537412][ C1] R10: dffffc0000000000 R11: fffffbfff23fe2bd R12: 1ffff92001b9cf3c
[ 268.537424][ C1] R13: ffff88802fbe4b98 R14: 0000000000000246 R15: dffffc0000000000
[ 268.537441][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[ 268.537455][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 268.537467][ C1] CR2: 000055fe6f7ce168 CR3: 000000000dd32000 CR4: 00000000003506e0
[ 268.537481][ C1] Call Trace:
[ 268.537488][ C1]
[ 268.537501][ C1] ? read_lock_is_recursive+0x20/0x20
[ 268.537521][ C1] ? __local_bh_disable_ip+0x115/0x1a0
[ 268.537540][ C1] ? __bpf_trace_tasklet+0x160/0x160
[ 268.537558][ C1] ? __local_bh_enable_ip+0x13a/0x1c0
[ 268.537575][ C1] ? _local_bh_enable+0xa0/0xa0
[ 268.537594][ C1] ? batadv_nc_purge_paths+0xe2/0x3a0
[ 268.537611][ C1] _raw_spin_lock_bh+0x36/0x50
[ 268.537636][ C1] ? batadv_nc_purge_paths+0xe2/0x3a0
[ 268.537652][ C1] ? batadv_nc_purge_paths+0x3a0/0x3a0
[ 268.537668][ C1] batadv_nc_purge_paths+0xe2/0x3a0
[ 268.537686][ C1] ? __lock_acquire+0x7eb0/0x7eb0
[ 268.537710][ C1] batadv_nc_worker+0x322/0x600
[ 268.537727][ C1] ? process_scheduled_works+0x975/0x1600
[ 268.537751][ C1] process_scheduled_works+0xa60/0x1600
[ 268.537788][ C1] ? worker_attach_to_pool+0x370/0x370
[ 268.537814][ C1] ? assign_work+0x3cc/0x5d0
[ 268.537838][ C1] worker_thread+0xa5e/0xfe0
[ 268.537866][ C1] ? _raw_spin_unlock+0x40/0x40
[ 268.537888][ C1] ? __kthread_parkme+0x71/0x1c0
[ 268.537910][ C1] kthread+0x2fa/0x390
[ 268.537925][ C1] ? pr_cont_work+0x550/0x550
[ 268.537948][ C1] ? kthread_blkcg+0xd0/0xd0
[ 268.537965][ C1] ret_from_fork+0x48/0x80
[ 268.537985][ C1] ? kthread_blkcg+0xd0/0xd0
[ 268.538002][ C1] ret_from_fork_asm+0x11/0x20
[ 268.538033][ C1]
[ 268.546450][ T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 268.546486][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 268.546554][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 268.546587][ T29] Call Trace:
[ 268.546609][ T29]
[ 268.546631][ T29] dump_stack_lvl+0x18c/0x250
[ 268.546717][ T29] ? show_regs_print_info+0x20/0x20
[ 268.546779][ T29] ? load_image+0x420/0x420
[ 268.546887][ T29] panic+0x2ca/0x720
[ 268.546976][ T29] ? bpf_jit_dump+0xd0/0xd0
[ 268.547048][ T29] ? __irq_work_queue_local+0x13a/0x3b0
[ 268.547138][ T29] ? preempt_schedule_thunk+0x1a/0x30
[ 268.547224][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 268.547301][ T29] watchdog+0xf98/0xfa0
[ 268.547384][ T29] ? watchdog+0x1e1/0xfa0
[ 268.547468][ T29] kthread+0x2fa/0x390
[ 268.547530][ T29] ? hungtask_pm_notify+0x50/0x50
[ 268.547606][ T29] ? kthread_blkcg+0xd0/0xd0
[ 268.547672][ T29] ret_from_fork+0x48/0x80
[ 268.547746][ T29] ? kthread_blkcg+0xd0/0xd0
[ 268.547802][ T29] ret_from_fork_asm+0x11/0x20
[ 268.547927][ T29]
[ 268.553989][ T29] Kernel Offset: disabled
[ 268.976909][ T29] Rebooting in 86400 seconds..