last executing test programs: 4.454935343s ago: executing program 1 (id=2): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3.579197754s ago: executing program 0 (id=1): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$ppp(r0, &(0x7f0000000100)="e0bfc5c1", 0x4) 3.298243701s ago: executing program 0 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x7f, 0xd}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 3.057395017s ago: executing program 0 (id=7): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, 0x0, 0x0) 2.90847396s ago: executing program 0 (id=9): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='..\xeb\xbb\xb0(\x00\x00\x00']}, 0x0, 0x100) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) 2.459259751s ago: executing program 0 (id=10): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/159) 2.428474852s ago: executing program 3 (id=11): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x200) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x8028c7, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000300)='./file0/file1\x00', 0x8400, 0x126) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2.08058095s ago: executing program 3 (id=13): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x4000000000, 0x800, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.884280265s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="0200", 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)="00000080", 0x4, 0x0) 1.65909389s ago: executing program 3 (id=15): setns(0xc9, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) 1.63793966s ago: executing program 1 (id=16): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.544675403s ago: executing program 3 (id=17): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) rmdir(&(0x7f0000000fc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1.270931089s ago: executing program 2 (id=19): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {r2, r3+10000000}}, 0x0) timerfd_gettime(r0, 0x0) 1.224274491s ago: executing program 3 (id=20): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@usrquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4bfb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.022801666s ago: executing program 2 (id=21): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0xa4) write$UHID_INPUT(r0, &(0x7f0000002180)={0x8, {"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", 0x1000}}, 0xfffffd96) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x0) 543.758637ms ago: executing program 3 (id=22): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x11}) 354.285011ms ago: executing program 2 (id=23): fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 254.173384ms ago: executing program 2 (id=24): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200) readv(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1) 222.065685ms ago: executing program 0 (id=25): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) 123.884407ms ago: executing program 2 (id=26): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="b3915f8983bae828d57feab88cd891d5025016d22e12d69a920c7d5be9513c8cb20b7f9892e378b90e5984cd01c1aa4e985f368565579292541d7c4e6228a4e5ef0b776beee32aad57adbc5f014591db91dc98e513f8d1805376bf96cd665801fa4ddcecdc387ffad73170", 0x6b}, {&(0x7f0000000280)="d7ceb216ffcf81acb081ead37ed4564d55baac51f5ff070075aa9352e9f50006b980490200000006bea8d629b6156c648fbeb4a0f045ea7a609141a07633382093ab7e90d4b093c7cfcf012be609324851a923cf9a499eb754b9821f670ab28e9b4367e8a313bf256f578be50a1d", 0x6e}], 0x2, 0x0, 0x0, 0x4000890}, 0x2) recvmmsg$unix(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f00000004c0)=""/207, 0xcf}], 0x2}}], 0x1, 0x2000, 0x0) 0s ago: executing program 2 (id=27): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 76.351624][ T5767] cgroup: Unknown subsys name 'net' [ 76.490416][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.978866][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.596945][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.607674][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.615710][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.622472][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.625052][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.637951][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.645548][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.666605][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.673974][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.676765][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.686612][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.690968][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.702492][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.710230][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.712070][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.724778][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.732485][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.733441][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.741802][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.747546][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.774376][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.785393][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.797014][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.804483][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.181960][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 80.276052][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 80.300248][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 80.320988][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.400434][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.408116][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.416308][ T5778] bridge_slave_0: entered allmulticast mode [ 80.423368][ T5778] bridge_slave_0: entered promiscuous mode [ 80.440294][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.447651][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.454912][ T5778] bridge_slave_1: entered allmulticast mode [ 80.461932][ T5778] bridge_slave_1: entered promiscuous mode [ 80.525892][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.555167][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.608434][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.615831][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.623273][ T5780] bridge_slave_0: entered allmulticast mode [ 80.630394][ T5780] bridge_slave_0: entered promiscuous mode [ 80.646971][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.654206][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.661320][ T5780] bridge_slave_1: entered allmulticast mode [ 80.668421][ T5780] bridge_slave_1: entered promiscuous mode [ 80.692620][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.699741][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.709434][ T5779] bridge_slave_0: entered allmulticast mode [ 80.716986][ T5779] bridge_slave_0: entered promiscuous mode [ 80.726216][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.733469][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.740591][ T5779] bridge_slave_1: entered allmulticast mode [ 80.747776][ T5779] bridge_slave_1: entered promiscuous mode [ 80.755032][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.762147][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.769489][ T5781] bridge_slave_0: entered allmulticast mode [ 80.776757][ T5781] bridge_slave_0: entered promiscuous mode [ 80.787035][ T5778] team0: Port device team_slave_0 added [ 80.816006][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.823585][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.830700][ T5781] bridge_slave_1: entered allmulticast mode [ 80.837923][ T5781] bridge_slave_1: entered promiscuous mode [ 80.846630][ T5778] team0: Port device team_slave_1 added [ 80.857170][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.898381][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.909740][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.922263][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.976632][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.990246][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.000055][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.007401][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.033464][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.047376][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.054539][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.080770][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.101620][ T5779] team0: Port device team_slave_0 added [ 81.110382][ T5779] team0: Port device team_slave_1 added [ 81.145591][ T5780] team0: Port device team_slave_0 added [ 81.178343][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.185364][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.211304][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.226383][ T5781] team0: Port device team_slave_0 added [ 81.233764][ T5780] team0: Port device team_slave_1 added [ 81.241258][ T5781] team0: Port device team_slave_1 added [ 81.248697][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.255856][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.281790][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.360976][ T5779] hsr_slave_0: entered promiscuous mode [ 81.368510][ T5779] hsr_slave_1: entered promiscuous mode [ 81.396104][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.403163][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.429287][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.441643][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.448795][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.475312][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.490765][ T5778] hsr_slave_0: entered promiscuous mode [ 81.497488][ T5778] hsr_slave_1: entered promiscuous mode [ 81.503932][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.511779][ T5778] Cannot create hsr debugfs directory [ 81.528237][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.535477][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.561492][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.574223][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.581182][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.607142][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.740754][ T5781] hsr_slave_0: entered promiscuous mode [ 81.747494][ T5781] hsr_slave_1: entered promiscuous mode [ 81.756432][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.764814][ T5781] Cannot create hsr debugfs directory [ 81.764965][ T5782] Bluetooth: hci3: command tx timeout [ 81.795932][ T5780] hsr_slave_0: entered promiscuous mode [ 81.802170][ T5780] hsr_slave_1: entered promiscuous mode [ 81.808635][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.816290][ T5780] Cannot create hsr debugfs directory [ 81.842917][ T5787] Bluetooth: hci1: command tx timeout [ 81.848528][ T5787] Bluetooth: hci0: command tx timeout [ 81.854235][ T5782] Bluetooth: hci2: command tx timeout [ 82.135851][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.148061][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.159142][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.171616][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.261110][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.279118][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.289185][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.300300][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.378457][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.388629][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.407643][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.418672][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.450137][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.499382][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.519272][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.529835][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.544177][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.556868][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.571858][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.579279][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.605171][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.612342][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.705531][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.771474][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.826314][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.833512][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.854265][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.861408][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.879646][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.992098][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.003823][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.021396][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.028549][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.061126][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.068282][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.106470][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.146722][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.153902][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.215997][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.223159][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.308917][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.448216][ T5778] veth0_vlan: entered promiscuous mode [ 83.484301][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.497628][ T5778] veth1_vlan: entered promiscuous mode [ 83.607574][ T5778] veth0_macvtap: entered promiscuous mode [ 83.626768][ T5779] veth0_vlan: entered promiscuous mode [ 83.636197][ T5778] veth1_macvtap: entered promiscuous mode [ 83.658846][ T5779] veth1_vlan: entered promiscuous mode [ 83.704683][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.743656][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.769285][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.781930][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.790871][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.799826][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.814362][ T5779] veth0_macvtap: entered promiscuous mode [ 83.829110][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.842646][ T5779] veth1_macvtap: entered promiscuous mode [ 83.853216][ T5782] Bluetooth: hci3: command tx timeout [ 83.868821][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.899442][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.910302][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.921417][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.929121][ T5782] Bluetooth: hci1: command tx timeout [ 83.936358][ T5782] Bluetooth: hci2: command tx timeout [ 83.941774][ T5782] Bluetooth: hci0: command tx timeout [ 83.975987][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.987000][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.998561][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.030345][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.041231][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.052862][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.061571][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.176727][ T5781] veth0_vlan: entered promiscuous mode [ 84.197028][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.211308][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.224887][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.233334][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.242156][ T5780] veth0_vlan: entered promiscuous mode [ 84.269057][ T5781] veth1_vlan: entered promiscuous mode [ 84.295761][ T5780] veth1_vlan: entered promiscuous mode [ 84.330109][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.352649][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.389656][ T5781] veth0_macvtap: entered promiscuous mode [ 84.400559][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.425117][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.437958][ T5781] veth1_macvtap: entered promiscuous mode [ 84.446779][ T5780] veth0_macvtap: entered promiscuous mode [ 84.458746][ T5780] veth1_macvtap: entered promiscuous mode [ 84.506443][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.521120][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.545146][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.557066][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.572175][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.585751][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.596668][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.609248][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.623285][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.636737][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.659670][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.687147][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.712738][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.723767][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.751641][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.751679][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.766121][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.769870][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.769888][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.769898][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.769910][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.769920][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.769932][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.771176][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.778180][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.778226][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.778248][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.778287][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.785218][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.785248][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.785282][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.785308][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.052800][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.075342][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.097352][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.174720][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.174738][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.230352][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.235138][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 85.250274][ T5821] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 85.261333][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.262743][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.276856][ T5821] usb 2-1: Product: syz [ 85.276873][ T5821] usb 2-1: Manufacturer: syz [ 85.276887][ T5821] usb 2-1: SerialNumber: syz [ 85.436933][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.436961][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.749413][ T5857] syz.2.5[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.787115][ T5857] loop2: detected capacity change from 0 to 2048 [ 85.796801][ T5857] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.802996][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.812915][ T5857] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.825063][ T5857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.887366][ T5857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.924510][ T5782] Bluetooth: hci3: command tx timeout [ 86.005949][ T5782] Bluetooth: hci2: command tx timeout [ 86.012580][ T5782] Bluetooth: hci0: command tx timeout [ 86.018064][ T5782] Bluetooth: hci1: command tx timeout [ 86.044796][ T5857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5: bg 0: block 234: padding at end of block bitmap is not set [ 86.084607][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.098223][ T5857] EXT4-fs (loop2): Remounting filesystem read-only [ 86.124118][ T5818] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 86.142034][ T5818] usb 4-1: can't read configurations, error -71 [ 86.203672][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.306436][ T5869] loop2: detected capacity change from 0 to 256 [ 86.358838][ T5870] loop0: detected capacity change from 0 to 2048 [ 86.371663][ T5870] ======================================================= [ 86.371663][ T5870] WARNING: The mand mount option has been deprecated and [ 86.371663][ T5870] and is ignored by this kernel. Remove the mand [ 86.371663][ T5870] option from the mount to silence this warning. [ 86.371663][ T5870] ======================================================= [ 86.404901][ T5869] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 86.455018][ T5870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.500830][ T28] audit: type=1800 audit(1786313492.060:2): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="file1" dev="loop2" ino=1048592 res=0 errno=0 [ 86.557092][ T5821] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 86.596294][ T5821] usb 2-1: USB disconnect, device number 2 [ 87.112694][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.315938][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.351292][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.387503][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 87.418957][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.449178][ T9] usb 1-1: config 0 descriptor?? [ 87.685875][ T5888] loop3: detected capacity change from 0 to 1024 [ 87.929716][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 87.946261][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 87.968818][ T5780] hfsplus: node 4:3 still has 1 user(s)! [ 87.977569][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5 [ 88.012564][ T5782] Bluetooth: hci3: command tx timeout [ 88.041830][ T9] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 88.082821][ T5782] Bluetooth: hci1: command tx timeout [ 88.084046][ T5792] Bluetooth: hci0: command tx timeout [ 88.088242][ T5787] Bluetooth: hci2: command tx timeout [ 88.175809][ T5897] loop3: detected capacity change from 0 to 1024 [ 88.196227][ T5895] loop2: detected capacity change from 0 to 512 [ 88.209746][ T5897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.222424][ T9] usb 1-1: USB disconnect, device number 2 [ 88.232238][ T5897] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.297601][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.319870][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.334298][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.349814][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.368842][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.383821][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.397685][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.414137][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.427346][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.440632][ T5895] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.453106][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.480844][ T5896] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.20: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.609352][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.789205][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.025515][ T2136] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.246722][ T2136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.258031][ T2136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.279016][ T2136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.293501][ T2136] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.309646][ T2136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.328115][ T2136] usb 4-1: config 0 descriptor?? [ 91.857425][ T174] cfg80211: failed to load regulatory.db [ 94.407778][ T2136] usbhid 4-1:0.0: can't add hid device: -32 [ 94.414143][ T2136] usbhid: probe of 4-1:0.0 failed with error -32 [ 132.805781][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813516][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.963903][ T5143] udevd[5143]: worker [5769] /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/hidraw/hidraw0 is taking a long time [ 194.257472][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.263962][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.562558][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 206.568703][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 206.573150][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 206.580718][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 240.322712][ T29] INFO: task kworker/u4:12:3481 blocked for more than 143 seconds. [ 240.330824][ T29] Not tainted syzkaller #0 [ 240.339497][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.348300][ T29] task:kworker/u4:12 state:D stack:23656 pid:3481 ppid:2 flags:0x00004000 [ 240.357565][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 240.363659][ T29] Call Trace: [ 240.366957][ T29] [ 240.369901][ T29] __schedule+0x15ae/0x4660 [ 240.375470][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 240.381742][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 240.388085][ T29] ? asan.module_dtor+0x20/0x20 [ 240.393007][ T29] ? blk_check_plugged+0x250/0x250 [ 240.398135][ T29] ? wq_worker_sleeping+0x63/0x240 [ 240.403359][ T29] schedule+0xbd/0x170 [ 240.408102][ T29] io_schedule+0x80/0xd0 [ 240.412670][ T29] bit_wait_io+0x11/0xd0 [ 240.416962][ T29] __wait_on_bit+0x9f/0x2c0 [ 240.421498][ T29] ? bit_wait+0xd0/0xd0 [ 240.426034][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 240.431527][ T29] ? bit_wait+0xd0/0xd0 [ 240.435740][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 240.440525][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 240.445617][ T29] ? bit_waitqueue+0x30/0x30 [ 240.450233][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 240.455509][ T29] do_get_write_access+0x5c9/0xe00 [ 240.460656][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 240.466688][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 240.472937][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 240.479135][ T29] ext4_mb_mark_diskspace_used+0x1c3/0x14b0 [ 240.485161][ T29] ? ext4_get_group_no_and_offset+0x11b/0x1f0 [ 240.491269][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 240.497477][ T29] ? ext4_mb_use_preallocated+0x88a/0x13d0 [ 240.503350][ T29] ? ext4_mb_new_blocks+0x547/0x42f0 [ 240.508665][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 240.515153][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 240.520223][ T29] ? rcu_is_watching+0x15/0xb0 [ 240.525064][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 240.530822][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 240.538500][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 240.543872][ T29] ? __might_sleep+0xe0/0xe0 [ 240.548519][ T29] ? ext4_ext_release+0x10/0x10 [ 240.553508][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 240.558594][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 240.564133][ T29] ext4_map_blocks+0x9db/0x1a90 [ 240.569016][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 240.574266][ T29] ? rcu_is_watching+0x15/0xb0 [ 240.579071][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 240.584791][ T29] ext4_do_writepages+0x1463/0x3990 [ 240.590067][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 240.597018][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 240.602556][ T29] ? __lock_acquire+0x1336/0x7d80 [ 240.607644][ T29] ext4_writepages+0x1dd/0x350 [ 240.613106][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 240.618087][ T29] ? __rwlock_init+0x150/0x150 [ 240.622969][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 240.628210][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 240.633214][ T29] do_writepages+0x351/0x590 [ 240.637861][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 240.643743][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 240.649160][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 240.654310][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 240.659388][ T29] __writeback_single_inode+0x14e/0xee0 [ 240.665029][ T29] writeback_sb_inodes+0x813/0x1020 [ 240.670281][ T29] ? queue_io+0x530/0x530 [ 240.674736][ T29] __writeback_inodes_wb+0x114/0x240 [ 240.680052][ T29] wb_writeback+0x472/0xbe0 [ 240.684633][ T29] ? queue_io+0x2e1/0x530 [ 240.688992][ T29] ? percpu_ref_tryget+0x250/0x250 [ 240.694194][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 240.700208][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 240.706146][ T29] wb_workfn+0xad7/0xe60 [ 240.710416][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 240.716896][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 240.723083][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 240.728141][ T29] ? read_lock_is_recursive+0x20/0x20 [ 240.733630][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.738856][ T29] ? process_scheduled_works+0x975/0x1600 [ 240.744667][ T29] ? process_scheduled_works+0x975/0x1600 [ 240.750417][ T29] process_scheduled_works+0xa60/0x1600 [ 240.756171][ T29] ? worker_attach_to_pool+0x370/0x370 [ 240.761693][ T29] ? assign_work+0x3cc/0x5d0 [ 240.766337][ T29] worker_thread+0xa5e/0xfe0 [ 240.770962][ T29] kthread+0x2fa/0x390 [ 240.775133][ T29] ? pr_cont_work+0x550/0x550 [ 240.779848][ T29] ? kthread_blkcg+0xd0/0xd0 [ 240.784487][ T29] ret_from_fork+0x48/0x80 [ 240.788930][ T29] ? kthread_blkcg+0xd0/0xd0 [ 240.793621][ T29] ret_from_fork_asm+0x11/0x20 [ 240.798437][ T29] [ 240.801506][ T29] INFO: task jbd2/sda1-8:5105 blocked for more than 143 seconds. [ 240.809582][ T29] Not tainted syzkaller #0 [ 240.814962][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.825609][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5105 ppid:2 flags:0x00004000 [ 240.834914][ T29] Call Trace: [ 240.838208][ T29] [ 240.841134][ T29] __schedule+0x15ae/0x4660 [ 240.845703][ T29] ? asan.module_dtor+0x20/0x20 [ 240.850580][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 240.855663][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 240.861558][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 240.866883][ T29] schedule+0xbd/0x170 [ 240.870978][ T29] io_schedule+0x80/0xd0 [ 240.875295][ T29] bit_wait_io+0x11/0xd0 [ 240.879539][ T29] __wait_on_bit+0x9f/0x2c0 [ 240.884236][ T29] ? bit_wait+0xd0/0xd0 [ 240.888433][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 240.893968][ T29] ? bit_wait+0xd0/0xd0 [ 240.898144][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 240.902973][ T29] ? do_raw_write_lock+0x11e/0x260 [ 240.908125][ T29] ? bit_waitqueue+0x30/0x30 [ 240.912777][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 240.917838][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 240.924904][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 240.931698][ T29] ? lock_chain_count+0x20/0x20 [ 240.936608][ T29] ? _raw_spin_unlock+0x40/0x40 [ 240.941491][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 240.947177][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 240.952537][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 240.957607][ T29] ? timer_delete_sync+0x20/0x20 [ 240.962661][ T29] ? do_raw_read_unlock+0x80/0x80 [ 240.967721][ T29] ? prepare_to_wait+0x1aa/0x200 [ 240.972803][ T29] kjournald2+0x40f/0x810 [ 240.977165][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 240.982435][ T29] ? wake_bit_function+0x200/0x200 [ 240.987577][ T29] ? _raw_spin_unlock+0x40/0x40 [ 240.992631][ T29] ? __kthread_parkme+0x71/0x1c0 [ 240.997602][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 241.002693][ T29] kthread+0x2fa/0x390 [ 241.006793][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 241.012007][ T29] ? kthread_blkcg+0xd0/0xd0 [ 241.016651][ T29] ret_from_fork+0x48/0x80 [ 241.021130][ T29] ? kthread_blkcg+0xd0/0xd0 [ 241.026392][ T29] ret_from_fork_asm+0x11/0x20 [ 241.031191][ T29] [ 241.034323][ T29] INFO: task syz-executor:5767 blocked for more than 144 seconds. [ 241.042154][ T29] Not tainted syzkaller #0 [ 241.047351][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.056999][ T29] task:syz-executor state:D stack:22440 pid:5767 ppid:5766 flags:0x00004002 [ 241.066386][ T29] Call Trace: [ 241.069682][ T29] [ 241.072695][ T29] __schedule+0x15ae/0x4660 [ 241.077273][ T29] ? mark_lock+0x94/0x320 [ 241.081621][ T29] ? asan.module_dtor+0x20/0x20 [ 241.086592][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 241.091642][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 241.097620][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 241.102910][ T29] schedule+0xbd/0x170 [ 241.107038][ T29] io_schedule+0x80/0xd0 [ 241.111312][ T29] bit_wait_io+0x11/0xd0 [ 241.115622][ T29] __wait_on_bit+0x9f/0x2c0 [ 241.120153][ T29] ? bit_wait+0xd0/0xd0 [ 241.124994][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 241.130486][ T29] ? bit_wait+0xd0/0xd0 [ 241.134703][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 241.139485][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 241.144561][ T29] ? bit_waitqueue+0x30/0x30 [ 241.149187][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 241.154454][ T29] do_get_write_access+0x5c9/0xe00 [ 241.159599][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 241.165684][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 241.171888][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 241.178101][ T29] ? __might_sleep+0xe0/0xe0 [ 241.182759][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 241.188345][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 241.193976][ T29] ext4_dirty_inode+0xcb/0x110 [ 241.198777][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 241.205022][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 241.210086][ T29] file_update_time+0x187/0x1a0 [ 241.214988][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 241.220064][ T29] ? do_wp_page+0x4ce/0x34d0 [ 241.224701][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 241.231450][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 241.236554][ T29] do_page_mkwrite+0x153/0x3f0 [ 241.241340][ T29] do_wp_page+0xd4d/0x34d0 [ 241.245820][ T29] ? folio_put+0xd0/0xd0 [ 241.250079][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 241.255181][ T29] ? __rwlock_init+0x150/0x150 [ 241.259995][ T29] handle_mm_fault+0x1306/0x4a50 [ 241.264995][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 241.269977][ T29] ? numa_migrate_prep+0x350/0x350 [ 241.275157][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 241.280480][ T29] do_user_addr_fault+0x736/0x12d0 [ 241.285694][ T29] exc_page_fault+0x64/0x100 [ 241.290311][ T29] ? clear_bhb_loop+0x40/0x90 [ 241.295057][ T29] asm_exc_page_fault+0x26/0x30 [ 241.299967][ T29] RIP: 0033:0x7fc3d3e70163 [ 241.304541][ T29] RSP: 002b:00007fff4ddabf30 EFLAGS: 00010202 [ 241.310647][ T29] RAX: 00007fc3cf5e985c RBX: 00007fff4ddac060 RCX: 0000000000000000 [ 241.318693][ T29] RDX: 00007fc3cf5e9858 RSI: 0000000000000008 RDI: 00007fff4ddac060 [ 241.326728][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 241.335455][ T29] R10: 00007fff4ddac040 R11: 0000000000000000 R12: 0000000000000000 [ 241.343497][ T29] R13: 00000000000167a4 R14: fffffffffffe985c R15: 0000000000000000 [ 241.351500][ T29] [ 241.354600][ T29] INFO: task syz.3.22:5904 blocked for more than 144 seconds. [ 241.362085][ T29] Not tainted syzkaller #0 [ 241.367062][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.375788][ T29] task:syz.3.22 state:D stack:27048 pid:5904 ppid:5780 flags:0x00004004 [ 241.385065][ T29] Call Trace: [ 241.388364][ T29] [ 241.391310][ T29] __schedule+0x15ae/0x4660 [ 241.395943][ T29] ? mark_lock+0x94/0x320 [ 241.400299][ T29] ? asan.module_dtor+0x20/0x20 [ 241.405253][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 241.410307][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 241.416340][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 241.421566][ T29] schedule+0xbd/0x170 [ 241.425687][ T29] io_schedule+0x80/0xd0 [ 241.429962][ T29] bit_wait_io+0x11/0xd0 [ 241.435049][ T29] __wait_on_bit+0x9f/0x2c0 [ 241.439594][ T29] ? bit_wait+0xd0/0xd0 [ 241.444022][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 241.449517][ T29] ? bit_wait+0xd0/0xd0 [ 241.453898][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 241.458692][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 241.463966][ T29] ? bit_waitqueue+0x30/0x30 [ 241.468588][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 241.474007][ T29] do_get_write_access+0x5c9/0xe00 [ 241.479153][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 241.485341][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 241.491531][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 241.498620][ T29] ? __might_sleep+0xe0/0xe0 [ 241.503290][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 241.508872][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 241.514603][ T29] ext4_dirty_inode+0xcb/0x110 [ 241.519419][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 241.525515][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 241.530575][ T29] file_update_time+0x187/0x1a0 [ 241.536299][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 241.541368][ T29] ? filemap_fault+0x103c/0x1540 [ 241.546537][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 241.552482][ T29] ? pte_alloc_one+0x3b6/0x540 [ 241.557279][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 241.563744][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 241.568793][ T29] do_page_mkwrite+0x153/0x3f0 [ 241.573767][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 241.578733][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 241.583771][ T29] ? numa_migrate_prep+0x350/0x350 [ 241.588917][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 241.594258][ T29] do_user_addr_fault+0x736/0x12d0 [ 241.599416][ T29] exc_page_fault+0x64/0x100 [ 241.604102][ T29] asm_exc_page_fault+0x26/0x30 [ 241.608980][ T29] RIP: 0033:0x7f359f072789 [ 241.613450][ T29] RSP: 002b:00007ffc0b6fff10 EFLAGS: 00010202 [ 241.619542][ T29] RAX: 0000001b2e324000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 241.627564][ T29] RDX: 0000001b2e323ffc RSI: 00000000005ffde8 RDI: 00007f359ff55700 [ 241.635696][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f359f412000 [ 241.644483][ T29] R10: 00007f359ff55700 R11: 0000000000000000 R12: 0000000000000000 [ 241.652555][ T29] R13: 000000000001a46a R14: ffffffff813214ce R15: 00007f359ff55720 [ 241.660554][ T29] ? fpregs_activate+0x8e/0x1b0 [ 241.665505][ T29] [ 241.668555][ T29] INFO: task syz.0.25:5910 blocked for more than 144 seconds. [ 241.676062][ T29] Not tainted syzkaller #0 [ 241.681003][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.689739][ T29] task:syz.0.25 state:D stack:25384 pid:5910 ppid:5781 flags:0x00004004 [ 241.699014][ T29] Call Trace: [ 241.702366][ T29] [ 241.705330][ T29] __schedule+0x15ae/0x4660 [ 241.709866][ T29] ? mark_lock+0x94/0x320 [ 241.714246][ T29] ? asan.module_dtor+0x20/0x20 [ 241.719132][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 241.724241][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 241.730191][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 241.735457][ T29] schedule+0xbd/0x170 [ 241.740188][ T29] io_schedule+0x80/0xd0 [ 241.744597][ T29] bit_wait_io+0x11/0xd0 [ 241.748876][ T29] __wait_on_bit+0x9f/0x2c0 [ 241.753440][ T29] ? bit_wait+0xd0/0xd0 [ 241.757623][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 241.763158][ T29] ? bit_wait+0xd0/0xd0 [ 241.767347][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 241.772138][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 241.777236][ T29] ? bit_waitqueue+0x30/0x30 [ 241.781854][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 241.787110][ T29] do_get_write_access+0x5c9/0xe00 [ 241.792318][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 241.798334][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 241.804595][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 241.810795][ T29] ? __might_sleep+0xe0/0xe0 [ 241.815468][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 241.821046][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 241.826571][ T29] ext4_dirty_inode+0xcb/0x110 [ 241.831372][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 241.837252][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 241.843440][ T29] file_update_time+0x187/0x1a0 [ 241.848337][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 241.854386][ T29] ? filemap_fault+0x103c/0x1540 [ 241.859364][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 241.865315][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 241.871586][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 241.876906][ T29] ? __pte_offset_map+0x20d/0x280 [ 241.881982][ T29] do_page_mkwrite+0x153/0x3f0 [ 241.887008][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 241.891982][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 241.897117][ T29] ? numa_migrate_prep+0x350/0x350 [ 241.902370][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 241.907677][ T29] do_user_addr_fault+0x736/0x12d0 [ 241.912848][ T29] exc_page_fault+0x64/0x100 [ 241.917464][ T29] asm_exc_page_fault+0x26/0x30 [ 241.922364][ T29] RIP: 0033:0x7fda81a72eb2 [ 241.926906][ T29] RSP: 002b:00007ffd49e3a640 EFLAGS: 00010202 [ 241.933958][ T29] RAX: 0000000000010008 RBX: 00007fda82955720 RCX: 0000000000000000 [ 241.941974][ T29] RDX: 0000001b2e014000 RSI: 0000000000000008 RDI: 00007fda82955720 [ 241.950993][ T29] RBP: 00000000000004e1 R08: 00007fda81e10000 R09: 00007fda81e26218 [ 241.959040][ T29] R10: 0000000000000007 R11: 0000000000000004 R12: ffffffff8414ab5c [ 241.967105][ T29] R13: 00007fda81e26218 R14: 0000000000000194 R15: ffffffffffff0000 [ 241.975131][ T29] ? __bio_advance+0x2ec/0x4e0 [ 241.979921][ T29] [ 241.983018][ T29] [ 241.983018][ T29] Showing all locks held in the system: [ 241.990745][ T29] 1 lock held by khungtaskd/29: [ 241.995802][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 242.005825][ T29] 7 locks held by kworker/u4:12/3481: [ 242.011208][ T29] #0: ffff88801a67f938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 242.022475][ T29] #1: ffffc9000caf7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 242.035006][ T29] #2: ffff888031e340e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 242.046347][ T29] #3: ffff888031e36c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 242.056998][ T29] #4: ffff888031e38990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 242.066915][ T29] #5: ffff88807714aa88 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 242.076826][ T29] #6: ffffe8ffffd1fbd8 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x8af/0xc80 [ 242.087632][ T29] 2 locks held by getty/5537: [ 242.092374][ T29] #0: ffff88814c95a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 242.102164][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 242.112391][ T29] 3 locks held by syz-executor/5767: [ 242.117692][ T29] #0: ffff88802eaff3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 242.127705][ T29] #1: ffff888031e34510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 242.137544][ T29] #2: ffff888031e38990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 242.147295][ T29] 1 lock held by udevd/5898: [ 242.153674][ T29] #0: ffff8880237e7808 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xc8/0x1730 [ 242.163762][ T29] 3 locks held by syz.3.22/5904: [ 242.168716][ T29] #0: ffff88807a08a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 242.178722][ T29] #1: ffff888031e34510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 242.188625][ T29] #2: ffff888031e38990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 242.198381][ T29] 3 locks held by syz.0.25/5910: [ 242.204285][ T29] #0: ffff8880783273a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 242.214316][ T29] #1: ffff888031e34510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 242.224194][ T29] #2: ffff888031e38990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 242.233929][ T29] [ 242.236273][ T29] ============================================= [ 242.236273][ T29] [ 242.245099][ T29] NMI backtrace for cpu 0 [ 242.249467][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 242.256708][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.266785][ T29] Call Trace: [ 242.270077][ T29] [ 242.273027][ T29] dump_stack_lvl+0x18c/0x250 [ 242.277741][ T29] ? __wake_up_klogd+0xd9/0x100 [ 242.282626][ T29] ? show_regs_print_info+0x20/0x20 [ 242.287849][ T29] ? load_image+0x420/0x420 [ 242.292378][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 242.297371][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 242.303557][ T29] ? load_image+0x420/0x420 [ 242.308100][ T29] ? wq_watchdog_touch+0xef/0x170 [ 242.313139][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 242.319242][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 242.325252][ T29] watchdog+0xf59/0xfa0 [ 242.329424][ T29] ? watchdog+0x1e1/0xfa0 [ 242.333777][ T29] kthread+0x2fa/0x390 [ 242.337861][ T29] ? hungtask_pm_notify+0x50/0x50 [ 242.342958][ T29] ? kthread_blkcg+0xd0/0xd0 [ 242.347561][ T29] ret_from_fork+0x48/0x80 [ 242.351997][ T29] ? kthread_blkcg+0xd0/0xd0 [ 242.356601][ T29] ret_from_fork_asm+0x11/0x20 [ 242.361389][ T29] [ 242.365098][ T29] Sending NMI from CPU 0 to CPUs 1: [ 242.370334][ C1] NMI backtrace for cpu 1 [ 242.370343][ C1] CPU: 1 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 242.370356][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.370365][ C1] Workqueue: bat_events batadv_nc_worker [ 242.370384][ C1] RIP: 0010:batadv_nc_worker+0x27c/0x600 [ 242.370402][ C1] Code: 24 e8 28 07 31 f7 c6 05 a9 8c 20 04 01 48 c7 c7 40 ec e6 8b be 30 03 00 00 48 c7 c2 e0 ec e6 8b e8 d9 cf 12 f7 e8 24 98 1b f7 <48> c7 c7 a0 1d 13 8d 4c 89 ee e8 c5 9c 12 f7 48 8b 44 24 20 42 0f [ 242.370413][ C1] RSP: 0018:ffffc90000aafb60 EFLAGS: 00000287 [ 242.370424][ C1] RAX: 0000000000000000 RBX: ffff88805f6a1580 RCX: ffff8880186b1e00 [ 242.370433][ C1] RDX: 0000000000000000 RSI: ffffffff8b1d32c0 RDI: ffff8880186b1e00 [ 242.370443][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff223daa0 [ 242.370452][ C1] R10: dffffc0000000000 R11: fffffbfff223daa1 R12: dffffc0000000000 [ 242.370462][ C1] R13: ffffffff8a566972 R14: ffff888079c6cd00 R15: 0000000000000271 [ 242.370472][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 242.370483][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.370492][ C1] CR2: 000055aa187b7168 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 242.370505][ C1] Call Trace: [ 242.370510][ C1] [ 242.370516][ C1] ? process_scheduled_works+0x975/0x1600 [ 242.370536][ C1] process_scheduled_works+0xa60/0x1600 [ 242.370567][ C1] ? worker_attach_to_pool+0x370/0x370 [ 242.370588][ C1] ? assign_work+0x3cc/0x5d0 [ 242.370608][ C1] worker_thread+0xa5e/0xfe0 [ 242.370637][ C1] kthread+0x2fa/0x390 [ 242.370649][ C1] ? pr_cont_work+0x550/0x550 [ 242.370667][ C1] ? kthread_blkcg+0xd0/0xd0 [ 242.370681][ C1] ret_from_fork+0x48/0x80 [ 242.370698][ C1] ? kthread_blkcg+0xd0/0xd0 [ 242.370712][ C1] ret_from_fork_asm+0x11/0x20 [ 242.370736][ C1] [ 242.565386][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 242.572281][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 242.579502][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.589569][ T29] Call Trace: [ 242.592867][ T29] [ 242.595816][ T29] dump_stack_lvl+0x18c/0x250 [ 242.600523][ T29] ? show_regs_print_info+0x20/0x20 [ 242.605767][ T29] ? load_image+0x420/0x420 [ 242.610278][ T29] panic+0x2ca/0x720 [ 242.614174][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 242.618679][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 242.624252][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 242.629646][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 242.635801][ T29] watchdog+0xf98/0xfa0 [ 242.639955][ T29] ? watchdog+0x1e1/0xfa0 [ 242.644297][ T29] kthread+0x2fa/0x390 [ 242.648380][ T29] ? hungtask_pm_notify+0x50/0x50 [ 242.653402][ T29] ? kthread_blkcg+0xd0/0xd0 [ 242.657986][ T29] ret_from_fork+0x48/0x80 [ 242.662415][ T29] ? kthread_blkcg+0xd0/0xd0 [ 242.667036][ T29] ret_from_fork_asm+0x11/0x20 [ 242.671825][ T29] [ 242.675429][ T29] Kernel Offset: disabled [ 242.679756][ T29] Rebooting in 86400 seconds..