last executing test programs: 7.638978191s ago: executing program 0 (id=43): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) 7.461574283s ago: executing program 0 (id=44): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) 7.283992875s ago: executing program 0 (id=46): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) 7.093265781s ago: executing program 0 (id=49): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 6.752010171s ago: executing program 0 (id=55): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x165a}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0xd2, &(0x7f0000000340)=""/210, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0) 6.229455375s ago: executing program 0 (id=66): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000002c659855c67eb6120d6700000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0108000000000000000001ffffffffffffffff797a30000000000900030073797a320000000014000000060a0104000000000000000001"], 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 5.959739549s ago: executing program 32 (id=66): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000002c659855c67eb6120d6700000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0108000000000000000001ffffffffffffffff797a30000000000900030073797a320000000014000000060a0104000000000000000001"], 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4.448612817s ago: executing program 3 (id=83): r0 = fanotify_init(0x10, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000044c0)='stat\x00') fanotify_mark(r0, 0x11, 0x8000013, r1, 0x0) preadv2(r1, &(0x7f0000001d00)=[{&(0x7f0000000500)=""/247, 0xf7}, {0x0}], 0x2, 0x7e2b, 0x5, 0x1) 4.323785946s ago: executing program 3 (id=86): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000f40)={[{@mode={'mode', 0x3d, 0x400000000008}}, {@mode={'mode', 0x3d, 0x1}}, {@utf8}, {@anchor={'anchor', 0x3d, 0x1}}, {@shortad}, {@uid}, {@undelete}, {@uid}, {@mode}, {@dmode={'dmode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x6}}, {}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@bs={'bs', 0x3d, 0x9}}, {@dmode={'dmode', 0x3d, 0x100000000}}]}, 0x1, 0xc43, &(0x7f0000000200)="$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") r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x4f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003000000403512010440000102030109023d00010118980409040000020103000609058e0b0b000fd70c03c602052501"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(r0, &(0x7f0000000000)='syscall\x00') 3.155878523s ago: executing program 1 (id=93): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) fanotify_mark(r1, 0x80, 0x28, r0, 0x0) 2.922886668s ago: executing program 1 (id=95): setresuid(0x0, 0x0, 0xee01) r0 = getpid() r1 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2.723989305s ago: executing program 1 (id=97): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 1.957161897s ago: executing program 3 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x48, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.161487585s ago: executing program 2 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000010900010073797a3000000000090002"], 0x2c}}, 0x200000d4) 1.100973589s ago: executing program 2 (id=108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000780)={0x0, 0x0, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x400}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x406}) 1.003911353s ago: executing program 2 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd28, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 926.630401ms ago: executing program 1 (id=110): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20c100, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) 924.082071ms ago: executing program 3 (id=111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1, 0x0, 0x0) 709.144172ms ago: executing program 3 (id=112): syz_mount_image$udf(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x400006, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==") pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff4010000008003950323030302ee6c3762dbd26351f603675143f22d2767788695107"], 0x15) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 657.969894ms ago: executing program 2 (id=113): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r1}) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) 484.065245ms ago: executing program 1 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='!o', 0x2) 483.813296ms ago: executing program 2 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="eca5", 0x2) 118.678052ms ago: executing program 1 (id=116): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x82, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0x424, &(0x7f0000000180)="$eJzs3F1P21YYwPFjSLoslVClaoVSLk7pLthFU8eMoKhXnnMSTuvYlu1UcDVVI6nQQjetnbRyNW66Tdo+w9Rd7kPsel8G7XYXkzL5JSy8BCiFEVX/n9T62H5yzuOTyA8x2AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjDaZhm1RCu9jrrcjynEfrtE/YP+1vMF8XTxhXCSP6JUknMZZvmbv63+6Osr9lsbVaUkkVJ7Fy/dePhzUIh68IQJyR0PrPGW4W/eLXz5dN+v/uNLAtx8dlMvJbydOTrtt1SUke+rNdq5oO1ZiSb2lXRRhSrtnRCZcd+KJecT2S1Xl+W6p8Nv+O1GrarhhtX71umWZOPKoGyw8j3HjyqRM6adl3ttdKYZHcSs5p8EB/rWMbKbkvZ2+p3l09LMgmqniXohpSFE99Gy7SsatWyqrWV+sqqaRaObDAPEUciLuFDi0lXGv1YXewJHHgHg7z+AwAAAACA95eRXmNPvv8X0+vwhmhqV5lXnRYAAAAAALhA6W/+Z5NF+hd7c8Lg+z8AAAAAAO+bH8fdYzclxHQe84Hxx18iVB9ma9t28r+9ne+dPtxj3Jw3ZvJO0kWtkK85asG4nQXdNrIrD2IvW9/rpXlM5X38PRiM5JHeK2iEYdHYDdY/Ns6fgPhZzGcx85vZcnNn/2XJKOWmdlXF8d2HVWHbM1OxWo+/fb71nRDJ6D957RlD9Lb63coXX/U301x2k5fubhv7fZw5l5f79z2OzPy1bBKSXIrphZh83HI2rjl6/PlkTb3FmK/FnexCz51yFlse7snGLF3TrqpWDh79b3+Kg1lUR478etbPr2/GZjEYDAbJhtEsFrKYhaV7yeLe0qEskiO3KuPegzwLa3T+zzUXZ8hi+bQsjO/fLQsAuCq9YRXKb9gvHa674kjdPcdZrnfCTxkXV91fi7tZzN359MRamD/mjG6OPaM7ozX2/HX9d7GYzc3iMPiYLNIam4z7y6GqmtbRN2PHjVzLSKZw+uX21+LWi1c797e2nz7rPus+t6zlmvmpaa5Yopgehij2pvtdk9oDADiGCveMcvyDEYY6+Lxar1fteE3J0Hcey1A3WkpqL1ahs2Z7LSWD0I99x3eTxhPdUJGMOkHgh7Fs+qEM/Eivp09+kfmjXyLVtr1YO1HgKjtS0vG92HZi2dCRI4POZ66O1lSYvjgKlKOb2rFj7Xsy8juhoypSRkqNBOqG8mLd1EnTk0Go23a4IZ/4bqetZENFTqiD2M86HI6lvaYfttNuK1c92QAATIj9J9hdYuOqjxEAABxElQYAAAAAAAAAAAAAAAAAAAAAYPL9H/f/0aAxGY2CmIg0LrAx5xricnq+6jMTgMv2bwAAAP//dPWkzg==") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000080), 0x1, 0x7a2, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbN7T/n6J4MF6CggaKN2YGlsFwYoHESwU9Nw2bLahZpMt2U1pQqDpQfCqeBDspWcreutVPevFv8GDtFRNi/UkkdmdbTcvmyZtdlPJ5wOz+zzzku/znWfesjPsBnBgjaQvuYgjET1pcSgbn0Q2IrojTtXne7C6XEiHJNbWPvwjqc1zf3W5EE3LpA5llRci4sdPIo7mNsetLC7NTJZKxfmsPladvTRWWVw6dnF2cro4XZw7MT4xcfzk6ydP7F2uf/28dPjOZ++9EhEr9SaeisPZtFoeA3sXK2rrdiRbJz3pKlzn3b0Nte+SHc7X3eZ2sDvprtmV9cuRGIqubXry7Y62DABol6sRsQYAHDCJ8z8AHDCNzwHury4XGkPU7+es7OsHEx1y952I6K/n37i/WZ/SXb9n90t/7T7o4P1k3b2rJCKG9yD+SERcv3X2ZjrEhvupAO20ci0izg+PbDz+15+OeDqv7mCekQ11xz/onO/T6583Nl//ReSy/b+/9rrx+qdvi333STx+/8/dXlft2YOgTdLrv7eanm170JR/Zrgrq/2vds3Xk1y4WCqmx7b/R8Ro9PSl9fFtYoze++deq2nN139/fv7x12n89P3RHLnb3X3rl5marE4+Tc7N7l6LeLF7q/yTh/2ftLj+PbPDGO+/+elXraal+af5NobN+bfX2o2Il7fs/0fPQSXbPp84VtscxhobxRa++/XLwVbxm/v/+q000nKh8b9AJ6T9P7h9/sNJ8/Oald3H+OnG0A+tpq3P/+zNNP76/Lfe/nuTj2rl3mzclclqdX48ojf5YPP444+WbdQb86f5j7609f6/3fafHobOZ+W1xzz82H3n92+ePP/2SvOfSvs/yZJ4bP/vvvDtg5muVvF31v8TtdJoNmbz8W/zU6U7aFf/U604AAAAAAAAAAAAAAAAAAAAAAAAANiFXEQcjiSXf1jO5fL5+m94Px+DuVK5Uj16obwwNxW138oejp5c46suh5q+D3U8+z78Rv34hvprEfFcRHzRN1Cr5wvl0tR+Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmUMtfv8/9Vvfdkv2d6iFAEBbOJUDwMHj/A8AB0+L83/v1qMH2toWAKAzauf/pHu/mwEAdJDP/wHg4HH+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM3OnD6dDmt/ry4X0vrU5cWFmfLlY1PFykx+dqGQL5TnL+Wny+XpUjFfKM+2/EMr9bdSuXxpIuYWroxVi5XqWGVx6dxseWGueu7i7OR08Vyxp2OZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDOVRaXZiZLpeK8wvaFq89EM65l3bbfa0PhmSj0RUS7QjQfJQb25+AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8B/wbwAAAP//VdsZ0w==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 20.966085ms ago: executing program 3 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/cpu_dma_latency\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 2 (id=118): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 66.101547][ T5758] cgroup: Unknown subsys name 'net' [ 66.237061][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.605675][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.628411][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.638602][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.647730][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.652096][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.655528][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.670592][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.679981][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.680760][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.688667][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.697060][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.710465][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.711089][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.719477][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.733681][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.741916][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.749116][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.756276][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.757686][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.771227][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.781899][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.792605][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.819685][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.828202][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.835948][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.269374][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 70.308728][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 70.382981][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 70.417736][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 70.533406][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.542933][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.551240][ T5774] bridge_slave_0: entered allmulticast mode [ 70.558057][ T5774] bridge_slave_0: entered promiscuous mode [ 70.568297][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.575578][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.582853][ T5774] bridge_slave_1: entered allmulticast mode [ 70.589632][ T5774] bridge_slave_1: entered promiscuous mode [ 70.645052][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.652306][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.659452][ T5769] bridge_slave_0: entered allmulticast mode [ 70.666473][ T5769] bridge_slave_0: entered promiscuous mode [ 70.686736][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.694222][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.701494][ T5770] bridge_slave_0: entered allmulticast mode [ 70.708298][ T5770] bridge_slave_0: entered promiscuous mode [ 70.718036][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.725760][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.733284][ T5770] bridge_slave_1: entered allmulticast mode [ 70.740255][ T5770] bridge_slave_1: entered promiscuous mode [ 70.746805][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.756706][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.764554][ T5769] bridge_slave_1: entered allmulticast mode [ 70.772246][ T5769] bridge_slave_1: entered promiscuous mode [ 70.789519][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.841210][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.848384][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.856068][ T5771] bridge_slave_0: entered allmulticast mode [ 70.862858][ T5771] bridge_slave_0: entered promiscuous mode [ 70.872230][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.881522][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.888640][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.896104][ T5771] bridge_slave_1: entered allmulticast mode [ 70.903415][ T5771] bridge_slave_1: entered promiscuous mode [ 70.921862][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.961837][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.975726][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.007804][ T5774] team0: Port device team_slave_0 added [ 71.016470][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.036068][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.058363][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.071527][ T5774] team0: Port device team_slave_1 added [ 71.090887][ T5769] team0: Port device team_slave_0 added [ 71.115240][ T5770] team0: Port device team_slave_0 added [ 71.123494][ T5769] team0: Port device team_slave_1 added [ 71.133732][ T5770] team0: Port device team_slave_1 added [ 71.176390][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.183823][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.210229][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.225124][ T5771] team0: Port device team_slave_0 added [ 71.253641][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.260843][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.287556][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.300737][ T5771] team0: Port device team_slave_1 added [ 71.318947][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.326700][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.352894][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.365394][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.372584][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.399572][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.412671][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.419646][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.445686][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.475016][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.482313][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.508691][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.542354][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.549348][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.575701][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.589229][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.596670][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.623196][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.647017][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.654124][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.669606][ T5774] hsr_slave_0: entered promiscuous mode [ 71.676109][ T5774] hsr_slave_1: entered promiscuous mode [ 71.731611][ T5770] hsr_slave_0: entered promiscuous mode [ 71.739325][ T5770] hsr_slave_1: entered promiscuous mode [ 71.745664][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.753788][ T5770] Cannot create hsr debugfs directory [ 71.795304][ T5771] hsr_slave_0: entered promiscuous mode [ 71.802149][ T5771] hsr_slave_1: entered promiscuous mode [ 71.808303][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.816158][ T5771] Cannot create hsr debugfs directory [ 71.861435][ T5769] hsr_slave_0: entered promiscuous mode [ 71.868186][ T5769] hsr_slave_1: entered promiscuous mode [ 71.874962][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.883188][ T5769] Cannot create hsr debugfs directory [ 71.883366][ T5786] Bluetooth: hci1: command tx timeout [ 71.894928][ T5780] Bluetooth: hci2: command tx timeout [ 71.895085][ T5780] Bluetooth: hci3: command tx timeout [ 71.900905][ T5087] Bluetooth: hci0: command tx timeout [ 72.280943][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.295767][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.305427][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.317305][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.401331][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.423501][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.464800][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.484736][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.500730][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.523890][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.535005][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.545817][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.635684][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.646715][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.657777][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.668425][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.704150][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.764244][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.788406][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.795716][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.827939][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.835147][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.943338][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.965692][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.008844][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.037084][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.064565][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.071898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.095234][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.105296][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.112631][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.143877][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.151204][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.201805][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.215156][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.222540][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.255447][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.262670][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.277063][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.284215][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.354359][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.455539][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.497966][ T5774] veth0_vlan: entered promiscuous mode [ 73.536579][ T5774] veth1_vlan: entered promiscuous mode [ 73.614546][ T5774] veth0_macvtap: entered promiscuous mode [ 73.646013][ T5774] veth1_macvtap: entered promiscuous mode [ 73.697337][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.728310][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.767155][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.779338][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.793691][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.803801][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.862599][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.958456][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.965553][ T5087] Bluetooth: hci3: command tx timeout [ 73.970235][ T5087] Bluetooth: hci0: command tx timeout [ 73.976862][ T5087] Bluetooth: hci1: command tx timeout [ 73.978701][ T5780] Bluetooth: hci2: command tx timeout [ 74.043922][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.057183][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.071613][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.074440][ T5770] veth0_vlan: entered promiscuous mode [ 74.134815][ T5770] veth1_vlan: entered promiscuous mode [ 74.157758][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.170626][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.186608][ T5771] veth0_vlan: entered promiscuous mode [ 74.232146][ T5771] veth1_vlan: entered promiscuous mode [ 74.256260][ T5769] veth0_vlan: entered promiscuous mode [ 74.266610][ T5770] veth0_macvtap: entered promiscuous mode [ 74.293084][ T5770] veth1_macvtap: entered promiscuous mode [ 74.372110][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.377762][ T5832] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.388628][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.416570][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.425625][ T5769] veth1_vlan: entered promiscuous mode [ 74.447922][ T5771] veth0_macvtap: entered promiscuous mode [ 74.464384][ T5771] veth1_macvtap: entered promiscuous mode [ 74.478718][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.490926][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.502900][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.515111][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.526273][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.536163][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.551538][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.579237][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.590865][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.609818][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.624173][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.643289][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.689684][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.702192][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.712475][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.724185][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.737472][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.759506][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.773825][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782676][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.791529][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.861398][ T5769] veth0_macvtap: entered promiscuous mode [ 74.868467][ T5841] syz.1.7[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.885859][ T5769] veth1_macvtap: entered promiscuous mode [ 74.935463][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.946914][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.025364][ T5841] loop1: detected capacity change from 0 to 8192 [ 75.033582][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.062355][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.063607][ T5841] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.088074][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.116033][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.126234][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.137157][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.148928][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.177168][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.205338][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.217591][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.233291][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.246410][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.266846][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.279335][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.293109][ T5842] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 75.294403][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.304730][ T5842] FAT-fs (loop1): Filesystem has been set read-only [ 75.318486][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.323267][ T5842] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 75.336339][ T5842] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 75.354865][ T5842] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 75.363553][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.372622][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381795][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.390951][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.404554][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.426832][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.427207][ T5842] FAT-fs (loop1): error, clusters badly computed (5 != 4) [ 75.482137][ T5842] FAT-fs (loop1): error, clusters badly computed (6 != 5) [ 75.515960][ T5842] FAT-fs (loop1): error, clusters badly computed (7 != 6) [ 75.542747][ T5842] FAT-fs (loop1): error, clusters badly computed (8 != 7) [ 75.566016][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.586896][ T5842] FAT-fs (loop1): error, clusters badly computed (9 != 8) [ 75.610142][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.655955][ T5842] FAT-fs (loop1): error, clusters badly computed (10 != 9) [ 75.673357][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.698268][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.705903][ T5813] IPVS: starting estimator thread 0... [ 75.749611][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.773014][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.800831][ T5846] IPVS: using max 26 ests per chain, 62400 per kthread [ 75.823577][ T5842] FAT-fs (loop1): error, clusters badly computed (11 != 10) [ 75.927295][ T5842] FAT-fs (loop1): error, clusters badly computed (12 != 11) [ 75.970701][ T5842] FAT-fs (loop1): error, clusters badly computed (13 != 12) [ 76.002072][ T5842] FAT-fs (loop1): error, clusters badly computed (14 != 13) [ 76.017834][ T5842] FAT-fs (loop1): error, clusters badly computed (15 != 14) [ 76.029063][ T5842] FAT-fs (loop1): error, clusters badly computed (16 != 15) [ 76.041933][ T5780] Bluetooth: hci2: command tx timeout [ 76.051155][ T5780] Bluetooth: hci1: command tx timeout [ 76.051413][ T5087] Bluetooth: hci0: command tx timeout [ 76.056616][ T5780] Bluetooth: hci3: command tx timeout [ 76.081240][ T5814] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 76.110279][ T5814] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0001/input/input5 [ 76.490798][ T5860] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10'. [ 76.529989][ T5860] netlink: 528 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.099138][ T5853] loop2: detected capacity change from 0 to 40427 [ 77.169041][ T5853] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 77.188304][ T5853] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 77.212014][ T5853] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 77.793019][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 77.875472][ T28] audit: type=1400 audit(1790712870.335:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=5885 comm="syz.0.20" name="foo" offset=60 [ 78.002069][ T5888] CIFS: bad ip= option (127®0.0.1) [ 78.021914][ T5888] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 78.058388][ T5870] loop1: detected capacity change from 0 to 40427 [ 78.077007][ T5870] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 78.087617][ T5888] CIFS: Attempting to mount (null) [ 78.094283][ T5870] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.119438][ T5888] CIFS: VFS: Error connecting to socket. Aborting operation. [ 78.127002][ T5087] Bluetooth: hci3: command tx timeout [ 78.127034][ T5087] Bluetooth: hci1: command tx timeout [ 78.127055][ T5087] Bluetooth: hci2: command tx timeout [ 78.130330][ T5778] Bluetooth: hci0: command tx timeout [ 78.148162][ T5870] F2FS-fs (loop1): invalid crc value [ 78.191440][ T5888] CIFS: VFS: cifs_mount failed w/return code = -111 [ 78.309572][ T5870] F2FS-fs (loop1): Start checkpoint disabled! [ 78.357378][ T5870] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.375490][ T5870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 78.546833][ T3534] kworker/u4:10: attempt to access beyond end of device [ 78.546833][ T3534] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 78.563789][ T3534] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 78.576488][ T3534] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 78.641697][ T5813] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.788539][ T5904] loop2: detected capacity change from 0 to 32768 [ 78.829852][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 78.841820][ T5813] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 78.847047][ T5904] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 78.857609][ T5813] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 78.871073][ T5813] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 78.880423][ T5813] usb 4-1: config 250 has no interface number 0 [ 78.886747][ T5813] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 78.898698][ T5813] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 78.899427][ T5904] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.909526][ T5813] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 78.929487][ T5813] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 78.943376][ T5813] usb 4-1: config 250 interface 228 has no altsetting 0 [ 78.954944][ T5813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 78.964432][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 78.973101][ T5813] usb 4-1: Product: syz [ 78.979448][ T5813] usb 4-1: SerialNumber: syz [ 79.007970][ T5813] hub 4-1:250.228: bad descriptor, ignoring hub [ 79.016295][ T5813] hub: probe of 4-1:250.228 failed with error -5 [ 79.216867][ T5904] XFS (loop2): Ending clean mount [ 79.223771][ T5813] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 79.253452][ T5919] netlink: 56 bytes leftover after parsing attributes in process `syz.0.28'. [ 79.254717][ T5904] XFS (loop2): Quotacheck needed: Please wait. [ 79.271378][ T5918] Illegal XDP return value 4292182496 on prog (id 4) dev N/A, expect packet loss! [ 79.345109][ T5904] XFS (loop2): Quotacheck: Done. [ 79.571069][ C0] usblp0: nonzero read bulk status received: -71 [ 79.621390][ T5839] usb 4-1: USB disconnect, device number 2 [ 79.647208][ T5839] usblp0: removed [ 80.108844][ T5769] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.347607][ T5927] loop0: detected capacity change from 0 to 2048 [ 80.415370][ T5930] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.535369][ T5839] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0002/input/input6 [ 80.581022][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.613286][ T28] audit: type=1800 audit(1790712873.085:3): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 80.618963][ T5839] hid-generic 0005:0576:0306.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 80.704689][ T28] audit: type=1800 audit(1790712873.125:4): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 80.812488][ T5930] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 80.830622][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.839000][ T5930] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 80.864422][ T5930] Remounting filesystem read-only [ 80.870009][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 80.875328][ T48] NILFS (loop0): discard dirty page: offset=0, ino=15 [ 80.898077][ T48] NILFS (loop0): discard dirty block: blocknr=22, size=1024 [ 80.910342][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.919355][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.933615][ T48] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.945843][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 80.946146][ T5770] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 80.954977][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 80.955000][ T23] usb 2-1: Product: syz [ 80.955021][ T23] usb 2-1: Manufacturer: syz [ 80.955036][ T23] usb 2-1: SerialNumber: syz [ 80.963361][ T23] usb 2-1: config 0 descriptor?? [ 80.971489][ T5770] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 80.980862][ T23] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 80.998597][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.998625][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.998641][ T5770] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 80.998656][ T5770] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 81.003444][ T5770] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 81.046295][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 81.051620][ T5770] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 81.060177][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.070073][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.081323][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.092760][ T5770] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 81.101061][ T5813] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 81.110468][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.118594][ T5813] usb 3-1: Product: syz [ 81.126994][ T5813] usb 3-1: Manufacturer: syz [ 81.133919][ T5770] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 81.141748][ T5813] usb 3-1: SerialNumber: syz [ 81.154004][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.176652][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.185775][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.195076][ T5770] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 81.202707][ T5770] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 81.225007][ T23] gspca_sn9c2028: read1 error -32 [ 81.229507][ T5770] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 81.238004][ T23] gspca_sn9c2028: read1 error -32 [ 81.240186][ T5770] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 81.264543][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.266425][ T5783] udevd[5783]: setting mode of /dev/bus/usb/002/002 to 020664 failed: Read-only file system [ 81.283844][ T5770] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 81.283869][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.297343][ T5783] udevd[5783]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: Read-only file system [ 81.321803][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.343641][ T5944] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.356947][ T5770] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 81.364802][ T5944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.372529][ T5944] IPv6: NLM_F_CREATE should be set when creating new route [ 81.379881][ T5944] IPv6: NLM_F_CREATE should be set when creating new route [ 81.387151][ T5944] IPv6: NLM_F_CREATE should be set when creating new route [ 81.402980][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.431827][ T5944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.439260][ T5944] Zero length message leads to an empty skb [ 81.466184][ T5813] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 81.484675][ T5813] usb 3-1: MIDIStreaming interface descriptor not found [ 81.514621][ T5783] udevd[5783]: symlink '../bus/usb/002/002' '/dev/char/189:129.tmp-c189:129' failed: Read-only file system [ 81.524946][ T23] usb 2-1: USB disconnect, device number 2 [ 81.593756][ T5783] udevd[5783]: symlink '../bus/usb/002/002' '/dev/char/189:129.tmp-c189:129' failed: Read-only file system [ 81.634414][ T5949] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 81.656615][ T5813] usb 3-1: USB disconnect, device number 2 [ 81.785408][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.959622][ T5958] binder: 5957:5958 ioctl c0306201 0 returned -14 [ 82.318515][ T5965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.46'. [ 82.485866][ T5971] loop0: detected capacity change from 0 to 8 [ 82.569630][ T5783] udevd[5783]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 82.684301][ T5783] udevd[5783]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 82.751552][ T5770] SQUASHFS error: Unable to read directory block [631:72] [ 82.776749][ T5770] SQUASHFS error: Unable to read inode 0x0 [ 82.784456][ T5770] SQUASHFS error: Unable to read inode 0x0 [ 83.384121][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.483928][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.502188][ T6001] tap0: tun_chr_ioctl cmd 1074025672 [ 83.507604][ T6001] tap0: ignored: set checksum disabled [ 83.612353][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.642408][ T6008] typec_fusb302 0-0002: I2C/SMBus block functionality not supported! [ 83.660011][ T6009] ======================================================= [ 83.660011][ T6009] WARNING: The mand mount option has been deprecated and [ 83.660011][ T6009] and is ignored by this kernel. Remove the mand [ 83.660011][ T6009] option from the mount to silence this warning. [ 83.660011][ T6009] ======================================================= [ 83.663077][ T6008] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 83.827756][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.160578][ T5811] kernel write not supported for file /input/mice (pid: 5811 comm: kworker/1:3) [ 84.191906][ T6026] loop1: detected capacity change from 0 to 256 [ 84.207348][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.224696][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.240005][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.250734][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.258773][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.265832][ T6026] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 84.279550][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.717814][ T6038] veth1_to_bond: entered allmulticast mode [ 84.731673][ T6036] veth1_to_bond: left allmulticast mode [ 85.283439][ T6064] loop2: detected capacity change from 0 to 128 [ 85.330354][ T6064] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 85.341472][ T6063] loop3: detected capacity change from 0 to 2048 [ 85.435224][ T6064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.555462][ T6064] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 85.590048][ T6064] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 85.634541][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 85.950370][ T5954] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.238189][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.245899][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.254523][ T6025] bridge_slave_0: entered allmulticast mode [ 86.263930][ T6025] bridge_slave_0: entered promiscuous mode [ 86.274451][ T6095] warning: `syz.1.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.301416][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.308770][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.330566][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.336770][ T6025] bridge_slave_1: entered allmulticast mode [ 86.352018][ T6025] bridge_slave_1: entered promiscuous mode [ 86.363077][ T5087] Bluetooth: hci0: command tx timeout [ 86.449523][ T48] hsr_slave_0: left promiscuous mode [ 86.477055][ T48] hsr_slave_1: left promiscuous mode [ 86.494408][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.520181][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.529734][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.539208][ T5839] usb 4-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 86.551562][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.555471][ T5839] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.572925][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.581656][ T48] bridge_slave_1: left allmulticast mode [ 86.587516][ T48] bridge_slave_1: left promiscuous mode [ 86.594971][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.602121][ T5839] usb 4-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40 [ 86.614751][ T48] bridge_slave_0: left allmulticast mode [ 86.619853][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.628765][ T5839] usb 4-1: Product: syz [ 86.643567][ T48] bridge_slave_0: left promiscuous mode [ 86.645450][ T5839] usb 4-1: Manufacturer: syz [ 86.649375][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.664284][ T5839] usb 4-1: SerialNumber: syz [ 86.747409][ T48] veth1_macvtap: left promiscuous mode [ 86.753899][ T48] veth0_macvtap: left promiscuous mode [ 86.759633][ T48] veth1_vlan: left promiscuous mode [ 86.770572][ T48] veth0_vlan: left promiscuous mode [ 86.917956][ T5839] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 86.935019][ T5839] usb 4-1: MIDIStreaming interface descriptor not found [ 87.021827][ T9] cfg80211: failed to load regulatory.db [ 87.030929][ T5839] usb 4-1: USB disconnect, device number 3 [ 87.104935][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.655357][ T48] team0 (unregistering): Port device team_slave_1 removed [ 87.724999][ T48] team0 (unregistering): Port device team_slave_0 removed [ 87.778368][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.848445][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.305274][ T48] bond0 (unregistering): Released all slaves [ 88.442992][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.450951][ T5087] Bluetooth: hci0: command tx timeout [ 88.534119][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.633049][ T6136] loop1: detected capacity change from 0 to 512 [ 88.638814][ T6025] team0: Port device team_slave_0 added [ 88.687327][ T6025] team0: Port device team_slave_1 added [ 88.746708][ T6136] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 88.796711][ T6136] FAT-fs (loop1): Filesystem has been set read-only [ 88.818189][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.880264][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.961496][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.983306][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.992109][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.019601][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.041072][ T6146] loop3: detected capacity change from 0 to 1756 [ 89.105653][ T6146] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 89.140907][ T6146] UDF-fs: Scanning with blocksize 512 failed [ 89.181280][ T6146] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 89.205475][ T6146] UDF-fs: Scanning with blocksize 1024 failed [ 89.229101][ T6146] UDF-fs: warning (device loop3): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount. [ 89.265021][ T6025] hsr_slave_0: entered promiscuous mode [ 89.272017][ T6025] hsr_slave_1: entered promiscuous mode [ 89.319228][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.339724][ T6025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.360303][ T6025] Cannot create hsr debugfs directory [ 89.365940][ T6153] bond0: no command found in slaves file - use +ifname or -ifname [ 89.439722][ T6157] loop1: detected capacity change from 0 to 136 [ 89.534669][ T6157] Attempt to read inode for relocated directory [ 89.632176][ T48] IPVS: stop unused estimator thread 0... [ 89.809625][ T6025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.821679][ T6025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.838591][ T6025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.861958][ T6025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.973005][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.997645][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.015629][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.022849][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.051252][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.058484][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.373084][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.520148][ T5087] Bluetooth: hci0: command tx timeout [ 90.736896][ T6025] veth0_vlan: entered promiscuous mode [ 90.753125][ T6025] veth1_vlan: entered promiscuous mode [ 90.792191][ T6025] veth0_macvtap: entered promiscuous mode [ 90.805286][ T6025] veth1_macvtap: entered promiscuous mode [ 90.831869][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.846826][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.859564][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.871517][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.885522][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.897252][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.913471][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.930248][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.943182][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.953143][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.964092][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.974011][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.985450][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.999405][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.021471][ T6025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.031312][ T6025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.041882][ T6025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050911][ T6025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.175090][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.192535][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.229729][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.246381][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.600086][ T5087] Bluetooth: hci0: command tx timeout [ 133.083901][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090632][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.527812][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.539098][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.600164][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 196.604981][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 196.607407][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 206.843034][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 250.200211][ T29] INFO: task kworker/u4:10:3534 blocked for more than 143 seconds. [ 250.208178][ T29] Not tainted syzkaller #0 [ 250.213335][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.222090][ T29] task:kworker/u4:10 state:D stack:21784 pid:3534 ppid:2 flags:0x00004000 [ 250.231388][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 250.237462][ T29] Call Trace: [ 250.240823][ T29] [ 250.243781][ T29] __schedule+0x15ae/0x4660 [ 250.248337][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 250.254742][ T29] ? lock_chain_count+0x20/0x20 [ 250.259638][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 250.266702][ T29] ? asan.module_dtor+0x20/0x20 [ 250.271678][ T29] ? prepare_to_wait_event+0x3db/0x470 [ 250.277697][ T29] ? kthread_data+0x4f/0xc0 [ 250.282425][ T29] ? wq_worker_sleeping+0x63/0x240 [ 250.288430][ T29] schedule+0xbd/0x170 [ 250.292682][ T29] start_this_handle+0x103f/0x2170 [ 250.297826][ T29] ? writeback_sb_inodes+0x813/0x1020 [ 250.303346][ T29] ? jbd2__journal_start+0x5b0/0x5b0 [ 250.308686][ T29] ? wake_bit_function+0x200/0x200 [ 250.313850][ T29] ? slab_post_alloc_hook+0x86/0x4d0 [ 250.319327][ T29] ? rcu_is_watching+0x15/0xb0 [ 250.324345][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 250.329472][ T29] jbd2__journal_start+0x2bb/0x5b0 [ 250.334711][ T29] __ext4_journal_start_sb+0x203/0x560 [ 250.340286][ T29] ext4_do_writepages+0xfb9/0x3990 [ 250.345449][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 250.352490][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 250.358029][ T29] ? __lock_acquire+0x1336/0x7d80 [ 250.363553][ T29] ext4_writepages+0x1dd/0x350 [ 250.369165][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 250.374205][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 250.379611][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 250.385439][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 250.390490][ T29] do_writepages+0x351/0x590 [ 250.395133][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 250.400959][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 250.406373][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 250.411480][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 250.416635][ T29] __writeback_single_inode+0x14e/0xee0 [ 250.422256][ T29] writeback_sb_inodes+0x813/0x1020 [ 250.427499][ T29] ? queue_io+0x530/0x530 [ 250.432105][ T29] __writeback_inodes_wb+0x114/0x240 [ 250.437441][ T29] wb_writeback+0x472/0xbe0 [ 250.442019][ T29] ? queue_io+0x2d1/0x530 [ 250.446377][ T29] ? percpu_ref_tryget+0x250/0x250 [ 250.451587][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 250.456637][ T29] wb_workfn+0xb8e/0xe60 [ 250.460952][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 250.467721][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 250.473810][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 250.478867][ T29] ? read_lock_is_recursive+0x20/0x20 [ 250.484318][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.489569][ T29] ? process_scheduled_works+0x975/0x1600 [ 250.495368][ T29] ? process_scheduled_works+0x975/0x1600 [ 250.501157][ T29] process_scheduled_works+0xa60/0x1600 [ 250.506780][ T29] ? worker_attach_to_pool+0x370/0x370 [ 250.512309][ T29] ? assign_work+0x3cc/0x5d0 [ 250.516936][ T29] worker_thread+0xa5e/0xfe0 [ 250.521722][ T29] ? _raw_spin_unlock+0x40/0x40 [ 250.526622][ T29] ? __kthread_parkme+0x71/0x1c0 [ 250.531663][ T29] kthread+0x2fa/0x390 [ 250.535750][ T29] ? pr_cont_work+0x550/0x550 [ 250.540660][ T29] ? kthread_blkcg+0xd0/0xd0 [ 250.545281][ T29] ret_from_fork+0x48/0x80 [ 250.549751][ T29] ? kthread_blkcg+0xd0/0xd0 [ 250.554367][ T29] ret_from_fork_asm+0x11/0x20 [ 250.559269][ T29] [ 250.562366][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds. [ 250.571112][ T29] Not tainted syzkaller #0 [ 250.576068][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.584801][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5103 ppid:2 flags:0x00004000 [ 250.594079][ T29] Call Trace: [ 250.597391][ T29] [ 250.600632][ T29] __schedule+0x15ae/0x4660 [ 250.605174][ T29] ? asan.module_dtor+0x20/0x20 [ 250.610093][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 250.615140][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 250.621093][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 250.626327][ T29] schedule+0xbd/0x170 [ 250.630475][ T29] io_schedule+0x80/0xd0 [ 250.634744][ T29] bit_wait_io+0x11/0xd0 [ 250.638978][ T29] __wait_on_bit+0x9f/0x2c0 [ 250.643530][ T29] ? bit_wait+0xd0/0xd0 [ 250.647694][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 250.653405][ T29] ? bit_wait+0xd0/0xd0 [ 250.657573][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 250.662420][ T29] ? do_raw_write_lock+0x11e/0x260 [ 250.667547][ T29] ? bit_waitqueue+0x30/0x30 [ 250.673078][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 250.678156][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 250.684818][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 250.691661][ T29] ? lock_chain_count+0x20/0x20 [ 250.696568][ T29] ? _raw_spin_unlock+0x40/0x40 [ 250.701508][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 250.707255][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 250.712624][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 250.717682][ T29] ? timer_delete_sync+0x20/0x20 [ 250.722691][ T29] ? do_raw_read_unlock+0x80/0x80 [ 250.727744][ T29] ? prepare_to_wait+0x1aa/0x200 [ 250.732765][ T29] kjournald2+0x40f/0x810 [ 250.737152][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 250.742512][ T29] ? wake_bit_function+0x200/0x200 [ 250.747656][ T29] ? _raw_spin_unlock+0x40/0x40 [ 250.752749][ T29] ? __kthread_parkme+0x71/0x1c0 [ 250.757731][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 250.763661][ T29] kthread+0x2fa/0x390 [ 250.767753][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 250.773036][ T29] ? kthread_blkcg+0xd0/0xd0 [ 250.778278][ T29] ret_from_fork+0x48/0x80 [ 250.782781][ T29] ? kthread_blkcg+0xd0/0xd0 [ 250.787400][ T29] ret_from_fork_asm+0x11/0x20 [ 250.792237][ T29] [ 250.795282][ T29] INFO: task syz-executor:5758 blocked for more than 143 seconds. [ 250.803242][ T29] Not tainted syzkaller #0 [ 250.808193][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.816978][ T29] task:syz-executor state:D stack:22200 pid:5758 ppid:5757 flags:0x00004002 [ 250.826321][ T29] Call Trace: [ 250.829617][ T29] [ 250.832713][ T29] __schedule+0x15ae/0x4660 [ 250.837309][ T29] ? mark_lock+0x94/0x320 [ 250.841892][ T29] ? asan.module_dtor+0x20/0x20 [ 250.846878][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 250.852018][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 250.857977][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 250.863281][ T29] schedule+0xbd/0x170 [ 250.867379][ T29] io_schedule+0x80/0xd0 [ 250.871854][ T29] bit_wait_io+0x11/0xd0 [ 250.877122][ T29] __wait_on_bit+0x9f/0x2c0 [ 250.881748][ T29] ? bit_wait+0xd0/0xd0 [ 250.885929][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 250.892074][ T29] ? bit_wait+0xd0/0xd0 [ 250.896264][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 250.901111][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 250.906169][ T29] ? bit_waitqueue+0x30/0x30 [ 250.910841][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 250.916068][ T29] do_get_write_access+0x5c9/0xe00 [ 250.921284][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 250.927290][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 250.933590][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 250.939807][ T29] ? __might_sleep+0xe0/0xe0 [ 250.944428][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 250.950060][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 250.955566][ T29] ext4_dirty_inode+0xcb/0x110 [ 250.960381][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 250.966221][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 250.971345][ T29] file_update_time+0x187/0x1a0 [ 250.976215][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 250.982490][ T29] ? do_wp_page+0x4ce/0x34d0 [ 250.987134][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 250.993518][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 250.998572][ T29] do_page_mkwrite+0x153/0x3f0 [ 251.003433][ T29] do_wp_page+0xd4d/0x34d0 [ 251.007887][ T29] ? folio_put+0xd0/0xd0 [ 251.012205][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 251.017266][ T29] ? __rwlock_init+0x150/0x150 [ 251.022149][ T29] handle_mm_fault+0x1306/0x4a50 [ 251.027126][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 251.032238][ T29] ? numa_migrate_prep+0x350/0x350 [ 251.037370][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 251.042721][ T29] do_user_addr_fault+0x736/0x12d0 [ 251.047862][ T29] exc_page_fault+0x64/0x100 [ 251.052497][ T29] ? clear_bhb_loop+0x40/0x90 [ 251.057193][ T29] asm_exc_page_fault+0x26/0x30 [ 251.062136][ T29] RIP: 0033:0x7f8fbee7c6e2 [ 251.066571][ T29] RSP: 002b:00007ffc0024d0e0 EFLAGS: 00010202 [ 251.072701][ T29] RAX: 00007f8fbccb4000 RBX: 000055555d142550 RCX: 0000000000000006 [ 251.081994][ T29] RDX: 00000000000007c3 RSI: 000055555d135118 RDI: 0000000000000040 [ 251.090215][ T29] RBP: 00007ffc0024d5e0 R08: 000055555d135130 R09: 0000000000000092 [ 251.098267][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc0024d420 [ 251.106321][ T29] R13: 00007ffc0024d210 R14: 585858582e7a7973 R15: 00007ffc0024d160 [ 251.114373][ T29] [ 251.117518][ T29] INFO: task syz-executor:6025 blocked for more than 144 seconds. [ 251.125360][ T29] Not tainted syzkaller #0 [ 251.130385][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.139068][ T29] task:syz-executor state:D stack:21800 pid:6025 ppid:6005 flags:0x00004000 [ 251.148390][ T29] Call Trace: [ 251.151726][ T29] [ 251.154671][ T29] __schedule+0x15ae/0x4660 [ 251.159194][ T29] ? mark_lock+0x94/0x320 [ 251.163907][ T29] ? asan.module_dtor+0x20/0x20 [ 251.168795][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 251.173932][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 251.179912][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 251.185792][ T29] schedule+0xbd/0x170 [ 251.189967][ T29] io_schedule+0x80/0xd0 [ 251.194235][ T29] bit_wait_io+0x11/0xd0 [ 251.198479][ T29] __wait_on_bit+0x9f/0x2c0 [ 251.203175][ T29] ? bit_wait+0xd0/0xd0 [ 251.207471][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 251.213040][ T29] ? bit_wait+0xd0/0xd0 [ 251.217328][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 251.222190][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 251.227266][ T29] ? bit_waitqueue+0x30/0x30 [ 251.231965][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 251.237227][ T29] do_get_write_access+0x5c9/0xe00 [ 251.242445][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 251.248452][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 251.254704][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 251.261018][ T29] ? __ext4_handle_dirty_metadata+0x239/0x7f0 [ 251.267113][ T29] __ext4_new_inode+0x1a3e/0x3aa0 [ 251.272272][ T29] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 251.278020][ T29] ? dquot_initialize+0x20/0x20 [ 251.282964][ T29] ext4_mkdir+0x40b/0xc90 [ 251.287952][ T29] ? ext4_symlink+0x940/0x940 [ 251.292714][ T29] ? inode_permission+0xf3/0x480 [ 251.297673][ T29] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 251.302763][ T29] ? security_inode_mkdir+0xb7/0x100 [ 251.308074][ T29] vfs_mkdir+0x2a5/0x470 [ 251.312538][ T29] do_mkdirat+0x1dc/0x450 [ 251.316896][ T29] ? vfs_mkdir+0x470/0x470 [ 251.321434][ T29] __x64_sys_mkdirat+0x89/0xa0 [ 251.326228][ T29] do_syscall_64+0x55/0xb0 [ 251.330703][ T29] ? clear_bhb_loop+0x40/0x90 [ 251.335398][ T29] ? clear_bhb_loop+0x40/0x90 [ 251.340154][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.346080][ T29] RIP: 0033:0x7f9d1339cfc7 [ 251.350534][ T29] RSP: 002b:00007fff09bd24a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 251.358980][ T29] RAX: ffffffffffffffda RBX: 00007f9d13434aaf RCX: 00007f9d1339cfc7 [ 251.367043][ T29] RDX: 00000000000001ff RSI: 00007f9d13434aaf RDI: 00000000ffffff9c [ 251.375086][ T29] RBP: 00007f9d136267b8 R08: 0000000000000000 R09: 0000000000000000 [ 251.383112][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 251.392333][ T29] R13: 0000000000000003 R14: 00007fff09bd2718 R15: 0000000000000000 [ 251.400497][ T29] [ 251.403709][ T29] INFO: task syz.1.116:6156 blocked for more than 144 seconds. [ 251.411339][ T29] Not tainted syzkaller #0 [ 251.416283][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.425213][ T29] task:syz.1.116 state:D stack:27048 pid:6156 ppid:5774 flags:0x00004004 [ 251.434503][ T29] Call Trace: [ 251.437793][ T29] [ 251.440780][ T29] __schedule+0x15ae/0x4660 [ 251.445319][ T29] ? mark_lock+0x94/0x320 [ 251.449649][ T29] ? asan.module_dtor+0x20/0x20 [ 251.454581][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 251.459628][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 251.465664][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 251.470929][ T29] schedule+0xbd/0x170 [ 251.475035][ T29] io_schedule+0x80/0xd0 [ 251.479295][ T29] bit_wait_io+0x11/0xd0 [ 251.483588][ T29] __wait_on_bit+0x9f/0x2c0 [ 251.488111][ T29] ? bit_wait+0xd0/0xd0 [ 251.493421][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 251.499182][ T29] ? bit_wait+0xd0/0xd0 [ 251.503384][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 251.508179][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 251.513270][ T29] ? bit_waitqueue+0x30/0x30 [ 251.517880][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 251.523166][ T29] do_get_write_access+0x5c9/0xe00 [ 251.528303][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 251.534481][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 251.540720][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 251.546876][ T29] ? __might_sleep+0xe0/0xe0 [ 251.551525][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 251.557124][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 251.562820][ T29] ext4_dirty_inode+0xcb/0x110 [ 251.567604][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 251.573496][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 251.579161][ T29] file_update_time+0x187/0x1a0 [ 251.584114][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 251.589384][ T29] ? filemap_fault+0x103c/0x1540 [ 251.595122][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 251.600923][ T29] ? pte_alloc_one+0x3b6/0x540 [ 251.605729][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 251.612082][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 251.617157][ T29] do_page_mkwrite+0x153/0x3f0 [ 251.621992][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 251.626960][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 251.632029][ T29] ? numa_migrate_prep+0x350/0x350 [ 251.637185][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 251.642793][ T29] do_user_addr_fault+0x736/0x12d0 [ 251.647957][ T29] exc_page_fault+0x64/0x100 [ 251.652654][ T29] asm_exc_page_fault+0x26/0x30 [ 251.657529][ T29] RIP: 0033:0x7f0679472809 [ 251.662179][ T29] RSP: 002b:00007ffe55d90ab0 EFLAGS: 00010202 [ 251.668276][ T29] RAX: 0000001b2d824000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 251.676296][ T29] RDX: 0000001b2d823ffc RSI: 00000000005ffde8 RDI: 00007f067a355700 [ 251.684320][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f0679812000 [ 251.692426][ T29] R10: 00007f067a355700 R11: 0000000000000000 R12: 0000000000000000 [ 251.702238][ T29] R13: 000000000002176b R14: ffffffff81321df0 R15: 00007f067a355720 [ 251.710306][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 251.716438][ T29] [ 251.719508][ T29] INFO: task syz.3.117:6161 blocked for more than 144 seconds. [ 251.727109][ T29] Not tainted syzkaller #0 [ 251.732097][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.740829][ T29] task:syz.3.117 state:D stack:27560 pid:6161 ppid:5771 flags:0x00004004 [ 251.750289][ T29] Call Trace: [ 251.753584][ T29] [ 251.756511][ T29] __schedule+0x15ae/0x4660 [ 251.761108][ T29] ? mark_lock+0x94/0x320 [ 251.765461][ T29] ? asan.module_dtor+0x20/0x20 [ 251.770403][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 251.775458][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 251.781488][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 251.786719][ T29] schedule+0xbd/0x170 [ 251.790861][ T29] io_schedule+0x80/0xd0 [ 251.795136][ T29] bit_wait_io+0x11/0xd0 [ 251.800673][ T29] __wait_on_bit+0x9f/0x2c0 [ 251.805220][ T29] ? bit_wait+0xd0/0xd0 [ 251.809383][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 251.815308][ T29] ? bit_wait+0xd0/0xd0 [ 251.819503][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 251.824331][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 251.829361][ T29] ? bit_waitqueue+0x30/0x30 [ 251.834069][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 251.839323][ T29] do_get_write_access+0x5c9/0xe00 [ 251.844498][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 251.850549][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 251.856737][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 251.863191][ T29] ? __might_sleep+0xe0/0xe0 [ 251.867834][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 251.873476][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 251.878995][ T29] ext4_dirty_inode+0xcb/0x110 [ 251.883955][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 251.889854][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 251.894963][ T29] file_update_time+0x187/0x1a0 [ 251.899882][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 251.905988][ T29] ? filemap_fault+0x103c/0x1540 [ 251.911049][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 251.916791][ T29] ? pte_alloc_one+0x3b6/0x540 [ 251.921613][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 251.927889][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 251.933056][ T29] do_page_mkwrite+0x153/0x3f0 [ 251.937877][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 251.942875][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 251.947831][ T29] ? numa_migrate_prep+0x350/0x350 [ 251.953025][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 251.958337][ T29] do_user_addr_fault+0x736/0x12d0 [ 251.963528][ T29] exc_page_fault+0x64/0x100 [ 251.968143][ T29] ? clear_bhb_loop+0x40/0x90 [ 251.973051][ T29] asm_exc_page_fault+0x26/0x30 [ 251.977931][ T29] RIP: 0033:0x7f4d7486baa3 [ 251.982427][ T29] RSP: 002b:00007fff0d5252f0 EFLAGS: 00010246 [ 251.988555][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d464000 [ 251.996612][ T29] RDX: 0000001b2d424000 RSI: 0000000000600000 RDI: 00007f4d74be0708 [ 252.005292][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.013401][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 252.021444][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff0d525580 [ 252.029457][ T29] [ 252.032547][ T29] INFO: task syz.2.118:6162 blocked for more than 145 seconds. [ 252.040158][ T29] Not tainted syzkaller #0 [ 252.045152][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.053905][ T29] task:syz.2.118 state:D stack:27368 pid:6162 ppid:5769 flags:0x00004004 [ 252.063188][ T29] Call Trace: [ 252.066464][ T29] [ 252.069388][ T29] __schedule+0x15ae/0x4660 [ 252.073978][ T29] ? mark_lock+0x94/0x320 [ 252.078327][ T29] ? asan.module_dtor+0x20/0x20 [ 252.083393][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 252.088451][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 252.094411][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 252.099631][ T29] schedule+0xbd/0x170 [ 252.103747][ T29] io_schedule+0x80/0xd0 [ 252.108615][ T29] bit_wait_io+0x11/0xd0 [ 252.112964][ T29] __wait_on_bit+0x9f/0x2c0 [ 252.117523][ T29] ? bit_wait+0xd0/0xd0 [ 252.121965][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 252.127626][ T29] ? bit_wait+0xd0/0xd0 [ 252.131876][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 252.136666][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 252.141755][ T29] ? bit_waitqueue+0x30/0x30 [ 252.146373][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 252.151668][ T29] do_get_write_access+0x5c9/0xe00 [ 252.156819][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 252.162874][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 252.169087][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 252.175322][ T29] ? __might_sleep+0xe0/0xe0 [ 252.179976][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 252.185570][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 252.191285][ T29] ext4_dirty_inode+0xcb/0x110 [ 252.196073][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 252.202416][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 252.208493][ T29] file_update_time+0x187/0x1a0 [ 252.213447][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 252.218584][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 252.224617][ T29] ? asm_sysvec_call_function_single+0x1a/0x20 [ 252.230841][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 252.237130][ T29] ? asm_sysvec_call_function_single+0x1a/0x20 [ 252.243355][ T29] do_page_mkwrite+0x153/0x3f0 [ 252.248144][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 252.253148][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 252.258107][ T29] ? numa_migrate_prep+0x350/0x350 [ 252.263275][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 252.268572][ T29] do_user_addr_fault+0x736/0x12d0 [ 252.273778][ T29] exc_page_fault+0x64/0x100 [ 252.278393][ T29] ? clear_bhb_loop+0x40/0x90 [ 252.283152][ T29] asm_exc_page_fault+0x26/0x30 [ 252.288019][ T29] RIP: 0033:0x7fbb1586baa3 [ 252.292498][ T29] RSP: 002b:00007fff6ad37c80 EFLAGS: 00010246 [ 252.298573][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d364000 [ 252.306759][ T29] RDX: 0000001b2d324000 RSI: 0000000000400000 RDI: 00007fbb15be0708 [ 252.315703][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.323744][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 252.331793][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff6ad37f10 [ 252.339911][ T29] [ 252.342981][ T29] [ 252.342981][ T29] Showing all locks held in the system: [ 252.350787][ T29] 1 lock held by khungtaskd/29: [ 252.355650][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 252.365631][ T29] 4 locks held by kworker/u4:10/3534: [ 252.371052][ T29] #0: ffff888145e5d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 252.382394][ T29] #1: ffffc9000d087d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 252.395010][ T29] #2: ffff88814e4ea0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 252.405660][ T29] #3: ffff88814e4ecc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 252.417299][ T29] 2 locks held by getty/5522: [ 252.422095][ T29] #0: ffff88802d27f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 252.431924][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 252.442461][ T29] 3 locks held by syz-executor/5758: [ 252.447863][ T29] #0: ffff88802e2d4420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 252.457885][ T29] #1: ffff88814e4ea510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 252.467714][ T29] #2: ffff88814e4ee990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 252.477580][ T29] 3 locks held by syz-executor/6025: [ 252.482959][ T29] #0: ffff88814e4ea418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 252.492333][ T29] #1: ffff888077e71810 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 252.503140][ T29] #2: ffff88814e4ee990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 252.512888][ T29] 3 locks held by syz.1.116/6156: [ 252.518522][ T29] #0: ffff8880187e1e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 252.528688][ T29] #1: ffff88814e4ea510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 252.538533][ T29] #2: ffff88814e4ee990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 252.548290][ T29] 3 locks held by syz.3.117/6161: [ 252.553372][ T29] #0: ffff8880187e3120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 252.563388][ T29] #1: ffff88814e4ea510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 252.573336][ T29] #2: ffff88814e4ee990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 252.583096][ T29] 3 locks held by syz.2.118/6162: [ 252.588137][ T29] #0: ffff88807c824420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 252.598167][ T29] #1: ffff88814e4ea510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 252.608206][ T29] #2: ffff88814e4ee990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 252.618708][ T29] [ 252.621146][ T29] ============================================= [ 252.621146][ T29] [ 252.629577][ T29] NMI backtrace for cpu 1 [ 252.633912][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 252.641132][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.651202][ T29] Call Trace: [ 252.654480][ T29] [ 252.657406][ T29] dump_stack_lvl+0x18c/0x250 [ 252.662087][ T29] ? __wake_up_klogd+0xd9/0x100 [ 252.666939][ T29] ? show_regs_print_info+0x20/0x20 [ 252.672147][ T29] ? load_image+0x420/0x420 [ 252.676666][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 252.681605][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 252.687766][ T29] ? load_image+0x420/0x420 [ 252.692288][ T29] ? wq_watchdog_touch+0xef/0x170 [ 252.697319][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 252.703386][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 252.709375][ T29] watchdog+0xf59/0xfa0 [ 252.713535][ T29] ? watchdog+0x1e1/0xfa0 [ 252.717864][ T29] kthread+0x2fa/0x390 [ 252.721932][ T29] ? hungtask_pm_notify+0x50/0x50 [ 252.726954][ T29] ? kthread_blkcg+0xd0/0xd0 [ 252.731540][ T29] ret_from_fork+0x48/0x80 [ 252.735958][ T29] ? kthread_blkcg+0xd0/0xd0 [ 252.740547][ T29] ret_from_fork_asm+0x11/0x20 [ 252.745324][ T29] [ 252.749538][ T29] Sending NMI from CPU 1 to CPUs 0: [ 252.755103][ C0] NMI backtrace for cpu 0 [ 252.755113][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 252.755127][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.755136][ C0] Workqueue: bat_events batadv_nc_worker [ 252.755160][ C0] RIP: 0010:check_preemption_disabled+0x60/0x110 [ 252.755179][ C0] Code: 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> cc 65 4c 8b 3d a6 57 72 75 41 f6 47 2f 04 74 0a 41 83 bf 10 04 [ 252.755190][ C0] RSP: 0018:ffffc90000107a08 EFLAGS: 00000046 [ 252.755202][ C0] RAX: 0000000000000000 RBX: ffff88801be6c6e4 RCX: 0000000080000000 [ 252.755212][ C0] RDX: 0000000000000000 RSI: ffffffff8acad9c0 RDI: ffffffff8b1d3ba0 [ 252.755222][ C0] RBP: ffffc90000107b50 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 252.755232][ C0] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffffffff8a586692 [ 252.755242][ C0] R13: dffffc0000000000 R14: ffff88801be6bc00 R15: 1ffff92000020f54 [ 252.755253][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 252.755265][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.755275][ C0] CR2: 000055eac2428660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 252.755288][ C0] Call Trace: [ 252.755293][ C0] [ 252.755300][ C0] lock_release+0x15c/0x8c0 [ 252.755321][ C0] ? batadv_nc_worker+0xd2/0x600 [ 252.755340][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 252.755356][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 252.755373][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 252.755391][ C0] ? batadv_nc_worker+0xd2/0x600 [ 252.755409][ C0] batadv_nc_worker+0x28b/0x600 [ 252.755429][ C0] ? process_scheduled_works+0x975/0x1600 [ 252.755448][ C0] process_scheduled_works+0xa60/0x1600 [ 252.755478][ C0] ? worker_attach_to_pool+0x370/0x370 [ 252.755499][ C0] ? assign_work+0x3cc/0x5d0 [ 252.755518][ C0] worker_thread+0xa5e/0xfe0 [ 252.755554][ C0] kthread+0x2fa/0x390 [ 252.755567][ C0] ? pr_cont_work+0x550/0x550 [ 252.755584][ C0] ? kthread_blkcg+0xd0/0xd0 [ 252.755598][ C0] ret_from_fork+0x48/0x80 [ 252.755615][ C0] ? kthread_blkcg+0xd0/0xd0 [ 252.755630][ C0] ret_from_fork_asm+0x11/0x20 [ 252.755655][ C0] [ 252.756189][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 252.982798][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 252.989985][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.000080][ T29] Call Trace: [ 253.003362][ T29] [ 253.006287][ T29] dump_stack_lvl+0x18c/0x250 [ 253.010969][ T29] ? show_regs_print_info+0x20/0x20 [ 253.016170][ T29] ? load_image+0x420/0x420 [ 253.020694][ T29] panic+0x2ca/0x720 [ 253.024607][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 253.029119][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 253.034673][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 253.040054][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 253.046211][ T29] watchdog+0xf98/0xfa0 [ 253.050365][ T29] ? watchdog+0x1e1/0xfa0 [ 253.054703][ T29] kthread+0x2fa/0x390 [ 253.058775][ T29] ? hungtask_pm_notify+0x50/0x50 [ 253.063796][ T29] ? kthread_blkcg+0xd0/0xd0 [ 253.068479][ T29] ret_from_fork+0x48/0x80 [ 253.072901][ T29] ? kthread_blkcg+0xd0/0xd0 [ 253.077514][ T29] ret_from_fork_asm+0x11/0x20 [ 253.082299][ T29] [ 253.085636][ T29] Kernel Offset: disabled [ 253.089991][ T29] Rebooting in 86400 seconds..