last executing test programs: 24.225476018s ago: executing program 2 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 23.75331972s ago: executing program 2 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x1000003, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x80, 0x3, 0xe}, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.34033109s ago: executing program 2 (id=111): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)=0x400008, 0x4) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x4) madvise(0xffffffffffffffff, 0x0, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r1, 0x0, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5c7000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) 23.063867296s ago: executing program 1 (id=112): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 21.336214929s ago: executing program 1 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002080), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=l']) 20.093258859s ago: executing program 2 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x2) 18.150443517s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 16.582287215s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x1000003, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x80, 0x3, 0xe}, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.876341932s ago: executing program 1 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) 14.76017232s ago: executing program 0 (id=123): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)=0x400008, 0x4) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x4) madvise(0xffffffffffffffff, 0x0, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r1, 0x0, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5c7000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) 11.372707752s ago: executing program 0 (id=124): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e22, 0x2000, 0x2, 0xd1e4, 0xa, 0xa0, 0x0, 0xa3}, {0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100002000, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff3826}, 0x0, 0x6e6bba, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffd, 0x33}, 0x14, @in=@multicast1, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0x7, 0xfffffffe}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11.320273294s ago: executing program 1 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_test', 0x1, 0x1ce) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)='9,', 0x2}], 0x1) 8.777921686s ago: executing program 2 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 8.244382628s ago: executing program 3 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 7.35986683s ago: executing program 2 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00006fc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd70, 0x1f280, 0x0, 0x399}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') io_uring_enter(r1, 0x100, 0x11, 0x1f, 0x0, 0x0) 7.168400685s ago: executing program 3 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e010000380100000100"/42) 7.016356318s ago: executing program 0 (id=131): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") creat(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) 6.821039404s ago: executing program 3 (id=132): syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x699, &(0x7f00000019c0)="$eJzs3U1sHFcdAPD/rNdrbwip2zptQJVqNRIgLBI7lgvmQkCALNFDVQ6crcRpVtmkxd4it0J0+b720CtSOfiAxAmJe6Ry4QK3HnrxsRISl14wXBbN7Mx+b7rbfOym/f2i2fdm3sz7+M+8nfU61gTwubW7HuW7kcTu+ktH6frJ8Vb95HjrdpGPiKWIaEaUI6IUEcl/Wq3W+xFXI5JONclAGrHY3867tZ1XPvj45KP2Wjlfsv1Lfcd9Ks18ibWIWMjTB1XftfuuL+mM8GpEXMxTmLl0mrb6/PTvZ9sllb4dq6OOXn40nQQeqqR93xyyEnEmn+jp54D2XbF9z36sNWfdAQAAAHgEnjiN0zhKzs26HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC4aHaf/5/kS6nIr0VSPP+/km+LPD9fnr93cSlfCncfdn8AAAAAAAAAYFpL0x/y/GmcxlGcK9ZbSfbr8ReyldXs9QvxRhzGfhzEpTiKvWhEIw5iMyJWeiqqHO01GgebExx5ZeSRVyYcW3WoZHgLAAAAAAAAAHz+/Cp2u7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAeZBELLSTbFmNcnvzSpTS3HJEVNINzYh/FvnH2d1ZdwAAAADuX3XUxqWe/BOncRpHca5YbyWxGhHPZD//L8cbcScaUYtG1GM/rmffCbR/6i+dHG/VT463bqfLcBvf/fdU/cxqjPZ3D6NbvpDtUY0bUcu2XIpr8VrU43qUsiNTF/L+FLUO9OuXaZ+S7+Qm7Nn1PE1H/k6eDnl7qsGOc+8vU24t55mFPF3JIrLYichG3rc0Gk8WZ6Zzhvq6WJydxck6NtjSZpQ6nV0daGlgEN2YL0/WVupMnqbj+d24mM9EXySyEXWvvmeGYj7gq3/9809u1u/cunnjcH1+hjSZ4qJrZa/V4WtiqycSz36WIzFkI4vE+c76bvwwfhzrsRYvx0HU4mexF43Yj7X4fpbby6/npGfKj4nU1b61l8d0oPPmXcmv0PbJKsX58uR9eiE79lzUOm8KL2b/rsRmfDO2Yzt2es7w+Xuf4WzWl8a807a+OHIUF7+WZ9J71u/H3btmIo3rk0Vck+h7z13Jynq3dKP01ARRmvJ+VP5yPgfTNn6dp/NhMBKbPZF4+t6R+GM2pMP6nVsHN/den6y5p97JM+k8+u1c3SUq+RxqT7/+qyO9lp4eWbaZla12ykpDZec7Ze2Z2ozX4nrsj5iplfwz3HBNV7KyZ0eWbWVlF3rKRn3eAmCupbfDM18/U6n+q/qP6nvV31RvVl9a/t7St5aeq8Ti3xa/Xd5Y+ErpueQv8V78ovsREgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+PQO33zr1l69vn/Ql2nWW63W2yOL7jfz4Yd/yh7w9OBrniRTPM7sETb6pbMRn7jz2ZlE474zSTLpzv9ttVr5luTBdaMUD2dcrdy8xHkWmdm+LwEP3+XG7dcvH7751jdqt/de3X91/87O9vbOxs72i1uXb9Tq+xvt18GjpnimKzC3ujf9wZI/zKZDAAAAAAAAAAAAwCca+b///xcP7K8IklkPEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjs7a5H+W4ksblxaSNdPzneqqdLke/uWY6IUkQkP49I3o+4Gu0lVnqqS8a1825t55UPPj75qFtXudi/NOK4H0w3ima+xFpELORp4UcTVVEeW9+1wdKpJZ0RpgG7WAQOZu3/AQAA//8BWAqO") mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6.52232631s ago: executing program 0 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) 6.248255678s ago: executing program 3 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.51919393s ago: executing program 0 (id=135): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010102}}, 0x0, 0x0, 0x33, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) r6 = socket(0xa, 0x3, 0xff) sendmmsg$inet6(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6", 0x26}], 0x1}}], 0x1, 0x4046040) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.787444592s ago: executing program 3 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e6509625285a565d235077879efa843", 0x12, 0x2) 380.944911ms ago: executing program 0 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 0s ago: executing program 3 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x398}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 83.525848][ T5759] cgroup: Unknown subsys name 'net' [ 83.661555][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.445304][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.268480][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.277264][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.285733][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.294709][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.303244][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.311580][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.319363][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.329195][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.336753][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.345987][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.354107][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.361529][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.369551][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.387300][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.403779][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.422578][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.432752][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.443632][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.451121][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.461686][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.469014][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.477724][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.487204][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.494730][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.114976][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.228029][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.256854][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.375297][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.383227][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.390589][ T5772] bridge_slave_0: entered allmulticast mode [ 88.398783][ T5772] bridge_slave_0: entered promiscuous mode [ 88.414744][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.422187][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.429555][ T5772] bridge_slave_1: entered allmulticast mode [ 88.437123][ T5772] bridge_slave_1: entered promiscuous mode [ 88.444623][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 88.531117][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.540506][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.551392][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.558637][ T5778] bridge_slave_0: entered allmulticast mode [ 88.566537][ T5778] bridge_slave_0: entered promiscuous mode [ 88.597663][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.617851][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.627957][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.635563][ T5778] bridge_slave_1: entered allmulticast mode [ 88.642938][ T5778] bridge_slave_1: entered promiscuous mode [ 88.660672][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.671458][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.678983][ T5779] bridge_slave_0: entered allmulticast mode [ 88.687289][ T5779] bridge_slave_0: entered promiscuous mode [ 88.727378][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.734656][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.742046][ T5779] bridge_slave_1: entered allmulticast mode [ 88.749841][ T5779] bridge_slave_1: entered promiscuous mode [ 88.776679][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.805417][ T5772] team0: Port device team_slave_0 added [ 88.836350][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.869794][ T5772] team0: Port device team_slave_1 added [ 88.909586][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.922121][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.952370][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.962778][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.970015][ T5771] bridge_slave_0: entered allmulticast mode [ 88.977792][ T5771] bridge_slave_0: entered promiscuous mode [ 88.989122][ T5778] team0: Port device team_slave_0 added [ 88.999733][ T5778] team0: Port device team_slave_1 added [ 89.029096][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.036215][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.062670][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.076607][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.083800][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.109876][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.121712][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.129260][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.136608][ T5771] bridge_slave_1: entered allmulticast mode [ 89.144192][ T5771] bridge_slave_1: entered promiscuous mode [ 89.159840][ T5779] team0: Port device team_slave_0 added [ 89.169367][ T5779] team0: Port device team_slave_1 added [ 89.229760][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.242692][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.268795][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.309481][ T5772] hsr_slave_0: entered promiscuous mode [ 89.316736][ T5772] hsr_slave_1: entered promiscuous mode [ 89.339440][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.346878][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.373146][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.385255][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.392252][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.418528][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.432367][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.443675][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.450670][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.475587][ T5083] Bluetooth: hci2: command tx timeout [ 89.477193][ T51] Bluetooth: hci3: command tx timeout [ 89.491250][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.520386][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.552653][ T51] Bluetooth: hci0: command tx timeout [ 89.558395][ T51] Bluetooth: hci1: command tx timeout [ 89.628298][ T5771] team0: Port device team_slave_0 added [ 89.639432][ T5771] team0: Port device team_slave_1 added [ 89.682370][ T5779] hsr_slave_0: entered promiscuous mode [ 89.689867][ T5779] hsr_slave_1: entered promiscuous mode [ 89.696840][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.705454][ T5779] Cannot create hsr debugfs directory [ 89.751157][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.758396][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.784446][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.814557][ T5778] hsr_slave_0: entered promiscuous mode [ 89.823449][ T5778] hsr_slave_1: entered promiscuous mode [ 89.829979][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.837793][ T5778] Cannot create hsr debugfs directory [ 89.851702][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.859267][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.885570][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.096786][ T5771] hsr_slave_0: entered promiscuous mode [ 90.103902][ T5771] hsr_slave_1: entered promiscuous mode [ 90.110712][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.118407][ T5771] Cannot create hsr debugfs directory [ 90.369036][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.388389][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.400842][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.439790][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.492224][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.508386][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.536178][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.548915][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.633845][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.656118][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.668140][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.706780][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.827343][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.855766][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.868059][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.888984][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.927583][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.968085][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.011724][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.058824][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.070020][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.079708][ T2198] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.087205][ T2198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.124611][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.131810][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.148295][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.169607][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.176914][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.225676][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.232919][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.249875][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.257062][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.267573][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.274813][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.362143][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.404506][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.467740][ T2198] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.475024][ T2198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.549424][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.556652][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.564739][ T51] Bluetooth: hci3: command tx timeout [ 91.565677][ T5083] Bluetooth: hci2: command tx timeout [ 91.634538][ T5083] Bluetooth: hci0: command tx timeout [ 91.640064][ T5083] Bluetooth: hci1: command tx timeout [ 91.897217][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.009198][ T5778] veth0_vlan: entered promiscuous mode [ 92.040910][ T5778] veth1_vlan: entered promiscuous mode [ 92.106726][ T5778] veth0_macvtap: entered promiscuous mode [ 92.166274][ T5778] veth1_macvtap: entered promiscuous mode [ 92.210263][ T788] cfg80211: failed to load regulatory.db [ 92.244316][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.264205][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.290717][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.308537][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.322029][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.345007][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.356224][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.368141][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.377017][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.502091][ T5772] veth0_vlan: entered promiscuous mode [ 92.528619][ T5771] veth0_vlan: entered promiscuous mode [ 92.565238][ T5772] veth1_vlan: entered promiscuous mode [ 92.608381][ T5771] veth1_vlan: entered promiscuous mode [ 92.645393][ T5779] veth0_vlan: entered promiscuous mode [ 92.658971][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.685457][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.717785][ T5772] veth0_macvtap: entered promiscuous mode [ 92.740887][ T5779] veth1_vlan: entered promiscuous mode [ 92.777007][ T5772] veth1_macvtap: entered promiscuous mode [ 92.800592][ T2198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.815513][ T5771] veth0_macvtap: entered promiscuous mode [ 92.816233][ T2198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.857615][ T5771] veth1_macvtap: entered promiscuous mode [ 92.883326][ T5779] veth0_macvtap: entered promiscuous mode [ 92.894028][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.906175][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.919497][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.945637][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.963319][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.978090][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.003336][ T5779] veth1_macvtap: entered promiscuous mode [ 93.021238][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.032326][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.045149][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.057337][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.070024][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.093004][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.101781][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.111991][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.121437][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.162227][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.186284][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.196401][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.228011][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.251059][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.792494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.283332][ T5083] Bluetooth: hci3: command tx timeout [ 95.283750][ T51] Bluetooth: hci2: command tx timeout [ 95.288802][ T5083] Bluetooth: hci1: command tx timeout [ 95.294255][ T51] Bluetooth: hci0: command tx timeout [ 95.339484][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.362810][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.384684][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.402211][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.420452][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.431902][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.448625][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.485238][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.498782][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.511933][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.521146][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.558515][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.580338][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.590728][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.605011][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.615482][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.626355][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.640988][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.689233][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.698522][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.715611][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.724464][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.820603][ T2198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.844276][ T2198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.975496][ T2198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.002811][ T2198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.019752][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.042769][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.131213][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.172082][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.211296][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.263035][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.383620][ T2198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.391563][ T2198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.552951][ T5850] syz.3.5[5850]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.607669][ T5850] loop3: detected capacity change from 0 to 512 [ 96.628873][ T5824] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.688697][ T788] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0001/input/input5 [ 96.709019][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.777981][ T5850] loop3: detected capacity change from 0 to 128 [ 96.787687][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.790677][ T788] hid-generic 0005:057C:0306.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 96.827727][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.843080][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 96.855702][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.881821][ T5824] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 96.887537][ T5776] Buffer I/O error on dev loop3, logical block 0, async page read [ 96.900444][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.912986][ T5824] usb 3-1: Product: syz [ 96.917232][ T5824] usb 3-1: Manufacturer: syz [ 96.924505][ T5824] usb 3-1: SerialNumber: syz [ 96.948068][ T5850] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 97.084451][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 97.255891][ T5855] fido_id[5855]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.273145][ T5857] loop1: detected capacity change from 0 to 512 [ 97.290234][ T5824] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 97.313876][ T51] Bluetooth: hci0: command tx timeout [ 97.314721][ T5777] Bluetooth: hci1: command tx timeout [ 97.319348][ T51] Bluetooth: hci2: command tx timeout [ 97.319375][ T51] Bluetooth: hci3: command tx timeout [ 97.360646][ T5824] usb 3-1: USB disconnect, device number 2 [ 97.524202][ T5857] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.6: iget: bad i_size value: 38620345925642 [ 99.236763][ T5857] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.6: couldn't read orphan inode 15 (err -117) [ 99.654274][ T5857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.805126][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 99.921965][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.274849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 102.187532][ T5884] loop0: detected capacity change from 0 to 512 [ 102.194846][ T5884] ext4: Unknown parameter 'defcontext' [ 102.472596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.581238][ T5887] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 102.680712][ T5863] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.753021][ T5862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 102.888251][ T2198] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 528 with error 28 [ 102.912652][ T2198] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.912652][ T2198] [ 102.922375][ T2198] EXT4-fs (loop1): Total free blocks count 0 [ 102.929223][ T2198] EXT4-fs (loop1): Free/Dirty block details [ 102.942375][ T2198] EXT4-fs (loop1): free_blocks=0 [ 102.948367][ T2198] EXT4-fs (loop1): dirty_blocks=532 [ 102.958463][ T2198] EXT4-fs (loop1): Block reservation details [ 102.964969][ T2198] EXT4-fs (loop1): i_reserved_data_blocks=532 [ 104.034696][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.663108][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 110.972557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.712569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.439333][ T5923] loop1: detected capacity change from 0 to 1024 [ 113.650143][ T27] audit: type=1800 audit(1788439076.560:2): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 113.742665][ T27] audit: type=1800 audit(1788439076.620:3): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 113.797283][ T27] audit: type=1800 audit(1788439076.630:4): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 115.272577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.832600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 118.797074][ T5937] loop0: detected capacity change from 0 to 512 [ 119.004066][ T5937] ext4: Unknown parameter 'defcontext' [ 119.036510][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 119.431093][ T5943] loop3: detected capacity change from 0 to 512 [ 119.458293][ T5943] ======================================================= [ 119.458293][ T5943] WARNING: The mand mount option has been deprecated and [ 119.458293][ T5943] and is ignored by this kernel. Remove the mand [ 119.458293][ T5943] option from the mount to silence this warning. [ 119.458293][ T5943] ======================================================= [ 119.607667][ T5943] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.3.32: corrupted xattr block 95: invalid header [ 119.643737][ T5943] EXT4-fs (loop3): Remounting filesystem read-only [ 119.650342][ T5943] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 119.717801][ T5943] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 119.757785][ T5943] EXT4-fs (loop3): 1 orphan inode deleted [ 119.769777][ T5943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.149548][ T5946] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 120.203411][ T27] audit: type=1326 audit(1788439083.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b699e159 code=0x7ffc0000 [ 120.234427][ T5946] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 120.367343][ T27] audit: type=1326 audit(1788439083.120:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b699e159 code=0x7ffc0000 [ 120.458488][ T27] audit: type=1326 audit(1788439083.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 120.482375][ T27] audit: type=1326 audit(1788439083.140:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 120.507648][ T27] audit: type=1326 audit(1788439083.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 120.531637][ T27] audit: type=1326 audit(1788439083.140:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 120.537317][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.558878][ T27] audit: type=1326 audit(1788439083.140:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 120.589063][ T27] audit: type=1326 audit(1788439083.150:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 120.614364][ T27] audit: type=1326 audit(1788439083.150:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 120.713716][ T27] audit: type=1326 audit(1788439083.150:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.3.32" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b695e98e code=0x7ffc0000 [ 122.546022][ T51] Bluetooth: hci2: command tx timeout [ 122.604276][ T5959] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 122.729021][ T5970] loop0: detected capacity change from 0 to 512 [ 122.951967][ T5970] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 122.973697][ T5970] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 122.981885][ T5970] System zones: 0-1, 15-15, 18-18, 34-34 [ 123.021289][ T5970] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.053284][ T5970] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.080202][ T5970] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 123.108925][ T5970] EXT4-fs (loop0): 1 truncate cleaned up [ 123.116772][ T5970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.162641][ T51] Bluetooth: hci1: command tx timeout [ 123.281366][ T5970] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 123.451144][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.572798][ T5981] loop3: detected capacity change from 0 to 256 [ 123.594392][ T5981] exfat: Bad value for 'uid' [ 123.702610][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.512609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.659190][ T5998] device-mapper: table: 248:0: zero-length target [ 126.700017][ T5998] device-mapper: ioctl: error adding target to table [ 126.743642][ T6003] syzkaller0: entered promiscuous mode [ 126.766048][ T6003] syzkaller0: entered allmulticast mode [ 128.610407][ T6020] loop3: detected capacity change from 0 to 1024 [ 128.649474][ T6020] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.759097][ T6020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.092655][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.632558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.112918][ T6039] process 'syz.1.54' launched './file0' with NULL argv: empty string added [ 134.238141][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.245329][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.162949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.897609][ T6063] device-mapper: table: 248:0: zero-length target [ 136.932553][ T6063] device-mapper: ioctl: error adding target to table [ 142.287221][ T6098] loop2: detected capacity change from 0 to 512 [ 142.294973][ T6098] ext4: Unknown parameter 'defcontext' [ 142.682671][ T5863] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.412352][ T6150] loop2: detected capacity change from 0 to 256 [ 153.482663][ T6150] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 154.387011][ T6150] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 154.422785][ T6150] exFAT-fs (loop2): Filesystem has been set read-only [ 154.431279][ T6153] syz.2.100: attempt to access beyond end of device [ 154.431279][ T6153] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 154.514028][ T6153] syz.2.100: attempt to access beyond end of device [ 154.514028][ T6153] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 156.184415][ T6153] syz.2.100: attempt to access beyond end of device [ 156.184415][ T6153] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 157.372561][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 157.372578][ T27] audit: type=1800 audit(1788439120.280:68): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.100" name="file1" dev="loop2" ino=1048594 res=0 errno=0 [ 163.513815][ T6199] 9p: Unknown Cache mode or invalid value l [ 176.570113][ T6248] loop0: detected capacity change from 0 to 1024 [ 176.738791][ T6248] hfsplus: invalid length 32517 has been corrected to 255 [ 176.805503][ T6248] hfsplus: invalid length 32517 has been corrected to 255 [ 176.842877][ T6248] hfsplus: invalid length 32517 has been corrected to 255 [ 176.920925][ T6253] loop3: detected capacity change from 0 to 1024 [ 176.997040][ T11] hfsplus: b-tree write err: -5, ino 25 [ 177.041348][ T11] hfsplus: b-tree write err: -5, ino 4 [ 177.070700][ T11] hfsplus: b-tree write err: -5, ino 2 [ 194.596399][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602922][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.032620][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 212.032864][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 212.039001][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 256.038416][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046171][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.476181][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.484023][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.992604][ T29] INFO: task syz-executor:5759 blocked for more than 143 seconds. [ 329.000789][ T29] Not tainted syzkaller #0 [ 329.006007][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.014852][ T29] task:syz-executor state:D stack:22888 pid:5759 ppid:5758 flags:0x00004002 [ 329.024466][ T29] Call Trace: [ 329.027821][ T29] [ 329.030828][ T29] __schedule+0x15ae/0x4660 [ 329.035502][ T29] ? mark_lock+0x94/0x320 [ 329.040018][ T29] ? asan.module_dtor+0x20/0x20 [ 329.045167][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 329.050266][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 329.056396][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 329.061702][ T29] schedule+0xbd/0x170 [ 329.065905][ T29] io_schedule+0x80/0xd0 [ 329.070329][ T29] bit_wait_io+0x11/0xd0 [ 329.075346][ T29] __wait_on_bit+0x9f/0x2c0 [ 329.079920][ T29] ? bit_wait+0xd0/0xd0 [ 329.084571][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 329.090100][ T29] ? bit_wait+0xd0/0xd0 [ 329.095645][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 329.100601][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 329.105767][ T29] ? bit_waitqueue+0x30/0x30 [ 329.110416][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 329.115756][ T29] do_get_write_access+0x5c9/0xe00 [ 329.120940][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 329.127158][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 329.133543][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 329.139758][ T29] ? __might_sleep+0xe0/0xe0 [ 329.144460][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 329.150073][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 329.155780][ T29] ext4_dirty_inode+0xcb/0x110 [ 329.160608][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 329.166513][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 329.171596][ T29] file_update_time+0x187/0x1a0 [ 329.177509][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 329.182700][ T29] ? do_wp_page+0x4ce/0x34d0 [ 329.187761][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 329.195357][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 329.200450][ T29] do_page_mkwrite+0x153/0x3f0 [ 329.205377][ T29] do_wp_page+0xd4d/0x34d0 [ 329.209855][ T29] ? folio_put+0xd0/0xd0 [ 329.214227][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 329.219402][ T29] ? __rwlock_init+0x150/0x150 [ 329.224274][ T29] handle_mm_fault+0x1306/0x4a50 [ 329.229285][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 329.234393][ T29] ? numa_migrate_prep+0x350/0x350 [ 329.239566][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 329.245060][ T29] do_user_addr_fault+0x736/0x12d0 [ 329.250252][ T29] exc_page_fault+0x64/0x100 [ 329.254981][ T29] ? clear_bhb_loop+0x40/0x90 [ 329.259721][ T29] asm_exc_page_fault+0x26/0x30 [ 329.268235][ T29] RIP: 0033:0x7f7e68c701e3 [ 329.272790][ T29] RSP: 002b:00007fff76b33240 EFLAGS: 00010206 [ 329.278916][ T29] RAX: 00007f7e643ff468 RBX: 00007fff76b33370 RCX: 0000000000000000 [ 329.292291][ T29] RDX: 00007f7e643ff464 RSI: 0000000000000008 RDI: 00007fff76b33370 [ 329.300438][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 329.314181][ T29] R10: 00007fff76b33350 R11: 0000000000000000 R12: 0000000000000000 [ 329.322231][ T29] R13: 0000000000000b98 R14: fffffffffffff468 R15: 0000000000000000 [ 329.330457][ T29] [ 329.336019][ T29] INFO: task syz.0.137:6269 blocked for more than 143 seconds. [ 329.343653][ T29] Not tainted syzkaller #0 [ 329.349240][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.358268][ T29] task:syz.0.137 state:D stack:27048 pid:6269 ppid:5779 flags:0x00004004 [ 329.367586][ T29] Call Trace: [ 329.370902][ T29] [ 329.373936][ T29] __schedule+0x15ae/0x4660 [ 329.378523][ T29] ? mark_lock+0x94/0x320 [ 329.382947][ T29] ? asan.module_dtor+0x20/0x20 [ 329.387869][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 329.393739][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 329.399699][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 329.405027][ T29] schedule+0xbd/0x170 [ 329.409163][ T29] io_schedule+0x80/0xd0 [ 329.413836][ T29] bit_wait_io+0x11/0xd0 [ 329.418177][ T29] __wait_on_bit+0x9f/0x2c0 [ 329.423260][ T29] ? bit_wait+0xd0/0xd0 [ 329.428196][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 329.434525][ T29] ? bit_wait+0xd0/0xd0 [ 329.438783][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 329.443654][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 329.448758][ T29] ? bit_waitqueue+0x30/0x30 [ 329.454506][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 329.459767][ T29] do_get_write_access+0x5c9/0xe00 [ 329.465102][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 329.471168][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 329.478250][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 329.484574][ T29] ? __might_sleep+0xe0/0xe0 [ 329.489270][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 329.496640][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 329.502200][ T29] ext4_dirty_inode+0xcb/0x110 [ 329.507172][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 329.513113][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 329.518207][ T29] file_update_time+0x187/0x1a0 [ 329.524247][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 329.529355][ T29] ? filemap_fault+0x103c/0x1540 [ 329.534683][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 329.540463][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 329.546876][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 329.551956][ T29] ? __pte_offset_map+0x20d/0x280 [ 329.557150][ T29] do_page_mkwrite+0x153/0x3f0 [ 329.561964][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 329.568063][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 329.573412][ T29] ? numa_migrate_prep+0x350/0x350 [ 329.578601][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 329.584199][ T29] do_user_addr_fault+0x736/0x12d0 [ 329.589372][ T29] exc_page_fault+0x64/0x100 [ 329.594298][ T29] ? clear_bhb_loop+0x40/0x90 [ 329.599461][ T29] asm_exc_page_fault+0x26/0x30 [ 329.604685][ T29] RIP: 0033:0x7f92750727a9 [ 329.609154][ T29] RSP: 002b:00007fff5e9d5140 EFLAGS: 00010202 [ 329.615584][ T29] RAX: 0000001b2d723000 RBX: ffffffff84b536cc RCX: 0000001b2d722ff8 [ 329.623838][ T29] RDX: 0000001b2d324220 RSI: 0000000000000008 RDI: 00007f9275f55720 [ 329.631892][ T29] RBP: 00000000000001dc R08: 00007f9275410000 R09: 00007f9275412000 [ 329.640113][ T29] R10: 0000000084b536d0 R11: 0000000000000010 R12: 00007f9275426038 [ 329.648224][ T29] R13: 0000000000000f85 R14: ffffffff84b538ec R15: 00007f9275f55720 [ 329.656549][ T29] ? get_random_u16+0x3dc/0x990 [ 329.661474][ T29] ? get_random_u16+0x1bc/0x990 [ 329.667683][ T29] [ 329.670766][ T29] INFO: task syz.3.138:6275 blocked for more than 144 seconds. [ 329.678488][ T29] Not tainted syzkaller #0 [ 329.683615][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.692320][ T29] task:syz.3.138 state:D stack:27304 pid:6275 ppid:5778 flags:0x00004004 [ 329.703997][ T29] Call Trace: [ 329.707333][ T29] [ 329.710285][ T29] __schedule+0x15ae/0x4660 [ 329.714924][ T29] ? asan.module_dtor+0x20/0x20 [ 329.719853][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 329.725103][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 329.731069][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 329.736415][ T29] schedule+0xbd/0x170 [ 329.740537][ T29] io_schedule+0x80/0xd0 [ 329.744887][ T29] bit_wait_io+0x11/0xd0 [ 329.749177][ T29] __wait_on_bit+0x9f/0x2c0 [ 329.753777][ T29] ? bit_wait+0xd0/0xd0 [ 329.757995][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 329.763556][ T29] ? bit_wait+0xd0/0xd0 [ 329.767758][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 329.772627][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 329.778514][ T29] ? bit_waitqueue+0x30/0x30 [ 329.784627][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 329.789887][ T29] do_get_write_access+0x5c9/0xe00 [ 329.795400][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 329.802645][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 329.808906][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 329.815530][ T29] ? __might_sleep+0xe0/0xe0 [ 329.820189][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 329.826259][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 329.831980][ T29] ext4_dirty_inode+0xcb/0x110 [ 329.836868][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 329.842824][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 329.847952][ T29] file_update_time+0x187/0x1a0 [ 329.853018][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 329.858110][ T29] ? filemap_fault+0x103c/0x1540 [ 329.863174][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 329.868939][ T29] ? pte_alloc_one+0x3b6/0x540 [ 329.873830][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 329.880127][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 329.885613][ T29] do_page_mkwrite+0x153/0x3f0 [ 329.891678][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 329.896824][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 329.901852][ T29] ? numa_migrate_prep+0x350/0x350 [ 329.908982][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 329.914562][ T29] do_user_addr_fault+0x736/0x12d0 [ 329.919750][ T29] exc_page_fault+0x64/0x100 [ 329.924546][ T29] ? clear_bhb_loop+0x40/0x90 [ 329.929297][ T29] asm_exc_page_fault+0x26/0x30 [ 329.934293][ T29] RIP: 0033:0x7f01b686baa3 [ 329.938755][ T29] RSP: 002b:00007ffeec9c0fd0 EFLAGS: 00010246 [ 329.944970][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d664000 [ 329.953097][ T29] RDX: 0000001b2d624000 RSI: 0000000000400000 RDI: 00007f01b6be0708 [ 329.961121][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.969189][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 329.977273][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeec9c1260 [ 329.985380][ T29] [ 329.988461][ T29] INFO: task syz.2.129:6276 blocked for more than 144 seconds. [ 329.997414][ T29] Not tainted syzkaller #0 [ 330.002461][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.013575][ T29] task:syz.2.129 state:D stack:27624 pid:6276 ppid:5772 flags:0x00004004 [ 330.023030][ T29] Call Trace: [ 330.026367][ T29] [ 330.029436][ T29] __schedule+0x15ae/0x4660 [ 330.034259][ T29] ? asan.module_dtor+0x20/0x20 [ 330.039210][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 330.044807][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 330.050742][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 330.056086][ T29] schedule+0xbd/0x170 [ 330.060214][ T29] io_schedule+0x80/0xd0 [ 330.064570][ T29] bit_wait_io+0x11/0xd0 [ 330.068875][ T29] __wait_on_bit+0x9f/0x2c0 [ 330.073523][ T29] ? bit_wait+0xd0/0xd0 [ 330.077760][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 330.083325][ T29] ? bit_wait+0xd0/0xd0 [ 330.087543][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 330.092344][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 330.097522][ T29] ? bit_waitqueue+0x30/0x30 [ 330.102307][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 330.108871][ T29] do_get_write_access+0x5c9/0xe00 [ 330.114132][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 330.121262][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 330.127557][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 330.134096][ T29] ? __might_sleep+0xe0/0xe0 [ 330.138760][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 330.144557][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 330.150100][ T29] ext4_dirty_inode+0xcb/0x110 [ 330.154996][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 330.160847][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 330.165980][ T29] file_update_time+0x187/0x1a0 [ 330.170982][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 330.177229][ T29] ? filemap_fault+0x103c/0x1540 [ 330.182234][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 330.188045][ T29] ? pte_alloc_one+0x3b6/0x540 [ 330.193029][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 330.199322][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 330.204449][ T29] do_page_mkwrite+0x153/0x3f0 [ 330.209286][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 330.215711][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 330.220723][ T29] ? numa_migrate_prep+0x350/0x350 [ 330.225985][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 330.231332][ T29] do_user_addr_fault+0x736/0x12d0 [ 330.236711][ T29] exc_page_fault+0x64/0x100 [ 330.241370][ T29] ? clear_bhb_loop+0x40/0x90 [ 330.246175][ T29] asm_exc_page_fault+0x26/0x30 [ 330.251066][ T29] RIP: 0033:0x7f5b5986baa3 [ 330.255593][ T29] RSP: 002b:00007ffe39847280 EFLAGS: 00010246 [ 330.261721][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d564000 [ 330.269806][ T29] RDX: 0000001b2d524000 RSI: 0000000000400000 RDI: 00007f5b59be0708 [ 330.277889][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.286016][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 330.294186][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe39847510 [ 330.302225][ T29] [ 330.305341][ T29] [ 330.305341][ T29] Showing all locks held in the system: [ 330.313598][ T29] 1 lock held by khungtaskd/29: [ 330.318494][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 330.328612][ T29] 6 locks held by kworker/u4:7/2902: [ 330.334003][ T29] #0: ffff888141e7d138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 330.345917][ T29] #1: ffffc9000bae7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 330.358784][ T29] #2: ffff88802cb660e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 330.369505][ T29] #3: ffff88802cb70c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 330.380101][ T29] #4: ffff88802cb72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 330.389875][ T29] #5: ffff8880772d5288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 330.399790][ T29] 2 locks held by getty/5526: [ 330.404585][ T29] #0: ffff88814cb870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 330.414948][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 330.425489][ T29] 3 locks held by syz-executor/5759: [ 330.430828][ T29] #0: ffff88802f6bd720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 330.441485][ T29] #1: ffff88802cb66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 330.451710][ T29] #2: ffff88802cb72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 330.461681][ T29] 3 locks held by syz.0.137/6269: [ 330.466809][ T29] #0: ffff88807d156a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 330.476867][ T29] #1: ffff88802cb66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 330.486804][ T29] #2: ffff88802cb72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 330.496732][ T29] 3 locks held by syz.3.138/6275: [ 330.501800][ T29] #0: ffff88807d155720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 330.511831][ T29] #1: ffff88802cb66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 330.528132][ T29] #2: ffff88802cb72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 330.537975][ T29] 3 locks held by syz.2.129/6276: [ 330.543358][ T29] #0: ffff88802504e0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 330.553447][ T29] #1: ffff88802cb66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 330.563471][ T29] #2: ffff88802cb72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 330.573285][ T29] [ 330.575653][ T29] ============================================= [ 330.575653][ T29] [ 330.584182][ T29] NMI backtrace for cpu 1 [ 330.588566][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 330.595794][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.605878][ T29] Call Trace: [ 330.609163][ T29] [ 330.612104][ T29] dump_stack_lvl+0x18c/0x250 [ 330.616797][ T29] ? __wake_up_klogd+0xd9/0x100 [ 330.621679][ T29] ? show_regs_print_info+0x20/0x20 [ 330.626921][ T29] ? load_image+0x420/0x420 [ 330.631450][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 330.636416][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 330.642599][ T29] ? load_image+0x420/0x420 [ 330.647146][ T29] ? wq_watchdog_touch+0xef/0x170 [ 330.652224][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 330.658353][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 330.664413][ T29] watchdog+0xf59/0xfa0 [ 330.668793][ T29] ? watchdog+0x1e1/0xfa0 [ 330.673177][ T29] kthread+0x2fa/0x390 [ 330.677277][ T29] ? hungtask_pm_notify+0x50/0x50 [ 330.682322][ T29] ? kthread_blkcg+0xd0/0xd0 [ 330.686970][ T29] ret_from_fork+0x48/0x80 [ 330.691399][ T29] ? kthread_blkcg+0xd0/0xd0 [ 330.696010][ T29] ret_from_fork_asm+0x11/0x20 [ 330.700849][ T29] [ 330.704460][ T29] Sending NMI from CPU 1 to CPUs 0: [ 330.709823][ C0] NMI backtrace for cpu 0 [ 330.709834][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 330.709850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.709860][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 330.709884][ C0] RIP: 0010:__alloc_pages+0x1b2/0x460 [ 330.709902][ C0] Code: e0 49 2b 44 24 60 48 3d 00 0e 00 00 75 34 83 3d eb 9c b8 0c 02 72 24 49 81 c4 98 f9 ff ff 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 e7 e8 94 09 0c 00 49 83 3c 24 00 74 07 41 81 cd 00 01 [ 330.709916][ C0] RSP: 0018:ffffc90000b9f7c0 EFLAGS: 00000246 [ 330.709929][ C0] RAX: 1ffff11027fff4f3 RBX: 1ffff92000173efc RCX: ffffffff81c346cd [ 330.709941][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff88813fffae60 [ 330.709952][ C0] RBP: ffffc90000b9f8b8 R08: ffff88801aa9ed0f R09: 1ffff11003553da1 [ 330.709965][ C0] R10: dffffc0000000000 R11: ffffed1003553da2 R12: ffff88813fffa798 [ 330.709977][ C0] R13: 0000000000000800 R14: 00000000000d2820 R15: dffffc0000000000 [ 330.709988][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 330.710001][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.710012][ C0] CR2: 000055664001d168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 330.710027][ C0] Call Trace: [ 330.710032][ C0] [ 330.710040][ C0] ? zone_statistics+0x170/0x170 [ 330.710061][ C0] ? alloc_pages+0x4e1/0x740 [ 330.710081][ C0] alloc_slab_page+0x5d/0x180 [ 330.710100][ C0] new_slab+0x87/0x2d0 [ 330.710116][ C0] ___slab_alloc+0xc5c/0x12f0 [ 330.710133][ C0] ? __alloc_skb+0x138/0x2c0 [ 330.710155][ C0] __kmem_cache_alloc_node+0x11f/0x250 [ 330.710179][ C0] ? __alloc_skb+0x138/0x2c0 [ 330.710198][ C0] ? __alloc_skb+0x138/0x2c0 [ 330.710213][ C0] __kmalloc_node_track_caller+0xa4/0x230 [ 330.710239][ C0] ? rcu_is_watching+0x15/0xb0 [ 330.710262][ C0] ? __alloc_skb+0x138/0x2c0 [ 330.710278][ C0] kmalloc_reserve+0x116/0x240 [ 330.710298][ C0] __alloc_skb+0x138/0x2c0 [ 330.710317][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 330.710341][ C0] ? process_scheduled_works+0x975/0x1600 [ 330.710364][ C0] process_scheduled_works+0xa60/0x1600 [ 330.710400][ C0] ? worker_attach_to_pool+0x370/0x370 [ 330.710425][ C0] ? assign_work+0x3cc/0x5d0 [ 330.710448][ C0] worker_thread+0xa5e/0xfe0 [ 330.710483][ C0] kthread+0x2fa/0x390 [ 330.710498][ C0] ? pr_cont_work+0x550/0x550 [ 330.710519][ C0] ? kthread_blkcg+0xd0/0xd0 [ 330.710535][ C0] ret_from_fork+0x48/0x80 [ 330.710555][ C0] ? kthread_blkcg+0xd0/0xd0 [ 330.710572][ C0] ret_from_fork_asm+0x11/0x20 [ 330.710609][ C0] [ 330.714319][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 330.714351][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 330.714411][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.714436][ T29] Call Trace: [ 330.714456][ T29] [ 330.714483][ T29] dump_stack_lvl+0x18c/0x250 [ 330.714560][ T29] ? show_regs_print_info+0x20/0x20 [ 330.714628][ T29] ? load_image+0x420/0x420 [ 330.714712][ T29] panic+0x2ca/0x720 [ 330.714805][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 330.714886][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 330.714951][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 330.715033][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 330.715125][ T29] watchdog+0xf98/0xfa0 [ 330.715201][ T29] ? watchdog+0x1e1/0xfa0 [ 330.715284][ T29] kthread+0x2fa/0x390 [ 330.715359][ T29] ? hungtask_pm_notify+0x50/0x50 [ 330.715453][ T29] ? kthread_blkcg+0xd0/0xd0 [ 330.715510][ T29] ret_from_fork+0x48/0x80 [ 330.715574][ T29] ? kthread_blkcg+0xd0/0xd0 [ 330.715639][ T29] ret_from_fork_asm+0x11/0x20 [ 330.715739][ T29] [ 330.716958][ T29] Kernel Offset: disabled [ 331.083309][ T29] Rebooting in 86400 seconds..