last executing test programs: 16.309603016s ago: executing program 0 (id=27): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 16.295987857s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x500, 0x4) 16.088963598s ago: executing program 0 (id=33): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) 16.043465653s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0xfff) 15.956040792s ago: executing program 0 (id=36): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a3705", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15.847489523s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) 15.676479201s ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='triple', 0x6) 15.618632956s ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, 0x0, 0xff0f) 15.555947513s ago: executing program 0 (id=46): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x6, @private1, 0x3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)="14", 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="bbcf", 0x2}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x218}}], 0x2, 0x200400c4) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000001880)=0x101f) 15.406024169s ago: executing program 0 (id=49): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 15.383027591s ago: executing program 1 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/ram0/queue/discard_max_bytes\x00', 0x1a1041, 0x171) write$cgroup_pid(r0, &(0x7f0000000540), 0x12) 15.250512504s ago: executing program 2 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10040003}, 0x8880) 15.18993802s ago: executing program 1 (id=54): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x2, 0x7c, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0xa}, @global=@item_4={0x3, 0x1, 0xb, "c41a40f6"}]}}, 0x0}, 0x0) 15.116675928s ago: executing program 2 (id=55): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 15.036503236s ago: executing program 2 (id=57): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]]}, 0x48}}, 0x80) 14.961250624s ago: executing program 2 (id=59): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') 14.887428432s ago: executing program 3 (id=60): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40044894) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x358, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 14.673229244s ago: executing program 3 (id=61): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x4, @remote, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x3813, @private1, 0xfffffff9}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000001c0)="fc", 0x1}], 0x1}}], 0x2, 0x20000801) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value, &(0x7f0000000cc0)=0x8) 14.596830421s ago: executing program 2 (id=62): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}}, 0x0) 14.473583204s ago: executing program 3 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2e, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @random="ed0b94fe5dfe", {0xe, 0x6}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x4202, 0x4, {0x0, 0x6, @default_ap_ssid}, @val, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20009804) 14.383734763s ago: executing program 3 (id=64): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) 14.159034786s ago: executing program 3 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.017350251s ago: executing program 2 (id=66): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) 13.996257333s ago: executing program 3 (id=67): set_mempolicy(0x4005, &(0x7f0000000000)=0x4000002, 0xa) syz_read_part_table(0x5f0, &(0x7f00000003c0)="$eJzs1M9rXFUUB/Dve/OrUxtGoS7EjYtSEGKrCOqiAxUJAUWjRcG/QKjgJtCFi8KYZF3/AbEWKoRsunEZcCPZFISgYHHhQgpuVXQRSr3y5k0mAVfS+CP084G8e8+7J+fcgTMTjrU6o1PJoJPkRJL7w9n77kFKNQvOLDTPMsrjbdLgkbyztTTIU292evPcJrWT9JPP3jookAySut9u9+3euP3Kr1uPlsPvsl3XOZXkg9lFJvsH03iQ/DTst/eel+Yhdmu8M1rfWF2+9uF4kOWrd59/r8rJ5qD0S6M3G5TtOi9ON/V0zhu/H03/wc1k2v/yncFjOZN8/nVZ+eXThXOX6t29T+6V0nwfmkHtVKPhUbTkf2Rzt12vZXz5zvLVu9dPr32/tjc8u3nl/GI3X3VSpTTnv1X9Oum80MxC3p9k9otpIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCNza7yz/d3GatVGk1LKM0tPfrzUnR1feLdOcjLJvXLu0L99MVt7D9r//nhntL4xL1P18lJSVv6St1jltWb9pk6q/FymHrQ5/7mne09kfWN1uR628fXTzz63tvfG2c0r5xcX5lnD+e7C9PlHSfXv3xUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB6WMinl5Uv1q7O42y4n9s+rXEx1KH9l0K6dbqobt7e+/OHbeWouHi78483RQfB2Z1qq/ctHSV6vksk/8on4O/4MAAD//8claQk=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000140)="c348", 0x2) 13.599358954s ago: executing program 32 (id=66): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) 0s ago: executing program 33 (id=49): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.158' (ED25519) to the list of known hosts. [ 74.108303][ T5769] cgroup: Unknown subsys name 'net' [ 74.278834][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.605495][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.108240][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.119346][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.127108][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.138558][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.139385][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.147116][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.157559][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.160664][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.174200][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.175194][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.189247][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.189643][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.196525][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.205079][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.210868][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.226826][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.233907][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.234535][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.248528][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.252702][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.276141][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.284877][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.293231][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.305770][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.363064][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 77.369237][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.375976][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 77.381756][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.389796][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 77.396414][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.403060][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.416749][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.450477][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 77.456655][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.695782][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.703224][ T5782] infiniband rxe0: set active [ 77.712633][ T5782] infiniband rxe0: added rxe_eth0 [ 77.791187][ T5782] RDS/IB: rxe0: added [ 77.804655][ T5782] smc: adding ib device rxe0 with port count 1 [ 77.810895][ T5782] smc: ib device rxe0 port 1 has pnetid [ 77.857420][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.877566][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.983032][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 78.101888][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 78.178567][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 78.256294][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.285652][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.295862][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.304646][ T5780] bridge_slave_0: entered allmulticast mode [ 78.312021][ T5780] bridge_slave_0: entered promiscuous mode [ 78.324821][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.331930][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.339575][ T5780] bridge_slave_1: entered allmulticast mode [ 78.347053][ T5780] bridge_slave_1: entered promiscuous mode [ 78.422998][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.430155][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.439784][ T5781] bridge_slave_0: entered allmulticast mode [ 78.446478][ T5781] bridge_slave_0: entered promiscuous mode [ 78.468400][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.477534][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.499676][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.512808][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.519997][ T5781] bridge_slave_1: entered allmulticast mode [ 78.527250][ T5781] bridge_slave_1: entered promiscuous mode [ 78.564745][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.605913][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.613185][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.620334][ T5783] bridge_slave_0: entered allmulticast mode [ 78.628151][ T5783] bridge_slave_0: entered promiscuous mode [ 78.659681][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.667740][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.675029][ T5783] bridge_slave_1: entered allmulticast mode [ 78.682211][ T5783] bridge_slave_1: entered promiscuous mode [ 78.691329][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.704870][ T5780] team0: Port device team_slave_0 added [ 78.735698][ T5780] team0: Port device team_slave_1 added [ 78.745192][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.756647][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.804520][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.880708][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.893610][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.900578][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.962969][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.976708][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.986955][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.016417][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.038681][ T5781] team0: Port device team_slave_0 added [ 79.048954][ T5783] team0: Port device team_slave_0 added [ 79.066552][ T5783] team0: Port device team_slave_1 added [ 79.113606][ T5781] team0: Port device team_slave_1 added [ 79.215286][ T5780] hsr_slave_0: entered promiscuous mode [ 79.221978][ T5780] hsr_slave_1: entered promiscuous mode [ 79.245879][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.252948][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.279165][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.291075][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.299143][ T5098] Bluetooth: hci2: command tx timeout [ 79.302267][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.304951][ T5796] Bluetooth: hci3: command tx timeout [ 79.334696][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.349857][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.356875][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.373569][ T5098] Bluetooth: hci0: command tx timeout [ 79.388927][ T5796] Bluetooth: hci1: command tx timeout [ 79.391517][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.426356][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.433594][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.468059][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.565614][ T5781] hsr_slave_0: entered promiscuous mode [ 79.571729][ T5781] hsr_slave_1: entered promiscuous mode [ 79.578004][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.586608][ T5781] Cannot create hsr debugfs directory [ 79.643339][ T5783] hsr_slave_0: entered promiscuous mode [ 79.651221][ T5783] hsr_slave_1: entered promiscuous mode [ 79.657483][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.665834][ T5783] Cannot create hsr debugfs directory [ 79.887169][ T5447] infiniband rxe0: set active [ 79.945791][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.965607][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.992789][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.039859][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.049220][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.100486][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.186711][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.197750][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.205201][ T5782] bridge_slave_0: entered allmulticast mode [ 80.211851][ T5782] bridge_slave_0: entered promiscuous mode [ 80.220570][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.227821][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.235105][ T5782] bridge_slave_1: entered allmulticast mode [ 80.241777][ T5782] bridge_slave_1: entered promiscuous mode [ 80.258006][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.280193][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.290506][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.301499][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.315346][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.345842][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.389677][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.429176][ T5782] team0: Port device team_slave_0 added [ 80.438648][ T5782] team0: Port device team_slave_1 added [ 80.444719][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.457863][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.494824][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.527340][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.535539][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.562533][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.593417][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.600365][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.627885][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.689480][ T5782] hsr_slave_0: entered promiscuous mode [ 80.696995][ T5782] hsr_slave_1: entered promiscuous mode [ 80.703449][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.710994][ T5782] Cannot create hsr debugfs directory [ 80.810060][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.820987][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.901387][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.936524][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.956192][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.963467][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.977967][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.985111][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.027859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.035039][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.049573][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.056739][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.071986][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.089066][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.106186][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.121067][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.139985][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.211039][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.248584][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.255754][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.291382][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.298562][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.373746][ T5098] Bluetooth: hci2: command tx timeout [ 81.379245][ T5796] Bluetooth: hci3: command tx timeout [ 81.430778][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.441637][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.454377][ T5098] Bluetooth: hci0: command tx timeout [ 81.459851][ T5796] Bluetooth: hci1: command tx timeout [ 81.551130][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.634377][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.658033][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.665212][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.689126][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.696282][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.775375][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.800291][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.925681][ T5783] veth0_vlan: entered promiscuous mode [ 81.977835][ T5783] veth1_vlan: entered promiscuous mode [ 81.997262][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.011609][ T5780] veth0_vlan: entered promiscuous mode [ 82.091969][ T5783] veth0_macvtap: entered promiscuous mode [ 82.137997][ T5780] veth1_vlan: entered promiscuous mode [ 82.195912][ T5783] veth1_macvtap: entered promiscuous mode [ 82.232899][ T5781] veth0_vlan: entered promiscuous mode [ 82.268912][ T5781] veth1_vlan: entered promiscuous mode [ 82.316485][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.347199][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.391808][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.409103][ T5781] veth0_macvtap: entered promiscuous mode [ 82.438269][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.448609][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.458279][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.467764][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.486629][ T5780] veth0_macvtap: entered promiscuous mode [ 82.507867][ T5781] veth1_macvtap: entered promiscuous mode [ 82.531968][ T5780] veth1_macvtap: entered promiscuous mode [ 82.615277][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.630170][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.642975][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.678146][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.689069][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.702193][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.711594][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.722365][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.732840][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.744099][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.755011][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.788096][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.799936][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.820191][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829295][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.838228][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.847136][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.861795][ T5782] veth0_vlan: entered promiscuous mode [ 82.884548][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.897048][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.907602][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.918542][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.929491][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.954048][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.963042][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.971740][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.981396][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.999875][ T5782] veth1_vlan: entered promiscuous mode [ 83.005634][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.016119][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.115480][ T5782] veth0_macvtap: entered promiscuous mode [ 83.158054][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.178876][ T5782] veth1_macvtap: entered promiscuous mode [ 83.214924][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.242705][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.262926][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.274587][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.284702][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.304892][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.320709][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.329651][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.341081][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.352396][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.361205][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.371201][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.381942][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.392282][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.403267][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.415477][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.455249][ T5796] Bluetooth: hci3: command tx timeout [ 83.472473][ T5098] Bluetooth: hci2: command tx timeout [ 83.509225][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.519200][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528765][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538365][ T5098] Bluetooth: hci1: command tx timeout [ 83.540296][ T5796] Bluetooth: hci0: command tx timeout [ 83.544300][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.600090][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.629581][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.647226][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.656881][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.729901][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.750867][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.835962][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.864899][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.881623][ T5895] syz.0.1[5895]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.915718][ T5895] loop0: detected capacity change from 0 to 512 [ 83.972360][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.015903][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.270111][ T5904] tipc: Started in network mode [ 84.282688][ T5904] tipc: Node identity 7f000001, cluster identity 4711 [ 84.290800][ T5904] tipc: New replicast peer: 127.0.0.1 [ 84.291246][ T5906] loop3: detected capacity change from 0 to 256 [ 84.301731][ T5904] tipc: Enabled bearer , priority 10 [ 84.309635][ T5903] tipc: Started in network mode [ 84.334733][ T5903] tipc: Node identity ac14140f, cluster identity 4711 [ 84.353415][ T5903] tipc: New replicast peer: 255.255.255.255 [ 84.360617][ T5903] tipc: Enabled bearer , priority 10 [ 84.367335][ T5906] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 84.395846][ T5904] tipc: Disabling bearer [ 84.402073][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 84.566831][ T27] audit: type=1800 audit(1793812507.762:2): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file2" dev="loop3" ino=1048621 res=0 errno=0 [ 84.820306][ T5926] loop3: detected capacity change from 0 to 512 [ 84.897300][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.923100][ T5926] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.930152][ T5932] ip_tables: iptables: counters copy to user failed while replacing table [ 85.087619][ T27] audit: type=1400 audit(1793812508.272:3): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=5936 comm="syz.1.25" name="foo" offset=81 [ 85.169209][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.473355][ T3386] tipc: Node number set to 2886997007 [ 85.538728][ T5796] Bluetooth: hci2: command tx timeout [ 85.540102][ T5098] Bluetooth: hci3: command tx timeout [ 85.614280][ T5098] Bluetooth: hci1: command tx timeout [ 85.614293][ T5796] Bluetooth: hci0: command tx timeout [ 85.709698][ T5964] tipc: Can't bind to reserved service type 1 [ 86.054183][ T5983] loop2: detected capacity change from 0 to 256 [ 86.119310][ T5983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 86.375289][ T5996] kAFS: bad VL server IP address [ 86.407803][ T5998] Bluetooth: MGMT ver 1.22 [ 86.474196][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.568690][ T6008] loop2: detected capacity change from 0 to 512 [ 86.616919][ T6008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.630616][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.641091][ T6008] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.682570][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 86.692833][ T5860] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.701265][ T5860] usb 1-1: config 0 has no interface number 0 [ 86.711016][ T5860] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.721213][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.729723][ T5860] usb 1-1: Product: syz [ 86.734467][ T5860] usb 1-1: Manufacturer: syz [ 86.739175][ T5860] usb 1-1: SerialNumber: syz [ 86.752000][ T5860] usb 1-1: config 0 descriptor?? [ 86.765966][ T5860] smsc95xx v2.0.0 [ 86.815819][ T28] cfg80211: failed to load regulatory.db [ 86.826421][ T9] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.856495][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.872543][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 86.883640][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.909932][ T9] usb 2-1: config 0 descriptor?? [ 86.919288][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.943225][ T5783] EXT4-fs (loop2): Remounting filesystem read-only [ 87.126794][ T6020] loop3: detected capacity change from 0 to 256 [ 87.135185][ T6020] ======================================================= [ 87.135185][ T6020] WARNING: The mand mount option has been deprecated and [ 87.135185][ T6020] and is ignored by this kernel. Remove the mand [ 87.135185][ T6020] option from the mount to silence this warning. [ 87.135185][ T6020] ======================================================= [ 87.173337][ T6020] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.188579][ T5860] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 87.202263][ T5860] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.307402][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.355707][ T3531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.371037][ T9] wacom 0003:056A:0016.0001: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 87.397152][ T5783] syz-executor (5783) used greatest stack depth: 20056 bytes left [ 87.423230][ T9] wacom 0003:056A:0016.0001: hidraw0: USB HID v10.01 Device [HID 056a:0016] on usb-dummy_hcd.1-1/input0 [ 87.423480][ T5860] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 87.449022][ T9] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0016.0001/input/input5 [ 87.508623][ T5860] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 87.555729][ T5860] usb 1-1: USB disconnect, device number 2 [ 87.572327][ T3531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.737091][ T6027] loop3: detected capacity change from 0 to 2048 [ 87.761674][ T3531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.855672][ T6027] loop3: p1 < > p3 p4 < > [ 87.866106][ T6027] loop3: p3 size 861184 extends beyond EOD, truncated [ 87.899407][ T3531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.033990][ T3531] hsr_slave_0: left promiscuous mode [ 89.039918][ T3531] hsr_slave_1: left promiscuous mode [ 89.049045][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.058729][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.069512][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.077234][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.084970][ T3531] bridge_slave_1: left allmulticast mode [ 89.090597][ T3531] bridge_slave_1: left promiscuous mode [ 89.097191][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.108451][ T3531] bridge_slave_0: left allmulticast mode [ 89.114286][ T3531] bridge_slave_0: left promiscuous mode [ 89.120010][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.141285][ T3531] veth1_macvtap: left promiscuous mode [ 89.147115][ T3531] veth0_macvtap: left promiscuous mode [ 89.154020][ T3531] veth1_vlan: left promiscuous mode [ 89.159417][ T3531] veth0_vlan: left promiscuous mode [ 89.602283][ T3531] team0 (unregistering): Port device team_slave_1 removed [ 89.637873][ T3531] team0 (unregistering): Port device team_slave_0 removed [ 89.670944][ T3531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.706436][ T3531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.930372][ T3531] bond0 (unregistering): Released all slaves [ 90.706914][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.896160][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902876][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.922360][ T5151] udevd[5151]: worker [5773] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time [ 148.947432][ T5151] udevd[5151]: worker [5774] /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0016.0001/hidraw/hidraw0 is taking a long time [ 194.335660][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341978][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.536894][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 201.538494][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 201.547207][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 237.852677][ T29] INFO: task kworker/u4:5:72 blocked for more than 143 seconds. [ 237.860547][ T29] Not tainted syzkaller #0 [ 237.865649][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.874472][ T29] task:kworker/u4:5 state:D stack:22960 pid:72 ppid:2 flags:0x00004000 [ 237.883972][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 237.890010][ T29] Call Trace: [ 237.893373][ T29] [ 237.896399][ T29] __schedule+0x156f/0x4720 [ 237.900905][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 237.907342][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 237.913832][ T29] ? mark_lock+0x94/0x320 [ 237.918176][ T29] ? asan.module_dtor+0x20/0x20 [ 237.923088][ T29] ? blk_check_plugged+0x250/0x250 [ 237.928292][ T29] ? kthread_data+0x4f/0xc0 [ 237.933319][ T29] ? wq_worker_sleeping+0x63/0x240 [ 237.938936][ T29] schedule+0xbd/0x170 [ 237.943122][ T29] io_schedule+0x80/0xd0 [ 237.947477][ T29] bit_wait_io+0x13/0x100 [ 237.951828][ T29] __wait_on_bit+0x9f/0x2c0 [ 237.956651][ T29] ? bit_wait+0x100/0x100 [ 237.960984][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 237.966493][ T29] ? bit_wait+0x100/0x100 [ 237.970946][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 237.975756][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.980856][ T29] ? bit_waitqueue+0x30/0x30 [ 237.985665][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 237.990878][ T29] do_get_write_access+0x5c9/0xe00 [ 237.996213][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 238.002194][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 238.008439][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 238.014795][ T29] ? ext4_get_group_desc+0x10e/0x4d0 [ 238.020118][ T29] ext4_mb_mark_diskspace_used+0x27c/0x14b0 [ 238.026103][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 238.032360][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 238.037623][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 238.043524][ T29] ? rcu_is_watching+0x15/0xb0 [ 238.048309][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 238.054085][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 238.059900][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 238.065285][ T29] ? __might_sleep+0xe0/0xe0 [ 238.069948][ T29] ? ext4_ext_release+0x10/0x10 [ 238.074844][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.079964][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 238.085478][ T29] ext4_map_blocks+0x9db/0x1a90 [ 238.090344][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 238.095887][ T29] ? rcu_is_watching+0x15/0xb0 [ 238.100675][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 238.106449][ T29] ext4_do_writepages+0x1463/0x3990 [ 238.111688][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 238.118586][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 238.124087][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 238.129102][ T29] ext4_writepages+0x1dd/0x350 [ 238.133911][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 238.138902][ T29] ? __rwlock_init+0x150/0x150 [ 238.144459][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 238.149678][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 238.154671][ T29] do_writepages+0x351/0x590 [ 238.159276][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 238.165056][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 238.170435][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.175623][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 238.180782][ T29] __writeback_single_inode+0x14e/0xee0 [ 238.186406][ T29] writeback_sb_inodes+0x813/0x1020 [ 238.191623][ T29] ? queue_io+0x530/0x530 [ 238.196023][ T29] __writeback_inodes_wb+0x114/0x240 [ 238.201320][ T29] wb_writeback+0x472/0xbe0 [ 238.205990][ T29] ? queue_io+0x361/0x530 [ 238.210328][ T29] ? percpu_ref_tryget+0x250/0x250 [ 238.215502][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 238.221510][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.226944][ T29] wb_workfn+0xad7/0xe60 [ 238.231229][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 238.237039][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 238.243099][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.248549][ T29] ? read_lock_is_recursive+0x20/0x20 [ 238.258947][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.264212][ T29] ? process_scheduled_works+0x975/0x1600 [ 238.269943][ T29] ? process_scheduled_works+0x975/0x1600 [ 238.275705][ T29] process_scheduled_works+0xa60/0x1600 [ 238.281275][ T29] ? worker_attach_to_pool+0x370/0x370 [ 238.286831][ T29] ? assign_work+0x3cc/0x5d0 [ 238.291434][ T29] worker_thread+0xa5e/0xfe0 [ 238.296065][ T29] ? _raw_spin_unlock+0x40/0x40 [ 238.300924][ T29] ? __kthread_parkme+0x71/0x1c0 [ 238.305912][ T29] kthread+0x2fa/0x390 [ 238.309989][ T29] ? pr_cont_work+0x550/0x550 [ 238.314797][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.319441][ T29] ret_from_fork+0x48/0x80 [ 238.324046][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.328643][ T29] ret_from_fork_asm+0x11/0x20 [ 238.333474][ T29] [ 238.336740][ T29] INFO: task jbd2/sda1-8:5114 blocked for more than 143 seconds. [ 238.344504][ T29] Not tainted syzkaller #0 [ 238.349830][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.358555][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5114 ppid:2 flags:0x00004000 [ 238.367809][ T29] Call Trace: [ 238.371071][ T29] [ 238.374071][ T29] __schedule+0x156f/0x4720 [ 238.378625][ T29] ? asan.module_dtor+0x20/0x20 [ 238.383545][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.388598][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 238.394542][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 238.399747][ T29] schedule+0xbd/0x170 [ 238.403862][ T29] io_schedule+0x80/0xd0 [ 238.408120][ T29] bit_wait_io+0x13/0x100 [ 238.412490][ T29] __wait_on_bit+0x9f/0x2c0 [ 238.417004][ T29] ? bit_wait+0x100/0x100 [ 238.421324][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 238.426860][ T29] ? bit_wait+0x100/0x100 [ 238.431203][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 238.436098][ T29] ? do_raw_write_lock+0x11e/0x260 [ 238.441224][ T29] ? bit_waitqueue+0x30/0x30 [ 238.445877][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 238.451338][ T29] jbd2_journal_commit_transaction+0x2e90/0x5ad0 [ 238.457784][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 238.464589][ T29] ? lock_chain_count+0x20/0x20 [ 238.469436][ T29] ? _raw_spin_unlock+0x40/0x40 [ 238.474322][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 238.479962][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 238.485302][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.490335][ T29] ? timer_delete_sync+0x20/0x20 [ 238.495370][ T29] ? do_raw_read_unlock+0x80/0x80 [ 238.500405][ T29] ? prepare_to_wait+0x1aa/0x200 [ 238.505419][ T29] kjournald2+0x40f/0x810 [ 238.509783][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 238.515072][ T29] ? wake_bit_function+0x200/0x200 [ 238.520209][ T29] ? _raw_spin_unlock+0x40/0x40 [ 238.525098][ T29] ? __kthread_parkme+0x71/0x1c0 [ 238.530049][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 238.535119][ T29] kthread+0x2fa/0x390 [ 238.539197][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 238.544551][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.549172][ T29] ret_from_fork+0x48/0x80 [ 238.554320][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.558923][ T29] ret_from_fork_asm+0x11/0x20 [ 238.563745][ T29] [ 238.566805][ T29] INFO: task syz.0.49:5986 blocked for more than 144 seconds. [ 238.575202][ T29] Not tainted syzkaller #0 [ 238.580128][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.588838][ T29] task:syz.0.49 state:D stack:26088 pid:5986 ppid:5780 flags:0x00004004 [ 238.598105][ T29] Call Trace: [ 238.601372][ T29] [ 238.604371][ T29] __schedule+0x156f/0x4720 [ 238.608924][ T29] ? mark_lock+0x94/0x320 [ 238.613313][ T29] ? asan.module_dtor+0x20/0x20 [ 238.618175][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.623280][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 238.629181][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 238.634441][ T29] schedule+0xbd/0x170 [ 238.638534][ T29] io_schedule+0x80/0xd0 [ 238.642861][ T29] bit_wait_io+0x13/0x100 [ 238.647221][ T29] __wait_on_bit+0x9f/0x2c0 [ 238.651754][ T29] ? bit_wait+0x100/0x100 [ 238.657153][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 238.662755][ T29] ? bit_wait+0x100/0x100 [ 238.667110][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 238.671861][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 238.676924][ T29] ? bit_waitqueue+0x30/0x30 [ 238.681522][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 238.686784][ T29] do_get_write_access+0x5c9/0xe00 [ 238.691913][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 238.697969][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 238.704164][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 238.710302][ T29] ? __might_sleep+0xe0/0xe0 [ 238.714946][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 238.720520][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 238.726038][ T29] ext4_dirty_inode+0xcb/0x110 [ 238.730805][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 238.736707][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 238.741746][ T29] file_update_time+0x187/0x1a0 [ 238.746651][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 238.751681][ T29] ? filemap_fault+0x103c/0x1540 [ 238.757550][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 238.763457][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 238.769712][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.774803][ T29] ? __pte_offset_map+0x20d/0x280 [ 238.779850][ T29] do_page_mkwrite+0x153/0x3f0 [ 238.784708][ T29] handle_mm_fault+0x1a26/0x4a40 [ 238.790027][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 238.795052][ T29] ? numa_migrate_prep+0x350/0x350 [ 238.800180][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 238.805511][ T29] do_user_addr_fault+0xeb7/0x13e0 [ 238.810637][ T29] exc_page_fault+0x64/0x100 [ 238.815304][ T29] asm_exc_page_fault+0x26/0x30 [ 238.820175][ T29] RIP: 0033:0x7f1f0a674812 [ 238.824649][ T29] RSP: 002b:00007ffc495d8fd0 EFLAGS: 00010202 [ 238.830721][ T29] RAX: 000000000000c008 RBX: 00007f1f0b555720 RCX: 0000000000000000 [ 238.838722][ T29] RDX: 0000001b2e218000 RSI: 0000000000000008 RDI: 00007f1f0b555720 [ 238.846753][ T29] RBP: 00000000000008ac R08: 00007f1f0aa10000 R09: 00007f1f0aa25f40 [ 238.854775][ T29] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff8a8371d9 [ 238.863560][ T29] R13: 00007f1f0aa25f40 R14: 00000000000000f4 R15: ffffffffffff4000 [ 238.871557][ T29] ? kobject_get_path+0x209/0x2c0 [ 238.876824][ T29] [ 238.879881][ T29] INFO: task syz.1.54:5993 blocked for more than 144 seconds. [ 238.887439][ T29] Not tainted syzkaller #0 [ 238.892375][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.901083][ T29] task:syz.1.54 state:D stack:26536 pid:5993 ppid:5781 flags:0x00004004 [ 238.910367][ T29] Call Trace: [ 238.913729][ T29] [ 238.916678][ T29] __schedule+0x156f/0x4720 [ 238.921205][ T29] ? mark_lock+0x94/0x320 [ 238.925586][ T29] ? asan.module_dtor+0x20/0x20 [ 238.930454][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.935524][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 238.941429][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 238.946679][ T29] schedule+0xbd/0x170 [ 238.950776][ T29] io_schedule+0x80/0xd0 [ 238.955074][ T29] bit_wait_io+0x13/0x100 [ 238.959419][ T29] __wait_on_bit+0x9f/0x2c0 [ 238.964724][ T29] ? bit_wait+0x100/0x100 [ 238.969072][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 238.974717][ T29] ? bit_wait+0x100/0x100 [ 238.979058][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 238.983968][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 238.989007][ T29] ? bit_waitqueue+0x30/0x30 [ 238.993657][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 238.998869][ T29] do_get_write_access+0x5c9/0xe00 [ 239.004051][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 239.010060][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 239.016251][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 239.022409][ T29] ? __might_sleep+0xe0/0xe0 [ 239.027082][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 239.032690][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 239.038159][ T29] ext4_dirty_inode+0xcb/0x110 [ 239.042955][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 239.048790][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 239.053894][ T29] file_update_time+0x187/0x1a0 [ 239.058771][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 239.064657][ T29] ? filemap_fault+0x103c/0x1540 [ 239.069698][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 239.075458][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 239.081722][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.086803][ T29] ? __pte_offset_map+0x20d/0x280 [ 239.091853][ T29] do_page_mkwrite+0x153/0x3f0 [ 239.096766][ T29] handle_mm_fault+0x1a26/0x4a40 [ 239.101732][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 239.107084][ T29] ? numa_migrate_prep+0x350/0x350 [ 239.112213][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 239.117542][ T29] do_user_addr_fault+0xeb7/0x13e0 [ 239.122744][ T29] exc_page_fault+0x64/0x100 [ 239.127341][ T29] asm_exc_page_fault+0x26/0x30 [ 239.132178][ T29] RIP: 0033:0x7f88c4674812 [ 239.136723][ T29] RSP: 002b:00007fff022885d0 EFLAGS: 00010202 [ 239.143075][ T29] RAX: 0000000000015008 RBX: 00007f88c5555720 RCX: 0000000000000000 [ 239.151134][ T29] RDX: 0000001b2e30f000 RSI: 0000000000000008 RDI: 00007f88c5555720 [ 239.159175][ T29] RBP: 0000000000000a22 R08: 00007f88c4a10000 R09: 00007f88c4a25f40 [ 239.167813][ T29] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff8a887ddf [ 239.175845][ T29] R13: 00007f88c4a25f40 R14: 000000000000002f R15: fffffffffffeb000 [ 239.183897][ T29] ? number+0xa5f/0xf00 [ 239.188065][ T29] [ 239.191083][ T29] INFO: task syz.3.67:6026 blocked for more than 144 seconds. [ 239.198599][ T29] Not tainted syzkaller #0 [ 239.203620][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.212270][ T29] task:syz.3.67 state:D stack:27048 pid:6026 ppid:5782 flags:0x00004004 [ 239.221524][ T29] Call Trace: [ 239.224848][ T29] [ 239.227766][ T29] __schedule+0x156f/0x4720 [ 239.232270][ T29] ? mark_lock+0x94/0x320 [ 239.236661][ T29] ? asan.module_dtor+0x20/0x20 [ 239.241522][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.246625][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 239.252577][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 239.257784][ T29] schedule+0xbd/0x170 [ 239.261840][ T29] io_schedule+0x80/0xd0 [ 239.266141][ T29] bit_wait_io+0x13/0x100 [ 239.271191][ T29] __wait_on_bit+0x9f/0x2c0 [ 239.275774][ T29] ? bit_wait+0x100/0x100 [ 239.280142][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 239.285672][ T29] ? bit_wait+0x100/0x100 [ 239.290025][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 239.302035][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 239.307133][ T29] ? bit_waitqueue+0x30/0x30 [ 239.311730][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 239.317173][ T29] do_get_write_access+0x5c9/0xe00 [ 239.322502][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 239.328496][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 239.334748][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 239.340907][ T29] ? __might_sleep+0xe0/0xe0 [ 239.345545][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 239.351099][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 239.356655][ T29] ext4_dirty_inode+0xcb/0x110 [ 239.361422][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 239.367287][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 239.375126][ T29] file_update_time+0x187/0x1a0 [ 239.379980][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 239.385082][ T29] ? filemap_fault+0x103c/0x1540 [ 239.390030][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 239.395901][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 239.402150][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.407228][ T29] ? __pte_offset_map+0x20d/0x280 [ 239.412286][ T29] do_page_mkwrite+0x153/0x3f0 [ 239.417154][ T29] handle_mm_fault+0x1a26/0x4a40 [ 239.422111][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 239.427226][ T29] ? numa_migrate_prep+0x350/0x350 [ 239.432376][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 239.437751][ T29] do_user_addr_fault+0xeb7/0x13e0 [ 239.442955][ T29] exc_page_fault+0x64/0x100 [ 239.447552][ T29] asm_exc_page_fault+0x26/0x30 [ 239.452387][ T29] RIP: 0033:0x7f86aee740b1 [ 239.456871][ T29] RSP: 002b:00007ffc57cac9c0 EFLAGS: 00010202 [ 239.463010][ T29] RAX: 0000001b2e523000 RBX: ffffffff8a8a7b8d RCX: 0000001b2e522ff8 [ 239.470981][ T29] RDX: 0000001b2df2421c RSI: 0000000000000008 RDI: 00007f86afd55720 [ 239.479590][ T29] RBP: 0000000000000189 R08: 00007f86af210000 R09: 00007f86af212000 [ 239.487627][ T29] R10: 000000008a8a7b91 R11: 0000000000000001 R12: 00007f86af226038 [ 239.495707][ T29] R13: 0000000000002765 R14: ffffffff8a8a7a0b R15: 00007f86afd55720 [ 239.503740][ T29] ? xas_find_marked+0x2b/0x1060 [ 239.508688][ T29] ? xas_find_marked+0x1ad/0x1060 [ 239.513811][ T29] [ 239.516851][ T29] INFO: task syz-executor:6028 blocked for more than 145 seconds. [ 239.524756][ T29] Not tainted syzkaller #0 [ 239.529691][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.538476][ T29] task:syz-executor state:D stack:25608 pid:6028 ppid:5769 flags:0x00004000 [ 239.547757][ T29] Call Trace: [ 239.551046][ T29] [ 239.554053][ T29] __schedule+0x156f/0x4720 [ 239.558580][ T29] ? mark_lock+0x94/0x320 [ 239.562974][ T29] ? asan.module_dtor+0x20/0x20 [ 239.567838][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.572912][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 239.579231][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 239.584505][ T29] schedule+0xbd/0x170 [ 239.588586][ T29] io_schedule+0x80/0xd0 [ 239.592855][ T29] bit_wait_io+0x13/0x100 [ 239.597193][ T29] __wait_on_bit+0x9f/0x2c0 [ 239.601693][ T29] ? bit_wait+0x100/0x100 [ 239.606087][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 239.611557][ T29] ? bit_wait+0x100/0x100 [ 239.615921][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 239.620693][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 239.625789][ T29] ? bit_waitqueue+0x30/0x30 [ 239.630387][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 239.635648][ T29] do_get_write_access+0x5c9/0xe00 [ 239.640776][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 239.646911][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 239.653120][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 239.659281][ T29] __ext4_new_inode+0x140c/0x3aa0 [ 239.664379][ T29] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 239.670109][ T29] ? dquot_initialize+0x20/0x20 [ 239.675032][ T29] ext4_mkdir+0x40b/0xc90 [ 239.680010][ T29] ? ext4_symlink+0x940/0x940 [ 239.684788][ T29] ? inode_permission+0xf3/0x480 [ 239.689729][ T29] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 239.694916][ T29] ? security_inode_mkdir+0xb7/0x100 [ 239.700211][ T29] vfs_mkdir+0x2a5/0x470 [ 239.704646][ T29] do_mkdirat+0x1dc/0x450 [ 239.708987][ T29] ? vfs_mkdir+0x470/0x470 [ 239.713452][ T29] ? getname_flags+0x20a/0x500 [ 239.718224][ T29] __x64_sys_mkdir+0x6e/0x80 [ 239.722886][ T29] do_syscall_64+0x55/0xb0 [ 239.727313][ T29] ? clear_bhb_loop+0x40/0x90 [ 239.731975][ T29] ? clear_bhb_loop+0x40/0x90 [ 239.736691][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.742679][ T29] RIP: 0033:0x7fbcc4dccee7 [ 239.747095][ T29] RSP: 002b:00007ffdda029708 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 239.755649][ T29] RAX: ffffffffffffffda RBX: 00007ffdda029832 RCX: 00007fbcc4dccee7 [ 239.763664][ T29] RDX: 000000000e21f53e RSI: 00000000000001c0 RDI: 00007ffdda029820 [ 239.771621][ T29] RBP: 8421084210842109 R08: 0000000000000000 R09: 0000000000000000 [ 239.779618][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000e21f53e [ 239.788042][ T29] R13: 00007ffdda029832 R14: 0000000000000004 R15: 00007fbcc4e5e580 [ 239.796102][ T29] [ 239.799182][ T29] [ 239.799182][ T29] Showing all locks held in the system: [ 239.807032][ T29] 1 lock held by khungtaskd/29: [ 239.811888][ T29] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 239.824184][ T29] 7 locks held by kworker/u4:5/72: [ 239.829295][ T29] #0: ffff888140e64538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 239.840579][ T29] #1: ffffc900015e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 239.853089][ T29] #2: ffff88814d9160e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 239.863773][ T29] #3: ffff88814d918c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 239.874276][ T29] #4: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.884467][ T29] #5: ffff88803296f088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 239.894324][ T29] #6: ffffe8ffffc1fa58 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x8af/0xc80 [ 239.904840][ T29] 2 locks held by getty/5538: [ 239.909495][ T29] #0: ffff88814c7650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 239.919282][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x43a/0x1400 [ 239.929452][ T29] 3 locks held by syz-executor/5769: [ 239.934911][ T29] #0: ffff88807e64f3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 239.944929][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 239.954762][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.964514][ T29] 3 locks held by syz.0.49/5986: [ 239.969446][ T29] #0: ffff888025d6cda0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 239.979493][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 239.989713][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.999456][ T29] 3 locks held by syz.1.54/5993: [ 240.004412][ T29] #0: ffff88802a62ea20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 240.014697][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 240.024495][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 240.034235][ T29] 1 lock held by udevd/6024: [ 240.038820][ T29] #0: ffff888028789988 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xc8/0x1730 [ 240.048767][ T29] 3 locks held by syz.3.67/6026: [ 240.053741][ T29] #0: ffff888079a0b120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 240.063722][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 240.073563][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 240.083414][ T29] 3 locks held by syz-executor/6028: [ 240.089377][ T29] #0: ffff88814d916418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 240.098610][ T29] #1: ffff888078539810 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 240.109306][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 240.119026][ T29] 2 locks held by syz-executor/6198: [ 240.124329][ T29] #0: ffff88814d916418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 240.133533][ T29] #1: ffff888078539810 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 240.144228][ T29] 2 locks held by dhcpcd/6345: [ 240.148969][ T29] #0: ffff88805b82fa20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 240.159203][ T29] #1: ffffffff8e137cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 240.173700][ T29] [ 240.176050][ T29] ============================================= [ 240.176050][ T29] [ 240.184529][ T29] NMI backtrace for cpu 0 [ 240.188860][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 240.196038][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.206074][ T29] Call Trace: [ 240.209335][ T29] [ 240.212248][ T29] dump_stack_lvl+0x18c/0x250 [ 240.216910][ T29] ? __wake_up_klogd+0xd9/0x100 [ 240.221766][ T29] ? show_regs_print_info+0x20/0x20 [ 240.226948][ T29] ? load_image+0x420/0x420 [ 240.231434][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 240.236356][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 240.242506][ T29] ? load_image+0x420/0x420 [ 240.247013][ T29] ? wq_watchdog_touch+0xef/0x170 [ 240.252033][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 240.258097][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 240.264071][ T29] watchdog+0xf59/0xfa0 [ 240.268222][ T29] ? watchdog+0x1e1/0xfa0 [ 240.272547][ T29] kthread+0x2fa/0x390 [ 240.276602][ T29] ? hungtask_pm_notify+0x50/0x50 [ 240.281620][ T29] ? kthread_blkcg+0xd0/0xd0 [ 240.286201][ T29] ret_from_fork+0x48/0x80 [ 240.290607][ T29] ? kthread_blkcg+0xd0/0xd0 [ 240.295192][ T29] ret_from_fork_asm+0x11/0x20 [ 240.299960][ T29] [ 240.303827][ T29] Sending NMI from CPU 0 to CPUs 1: [ 240.309208][ C1] NMI backtrace for cpu 1 [ 240.309217][ C1] CPU: 1 PID: 2968 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 240.309233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.309242][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 240.309267][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x345/0x7d0 [ 240.309288][ C1] Code: 41 0f b6 04 16 84 c0 0f 85 91 03 00 00 83 3e 00 0f 8e 0f 01 00 00 4c 8d bb e8 0a 00 00 49 89 dc 49 81 c4 08 0b 00 00 45 31 ed <49> 83 fd 31 73 73 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 85 [ 240.309301][ C1] RSP: 0018:ffffc9000c0272c0 EFLAGS: 00000093 [ 240.309313][ C1] RAX: 0000000000000004 RBX: ffff88802d4abc00 RCX: ffffffff81699dd4 [ 240.309324][ C1] RDX: dffffc0000000000 RSI: ffff88802d4ac6e0 RDI: ffffffff922235f8 [ 240.309335][ C1] RBP: ffffc9000c027368 R08: ffffffff922235ff R09: 1ffffffff24446bf [ 240.309346][ C1] R10: dffffc0000000000 R11: fffffbfff24446c0 R12: ffff88802d4ac758 [ 240.309357][ C1] R13: 0000000000000002 R14: 1ffff11005a958dc R15: ffff88802d4ac738 [ 240.309367][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 240.309380][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.309391][ C1] CR2: 000055638eddf168 CR3: 000000000df32000 CR4: 00000000003506e0 [ 240.309404][ C1] Call Trace: [ 240.309409][ C1] [ 240.309416][ C1] ? lock_chain_count+0x20/0x20 [ 240.309435][ C1] ? rcu_is_watching+0x15/0xb0 [ 240.309454][ C1] ? cfg80211_inform_bss_frame_data+0xb2a/0x1330 [ 240.309474][ C1] trace_hardirqs_on+0x28/0x40 [ 240.309496][ C1] __local_bh_enable_ip+0x13a/0x1c0 [ 240.309512][ C1] ? _local_bh_enable+0xa0/0xa0 [ 240.309529][ C1] ? cfg80211_inform_bss_frame_data+0xb2a/0x1330 [ 240.309549][ C1] cfg80211_inform_bss_frame_data+0xb2a/0x1330 [ 240.309573][ C1] ? cfg80211_parse_ml_sta_data+0x1ad0/0x1ad0 [ 240.309607][ C1] ? ieee80211_bss_info_update+0x387/0x9f0 [ 240.309623][ C1] ? ieee80211_bss_info_update+0x387/0x9f0 [ 240.309639][ C1] ieee80211_bss_info_update+0x789/0x9f0 [ 240.309657][ C1] ? ieee80211_inform_bss+0xfd0/0xfd0 [ 240.309676][ C1] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 240.309699][ C1] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 240.309720][ C1] ? verify_lock_unused+0x140/0x140 [ 240.309743][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0 [ 240.309763][ C1] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 240.309786][ C1] ? mark_lock+0x94/0x320 [ 240.309804][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 240.309821][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 240.309838][ C1] ? lock_chain_count+0x20/0x20 [ 240.309853][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 240.309874][ C1] ? kcov_remote_start+0x8b/0x810 [ 240.309893][ C1] ? skb_dequeue+0x124/0x160 [ 240.309912][ C1] ieee80211_iface_work+0x730/0xc90 [ 240.309935][ C1] cfg80211_wiphy_work+0x228/0x260 [ 240.309955][ C1] ? process_scheduled_works+0x975/0x1600 [ 240.309975][ C1] process_scheduled_works+0xa60/0x1600 [ 240.310004][ C1] ? worker_attach_to_pool+0x370/0x370 [ 240.310025][ C1] ? assign_work+0x3cc/0x5d0 [ 240.310045][ C1] worker_thread+0xa5e/0xfe0 [ 240.310068][ C1] ? _raw_spin_unlock+0x40/0x40 [ 240.310083][ C1] ? __kthread_parkme+0x71/0x1c0 [ 240.310101][ C1] kthread+0x2fa/0x390 [ 240.310115][ C1] ? pr_cont_work+0x550/0x550 [ 240.310134][ C1] ? kthread_blkcg+0xd0/0xd0 [ 240.310148][ C1] ret_from_fork+0x48/0x80 [ 240.310173][ C1] ? kthread_blkcg+0xd0/0xd0 [ 240.310188][ C1] ret_from_fork_asm+0x11/0x20 [ 240.310212][ C1] [ 240.319124][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 240.319136][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 240.319153][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.319168][ T29] Call Trace: [ 240.319174][ T29] [ 240.319180][ T29] dump_stack_lvl+0x18c/0x250 [ 240.319207][ T29] ? show_regs_print_info+0x20/0x20 [ 240.319228][ T29] ? load_image+0x420/0x420 [ 240.319257][ T29] panic+0x2ca/0x720 [ 240.319278][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 240.319294][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 240.319315][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 240.319338][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 240.319366][ T29] watchdog+0xf98/0xfa0 [ 240.319389][ T29] ? watchdog+0x1e1/0xfa0 [ 240.319415][ T29] kthread+0x2fa/0x390 [ 240.319430][ T29] ? hungtask_pm_notify+0x50/0x50 [ 240.319452][ T29] ? kthread_blkcg+0xd0/0xd0 [ 240.319469][ T29] ret_from_fork+0x48/0x80 [ 240.319488][ T29] ? kthread_blkcg+0xd0/0xd0 [ 240.319506][ T29] ret_from_fork_asm+0x11/0x20 [ 240.319537][ T29] [ 240.324501][ T29] Kernel Offset: disabled [ 240.766135][ T29] Rebooting in 86400 seconds..