last executing test programs:
2.143309613s ago: executing program 1 (id=1092):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
write$auto(0x1, 0x0, 0x80000000)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
1.470072011s ago: executing program 0 (id=1099):
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0x5, @_sigsys={0x0, 0x2, 0xffffffff}}})
rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8)
1.27047577s ago: executing program 0 (id=1101):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x1, 0x200, &(0x7f0000000140)={0x0, 0x2800000a}, 0x0)
1.156623404s ago: executing program 3 (id=1103):
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2)
r0 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r0, 0x84, 0x1c, 0x0, 0x0)
1.137292268s ago: executing program 1 (id=1104):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x1fe, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0)
1.048000003s ago: executing program 2 (id=1105):
r0 = socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
setsockopt$auto(r0, 0x6, 0x1e, 0x0, 0xa1)
986.938138ms ago: executing program 1 (id=1106):
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
madvise$auto(0x0, 0x10, 0xc)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
waitid$auto_P_PGID(0x2, 0xffffffffffffffff, 0x0, 0x101, 0x0)
mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000)
956.330304ms ago: executing program 2 (id=1107):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x7, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0xc008010}, 0x4000001)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
869.679576ms ago: executing program 3 (id=1108):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
socket(0x2, 0x2, 0x88)
getsockopt$auto_SO_INCOMING_CPU(r0, 0x0, 0x31, &(0x7f0000000080)='//\xfd(#\x00', &(0x7f00000000c0)=0x4)
837.819813ms ago: executing program 2 (id=1109):
mknod$auto(0x0, 0x1, 0x4)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004)
739.418835ms ago: executing program 3 (id=1110):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='d\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
734.46293ms ago: executing program 2 (id=1111):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
512.052615ms ago: executing program 3 (id=1112):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x1e, 0x4, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x18, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @typed={0x8, 0x23, 0x0, 0x0, @uid}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
463.818334ms ago: executing program 0 (id=1113):
r0 = setfsuid$auto(0xee00)
r1 = setfsuid$auto(0xee01)
setresuid$auto(r0, r1, r0)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
390.427651ms ago: executing program 0 (id=1114):
mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x3, 0x100)
socket(0x2a, 0x2, 0x0)
ioctl$auto(0x3, 0x541b, 0x38)
328.647371ms ago: executing program 1 (id=1115):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0)
pread64$auto(r1, 0x0, 0x10001, 0x830)
write$auto(r0, 0x0, 0x3100)
277.16312ms ago: executing program 2 (id=1116):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0)
238.808443ms ago: executing program 3 (id=1117):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x0, 0x0)
ioctl$auto_BLKSECTGET2(r1, 0x1267, 0x0)
231.548ms ago: executing program 0 (id=1118):
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x1d, 0x1, 0x10001)
socket(0x2, 0x5, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
adjtimex$auto(0x0)
150.774366ms ago: executing program 1 (id=1119):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
umount2$auto(&(0x7f0000000040)='.\x00', 0x4)
umount2$auto(&(0x7f0000000000)='.\x00', 0x4)
103.021459ms ago: executing program 0 (id=1120):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
getgroups$auto(0xc5f1, 0x0)
73.479818ms ago: executing program 3 (id=1121):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
setresuid$auto(0x2, 0x7, 0x0)
madvise$auto(0x0, 0x20200, 0x15)
54.545112ms ago: executing program 2 (id=1122):
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
mlockall$auto(0x7)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
setreuid$auto(0x3, 0x7)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
0s ago: executing program 1 (id=1123):
readv$auto(0x6, 0x0, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0)
clock_settime$auto(0x0, &(0x7f0000000000)={0x100000004, 0x8})
adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0x8, 0x100000001, 0x7f, 0x0, 0x2, 0x0, 0xe, 0x0, 0x10001, {0xf, 0x6}, 0x7fffffffffffffff, 0x3a9d, 0x5, 0xf, 0x0, 0x6, 0x1, 0x7, 0x8, 0x5, 0x1015c8})
adjtimex$auto(&(0x7f0000000540)={0x72, 0x0, 0xb48, 0xb, 0x6, 0x2, 0x5, 0x0, 0xd, 0x9533, 0x7, {0x1fe, 0xfffffffffffff7fb}, 0x80, 0x80, 0x6, 0x6, 0x0, 0x100000001, 0x1, 0x190, 0x8, 0xa, 0x2014})
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts.
[ 96.844379][ T5828] cgroup: Unknown subsys name 'net'
[ 96.974958][ T5828] cgroup: Unknown subsys name 'cpuset'
[ 96.984476][ T5828] cgroup: Unknown subsys name 'rlimit'
[ 97.174045][ T978] cfg80211: failed to load regulatory.db
Setting up swapspace version 1, size = 127995904 bytes
[ 98.812510][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 101.259664][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 101.269889][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 101.279187][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 101.288367][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 101.297164][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 101.305669][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 101.314981][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 101.323880][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 101.332073][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 101.341540][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 101.349114][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 101.356557][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 101.358208][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 101.365719][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 101.377929][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 101.381635][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 101.394593][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 101.403057][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 101.403508][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 101.418434][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.091829][ T5846] chnl_net:caif_netlink_parms(): no params data found
[ 102.105789][ T5844] chnl_net:caif_netlink_parms(): no params data found
[ 102.185831][ T5838] chnl_net:caif_netlink_parms(): no params data found
[ 102.245907][ T5841] chnl_net:caif_netlink_parms(): no params data found
[ 102.434767][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.442114][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.449584][ T5844] bridge_slave_0: entered allmulticast mode
[ 102.457588][ T5844] bridge_slave_0: entered promiscuous mode
[ 102.466486][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.474160][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.481456][ T5846] bridge_slave_0: entered allmulticast mode
[ 102.488808][ T5846] bridge_slave_0: entered promiscuous mode
[ 102.533065][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.540423][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.547908][ T5838] bridge_slave_0: entered allmulticast mode
[ 102.555556][ T5838] bridge_slave_0: entered promiscuous mode
[ 102.563482][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.573358][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.580718][ T5844] bridge_slave_1: entered allmulticast mode
[ 102.588083][ T5844] bridge_slave_1: entered promiscuous mode
[ 102.595932][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.603212][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.610603][ T5846] bridge_slave_1: entered allmulticast mode
[ 102.618026][ T5846] bridge_slave_1: entered promiscuous mode
[ 102.648361][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.658199][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.665783][ T5838] bridge_slave_1: entered allmulticast mode
[ 102.674137][ T5838] bridge_slave_1: entered promiscuous mode
[ 102.773917][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.783262][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.791895][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.799173][ T5841] bridge_slave_0: entered allmulticast mode
[ 102.806813][ T5841] bridge_slave_0: entered promiscuous mode
[ 102.832458][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.844645][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.856535][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.866228][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.874297][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.881662][ T5841] bridge_slave_1: entered allmulticast mode
[ 102.889364][ T5841] bridge_slave_1: entered promiscuous mode
[ 102.912570][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.926116][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.013402][ T5844] team0: Port device team_slave_0 added
[ 103.038211][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.065331][ T5844] team0: Port device team_slave_1 added
[ 103.077211][ T5846] team0: Port device team_slave_0 added
[ 103.086236][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.102178][ T5838] team0: Port device team_slave_0 added
[ 103.124521][ T5846] team0: Port device team_slave_1 added
[ 103.161135][ T5838] team0: Port device team_slave_1 added
[ 103.225241][ T5841] team0: Port device team_slave_0 added
[ 103.234845][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.242210][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.268778][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.281531][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.288525][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.315328][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.345547][ T5841] team0: Port device team_slave_1 added
[ 103.352298][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.359258][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.385428][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.397295][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.404686][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.431059][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.431246][ T5840] Bluetooth: hci3: command tx timeout
[ 103.452674][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.459683][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.485843][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.501033][ T5840] Bluetooth: hci0: command tx timeout
[ 103.506749][ T5840] Bluetooth: hci1: command tx timeout
[ 103.512387][ T5853] Bluetooth: hci2: command tx timeout
[ 103.520719][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.527701][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.553815][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.622641][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.629629][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.657368][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.715592][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.722689][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.749877][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.799335][ T5838] hsr_slave_0: entered promiscuous mode
[ 103.806065][ T5838] hsr_slave_1: entered promiscuous mode
[ 103.826358][ T5846] hsr_slave_0: entered promiscuous mode
[ 103.833687][ T5846] hsr_slave_1: entered promiscuous mode
[ 103.839903][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 103.848263][ T5846] Cannot create hsr debugfs directory
[ 103.860638][ T5844] hsr_slave_0: entered promiscuous mode
[ 103.867139][ T5844] hsr_slave_1: entered promiscuous mode
[ 103.873708][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 103.881472][ T5844] Cannot create hsr debugfs directory
[ 104.065577][ T5841] hsr_slave_0: entered promiscuous mode
[ 104.075339][ T5841] hsr_slave_1: entered promiscuous mode
[ 104.082413][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 104.089999][ T5841] Cannot create hsr debugfs directory
[ 104.497196][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 104.512736][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 104.528112][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 104.549988][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 104.623992][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 104.645165][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 104.668052][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 104.682574][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 104.772329][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.785598][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.801804][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.848521][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.914772][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 104.928750][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 104.947203][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 104.974428][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 105.079768][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.149071][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.183911][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.198932][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.206282][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.244408][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.251649][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.337980][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.381681][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.388873][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.402072][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.409271][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.433172][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.456128][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.490565][ T5840] Bluetooth: hci3: command tx timeout
[ 105.527999][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.571742][ T5840] Bluetooth: hci0: command tx timeout
[ 105.577389][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.586230][ T5853] Bluetooth: hci2: command tx timeout
[ 105.595175][ T5840] Bluetooth: hci1: command tx timeout
[ 105.619528][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.626785][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.656372][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.663638][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.702705][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.709879][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.728281][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.735563][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.903164][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.144089][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.155880][ T5844] veth0_vlan: entered promiscuous mode
[ 106.190101][ T5844] veth1_vlan: entered promiscuous mode
[ 106.376457][ T5846] veth0_vlan: entered promiscuous mode
[ 106.416354][ T5844] veth0_macvtap: entered promiscuous mode
[ 106.429000][ T5844] veth1_macvtap: entered promiscuous mode
[ 106.442897][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.471563][ T5846] veth1_vlan: entered promiscuous mode
[ 106.487617][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.525701][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.555673][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.569739][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.581083][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.589856][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.599516][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.627266][ T5846] veth0_macvtap: entered promiscuous mode
[ 106.664630][ T5846] veth1_macvtap: entered promiscuous mode
[ 106.689813][ T5841] veth0_vlan: entered promiscuous mode
[ 106.718150][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 106.729423][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 106.741959][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.774273][ T5841] veth1_vlan: entered promiscuous mode
[ 106.803980][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 106.816820][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 106.834354][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.857413][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.868535][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.877504][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.887639][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.946454][ T5838] veth0_vlan: entered promiscuous mode
[ 106.997640][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.009056][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.049479][ T5838] veth1_vlan: entered promiscuous mode
[ 107.107399][ T5841] veth0_macvtap: entered promiscuous mode
[ 107.125037][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.134343][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.156312][ T5841] veth1_macvtap: entered promiscuous mode
[ 107.226654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.244264][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 107.256708][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.261294][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.281729][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 107.296246][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.314673][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.344996][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 107.369381][ T5838] veth0_macvtap: entered promiscuous mode
[ 107.389975][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 107.401283][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.420517][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 107.436260][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.448637][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.472947][ T5838] veth1_macvtap: entered promiscuous mode
[ 107.517438][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.535263][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.546295][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.549819][ T5904] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 107.555879][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.578653][ T5840] Bluetooth: hci3: command tx timeout
[ 107.585062][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.598824][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.650684][ T5840] Bluetooth: hci1: command tx timeout
[ 107.656212][ T5840] Bluetooth: hci2: command tx timeout
[ 107.660279][ T5853] Bluetooth: hci0: command tx timeout
[ 107.679118][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 107.711172][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.728943][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 107.748466][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.758959][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 107.769636][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.783122][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.851672][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 107.878438][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.891899][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 107.903135][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.923316][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 107.940381][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 107.952384][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.994071][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.010826][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.019718][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.029203][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.255706][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.267341][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.339083][ T5851] Bluetooth: hci3: Malformed Event: 0x2f
[ 108.457890][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.488678][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.570393][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.596382][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.706583][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.739436][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.239759][ T5935] Zero length message leads to an empty skb
[ 109.650762][ T5851] Bluetooth: hci3: command tx timeout
[ 109.730615][ T5851] Bluetooth: hci2: command tx timeout
[ 109.736101][ T5851] Bluetooth: hci1: command tx timeout
[ 109.742037][ T5853] Bluetooth: hci0: command tx timeout
[ 110.458224][ T5976] FAULT_INJECTION: forcing a failure.
[ 110.458224][ T5976] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 110.497659][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: syz.1.30 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full)
[ 110.497699][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 110.497724][ T5976] Call Trace:
[ 110.497734][ T5976]
[ 110.497749][ T5976] dump_stack_lvl+0x16c/0x1f0
[ 110.497795][ T5976] should_fail_ex+0x512/0x640
[ 110.497832][ T5976] should_fail_alloc_page+0xe7/0x130
[ 110.497875][ T5976] prepare_alloc_pages+0x3c2/0x610
[ 110.497927][ T5976] __alloc_frozen_pages_noprof+0x18f/0x23a0
[ 110.497966][ T5976] ? stack_trace_save+0x8e/0xc0
[ 110.497998][ T5976] ? __pfx_stack_trace_save+0x10/0x10
[ 110.498031][ T5976] ? stack_depot_save_flags+0x28/0xa50
[ 110.498072][ T5976] ? __alloc_frozen_pages_noprof+0x298/0x23a0
[ 110.498117][ T5976] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 110.498157][ T5976] ? __kasan_slab_alloc+0x89/0x90
[ 110.498194][ T5976] ? __pmd_alloc+0xc3/0x870
[ 110.498253][ T5976] ? handle_mm_fault+0x3fe/0xad0
[ 110.498284][ T5976] ? do_user_addr_fault+0x7a6/0x1370
[ 110.498328][ T5976] ? exc_page_fault+0x5c/0xc0
[ 110.498373][ T5976] ? asm_exc_page_fault+0x26/0x30
[ 110.498412][ T5976] ? __get_user_4+0x14/0x20
[ 110.498445][ T5976] ? snd_pcm_oss_ioctl+0x2ebe/0x37a0
[ 110.498477][ T5976] ? __x64_sys_ioctl+0x190/0x200
[ 110.498536][ T5976] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 110.498592][ T5976] ? policy_nodemask+0xea/0x4e0
[ 110.498635][ T5976] alloc_pages_mpol+0x1fb/0x550
[ 110.498692][ T5976] ? __pfx_alloc_pages_mpol+0x10/0x10
[ 110.498739][ T5976] ? cgroup_rstat_updated+0x2a/0xb20
[ 110.498780][ T5976] alloc_pages_noprof+0x131/0x390
[ 110.498826][ T5976] pte_alloc_one+0x19/0x380
[ 110.498865][ T5976] do_pte_missing+0x1c0b/0x3fb0
[ 110.498903][ T5976] ? do_raw_spin_unlock+0x172/0x230
[ 110.498938][ T5976] ? __pmd_alloc+0x3c2/0x870
[ 110.498987][ T5976] ? find_held_lock+0x2b/0x80
[ 110.499025][ T5976] __handle_mm_fault+0x103d/0x2a40
[ 110.499072][ T5976] ? __pfx___handle_mm_fault+0x10/0x10
[ 110.499130][ T5976] ? find_vma+0xbf/0x140
[ 110.499175][ T5976] ? __pfx_find_vma+0x10/0x10
[ 110.499229][ T5976] handle_mm_fault+0x3fe/0xad0
[ 110.499272][ T5976] do_user_addr_fault+0x7a6/0x1370
[ 110.499311][ T5976] ? rcu_is_watching+0x12/0xc0
[ 110.499348][ T5976] exc_page_fault+0x5c/0xc0
[ 110.499394][ T5976] asm_exc_page_fault+0x26/0x30
[ 110.499425][ T5976] RIP: 0010:__get_user_4+0x14/0x20
[ 110.499465][ T5976] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[ 110.499497][ T5976] RSP: 0018:ffffc9000431fdd8 EFLAGS: 00050287
[ 110.499525][ T5976] RAX: 0000000000000000 RBX: ffff888077a20420 RCX: ffffc9000b929000
[ 110.499546][ T5976] RDX: 00007ffffffff000 RSI: ffffffff890bbb76 RDI: ffffffff8bf44f80
[ 110.499568][ T5976] RBP: 0000000000000000 R08: 2cfb7b1ab8be5804 R09: 0000000000000001
[ 110.499587][ T5976] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000863fc3
[ 110.499607][ T5976] R13: 00000000c0045005 R14: ffff88807e66b6c0 R15: 0000000000000050
[ 110.499641][ T5976] ? snd_pcm_oss_ioctl+0x2eb6/0x37a0
[ 110.499688][ T5976] snd_pcm_oss_ioctl+0x2ebe/0x37a0
[ 110.499721][ T5976] ? find_held_lock+0x2b/0x80
[ 110.499762][ T5976] ? hook_file_ioctl_common+0x145/0x410
[ 110.499802][ T5976] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 110.499842][ T5976] ? __fget_files+0x20e/0x3c0
[ 110.499880][ T5976] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 110.499917][ T5976] __x64_sys_ioctl+0x190/0x200
[ 110.499992][ T5976] do_syscall_64+0xcd/0x230
[ 110.500049][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.500079][ T5976] RIP: 0033:0x7f096db8e969
[ 110.500113][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.500144][ T5976] RSP: 002b:00007f096e96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 110.500173][ T5976] RAX: ffffffffffffffda RBX: 00007f096ddb5fa0 RCX: 00007f096db8e969
[ 110.500193][ T5976] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000004
[ 110.500212][ T5976] RBP: 00007f096dc10ab1 R08: 0000000000000000 R09: 0000000000000000
[ 110.500230][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.500246][ T5976] R13: 0000000000000000 R14: 00007f096ddb5fa0 R15: 00007fffc82a64c8
[ 110.500279][ T5976]
[ 111.277225][ T30] audit: type=1800 audit(1745516070.594:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.36" name="discovery_nqn" dev="configfs" ino=7386 res=0 errno=0
[ 111.879684][ T6006] process 'syz.0.44' launched ':,' with NULL argv: empty string added
[ 113.841268][ T6058] netlink: 'syz.1.68': attribute type 8 has an invalid length.
[ 114.489511][ T6072] ecryptfs_parse_packet_length: Five-byte packet length not supported
[ 114.509884][ T6072] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[ 114.822416][ T6083] netlink: 342 bytes leftover after parsing attributes in process `syz.3.79'.
[ 117.539477][ T6158] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 119.316878][ T30] audit: type=1804 audit(1745516078.644:3): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.126" name="file0" dev="tmpfs" ino=169 res=1 errno=0
[ 119.379212][ T30] audit: type=1800 audit(1745516078.674:4): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name="file0" dev="tmpfs" ino=169 res=0 errno=0
[ 119.442271][ T30] audit: type=1800 audit(1745516078.674:5): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name="file0" dev="tmpfs" ino=169 res=0 errno=0
[ 119.503138][ T5851] Bluetooth: hci3: ISO packet too small
[ 119.697926][ T6212] GUP no longer grows the stack in syz.2.128 (6212): 14000-401000 (4000)
[ 119.707185][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.2.128 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full)
[ 119.707228][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 119.707256][ T6212] Call Trace:
[ 119.707266][ T6212]
[ 119.707278][ T6212] dump_stack_lvl+0x16c/0x1f0
[ 119.707341][ T6212] gup_vma_lookup+0x1d2/0x220
[ 119.707392][ T6212] __get_user_pages+0x234/0x36f0
[ 119.707434][ T6212] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0
[ 119.707478][ T6212] ? look_up_lock_class+0x59/0x150
[ 119.707519][ T6212] ? __pfx___get_user_pages+0x10/0x10
[ 119.707546][ T6212] ? process_vm_rw+0x216/0x2c0
[ 119.707581][ T6212] ? __x64_sys_process_vm_readv+0xe2/0x1c0
[ 119.707621][ T6212] ? do_syscall_64+0xcd/0x230
[ 119.707676][ T6212] __gup_longterm_locked+0x20d/0x1850
[ 119.707716][ T6212] ? __pfx___gup_longterm_locked+0x10/0x10
[ 119.707773][ T6212] pin_user_pages_remote+0xed/0x140
[ 119.707807][ T6212] ? __pfx_pin_user_pages_remote+0x10/0x10
[ 119.707837][ T6212] ? mm_access+0x22d/0x2e0
[ 119.707893][ T6212] process_vm_rw_core.constprop.0+0x41b/0x9a0
[ 119.707956][ T6212] ? futex_wait_queue+0x14c/0x220
[ 119.707999][ T6212] ? futex_unqueue+0xba/0x140
[ 119.708045][ T6212] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[ 119.708096][ T6212] ? iovec_from_user+0xbb/0x140
[ 119.708160][ T6212] ? iovec_from_user+0xbb/0x140
[ 119.708209][ T6212] process_vm_rw+0x216/0x2c0
[ 119.708262][ T6212] ? __pfx_process_vm_rw+0x10/0x10
[ 119.708357][ T6212] ? xfd_validate_state+0x5d/0x180
[ 119.708402][ T6212] __x64_sys_process_vm_readv+0xe2/0x1c0
[ 119.708449][ T6212] ? do_syscall_64+0x91/0x230
[ 119.708497][ T6212] ? lockdep_hardirqs_on+0x7c/0x110
[ 119.708543][ T6212] do_syscall_64+0xcd/0x230
[ 119.708594][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.708627][ T6212] RIP: 0033:0x7f3245d8e969
[ 119.708667][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 119.708700][ T6212] RSP: 002b:00007f3246c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[ 119.708737][ T6212] RAX: ffffffffffffffda RBX: 00007f3245fb5fa0 RCX: 00007f3245d8e969
[ 119.708759][ T6212] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000004d
[ 119.708779][ T6212] RBP: 00007f3245e10ab1 R08: 0000000000000003 R09: 0000000000000000
[ 119.708799][ T6212] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[ 119.708818][ T6212] R13: 0000000000000000 R14: 00007f3245fb5fa0 R15: 00007ffdeb9c9c28
[ 119.708857][ T6212]
[ 122.129331][ T6233] kexec: Could not allocate control_code_buffer
[ 124.483503][ T6322] netlink: 354 bytes leftover after parsing attributes in process `syz.3.170'.
[ 126.227844][ T6357] delete_channel: no stack
[ 128.327917][ T6404] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[ 128.347759][ T6404] netlink: 206 bytes leftover after parsing attributes in process `syz.0.202'.
[ 129.750321][ T6439] svc: failed to register nfsdv3 RPC service (errno 111).
[ 129.783658][ T6439] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 130.151444][ T6442] svc: failed to register nfsdv3 RPC service (errno 111).
[ 130.212591][ T6442] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 132.227000][ T30] audit: type=1804 audit(1745516091.554:6): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.247" name=08 dev="tmpfs" ino=336 res=1 errno=0
[ 132.362038][ T6517] random: crng reseeded on system resumption
[ 132.480901][ T6521] Device name cannot be null; rc = [-22]
[ 134.545499][ T6557] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 134.574447][ T6557] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 134.634880][ T6557] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 134.681550][ T6557] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 134.708458][ T6557] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 134.748568][ T6557] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 134.786885][ T6557] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 134.805350][ T6557] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 134.882577][ T6557] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 134.919137][ T6557] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 134.943122][ T6557] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 134.982130][ T6557] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 135.169506][ T6594] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[ 135.752361][ T6610] =======================================================
[ 135.752361][ T6610] WARNING: The mand mount option has been deprecated and
[ 135.752361][ T6610] and is ignored by this kernel. Remove the mand
[ 135.752361][ T6610] option from the mount to silence this warning.
[ 135.752361][ T6610] =======================================================
[ 136.058292][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[ 136.701114][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout
[ 136.854021][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout
[ 136.930355][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout
[ 137.495770][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[ 137.724292][ T6651] netlink: 338 bytes leftover after parsing attributes in process `syz.3.301'.
[ 138.148928][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[ 138.150629][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 138.172218][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 138.782648][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout
[ 138.930126][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout
[ 139.020569][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout
[ 139.301227][ T6690] netlink: 342 bytes leftover after parsing attributes in process `syz.0.318'.
[ 140.220190][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[ 140.511859][ T6726] tipc: Started in network mode
[ 140.537399][ T6726] tipc: Node identity ee00, cluster identity 4711
[ 140.557611][ T6726] tipc: Node number set to 60928
[ 140.850497][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout
[ 141.010208][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout
[ 141.099158][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout
[ 141.713656][ T6760] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 141.829026][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[ 144.374549][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'.
[ 144.391736][ T6845] team_slave_0: entered allmulticast mode
[ 145.058440][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[ 145.087787][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[ 145.487701][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'.
[ 145.516898][ T6879] team_slave_0: entered allmulticast mode
[ 147.569051][ T6952] netlink: 342 bytes leftover after parsing attributes in process `syz.3.428'.
[ 149.714461][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 149.816051][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 149.926926][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 150.051128][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 150.532577][ T1150] bridge_slave_1: left allmulticast mode
[ 150.540475][ T1150] bridge_slave_1: left promiscuous mode
[ 150.553623][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 150.563663][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[ 150.567500][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 150.578848][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 150.594450][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 150.604973][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 150.709067][ T1150] bridge_slave_0: left allmulticast mode
[ 150.734379][ T1150] bridge_slave_0: left promiscuous mode
[ 150.751783][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.586873][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 151.614835][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 151.626797][ T1150] bond0 (unregistering): Released all slaves
[ 151.930479][ T1150] tipc: Left network mode
[ 152.153659][ T7078] netlink: 342 bytes leftover after parsing attributes in process `syz.2.480'.
[ 152.690620][ T5851] Bluetooth: hci0: command tx timeout
[ 153.046041][ T1150] hsr_slave_0: left promiscuous mode
[ 153.075213][ T1150] hsr_slave_1: left promiscuous mode
[ 153.093989][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 153.113268][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 153.133140][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 153.143929][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 153.205108][ T1150] veth1_macvtap: left promiscuous mode
[ 153.217245][ T7063] kexec: Could not allocate control_code_buffer
[ 153.229627][ T1150] veth0_macvtap: left promiscuous mode
[ 153.235459][ T1150] veth1_vlan: left promiscuous mode
[ 153.251450][ T1150] veth0_vlan: left promiscuous mode
[ 153.775018][ T1150] team0 (unregistering): Port device team_slave_1 removed
[ 153.828815][ T1150] team0 (unregistering): Port device team_slave_0 removed
[ 154.308944][ T7045] chnl_net:caif_netlink_parms(): no params data found
[ 154.516785][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.527154][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 154.539058][ T7045] bridge_slave_0: entered allmulticast mode
[ 154.561620][ T7045] bridge_slave_0: entered promiscuous mode
[ 154.586301][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.606145][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 154.633970][ T7045] bridge_slave_1: entered allmulticast mode
[ 154.662306][ T7045] bridge_slave_1: entered promiscuous mode
[ 154.780301][ T5851] Bluetooth: hci0: command tx timeout
[ 154.823229][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 154.844971][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 155.067130][ T7045] team0: Port device team_slave_0 added
[ 155.097139][ T7045] team0: Port device team_slave_1 added
[ 155.171673][ T7142] sctp: [Deprecated]: syz.2.493 (pid 7142) Use of int in max_burst socket option deprecated.
[ 155.171673][ T7142] Use struct sctp_assoc_value instead
[ 155.312688][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 155.319713][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 155.394297][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 155.473080][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 155.497653][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 155.576256][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 155.993627][ T7045] hsr_slave_0: entered promiscuous mode
[ 156.023621][ T7045] hsr_slave_1: entered promiscuous mode
[ 156.398489][ T7171] delete_channel: no stack
[ 156.850403][ T5851] Bluetooth: hci0: command tx timeout
[ 157.715008][ T7045] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 157.750621][ T7217] mmap: syz.2.520 (7217) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 157.784154][ T7045] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 157.836538][ T7045] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 158.108585][ T7045] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 158.437274][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0
[ 158.528582][ T7045] 8021q: adding VLAN 0 to HW filter on device team0
[ 158.565265][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 158.572515][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 158.596949][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 158.604186][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 158.930648][ T5851] Bluetooth: hci0: command tx timeout
[ 159.328121][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 159.476198][ T7045] veth0_vlan: entered promiscuous mode
[ 159.496234][ T7045] veth1_vlan: entered promiscuous mode
[ 159.612392][ T7045] veth0_macvtap: entered promiscuous mode
[ 159.642686][ T7045] veth1_macvtap: entered promiscuous mode
[ 159.682801][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 159.710129][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 159.730593][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 159.749772][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 159.764690][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 159.779988][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 159.795138][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 159.844691][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 159.865770][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 159.886243][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 159.920148][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 159.947091][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 159.971256][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 160.005865][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 160.063970][ T7045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.094108][ T7045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.109257][ T7045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.119658][ T7045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.493765][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 160.538061][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 160.633482][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 160.677080][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.100926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 161.110580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 161.200630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 166.943036][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'.
[ 167.064839][ T7515] team0: Port device team_slave_0 removed
[ 171.273426][ T7635] sock: sock_timestamping_bind_phc: sock not bind to device
[ 171.777448][ T7648] nbd: socks must be embedded in a SOCK_ITEM attr
[ 171.816672][ T7648] block nbd1: shutting down sockets
[ 173.158633][ T7691] netlink: 186 bytes leftover after parsing attributes in process `syz.3.690'.
[ 177.404757][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.729'.
[ 177.473299][ T7796] team0: Port device team_slave_0 removed
[ 177.926612][ T7774] kexec: Could not allocate control_code_buffer
[ 179.338671][ T7845] zswap: compressor not available
[ 180.699291][ T7875] zswap: compressor not available
[ 181.562795][ T7896] netlink: 'syz.2.768': attribute type 9 has an invalid length.
[ 181.695536][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'.
[ 181.802423][ T7899] team0: Port device team_slave_0 removed
[ 183.186587][ T7916] sg_write: data in/out 32732/16086 bytes for SCSI command 0x0-- guessing data in;
[ 183.186587][ T7916] program syz.3.775 not setting count and/or reply_len properly
[ 185.318588][ T7966] capability: warning: `syz.0.797' uses 32-bit capabilities (legacy support in use)
[ 185.952928][ T7971] netlink: 342 bytes leftover after parsing attributes in process `syz.3.800'.
[ 185.982034][ T7971] netlink: 342 bytes leftover after parsing attributes in process `syz.3.800'.
[ 187.805342][ T7985] kexec: Could not allocate control_code_buffer
[ 188.100821][ T8013] netlink: 'syz.3.815': attribute type 9 has an invalid length.
[ 188.156798][ T8013] netlink: 330 bytes leftover after parsing attributes in process `syz.3.815'.
[ 188.212657][ T8010] zswap: compressor not available
[ 191.970230][ T30] audit: type=1800 audit(1745516151.284:7): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.850" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0
[ 192.176822][ T8109] sctp: [Deprecated]: syz.0.849 (pid 8109) Use of int in max_burst socket option deprecated.
[ 192.176822][ T8109] Use struct sctp_assoc_value instead
[ 192.200596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[ 193.645351][ T8147] netlink: 342 bytes leftover after parsing attributes in process `syz.0.869'.
[ 195.627583][ T8209] device-mapper: ioctl: Unable to rename non-existent device, to uuid „
[ 195.654326][ T8211] CIFS: VFS: Unsupported security flags: 0x10
[ 196.201442][ T5853] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[ 196.201485][ T5853] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[ 196.222495][ T5853] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[ 196.222547][ T5853] Bluetooth: hci0: adv larger than maximum supported
[ 196.230519][ T5853] Bluetooth: hci0: Malformed LE Event: 0x0d
[ 196.264315][ T8227] TCP: TCP_TX_DELAY enabled
[ 197.259618][ T8258] netlink: 342 bytes leftover after parsing attributes in process `syz.1.918'.
[ 197.411268][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[ 199.349929][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.946'.
[ 199.576458][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 199.584930][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 199.666765][ T8330] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 202.499532][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'.
[ 202.679820][ T8433] netlink: 'syz.0.994': attribute type 9 has an invalid length.
[ 202.687656][ T8433] netlink: 330 bytes leftover after parsing attributes in process `syz.0.994'.
[ 203.862319][ T5853] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260
[ 203.862366][ T5853] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260
[ 203.878456][ T5853] Bluetooth: hci3: Unknown advertising packet type: 0x7f
[ 203.878521][ T5853] Bluetooth: hci3: adv larger than maximum supported
[ 203.888167][ T5853] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 206.078807][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'.
[ 206.126870][ T5853] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260
[ 206.126907][ T5853] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260
[ 206.142878][ T5853] Bluetooth: hci3: Unknown advertising packet type: 0x7f
[ 206.142911][ T5853] Bluetooth: hci3: Unknown advertising packet type: 0x74
[ 206.150086][ T5853] Bluetooth: hci3: adv larger than maximum supported
[ 206.157140][ T5853] Bluetooth: hci3: Unknown advertising packet type: 0x20
[ 206.163925][ T5853] Bluetooth: hci3: adv larger than maximum supported
[ 206.171031][ T8531] caif0: entered promiscuous mode
[ 206.182944][ T5853] Bluetooth: hci3: adv larger than maximum supported
[ 206.182976][ T5853] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 206.814542][ T8547] qrtr: Invalid version 0
[ 208.700318][ T8601] Device name cannot be null; rc = [-22]
[ 210.660719][ T5853] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[ 210.660758][ T5853] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[ 210.675654][ T5853] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[ 210.675683][ T5853] Bluetooth: hci0: Unknown advertising packet type: 0x74
[ 210.682843][ T5853] Bluetooth: hci0: adv larger than maximum supported
[ 210.690303][ T5853] Bluetooth: hci0: Unknown advertising packet type: 0x20
[ 210.699261][ T5853] Bluetooth: hci0: adv larger than maximum supported
[ 210.706981][ T5853] Bluetooth: hci0: adv larger than maximum supported
[ 210.713881][ T5853] Bluetooth: hci0: Malformed LE Event: 0x0d
[ 211.871402][ T8691] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[8691]
[ 212.097734][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'.
[ 212.206178][ T8706] lo: entered allmulticast mode
[ 212.213309][ T8705] lo: left allmulticast mode
[ 212.643696][ T8714] nbd: socks must be embedded in a SOCK_ITEM attr
[ 212.672715][ T8714] block nbd1: shutting down sockets
[ 261.013398][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 261.019787][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 273.330307][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[ 322.455699][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 322.463208][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 362.770658][ T31] INFO: task jbd2/sda1-8:5175 blocked for more than 143 seconds.
[ 362.782641][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0
[ 362.793576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 362.806483][ T31] task:jbd2/sda1-8 state:D stack:26616 pid:5175 tgid:5175 ppid:2 task_flags:0x240040 flags:0x00004000
[ 362.822169][ T31] Call Trace:
[ 362.826151][ T31]
[ 362.830964][ T31] __schedule+0x116f/0x5de0
[ 362.836469][ T31] ? __lock_acquire+0x5ca/0x1ba0
[ 362.842268][ T31] ? __lock_acquire+0x5ca/0x1ba0
[ 362.849018][ T31] ? __pfx___schedule+0x10/0x10
[ 362.854942][ T31] ? find_held_lock+0x2b/0x80
[ 362.861700][ T31] ? schedule+0x2d7/0x3a0
[ 362.866921][ T31] schedule+0xe7/0x3a0
[ 362.872602][ T31] io_schedule+0xbf/0x130
[ 362.879575][ T31] bit_wait_io+0x15/0xe0
[ 362.886255][ T31] __wait_on_bit+0x62/0x180
[ 362.894158][ T31] ? __pfx_bit_wait_io+0x10/0x10
[ 362.901982][ T31] out_of_line_wait_on_bit+0xd9/0x110
[ 362.909788][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 362.916565][ T31] ? __pfx_wake_bit_function+0x10/0x10
[ 362.922441][ T31] ? __pfx___might_resched+0x10/0x10
[ 362.928289][ T31] __wait_on_buffer+0x64/0x70
[ 362.934831][ T31] jbd2_journal_commit_transaction+0x382e/0x6830
[ 362.943283][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[ 362.955093][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 362.961773][ T31] ? debug_object_deactivate+0x1ec/0x3a0
[ 362.969305][ T31] ? __pfx_debug_object_deactivate+0x10/0x10
[ 362.977672][ T31] ? find_held_lock+0x2b/0x80
[ 362.989545][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 362.999296][ T31] ? rcu_is_watching+0x12/0xc0
[ 363.008591][ T31] kjournald2+0x1f4/0x760
[ 363.015185][ T31] ? __pfx_kjournald2+0x10/0x10
[ 363.024228][ T31] ? find_held_lock+0x2b/0x80
[ 363.037050][ T31] ? __pfx_autoremove_wake_function+0x10/0x10
[ 363.049735][ T31] ? lockdep_hardirqs_on+0x7c/0x110
[ 363.062550][ T31] ? __kthread_parkme+0x19e/0x250
[ 363.074471][ T31] ? __pfx_kjournald2+0x10/0x10
[ 363.081446][ T31] kthread+0x3c2/0x780
[ 363.086362][ T31] ? __pfx_kthread+0x10/0x10
[ 363.093459][ T31] ? __pfx_kthread+0x10/0x10
[ 363.101605][ T31] ? __pfx_kthread+0x10/0x10
[ 363.107242][ T31] ? __pfx_kthread+0x10/0x10
[ 363.115353][ T31] ? rcu_is_watching+0x12/0xc0
[ 363.123132][ T31] ? __pfx_kthread+0x10/0x10
[ 363.137210][ T31] ret_from_fork+0x45/0x80
[ 363.146809][ T31] ? __pfx_kthread+0x10/0x10
[ 363.161461][ T31] ret_from_fork_asm+0x1a/0x30
[ 363.175403][ T31]
[ 363.183468][ T31] INFO: task syz-executor:5828 blocked for more than 143 seconds.
[ 363.199640][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0
[ 363.222174][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 363.241672][ T31] task:syz-executor state:D stack:23432 pid:5828 tgid:5828 ppid:5826 task_flags:0x440100 flags:0x00000002
[ 363.259302][ T31] Call Trace:
[ 363.266702][ T31]
[ 363.273124][ T31] __schedule+0x116f/0x5de0
[ 363.278991][ T31] ? __lock_acquire+0x5ca/0x1ba0
[ 363.288750][ T31] ? __pfx___schedule+0x10/0x10
[ 363.296613][ T31] ? find_held_lock+0x2b/0x80
[ 363.303887][ T31] ? schedule+0x2d7/0x3a0
[ 363.311613][ T31] schedule+0xe7/0x3a0
[ 363.317040][ T31] io_schedule+0xbf/0x130
[ 363.328044][ T31] bit_wait_io+0x15/0xe0
[ 363.335119][ T31] __wait_on_bit+0x62/0x180
[ 363.342609][ T31] ? __pfx_bit_wait_io+0x10/0x10
[ 363.352009][ T31] out_of_line_wait_on_bit+0xd9/0x110
[ 363.359468][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 363.368001][ T31] ? __pfx_wake_bit_function+0x10/0x10
[ 363.374684][ T31] do_get_write_access+0x93d/0x12a0
[ 363.381440][ T31] jbd2_journal_get_write_access+0x1d6/0x280
[ 363.389204][ T31] __ext4_journal_get_write_access+0x6a/0x340
[ 363.395874][ T31] ext4_reserve_inode_write+0x1be/0x320
[ 363.402083][ T31] __ext4_mark_inode_dirty+0x197/0x870
[ 363.408756][ T31] ? trace_kmem_cache_alloc+0x28/0xc0
[ 363.418273][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[ 363.425627][ T31] ? rcu_is_watching+0x12/0xc0
[ 363.431366][ T31] ? trace_jbd2_handle_start+0x1a8/0x230
[ 363.437779][ T31] ? jbd2__journal_start+0xf6/0x6a0
[ 363.445304][ T31] ? __ext4_journal_start_sb+0x195/0x690
[ 363.455093][ T31] ? __ext4_journal_start_sb+0x19e/0x690
[ 363.462247][ T31] ? ext4_dirty_inode+0xa1/0x130
[ 363.469082][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10
[ 363.476856][ T31] ext4_dirty_inode+0xd9/0x130
[ 363.484405][ T31] ? rcu_is_watching+0x12/0xc0
[ 363.489692][ T31] __mark_inode_dirty+0x1eb/0xe50
[ 363.499278][ T31] generic_update_time+0xcf/0xf0
[ 363.509852][ T31] file_update_time+0x17d/0x1c0
[ 363.516141][ T31] ext4_page_mkwrite+0x35e/0x1750
[ 363.525988][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 363.536172][ T31] do_page_mkwrite+0x171/0x380
[ 363.542205][ T31] do_pte_missing+0x29c/0x3fb0
[ 363.548509][ T31] ? __handle_mm_fault+0x1010/0x2a40
[ 363.554573][ T31] __handle_mm_fault+0x103d/0x2a40
[ 363.562176][ T31] ? __pfx___handle_mm_fault+0x10/0x10
[ 363.568699][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 363.576097][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 363.582191][ T31] handle_mm_fault+0x3fe/0xad0
[ 363.590065][ T31] do_user_addr_fault+0x60c/0x1370
[ 363.596030][ T31] exc_page_fault+0x5c/0xc0
[ 363.604892][ T31] asm_exc_page_fault+0x26/0x30
[ 363.611837][ T31] RIP: 0033:0x7f4f05677dcf
[ 363.618192][ T31] RSP: 002b:00007ffced7862c0 EFLAGS: 00010246
[ 363.629031][ T31] RAX: 00007f4f03944000 RBX: 00000000000000d1 RCX: 0000000000000000
[ 363.643439][ T31] RDX: 1ffffffff15110f8 RSI: 000055557a7bb6a0 RDI: 0000000000000001
[ 363.653213][ T31] RBP: 00007ffced7865b0 R08: 000055557a7bba58 R09: 000000000000221f
[ 363.663722][ T31] R10: 00007f4f05600000 R11: 00007ffced7867c0 R12: 00007ffced786610
[ 363.677145][ T31] R13: 0000000000000004 R14: 00007ffced786330 R15: 00007ffced786400
[ 363.687482][ T31]
[ 363.691389][ T31] INFO: task syz.0.1120:8727 blocked for more than 144 seconds.
[ 363.704448][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0
[ 363.717170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 363.732114][ T31] task:syz.0.1120 state:D stack:28344 pid:8727 tgid:8727 ppid:7045 task_flags:0x440040 flags:0x00000004
[ 363.747407][ T31] Call Trace:
[ 363.751280][ T31]
[ 363.754291][ T31] __schedule+0x116f/0x5de0
[ 363.758957][ T31] ? __lock_acquire+0x5ca/0x1ba0
[ 363.765183][ T31] ? __pfx___schedule+0x10/0x10
[ 363.773786][ T31] ? find_held_lock+0x2b/0x80
[ 363.782224][ T31] ? schedule+0x2d7/0x3a0
[ 363.790350][ T31] schedule+0xe7/0x3a0
[ 363.799704][ T31] io_schedule+0xbf/0x130
[ 363.807524][ T31] bit_wait_io+0x15/0xe0
[ 363.814162][ T31] __wait_on_bit+0x62/0x180
[ 363.819371][ T31] ? __pfx_bit_wait_io+0x10/0x10
[ 363.825354][ T31] out_of_line_wait_on_bit+0xd9/0x110
[ 363.835635][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 363.843554][ T31] ? __pfx_wake_bit_function+0x10/0x10
[ 363.850847][ T31] do_get_write_access+0x93d/0x12a0
[ 363.857392][ T31] jbd2_journal_get_write_access+0x1d6/0x280
[ 363.868411][ T31] __ext4_journal_get_write_access+0x6a/0x340
[ 363.881428][ T31] ext4_reserve_inode_write+0x1be/0x320
[ 363.897394][ T31] __ext4_mark_inode_dirty+0x197/0x870
[ 363.904367][ T31] ? trace_kmem_cache_alloc+0x28/0xc0
[ 363.913178][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[ 363.923054][ T31] ? rcu_is_watching+0x12/0xc0
[ 363.934214][ T31] ? trace_jbd2_handle_start+0x1a8/0x230
[ 363.940724][ T31] ? jbd2__journal_start+0xf6/0x6a0
[ 363.948907][ T31] ? __ext4_journal_start_sb+0x195/0x690
[ 363.960229][ T31] ? __ext4_journal_start_sb+0x19e/0x690
[ 363.972854][ T31] ? ext4_dirty_inode+0xa1/0x130
[ 363.978606][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10
[ 363.987992][ T31] ext4_dirty_inode+0xd9/0x130
[ 363.995440][ T31] ? rcu_is_watching+0x12/0xc0
[ 364.001938][ T31] __mark_inode_dirty+0x1eb/0xe50
[ 364.007846][ T31] generic_update_time+0xcf/0xf0
[ 364.015495][ T31] file_update_time+0x17d/0x1c0
[ 364.023612][ T31] ext4_page_mkwrite+0x35e/0x1750
[ 364.030100][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 364.036921][ T31] do_page_mkwrite+0x171/0x380
[ 364.042982][ T31] do_pte_missing+0x29c/0x3fb0
[ 364.048777][ T31] ? __handle_mm_fault+0x1010/0x2a40
[ 364.056346][ T31] __handle_mm_fault+0x103d/0x2a40
[ 364.068212][ T31] ? __pfx___handle_mm_fault+0x10/0x10
[ 364.075386][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 364.082385][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 364.091922][ T31] handle_mm_fault+0x3fe/0xad0
[ 364.098528][ T31] do_user_addr_fault+0x60c/0x1370
[ 364.106820][ T31] exc_page_fault+0x5c/0xc0
[ 364.113025][ T31] asm_exc_page_fault+0x26/0x30
[ 364.119410][ T31] RIP: 0033:0x7f64f026f282
[ 364.124014][ T31] RSP: 002b:00007ffe19bf2600 EFLAGS: 00010202
[ 364.132045][ T31] RAX: 0000000000005008 RBX: 00007f64f10e5720 RCX: 0000000000000000
[ 364.141839][ T31] RDX: 0000001b33c1b000 RSI: 0000000000000008 RDI: 00007f64f10e5720
[ 364.153152][ T31] RBP: 0000000000000014 R08: 00007f64ef9ff048 R09: 00007f64f05a2000
[ 364.165954][ T31] R10: 00007f64ef9ff008 R11: 0000000000000001 R12: ffffffff847f23df
[ 364.178295][ T31] R13: 00007f64f05b6038 R14: 0000000000000008 R15: ffffffffffffb000
[ 364.194041][ T31] ? cap_task_prctl+0x2af/0xa80
[ 364.199788][ T31]
[ 364.203832][ T31] INFO: task syz.3.1121:8729 blocked for more than 144 seconds.
[ 364.218582][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0
[ 364.232631][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 364.247479][ T31] task:syz.3.1121 state:D stack:28632 pid:8729 tgid:8729 ppid:5844 task_flags:0x440040 flags:0x00000004
[ 364.271230][ T31] Call Trace:
[ 364.275009][ T31]
[ 364.278392][ T31] __schedule+0x116f/0x5de0
[ 364.283847][ T31] ? __lock_acquire+0x5ca/0x1ba0
[ 364.290947][ T31] ? __pfx___schedule+0x10/0x10
[ 364.305817][ T31] ? find_held_lock+0x2b/0x80
[ 364.313197][ T31] ? schedule+0x2d7/0x3a0
[ 364.320744][ T31] schedule+0xe7/0x3a0
[ 364.326916][ T31] io_schedule+0xbf/0x130
[ 364.334181][ T31] bit_wait_io+0x15/0xe0
[ 364.339352][ T31] __wait_on_bit+0x62/0x180
[ 364.347978][ T31] ? __pfx_bit_wait_io+0x10/0x10
[ 364.356133][ T31] out_of_line_wait_on_bit+0xd9/0x110
[ 364.364514][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 364.375268][ T31] ? __pfx_wake_bit_function+0x10/0x10
[ 364.384038][ T31] do_get_write_access+0x93d/0x12a0
[ 364.398351][ T31] jbd2_journal_get_write_access+0x1d6/0x280
[ 364.406064][ T31] __ext4_journal_get_write_access+0x6a/0x340
[ 364.414688][ T31] ext4_reserve_inode_write+0x1be/0x320
[ 364.430440][ T31] __ext4_mark_inode_dirty+0x197/0x870
[ 364.438973][ T31] ? trace_kmem_cache_alloc+0x28/0xc0
[ 364.451241][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[ 364.464242][ T31] ? rcu_is_watching+0x12/0xc0
[ 364.470777][ T31] ? trace_jbd2_handle_start+0x1a8/0x230
[ 364.481322][ T31] ? jbd2__journal_start+0xf6/0x6a0
[ 364.487759][ T31] ? __ext4_journal_start_sb+0x195/0x690
[ 364.495971][ T31] ? __ext4_journal_start_sb+0x19e/0x690
[ 364.504974][ T31] ? ext4_dirty_inode+0xa1/0x130
[ 364.512430][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10
[ 364.519572][ T31] ext4_dirty_inode+0xd9/0x130
[ 364.528092][ T31] ? rcu_is_watching+0x12/0xc0
[ 364.535865][ T31] __mark_inode_dirty+0x1eb/0xe50
[ 364.546421][ T31] generic_update_time+0xcf/0xf0
[ 364.556889][ T31] file_update_time+0x17d/0x1c0
[ 364.563481][ T31] ext4_page_mkwrite+0x35e/0x1750
[ 364.569833][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 364.578331][ T31] ? __pfx_filemap_map_pages+0x10/0x10
[ 364.584172][ T31] ? pte_alloc_one+0x2b1/0x380
[ 364.589204][ T31] do_page_mkwrite+0x171/0x380
[ 364.595623][ T31] do_pte_missing+0x29c/0x3fb0
[ 364.607695][ T31] ? do_raw_spin_unlock+0x172/0x230
[ 364.613993][ T31] ? __pmd_alloc+0x3c2/0x870
[ 364.619333][ T31] __handle_mm_fault+0x103d/0x2a40
[ 364.626698][ T31] ? __pfx___handle_mm_fault+0x10/0x10
[ 364.633186][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 364.639619][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 364.645700][ T31] handle_mm_fault+0x3fe/0xad0
[ 364.650973][ T31] do_user_addr_fault+0x60c/0x1370
[ 364.656185][ T31] exc_page_fault+0x5c/0xc0
[ 364.661000][ T31] asm_exc_page_fault+0x26/0x30
[ 364.665943][ T31] RIP: 0033:0x7fd35b26547b
[ 364.672016][ T31] RSP: 002b:00007ffe38480990 EFLAGS: 00010246
[ 364.678882][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[ 364.687961][ T31] RDX: 0000001b30920000 RSI: 0000000000400000 RDI: 00007fd35b498d50
[ 364.697620][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[ 364.707041][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 364.715675][ T31] R13: 00000000000927c0 R14: 0000000000033f53 R15: 00007ffe38480c40
[ 364.724956][ T31]
[ 364.728129][ T31] INFO: task syz.2.1122:8730 blocked for more than 145 seconds.
[ 364.736248][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0
[ 364.744142][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 364.752982][ T31] task:syz.2.1122 state:D stack:27752 pid:8730 tgid:8730 ppid:5841 task_flags:0x440040 flags:0x00004004
[ 364.765421][ T31] Call Trace:
[ 364.769688][ T31]
[ 364.773021][ T31] __schedule+0x116f/0x5de0
[ 364.777887][ T31] ? __lock_acquire+0x5ca/0x1ba0
[ 364.783189][ T31] ? __pfx___schedule+0x10/0x10
[ 364.788223][ T31] ? find_held_lock+0x2b/0x80
[ 364.794303][ T31] ? schedule+0x2d7/0x3a0
[ 364.799216][ T31] schedule+0xe7/0x3a0
[ 364.804378][ T31] io_schedule+0xbf/0x130
[ 364.809781][ T31] bit_wait_io+0x15/0xe0
[ 364.814631][ T31] __wait_on_bit+0x62/0x180
[ 364.819699][ T31] ? __pfx_bit_wait_io+0x10/0x10
[ 364.824842][ T31] out_of_line_wait_on_bit+0xd9/0x110
[ 364.830847][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 364.837054][ T31] ? __pfx_wake_bit_function+0x10/0x10
[ 364.842847][ T31] do_get_write_access+0x93d/0x12a0
[ 364.849153][ T31] jbd2_journal_get_write_access+0x1d6/0x280
[ 364.855391][ T31] __ext4_journal_get_write_access+0x6a/0x340
[ 364.862611][ T31] ext4_reserve_inode_write+0x1be/0x320
[ 364.868243][ T31] __ext4_mark_inode_dirty+0x197/0x870
[ 364.873965][ T31] ? trace_kmem_cache_alloc+0x28/0xc0
[ 364.879527][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[ 364.886084][ T31] ? rcu_is_watching+0x12/0xc0
[ 364.891863][ T31] ? trace_jbd2_handle_start+0x1a8/0x230
[ 364.897779][ T31] ? jbd2__journal_start+0xf6/0x6a0
[ 364.903184][ T31] ? __ext4_journal_start_sb+0x195/0x690
[ 364.909352][ T31] ? __ext4_journal_start_sb+0x19e/0x690
[ 364.915667][ T31] ? ext4_dirty_inode+0xa1/0x130
[ 364.922983][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10
[ 364.928543][ T31] ext4_dirty_inode+0xd9/0x130
[ 364.933820][ T31] ? rcu_is_watching+0x12/0xc0
[ 364.938953][ T31] __mark_inode_dirty+0x1eb/0xe50
[ 364.945899][ T31] generic_update_time+0xcf/0xf0
[ 364.954753][ T31] file_update_time+0x17d/0x1c0
[ 364.962499][ T31] ext4_page_mkwrite+0x35e/0x1750
[ 364.971054][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 364.980552][ T31] ? __pfx_filemap_map_pages+0x10/0x10
[ 364.990497][ T31] ? pte_alloc_one+0x2b1/0x380
[ 364.998750][ T31] do_page_mkwrite+0x171/0x380
[ 365.005829][ T31] do_pte_missing+0x29c/0x3fb0
[ 365.012340][ T31] ? do_raw_spin_unlock+0x172/0x230
[ 365.019112][ T31] ? __pmd_alloc+0x3c2/0x870
[ 365.026230][ T31] __handle_mm_fault+0x103d/0x2a40
[ 365.034316][ T31] ? __pfx___handle_mm_fault+0x10/0x10
[ 365.043447][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 365.053603][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 365.061103][ T31] handle_mm_fault+0x3fe/0xad0
[ 365.068246][ T31] do_user_addr_fault+0x60c/0x1370
[ 365.075013][ T31] exc_page_fault+0x5c/0xc0
[ 365.080682][ T31] asm_exc_page_fault+0x26/0x30
[ 365.087078][ T31] RIP: 0033:0x7f3245c6547b
[ 365.092582][ T31] RSP: 002b:00007ffdeb9c9d90 EFLAGS: 00010246
[ 365.100641][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[ 365.113081][ T31] RDX: 0000001b30820000 RSI: 0000000000400000 RDI: 00007f3245e98d50
[ 365.123457][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[ 365.139206][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 365.150414][ T31] R13: 00000000000927c0 R14: 0000000000033f3f R15: 00007ffdeb9ca040
[ 365.160126][ T31]
[ 365.164194][ T31] INFO: task syz.1.1123:8731 blocked for more than 145 seconds.
[ 365.176325][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0
[ 365.188563][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 365.201483][ T31] task:syz.1.1123 state:D stack:28632 pid:8731 tgid:8731 ppid:5846 task_flags:0x440040 flags:0x00000004
[ 365.221002][ T31] Call Trace:
[ 365.224555][ T31]
[ 365.228495][ T31] __schedule+0x116f/0x5de0
[ 365.234189][ T31] ? __lock_acquire+0x5ca/0x1ba0
[ 365.240518][ T31] ? __pfx___schedule+0x10/0x10
[ 365.245566][ T31] ? find_held_lock+0x2b/0x80
[ 365.251161][ T31] ? schedule+0x2d7/0x3a0
[ 365.256775][ T31] schedule+0xe7/0x3a0
[ 365.262100][ T31] io_schedule+0xbf/0x130
[ 365.267806][ T31] bit_wait_io+0x15/0xe0
[ 365.273532][ T31] __wait_on_bit+0x62/0x180
[ 365.280324][ T31] ? __pfx_bit_wait_io+0x10/0x10
[ 365.286616][ T31] out_of_line_wait_on_bit+0xd9/0x110
[ 365.292724][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 365.300971][ T31] ? __pfx_wake_bit_function+0x10/0x10
[ 365.311048][ T31] do_get_write_access+0x93d/0x12a0
[ 365.319243][ T31] jbd2_journal_get_write_access+0x1d6/0x280
[ 365.326833][ T31] __ext4_journal_get_write_access+0x6a/0x340
[ 365.337644][ T31] ext4_reserve_inode_write+0x1be/0x320
[ 365.344253][ T31] __ext4_mark_inode_dirty+0x197/0x870
[ 365.351534][ T31] ? trace_kmem_cache_alloc+0x28/0xc0
[ 365.357792][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[ 365.364785][ T31] ? rcu_is_watching+0x12/0xc0
[ 365.373201][ T31] ? trace_jbd2_handle_start+0x1a8/0x230
[ 365.392046][ T31] ? jbd2__journal_start+0xf6/0x6a0
[ 365.397897][ T31] ? __ext4_journal_start_sb+0x195/0x690
[ 365.405791][ T31] ? __ext4_journal_start_sb+0x19e/0x690
[ 365.414551][ T31] ? ext4_dirty_inode+0xa1/0x130
[ 365.420067][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10
[ 365.429044][ T31] ext4_dirty_inode+0xd9/0x130
[ 365.434539][ T31] ? rcu_is_watching+0x12/0xc0
[ 365.441713][ T31] __mark_inode_dirty+0x1eb/0xe50
[ 365.448496][ T31] generic_update_time+0xcf/0xf0
[ 365.454377][ T31] file_update_time+0x17d/0x1c0
[ 365.462980][ T31] ext4_page_mkwrite+0x35e/0x1750
[ 365.470389][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 365.481415][ T31] ? __pfx_filemap_map_pages+0x10/0x10
[ 365.489450][ T31] ? pte_alloc_one+0x2b1/0x380
[ 365.497436][ T31] do_page_mkwrite+0x171/0x380
[ 365.503673][ T31] do_pte_missing+0x29c/0x3fb0
[ 365.510785][ T31] ? do_raw_spin_unlock+0x172/0x230
[ 365.519484][ T31] ? __pmd_alloc+0x3c2/0x870
[ 365.529280][ T31] __handle_mm_fault+0x103d/0x2a40
[ 365.539475][ T31] ? __pfx___handle_mm_fault+0x10/0x10
[ 365.548468][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 365.558295][ T31] ? lock_vma_under_rcu+0x47d/0x970
[ 365.565176][ T31] handle_mm_fault+0x3fe/0xad0
[ 365.571587][ T31] do_user_addr_fault+0x60c/0x1370
[ 365.578303][ T31] exc_page_fault+0x5c/0xc0
[ 365.583439][ T31] asm_exc_page_fault+0x26/0x30
[ 365.589079][ T31] RIP: 0033:0x7f096da6547b
[ 365.597077][ T31] RSP: 002b:00007fffc82a6630 EFLAGS: 00010246
[ 365.607113][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[ 365.619212][ T31] RDX: 0000001b30720000 RSI: 0000000000400000 RDI: 00007f096dc98d50
[ 365.632770][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[ 365.648399][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 365.660291][ T31] R13: 00000000000927c0 R14: 0000000000033f91 R15: 00007fffc82a68e0
[ 365.677399][ T31]
[ 365.680912][ T31]
[ 365.680912][ T31] Showing all locks held in the system:
[ 365.692506][ T31] 3 locks held by kworker/u8:0/12:
[ 365.699850][ T31] #0: ffff8880b8539f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[ 365.711273][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0
[ 365.725145][ T31] #2: ffffffff9adacbf8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x135/0x3a0
[ 365.737091][ T31] 1 lock held by khungtaskd/31:
[ 365.746660][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 365.766375][ T31] 6 locks held by kworker/u8:8/3477:
[ 365.772179][ T31] #0: ffff888021af5148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 365.787889][ T31] #1: ffffc9000c607d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 365.802982][ T31] #2: ffff8880354d80e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0
[ 365.820788][ T31] #3: ffff8880354dab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820
[ 365.837127][ T31] #4: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[ 365.849393][ T31] #5: ffff888078ec65d8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390
[ 365.863879][ T31] 1 lock held by klogd/5202:
[ 365.871653][ T31] #0: ffff8880b8539f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[ 365.889027][ T31] 2 locks held by getty/5597:
[ 365.895622][ T31] #0: ffff8880358da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 365.911564][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 365.927098][ T31] 3 locks held by syz-executor/5828:
[ 365.936378][ T31] #0: ffff888078419e48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[ 365.957902][ T31] #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[ 365.976906][ T31] #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[ 365.990927][ T31] 2 locks held by kworker/u9:6/5851:
[ 365.997333][ T31] #0: ffff888025df3148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 366.009615][ T31] #1: ffffc90003f2fd18 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 366.023991][ T31] 3 locks held by syz.0.1120/8727:
[ 366.033387][ T31] #0: ffff888033a18bc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[ 366.045179][ T31] #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[ 366.057498][ T31] #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[ 366.069706][ T31] 3 locks held by syz.3.1121/8729:
[ 366.075800][ T31] #0: ffff8880780a3e48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[ 366.091233][ T31] #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[ 366.106553][ T31] #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[ 366.120826][ T31] 3 locks held by syz.2.1122/8730:
[ 366.130780][ T31] #0: ffff88806cf91448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[ 366.146402][ T31] #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[ 366.161462][ T31] #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[ 366.173258][ T31] 3 locks held by syz.1.1123/8731:
[ 366.178681][ T31] #0: ffff88803032b588 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[ 366.189351][ T31] #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[ 366.202167][ T31] #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[ 366.217723][ T31]
[ 366.221781][ T31] =============================================
[ 366.221781][ T31]
[ 366.233462][ T31] NMI backtrace for cpu 0
[ 366.233486][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full)
[ 366.233523][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 366.233540][ T31] Call Trace:
[ 366.233549][ T31]
[ 366.233560][ T31] dump_stack_lvl+0x116/0x1f0
[ 366.233614][ T31] nmi_cpu_backtrace+0x27b/0x390
[ 366.233651][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 366.233686][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 366.233729][ T31] watchdog+0xf70/0x12c0
[ 366.233784][ T31] ? __pfx_watchdog+0x10/0x10
[ 366.233827][ T31] ? lockdep_hardirqs_on+0x7c/0x110
[ 366.233875][ T31] ? __kthread_parkme+0x19e/0x250
[ 366.233920][ T31] ? __pfx_watchdog+0x10/0x10
[ 366.233965][ T31] kthread+0x3c2/0x780
[ 366.234016][ T31] ? __pfx_kthread+0x10/0x10
[ 366.234082][ T31] ? __pfx_kthread+0x10/0x10
[ 366.234130][ T31] ? __pfx_kthread+0x10/0x10
[ 366.234178][ T31] ? __pfx_kthread+0x10/0x10
[ 366.234225][ T31] ? rcu_is_watching+0x12/0xc0
[ 366.234261][ T31] ? __pfx_kthread+0x10/0x10
[ 366.234335][ T31] ret_from_fork+0x45/0x80
[ 366.234364][ T31] ? __pfx_kthread+0x10/0x10
[ 366.234410][ T31] ret_from_fork_asm+0x1a/0x30
[ 366.234480][ T31]
[ 366.234491][ T31] Sending NMI from CPU 0 to CPUs 1:
[ 366.402578][ C1] NMI backtrace for cpu 1
[ 366.402611][ C1] CPU: 1 UID: 0 PID: 1150 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full)
[ 366.402648][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 366.402666][ C1] Workqueue: 0x0 (events_unbound)
[ 366.402703][ C1] RIP: 0010:__list_del_entry_valid_or_report+0xc3/0x200
[ 366.402749][ C1] Code: 0f 85 2d 01 00 00 48 39 5d 00 0f 85 97 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 6c 24 08 48 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 10 01 00 00 49 3b 5c 24 08 0f 85 a8 00 00 00 5b b8 01 00 00
[ 366.402786][ C1] RSP: 0018:ffffc90003fbfd70 EFLAGS: 00000046
[ 366.402804][ C1] RAX: dffffc0000000000 RBX: ffff8880275a9c00 RCX: ffffffff8182a7b9
[ 366.402825][ C1] RDX: 1ffff110041d81c1 RSI: ffffffff8182a647 RDI: ffff8880275a9c08
[ 366.402842][ C1] RBP: ffff888020ec0e08 R08: 0000000000000005 R09: 0000000000000000
[ 366.402858][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888020ec0e00
[ 366.402873][ C1] R13: ffff8880275a9c78 R14: 0000000000000001 R15: ffff8880275a9c40
[ 366.402894][ C1] FS: 0000000000000000(0000) GS:ffff888124abf000(0000) knlGS:0000000000000000
[ 366.402917][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 366.402933][ C1] CR2: 00007ffe29464248 CR3: 000000000e180000 CR4: 00000000003526f0
[ 366.402949][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 366.402969][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 366.402984][ C1] Call Trace:
[ 366.402994][ C1]
[ 366.403004][ C1] worker_leave_idle+0x12f/0x350
[ 366.403048][ C1] ? worker_thread+0x28b/0xf10
[ 366.403071][ C1] worker_thread+0x347/0xf10
[ 366.403100][ C1] ? __kthread_parkme+0x19e/0x250
[ 366.403135][ C1] ? __pfx_worker_thread+0x10/0x10
[ 366.403158][ C1] kthread+0x3c2/0x780
[ 366.403214][ C1] ? __pfx_kthread+0x10/0x10
[ 366.403250][ C1] ? __pfx_kthread+0x10/0x10
[ 366.403286][ C1] ? __pfx_kthread+0x10/0x10
[ 366.403322][ C1] ? __pfx_kthread+0x10/0x10
[ 366.403358][ C1] ? rcu_is_watching+0x12/0xc0
[ 366.403387][ C1] ? __pfx_kthread+0x10/0x10
[ 366.403430][ C1] ret_from_fork+0x45/0x80
[ 366.403456][ C1] ? __pfx_kthread+0x10/0x10
[ 366.403493][ C1] ret_from_fork_asm+0x1a/0x30
[ 366.403543][ C1]
[ 366.403760][ T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 366.403784][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full)
[ 366.403826][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 366.403847][ T31] Call Trace:
[ 366.403860][ T31]
[ 366.403873][ T31] dump_stack_lvl+0x3d/0x1f0
[ 366.403930][ T31] panic+0x71c/0x800
[ 366.404102][ T31] ? __pfx_panic+0x10/0x10
[ 366.404165][ T31] ? preempt_schedule_thunk+0x16/0x30
[ 366.404210][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 366.404479][ T31] ? preempt_schedule_thunk+0x16/0x30
[ 366.404516][ T31] ? watchdog+0xdda/0x12c0
[ 366.404565][ T31] ? watchdog+0xdcd/0x12c0
[ 366.404618][ T31] watchdog+0xdeb/0x12c0
[ 366.404675][ T31] ? __pfx_watchdog+0x10/0x10
[ 366.404721][ T31] ? lockdep_hardirqs_on+0x7c/0x110
[ 366.404773][ T31] ? __kthread_parkme+0x19e/0x250
[ 366.404822][ T31] ? __pfx_watchdog+0x10/0x10
[ 366.404869][ T31] kthread+0x3c2/0x780
[ 366.404923][ T31] ? __pfx_kthread+0x10/0x10
[ 366.404971][ T31] ? __pfx_kthread+0x10/0x10
[ 366.405021][ T31] ? __pfx_kthread+0x10/0x10
[ 366.405070][ T31] ? __pfx_kthread+0x10/0x10
[ 366.405119][ T31] ? rcu_is_watching+0x12/0xc0
[ 366.405156][ T31] ? __pfx_kthread+0x10/0x10
[ 366.405208][ T31] ret_from_fork+0x45/0x80
[ 366.405550][ T31] ? __pfx_kthread+0x10/0x10
[ 366.405607][ T31] ret_from_fork_asm+0x1a/0x30
[ 366.405707][ T31]
[ 366.926552][ T31] Kernel Offset: disabled
[ 366.933617][ T31] Rebooting in 86400 seconds..