last executing test programs: 2.691954478s ago: executing program 2 (id=136): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./script.sh\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='#!/bin', 0x6) close(r0) execve(&(0x7f00000000c0)='./script.sh\x00', 0x0, 0x0) 2.590920751s ago: executing program 1 (id=138): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000001cc0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRES64], 0x3, 0x305, &(0x7f0000000c80)="$eJzs3b1rFE0cB/Dv7N4llychz5pEApZqwEo0NmITkfwNYqFizJ0QskRIIhgbg7WInS+dhZ212FjaB61FK7Gwz3Ur85vZ3Mbbmb2X3G1Ovx/Isd7OzP5md3Z25mAdENE/69ryt7eXfug/BYQIAVwBAgA1oALgJOZrDza217bjRt1XUCg59J+Cyana0qxuNPKy6nySw4r0vyqYyn5Hg5EkSfL9S+hP8//QwqGSyN2ftLeDABi3d6fsrJUR3ADslh1AyVQTTTzEdNlxEBFRufTzv2oG/vo5P2XH70EALNjH/og9//2j1ubwAjmWMs9/mWUlSl9fOWWqNd+TKZzeH6SzRE+Jzj1jMAPJQ6NLVTSrlFiCiXtrceP86v24HuAJlqxMsjn5rJumm/JH20w8weYorruL1Dio6josOuKf7eWIL7oP5cB+ovbUbRXhNeoH479KImdErlQkcUcHGUz8F2T7ejWnxEn9oZSkctTyhBzklD0CPrzroJY1OKelY7ZM03Qfmy+jNM7nY55cMzj8s4Kp3UXXkWyu2dxciwW55lq5fqY9p23N7py9c1T7D+qZuqFO4xfeYzkz/g/02V6QBCEgl9kTpJKUtmV461ORlFEHgQUdhU+dyrtVW57iLi5jemvn0fpKHDc2O934+LWLxEe18eqN2Qj7KSeteduuCvqNMBk3RQ/qJPQYoe5yusiVNphBX1MAu/ab9Jo4E6d9Wl45qv1SjsoG+i4nxDjW0z7zyAKzZ3t3fSU2W/kDpYle+yQ6ZjLd4/zN4uTJMGKiodJ9iDLzPxnJm1HdVdmnb/9IxulV5I3TC9uDlPjy1p6ZPmTmBq3B6ox8/tfNDA6T7hlcpg7eOdeZc8BZzxE/HS42snH+JdQyPuMOf/8nIiIiIiIiIiIiIiIiIiIiIiIiIho1hS8G7CebWzv29ZYe3wwpuYpERERERERERERERERERERERERERERERCPPt/6vrJFZsP5v+maAe/3fzP/qXbz+75IuyLH+r3+RWiLq2u8AAAD//6dtbSw=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r0, 0x0, 0x0) 2.589311611s ago: executing program 2 (id=139): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 2.500856923s ago: executing program 2 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2.367039036s ago: executing program 2 (id=142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) shutdown(r0, 0x1) 2.322710897s ago: executing program 1 (id=143): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x0) 2.235871769s ago: executing program 2 (id=144): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.72039962s ago: executing program 0 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 1.676361751s ago: executing program 1 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="2828b10581ba29", 0x7) 1.562931674s ago: executing program 1 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.493447545s ago: executing program 0 (id=152): syz_clone3(&(0x7f000000dd80)={0x40000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5f9a3000) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4000000b, 0x0) 1.409671498s ago: executing program 1 (id=153): r0 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r0, 0x0, 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r0, 0x1000}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 1.251080391s ago: executing program 1 (id=154): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000340)=0x30000) 974.449067ms ago: executing program 0 (id=155): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) 731.218733ms ago: executing program 3 (id=157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r1 = io_uring_setup(0x673e, &(0x7f0000000d80)={0x0, 0x1088a8, 0x1, 0x2, 0x2b5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r0, 0x1) 591.435296ms ago: executing program 3 (id=158): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01072bbd7000ffdbdf2501000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 472.620639ms ago: executing program 3 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 455.547949ms ago: executing program 0 (id=160): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000003ac0)=""/4107, 0x100b}], 0x2}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 313.462923ms ago: executing program 3 (id=161): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4c0, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x400}}], 0x38, 0x40001}, 0x0) 312.116172ms ago: executing program 0 (id=162): mkdir(&(0x7f0000000080)='local_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='local_sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='local_sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/7, 0x7) 227.212045ms ago: executing program 0 (id=163): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfff}}, {@abort}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x2) 124.345647ms ago: executing program 3 (id=164): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f0000000240)="1a00000002000000", 0x8) 77.169928ms ago: executing program 2 (id=165): socket$inet_udp(0x2, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 0s ago: executing program 3 (id=166): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xf9, 0x1213, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 71.794146][ T5759] cgroup: Unknown subsys name 'net' [ 71.924906][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.310385][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.763049][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.771613][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.784260][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.792212][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.809011][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.811499][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.831307][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.840236][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.847926][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.848949][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.857912][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.862354][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.870459][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.878272][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.888359][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.893153][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.905633][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.913203][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.914175][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.929073][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.937642][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.945521][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.968880][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.995564][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.320751][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 75.455078][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.463061][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.472068][ T5772] bridge_slave_0: entered allmulticast mode [ 75.479703][ T5772] bridge_slave_0: entered promiscuous mode [ 75.491666][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.499162][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.506387][ T5772] bridge_slave_1: entered allmulticast mode [ 75.513473][ T5772] bridge_slave_1: entered promiscuous mode [ 75.534813][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.561552][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.571091][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 75.585158][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.676055][ T5772] team0: Port device team_slave_0 added [ 75.686696][ T5772] team0: Port device team_slave_1 added [ 75.763843][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.771804][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.797913][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.809677][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.816847][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.825939][ T5770] bridge_slave_0: entered allmulticast mode [ 75.833250][ T5770] bridge_slave_0: entered promiscuous mode [ 75.841751][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.849381][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.856723][ T5770] bridge_slave_1: entered allmulticast mode [ 75.863725][ T5770] bridge_slave_1: entered promiscuous mode [ 75.870533][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 75.894147][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.901401][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.927574][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.003731][ T5772] hsr_slave_0: entered promiscuous mode [ 76.011632][ T5772] hsr_slave_1: entered promiscuous mode [ 76.020586][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.033638][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.077684][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.084989][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.092495][ T5773] bridge_slave_0: entered allmulticast mode [ 76.099800][ T5773] bridge_slave_0: entered promiscuous mode [ 76.134286][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.141710][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.149809][ T5773] bridge_slave_1: entered allmulticast mode [ 76.156548][ T5773] bridge_slave_1: entered promiscuous mode [ 76.165945][ T5770] team0: Port device team_slave_0 added [ 76.213327][ T5770] team0: Port device team_slave_1 added [ 76.257583][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.264912][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.272533][ T5771] bridge_slave_0: entered allmulticast mode [ 76.279613][ T5771] bridge_slave_0: entered promiscuous mode [ 76.287639][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.295144][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.302553][ T5771] bridge_slave_1: entered allmulticast mode [ 76.309872][ T5771] bridge_slave_1: entered promiscuous mode [ 76.320179][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.363294][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.373060][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.380604][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.414255][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.460737][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.470222][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.496607][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.521985][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.533688][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.545474][ T5773] team0: Port device team_slave_0 added [ 76.555211][ T5773] team0: Port device team_slave_1 added [ 76.626883][ T5771] team0: Port device team_slave_0 added [ 76.636437][ T5771] team0: Port device team_slave_1 added [ 76.653516][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.660643][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.687128][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.705290][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.712374][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.738445][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.761323][ T5770] hsr_slave_0: entered promiscuous mode [ 76.768218][ T5770] hsr_slave_1: entered promiscuous mode [ 76.774276][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.782153][ T5770] Cannot create hsr debugfs directory [ 76.854569][ T5773] hsr_slave_0: entered promiscuous mode [ 76.861190][ T5773] hsr_slave_1: entered promiscuous mode [ 76.867410][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.876031][ T5773] Cannot create hsr debugfs directory [ 76.882423][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.891907][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.920811][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.938051][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.945145][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.972270][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.983038][ T5774] Bluetooth: hci0: command tx timeout [ 77.028026][ T5774] Bluetooth: hci2: command tx timeout [ 77.028175][ T5780] Bluetooth: hci1: command tx timeout [ 77.033939][ T51] Bluetooth: hci3: command tx timeout [ 77.124795][ T5771] hsr_slave_0: entered promiscuous mode [ 77.131195][ T5771] hsr_slave_1: entered promiscuous mode [ 77.137283][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.145652][ T5771] Cannot create hsr debugfs directory [ 77.152327][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.164563][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.189967][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.200348][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.462578][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.474487][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.489595][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.517484][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.589119][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.601798][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.614252][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.625253][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.690955][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.726077][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.745974][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.755983][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.779006][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.788794][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.810502][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.818250][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.847563][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.854733][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.941702][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.006215][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.024697][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.031913][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.064559][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.071753][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.111593][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.174508][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.212776][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.219973][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.255512][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.262695][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.312184][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.374708][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.387605][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.408864][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.416038][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.481919][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.489187][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.620616][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.684264][ T5772] veth0_vlan: entered promiscuous mode [ 78.700257][ T5770] veth0_vlan: entered promiscuous mode [ 78.735155][ T5770] veth1_vlan: entered promiscuous mode [ 78.751609][ T5772] veth1_vlan: entered promiscuous mode [ 78.810970][ T5770] veth0_macvtap: entered promiscuous mode [ 78.836325][ T5770] veth1_macvtap: entered promiscuous mode [ 78.891933][ T5772] veth0_macvtap: entered promiscuous mode [ 78.907645][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.931140][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.947517][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960724][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.974845][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.983681][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.997743][ T5772] veth1_macvtap: entered promiscuous mode [ 79.030549][ T5774] Bluetooth: hci0: command tx timeout [ 79.063090][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.074958][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.086596][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.098575][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.109252][ T5774] Bluetooth: hci2: command tx timeout [ 79.114656][ T5774] Bluetooth: hci3: command tx timeout [ 79.118693][ T5780] Bluetooth: hci1: command tx timeout [ 79.122403][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.137077][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.161185][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.177029][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.186563][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.196067][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.205133][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.217676][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.281668][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.291292][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.402604][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.411870][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.422401][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.428704][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.482004][ T5773] veth0_vlan: entered promiscuous mode [ 79.490731][ T5771] veth0_vlan: entered promiscuous mode [ 79.498117][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.513017][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.534712][ T5773] veth1_vlan: entered promiscuous mode [ 79.543940][ T5771] veth1_vlan: entered promiscuous mode [ 79.611024][ T5773] veth0_macvtap: entered promiscuous mode [ 79.634621][ T5773] veth1_macvtap: entered promiscuous mode [ 79.745254][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.767261][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.778008][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.788873][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.804324][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.832659][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.864579][ T5836] syz.3.5[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.867762][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.908417][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.926149][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.944618][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.958627][ T5771] veth0_macvtap: entered promiscuous mode [ 79.980438][ T5771] veth1_macvtap: entered promiscuous mode [ 80.037496][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.068708][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.077493][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.107888][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.169460][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.197868][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.218350][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.239258][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.253221][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.273421][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.291493][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.330691][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.354286][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.374439][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.390875][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.422658][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.443473][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.465479][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.509070][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.527780][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.547183][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.577913][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.674364][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.718459][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.788377][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.813668][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.941262][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.970885][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.040551][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.078688][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.109259][ T51] Bluetooth: hci0: command tx timeout [ 81.130306][ T5836] loop3: detected capacity change from 0 to 65536 [ 81.188199][ T51] Bluetooth: hci2: command tx timeout [ 81.193709][ T5780] Bluetooth: hci1: command tx timeout [ 81.193719][ T5774] Bluetooth: hci3: command tx timeout [ 81.232380][ T5836] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 81.344773][ T5836] XFS (loop3): Ending clean mount [ 81.546059][ T5770] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 81.583784][ T5865] loop1: detected capacity change from 0 to 256 [ 81.599565][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.796036][ T5865] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 81.818767][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 81.845616][ T23] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 81.884619][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.929641][ T23] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 81.943553][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.971611][ T23] usb 1-1: config 0 descriptor?? [ 82.429368][ T23] ntrig 0003:1B96:000A.0001: unknown global tag 0xd [ 82.436442][ T23] ntrig 0003:1B96:000A.0001: item 0 1 1 13 parsing failed [ 82.457120][ T23] ntrig 0003:1B96:000A.0001: parse failed [ 82.463539][ T23] ntrig: probe of 0003:1B96:000A.0001 failed with error -22 [ 82.515171][ T5875] loop2: detected capacity change from 0 to 32768 [ 82.539608][ T5875] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 82.603404][ T5875] XFS (loop2): Ending clean mount [ 82.674668][ T23] usb 1-1: USB disconnect, device number 2 [ 82.740478][ T5887] Bluetooth: MGMT ver 1.22 [ 82.765960][ T5875] process 'syz.2.13' launched './file1' with NULL argv: empty string added [ 82.853777][ T5773] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 82.854738][ T5889] loop3: detected capacity change from 0 to 1024 [ 82.875291][ T5889] hfsplus: Filesystem is marked locked, mounting read-only. [ 82.955839][ T5889] hfsplus: filesystem is marked locked, leaving read-only. [ 83.188345][ T51] Bluetooth: hci0: command tx timeout [ 83.270035][ T51] Bluetooth: hci3: command tx timeout [ 83.275522][ T51] Bluetooth: hci2: command tx timeout [ 83.281077][ T5780] Bluetooth: hci1: command tx timeout [ 83.560189][ T5905] pimreg: tun_chr_ioctl cmd 2148553947 [ 84.123479][ T5933] loop3: detected capacity change from 0 to 128 [ 84.137812][ T5932] loop2: detected capacity change from 0 to 512 [ 84.182729][ T5932] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.196981][ T5933] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 84.242907][ T5932] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 84.300744][ T5932] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 84.341170][ T5933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.357281][ T5932] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.37: Failed to acquire dquot type 0 [ 84.400832][ T5932] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 84.420124][ T5932] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 84.430096][ T5932] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.37: Failed to acquire dquot type 0 [ 84.448010][ T5932] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.37: bg 0: block 64: padding at end of block bitmap is not set [ 84.465068][ T5932] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 84.478439][ T5932] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 84.497771][ T5932] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 84.507675][ T5932] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.37: Failed to acquire dquot type 0 [ 84.554309][ T5932] EXT4-fs (loop2): 1 orphan inode deleted [ 84.598357][ T5932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.732929][ T5922] loop0: detected capacity change from 0 to 32768 [ 84.776700][ T5922] [ 84.776700][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.776700][ T5922] [ 84.830841][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.956901][ T1089] ERROR: (device loop0): diWrite: ixpxd invalid [ 84.956901][ T1089] [ 84.983011][ T1089] ERROR: (device loop0): txCommit: [ 84.983011][ T1089] [ 84.991672][ T1089] jfs_write_inode: jfs_commit_inode failed! [ 85.004401][ T5772] [ 85.004401][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.004401][ T5772] [ 85.029705][ T5772] [ 85.029705][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.029705][ T5772] [ 85.160641][ T5941] loop2: detected capacity change from 0 to 4096 [ 85.190775][ T5941] ======================================================= [ 85.190775][ T5941] WARNING: The mand mount option has been deprecated and [ 85.190775][ T5941] and is ignored by this kernel. Remove the mand [ 85.190775][ T5941] option from the mount to silence this warning. [ 85.190775][ T5941] ======================================================= [ 85.259329][ T5941] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 85.292931][ T5937] loop1: detected capacity change from 0 to 40427 [ 85.340755][ T5937] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 85.361889][ T5937] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 85.421194][ T5937] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.441914][ T5939] loop3: detected capacity change from 0 to 32768 [ 85.517169][ T5941] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 85.542444][ T5939] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.586241][ T5941] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 85.630147][ T5937] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 85.661484][ T5937] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.670661][ T5941] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 85.698500][ T5941] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 85.729968][ T5939] XFS (loop3): Ending clean mount [ 85.764514][ T5939] XFS (loop3): Quotacheck needed: Please wait. [ 85.873627][ T1089] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 85.889637][ T5939] XFS (loop3): Quotacheck: Done. [ 86.097316][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.259098][ T789] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 86.459827][ T789] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 86.482448][ T789] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 62535, setting to 64 [ 86.507916][ T789] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.532438][ T789] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 86.564350][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.608195][ T789] usb 1-1: SerialNumber: syz [ 86.639968][ T789] usb 1-1: config 0 descriptor?? [ 86.678301][ T5960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.780927][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.917121][ T5960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.932670][ T789] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 86.943206][ T5978] set_capacity_and_notify: 1 callbacks suppressed [ 86.943222][ T5978] loop1: detected capacity change from 0 to 256 [ 87.031339][ T28] audit: type=1800 audit(1789041508.316:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 87.043677][ T5978] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 87.126834][ T5978] FAT-fs (loop1): Filesystem has been set read-only [ 87.177886][ T5978] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.133152][ T5982] loop3: detected capacity change from 0 to 32768 [ 88.201892][ T5984] loop1: detected capacity change from 0 to 32768 [ 88.219664][ T5982] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 88.335641][ T5984] JBD2: Ignoring recovery information on journal [ 88.345383][ T5982] XFS (loop3): Ending clean mount [ 88.453105][ T5984] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.468027][ T5780] Bluetooth: hci2: command tx timeout [ 88.643273][ T5770] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 88.681084][ T5997] syz.2.54 (5997) used greatest stack depth: 20216 bytes left [ 88.812176][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 88.831839][ T5814] usb 1-1: USB disconnect, device number 3 [ 88.889073][ T42] hfsplus: b-tree write err: -5, ino 25 [ 88.896473][ T42] hfsplus: b-tree write err: -5, ino 4 [ 88.922249][ T42] hfsplus: b-tree write err: -5, ino 2 [ 89.715931][ T6028] netem: change failed [ 89.856330][ T6033] loop0: detected capacity change from 0 to 256 [ 89.893530][ T6033] exfat: Deprecated parameter 'utf8' [ 89.908046][ T6033] exfat: Deprecated parameter 'namecase' [ 89.927911][ T6033] exfat: Deprecated parameter 'namecase' [ 89.935881][ T6033] exfat: Deprecated parameter 'utf8' [ 90.012578][ T6033] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 90.396116][ T6042] loop0: detected capacity change from 0 to 512 [ 90.489407][ T6018] loop3: detected capacity change from 0 to 40427 [ 90.516262][ T6018] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 90.545804][ T6018] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 90.598579][ T6018] F2FS-fs (loop3): invalid crc value [ 90.623739][ T6018] F2FS-fs (loop3): invalid crc value [ 90.641205][ T6018] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 90.930020][ T6056] loop3: detected capacity change from 0 to 512 [ 91.062837][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.119410][ T6056] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.434607][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.636178][ T6049] loop0: detected capacity change from 0 to 40427 [ 91.684098][ T6049] F2FS-fs (loop0): invalid crc value [ 91.714900][ T6049] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.750790][ T6061] loop1: detected capacity change from 0 to 32768 [ 91.797565][ T6061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.80 (6061) [ 91.867207][ T6049] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.882045][ T6061] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.908265][ T6061] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.932615][ T6061] BTRFS info (device loop1): use zlib compression, level 3 [ 91.954477][ T6061] BTRFS info (device loop1): turning on sync discard [ 91.991267][ T6061] BTRFS info (device loop1): using free space tree [ 92.074739][ T5772] syz-executor: attempt to access beyond end of device [ 92.074739][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.101133][ T971] cfg80211: failed to load regulatory.db [ 92.146053][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 92.161801][ T6061] BTRFS info (device loop1): enabling ssd optimizations [ 92.468587][ T5809] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.493532][ T5771] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.675442][ T5763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5763) [ 92.738151][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 92.773315][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.818481][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.859256][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.882440][ T5809] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.916279][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.954021][ T5809] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.980595][ T5809] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.027827][ T5809] usb 4-1: Manufacturer: syz [ 93.040371][ T5809] usb 4-1: config 0 descriptor?? [ 93.144085][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 93.165746][ T6107] ipvlan2: entered allmulticast mode [ 93.178347][ T6107] syz_tun: entered allmulticast mode [ 93.398944][ T5809] rc_core: IR keymap rc-hauppauge not found [ 93.427831][ T5809] Registered IR keymap rc-empty [ 93.434328][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.487913][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.552434][ T5809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 93.591676][ T5809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 93.654700][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.719280][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.727983][ T6126] binder: 6124:6126 ioctl c0306201 200000000300 returned -14 [ 93.758605][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.787994][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.828221][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.893165][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.939958][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.978033][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.018050][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.058238][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.100832][ T5809] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 94.128975][ T5809] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.158214][ T5809] usb 4-1: USB disconnect, device number 2 [ 94.673229][ T6166] loop3: detected capacity change from 0 to 256 [ 94.689784][ T6166] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.713734][ T6166] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.147872][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.367819][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 95.380043][ T5809] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 95.414017][ T5809] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 95.464192][ T5809] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 95.493946][ T5809] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 95.538443][ T5809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.561504][ T6195] < [ 95.561623][ T5809] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 95.577877][ T5809] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 95.596779][ T5809] usb 2-1: Product: syz [ 95.607641][ T5809] usb 2-1: Manufacturer: syz [ 95.620808][ T5809] usb 2-1: SerialNumber: syz [ 95.649365][ T5809] usb 2-1: config 0 descriptor?? [ 95.690997][ T5809] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 95.733257][ T5809] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 95.878040][ T971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.987680][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 95.987956][ T789] usb 2-1: USB disconnect, device number 2 [ 96.010796][ T6169] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 96.029785][ T789] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 96.099916][ T971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.115355][ T971] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.146716][ T971] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.165949][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.182209][ T971] usb 4-1: SerialNumber: syz [ 96.412165][ T6219] warning: `syz.2.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.424779][ T971] usb 4-1: 0:2 : does not exist [ 96.492547][ T971] usb 4-1: USB disconnect, device number 3 [ 96.580717][ T6224] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 96.580717][ T6224] The task syz.0.130 (6224) triggered the difference, watch for misbehavior. [ 96.611185][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.013276][ T6240] loop1: detected capacity change from 0 to 64 [ 97.220594][ T5771] hfs: node 4:3 still has 1 user(s)! [ 97.517884][ T789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.618895][ T971] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.721075][ T789] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.735524][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.751644][ T789] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.765836][ T789] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.784402][ T789] usb 4-1: Product: syz [ 97.788734][ T789] usb 4-1: Manufacturer: syz [ 97.793352][ T789] usb 4-1: SerialNumber: syz [ 97.812766][ T789] usb 4-1: config 0 descriptor?? [ 97.824128][ T789] usb 4-1: selecting invalid altsetting 0 [ 97.842851][ T971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.885875][ T971] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 97.913554][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.926603][ T971] usb 3-1: Product: syz [ 97.931495][ T971] usb 3-1: Manufacturer: syz [ 97.936129][ T971] usb 3-1: SerialNumber: syz [ 98.132378][ T23] usb 4-1: USB disconnect, device number 4 [ 98.601843][ T971] speedtch 3-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 98.819385][ T971] speedtch: probe of 3-1:1.0 failed with error -22 [ 98.847494][ T971] usbtest: probe of 3-1:1.1 failed with error -71 [ 98.870553][ T971] speedtch: probe of 3-1:1.1 failed with error -71 [ 98.883156][ T971] usb 3-1: USB disconnect, device number 2 [ 98.917867][ T5809] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.017472][ T6285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.158'. [ 99.135686][ T5809] usb 2-1: config 0 has no interfaces? [ 99.142170][ T5809] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 99.156157][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.168351][ T5809] usb 2-1: config 0 descriptor?? [ 99.398997][ T5809] usb 2-1: USB disconnect, device number 3 [ 99.422036][ T6295] loop0: detected capacity change from 0 to 2048 [ 99.514415][ T6295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.619673][ T6304] loop3: detected capacity change from 0 to 8192 [ 99.656982][ T6304] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.749633][ T6301] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 133.040237][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.046937][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.471664][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.480412][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.678129][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 201.680247][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 201.684176][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 201.690290][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 255.910115][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.911463][ T29] INFO: task kworker/u4:1:12 blocked for more than 143 seconds. [ 255.916477][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.924361][ T29] Not tainted syzkaller #0 [ 255.939863][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.949785][ T29] task:kworker/u4:1 state:D stack:22232 pid:12 ppid:2 flags:0x00004000 [ 255.960931][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 255.967371][ T29] Call Trace: [ 255.970776][ T29] [ 255.973732][ T29] __schedule+0x15ae/0x4660 [ 255.984090][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 255.991744][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 256.002402][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 256.009536][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.014798][ T29] ? asan.module_dtor+0x20/0x20 [ 256.019855][ T29] ? blk_check_plugged+0x250/0x250 [ 256.024990][ T29] ? rq_wait_inc_below+0x11f/0x1a0 [ 256.030378][ T29] ? wq_worker_sleeping+0x63/0x240 [ 256.035526][ T29] schedule+0xbd/0x170 [ 256.039827][ T29] io_schedule+0x80/0xd0 [ 256.044212][ T29] rq_qos_wait+0x22b/0x360 [ 256.048711][ T29] ? wbt_inflight_cb+0x2f0/0x2f0 [ 256.053725][ T29] ? rq_depth_scale_down+0x2f0/0x2f0 [ 256.059094][ T29] ? rq_qos_wait+0x360/0x360 [ 256.063739][ T29] ? wbt_exit+0xb0/0xb0 [ 256.068070][ T29] ? blk_bio_list_merge+0xd0/0xd0 [ 256.073163][ T29] wbt_wait+0x34a/0x580 [ 256.077320][ T29] ? rwb_trace_step+0x320/0x320 [ 256.082284][ T29] ? dd_depth_updated+0x110/0x110 [ 256.087361][ T29] ? rwb_trace_step+0x320/0x320 [ 256.092363][ T29] __rq_qos_throttle+0x65/0xb0 [ 256.097166][ T29] blk_mq_submit_bio+0x8fb/0x2220 [ 256.102310][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.107376][ T29] ? blk_mq_plug_issue_direct+0x550/0x550 [ 256.114252][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 256.120619][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 256.125853][ T29] ? ktime_get+0x7f/0x280 [ 256.130324][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 256.136621][ T29] ? ktime_get_real_ts64+0x440/0x440 [ 256.141989][ T29] __submit_bio+0x12b/0x260 [ 256.146585][ T29] ? blk_free_queue_rcu+0x40/0x40 [ 256.152259][ T29] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 256.158006][ T29] ? __folio_end_writeback+0xe10/0xe10 [ 256.163498][ T29] ? __mod_lruvec_page_state+0xa5/0x410 [ 256.169123][ T29] ? should_fail_request+0x70/0x70 [ 256.174282][ T29] ? submit_bio_noacct+0xfba/0x1b30 [ 256.179636][ T29] ext4_bio_write_folio+0x16a4/0x22d0 [ 256.185091][ T29] mpage_submit_folio+0x231/0x3c0 [ 256.190180][ T29] mpage_process_page_bufs+0x6bf/0x8c0 [ 256.195755][ T29] mpage_prepare_extent_to_map+0xdd3/0x1d50 [ 256.201834][ T29] ? trace_ext4_writepages+0x1c0/0x1c0 [ 256.207320][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 256.213368][ T29] ext4_do_writepages+0xb46/0x3990 [ 256.218624][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 256.225519][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 256.231170][ T29] ? __lock_acquire+0x1336/0x7d80 [ 256.236230][ T29] ext4_writepages+0x1dd/0x350 [ 256.241140][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 256.246120][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 256.251674][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 256.257077][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 256.262436][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 256.267398][ T29] do_writepages+0x351/0x590 [ 256.272163][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 256.277957][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 256.283381][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.288551][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 256.293634][ T29] __writeback_single_inode+0x14e/0xee0 [ 256.299314][ T29] writeback_sb_inodes+0x813/0x1020 [ 256.305033][ T29] ? queue_io+0x530/0x530 [ 256.309754][ T29] __writeback_inodes_wb+0x114/0x240 [ 256.315706][ T29] wb_writeback+0x472/0xbe0 [ 256.320340][ T29] ? queue_io+0x391/0x530 [ 256.324706][ T29] ? percpu_ref_tryget+0x250/0x250 [ 256.329950][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 256.335954][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.341069][ T29] wb_workfn+0xad7/0xe60 [ 256.345357][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 256.351253][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 256.357358][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.362469][ T29] ? read_lock_is_recursive+0x20/0x20 [ 256.368057][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.373277][ T29] ? process_scheduled_works+0x975/0x1600 [ 256.379067][ T29] ? process_scheduled_works+0x975/0x1600 [ 256.384822][ T29] process_scheduled_works+0xa60/0x1600 [ 256.390913][ T29] ? worker_attach_to_pool+0x370/0x370 [ 256.396399][ T29] ? assign_work+0x3cc/0x5d0 [ 256.401271][ T29] worker_thread+0xa5e/0xfe0 [ 256.405895][ T29] kthread+0x2fa/0x390 [ 256.410059][ T29] ? pr_cont_work+0x550/0x550 [ 256.414751][ T29] ? kthread_blkcg+0xd0/0xd0 [ 256.420074][ T29] ret_from_fork+0x48/0x80 [ 256.424574][ T29] ? kthread_blkcg+0xd0/0xd0 [ 256.429243][ T29] ret_from_fork_asm+0x11/0x20 [ 256.434040][ T29] [ 256.437185][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds. [ 256.447176][ T29] Not tainted syzkaller #0 [ 256.452254][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.461042][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5103 ppid:2 flags:0x00004000 [ 256.475475][ T29] Call Trace: [ 256.478942][ T29] [ 256.482064][ T29] __schedule+0x15ae/0x4660 [ 256.486597][ T29] ? asan.module_dtor+0x20/0x20 [ 256.491545][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.497002][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 256.503090][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 256.508352][ T29] schedule+0xbd/0x170 [ 256.512444][ T29] io_schedule+0x80/0xd0 [ 256.516725][ T29] bit_wait_io+0x11/0xd0 [ 256.521557][ T29] __wait_on_bit+0x9f/0x2c0 [ 256.526122][ T29] ? bit_wait+0xd0/0xd0 [ 256.530348][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 256.535824][ T29] ? bit_wait+0xd0/0xd0 [ 256.540160][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 256.544971][ T29] ? do_raw_write_lock+0x11e/0x260 [ 256.550284][ T29] ? bit_waitqueue+0x30/0x30 [ 256.555064][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 256.560210][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 256.566599][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 256.573460][ T29] ? lock_chain_count+0x20/0x20 [ 256.578428][ T29] ? _raw_spin_unlock+0x40/0x40 [ 256.583297][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 256.588995][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 256.594297][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.599536][ T29] ? timer_delete_sync+0x20/0x20 [ 256.604488][ T29] ? do_raw_read_unlock+0x80/0x80 [ 256.609566][ T29] ? prepare_to_wait+0x1aa/0x200 [ 256.614567][ T29] kjournald2+0x40f/0x810 [ 256.619049][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 256.624597][ T29] ? wake_bit_function+0x200/0x200 [ 256.629793][ T29] ? _raw_spin_unlock+0x40/0x40 [ 256.634837][ T29] ? __kthread_parkme+0x71/0x1c0 [ 256.639857][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 256.644945][ T29] kthread+0x2fa/0x390 [ 256.649104][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 256.654425][ T29] ? kthread_blkcg+0xd0/0xd0 [ 256.659107][ T29] ret_from_fork+0x48/0x80 [ 256.663587][ T29] ? kthread_blkcg+0xd0/0xd0 [ 256.668343][ T29] ret_from_fork_asm+0x11/0x20 [ 256.673136][ T29] [ 256.676185][ T29] INFO: task syz-executor:5759 blocked for more than 144 seconds. [ 256.684079][ T29] Not tainted syzkaller #0 [ 256.689055][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.697785][ T29] task:syz-executor state:D stack:22888 pid:5759 ppid:5758 flags:0x00004002 [ 256.707036][ T29] Call Trace: [ 256.710540][ T29] [ 256.713486][ T29] __schedule+0x15ae/0x4660 [ 256.718098][ T29] ? mark_lock+0x94/0x320 [ 256.722448][ T29] ? asan.module_dtor+0x20/0x20 [ 256.727700][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.732757][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 256.738732][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 256.743956][ T29] schedule+0xbd/0x170 [ 256.748132][ T29] io_schedule+0x80/0xd0 [ 256.752409][ T29] bit_wait_io+0x11/0xd0 [ 256.756733][ T29] __wait_on_bit+0x9f/0x2c0 [ 256.761298][ T29] ? bit_wait+0xd0/0xd0 [ 256.765475][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 256.770996][ T29] ? bit_wait+0xd0/0xd0 [ 256.775165][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 256.779998][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 256.785066][ T29] ? bit_waitqueue+0x30/0x30 [ 256.789749][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 256.794981][ T29] do_get_write_access+0x5c9/0xe00 [ 256.800167][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 256.806161][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 256.812362][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 256.818760][ T29] ? __might_sleep+0xe0/0xe0 [ 256.823373][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 256.829562][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 256.835164][ T29] ext4_dirty_inode+0xcb/0x110 [ 256.839999][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 256.845827][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 256.850908][ T29] file_update_time+0x187/0x1a0 [ 256.855772][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 256.860901][ T29] ? do_wp_page+0x4ce/0x34d0 [ 256.865515][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 256.871909][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 256.876961][ T29] do_page_mkwrite+0x153/0x3f0 [ 256.881806][ T29] do_wp_page+0xd4d/0x34d0 [ 256.886252][ T29] ? folio_put+0xd0/0xd0 [ 256.890572][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 256.895721][ T29] ? __rwlock_init+0x150/0x150 [ 256.900600][ T29] handle_mm_fault+0x1306/0x4a50 [ 256.905560][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 256.910577][ T29] ? numa_migrate_prep+0x350/0x350 [ 256.915742][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 256.921152][ T29] do_user_addr_fault+0x736/0x12d0 [ 256.926753][ T29] exc_page_fault+0x64/0x100 [ 256.932074][ T29] ? clear_bhb_loop+0x40/0x90 [ 256.936785][ T29] asm_exc_page_fault+0x26/0x30 [ 256.941745][ T29] RIP: 0033:0x7f9d3b87c6e2 [ 256.946175][ T29] RSP: 002b:00007ffdf60ab940 EFLAGS: 00010202 [ 256.952432][ T29] RAX: 00007f9d39700000 RBX: 00005555767e98b0 RCX: 0000000000000007 [ 256.960517][ T29] RDX: 0000000000003b9e RSI: 00005555767e2798 RDI: 0000000000000080 [ 256.968553][ T29] RBP: 00007ffdf60abe40 R08: 00005555767e29e8 R09: 0000000000000090 [ 256.976633][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdf60abc80 [ 256.984691][ T29] R13: 00007ffdf60aba70 R14: 585858582e7a7973 R15: 00007ffdf60ab9c0 [ 256.992736][ T29] [ 256.995799][ T29] INFO: task syz.1.154:6272 blocked for more than 144 seconds. [ 257.003513][ T29] Not tainted syzkaller #0 [ 257.008505][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.017188][ T29] task:syz.1.154 state:D stack:27048 pid:6272 ppid:5771 flags:0x00004004 [ 257.026480][ T29] Call Trace: [ 257.030008][ T29] [ 257.033301][ T29] __schedule+0x15ae/0x4660 [ 257.038069][ T29] ? mark_lock+0x94/0x320 [ 257.042427][ T29] ? asan.module_dtor+0x20/0x20 [ 257.047271][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 257.052335][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 257.058303][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 257.063524][ T29] schedule+0xbd/0x170 [ 257.067690][ T29] io_schedule+0x80/0xd0 [ 257.071966][ T29] bit_wait_io+0x11/0xd0 [ 257.076220][ T29] __wait_on_bit+0x9f/0x2c0 [ 257.080966][ T29] ? bit_wait+0xd0/0xd0 [ 257.085176][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 257.090690][ T29] ? bit_wait+0xd0/0xd0 [ 257.094872][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 257.099731][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 257.104787][ T29] ? bit_waitqueue+0x30/0x30 [ 257.109588][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 257.114840][ T29] do_get_write_access+0x5c9/0xe00 [ 257.120080][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 257.126083][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 257.132497][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 257.139436][ T29] ? __might_sleep+0xe0/0xe0 [ 257.144083][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 257.149823][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 257.155335][ T29] ext4_dirty_inode+0xcb/0x110 [ 257.160177][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 257.166005][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 257.171082][ T29] file_update_time+0x187/0x1a0 [ 257.175973][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 257.181088][ T29] ? filemap_fault+0x103c/0x1540 [ 257.186073][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 257.192016][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 257.198493][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 257.203556][ T29] ? __pte_offset_map+0x20d/0x280 [ 257.208665][ T29] do_page_mkwrite+0x153/0x3f0 [ 257.213470][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 257.218493][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 257.223469][ T29] ? numa_migrate_prep+0x350/0x350 [ 257.228680][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 257.234011][ T29] do_user_addr_fault+0x736/0x12d0 [ 257.239780][ T29] exc_page_fault+0x64/0x100 [ 257.244419][ T29] ? clear_bhb_loop+0x40/0x90 [ 257.249246][ T29] asm_exc_page_fault+0x26/0x30 [ 257.254113][ T29] RIP: 0033:0x7f189f672f32 [ 257.258741][ T29] RSP: 002b:00007ffce1677740 EFLAGS: 00010202 [ 257.264827][ T29] RAX: 000000000000a008 RBX: 00007f18a0555720 RCX: 0000000000000000 [ 257.273290][ T29] RDX: 0000001b2d91a000 RSI: 0000000000000008 RDI: 00007f18a0555720 [ 257.281328][ T29] RBP: 00000000000004b9 R08: 00007f189fa10000 R09: 00007f189fa25f40 [ 257.289572][ T29] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff8a7bd3e0 [ 257.297570][ T29] R13: 00007f189fa25f40 R14: 000000000000008b R15: ffffffffffff6000 [ 257.305663][ T29] ? add_uevent_var+0x280/0x460 [ 257.310570][ T29] [ 257.313676][ T29] INFO: task syz.0.163:6294 blocked for more than 144 seconds. [ 257.321280][ T29] Not tainted syzkaller #0 [ 257.326223][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.334973][ T29] task:syz.0.163 state:D stack:27048 pid:6294 ppid:5772 flags:0x00004004 [ 257.344870][ T29] Call Trace: [ 257.348655][ T29] [ 257.351641][ T29] __schedule+0x15ae/0x4660 [ 257.356178][ T29] ? mark_lock+0x94/0x320 [ 257.360584][ T29] ? asan.module_dtor+0x20/0x20 [ 257.365487][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 257.370719][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 257.376672][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 257.382000][ T29] schedule+0xbd/0x170 [ 257.386092][ T29] io_schedule+0x80/0xd0 [ 257.390377][ T29] bit_wait_io+0x11/0xd0 [ 257.394655][ T29] __wait_on_bit+0x9f/0x2c0 [ 257.399249][ T29] ? bit_wait+0xd0/0xd0 [ 257.403623][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 257.409150][ T29] ? bit_wait+0xd0/0xd0 [ 257.413357][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 257.418214][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 257.423282][ T29] ? bit_waitqueue+0x30/0x30 [ 257.427972][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 257.434916][ T29] do_get_write_access+0x5c9/0xe00 [ 257.440689][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 257.446739][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 257.453004][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 257.459412][ T29] ? __might_sleep+0xe0/0xe0 [ 257.464049][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 257.469692][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 257.475189][ T29] ext4_dirty_inode+0xcb/0x110 [ 257.480182][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 257.486017][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 257.491102][ T29] file_update_time+0x187/0x1a0 [ 257.496120][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 257.501251][ T29] ? filemap_fault+0x103c/0x1540 [ 257.506205][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 257.516342][ T29] ? pte_alloc_one+0x3b6/0x540 [ 257.521237][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 257.527509][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 257.532647][ T29] do_page_mkwrite+0x153/0x3f0 [ 257.537435][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 257.542975][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 257.547996][ T29] ? numa_migrate_prep+0x350/0x350 [ 257.553140][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 257.558524][ T29] do_user_addr_fault+0x736/0x12d0 [ 257.563698][ T29] exc_page_fault+0x64/0x100 [ 257.568352][ T29] asm_exc_page_fault+0x26/0x30 [ 257.573268][ T29] RIP: 0033:0x7f27fa072809 [ 257.577781][ T29] RSP: 002b:00007fffca300350 EFLAGS: 00010202 [ 257.584298][ T29] RAX: 0000001b2d824000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 257.592419][ T29] RDX: 0000001b2d823ffc RSI: 00000000005ffde8 RDI: 00007f27faf55700 [ 257.600527][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f27fa412000 [ 257.608588][ T29] R10: 00007f27faf55700 R11: 0000000000000000 R12: 0000000000000000 [ 257.616583][ T29] R13: 000000000001f5cc R14: ffffffff813219d0 R15: 00007f27faf55720 [ 257.624658][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 257.630794][ T29] [ 257.633832][ T29] INFO: task syz.2.165:6300 blocked for more than 145 seconds. [ 257.641810][ T29] Not tainted syzkaller #0 [ 257.647091][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.655827][ T29] task:syz.2.165 state:D stack:26448 pid:6300 ppid:5773 flags:0x00004004 [ 257.665153][ T29] Call Trace: [ 257.668516][ T29] [ 257.671498][ T29] __schedule+0x15ae/0x4660 [ 257.676054][ T29] ? mark_lock+0x94/0x320 [ 257.680492][ T29] ? asan.module_dtor+0x20/0x20 [ 257.685367][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 257.690477][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 257.696392][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 257.701713][ T29] schedule+0xbd/0x170 [ 257.705813][ T29] io_schedule+0x80/0xd0 [ 257.710246][ T29] bit_wait_io+0x11/0xd0 [ 257.714517][ T29] __wait_on_bit+0x9f/0x2c0 [ 257.719114][ T29] ? bit_wait+0xd0/0xd0 [ 257.723293][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 257.728802][ T29] ? bit_wait+0xd0/0xd0 [ 257.732980][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 257.737814][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 257.742857][ T29] ? bit_waitqueue+0x30/0x30 [ 257.748110][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 257.753340][ T29] do_get_write_access+0x5c9/0xe00 [ 257.758535][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 257.764558][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 257.770771][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 257.776945][ T29] ? __might_sleep+0xe0/0xe0 [ 257.781624][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 257.787194][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 257.792702][ T29] ext4_dirty_inode+0xcb/0x110 [ 257.797502][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 257.803419][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 257.808549][ T29] file_update_time+0x187/0x1a0 [ 257.813441][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 257.818680][ T29] ? filemap_fault+0x103c/0x1540 [ 257.823651][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 257.830065][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 257.836341][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 257.841437][ T29] ? __pte_offset_map+0x20d/0x280 [ 257.846475][ T29] do_page_mkwrite+0x153/0x3f0 [ 257.851822][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 257.856808][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 257.861866][ T29] ? numa_migrate_prep+0x350/0x350 [ 257.867004][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 257.872433][ T29] do_user_addr_fault+0x736/0x12d0 [ 257.877606][ T29] exc_page_fault+0x64/0x100 [ 257.882282][ T29] asm_exc_page_fault+0x26/0x30 [ 257.887147][ T29] RIP: 0033:0x7f3292472f32 [ 257.891643][ T29] RSP: 002b:00007ffd84049ae0 EFLAGS: 00010202 [ 257.897776][ T29] RAX: 0000000000004008 RBX: 00007f3293355720 RCX: 0000000000000000 [ 257.905773][ T29] RDX: 0000001b2da20000 RSI: 0000000000000008 RDI: 00007f3293355720 [ 257.913977][ T29] RBP: 00000000000003a1 R08: 00007f3292810000 R09: 00007f3292826038 [ 257.922041][ T29] R10: 0000000000000003 R11: 0000000000000003 R12: ffffffff888367ae [ 257.930232][ T29] R13: 00007f3292826038 R14: 000000000000017e R15: ffffffffffffc000 [ 257.938314][ T29] ? __dev_queue_xmit+0x6ae/0x37e0 [ 257.943490][ T29] [ 257.946557][ T29] INFO: task syz.3.166:6303 blocked for more than 145 seconds. [ 257.954654][ T29] Not tainted syzkaller #0 [ 257.959681][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.968461][ T29] task:syz.3.166 state:D stack:27048 pid:6303 ppid:5770 flags:0x00004004 [ 257.977747][ T29] Call Trace: [ 257.981125][ T29] [ 257.984073][ T29] __schedule+0x15ae/0x4660 [ 257.988803][ T29] ? mark_lock+0x94/0x320 [ 257.993170][ T29] ? asan.module_dtor+0x20/0x20 [ 257.998120][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 258.003167][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 258.009125][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 258.014337][ T29] schedule+0xbd/0x170 [ 258.018574][ T29] io_schedule+0x80/0xd0 [ 258.022840][ T29] bit_wait_io+0x11/0xd0 [ 258.027099][ T29] __wait_on_bit+0x9f/0x2c0 [ 258.031673][ T29] ? bit_wait+0xd0/0xd0 [ 258.035839][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 258.041524][ T29] ? bit_wait+0xd0/0xd0 [ 258.045716][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 258.050559][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 258.056119][ T29] ? bit_waitqueue+0x30/0x30 [ 258.060798][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 258.066021][ T29] do_get_write_access+0x5c9/0xe00 [ 258.071363][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 258.077382][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 258.083632][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 258.089843][ T29] ? __might_sleep+0xe0/0xe0 [ 258.094437][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 258.100089][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 258.105584][ T29] ext4_dirty_inode+0xcb/0x110 [ 258.110448][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 258.116322][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 258.121499][ T29] file_update_time+0x187/0x1a0 [ 258.126381][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 258.131495][ T29] ? filemap_fault+0x103c/0x1540 [ 258.136476][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 258.142310][ T29] ? pte_alloc_one+0x3b6/0x540 [ 258.147146][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 258.153707][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 258.159432][ T29] do_page_mkwrite+0x153/0x3f0 [ 258.164235][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 258.169257][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 258.174244][ T29] ? numa_migrate_prep+0x350/0x350 [ 258.179452][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 258.184759][ T29] do_user_addr_fault+0x736/0x12d0 [ 258.189999][ T29] exc_page_fault+0x64/0x100 [ 258.194641][ T29] asm_exc_page_fault+0x26/0x30 [ 258.199543][ T29] RIP: 0033:0x7f81e3872809 [ 258.203992][ T29] RSP: 002b:00007ffd416d2730 EFLAGS: 00010202 [ 258.210148][ T29] RAX: 0000001b2db24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 258.218219][ T29] RDX: 0000001b2db23ffc RSI: 00000000005ffde8 RDI: 00007f81e4755700 [ 258.226226][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f81e3c12000 [ 258.234424][ T29] R10: 00007f81e4755700 R11: 0000000000000000 R12: 0000000000000000 [ 258.242588][ T29] R13: 0000000000011292 R14: ffffffff8132149a R15: 00007f81e4755720 [ 258.250658][ T29] ? switch_fpu_return+0xaa/0x180 [ 258.255723][ T29] [ 258.258990][ T29] [ 258.258990][ T29] Showing all locks held in the system: [ 258.267095][ T29] 4 locks held by kworker/u4:1/12: [ 258.272384][ T29] #0: ffff888141a75938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 258.283712][ T29] #1: ffffc90000117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 258.296341][ T29] #2: ffff888020c840e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 258.307000][ T29] #3: ffff888020c86c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 258.317642][ T29] 1 lock held by khungtaskd/29: [ 258.322544][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 258.332573][ T29] 2 locks held by getty/5529: [ 258.337237][ T29] #0: ffff88823bda68a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 258.347047][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 258.357223][ T29] 3 locks held by syz-executor/5759: [ 258.363108][ T29] #0: ffff88802e2e60a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 258.373538][ T29] #1: ffff888020c84510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 258.383377][ T29] #2: ffff88814df50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 258.393245][ T29] 3 locks held by syz.1.154/6272: [ 258.398351][ T29] #0: ffff88807d0781a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 258.408413][ T29] #1: ffff888020c84510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 258.418351][ T29] #2: ffff88814df50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 258.428181][ T29] 3 locks held by syz.0.163/6294: [ 258.433228][ T29] #0: ffff88807b383120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 258.443281][ T29] #1: ffff888020c84510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 258.453180][ T29] #2: ffff88814df50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 258.462955][ T29] 3 locks held by syz.2.165/6300: [ 258.469864][ T29] #0: ffff88801f38ea20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 258.480250][ T29] #1: ffff888020c84510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 258.490116][ T29] #2: ffff88814df50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 258.500307][ T29] 3 locks held by syz.3.166/6303: [ 258.505335][ T29] #0: ffff88801f38c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 258.515331][ T29] #1: ffff888020c84510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 258.525162][ T29] #2: ffff88814df50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 258.534925][ T29] [ 258.537256][ T29] ============================================= [ 258.537256][ T29] [ 258.545731][ T29] NMI backtrace for cpu 0 [ 258.550082][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 258.557359][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.567590][ T29] Call Trace: [ 258.570871][ T29] [ 258.573807][ T29] dump_stack_lvl+0x18c/0x250 [ 258.578573][ T29] ? __wake_up_klogd+0xd9/0x100 [ 258.583518][ T29] ? show_regs_print_info+0x20/0x20 [ 258.588715][ T29] ? load_image+0x420/0x420 [ 258.593227][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 258.598168][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 258.604324][ T29] ? load_image+0x420/0x420 [ 258.608825][ T29] ? wq_watchdog_touch+0xef/0x170 [ 258.613855][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 258.619927][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 258.625912][ T29] watchdog+0xf59/0xfa0 [ 258.630068][ T29] ? watchdog+0x1e1/0xfa0 [ 258.634404][ T29] kthread+0x2fa/0x390 [ 258.638478][ T29] ? hungtask_pm_notify+0x50/0x50 [ 258.645156][ T29] ? kthread_blkcg+0xd0/0xd0 [ 258.649740][ T29] ret_from_fork+0x48/0x80 [ 258.654151][ T29] ? kthread_blkcg+0xd0/0xd0 [ 258.658733][ T29] ret_from_fork_asm+0x11/0x20 [ 258.663501][ T29] [ 258.667274][ T29] Sending NMI from CPU 0 to CPUs 1: [ 258.673092][ C1] NMI backtrace for cpu 1 [ 258.673103][ C1] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 258.673117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.673126][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 258.673148][ C1] RIP: 0010:unwind_next_frame+0x757/0x2990 [ 258.673166][ C1] Code: 00 88 1a 45 0f b7 34 24 41 83 e6 0f 4c 89 f7 48 c7 c6 00 09 fa 8c e8 18 cc 4b 00 41 83 fe 05 7f 7b 41 83 fe 03 48 8b 5c 24 20 <0f> 8f e3 00 00 00 41 83 fe 02 0f 84 9e 01 00 00 41 83 fe 03 0f 85 [ 258.673177][ C1] RSP: 0018:ffffc90000b9f5d8 EFLAGS: 00000202 [ 258.673189][ C1] RAX: 0000000000000008 RBX: ffffffff8f1106e4 RCX: 0000000000000003 [ 258.673198][ C1] RDX: ffffffff813bbb18 RSI: ffffffff8cfa0900 RDI: 0000000000000005 [ 258.673208][ C1] RBP: ffffc90000b9f6f8 R08: ffff88801b2f8000 R09: 0000000000000008 [ 258.673218][ C1] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff8f1106e8 [ 258.673226][ C1] R13: ffffc90000b9f6a8 R14: 0000000000000005 R15: dffffc0000000000 [ 258.673236][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 258.673248][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.673258][ C1] CR2: 000055b5249e2168 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 258.673271][ C1] Call Trace: [ 258.673276][ C1] [ 258.673286][ C1] ? worker_thread+0xa5e/0xfe0 [ 258.673305][ C1] ? worker_thread+0xa5e/0xfe0 [ 258.673321][ C1] ? stack_trace_save+0x100/0x100 [ 258.673339][ C1] arch_stack_walk+0x144/0x190 [ 258.673356][ C1] ? worker_thread+0xa5e/0xfe0 [ 258.673374][ C1] stack_trace_save+0xaa/0x100 [ 258.673390][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 258.673462][ C1] ? ieee80211_iface_work+0x7a0/0xc90 [ 258.673481][ C1] ? kthread+0x2fa/0x390 [ 258.673494][ C1] ? ret_from_fork+0x48/0x80 [ 258.673510][ C1] ? ret_from_fork_asm+0x11/0x20 [ 258.673530][ C1] kasan_set_track+0x4e/0x70 [ 258.673545][ C1] ? kasan_set_track+0x4e/0x70 [ 258.673560][ C1] ? kasan_save_free_info+0x28/0x40 [ 258.673578][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 258.673593][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 258.673607][ C1] ? kmem_cache_free+0xf8/0x290 [ 258.673626][ C1] ? ieee80211_iface_work+0x7a0/0xc90 [ 258.673642][ C1] ? cfg80211_wiphy_work+0x228/0x260 [ 258.673658][ C1] ? process_scheduled_works+0xa60/0x1600 [ 258.673674][ C1] ? worker_thread+0xa5e/0xfe0 [ 258.673709][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 258.673728][ C1] ? kmem_cache_free+0xf8/0x290 [ 258.673745][ C1] kasan_save_free_info+0x28/0x40 [ 258.673763][ C1] ____kasan_slab_free+0x126/0x1f0 [ 258.673780][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 258.673796][ C1] ? ieee80211_iface_work+0x7a0/0xc90 [ 258.673812][ C1] kmem_cache_free+0xf8/0x290 [ 258.673834][ C1] ieee80211_iface_work+0x7a0/0xc90 [ 258.673855][ C1] cfg80211_wiphy_work+0x228/0x260 [ 258.673873][ C1] ? process_scheduled_works+0x975/0x1600 [ 258.673891][ C1] process_scheduled_works+0xa60/0x1600 [ 258.673921][ C1] ? worker_attach_to_pool+0x370/0x370 [ 258.673941][ C1] ? assign_work+0x3cc/0x5d0 [ 258.673960][ C1] worker_thread+0xa5e/0xfe0 [ 258.673989][ C1] kthread+0x2fa/0x390 [ 258.674001][ C1] ? pr_cont_work+0x550/0x550 [ 258.674018][ C1] ? kthread_blkcg+0xd0/0xd0 [ 258.674031][ C1] ret_from_fork+0x48/0x80 [ 258.674047][ C1] ? kthread_blkcg+0xd0/0xd0 [ 258.674060][ C1] ret_from_fork_asm+0x11/0x20 [ 258.674084][ C1] [ 258.701420][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 258.701436][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 258.701453][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.701464][ T29] Call Trace: [ 258.701470][ T29] [ 258.701477][ T29] dump_stack_lvl+0x18c/0x250 [ 258.701505][ T29] ? show_regs_print_info+0x20/0x20 [ 258.701525][ T29] ? load_image+0x420/0x420 [ 258.701551][ T29] panic+0x2ca/0x720 [ 258.701577][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 258.701598][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 258.701619][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 258.701643][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 258.701669][ T29] watchdog+0xf98/0xfa0 [ 258.701692][ T29] ? watchdog+0x1e1/0xfa0 [ 258.701717][ T29] kthread+0x2fa/0x390 [ 258.701737][ T29] ? hungtask_pm_notify+0x50/0x50 [ 258.701758][ T29] ? kthread_blkcg+0xd0/0xd0 [ 258.701775][ T29] ret_from_fork+0x48/0x80 [ 258.701794][ T29] ? kthread_blkcg+0xd0/0xd0 [ 258.701811][ T29] ret_from_fork_asm+0x11/0x20 [ 258.701842][ T29] [ 258.705840][ T29] Kernel Offset: disabled [ 259.125453][ T29] Rebooting in 86400 seconds..