last executing test programs: 26.778448432s ago: executing program 5 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e0001000000000000000008000300000000009c0009801c000080060001000200000008"], 0x1d8}}, 0x0) 26.160755959s ago: executing program 5 (id=242): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) 26.152130944s ago: executing program 1 (id=243): r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000100)=r1, 0xfdeb) 25.677640695s ago: executing program 1 (id=247): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@errors_continue}, {@abort}, {@errors_remount}, {@norecovery}, {@minixdf}, {@nolazytime}, {@noquota}, {@norecovery}, {@usrquota}, {@user_xattr}]}, 0x1, 0x476, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="09000000020000000e"], 0x70d402) 25.622962693s ago: executing program 5 (id=248): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 1 [ 65.449174][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.458035][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.467539][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.475469][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.484202][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.492194][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.501259][ T5252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.502696][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.509255][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.524016][ T5252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.532219][ T5252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.532569][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.540404][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.565306][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.574156][ T5253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.581900][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.589852][ T5252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.590231][ T5253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.602203][ T5254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.605066][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.611797][ T5254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.618590][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.626503][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.634327][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.640613][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.647932][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.653537][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.660833][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.676174][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.677028][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.691159][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.691767][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.698742][ T5252] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.714164][ T5252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.714323][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.241853][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 66.303183][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 66.367970][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 66.441371][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 66.470283][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 66.517771][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.525155][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.532530][ T5233] bridge_slave_0: entered allmulticast mode [ 66.539800][ T5233] bridge_slave_0: entered promiscuous mode [ 66.582568][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.589784][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.597106][ T5233] bridge_slave_1: entered allmulticast mode [ 66.604269][ T5233] bridge_slave_1: entered promiscuous mode [ 66.674555][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.718626][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.736349][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 66.769758][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.777208][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.784765][ T5230] bridge_slave_0: entered allmulticast mode [ 66.791548][ T5230] bridge_slave_0: entered promiscuous mode [ 66.799771][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.807687][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.815186][ T5230] bridge_slave_1: entered allmulticast mode [ 66.821969][ T5230] bridge_slave_1: entered promiscuous mode [ 66.860678][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.867923][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.875614][ T5231] bridge_slave_0: entered allmulticast mode [ 66.882437][ T5231] bridge_slave_0: entered promiscuous mode [ 66.902659][ T5233] team0: Port device team_slave_0 added [ 66.921269][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.931783][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.939499][ T5232] bridge_slave_0: entered allmulticast mode [ 66.946908][ T5232] bridge_slave_0: entered promiscuous mode [ 66.954886][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.961969][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.969189][ T5232] bridge_slave_1: entered allmulticast mode [ 66.976753][ T5232] bridge_slave_1: entered promiscuous mode [ 66.992804][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.000013][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.007487][ T5231] bridge_slave_1: entered allmulticast mode [ 67.014660][ T5231] bridge_slave_1: entered promiscuous mode [ 67.022393][ T5233] team0: Port device team_slave_1 added [ 67.114965][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.122397][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.129731][ T5235] bridge_slave_0: entered allmulticast mode [ 67.136866][ T5235] bridge_slave_0: entered promiscuous mode [ 67.146894][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.163023][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.202782][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.212813][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.220356][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.246670][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.259131][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.266454][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.273987][ T5235] bridge_slave_1: entered allmulticast mode [ 67.281170][ T5235] bridge_slave_1: entered promiscuous mode [ 67.289340][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.300643][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.322802][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.341521][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.348761][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.375467][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.466229][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.486353][ T5230] team0: Port device team_slave_0 added [ 67.495085][ T5232] team0: Port device team_slave_0 added [ 67.501239][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.508685][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.516111][ T5228] bridge_slave_0: entered allmulticast mode [ 67.523130][ T5228] bridge_slave_0: entered promiscuous mode [ 67.532441][ T5231] team0: Port device team_slave_0 added [ 67.541074][ T5231] team0: Port device team_slave_1 added [ 67.549468][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.568683][ T5230] team0: Port device team_slave_1 added [ 67.584687][ T5232] team0: Port device team_slave_1 added [ 67.598244][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.607287][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.614544][ T5228] bridge_slave_1: entered allmulticast mode [ 67.621377][ T5228] bridge_slave_1: entered promiscuous mode [ 67.665083][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.672068][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.698626][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.710320][ T5239] Bluetooth: hci2: command tx timeout [ 67.718317][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.726249][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.752999][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.793408][ T5239] Bluetooth: hci4: command tx timeout [ 67.793686][ T5252] Bluetooth: hci1: command tx timeout [ 67.799168][ T5239] Bluetooth: hci0: command tx timeout [ 67.810140][ T5245] Bluetooth: hci5: command tx timeout [ 67.811832][ T5252] Bluetooth: hci3: command tx timeout [ 67.825333][ T5235] team0: Port device team_slave_0 added [ 67.847514][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.854727][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.881192][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.904603][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.914509][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.921568][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.948265][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.961941][ T5235] team0: Port device team_slave_1 added [ 67.981893][ T5230] hsr_slave_0: entered promiscuous mode [ 67.988581][ T5230] hsr_slave_1: entered promiscuous mode [ 67.996564][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.003778][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.030431][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.045690][ T5233] hsr_slave_0: entered promiscuous mode [ 68.052480][ T5233] hsr_slave_1: entered promiscuous mode [ 68.058860][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.066725][ T5233] Cannot create hsr debugfs directory [ 68.074739][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.084493][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.091533][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.118152][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.151945][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.159249][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.185373][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.232648][ T5228] team0: Port device team_slave_0 added [ 68.242621][ T5228] team0: Port device team_slave_1 added [ 68.266098][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.274060][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.300985][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.432549][ T5231] hsr_slave_0: entered promiscuous mode [ 68.439243][ T5231] hsr_slave_1: entered promiscuous mode [ 68.446166][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.453841][ T5231] Cannot create hsr debugfs directory [ 68.459955][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.467296][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.493645][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.506298][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.513465][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.539654][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.575357][ T5232] hsr_slave_0: entered promiscuous mode [ 68.581860][ T5232] hsr_slave_1: entered promiscuous mode [ 68.588591][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.596454][ T5232] Cannot create hsr debugfs directory [ 68.639333][ T5235] hsr_slave_0: entered promiscuous mode [ 68.646201][ T5235] hsr_slave_1: entered promiscuous mode [ 68.652408][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.660390][ T5235] Cannot create hsr debugfs directory [ 68.792064][ T5228] hsr_slave_0: entered promiscuous mode [ 68.798739][ T5228] hsr_slave_1: entered promiscuous mode [ 68.805488][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.813048][ T5228] Cannot create hsr debugfs directory [ 69.047447][ T5233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.059578][ T5233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.095629][ T5233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.140928][ T5233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.201049][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.221342][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.239171][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.253764][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.296841][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.308716][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.319478][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.340910][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.422536][ T5232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.444737][ T5232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.460314][ T5232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.489409][ T5232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.582639][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.595752][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.605639][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.617787][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.639630][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.687485][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.716373][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.729336][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.755013][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.766985][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.774475][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.784487][ T5252] Bluetooth: hci2: command tx timeout [ 69.788081][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.797138][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.817117][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.836026][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.856194][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.863614][ T5252] Bluetooth: hci3: command tx timeout [ 69.863784][ T5239] Bluetooth: hci0: command tx timeout [ 69.869014][ T5252] Bluetooth: hci5: command tx timeout [ 69.874647][ T4617] Bluetooth: hci1: command tx timeout [ 69.880057][ T5252] Bluetooth: hci4: command tx timeout [ 69.937994][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.945267][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.998765][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.005962][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.029361][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.086801][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.128813][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.161513][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.168663][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.227512][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.234691][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.271698][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.302392][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.309650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.382324][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.398074][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.414839][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.422011][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.487922][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.531252][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.572123][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.587905][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.595095][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.632553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.639738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.657641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.664831][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.743823][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.751319][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.841070][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.873539][ T5233] veth0_vlan: entered promiscuous mode [ 70.910306][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.923847][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.929012][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.998231][ T5228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.017024][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.040231][ T5233] veth1_vlan: entered promiscuous mode [ 71.100259][ T5235] veth0_vlan: entered promiscuous mode [ 71.124471][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.149364][ T5235] veth1_vlan: entered promiscuous mode [ 71.266436][ T5233] veth0_macvtap: entered promiscuous mode [ 71.319509][ T5233] veth1_macvtap: entered promiscuous mode [ 71.359740][ T5235] veth0_macvtap: entered promiscuous mode [ 71.426223][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.469803][ T5235] veth1_macvtap: entered promiscuous mode [ 71.500586][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.527733][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.581239][ T5233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.590487][ T5233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607367][ T5233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.619677][ T5233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.641670][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.685954][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.698099][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.709891][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.758885][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.770230][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.782280][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.807289][ T5232] veth0_vlan: entered promiscuous mode [ 71.834377][ T5231] veth0_vlan: entered promiscuous mode [ 71.848431][ T5228] veth0_vlan: entered promiscuous mode [ 71.865264][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.874470][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.874611][ T5252] Bluetooth: hci2: command tx timeout [ 71.883179][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.897538][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.943906][ T5252] Bluetooth: hci4: command tx timeout [ 71.946792][ T4617] Bluetooth: hci1: command tx timeout [ 71.949348][ T5252] Bluetooth: hci0: command tx timeout [ 71.957902][ T4617] Bluetooth: hci5: command tx timeout [ 71.960321][ T5239] Bluetooth: hci3: command tx timeout [ 71.978535][ T5232] veth1_vlan: entered promiscuous mode [ 72.006432][ T5230] veth0_vlan: entered promiscuous mode [ 72.018552][ T5228] veth1_vlan: entered promiscuous mode [ 72.041142][ T5231] veth1_vlan: entered promiscuous mode [ 72.061787][ T5230] veth1_vlan: entered promiscuous mode [ 72.070629][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.079404][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.190032][ T5230] veth0_macvtap: entered promiscuous mode [ 72.199031][ T5231] veth0_macvtap: entered promiscuous mode [ 72.207510][ T5232] veth0_macvtap: entered promiscuous mode [ 72.227467][ T5228] veth0_macvtap: entered promiscuous mode [ 72.241668][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.245283][ T5232] veth1_macvtap: entered promiscuous mode [ 72.257033][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.271868][ T5230] veth1_macvtap: entered promiscuous mode [ 72.282007][ T5231] veth1_macvtap: entered promiscuous mode [ 72.317284][ T5228] veth1_macvtap: entered promiscuous mode [ 72.348406][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.354859][ T5233] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.359270][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.385069][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.396428][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.408086][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.422365][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.442533][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.471173][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.481929][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.492331][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.503389][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.515742][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.551043][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.552680][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.559627][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.578691][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.600151][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.610876][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.621665][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.632187][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.645418][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.661380][ T5232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.670860][ T5232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.680486][ T5232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.695811][ T5232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.716831][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.728923][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.740276][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.753171][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.766635][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.777764][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.780512][ T5340] loop2: detected capacity change from 0 to 1024 [ 72.788105][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.805029][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.839296][ T29] audit: type=1800 audit(1727368874.509:2): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file1" dev="loop2" ino=25 res=0 errno=0 [ 72.864685][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.890671][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.901413][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.911460][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.922168][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.932488][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.943292][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.954978][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.964213][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.990795][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.010488][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.053328][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.063902][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.080586][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.098601][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.111969][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.127504][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.138451][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.151289][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.169288][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.178433][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193768][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.202493][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.241826][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.252739][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.262995][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.273975][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.283861][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.294465][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.304751][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.315296][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.326536][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.338183][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.347036][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.356141][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.365055][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.477664][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.492652][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.506624][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.518047][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.529047][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.540743][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.551238][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.565117][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.575950][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.601074][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.622978][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.664769][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.683834][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.692946][ T5348] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10'. [ 73.714066][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.714612][ T5344] loop2: detected capacity change from 0 to 32768 [ 73.722796][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.752617][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.776160][ T5344] ======================================================= [ 73.776160][ T5344] WARNING: The mand mount option has been deprecated and [ 73.776160][ T5344] and is ignored by this kernel. Remove the mand [ 73.776160][ T5344] option from the mount to silence this warning. [ 73.776160][ T5344] ======================================================= [ 73.776550][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.856250][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.878154][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.963638][ T5252] Bluetooth: hci2: command tx timeout [ 74.023553][ T5252] Bluetooth: hci5: command tx timeout [ 74.025323][ T5239] Bluetooth: hci1: command tx timeout [ 74.029283][ T4617] Bluetooth: hci4: command tx timeout [ 74.040771][ T5245] Bluetooth: hci0: command tx timeout [ 74.040884][ T5239] Bluetooth: hci3: command tx timeout [ 74.069431][ T5344] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.102201][ T5358] loop3: detected capacity change from 0 to 512 [ 74.116309][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.140719][ T5358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.154703][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.210964][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.219183][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.302217][ T5344] XFS (loop2): Ending clean mount [ 74.319512][ T5344] XFS (loop2): Quotacheck needed: Please wait. [ 74.351912][ T5358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.368470][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.378146][ T5358] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.407607][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.456653][ T5344] XFS (loop2): Quotacheck: Done. [ 74.501743][ T5366] loop5: detected capacity change from 0 to 256 [ 74.522076][ T5366] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.587456][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.594750][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.620380][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.634601][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.689498][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.752118][ T3082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.768130][ T3082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.860541][ T5233] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.958952][ T5375] netlink: 'syz.0.15': attribute type 4 has an invalid length. [ 75.115072][ T5379] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 75.232163][ T5385] loop1: detected capacity change from 0 to 2048 [ 75.285123][ T5387] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.609778][ T5385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.640807][ T5371] loop3: detected capacity change from 0 to 32768 [ 75.664100][ T5371] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 75.672553][ T5371] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 75.800387][ T5371] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 75.811939][ T5385] Remounting filesystem read-only [ 75.833587][ T5385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.945394][ T5385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.993082][ T5385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.996440][ T5229] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 76.004608][ T5385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 76.058054][ T5229] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 76.182393][ T5385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 76.273563][ T5229] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 215ms [ 76.281700][ T5229] gfs2: fsid=syz:syz.0: jid=0: Done [ 76.288459][ T5371] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 76.330630][ T5385] syz.1.19 (5385) used greatest stack depth: 17528 bytes left [ 76.334202][ T29] audit: type=1800 audit(1727368877.979:3): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 76.390488][ T5412] netlink: 'syz.0.29': attribute type 5 has an invalid length. [ 76.408747][ T5412] : entered promiscuous mode [ 76.606898][ T5418] loop2: detected capacity change from 0 to 256 [ 76.791912][ T5395] loop5: detected capacity change from 0 to 32768 [ 76.838520][ T5395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.22 (5395) [ 76.897025][ T5417] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 76.905012][ T5395] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.940561][ T5395] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 76.949245][ T5395] BTRFS info (device loop5): using free-space-tree [ 76.972516][ T5418] FAT-fs (loop2): Directory bread(block 64) failed [ 76.979216][ T5418] FAT-fs (loop2): Directory bread(block 65) failed [ 76.986188][ T5418] FAT-fs (loop2): Directory bread(block 66) failed [ 76.992904][ T5418] FAT-fs (loop2): Directory bread(block 67) failed [ 77.008692][ T5418] FAT-fs (loop2): Directory bread(block 68) failed [ 77.015375][ T5418] FAT-fs (loop2): Directory bread(block 69) failed [ 77.023443][ T5418] FAT-fs (loop2): Directory bread(block 70) failed [ 77.030019][ T5418] FAT-fs (loop2): Directory bread(block 71) failed [ 77.046634][ T5418] FAT-fs (loop2): Directory bread(block 72) failed [ 77.067940][ T5440] loop4: detected capacity change from 0 to 512 [ 77.083431][ T29] audit: type=1326 audit(1727368878.719:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50cdd7df39 code=0x7ffc0000 [ 77.106943][ T5418] FAT-fs (loop2): Directory bread(block 73) failed [ 77.150047][ T29] audit: type=1326 audit(1727368878.779:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f50cdd7df39 code=0x7ffc0000 [ 77.229834][ T29] audit: type=1326 audit(1727368878.779:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50cdd7df39 code=0x7ffc0000 [ 77.269722][ T29] audit: type=1326 audit(1727368878.779:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50cdd7df39 code=0x7ffc0000 [ 77.310002][ T5440] EXT4-fs: Ignoring removed orlov option [ 77.359094][ T5440] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.407563][ T5440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.459762][ T5232] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.528076][ T5440] EXT4-fs (loop4): 1 truncate cleaned up [ 77.535909][ T5440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.239289][ T5465] loop0: detected capacity change from 0 to 32768 [ 78.316173][ T5465] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.341099][ T5465] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.410732][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.615797][ T5465] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 78.650191][ T5354] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.668378][ T5491] netlink: 'syz.4.57': attribute type 4 has an invalid length. [ 78.678603][ T5354] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.725245][ T5493] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 79.092591][ T5497] loop1: detected capacity change from 0 to 64 [ 79.131181][ T5483] loop3: detected capacity change from 0 to 32768 [ 79.140244][ T5354] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 461ms [ 79.161211][ T5354] gfs2: fsid=syz:syz.0: jid=0: Done [ 79.173072][ T5465] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 79.190604][ T5499] tmpfs: Bad value for 'nr_inodes' [ 79.219259][ T5483] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 79.237991][ T5483] CPU: 1 UID: 0 PID: 5483 Comm: syz.3.55 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 79.248224][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.258318][ T5483] Call Trace: [ 79.261619][ T5483] [ 79.264576][ T5483] dump_stack_lvl+0x241/0x360 [ 79.269302][ T5483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.274548][ T5483] ? __pfx__printk+0x10/0x10 [ 79.279176][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.285118][ T5483] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 79.290453][ T5483] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 79.296056][ T5483] sysfs_create_dir_ns+0x2ce/0x3a0 [ 79.301247][ T5483] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 79.306916][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.312631][ T5483] kobject_add_internal+0x435/0x8d0 [ 79.318063][ T5483] kobject_init_and_add+0x124/0x190 [ 79.323320][ T5483] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 79.329187][ T5483] ? __pfx_kobject_init_and_add+0x10/0x10 [ 79.334959][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.340646][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.346326][ T5483] ? __init_swait_queue_head+0xae/0x150 [ 79.351932][ T5483] gfs2_sys_fs_add+0x23b/0x4a0 [ 79.356741][ T5483] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 79.362080][ T5483] ? __pfx_alloc_workqueue+0x10/0x10 [ 79.363708][ T930] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.367643][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.380875][ T5483] ? read_word_at_a_time+0xe/0x20 [ 79.385940][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.391626][ T5483] ? sized_strscpy+0x8d/0x220 [ 79.396359][ T5483] gfs2_fill_super+0x11ee/0x24d0 [ 79.401350][ T5483] ? __pfx_gfs2_fill_super+0x10/0x10 [ 79.406658][ T5483] ? snprintf+0xda/0x120 [ 79.410925][ T5483] ? __pfx_lock_release+0x10/0x10 [ 79.415974][ T5483] ? do_raw_spin_lock+0x14f/0x370 [ 79.421023][ T5483] ? __pfx_snprintf+0x10/0x10 [ 79.425759][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.431419][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.437072][ T5483] ? sb_set_blocksize+0x98/0xf0 [ 79.441950][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.447604][ T5483] ? setup_bdev_super+0x4e6/0x5d0 [ 79.452663][ T5483] get_tree_bdev+0x3f9/0x570 [ 79.457272][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.462931][ T5483] ? __pfx_gfs2_fill_super+0x10/0x10 [ 79.468243][ T5483] ? __pfx_get_tree_bdev+0x10/0x10 [ 79.473402][ T5483] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 79.479072][ T5483] gfs2_get_tree+0x54/0x220 [ 79.483696][ T5483] vfs_get_tree+0x92/0x2b0 [ 79.488151][ T5483] do_new_mount+0x2be/0xb40 [ 79.492679][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.498347][ T5483] ? __pfx_do_new_mount+0x10/0x10 [ 79.503399][ T5483] __se_sys_mount+0x2d6/0x3c0 [ 79.508098][ T5483] ? __pfx___se_sys_mount+0x10/0x10 [ 79.513355][ T5483] ? exc_page_fault+0x590/0x8c0 [ 79.518246][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.523913][ T5483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.529574][ T5483] ? __x64_sys_mount+0x20/0xc0 [ 79.534355][ T5483] do_syscall_64+0xf3/0x230 [ 79.538885][ T5483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.544799][ T5483] RIP: 0033:0x7ffa2457f6da [ 79.549229][ T5483] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.568864][ T5483] RSP: 002b:00007ffa2538be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.577304][ T5483] RAX: ffffffffffffffda RBX: 00007ffa2538bef0 RCX: 00007ffa2457f6da [ 79.585301][ T5483] RDX: 00000000200002c0 RSI: 0000000020000100 RDI: 00007ffa2538beb0 [ 79.593294][ T5483] RBP: 00000000200002c0 R08: 00007ffa2538bef0 R09: 0000000000008c9b [ 79.601363][ T5483] R10: 0000000000008c9b R11: 0000000000000246 R12: 0000000020000100 [ 79.609353][ T5483] R13: 00007ffa2538beb0 R14: 0000000000012760 R15: 00000000200004c0 [ 79.617532][ T5483] [ 79.633579][ T5483] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 79.662955][ T5483] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 80.248228][ T930] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 80.248299][ T930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.248327][ T930] usb 3-1: Product: syz [ 80.248348][ T930] usb 3-1: Manufacturer: syz [ 80.248368][ T930] usb 3-1: SerialNumber: syz [ 80.254968][ T930] usb 3-1: config 0 descriptor?? [ 80.297215][ T930] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 80.452593][ T5530] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 80.719326][ T930] gspca_sunplus: reg_w_riv err -71 [ 80.739993][ T930] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 80.783454][ T930] usb 3-1: USB disconnect, device number 2 [ 81.170722][ T46] cfg80211: failed to load regulatory.db [ 81.790150][ T5565] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 81.835653][ T5569] loop5: detected capacity change from 0 to 8 [ 82.061607][ T5576] netlink: 'syz.3.94': attribute type 39 has an invalid length. [ 82.120608][ T5576] netlink: 'syz.3.94': attribute type 4 has an invalid length. [ 82.163617][ T5576] netlink: 152 bytes leftover after parsing attributes in process `syz.3.94'. [ 82.278162][ T5576] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 82.317108][ T5584] netlink: 'syz.0.100': attribute type 3 has an invalid length. [ 82.527296][ T5541] loop4: detected capacity change from 0 to 32768 [ 82.550948][ T5589] capability: warning: `syz.5.101' uses deprecated v2 capabilities in a way that may be insecure [ 82.562395][ T5552] loop1: detected capacity change from 0 to 32768 [ 82.823514][ T5602] Unsupported ieee802154 address type: 0 [ 82.903144][ T5541] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 82.959231][ T5541] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 83.045698][ T5552] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,version_upgrade=none [ 83.226885][ T5541] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 83.243088][ T5552] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 83.291140][ T5354] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 83.298956][ T5552] bcachefs (loop1): insufficient writeable journal devices available: have 0, need 1 [ 83.298956][ T5552] rw journal devs: loop1 [ 83.313869][ T5354] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 83.397214][ T5630] sctp: [Deprecated]: syz.3.119 (pid 5630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.397214][ T5630] Use struct sctp_sack_info instead [ 83.542415][ T5354] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 228ms [ 83.562540][ T5354] gfs2: fsid=syz:syz.0: jid=0: Done [ 83.639847][ T5541] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 83.763950][ T5552] bcachefs (loop1): accounting_read... done [ 83.786071][ T5590] loop0: detected capacity change from 0 to 32768 [ 83.797599][ T5590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.102 (5590) [ 83.811450][ T5552] bcachefs (loop1): alloc_read... done [ 83.841302][ T5552] bcachefs (loop1): stripes_read... done [ 83.893401][ T5590] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.899425][ T5552] bcachefs (loop1): snapshots_read... [ 83.909566][ T5590] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 83.932810][ T5590] BTRFS info (device loop0): using free-space-tree [ 83.945222][ T5552] done [ 83.982253][ T5552] bcachefs (loop1): journal_replay... done [ 84.032018][ T5552] bcachefs (loop1): resume_logged_ops... done [ 84.040781][ T5552] bcachefs (loop1): going read-write [ 84.089566][ T5552] bcachefs (loop1): bch2_copygc_start(): error creating copygc thread EINTR [ 84.145109][ T5552] bcachefs (loop1): error starting copygc thread [ 84.240033][ T5667] loop3: detected capacity change from 0 to 4096 [ 84.241123][ T5552] bcachefs (loop1): going read-only [ 84.261583][ T5552] bcachefs (loop1): finished waiting for writes to stop [ 84.274480][ T5552] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 84.284136][ T5552] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 84.293583][ T5667] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 84.384026][ T5672] loop2: detected capacity change from 0 to 4096 [ 84.445394][ T5552] bcachefs (loop1): shutdown complete, journal seq 8 [ 84.453763][ T5552] bcachefs (loop1): marking filesystem clean [ 84.543000][ T5552] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 84.551490][ T5552] bcachefs (loop1): shutting down [ 84.581717][ T5552] bcachefs (loop1): shutdown complete [ 84.655639][ T5667] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 84.763534][ T5672] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 84.790118][ T5672] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 84.815675][ T5231] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.925225][ T5679] loop4: detected capacity change from 0 to 4096 [ 84.969077][ T5679] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 85.895020][ T5686] loop3: detected capacity change from 0 to 40427 [ 85.988426][ T5686] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 86.012706][ T5686] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.024083][ T5698] loop0: detected capacity change from 0 to 32768 [ 86.101048][ T5709] loop5: detected capacity change from 0 to 4096 [ 86.237910][ T5698] JBD2: Ignoring recovery information on journal [ 86.252678][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 86.374189][ T5698] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 86.498518][ T5686] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.702884][ T5686] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.712503][ T5231] ocfs2: Unmounting device (7,0) on (node local) [ 86.731297][ T5686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.756729][ T5736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 86.824384][ T5686] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 87.366548][ T5760] x_tables: unsorted underflow at hook 1 [ 87.441208][ T5765] netlink: 'syz.5.170': attribute type 1 has an invalid length. [ 87.783761][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.836810][ T5778] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 87.860828][ T5780] loop5: detected capacity change from 0 to 512 [ 87.882892][ T5780] EXT4-fs: Ignoring removed orlov option [ 87.897171][ T5780] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.916390][ T5778] netlink: 224 bytes leftover after parsing attributes in process `syz.2.178'. [ 87.947237][ T5780] EXT4-fs (loop5): 1 truncate cleaned up [ 87.955237][ T5780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.958213][ T46] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.982100][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.991057][ T46] usb 5-1: Product: syz [ 87.995627][ T46] usb 5-1: Manufacturer: syz [ 88.000365][ T46] usb 5-1: SerialNumber: syz [ 88.014730][ T46] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.112132][ T5367] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.394618][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.508778][ T5798] loop5: detected capacity change from 0 to 256 [ 88.626222][ T5552] bcachefs: bch2_fs_get_tree() error: EINTR [ 88.743492][ T5236] usb 5-1: USB disconnect, device number 2 [ 88.987962][ T29] audit: type=1326 audit(1727368890.659:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2457df39 code=0x7ffc0000 [ 89.067494][ T29] audit: type=1326 audit(1727368890.659:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2457df39 code=0x7ffc0000 [ 89.161335][ T29] audit: type=1326 audit(1727368890.659:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ffa2457df39 code=0x7ffc0000 [ 89.216219][ T5815] loop1: detected capacity change from 0 to 164 [ 89.268550][ T29] audit: type=1326 audit(1727368890.659:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2457df39 code=0x7ffc0000 [ 89.312849][ T5815] rock: directory entry would overflow storage [ 89.340695][ T5815] rock: sig=0x66, size=4, remaining=3 [ 89.367961][ T29] audit: type=1326 audit(1727368890.659:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2457df39 code=0x7ffc0000 [ 89.414816][ T5815] rock: directory entry would overflow storage [ 89.443178][ T5815] rock: sig=0x66, size=4, remaining=3 [ 89.474052][ T5815] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.523991][ T5821] loop0: detected capacity change from 0 to 4096 [ 89.546183][ T5367] usb 5-1: Service connection timeout for: 256 [ 89.552506][ T5367] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 89.568539][ T5367] ath9k_htc: Failed to initialize the device [ 89.590444][ T5821] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 89.611238][ T5236] usb 5-1: ath9k_htc: USB layer deinitialized [ 89.683648][ T5829] loop4: detected capacity change from 0 to 512 [ 89.695980][ T5821] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 89.707147][ T5829] EXT4-fs: Ignoring removed bh option [ 89.757348][ T5829] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.199: invalid block [ 89.781672][ T5821] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 89.801788][ T5829] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.199: couldn't read orphan inode 15 (err -117) [ 89.963555][ T5829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.976070][ T5296] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 90.081239][ T5838] xt_nat: multiple ranges no longer supported [ 90.213415][ T5296] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.284102][ T5296] usb 6-1: config 0 has no interface number 0 [ 90.349024][ T5296] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 90.402497][ T5296] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.425463][ T5296] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.495324][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.514017][ T5296] usb 6-1: config 0 descriptor?? [ 90.597493][ T5296] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 90.707660][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.749450][ T5847] loop1: detected capacity change from 0 to 1024 [ 90.843711][ T5296] usb 6-1: USB disconnect, device number 2 [ 90.869497][ T5847] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.932694][ T5296] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 91.005467][ T5847] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.206: bad orphan inode 8 [ 91.091479][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.351219][ T5847] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 91.469257][ T5847] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 91.826736][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.105598][ T5869] syz.3.216 uses obsolete (PF_INET,SOCK_PACKET) [ 93.783674][ T5900] netlink: 52 bytes leftover after parsing attributes in process `syz.2.229'. [ 93.883400][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 93.970040][ T5900] tipc: Started in network mode [ 94.013443][ T5900] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 94.105666][ T5900] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 94.194297][ T5900] tipc: Enabled bearer , priority 10 [ 94.261030][ T5912] loop4: detected capacity change from 0 to 16 [ 94.407213][ T5912] erofs: (device loop4): mounted with root inode @ nid 36. [ 94.777767][ T5922] capability: warning: `syz.2.238' uses 32-bit capabilities (legacy support in use) [ 95.304882][ T5296] tipc: Node number set to 1 [ 95.487317][ T5879] loop3: detected capacity change from 0 to 32768 [ 95.568061][ T5879] btrfs: Deprecated parameter 'usebackuproot' [ 95.612022][ T5879] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 95.729618][ T5879] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.220 (5879) [ 95.805614][ T5296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.864466][ T5940] process 'syz.5.248' launched '/dev/fd/3' with NULL argv: empty string added [ 95.893468][ T5941] loop1: detected capacity change from 0 to 512 [ 95.996252][ T5941] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 96.053310][ T5296] usb 3-1: Using ep0 maxpacket: 16 [ 96.123382][ T5296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.191542][ T5941] EXT4-fs (loop1): Remounting filesystem read-only [ 96.217655][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.276133][ T5941] EXT4-fs (loop1): 1 truncate cleaned up [ 96.329776][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.345549][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.427294][ T5367] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.445671][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 96.532989][ T5296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.570227][ T5953] loop5: detected capacity change from 0 to 512 [ 96.653854][ T5296] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.680499][ T5953] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.692149][ T5367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.742076][ T5296] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.792478][ T5367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.835046][ T5953] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.252: bg 0: block 264: padding at end of block bitmap is not set [ 96.850812][ T5296] usb 3-1: Manufacturer: syz [ 96.867366][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.898732][ T5367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.933576][ T5296] usb 3-1: config 0 descriptor?? [ 97.013359][ T5953] EXT4-fs (loop5): Remounting filesystem read-only [ 97.020093][ T5367] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 97.042704][ T5296] usbhid 3-1:0.0: can't add hid device: -22 [ 97.090613][ T5953] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.111650][ T5296] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 97.129793][ T5367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.232259][ T5367] usb 5-1: config 0 descriptor?? [ 97.243249][ T5296] usb 3-1: USB disconnect, device number 3 [ 97.249312][ T5953] EXT4-fs (loop5): 1 truncate cleaned up [ 97.328799][ T5953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.811239][ T5367] saitek 0003:06A3:0621.0001: item fetching failed at offset 5/7 [ 97.861262][ T5367] saitek 0003:06A3:0621.0001: parse failed [ 97.888388][ T5367] saitek 0003:06A3:0621.0001: probe with driver saitek failed with error -22 [ 97.966658][ T5964] loop1: detected capacity change from 0 to 1024 [ 98.006447][ T5367] usb 5-1: USB disconnect, device number 3 [ 98.113724][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.441547][ T5971] loop2: detected capacity change from 0 to 64 [ 98.656726][ T5964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.084891][ T5977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.261'. [ 99.635709][ T5981] loop1: detected capacity change from 0 to 4096 [ 100.220560][ T5988] loop4: detected capacity change from 0 to 2048 [ 100.393067][ T5990] loop2: detected capacity change from 0 to 64 [ 100.443817][ T5988] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 100.540107][ T5988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.762745][ T5988] udf: Unexpected value for 'utf8' [ 101.219896][ T5968] loop0: detected capacity change from 0 to 32768 [ 101.273073][ T5968] XFS: noikeep mount option is deprecated. [ 101.365586][ T5968] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop0": -EINTR [ 101.628391][ T6008] tmpfs: Cannot change global quota limit on remount [ 102.204084][ T6013] loop2: detected capacity change from 0 to 128 [ 102.284511][ T6013] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 102.449977][ T6016] loop4: detected capacity change from 0 to 2048 [ 102.961510][ T6023] loop4: detected capacity change from 0 to 512 [ 103.065629][ T6023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.123039][ T5997] loop3: detected capacity change from 0 to 32768 [ 103.134407][ T6023] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.217272][ T6023] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.279: bg 0: block 248: padding at end of block bitmap is not set [ 103.273162][ T5997] JBD2: Ignoring recovery information on journal [ 103.364019][ T6023] Quota error (device loop4): write_blk: dquota write failed [ 103.436485][ T6023] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 103.479966][ T5997] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.519983][ T6023] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.279: Failed to acquire dquot type 1 [ 103.595828][ T6023] EXT4-fs (loop4): 1 truncate cleaned up [ 103.924011][ T5235] ocfs2: Unmounting device (7,3) on (node local) [ 103.936328][ T6039] loop2: detected capacity change from 0 to 512 [ 104.011135][ T6039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.134238][ T6039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.197579][ T6039] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.418511][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.995592][ T6037] loop0: detected capacity change from 0 to 32768 [ 105.060167][ T6037] JBD2: Ignoring recovery information on journal [ 105.207481][ T6037] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.438132][ T5231] ocfs2: Unmounting device (7,0) on (node local) [ 106.397970][ T6054] loop3: detected capacity change from 0 to 32768 [ 107.451379][ T6067] loop0: detected capacity change from 0 to 512 [ 107.536166][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.588308][ T6067] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.705203][ T6068] loop3: detected capacity change from 0 to 8192 [ 107.748618][ T5231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.512493][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.522707][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.539369][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.550842][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.559294][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 109.566698][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.041374][ T5252] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.054346][ T5252] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.066910][ T5252] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.077742][ T5252] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.086037][ T5252] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 111.093988][ T5252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.624732][ T5239] Bluetooth: hci6: command tx timeout [ 112.400806][ T6023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.450896][ T6023] syz.4.279 (6023) used greatest stack depth: 17168 bytes left [ 112.470215][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.823002][ T6083] Bluetooth: MGMT ver 1.23 [ 112.958127][ T29] audit: type=1400 audit(1727368914.629:13): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26D6 pid=6084 comm="syz.4.304" [ 113.143564][ T5239] Bluetooth: hci7: command tx timeout [ 113.713283][ T5239] Bluetooth: hci6: command tx timeout [ 113.894725][ T6097] netlink: 'syz.4.307': attribute type 3 has an invalid length. [ 113.964677][ T6099] usb usb8: check_ctrlrecip: process 6099 (syz.2.308) requesting ep 01 but needs 81 [ 114.879047][ T6093] loop0: detected capacity change from 0 to 32768 [ 114.911839][ T6093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.298 (6093) [ 115.060623][ T6093] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.123532][ T6093] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 115.168466][ T6093] BTRFS info (device loop0): using free-space-tree [ 115.224119][ T5239] Bluetooth: hci7: command tx timeout [ 115.262373][ T6117] loop2: detected capacity change from 0 to 512 [ 115.444412][ T6117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.627050][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.790569][ T5239] Bluetooth: hci6: command tx timeout [ 115.952396][ T5231] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.457739][ T6137] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.194921][ T5354] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.303657][ T5239] Bluetooth: hci7: command tx timeout [ 117.423478][ T5354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 117.500948][ T5354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.594232][ T5354] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 117.672744][ T5354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.764076][ T5354] usb 4-1: config 0 descriptor?? [ 117.863777][ T5239] Bluetooth: hci6: command tx timeout [ 118.325952][ T5354] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 118.386423][ T5354] magicmouse 0003:05AC:0265.0002: magicmouse input not registered [ 118.469454][ T5354] magicmouse 0003:05AC:0265.0002: probe with driver magicmouse failed with error -12 [ 118.549696][ T5354] usb 4-1: USB disconnect, device number 2 [ 119.093495][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.260045][ T46] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.297866][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.365929][ T46] usb 1-1: config 0 descriptor?? [ 119.384036][ T5239] Bluetooth: hci7: command tx timeout [ 119.423393][ T46] cp210x 1-1:0.0: cp210x converter detected [ 119.584128][ T6161] loop2: detected capacity change from 0 to 32768 [ 119.603547][ T6161] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.327 (6161) [ 119.676031][ T6161] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.738801][ T6161] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 119.772995][ T6161] BTRFS info (device loop2): using free-space-tree [ 119.875098][ T46] usb 1-1: cp210x converter now attached to ttyUSB0 [ 120.083490][ T5354] usb 1-1: USB disconnect, device number 2 [ 120.134792][ T5354] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.262607][ T5233] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.608643][ T5252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.623435][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.635574][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.644100][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.652772][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 128.667585][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.067591][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.079515][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.089201][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.099968][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.112283][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.120286][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.743595][ T5252] Bluetooth: hci0: command tx timeout [ 131.539091][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 131.550176][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 131.558820][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 131.568889][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 131.582817][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 131.594038][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 132.048569][ T5239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 132.057691][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 132.066653][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 132.075604][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 132.083876][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 132.091163][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 132.183520][ T5252] Bluetooth: hci4: command tx timeout [ 132.373458][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.379813][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.823565][ T5252] Bluetooth: hci0: command tx timeout [ 133.624991][ T5252] Bluetooth: hci8: command tx timeout [ 134.192600][ T5252] Bluetooth: hci9: command tx timeout [ 134.265167][ T5252] Bluetooth: hci4: command tx timeout [ 134.905330][ T5252] Bluetooth: hci0: command tx timeout [ 135.703803][ T5239] Bluetooth: hci8: command tx timeout [ 135.991364][ T5354] cp210x 1-1:0.0: device disconnected [ 136.263420][ T5239] Bluetooth: hci9: command tx timeout [ 136.343657][ T5239] Bluetooth: hci4: command tx timeout [ 136.983538][ T5239] Bluetooth: hci0: command tx timeout [ 137.783643][ T5239] Bluetooth: hci8: command tx timeout [ 138.343625][ T5239] Bluetooth: hci9: command tx timeout [ 138.423522][ T5239] Bluetooth: hci4: command tx timeout [ 139.863625][ T5239] Bluetooth: hci8: command tx timeout [ 140.424865][ T5239] Bluetooth: hci9: command tx timeout [ 148.924087][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 149.637365][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 170.526069][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.536000][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.547103][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.555206][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.562917][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.570839][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.622134][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.631610][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.645470][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.654219][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.664922][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.674477][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.663537][ T5239] Bluetooth: hci1: command tx timeout [ 173.703357][ T5239] Bluetooth: hci2: command tx timeout [ 174.773275][ T5239] Bluetooth: hci1: command tx timeout [ 175.783571][ T5239] Bluetooth: hci2: command tx timeout [ 176.823454][ T5239] Bluetooth: hci1: command tx timeout [ 177.863360][ T5239] Bluetooth: hci2: command tx timeout [ 178.907803][ T5239] Bluetooth: hci1: command tx timeout [ 179.943474][ T5239] Bluetooth: hci2: command tx timeout [ 189.564250][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.576040][ T5252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.585762][ T5252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.594005][ T5252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.602104][ T5252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.613489][ T5252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.656191][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.673605][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.686796][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.695091][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.707178][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 190.714732][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.668831][ T5239] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 191.683911][ T5239] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 191.692694][ T5239] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 191.702233][ T5239] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 191.710721][ T5250] Bluetooth: hci3: command tx timeout [ 191.720019][ T5239] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 191.734781][ T5239] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 192.225372][ T5252] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 192.235185][ T5252] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 192.243601][ T5252] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 192.253571][ T5252] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 192.261373][ T5252] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 192.269327][ T5252] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 192.753513][ T5239] Bluetooth: hci5: command tx timeout [ 193.792167][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.798805][ T5239] Bluetooth: hci10: command tx timeout [ 193.809103][ T5252] Bluetooth: hci3: command tx timeout [ 193.819350][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.343684][ T5239] Bluetooth: hci11: command tx timeout [ 194.823413][ T5239] Bluetooth: hci5: command tx timeout [ 195.863550][ T5252] Bluetooth: hci3: command tx timeout [ 195.870638][ T5239] Bluetooth: hci10: command tx timeout [ 196.433567][ T5239] Bluetooth: hci11: command tx timeout [ 196.903371][ T5239] Bluetooth: hci5: command tx timeout [ 197.943595][ T5239] Bluetooth: hci10: command tx timeout [ 197.949165][ T5239] Bluetooth: hci3: command tx timeout [ 198.503363][ T5239] Bluetooth: hci11: command tx timeout [ 198.983383][ T5239] Bluetooth: hci5: command tx timeout [ 200.023402][ T5239] Bluetooth: hci10: command tx timeout [ 200.583442][ T5239] Bluetooth: hci11: command tx timeout [ 230.750110][ T5250] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 230.762710][ T5250] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 230.770743][ T5250] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 230.779964][ T5250] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 230.788837][ T5250] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 230.796638][ T5250] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 231.699361][ T5239] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 231.714610][ T4617] Bluetooth: hci6: command 0x0406 tx timeout [ 231.741381][ T5252] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 231.752507][ T5252] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 231.761454][ T5252] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 231.769333][ T5252] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 231.778683][ T5252] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 232.823686][ T5252] Bluetooth: hci12: command tx timeout [ 233.863565][ T5250] Bluetooth: hci13: command tx timeout [ 234.903702][ T5252] Bluetooth: hci12: command tx timeout [ 235.958718][ T5252] Bluetooth: hci13: command tx timeout [ 236.823734][ T5252] Bluetooth: hci7: command 0x0406 tx timeout [ 236.984955][ T5250] Bluetooth: hci12: command tx timeout [ 238.023408][ T5250] Bluetooth: hci13: command tx timeout [ 239.063586][ T5250] Bluetooth: hci12: command tx timeout [ 240.103506][ T5250] Bluetooth: hci13: command tx timeout [ 250.393719][ T5239] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 250.405379][ T5239] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 250.413918][ T5239] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 250.424599][ T5239] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 250.434829][ T5239] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 250.442246][ T5239] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 250.889708][ T5252] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 250.900081][ T5252] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 250.908891][ T5252] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 250.917297][ T5252] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 250.926595][ T5252] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 250.937109][ T5252] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 251.726310][ T5239] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 251.735394][ T5239] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 251.746243][ T5239] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 251.763460][ T5239] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 251.774214][ T5239] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 251.782017][ T5239] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 252.183666][ T5252] Bluetooth: hci0: command 0x0406 tx timeout [ 252.503531][ T5250] Bluetooth: hci14: command tx timeout [ 252.719459][ T5252] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 252.733761][ T5252] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 252.744692][ T5252] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 252.755119][ T5252] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 252.762803][ T5252] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 252.771652][ T5252] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 252.983455][ T5252] Bluetooth: hci15: command tx timeout [ 253.864025][ T5252] Bluetooth: hci16: command tx timeout [ 254.584820][ T5252] Bluetooth: hci14: command tx timeout [ 254.823394][ T5252] Bluetooth: hci17: command tx timeout [ 255.063359][ T5252] Bluetooth: hci15: command tx timeout [ 255.230587][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.253277][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.944857][ T5252] Bluetooth: hci16: command tx timeout [ 256.663374][ T5252] Bluetooth: hci14: command tx timeout [ 256.903603][ T5252] Bluetooth: hci17: command tx timeout [ 257.143452][ T5252] Bluetooth: hci15: command tx timeout [ 257.312880][ T5234] Bluetooth: hci8: command 0x0406 tx timeout [ 257.319393][ T5245] Bluetooth: hci4: command 0x0406 tx timeout [ 257.328738][ T5252] Bluetooth: hci9: command 0x0406 tx timeout [ 258.023505][ T5250] Bluetooth: hci16: command tx timeout [ 258.743368][ T5250] Bluetooth: hci14: command tx timeout [ 259.001567][ T5250] Bluetooth: hci17: command tx timeout [ 259.223482][ T5250] Bluetooth: hci15: command tx timeout [ 260.103441][ T5250] Bluetooth: hci16: command tx timeout [ 261.063419][ T5250] Bluetooth: hci17: command tx timeout [ 293.156447][ T4617] Bluetooth: hci1: command 0x0406 tx timeout [ 293.322635][ T4617] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 293.342735][ T4617] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 293.353852][ T4617] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 293.362398][ T4617] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 293.370706][ T4617] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 293.378701][ T4617] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 293.521643][ T5250] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 293.532756][ T5250] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 293.541689][ T5250] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 293.550406][ T5250] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 293.561195][ T5250] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 293.570803][ T5250] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 295.463508][ T5250] Bluetooth: hci18: command tx timeout [ 295.623480][ T5250] Bluetooth: hci19: command tx timeout [ 297.543496][ T5250] Bluetooth: hci18: command tx timeout [ 297.703378][ T5250] Bluetooth: hci19: command tx timeout [ 298.269511][ T5250] Bluetooth: hci2: command 0x0406 tx timeout [ 299.623455][ T4617] Bluetooth: hci18: command tx timeout [ 299.783480][ T4617] Bluetooth: hci19: command tx timeout [ 301.713601][ T4617] Bluetooth: hci18: command tx timeout [ 301.863383][ T4617] Bluetooth: hci19: command tx timeout [ 305.783459][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 305.791159][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 305.853435][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.862171][ T30] task:kworker/u8:2 state:D stack:20600 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 305.994086][ T30] Workqueue: netns cleanup_net [ 305.998957][ T30] Call Trace: [ 306.002260][ T30] [ 306.093308][ T30] __schedule+0x1895/0x4b30 [ 306.097928][ T30] ? __pfx___schedule+0x10/0x10 [ 306.102909][ T30] ? __pfx_lock_release+0x10/0x10 [ 306.183617][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 306.215145][ T30] ? kthread_data+0x52/0xd0 [ 306.219750][ T30] ? schedule+0x90/0x320 [ 306.247061][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.252836][ T30] ? wq_worker_sleeping+0x66/0x240 [ 306.274095][ T30] ? schedule+0x90/0x320 [ 306.278419][ T30] schedule+0x14b/0x320 [ 306.282711][ T30] schedule_preempt_disabled+0x13/0x30 [ 306.298985][ T30] __mutex_lock+0x6a7/0xd70 [ 306.309118][ T30] ? __mutex_lock+0x52a/0xd70 [ 306.320496][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 306.329317][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 306.341175][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.358883][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 306.369658][ T30] cleanup_net+0x617/0xcc0 [ 306.377959][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 306.382956][ T30] ? process_scheduled_works+0x976/0x1850 [ 306.393233][ T30] process_scheduled_works+0xa65/0x1850 [ 306.403085][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.417858][ T30] ? assign_work+0x364/0x3d0 [ 306.422545][ T30] worker_thread+0x870/0xd30 [ 306.439760][ T30] ? __kthread_parkme+0x169/0x1d0 [ 306.447434][ T30] ? __pfx_worker_thread+0x10/0x10 [ 306.461547][ T30] kthread+0x2f2/0x390 [ 306.465949][ T30] ? __pfx_worker_thread+0x10/0x10 [ 306.471102][ T30] ? __pfx_kthread+0x10/0x10 [ 306.486407][ T30] ret_from_fork+0x4d/0x80 [ 306.490962][ T30] ? __pfx_kthread+0x10/0x10 [ 306.503832][ T30] ret_from_fork_asm+0x1a/0x30 [ 306.508677][ T30] [ 306.521851][ T30] INFO: task kworker/u8:5:1064 blocked for more than 144 seconds. [ 306.531717][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 306.545264][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.562746][ T30] task:kworker/u8:5 state:D stack:20496 pid:1064 tgid:1064 ppid:2 flags:0x00004000 [ 306.574807][ T30] Workqueue: events_unbound linkwatch_event [ 306.580762][ T30] Call Trace: [ 306.593267][ T30] [ 306.596431][ T30] __schedule+0x1895/0x4b30 [ 306.606231][ T30] ? __pfx___schedule+0x10/0x10 [ 306.611148][ T30] ? __pfx_lock_release+0x10/0x10 [ 306.629545][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 306.635634][ T30] ? kthread_data+0x52/0xd0 [ 306.640371][ T30] ? schedule+0x90/0x320 [ 306.653170][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.659185][ T30] ? wq_worker_sleeping+0x66/0x240 [ 306.673351][ T30] ? schedule+0x90/0x320 [ 306.677663][ T30] schedule+0x14b/0x320 [ 306.681861][ T30] schedule_preempt_disabled+0x13/0x30 [ 306.697862][ T30] __mutex_lock+0x6a7/0xd70 [ 306.709178][ T30] ? __mutex_lock+0x52a/0xd70 [ 306.720480][ T30] ? linkwatch_event+0xe/0x60 [ 306.730498][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 306.741147][ T30] ? process_scheduled_works+0x976/0x1850 [ 306.751943][ T30] linkwatch_event+0xe/0x60 [ 306.761339][ T30] process_scheduled_works+0xa65/0x1850 [ 306.771922][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.783316][ T30] ? assign_work+0x364/0x3d0 [ 306.788104][ T30] worker_thread+0x870/0xd30 [ 306.792747][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.811076][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.821570][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 306.834582][ T30] ? __kthread_parkme+0x169/0x1d0 [ 306.839693][ T30] ? __pfx_worker_thread+0x10/0x10 [ 306.853625][ T30] kthread+0x2f2/0x390 [ 306.857757][ T30] ? __pfx_worker_thread+0x10/0x10 [ 306.862918][ T30] ? __pfx_kthread+0x10/0x10 [ 306.876931][ T30] ret_from_fork+0x4d/0x80 [ 306.881430][ T30] ? __pfx_kthread+0x10/0x10 [ 306.893008][ T30] ret_from_fork_asm+0x1a/0x30 [ 306.901820][ T30] [ 306.923020][ T30] INFO: task kworker/1:10:5367 blocked for more than 144 seconds. [ 306.936146][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 306.952611][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.972809][ T30] task:kworker/1:10 state:D stack:15984 pid:5367 tgid:5367 ppid:2 flags:0x00004000 [ 306.983506][ T30] Workqueue: events_power_efficient crda_timeout_work [ 306.990333][ T30] Call Trace: [ 307.003355][ T30] [ 307.006351][ T30] __schedule+0x1895/0x4b30 [ 307.012746][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.024814][ T30] ? schedule+0x90/0x320 [ 307.029253][ T30] ? __pfx___schedule+0x10/0x10 [ 307.045111][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.051190][ T30] ? __pfx_lock_release+0x10/0x10 [ 307.069578][ T30] ? kick_pool+0x1bd/0x620 [ 307.083093][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.090901][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.103280][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 307.108551][ T30] ? schedule+0x90/0x320 [ 307.123484][ T30] schedule+0x14b/0x320 [ 307.127719][ T30] schedule_preempt_disabled+0x13/0x30 [ 307.144899][ T30] __mutex_lock+0x6a7/0xd70 [ 307.149494][ T30] ? __mutex_lock+0x52a/0xd70 [ 307.163508][ T30] ? crda_timeout_work+0x15/0x50 [ 307.168604][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 307.182954][ T30] ? process_scheduled_works+0x976/0x1850 [ 307.191267][ T30] crda_timeout_work+0x15/0x50 [ 307.203522][ T30] process_scheduled_works+0xa65/0x1850 [ 307.209427][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.229547][ T30] ? assign_work+0x364/0x3d0 [ 307.240261][ T30] worker_thread+0x870/0xd30 [ 307.249528][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.262303][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.273090][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 307.283297][ T30] ? __kthread_parkme+0x169/0x1d0 [ 307.288412][ T30] ? __pfx_worker_thread+0x10/0x10 [ 307.302878][ T30] kthread+0x2f2/0x390 [ 307.310839][ T30] ? __pfx_worker_thread+0x10/0x10 [ 307.326998][ T30] ? __pfx_kthread+0x10/0x10 [ 307.331674][ T30] ret_from_fork+0x4d/0x80 [ 307.341349][ T30] ? __pfx_kthread+0x10/0x10 [ 307.351512][ T30] ret_from_fork_asm+0x1a/0x30 [ 307.361196][ T30] [ 307.370574][ T30] INFO: task syz-executor:6075 blocked for more than 144 seconds. [ 307.387641][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 307.403253][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.411985][ T30] task:syz-executor state:D stack:21728 pid:6075 tgid:6075 ppid:1 flags:0x00000004 [ 307.434591][ T30] Call Trace: [ 307.437970][ T30] [ 307.441701][ T30] __schedule+0x1895/0x4b30 [ 307.459518][ T30] ? __pfx___schedule+0x10/0x10 [ 307.473288][ T30] ? __pfx_lock_release+0x10/0x10 [ 307.478443][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 307.495246][ T30] ? schedule+0x90/0x320 [ 307.499571][ T30] schedule+0x14b/0x320 [ 307.512821][ T30] schedule_preempt_disabled+0x13/0x30 [ 307.518706][ T30] __mutex_lock+0x6a7/0xd70 [ 307.533783][ T30] ? __mutex_lock+0x52a/0xd70 [ 307.538563][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 307.553269][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 307.558410][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 307.576412][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 307.581615][ T30] ? __lock_acquire+0x1384/0x2050 [ 307.592804][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.603456][ T30] netlink_rcv_skb+0x1e5/0x430 [ 307.608303][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.622509][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.630149][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.644127][ T30] netlink_unicast+0x7f8/0x990 [ 307.648982][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 307.665146][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.670879][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.683358][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.689085][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.706941][ T30] ? __check_object_size+0x48e/0x900 [ 307.712331][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 307.730115][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.741445][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.751823][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 307.763353][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.769093][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.784838][ T30] __sock_sendmsg+0x223/0x270 [ 307.789771][ T30] __sys_sendto+0x39b/0x4f0 [ 307.803323][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 307.808450][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.825343][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 307.834841][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.840567][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.853691][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.860112][ T30] __x64_sys_sendto+0xde/0x100 [ 307.875730][ T30] do_syscall_64+0xf3/0x230 [ 307.880320][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.893285][ T30] RIP: 0033:0x7f32efd7fdcc [ 307.897849][ T30] RSP: 002b:00007ffec6963a40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 307.915043][ T30] RAX: ffffffffffffffda RBX: 00007f32f0a64620 RCX: 00007f32efd7fdcc [ 307.923100][ T30] RDX: 000000000000002c RSI: 00007f32f0a64670 RDI: 0000000000000003 [ 307.942695][ T30] RBP: 0000000000000000 R08: 00007ffec6963a94 R09: 000000000000000c [ 307.962355][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 307.978812][ T30] R13: 0000000000000000 R14: 00007f32f0a64670 R15: 0000000000000000 [ 308.000006][ T30] [ 308.003267][ T30] INFO: task syz-executor:6078 blocked for more than 145 seconds. [ 308.011104][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 308.027713][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.042731][ T30] task:syz-executor state:D stack:21728 pid:6078 tgid:6078 ppid:1 flags:0x00000004 [ 308.061813][ T30] Call Trace: [ 308.068823][ T30] [ 308.071798][ T30] __schedule+0x1895/0x4b30 [ 308.082478][ T30] ? __pfx___schedule+0x10/0x10 [ 308.091245][ T30] ? __pfx_lock_release+0x10/0x10 [ 308.102722][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 308.117387][ T30] ? schedule+0x90/0x320 [ 308.121708][ T30] schedule+0x14b/0x320 [ 308.132000][ T30] schedule_preempt_disabled+0x13/0x30 [ 308.142921][ T30] __mutex_lock+0x6a7/0xd70 [ 308.153596][ T30] ? __mutex_lock+0x52a/0xd70 [ 308.158344][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 308.175181][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 308.180292][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 308.194537][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 308.199755][ T30] ? __lock_acquire+0x1384/0x2050 [ 308.213731][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.219286][ T30] netlink_rcv_skb+0x1e5/0x430 [ 308.233881][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.241206][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.256999][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.262483][ T30] netlink_unicast+0x7f8/0x990 [ 308.277168][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 308.282531][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.297545][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.308153][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.319251][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.331363][ T30] ? __check_object_size+0x48e/0x900 [ 308.341181][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 308.353586][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.358964][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.375521][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 308.380543][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.393318][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.398724][ T30] __sock_sendmsg+0x223/0x270 [ 308.412182][ T30] __sys_sendto+0x39b/0x4f0 [ 308.417068][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 308.422159][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.433232][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 308.439382][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.456979][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 308.470867][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.480576][ T30] __x64_sys_sendto+0xde/0x100 [ 308.494751][ T30] do_syscall_64+0xf3/0x230 [ 308.499343][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.515101][ T30] RIP: 0033:0x7f527b37fdcc [ 308.519577][ T30] RSP: 002b:00007ffc8f175160 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 308.537047][ T30] RAX: ffffffffffffffda RBX: 00007f527c064620 RCX: 00007f527b37fdcc [ 308.552878][ T30] RDX: 000000000000002c RSI: 00007f527c064670 RDI: 0000000000000003 [ 308.566798][ T30] RBP: 0000000000000000 R08: 00007ffc8f1751b4 R09: 000000000000000c [ 308.580822][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 308.596122][ T30] R13: 0000000000000000 R14: 00007f527c064670 R15: 0000000000000000 [ 308.613252][ T30] [ 308.616391][ T30] INFO: task syz.4.328:6163 blocked for more than 146 seconds. [ 308.632405][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 308.640062][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.659718][ T30] task:syz.4.328 state:D stack:24640 pid:6163 tgid:6162 ppid:5230 flags:0x00004002 [ 308.674276][ T30] Call Trace: [ 308.677609][ T30] [ 308.680653][ T30] __schedule+0x1895/0x4b30 [ 308.695461][ T30] ? __pfx___schedule+0x10/0x10 [ 308.700381][ T30] ? __pfx_lock_release+0x10/0x10 [ 308.714076][ T30] ? schedule+0x90/0x320 [ 308.718384][ T30] schedule+0x14b/0x320 [ 308.722579][ T30] schedule_timeout+0xb0/0x310 [ 308.737306][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 308.742749][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 308.760549][ T30] ? wait_for_completion+0x2fe/0x620 [ 308.766364][ T30] ? wait_for_completion+0x2fe/0x620 [ 308.771689][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.787642][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.799817][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 308.811449][ T30] ? wait_for_completion+0x2fe/0x620 [ 308.822626][ T30] wait_for_completion+0x355/0x620 [ 308.833374][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.839082][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 308.856829][ T30] ? __flush_work+0xe7/0xc50 [ 308.861485][ T30] __flush_work+0xa37/0xc50 [ 308.873172][ T30] ? __flush_work+0xe7/0xc50 [ 308.878275][ T30] ? __pfx___flush_work+0x10/0x10 [ 308.895169][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 308.900542][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.915877][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 308.921045][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.933097][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 308.943841][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 308.950664][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.967443][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 308.978344][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.001276][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 309.018569][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.028988][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 309.039728][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.050851][ T30] unregister_netdevice_queue+0x303/0x370 [ 309.063267][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 309.069690][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.088832][ T30] __tun_detach+0x6b9/0x1600 [ 309.097174][ T30] tun_chr_close+0x105/0x1b0 [ 309.101807][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 309.112889][ T30] __fput+0x241/0x880 [ 309.123804][ T30] task_work_run+0x251/0x310 [ 309.128442][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 309.144559][ T30] ? __pfx_task_work_run+0x10/0x10 [ 309.149747][ T30] ? do_exit+0xa2a/0x28e0 [ 309.160510][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.173360][ T30] ? kmem_cache_free+0x1a2/0x420 [ 309.182469][ T30] ? do_exit+0xa2a/0x28e0 [ 309.193448][ T30] do_exit+0xa2f/0x28e0 [ 309.197657][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.211922][ T30] ? __pfx_do_exit+0x10/0x10 [ 309.216950][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 309.222375][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.242498][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.249038][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.267986][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 309.279970][ T30] do_group_exit+0x207/0x2c0 [ 309.290132][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.301400][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.313527][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 309.318799][ T30] get_signal+0x176f/0x1810 [ 309.334735][ T30] ? __pfx_get_signal+0x10/0x10 [ 309.340209][ T30] arch_do_signal_or_restart+0x96/0x860 [ 309.360075][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 309.373260][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.379363][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 309.398681][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 309.411324][ T30] do_syscall_64+0x100/0x230 [ 309.420925][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.433305][ T30] RIP: 0033:0x7f9b7777df39 [ 309.438470][ T30] RSP: 002b:00007f9b78506038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.457694][ T30] RAX: 000000000000001c RBX: 00007f9b77935f80 RCX: 00007f9b7777df39 [ 309.477929][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 309.497951][ T30] RBP: 00007f9b777f0216 R08: 0000000000000000 R09: 0000000000000000 [ 309.511408][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.526812][ T30] R13: 0000000000000000 R14: 00007f9b77935f80 R15: 00007ffcea9fb648 [ 309.544615][ T30] [ 309.549424][ T30] INFO: task syz.3.330:6167 blocked for more than 147 seconds. [ 309.563510][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 309.582943][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.592781][ T30] task:syz.3.330 state:D stack:25464 pid:6167 tgid:6166 ppid:5235 flags:0x00004002 [ 309.613337][ T30] Call Trace: [ 309.616769][ T30] [ 309.619734][ T30] __schedule+0x1895/0x4b30 [ 309.641064][ T30] ? __pfx___schedule+0x10/0x10 [ 309.649712][ T30] ? __pfx_lock_release+0x10/0x10 [ 309.660727][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 309.672604][ T30] ? schedule+0x90/0x320 [ 309.683315][ T30] schedule+0x14b/0x320 [ 309.687562][ T30] schedule_preempt_disabled+0x13/0x30 [ 309.693079][ T30] __mutex_lock+0x6a7/0xd70 [ 309.709788][ T30] ? __mutex_lock+0x52a/0xd70 [ 309.719371][ T30] ? tun_chr_close+0x3b/0x1b0 [ 309.728898][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 309.739509][ T30] ? __pfx_call_rcu+0x10/0x10 [ 309.749687][ T30] tun_chr_close+0x3b/0x1b0 [ 309.760487][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 309.770628][ T30] __fput+0x241/0x880 [ 309.781290][ T30] task_work_run+0x251/0x310 [ 309.791725][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 309.802570][ T30] ? __pfx_task_work_run+0x10/0x10 [ 309.815891][ T30] ? do_exit+0xa2a/0x28e0 [ 309.820536][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.833243][ T30] ? kmem_cache_free+0x1a2/0x420 [ 309.838247][ T30] ? do_exit+0xa2a/0x28e0 [ 309.842620][ T30] do_exit+0xa2f/0x28e0 [ 309.856390][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.862193][ T30] ? __pfx_do_exit+0x10/0x10 [ 309.877260][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 309.882726][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.895843][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.902585][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.916442][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 309.921724][ T30] do_group_exit+0x207/0x2c0 [ 309.933234][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.940524][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.953792][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 309.959055][ T30] get_signal+0x176f/0x1810 [ 309.970732][ T30] ? __pfx_get_signal+0x10/0x10 [ 309.981968][ T30] arch_do_signal_or_restart+0x96/0x860 [ 309.995665][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 310.001891][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 310.015373][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 310.021157][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 310.046856][ T30] do_syscall_64+0x100/0x230 [ 310.051535][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.063845][ T30] RIP: 0033:0x7ffa2457df39 [ 310.068321][ T30] RSP: 002b:00007ffa2538c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.087920][ T30] RAX: ffffffffffffffff RBX: 00007ffa24735f80 RCX: 00007ffa2457df39 [ 310.105644][ T30] RDX: 0000000020000180 RSI: 00000000000089f3 RDI: 0000000000000003 [ 310.123078][ T30] RBP: 00007ffa245f0216 R08: 0000000000000000 R09: 0000000000000000 [ 310.131414][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.143269][ T30] R13: 0000000000000000 R14: 00007ffa24735f80 R15: 00007ffe3aee62e8 [ 310.151408][ T30] [ 310.164721][ T30] INFO: task syz-executor:6197 blocked for more than 147 seconds. [ 310.172558][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 310.190449][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.205861][ T30] task:syz-executor state:D stack:24128 pid:6197 tgid:6197 ppid:1 flags:0x00004004 [ 310.225778][ T30] Call Trace: [ 310.229108][ T30] [ 310.232066][ T30] __schedule+0x1895/0x4b30 [ 310.243805][ T30] ? __pfx___schedule+0x10/0x10 [ 310.248721][ T30] ? __pfx_lock_release+0x10/0x10 [ 310.267938][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 310.283128][ T30] ? schedule+0x90/0x320 [ 310.290001][ T30] schedule+0x14b/0x320 [ 310.303523][ T30] schedule_preempt_disabled+0x13/0x30 [ 310.309042][ T30] __mutex_lock+0x6a7/0xd70 [ 310.323297][ T30] ? __mutex_lock+0x52a/0xd70 [ 310.328064][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 310.346214][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 310.351352][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.363245][ T30] ? read_word_at_a_time+0xe/0x20 [ 310.368348][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.386789][ T30] ? sized_strscpy+0x8d/0x220 [ 310.393832][ T30] ip_tunnel_init_net+0x20e/0x720 [ 310.398945][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 310.413664][ T30] ? ops_init+0x75/0x590 [ 310.417972][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.433778][ T30] ops_init+0x320/0x590 [ 310.437988][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 310.454352][ T30] setup_net+0x287/0x9e0 [ 310.458636][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 310.472293][ T30] ? __pfx_setup_net+0x10/0x10 [ 310.477382][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.483062][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.493927][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.499611][ T30] copy_net_ns+0x33f/0x570 [ 310.517892][ T30] create_new_namespaces+0x425/0x7b0 [ 310.531208][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 310.538531][ T30] ksys_unshare+0x619/0xc10 [ 310.543101][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 310.553918][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 310.559954][ T30] ? do_syscall_64+0x100/0x230 [ 310.574264][ T30] __x64_sys_unshare+0x38/0x40 [ 310.579088][ T30] do_syscall_64+0xf3/0x230 [ 310.591773][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.600933][ T30] RIP: 0033:0x7f80ce77f737 [ 310.613249][ T30] RSP: 002b:00007ffcca8e1f48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 310.621707][ T30] RAX: ffffffffffffffda RBX: 00007f80ce935f40 RCX: 00007f80ce77f737 [ 310.641966][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 310.652519][ T30] RBP: 00007f80ce936a38 R08: 0000000000000000 R09: 0000000000000000 [ 310.667325][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 310.683071][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 310.696420][ T30] [ 310.703526][ T30] INFO: task syz-executor:6203 blocked for more than 148 seconds. [ 310.711362][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 310.729504][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.742342][ T30] task:syz-executor state:D stack:24128 pid:6203 tgid:6203 ppid:1 flags:0x00004006 [ 310.759556][ T30] Call Trace: [ 310.762862][ T30] [ 310.768494][ T30] __schedule+0x1895/0x4b30 [ 310.773063][ T30] ? __pfx___schedule+0x10/0x10 [ 310.783244][ T30] ? __pfx_lock_release+0x10/0x10 [ 310.788320][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 310.805826][ T30] ? schedule+0x90/0x320 [ 310.810197][ T30] schedule+0x14b/0x320 [ 310.820359][ T30] schedule_preempt_disabled+0x13/0x30 [ 310.831641][ T30] __mutex_lock+0x6a7/0xd70 [ 310.841971][ T30] ? __mutex_lock+0x52a/0xd70 [ 310.852305][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 310.863381][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 310.868453][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.883240][ T30] ip_tunnel_init_net+0x20e/0x720 [ 310.888318][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 310.903238][ T30] ? ops_init+0x75/0x590 [ 310.907526][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.924720][ T30] ops_init+0x320/0x590 [ 310.929614][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 310.943234][ T30] setup_net+0x287/0x9e0 [ 310.947514][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 310.953108][ T30] ? __pfx_setup_net+0x10/0x10 [ 310.967903][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.979801][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.990365][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.000666][ T30] copy_net_ns+0x33f/0x570 [ 311.011516][ T30] create_new_namespaces+0x425/0x7b0 [ 311.021561][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 311.033269][ T30] ksys_unshare+0x619/0xc10 [ 311.037832][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 311.042898][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.058414][ T30] ? do_syscall_64+0x100/0x230 [ 311.083281][ T30] __x64_sys_unshare+0x38/0x40 [ 311.088104][ T30] do_syscall_64+0xf3/0x230 [ 311.092650][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.111178][ T30] RIP: 0033:0x7f7fed77f737 [ 311.120283][ T30] RSP: 002b:00007ffd3803b828 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 311.135598][ T30] RAX: ffffffffffffffda RBX: 00007f7fed935f40 RCX: 00007f7fed77f737 [ 311.152569][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 311.162664][ T30] RBP: 00007f7fed936a38 R08: 0000000000000000 R09: 0000000000000000 [ 311.173245][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 311.181246][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 311.199972][ T30] [ 311.203089][ T30] INFO: task syz-executor:6206 blocked for more than 148 seconds. [ 311.221822][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 311.243628][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.252319][ T30] task:syz-executor state:D stack:24128 pid:6206 tgid:6206 ppid:1 flags:0x00004006 [ 311.271628][ T30] Call Trace: [ 311.276020][ T30] [ 311.278991][ T30] __schedule+0x1895/0x4b30 [ 311.292700][ T30] ? __pfx___schedule+0x10/0x10 [ 311.297918][ T30] ? __pfx_lock_release+0x10/0x10 [ 311.302993][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 311.321422][ T30] ? schedule+0x90/0x320 [ 311.328377][ T30] schedule+0x14b/0x320 [ 311.332577][ T30] schedule_preempt_disabled+0x13/0x30 [ 311.346943][ T30] __mutex_lock+0x6a7/0xd70 [ 311.351536][ T30] ? __mutex_lock+0x52a/0xd70 [ 311.363117][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 311.373265][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 311.378386][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.396491][ T30] ? read_word_at_a_time+0xe/0x20 [ 311.401599][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.413466][ T30] ? sized_strscpy+0x8d/0x220 [ 311.418201][ T30] ip_tunnel_init_net+0x20e/0x720 [ 311.434621][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 311.440870][ T30] ? ops_init+0x75/0x590 [ 311.454875][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.460568][ T30] ops_init+0x320/0x590 [ 311.473020][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 311.482904][ T30] setup_net+0x287/0x9e0 [ 311.493233][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 311.498844][ T30] ? __pfx_setup_net+0x10/0x10 [ 311.516934][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.522721][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.539820][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.566136][ T30] copy_net_ns+0x33f/0x570 [ 311.570987][ T30] create_new_namespaces+0x425/0x7b0 [ 311.583079][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 311.592577][ T30] ksys_unshare+0x619/0xc10 [ 311.602978][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 311.612099][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.627200][ T30] ? do_syscall_64+0x100/0x230 [ 311.632027][ T30] __x64_sys_unshare+0x38/0x40 [ 311.642765][ T30] do_syscall_64+0xf3/0x230 [ 311.658629][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.669335][ T30] RIP: 0033:0x7f612d57f737 [ 311.678600][ T30] RSP: 002b:00007ffdacecc9f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 311.691724][ T30] RAX: ffffffffffffffda RBX: 00007f612d735f40 RCX: 00007f612d57f737 [ 311.703230][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 311.711233][ T30] RBP: 00007f612d736a38 R08: 0000000000000000 R09: 0000000000000000 [ 311.736050][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 311.753327][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 311.761362][ T30] [ 311.775912][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 311.789727][ T30] INFO: task syz-executor:6209 blocked for more than 149 seconds. [ 311.803567][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 311.810883][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.831790][ T30] task:syz-executor state:D stack:24128 pid:6209 tgid:6209 ppid:1 flags:0x00004006 [ 311.846280][ T30] Call Trace: [ 311.849598][ T30] [ 311.860402][ T30] __schedule+0x1895/0x4b30 [ 311.868533][ T30] ? __pfx___schedule+0x10/0x10 [ 311.884856][ T30] ? __pfx_lock_release+0x10/0x10 [ 311.889948][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 311.903619][ T30] ? schedule+0x90/0x320 [ 311.907925][ T30] schedule+0x14b/0x320 [ 311.912116][ T30] schedule_preempt_disabled+0x13/0x30 [ 311.928669][ T30] __mutex_lock+0x6a7/0xd70 [ 311.939536][ T30] ? __mutex_lock+0x52a/0xd70 [ 311.949400][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 311.961116][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 311.969840][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.981667][ T30] ? read_word_at_a_time+0xe/0x20 [ 311.991390][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.004704][ T30] ? sized_strscpy+0x8d/0x220 [ 312.009449][ T30] ip_tunnel_init_net+0x20e/0x720 [ 312.023246][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 312.031392][ T30] ? ops_init+0x75/0x590 [ 312.043696][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.049403][ T30] ops_init+0x320/0x590 [ 312.067525][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 312.072964][ T30] setup_net+0x287/0x9e0 [ 312.082782][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 312.098395][ T30] ? __pfx_setup_net+0x10/0x10 [ 312.122918][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.129989][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.143280][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.149735][ T30] copy_net_ns+0x33f/0x570 [ 312.162486][ T30] create_new_namespaces+0x425/0x7b0 [ 312.170279][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 312.184034][ T30] ksys_unshare+0x619/0xc10 [ 312.188831][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 312.202946][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 312.209265][ T30] ? do_syscall_64+0x100/0x230 [ 312.224836][ T30] __x64_sys_unshare+0x38/0x40 [ 312.229651][ T30] do_syscall_64+0xf3/0x230 [ 312.243686][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.249627][ T30] RIP: 0033:0x7fbe26d7f737 [ 312.263972][ T30] RSP: 002b:00007ffdeea816c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 312.272694][ T30] RAX: ffffffffffffffda RBX: 00007fbe26f35f40 RCX: 00007fbe26d7f737 [ 312.293231][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 312.301241][ T30] RBP: 00007fbe26f36a38 R08: 0000000000000000 R09: 0000000000000000 [ 312.319426][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 312.332110][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 312.348861][ T30] [ 312.351919][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 312.366491][ T30] [ 312.366491][ T30] Showing all locks held in the system: [ 312.380112][ T30] 6 locks held by kworker/0:0/8: [ 312.390334][ T30] 1 lock held by khungtaskd/30: [ 312.401635][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 312.415751][ T30] 4 locks held by kworker/u8:2/35: [ 312.420894][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 312.442711][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 312.464611][ T30] #2: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 312.484600][ T30] #3: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 312.502801][ T30] 3 locks held by kworker/u8:5/1064: [ 312.511167][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 312.533129][ T30] #1: ffffc900040b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 312.556069][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 312.577135][ T30] 3 locks held by kworker/u8:8/2931: [ 312.582470][ T30] #0: ffff88814b40e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 312.603275][ T30] #1: ffffc90009ea7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 312.629251][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 312.646640][ T30] 3 locks held by kworker/u9:1/4617: [ 312.651978][ T30] #0: ffff88806e267148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 312.673257][ T30] #1: ffffc9000dc0fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 312.696267][ T30] #2: ffff88802d74cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 312.713240][ T30] 2 locks held by getty/4987: [ 312.718214][ T30] #0: ffff88802e39e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 312.737325][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 312.757454][ T30] 3 locks held by kworker/u9:6/5250: [ 312.762800][ T30] #0: ffff888048adb948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 312.784426][ T30] #1: ffffc90003b77d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 312.804940][ T30] #2: ffff88802c82cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 312.823174][ T30] 3 locks held by kworker/1:5/5296: [ 312.843233][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 312.867698][ T30] #1: ffffc9000358fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 312.891150][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 312.904654][ T30] 3 locks held by kworker/1:10/5367: [ 312.909965][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 312.932654][ T30] #1: ffffc900034afd00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 312.951246][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 312.967180][ T30] 1 lock held by syz-executor/6075: [ 312.973053][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 312.992254][ T30] 1 lock held by syz-executor/6078: [ 313.005431][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.022509][ T30] 2 locks held by syz.4.328/6163: [ 313.030595][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 313.043307][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 313.066812][ T30] 1 lock held by syz.3.330/6167: [ 313.072645][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 313.092903][ T30] 2 locks held by syz-executor/6197: [ 313.099851][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 313.119334][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 313.131602][ T30] 2 locks held by syz-executor/6203: [ 313.154607][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 313.174166][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 313.191899][ T30] 2 locks held by syz-executor/6206: [ 313.199011][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 313.219977][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 313.232319][ T30] 2 locks held by syz-executor/6209: [ 313.243517][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 313.253006][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 313.276047][ T30] 1 lock held by syz-executor/6215: [ 313.281282][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.300372][ T30] 1 lock held by syz-executor/6220: [ 313.310959][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.328655][ T30] 1 lock held by syz-executor/6224: [ 313.338551][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.353233][ T30] 1 lock held by syz-executor/6229: [ 313.361025][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.378174][ T30] 1 lock held by syz-executor/6232: [ 313.392547][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.405901][ T30] 1 lock held by syz-executor/6235: [ 313.411124][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.431334][ T30] 1 lock held by syz-executor/6244: [ 313.437168][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.453289][ T30] 1 lock held by syz-executor/6250: [ 313.458513][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.487112][ T30] 1 lock held by syz-executor/6255: [ 313.492353][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.511804][ T30] 1 lock held by syz-executor/6259: [ 313.518792][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.533294][ T30] 1 lock held by syz-executor/6262: [ 313.538515][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.559137][ T30] 1 lock held by syz-executor/6265: [ 313.572955][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.586997][ T30] 1 lock held by syz-executor/6271: [ 313.592220][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.609331][ T30] 1 lock held by syz-executor/6274: [ 313.620483][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 313.633393][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 313.639427][ T5239] Bluetooth: hci5: command 0x0406 tx timeout [ 313.653327][ T30] [ 313.655675][ T30] ============================================= [ 313.655675][ T30] [ 313.679816][ T30] NMI backtrace for cpu 1 [ 313.684274][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 313.694448][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.704521][ T30] Call Trace: [ 313.707815][ T30] [ 313.710850][ T30] dump_stack_lvl+0x241/0x360 [ 313.715568][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.720799][ T30] ? __pfx__printk+0x10/0x10 [ 313.725432][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 313.730410][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 313.735903][ T30] ? _printk+0xd5/0x120 [ 313.740088][ T30] ? __pfx__printk+0x10/0x10 [ 313.744714][ T30] ? __wake_up_klogd+0xcc/0x110 [ 313.749598][ T30] ? __pfx__printk+0x10/0x10 [ 313.754215][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.759879][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 313.764937][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 313.770973][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 313.777015][ T30] watchdog+0xff4/0x1040 [ 313.781313][ T30] ? watchdog+0x1ea/0x1040 [ 313.785776][ T30] ? __pfx_watchdog+0x10/0x10 [ 313.791014][ T30] kthread+0x2f2/0x390 [ 313.795121][ T30] ? __pfx_watchdog+0x10/0x10 [ 313.799833][ T30] ? __pfx_kthread+0x10/0x10 [ 313.804627][ T30] ret_from_fork+0x4d/0x80 [ 313.809084][ T30] ? __pfx_kthread+0x10/0x10 [ 313.813704][ T30] ret_from_fork_asm+0x1a/0x30 [ 313.818527][ T30] [ 313.822653][ T30] Sending NMI from CPU 1 to CPUs 0: [ 313.828520][ C0] NMI backtrace for cpu 0 [ 313.828536][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 313.828560][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.828575][ C0] Workqueue: events nsim_dev_trap_report_work [ 313.828604][ C0] RIP: 0010:rcu_is_watching+0x4e/0xb0 [ 313.828632][ C0] Code: ff df 4c 8d 34 dd 50 8a 31 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 8c cf 83 00 48 c7 c3 98 7e 03 00 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d b1 [ 313.828650][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00000082 [ 313.828668][ C0] RAX: 1ffffffff1c6314a RBX: ffff8880b8637e98 RCX: ffffffff819c73dc [ 313.828686][ C0] RDX: 0000000000000000 RSI: ffffffff8c610080 RDI: ffffffff8c610040 [ 313.828702][ C0] RBP: 0000000000000000 R08: ffffffff901ce56f R09: 1ffffffff2039cad [ 313.828718][ C0] R10: dffffc0000000000 R11: fffffbfff2039cae R12: ffff88801ac41780 [ 313.828735][ C0] R13: ffff88807bc7ca40 R14: ffffffff8e318a50 R15: dffffc0000000000 [ 313.828755][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 313.828774][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.828790][ C0] CR2: 0000001b32b1cff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 313.828808][ C0] Call Trace: [ 313.828816][ C0] [ 313.828825][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 313.828860][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 313.828896][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 313.828929][ C0] ? nmi_handle+0x2a/0x5a0 [ 313.828961][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 313.828992][ C0] ? nmi_handle+0x151/0x5a0 [ 313.829014][ C0] ? nmi_handle+0x2a/0x5a0 [ 313.829037][ C0] ? rcu_is_watching+0x4e/0xb0 [ 313.829067][ C0] ? default_do_nmi+0x63/0x160 [ 313.829102][ C0] ? exc_nmi+0x123/0x1f0 [ 313.829135][ C0] ? end_repeat_nmi+0xf/0x53 [ 313.829169][ C0] ? trace_irq_enable+0x2c/0x120 [ 313.829198][ C0] ? rcu_is_watching+0x4e/0xb0 [ 313.829222][ C0] ? rcu_is_watching+0x4e/0xb0 [ 313.829247][ C0] ? rcu_is_watching+0x4e/0xb0 [ 313.829272][ C0] [ 313.829279][ C0] [ 313.829288][ C0] trace_irq_enable+0x3b/0x120 [ 313.829316][ C0] trace_hardirqs_on+0x18/0x40 [ 313.829342][ C0] kasan_quarantine_put+0xdc/0x230 [ 313.829378][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 313.829413][ C0] kfree+0x1a0/0x440 [ 313.829440][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 313.829476][ C0] ref_tracker_free+0x4ef/0x7e0 [ 313.829511][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 313.829543][ C0] ? dst_destroy+0x171/0x460 [ 313.829571][ C0] ? rcu_core+0xaac/0x17a0 [ 313.829592][ C0] ? handle_softirqs+0x2c7/0x980 [ 313.829620][ C0] ? do_softirq+0x11b/0x1e0 [ 313.829647][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 313.829675][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 313.829698][ C0] ? process_scheduled_works+0xa65/0x1850 [ 313.829728][ C0] ? worker_thread+0x870/0xd30 [ 313.829758][ C0] ? kthread+0x2f2/0x390 [ 313.829777][ C0] ? ret_from_fork+0x4d/0x80 [ 313.829809][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 313.829844][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.829875][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 313.829907][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 313.829936][ C0] dst_destroy+0x171/0x460 [ 313.829964][ C0] ? rcu_core+0xa37/0x17a0 [ 313.829985][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 313.830013][ C0] rcu_core+0xaac/0x17a0 [ 313.830044][ C0] ? __pfx_rcu_core+0x10/0x10 [ 313.830073][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.830103][ C0] ? sched_balance_domains+0x91b/0xa90 [ 313.830136][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 313.830162][ C0] ? __pfx_sched_balance_domains+0x10/0x10 [ 313.830194][ C0] handle_softirqs+0x2c7/0x980 [ 313.830227][ C0] ? do_softirq+0x11b/0x1e0 [ 313.830257][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 313.830289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.830322][ C0] do_softirq+0x11b/0x1e0 [ 313.830349][ C0] [ 313.830357][ C0] [ 313.830365][ C0] ? __pfx_do_softirq+0x10/0x10 [ 313.830394][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 313.830427][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.830459][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.830488][ C0] ? rcu_is_watching+0x15/0xb0 [ 313.830513][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 313.830543][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 313.830566][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 313.830596][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 313.830625][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.830654][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 313.830681][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 313.830714][ C0] ? process_scheduled_works+0x976/0x1850 [ 313.830745][ C0] process_scheduled_works+0xa65/0x1850 [ 313.830793][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.830830][ C0] ? assign_work+0x364/0x3d0 [ 313.830862][ C0] worker_thread+0x870/0xd30 [ 313.830902][ C0] ? __kthread_parkme+0x169/0x1d0 [ 313.830937][ C0] ? __pfx_worker_thread+0x10/0x10 [ 313.830968][ C0] kthread+0x2f2/0x390 [ 313.830988][ C0] ? __pfx_worker_thread+0x10/0x10 [ 313.831019][ C0] ? __pfx_kthread+0x10/0x10 [ 313.831040][ C0] ret_from_fork+0x4d/0x80 [ 313.831076][ C0] ? __pfx_kthread+0x10/0x10 [ 313.831097][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.831138][ C0] [ 314.429613][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 314.436683][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 314.446858][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 314.456932][ T30] Call Trace: [ 314.460225][ T30] [ 314.463170][ T30] dump_stack_lvl+0x241/0x360 [ 314.467886][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.473140][ T30] ? __pfx__printk+0x10/0x10 [ 314.477754][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 314.483778][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.489443][ T30] ? vscnprintf+0x5d/0x90 [ 314.493810][ T30] panic+0x349/0x880 [ 314.497730][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.503394][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 314.509585][ T30] ? __pfx_panic+0x10/0x10 [ 314.514029][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 314.519432][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.525099][ T30] ? __irq_work_queue_local+0x137/0x410 [ 314.530682][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.536349][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 314.541746][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 314.547933][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 314.554144][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.559811][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 314.566013][ T30] watchdog+0x1033/0x1040 [ 314.570388][ T30] ? watchdog+0x1ea/0x1040 [ 314.574846][ T30] ? __pfx_watchdog+0x10/0x10 [ 314.579555][ T30] kthread+0x2f2/0x390 [ 314.583652][ T30] ? __pfx_watchdog+0x10/0x10 [ 314.588357][ T30] ? __pfx_kthread+0x10/0x10 [ 314.592975][ T30] ret_from_fork+0x4d/0x80 [ 314.597423][ T30] ? __pfx_kthread+0x10/0x10 [ 314.602031][ T30] ret_from_fork_asm+0x1a/0x30 [ 314.606847][ T30] [ 314.609994][ T30] Kernel Offset: disabled [ 314.614316][ T30] Rebooting in 86400 seconds..