last executing test programs: 1m7.15112553s ago: executing program 3 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 1m6.939972608s ago: executing program 3 (id=231): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000040)='nsKcg>', 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m6.742617528s ago: executing program 3 (id=233): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x100) getsockopt$auto(r0, 0x40000000029, 0x10, 0xfffffffffffffffe, 0x0) 1m6.543641896s ago: executing program 3 (id=236): socket(0x2b, 0xa, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c08, 0x0) 1m6.358170207s ago: executing program 3 (id=240): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 1m5.661348012s ago: executing program 3 (id=246): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x23, 0xfffffffffffffffe, 0x0) 1m5.259459744s ago: executing program 32 (id=246): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x23, 0xfffffffffffffffe, 0x0) 2.007770973s ago: executing program 1 (id=1025): r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) exit$auto(0x2) read$auto(r0, 0x0, 0x58b22256) 1.721003652s ago: executing program 4 (id=1029): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc0205647, 0x38) 1.649240664s ago: executing program 2 (id=1032): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000080)=""/27, 0x1b) 1.380597744s ago: executing program 4 (id=1033): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) 1.379972203s ago: executing program 0 (id=1041): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x20000411, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 1.30923865s ago: executing program 2 (id=1034): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) 1.189819036s ago: executing program 4 (id=1035): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f00000034c0)={0x18, r0, 0x711, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4401}, 0x4c848) 977.169761ms ago: executing program 0 (id=1036): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x5, 0x0) setsockopt$auto(r0, 0x0, 0x2a, 0x0, 0x108) 976.990771ms ago: executing program 1 (id=1037): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 924.813867ms ago: executing program 4 (id=1038): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x14) 873.984796ms ago: executing program 1 (id=1039): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) 779.147061ms ago: executing program 0 (id=1040): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) readv$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000000), 0x7}, 0x10) 690.529144ms ago: executing program 2 (id=1042): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 613.25035ms ago: executing program 1 (id=1043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xa}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) 547.228709ms ago: executing program 0 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000000000250c00000018000380140003800200008000000000", @ANYRES32=0x0, @ANYBLOB="04001e801800018014000200776c616e30"], 0x44}}, 0x24048084) 482.128514ms ago: executing program 4 (id=1045): mmap$auto(0x0, 0x400005, 0xdf, 0x400000000009b72, 0x5, 0x8000) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0x12, 0x0, 0x0) 433.182187ms ago: executing program 2 (id=1046): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00') 398.691046ms ago: executing program 1 (id=1047): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 295.609987ms ago: executing program 2 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080) 221.220889ms ago: executing program 0 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r1, 0xb11, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1000) 163.279231ms ago: executing program 1 (id=1050): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x81) 72.699474ms ago: executing program 0 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x6, 0xc4, 0x0, 0x0, @str='@\x00'}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) 380.574µs ago: executing program 4 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, '\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 0s ago: executing program 2 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 89.701543][ T5813] cgroup: Unknown subsys name 'net' [ 89.839970][ T5813] cgroup: Unknown subsys name 'cpuset' [ 89.849536][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.592235][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.432348][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.440749][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.448448][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.466201][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.476593][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.490647][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.499314][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.571275][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.579941][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.595206][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.603317][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.610778][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.618451][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.627832][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.644982][ T5137] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.657982][ T5137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.667445][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.676457][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.684139][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.691966][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.913203][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 95.139749][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.147063][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.154557][ T5822] bridge_slave_0: entered allmulticast mode [ 95.162684][ T5822] bridge_slave_0: entered promiscuous mode [ 95.188707][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.196356][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.203531][ T5822] bridge_slave_1: entered allmulticast mode [ 95.211650][ T5822] bridge_slave_1: entered promiscuous mode [ 95.357863][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.382633][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.444331][ T5822] team0: Port device team_slave_0 added [ 95.471418][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 95.484414][ T5822] team0: Port device team_slave_1 added [ 95.504170][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 95.572253][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.581089][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.608392][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.650966][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.658008][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.684522][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.741196][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 95.815706][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.822915][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.830793][ T5826] bridge_slave_0: entered allmulticast mode [ 95.838202][ T5826] bridge_slave_0: entered promiscuous mode [ 95.898101][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.907733][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.915653][ T5826] bridge_slave_1: entered allmulticast mode [ 95.923088][ T5826] bridge_slave_1: entered promiscuous mode [ 95.967054][ T5822] hsr_slave_0: entered promiscuous mode [ 95.973675][ T5822] hsr_slave_1: entered promiscuous mode [ 96.013183][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.020527][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.027836][ T5827] bridge_slave_0: entered allmulticast mode [ 96.035259][ T5827] bridge_slave_0: entered promiscuous mode [ 96.043298][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.050559][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.057864][ T5827] bridge_slave_1: entered allmulticast mode [ 96.065476][ T5827] bridge_slave_1: entered promiscuous mode [ 96.090664][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.135793][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.240301][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.253300][ T5826] team0: Port device team_slave_0 added [ 96.262462][ T5826] team0: Port device team_slave_1 added [ 96.269533][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.276968][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.284196][ T5835] bridge_slave_0: entered allmulticast mode [ 96.291895][ T5835] bridge_slave_0: entered promiscuous mode [ 96.309403][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.359522][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.367713][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.375841][ T5835] bridge_slave_1: entered allmulticast mode [ 96.383132][ T5835] bridge_slave_1: entered promiscuous mode [ 96.426852][ T5827] team0: Port device team_slave_0 added [ 96.435027][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.442616][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.469368][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.506940][ T5827] team0: Port device team_slave_1 added [ 96.513651][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.520869][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.546898][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.558522][ T5825] Bluetooth: hci0: command tx timeout [ 96.570184][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.623087][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.630320][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.657223][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.670906][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.715845][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.722835][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.724818][ T5825] Bluetooth: hci1: command tx timeout [ 96.757685][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.794906][ T5825] Bluetooth: hci3: command tx timeout [ 96.794979][ T5829] Bluetooth: hci2: command tx timeout [ 96.825741][ T5835] team0: Port device team_slave_0 added [ 96.861096][ T5835] team0: Port device team_slave_1 added [ 96.887761][ T5826] hsr_slave_0: entered promiscuous mode [ 96.894093][ T5826] hsr_slave_1: entered promiscuous mode [ 96.900484][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.908873][ T5826] Cannot create hsr debugfs directory [ 97.001366][ T5827] hsr_slave_0: entered promiscuous mode [ 97.008549][ T5827] hsr_slave_1: entered promiscuous mode [ 97.014641][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.022305][ T5827] Cannot create hsr debugfs directory [ 97.037732][ T10] cfg80211: failed to load regulatory.db [ 97.051800][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.059135][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.085669][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.099434][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.106518][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.137896][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.325411][ T5835] hsr_slave_0: entered promiscuous mode [ 97.331901][ T5835] hsr_slave_1: entered promiscuous mode [ 97.338559][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.346180][ T5835] Cannot create hsr debugfs directory [ 97.380810][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.419178][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.465265][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.509490][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.680283][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.693058][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.707082][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.718940][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.811636][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.846989][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.859260][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.871055][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.970576][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.996263][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.020391][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.045104][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.072011][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.121579][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.141453][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.174766][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.182069][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.206135][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.241314][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.248512][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.260439][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.267625][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.300566][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.307759][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.404954][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.502288][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.543271][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.623416][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.630641][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.638665][ T5829] Bluetooth: hci0: command tx timeout [ 98.644145][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.651361][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.697739][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.727360][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.763113][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.770424][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.795147][ T5829] Bluetooth: hci1: command tx timeout [ 98.809860][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.817095][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.876969][ T5829] Bluetooth: hci3: command tx timeout [ 98.882449][ T5829] Bluetooth: hci2: command tx timeout [ 98.910975][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.019497][ T5822] veth0_vlan: entered promiscuous mode [ 99.074170][ T5822] veth1_vlan: entered promiscuous mode [ 99.113147][ T5826] veth0_vlan: entered promiscuous mode [ 99.172501][ T5826] veth1_vlan: entered promiscuous mode [ 99.240954][ T5822] veth0_macvtap: entered promiscuous mode [ 99.299356][ T5822] veth1_macvtap: entered promiscuous mode [ 99.309859][ T5826] veth0_macvtap: entered promiscuous mode [ 99.327326][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.342060][ T5826] veth1_macvtap: entered promiscuous mode [ 99.392273][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.426769][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.439882][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.452692][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.469133][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.485732][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.496594][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.509635][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.540541][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.550428][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.560154][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.568995][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.582693][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.592158][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.603085][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.612045][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.636340][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.670611][ T5827] veth0_vlan: entered promiscuous mode [ 99.697942][ T5827] veth1_vlan: entered promiscuous mode [ 99.806463][ T5835] veth0_vlan: entered promiscuous mode [ 99.841093][ T5827] veth0_macvtap: entered promiscuous mode [ 99.856309][ T5827] veth1_macvtap: entered promiscuous mode [ 99.878547][ T5835] veth1_vlan: entered promiscuous mode [ 99.893770][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.905673][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.951019][ T1837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.967897][ T1837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.004171][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.015532][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.025453][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.035978][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.048500][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.081501][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.082489][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.099282][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.104854][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.118141][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.128670][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.140018][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.182680][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.192308][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.207599][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.216694][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.243478][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.244081][ T5835] veth0_macvtap: entered promiscuous mode [ 100.262195][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.281255][ T5835] veth1_macvtap: entered promiscuous mode [ 100.297044][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.332354][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.346222][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.356798][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.367503][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.377708][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.388276][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.403866][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.472769][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.491000][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.503902][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.519166][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.529678][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.540546][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.552199][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.634140][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.664840][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.673611][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.702824][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.716064][ T5829] Bluetooth: hci0: command tx timeout [ 100.733457][ T5888] ======================================================= [ 100.733457][ T5888] WARNING: The mand mount option has been deprecated and [ 100.733457][ T5888] and is ignored by this kernel. Remove the mand [ 100.733457][ T5888] option from the mount to silence this warning. [ 100.733457][ T5888] ======================================================= [ 100.776807][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.789816][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.875402][ T5829] Bluetooth: hci1: command tx timeout [ 100.956368][ T5825] Bluetooth: hci3: command tx timeout [ 100.961894][ T5829] Bluetooth: hci2: command tx timeout [ 100.973652][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.973674][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.041841][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.060709][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.202557][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.226588][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.391461][ T30] audit: type=1326 audit(1746269515.607:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.1.21" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efce1f8e969 code=0x0 [ 102.418331][ T5931] Zero length message leads to an empty skb [ 102.795879][ T5829] Bluetooth: hci0: command tx timeout [ 102.956590][ T5829] Bluetooth: hci1: command tx timeout [ 103.035455][ T5829] Bluetooth: hci2: command tx timeout [ 103.041386][ T5825] Bluetooth: hci3: command tx timeout [ 103.670211][ T5972] openvswitch: netlink: Flow key attribute not present in set flow. [ 103.986030][ T5983] netlink: 'syz.2.46': attribute type 11 has an invalid length. [ 104.432485][ T5995] svc: failed to register nfsdv3 RPC service (errno 111). [ 104.448855][ T5995] svc: failed to register nfsaclv3 RPC service (errno 111). [ 104.460574][ T5999] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 104.580955][ T6003] openvswitch: netlink: IP tunnel dst address not specified [ 105.087951][ T6005] QAT: Device 0 not found [ 105.393191][ T6024] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 106.547747][ T6035] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 106.954594][ T6064] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 107.376388][ T6079] tc_dump_action: action bad kind [ 107.665463][ T6086] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 107.908446][ T6093] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 108.811646][ T6127] capability: warning: `syz.0.108' uses 32-bit capabilities (legacy support in use) [ 109.275604][ T6144] misc userio: No port type given on /dev/userio [ 109.494027][ T6150] svc: failed to register nfsdv3 RPC service (errno 111). [ 109.502962][ T6150] svc: failed to register nfsaclv3 RPC service (errno 111). [ 109.671096][ T6158] netlink: 'syz.1.121': attribute type 11 has an invalid length. [ 110.581613][ T30] audit: type=1804 audit(1746269523.797:3): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.137" name="/newroot/34/file0" dev="tmpfs" ino=190 res=1 errno=0 [ 111.087980][ T6202] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[6202] [ 111.714918][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.107766][ T6233] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 112.988014][ T6263] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 113.763573][ T6294] netlink: 'syz.1.184': attribute type 11 has an invalid length. [ 113.772838][ T6294] netlink: 'syz.1.184': attribute type 11 has an invalid length. [ 113.785186][ T6294] netlink: 'syz.1.184': attribute type 11 has an invalid length. [ 114.000018][ T6304] netlink: 'syz.0.189': attribute type 11 has an invalid length. [ 114.024982][ T6304] netlink: 'syz.0.189': attribute type 11 has an invalid length. [ 114.164287][ T6308] ksmbd: Unknown IPC event: 14, ignore. [ 114.269412][ T6312] process 'syz.0.193' launched '/dev/fd/3' with NULL argv: empty string added [ 114.412048][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 114.528582][ T6322] mmap: syz.2.200 (6322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.577262][ T6325] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 114.740081][ T6331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.769135][ T6370] blktrace: Concurrent blktraces are not allowed on loop2 [ 117.390616][ T6420] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 117.968095][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.005644][ T6423] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[6423] [ 118.138636][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.337278][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.485129][ T6434] nfs4: Unknown parameter 'nfsd' [ 118.546073][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.561741][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.251'. [ 118.587066][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.602824][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.624411][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.650162][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.658681][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.939151][ T12] bridge_slave_1: left allmulticast mode [ 118.960882][ T12] bridge_slave_1: left promiscuous mode [ 118.968228][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.076306][ T12] bridge_slave_0: left allmulticast mode [ 119.082430][ T12] bridge_slave_0: left promiscuous mode [ 119.113099][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.119931][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.159989][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.185914][ T12] bond0 (unregistering): Released all slaves [ 120.725409][ T5829] Bluetooth: hci3: command tx timeout [ 120.942383][ T6507] nbd: must specify at least one socket [ 121.467482][ T12] hsr_slave_0: left promiscuous mode [ 121.509602][ T12] hsr_slave_1: left promiscuous mode [ 121.527180][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.542586][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.592606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.618704][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.672646][ T12] veth1_macvtap: left promiscuous mode [ 121.694893][ T12] veth0_macvtap: left promiscuous mode [ 121.701334][ T12] veth1_vlan: left promiscuous mode [ 121.725838][ T12] veth0_vlan: left promiscuous mode [ 122.192077][ T6548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.391354][ T12] team0 (unregistering): Port device team_slave_1 removed [ 122.426615][ T12] team0 (unregistering): Port device team_slave_0 removed [ 122.730963][ T6438] chnl_net:caif_netlink_parms(): no params data found [ 122.795317][ T5829] Bluetooth: hci3: command tx timeout [ 123.108252][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.135072][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.142475][ T6438] bridge_slave_0: entered allmulticast mode [ 123.155834][ T6550] sd 0:0:1:0: PR command failed: 1026 [ 123.163043][ T6550] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 123.170859][ T6550] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 123.182003][ T6438] bridge_slave_0: entered promiscuous mode [ 123.202656][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.225056][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.232394][ T6438] bridge_slave_1: entered allmulticast mode [ 123.277858][ T6438] bridge_slave_1: entered promiscuous mode [ 123.574477][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.658081][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.847042][ T6581] vivid-003: ================= START STATUS ================= [ 123.884387][ T6581] vivid-003: Radio HW Seek Mode: Bounded [ 123.914387][ T6438] team0: Port device team_slave_0 added [ 123.926935][ T6581] vivid-003: Radio Programmable HW Seek: false [ 123.933193][ T6581] vivid-003: RDS Rx I/O Mode: Block I/O [ 123.960054][ T6438] team0: Port device team_slave_1 added [ 123.965884][ T6581] vivid-003: Generate RBDS Instead of RDS: false [ 123.984801][ T6581] vivid-003: RDS Reception: true [ 123.989880][ T6581] vivid-003: RDS Program Type: 0 inactive [ 124.024233][ T6581] vivid-003: RDS PS Name: inactive [ 124.064253][ T6581] vivid-003: RDS Radio Text: inactive [ 124.084869][ T6581] vivid-003: RDS Traffic Announcement: false inactive [ 124.098469][ T6581] vivid-003: RDS Traffic Program: false inactive [ 124.112969][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.116014][ T6581] vivid-003: RDS Music: [ 124.121230][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.159240][ T6581] false inactive [ 124.165569][ T6581] vivid-003: ================== END STATUS ================== [ 124.193998][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.270630][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.295149][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.385484][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.616322][ T6438] hsr_slave_0: entered promiscuous mode [ 124.622965][ T6438] hsr_slave_1: entered promiscuous mode [ 124.651476][ T6438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.664427][ T6438] Cannot create hsr debugfs directory [ 124.875053][ T5829] Bluetooth: hci3: command tx timeout [ 125.698316][ T6438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.733949][ T6438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.766739][ T6438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.812419][ T6438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.060313][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.104280][ T6438] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.135424][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.142620][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.207172][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.214947][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.490977][ T6664] program syz.1.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.879481][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.955501][ T5829] Bluetooth: hci3: command tx timeout [ 127.141469][ T6685] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET) [ 127.831547][ T6438] veth0_vlan: entered promiscuous mode [ 127.862104][ T6438] veth1_vlan: entered promiscuous mode [ 128.007257][ T6438] veth0_macvtap: entered promiscuous mode [ 128.043325][ T6438] veth1_macvtap: entered promiscuous mode [ 128.133662][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.173690][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.224770][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.251163][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.278680][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.318907][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.336389][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.427225][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.446210][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.462562][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.477209][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.488265][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.502362][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.516020][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.570288][ T6438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.607795][ T6438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.635219][ T6438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.648823][ T6438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.946682][ T1837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.971154][ T1837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.073690][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.097909][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.852955][ T6780] CIFS: VFS: Invalid SecurityFlags: [ 132.497399][ T6886] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 134.688762][ T6962] netlink: set zone limit has 8 unknown bytes [ 134.814226][ T6969] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 135.459362][ T6994] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 136.103701][ T7020] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 136.127777][ T7020] netlink: 33 bytes leftover after parsing attributes in process `syz.2.452'. [ 136.676439][ T30] audit: type=1800 audit(1746269549.887:4): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.463" name="discovery_nqn" dev="configfs" ino=11171 res=0 errno=0 [ 137.020391][ T7053] binder: 7052:7053 ioctl c0306201 0 returned -14 [ 138.026034][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.032641][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.878478][ T7126] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 140.943303][ T7190] sd 0:0:1:0: PR command failed: 1026 [ 140.964934][ T7190] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 140.984844][ T7190] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 141.527399][ T7218] vivid-003: ================= START STATUS ================= [ 141.554434][ T7218] vivid-003: Radio HW Seek Mode: Bounded [ 141.586723][ T7218] vivid-003: Radio Programmable HW Seek: false [ 141.605456][ T7218] vivid-003: RDS Rx I/O Mode: Block I/O [ 141.611101][ T7218] vivid-003: Generate RBDS Instead of RDS: false [ 141.637458][ T7218] vivid-003: RDS Reception: true [ 141.648808][ T7218] vivid-003: RDS Program Type: 0 inactive [ 141.663729][ T7218] vivid-003: RDS PS Name: inactive [ 141.673541][ T7223] netlink: 'syz.2.542': attribute type 2 has an invalid length. [ 141.693541][ T7218] vivid-003: RDS Radio Text: inactive [ 141.700906][ T7218] vivid-003: RDS Traffic Announcement: false inactive [ 141.724782][ T7218] vivid-003: RDS Traffic Program: false inactive [ 141.731228][ T7218] vivid-003: RDS Music: false inactive [ 141.764762][ T7218] vivid-003: ================== END STATUS ================== [ 141.858072][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.026590][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.111737][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.270074][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.668505][ T53] bridge_slave_1: left allmulticast mode [ 142.674217][ T53] bridge_slave_1: left promiscuous mode [ 142.725788][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.759815][ T53] bridge_slave_0: left allmulticast mode [ 142.775873][ T53] bridge_slave_0: left promiscuous mode [ 142.781668][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.935206][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.943832][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.957527][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.970934][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.979856][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.265298][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.280984][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.292581][ T53] bond0 (unregistering): Released all slaves [ 144.541742][ T53] hsr_slave_0: left promiscuous mode [ 144.584827][ T53] hsr_slave_1: left promiscuous mode [ 144.595718][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.603152][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.628729][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.664889][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.721621][ T53] veth1_macvtap: left promiscuous mode [ 144.732932][ T53] veth0_macvtap: left promiscuous mode [ 144.742981][ T53] veth1_vlan: left promiscuous mode [ 144.751374][ T53] veth0_vlan: left promiscuous mode [ 145.035035][ T5829] Bluetooth: hci3: command tx timeout [ 145.501240][ T7332] netlink: del zone limit has 4 unknown bytes [ 145.638709][ T7336] openvswitch: netlink: Message has 4 unknown bytes. [ 145.759544][ T53] team0 (unregistering): Port device team_slave_1 removed [ 145.801948][ T53] team0 (unregistering): Port device team_slave_0 removed [ 145.882886][ T7347] aoe: copy from user failed [ 145.887660][ T7347] aoe: could not set interface list: too many interfaces [ 146.291003][ T7251] chnl_net:caif_netlink_parms(): no params data found [ 146.661407][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.706283][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.713629][ T7251] bridge_slave_0: entered allmulticast mode [ 146.737190][ T7251] bridge_slave_0: entered promiscuous mode [ 146.757614][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.793363][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.819457][ T7251] bridge_slave_1: entered allmulticast mode [ 146.841940][ T7251] bridge_slave_1: entered promiscuous mode [ 147.050145][ T7251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.078782][ T7251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.117094][ T5829] Bluetooth: hci3: command tx timeout [ 147.327700][ T7251] team0: Port device team_slave_0 added [ 147.349570][ T7251] team0: Port device team_slave_1 added [ 147.484612][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.512404][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.579268][ T7251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.618508][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.634530][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.729770][ T7251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.003476][ T7251] hsr_slave_0: entered promiscuous mode [ 148.057791][ T7251] hsr_slave_1: entered promiscuous mode [ 148.105223][ T7251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.140730][ T7251] Cannot create hsr debugfs directory [ 148.606688][ T7440] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 149.204836][ T5829] Bluetooth: hci3: command tx timeout [ 149.358794][ T7251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.403619][ T7251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.464899][ T7251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.485032][ T7251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.497612][ T7470] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 149.791821][ T7251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.851542][ T7251] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.886608][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.893841][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.967123][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.974327][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.109850][ T7251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.132758][ T7251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.659632][ T7251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.275328][ T5829] Bluetooth: hci3: command tx timeout [ 151.462966][ T7251] veth0_vlan: entered promiscuous mode [ 151.507483][ T7251] veth1_vlan: entered promiscuous mode [ 151.609727][ T7251] veth0_macvtap: entered promiscuous mode [ 151.666191][ T7251] veth1_macvtap: entered promiscuous mode [ 151.738212][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.784864][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.808662][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.824850][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.874737][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.898746][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.930223][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.981651][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.033984][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.080564][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.107576][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.109160][ T7571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.124734][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.147981][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.178988][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.202841][ T7251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.224722][ T7251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.249878][ T7251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.260269][ T7251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.452090][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.481031][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.586591][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.608919][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.714946][ T7626] netlink: 'syz.4.673': attribute type 1 has an invalid length. [ 155.475386][ T30] audit: type=1804 audit(4294967302.230:5): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.695" name="/newroot/9/file0" dev="tmpfs" ino=63 res=1 errno=0 [ 155.543996][ T30] audit: type=1800 audit(4294967302.230:6): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.695" name="file0" dev="tmpfs" ino=63 res=0 errno=0 [ 156.273816][ T7728] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 156.491099][ T30] audit: type=1800 audit(4294967303.260:7): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.710" name="members" dev="configfs" ino=13813 res=0 errno=0 [ 157.254628][ T7770] netlink: zone id is out of range [ 157.259945][ T7770] netlink: zone id is out of range [ 157.304774][ T7770] netlink: get zone limit has 4 unknown bytes [ 157.551039][ T7782] netlink: 'syz.0.725': attribute type 11 has an invalid length. [ 157.568355][ T7782] netlink: 'syz.0.725': attribute type 11 has an invalid length. [ 157.587144][ T7782] netlink: 'syz.0.725': attribute type 11 has an invalid length. [ 161.322138][ T7932] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 164.240943][ T8045] openvswitch: netlink: Multiple metadata blocks provided [ 165.626063][ T8096] FAULT_INJECTION: forcing a failure. [ 165.626063][ T8096] name failslab, interval 1, probability 0, space 0, times 1 [ 165.664867][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.2.837 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 165.664914][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.664936][ T8096] Call Trace: [ 165.664945][ T8096] [ 165.664961][ T8096] dump_stack_lvl+0x16c/0x1f0 [ 165.665016][ T8096] should_fail_ex+0x512/0x640 [ 165.665059][ T8096] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 165.665099][ T8096] should_failslab+0xc2/0x120 [ 165.665138][ T8096] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 165.665176][ T8096] ? __d_alloc+0x31/0xaa0 [ 165.665214][ T8096] __d_alloc+0x31/0xaa0 [ 165.665251][ T8096] d_alloc_pseudo+0x1c/0xc0 [ 165.665293][ T8096] alloc_file_pseudo+0xcf/0x230 [ 165.665336][ T8096] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 165.665402][ T8096] ? alloc_fd+0x471/0x7d0 [ 165.665459][ T8096] sock_alloc_file+0x50/0x210 [ 165.665500][ T8096] __sys_socket+0x1c0/0x260 [ 165.665558][ T8096] ? __pfx___sys_socket+0x10/0x10 [ 165.665606][ T8096] ? rcu_is_watching+0x12/0xc0 [ 165.665643][ T8096] __x64_sys_socket+0x72/0xb0 [ 165.665686][ T8096] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.665727][ T8096] do_syscall_64+0xcd/0x230 [ 165.665774][ T8096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.665805][ T8096] RIP: 0033:0x7fc281f8e969 [ 165.665830][ T8096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.665860][ T8096] RSP: 002b:00007fc282e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 165.665889][ T8096] RAX: ffffffffffffffda RBX: 00007fc2821b5fa0 RCX: 00007fc281f8e969 [ 165.665909][ T8096] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000011 [ 165.665928][ T8096] RBP: 00007fc282010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 165.665946][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.665963][ T8096] R13: 0000000000000000 R14: 00007fc2821b5fa0 R15: 00007ffd6c84cbc8 [ 165.666002][ T8096] [ 166.299047][ T8108] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.326242][ T8107] sctp: [Deprecated]: syz.1.842 (pid 8107) Use of int in max_burst socket option deprecated. [ 166.326242][ T8107] Use struct sctp_assoc_value instead [ 166.360018][ T8108] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 168.050163][ T8165] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.469329][ T8181] block nbd6: not configured, cannot reconfigure [ 168.997010][ T8202] netlink: set zone limit has 8 unknown bytes [ 169.185961][ T8208] openvswitch: netlink: IP tunnel dst address not specified [ 170.298524][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.349187][ T8249] svc: failed to register nfsdv3 RPC service (errno 111). [ 170.358755][ T8249] svc: failed to register nfsaclv3 RPC service (errno 111). [ 170.379126][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.530802][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.709413][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.062109][ T53] bridge_slave_1: left allmulticast mode [ 171.072713][ T53] bridge_slave_1: left promiscuous mode [ 171.085458][ T8264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.099727][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.162724][ T53] bridge_slave_0: left allmulticast mode [ 171.184972][ T53] bridge_slave_0: left promiscuous mode [ 171.190796][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.253757][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.271923][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.280840][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.308477][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.331813][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.230691][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.241493][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.252491][ T53] bond0 (unregistering): Released all slaves [ 173.364775][ T53] hsr_slave_0: left promiscuous mode [ 173.384331][ T53] hsr_slave_1: left promiscuous mode [ 173.411047][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.411113][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.421114][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.421149][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.435055][ T5829] Bluetooth: hci4: command tx timeout [ 173.467655][ T8344] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 173.477874][ T53] veth1_macvtap: left promiscuous mode [ 173.477969][ T53] veth0_macvtap: left promiscuous mode [ 173.478154][ T53] veth1_vlan: left promiscuous mode [ 173.478293][ T53] veth0_vlan: left promiscuous mode [ 174.353614][ T53] team0 (unregistering): Port device team_slave_1 removed [ 174.404229][ T53] team0 (unregistering): Port device team_slave_0 removed [ 174.982750][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 175.280083][ T8392] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 175.361625][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.374874][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.391461][ T8270] bridge_slave_0: entered allmulticast mode [ 175.418604][ T8270] bridge_slave_0: entered promiscuous mode [ 175.441168][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.450890][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.482901][ T8270] bridge_slave_1: entered allmulticast mode [ 175.515346][ T5829] Bluetooth: hci4: command tx timeout [ 175.522639][ T8270] bridge_slave_1: entered promiscuous mode [ 175.730828][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.777487][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.960625][ T8270] team0: Port device team_slave_0 added [ 176.005960][ T8270] team0: Port device team_slave_1 added [ 176.249829][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.279044][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.320956][ T8420] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 176.342306][ T8270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.391394][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.411542][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.494731][ T8270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.699732][ T8270] hsr_slave_0: entered promiscuous mode [ 176.740445][ T8270] hsr_slave_1: entered promiscuous mode [ 177.302147][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 177.595715][ T5829] Bluetooth: hci4: command tx timeout [ 178.532406][ T8270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.569748][ T8270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.598249][ T8270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.630158][ T8270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.862768][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.897757][ T8507] __vm_enough_memory: pid: 8507, comm: syz.2.998, bytes: 4503599627366400 not enough memory for the allocation [ 178.933971][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.977536][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.984766][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.030925][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.038168][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.047191][ T8510] netlink: ct family unspecified [ 179.182300][ T8270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.676376][ T5829] Bluetooth: hci4: command tx timeout [ 179.715818][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.775249][ T8270] veth0_vlan: entered promiscuous mode [ 179.802310][ T8270] veth1_vlan: entered promiscuous mode [ 179.860905][ T8270] veth0_macvtap: entered promiscuous mode [ 179.873436][ T8270] veth1_macvtap: entered promiscuous mode [ 179.977113][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.004874][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.022936][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.039846][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.054777][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.066680][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.081540][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.158386][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.179864][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.236005][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.271482][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.300685][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.313001][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.329361][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.364220][ T8270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.405036][ T8270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.413804][ T8270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.438238][ T8270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.792772][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.846882][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.000476][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.009005][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.777401][ T8619] vivid-003: ================= START STATUS ================= [ 181.797931][ T8619] vivid-003: Radio HW Seek Mode: Bounded [ 181.811021][ T8619] vivid-003: Radio Programmable HW Seek: false [ 181.824259][ T8619] vivid-003: RDS Rx I/O Mode: Block I/O [ 181.833675][ T8619] vivid-003: Generate RBDS Instead of RDS: false [ 181.841000][ T8619] vivid-003: RDS Reception: true [ 181.846118][ T8619] vivid-003: RDS Program Type: 0 inactive [ 181.853567][ T8619] vivid-003: RDS PS Name: inactive [ 181.860416][ T8619] vivid-003: RDS Radio Text: inactive [ 181.866383][ T8619] vivid-003: RDS Traffic Announcement: false inactive [ 181.873571][ T8619] vivid-003: RDS Traffic Program: false inactive [ 181.892852][ T8619] vivid-003: RDS Music: false inactive [ 181.908968][ T8619] vivid-003: ================== END STATUS ================== [ 199.440914][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.447368][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.880242][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 216.880251][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 260.879323][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.885979][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.084923][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 293.674871][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 322.327665][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.334145][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.114727][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 335.122428][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 335.130199][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.139009][ T31] task:kworker/u8:1 state:D stack:23480 pid:13 tgid:13 ppid:2 task_flags:0x4248060 flags:0x00004000 [ 335.151157][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 335.157291][ T31] Call Trace: [ 335.160614][ T31] [ 335.163592][ T31] __schedule+0x116f/0x5de0 [ 335.168363][ T31] ? blk_mq_flush_plug_list+0x75a/0x1c70 [ 335.174066][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 335.179532][ T31] ? __pfx___schedule+0x10/0x10 [ 335.184411][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 335.190205][ T31] ? find_held_lock+0x2b/0x80 [ 335.195044][ T31] ? schedule+0x2d7/0x3a0 [ 335.199418][ T31] schedule+0xe7/0x3a0 [ 335.204194][ T31] io_schedule+0xbf/0x130 [ 335.208625][ T31] bit_wait_io+0x15/0xe0 [ 335.212923][ T31] __wait_on_bit+0x62/0x180 [ 335.217823][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 335.222819][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 335.228280][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 335.234331][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 335.239927][ T31] do_get_write_access+0x93d/0x12a0 [ 335.245218][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 335.251238][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 335.257441][ T31] ext4_mb_mark_context+0x175/0xd40 [ 335.262697][ T31] ? find_held_lock+0x2b/0x80 [ 335.267566][ T31] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 335.273343][ T31] ext4_mb_mark_diskspace_used+0x466/0x8c0 [ 335.280100][ T31] ? __pfx_ext4_mb_mark_diskspace_used+0x10/0x10 [ 335.286660][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 335.292325][ T31] ? ext4_mb_new_blocks+0x287e/0x4f00 [ 335.297794][ T31] ext4_mb_new_blocks+0xa5b/0x4f00 [ 335.302956][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.308617][ T31] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 335.314223][ T31] ? ext4_ext_search_right+0x2c2/0xb90 [ 335.319798][ T31] ext4_ext_map_blocks+0x1b95/0x5d60 [ 335.325214][ T31] ? stack_trace_save+0x8e/0xc0 [ 335.330108][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 335.335655][ T31] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 335.341338][ T31] ? __kasan_slab_alloc+0x89/0x90 [ 335.346457][ T31] ? ext4_do_writepages+0x1432/0x3490 [ 335.351901][ T31] ? __pfx___might_resched+0x10/0x10 [ 335.357279][ T31] ? __pfx_down_write+0x10/0x10 [ 335.362176][ T31] ? ext4_es_lookup_extent+0xc7/0xc50 [ 335.367677][ T31] ext4_map_blocks+0x45b/0x1390 [ 335.372590][ T31] ? __pfx_ext4_map_blocks+0x10/0x10 [ 335.378044][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 335.384195][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 335.389998][ T31] ext4_do_writepages+0x1a2c/0x3490 [ 335.395368][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 335.400989][ T31] ? ext4_writepages+0x37a/0x7d0 [ 335.406011][ T31] ext4_writepages+0x37a/0x7d0 [ 335.411701][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 335.428130][ T31] ? wb_update_bandwidth+0xa0/0xe0 [ 335.442268][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 335.458939][ T31] do_writepages+0x1b2/0x820 [ 335.466345][ T31] ? __pfx_do_writepages+0x10/0x10 [ 335.476504][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 335.485281][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 335.494580][ T31] __writeback_single_inode+0x160/0xfb0 [ 335.503090][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 335.510383][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 335.515765][ T31] writeback_sb_inodes+0x601/0xf90 [ 335.520939][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 335.526786][ T31] ? _raw_spin_unlock+0x28/0x50 [ 335.531666][ T31] ? move_expired_inodes+0x5a0/0x850 [ 335.537081][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 335.542327][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 335.548214][ T31] ? queue_io+0x3f6/0x520 [ 335.552570][ T31] wb_writeback+0x7f3/0xb70 [ 335.557146][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 335.562211][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 335.567564][ T31] wb_workfn+0x8ca/0xbe0 [ 335.571844][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 335.577743][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 335.582562][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.588255][ T31] process_one_work+0x9cc/0x1b70 [ 335.593258][ T31] ? __pfx_batadv_purge_orig+0x10/0x10 [ 335.599046][ T31] ? __pfx_process_one_work+0x10/0x10 [ 335.604513][ T31] ? assign_work+0x1a0/0x250 [ 335.614687][ T31] worker_thread+0x6c8/0xf10 [ 335.619379][ T31] ? __pfx_worker_thread+0x10/0x10 [ 335.624546][ T31] kthread+0x3c2/0x780 [ 335.629957][ T31] ? __pfx_kthread+0x10/0x10 [ 335.634689][ T31] ? __pfx_kthread+0x10/0x10 [ 335.639436][ T31] ? __pfx_kthread+0x10/0x10 [ 335.644048][ T31] ? __pfx_kthread+0x10/0x10 [ 335.649003][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.653823][ T31] ? __pfx_kthread+0x10/0x10 [ 335.658487][ T31] ret_from_fork+0x45/0x80 [ 335.662957][ T31] ? __pfx_kthread+0x10/0x10 [ 335.667681][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.672520][ T31] [ 335.676163][ T31] INFO: task jbd2/sda1-8:5159 blocked for more than 143 seconds. [ 335.683911][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 335.692002][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.700951][ T31] task:jbd2/sda1-8 state:D stack:26616 pid:5159 tgid:5159 ppid:2 task_flags:0x240040 flags:0x00004000 [ 335.713013][ T31] Call Trace: [ 335.716596][ T31] [ 335.719568][ T31] __schedule+0x116f/0x5de0 [ 335.724107][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 335.729135][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 335.734123][ T31] ? __pfx___schedule+0x10/0x10 [ 335.739094][ T31] ? find_held_lock+0x2b/0x80 [ 335.743821][ T31] ? schedule+0x2d7/0x3a0 [ 335.748254][ T31] schedule+0xe7/0x3a0 [ 335.752377][ T31] io_schedule+0xbf/0x130 [ 335.757238][ T31] bit_wait_io+0x15/0xe0 [ 335.761531][ T31] __wait_on_bit+0x62/0x180 [ 335.766432][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 335.771436][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 335.776875][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 335.782876][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 335.788417][ T31] ? __pfx___might_resched+0x10/0x10 [ 335.794475][ T31] __wait_on_buffer+0x64/0x70 [ 335.799336][ T31] jbd2_journal_commit_transaction+0x382e/0x6830 [ 335.805844][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 335.812584][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 335.819355][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 335.825137][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 335.831147][ T31] ? find_held_lock+0x2b/0x80 [ 335.835990][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 335.841846][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.846694][ T31] kjournald2+0x1f4/0x760 [ 335.851075][ T31] ? __pfx_kjournald2+0x10/0x10 [ 335.856037][ T31] ? find_held_lock+0x2b/0x80 [ 335.860749][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 335.866929][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.872179][ T31] ? __kthread_parkme+0x19e/0x250 [ 335.877306][ T31] ? __pfx_kjournald2+0x10/0x10 [ 335.882236][ T31] kthread+0x3c2/0x780 [ 335.887479][ T31] ? __pfx_kthread+0x10/0x10 [ 335.892969][ T31] ? __pfx_kthread+0x10/0x10 [ 335.897670][ T31] ? __pfx_kthread+0x10/0x10 [ 335.902296][ T31] ? __pfx_kthread+0x10/0x10 [ 335.906988][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.911782][ T31] ? __pfx_kthread+0x10/0x10 [ 335.916655][ T31] ret_from_fork+0x45/0x80 [ 335.921882][ T31] ? __pfx_kthread+0x10/0x10 [ 335.926779][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.931643][ T31] [ 335.934840][ T31] INFO: task syz-executor:5813 blocked for more than 144 seconds. [ 335.942670][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 335.950347][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.959063][ T31] task:syz-executor state:D stack:23112 pid:5813 tgid:5813 ppid:5811 task_flags:0x440100 flags:0x00000002 [ 335.971105][ T31] Call Trace: [ 335.974434][ T31] [ 335.977417][ T31] __schedule+0x116f/0x5de0 [ 335.981967][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 335.987181][ T31] ? __pfx___schedule+0x10/0x10 [ 335.992091][ T31] ? find_held_lock+0x2b/0x80 [ 335.997492][ T31] ? schedule+0x2d7/0x3a0 [ 336.001902][ T31] schedule+0xe7/0x3a0 [ 336.007741][ T31] io_schedule+0xbf/0x130 [ 336.012118][ T31] bit_wait_io+0x15/0xe0 [ 336.016469][ T31] __wait_on_bit+0x62/0x180 [ 336.021880][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 336.027011][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 336.032426][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 336.038566][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 336.044074][ T31] do_get_write_access+0x93d/0x12a0 [ 336.049365][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 336.055455][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 336.061574][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 336.067218][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 336.072724][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 336.078218][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 336.084239][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.089060][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 336.094998][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 336.100477][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 336.106231][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 336.111915][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 336.116923][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 336.122338][ T31] ext4_dirty_inode+0xd9/0x130 [ 336.127514][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.132328][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 336.137474][ T31] generic_update_time+0xcf/0xf0 [ 336.142449][ T31] file_update_time+0x17d/0x1c0 [ 336.147377][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 336.152522][ T31] ? tcp_recvmsg+0x1f9/0x680 [ 336.157274][ T31] ? __pfx_tcp_recvmsg+0x10/0x10 [ 336.162269][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 336.167840][ T31] ? vm_normal_page+0x13b/0x2b0 [ 336.172736][ T31] ? find_held_lock+0x2b/0x80 [ 336.177472][ T31] ? find_held_lock+0x2b/0x80 [ 336.182199][ T31] do_page_mkwrite+0x171/0x380 [ 336.187040][ T31] do_wp_page+0xb9e/0x58e0 [ 336.191525][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 336.196435][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 336.201729][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 336.207396][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 336.212562][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 336.217743][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 336.223238][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 336.228831][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 336.234127][ T31] handle_mm_fault+0x3fe/0xad0 [ 336.239024][ T31] do_user_addr_fault+0x60c/0x1370 [ 336.244190][ T31] exc_page_fault+0x5c/0xc0 [ 336.248769][ T31] asm_exc_page_fault+0x26/0x30 [ 336.253662][ T31] RIP: 0033:0x7f6afb277dcf [ 336.258157][ T31] RSP: 002b:00007ffd634d5080 EFLAGS: 00010202 [ 336.264253][ T31] RAX: 00007f6af92d8000 RBX: 000055558b6c8a70 RCX: 0000000000000005 [ 336.272290][ T31] RDX: 1ffffffff146ff8d RSI: 000055558b6cb240 RDI: 0000000000000020 [ 336.280374][ T31] RBP: 00007ffd634d5370 R08: 000055558b6cb280 R09: 0000000000001ff1 [ 336.288483][ T31] R10: 0000000000000001 R11: 00007ffd634d5580 R12: 00007ffd634d53d0 [ 336.296512][ T31] R13: 0000000000000004 R14: 00007ffd634d50f0 R15: 00007ffd634d51c0 [ 336.304878][ T31] [ 336.307943][ T31] INFO: task syz.1.1050:8675 blocked for more than 144 seconds. [ 336.315842][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 336.323488][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.332484][ T31] task:syz.1.1050 state:D stack:28104 pid:8675 tgid:8675 ppid:5827 task_flags:0x440040 flags:0x00000004 [ 336.344517][ T31] Call Trace: [ 336.347839][ T31] [ 336.350778][ T31] __schedule+0x116f/0x5de0 [ 336.355390][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 336.360401][ T31] ? __pfx___schedule+0x10/0x10 [ 336.365372][ T31] ? find_held_lock+0x2b/0x80 [ 336.370103][ T31] ? schedule+0x2d7/0x3a0 [ 336.374500][ T31] schedule+0xe7/0x3a0 [ 336.378676][ T31] io_schedule+0xbf/0x130 [ 336.383042][ T31] bit_wait_io+0x15/0xe0 [ 336.387370][ T31] __wait_on_bit+0x62/0x180 [ 336.391917][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 336.396921][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 336.402347][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 336.408716][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 336.414233][ T31] do_get_write_access+0x93d/0x12a0 [ 336.419563][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 336.425775][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 336.432216][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 336.437969][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 336.443558][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 336.449010][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 336.455087][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.459885][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 336.465602][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 336.470845][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 336.476735][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 336.482847][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 336.487876][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 336.493273][ T31] ext4_dirty_inode+0xd9/0x130 [ 336.498126][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.502925][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 336.508343][ T31] generic_update_time+0xcf/0xf0 [ 336.513327][ T31] file_update_time+0x17d/0x1c0 [ 336.518257][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 336.523338][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 336.528850][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 336.534968][ T31] ? pte_alloc_one+0x2b1/0x380 [ 336.539785][ T31] do_page_mkwrite+0x171/0x380 [ 336.544567][ T31] do_pte_missing+0x29c/0x3fb0 [ 336.549434][ T31] __handle_mm_fault+0x103d/0x2a40 [ 336.554571][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 336.560094][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 336.565397][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 336.570670][ T31] handle_mm_fault+0x3fe/0xad0 [ 336.575517][ T31] do_user_addr_fault+0x60c/0x1370 [ 336.580668][ T31] exc_page_fault+0x5c/0xc0 [ 336.585325][ T31] asm_exc_page_fault+0x26/0x30 [ 336.590211][ T31] RIP: 0033:0x7efce1e6ea27 [ 336.594713][ T31] RSP: 002b:00007fff9ba315a0 EFLAGS: 00010202 [ 336.600816][ T31] RAX: 0000001b2fb20000 RBX: 00007efce2ce5720 RCX: 0000001b2f720218 [ 336.608831][ T31] RDX: 0000001b2fb1fffc RSI: 00000000003ffde8 RDI: 00007efce2ce5700 [ 336.617340][ T31] RBP: 0000000000000000 R08: 00007efce21b6038 R09: 00007efce21a2000 [ 336.625422][ T31] R10: 00007efce2ce5700 R11: 0000000000000000 R12: 0000000000000000 [ 336.633440][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000002cc [ 336.647420][ T31] [ 336.650491][ T31] INFO: task syz.0.1051:8677 blocked for more than 144 seconds. [ 336.658208][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 336.665909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.674635][ T31] task:syz.0.1051 state:D stack:28792 pid:8677 tgid:8677 ppid:8270 task_flags:0x440040 flags:0x00000004 [ 336.686705][ T31] Call Trace: [ 336.690078][ T31] [ 336.693037][ T31] __schedule+0x116f/0x5de0 [ 336.697635][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 336.702629][ T31] ? __pfx___schedule+0x10/0x10 [ 336.707564][ T31] ? find_held_lock+0x2b/0x80 [ 336.712547][ T31] ? schedule+0x2d7/0x3a0 [ 336.717074][ T31] schedule+0xe7/0x3a0 [ 336.721186][ T31] io_schedule+0xbf/0x130 [ 336.725886][ T31] bit_wait_io+0x15/0xe0 [ 336.730181][ T31] __wait_on_bit+0x62/0x180 [ 336.734760][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 336.739984][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 336.745455][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 336.751495][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 336.757232][ T31] do_get_write_access+0x93d/0x12a0 [ 336.762485][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 336.768551][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 336.774728][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 336.780346][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 336.785900][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 336.791339][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 336.797617][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.802541][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 336.808284][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 336.813536][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 336.819567][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 336.825327][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 336.830307][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 336.835757][ T31] ext4_dirty_inode+0xd9/0x130 [ 336.840829][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.845689][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 336.850753][ T31] generic_update_time+0xcf/0xf0 [ 336.855759][ T31] file_update_time+0x17d/0x1c0 [ 336.860640][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 336.865956][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 336.871453][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 336.877164][ T31] ? pte_alloc_one+0x2b1/0x380 [ 336.881969][ T31] do_page_mkwrite+0x171/0x380 [ 336.886822][ T31] do_pte_missing+0x29c/0x3fb0 [ 336.891622][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 336.901646][ T31] ? __pmd_alloc+0x3c2/0x870 [ 336.911699][ T31] __handle_mm_fault+0x103d/0x2a40 [ 336.925267][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 336.937433][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 336.946319][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 336.954188][ T31] handle_mm_fault+0x3fe/0xad0 [ 336.959925][ T31] do_user_addr_fault+0x60c/0x1370 [ 336.965549][ T31] exc_page_fault+0x5c/0xc0 [ 336.971911][ T31] asm_exc_page_fault+0x26/0x30 [ 336.977041][ T31] RIP: 0033:0x7fab18c6547b [ 336.981492][ T31] RSP: 002b:00007ffe049aa480 EFLAGS: 00010246 [ 336.987630][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 336.995709][ T31] RDX: 0000001b2f620000 RSI: 0000000000400000 RDI: 00007fab18e98d50 [ 337.003705][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 337.011762][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.020171][ T31] R13: 00000000000927c0 R14: 000000000002cb7c R15: 00007ffe049aa730 [ 337.028254][ T31] [ 337.031303][ T31] INFO: task syz.4.1052:8678 blocked for more than 145 seconds. [ 337.039471][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 337.047494][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.056242][ T31] task:syz.4.1052 state:D stack:28632 pid:8678 tgid:8678 ppid:7251 task_flags:0x440040 flags:0x00000004 [ 337.068285][ T31] Call Trace: [ 337.071601][ T31] [ 337.074564][ T31] __schedule+0x116f/0x5de0 [ 337.079173][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 337.084139][ T31] ? __pfx___schedule+0x10/0x10 [ 337.089292][ T31] ? find_held_lock+0x2b/0x80 [ 337.094011][ T31] ? schedule+0x2d7/0x3a0 [ 337.098431][ T31] schedule+0xe7/0x3a0 [ 337.102543][ T31] io_schedule+0xbf/0x130 [ 337.106955][ T31] bit_wait_io+0x15/0xe0 [ 337.111250][ T31] __wait_on_bit+0x62/0x180 [ 337.115811][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 337.120792][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 337.126615][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 337.132661][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 337.138229][ T31] do_get_write_access+0x93d/0x12a0 [ 337.143482][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 337.149855][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 337.156123][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 337.161715][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 337.167247][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 337.172667][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 337.178717][ T31] ? rcu_is_watching+0x12/0xc0 [ 337.183516][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 337.189339][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 337.194846][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 337.200547][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 337.206303][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 337.211290][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 337.216767][ T31] ext4_dirty_inode+0xd9/0x130 [ 337.221559][ T31] ? rcu_is_watching+0x12/0xc0 [ 337.226685][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 337.231757][ T31] generic_update_time+0xcf/0xf0 [ 337.236770][ T31] file_update_time+0x17d/0x1c0 [ 337.241660][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 337.246788][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 337.252644][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 337.258216][ T31] ? pte_alloc_one+0x2b1/0x380 [ 337.263063][ T31] do_page_mkwrite+0x171/0x380 [ 337.267956][ T31] do_pte_missing+0x29c/0x3fb0 [ 337.272764][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 337.278123][ T31] ? __pmd_alloc+0x3c2/0x870 [ 337.282835][ T31] __handle_mm_fault+0x103d/0x2a40 [ 337.288038][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 337.293582][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 337.298888][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 337.304170][ T31] handle_mm_fault+0x3fe/0xad0 [ 337.309312][ T31] do_user_addr_fault+0x60c/0x1370 [ 337.314477][ T31] exc_page_fault+0x5c/0xc0 [ 337.319071][ T31] asm_exc_page_fault+0x26/0x30 [ 337.323964][ T31] RIP: 0033:0x7fa33f86547b [ 337.328874][ T31] RSP: 002b:00007ffdd30d7c10 EFLAGS: 00010246 [ 337.335023][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 337.343030][ T31] RDX: 0000001b2f720000 RSI: 0000000000600000 RDI: 00007fa33fa98d50 [ 337.351093][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 337.359500][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.367595][ T31] R13: 00000000000927c0 R14: 000000000002cb7c R15: 00007ffdd30d7ec0 [ 337.375644][ T31] [ 337.378688][ T31] INFO: task syz.2.1053:8681 blocked for more than 145 seconds. [ 337.386408][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 337.394064][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.402819][ T31] task:syz.2.1053 state:D stack:27272 pid:8681 tgid:8681 ppid:5826 task_flags:0x440040 flags:0x00000004 [ 337.415023][ T31] Call Trace: [ 337.418318][ T31] [ 337.421259][ T31] __schedule+0x116f/0x5de0 [ 337.425880][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 337.431218][ T31] ? __pfx___schedule+0x10/0x10 [ 337.436308][ T31] ? find_held_lock+0x2b/0x80 [ 337.441027][ T31] ? schedule+0x2d7/0x3a0 [ 337.445434][ T31] schedule+0xe7/0x3a0 [ 337.449546][ T31] io_schedule+0xbf/0x130 [ 337.453894][ T31] bit_wait_io+0x15/0xe0 [ 337.458569][ T31] __wait_on_bit+0x62/0x180 [ 337.463132][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 337.468156][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 337.473572][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 337.479651][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 337.485220][ T31] do_get_write_access+0x93d/0x12a0 [ 337.490487][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 337.496796][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 337.502929][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 337.508573][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 337.514081][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 337.519527][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 337.525844][ T31] ? rcu_is_watching+0x12/0xc0 [ 337.530968][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 337.536709][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 337.541949][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 337.547664][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 337.553341][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 337.558657][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 337.564062][ T31] ext4_dirty_inode+0xd9/0x130 [ 337.568903][ T31] ? rcu_is_watching+0x12/0xc0 [ 337.573719][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 337.578804][ T31] generic_update_time+0xcf/0xf0 [ 337.583777][ T31] file_update_time+0x17d/0x1c0 [ 337.588695][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 337.593760][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 337.599277][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 337.604835][ T31] ? pte_alloc_one+0x2b1/0x380 [ 337.609653][ T31] do_page_mkwrite+0x171/0x380 [ 337.614459][ T31] do_pte_missing+0x29c/0x3fb0 [ 337.619311][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 337.624575][ T31] ? __pmd_alloc+0x3c2/0x870 [ 337.629366][ T31] __handle_mm_fault+0x103d/0x2a40 [ 337.635086][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 337.640598][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 337.645894][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 337.651147][ T31] handle_mm_fault+0x3fe/0xad0 [ 337.655980][ T31] do_user_addr_fault+0x60c/0x1370 [ 337.661351][ T31] exc_page_fault+0x5c/0xc0 [ 337.666158][ T31] asm_exc_page_fault+0x26/0x30 [ 337.671055][ T31] RIP: 0033:0x7fc281e6547b [ 337.690026][ T31] RSP: 002b:00007ffd6c84cd30 EFLAGS: 00010246 [ 337.696562][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 337.709369][ T31] RDX: 0000001b2f820000 RSI: 0000000000400000 RDI: 00007fc282098d50 [ 337.718839][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 337.730589][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.742721][ T31] R13: 00000000000927c0 R14: 000000000002cbb0 R15: 00007ffd6c84cfe0 [ 337.756905][ T31] [ 337.760072][ T31] [ 337.760072][ T31] Showing all locks held in the system: [ 337.777486][ T31] 6 locks held by kworker/u8:1/13: [ 337.782643][ T31] #0: ffff88801c6f3148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 337.794936][ T31] #1: ffffc90000127d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 337.809816][ T31] #2: ffff888033d800e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 337.823248][ T31] #3: ffff888033d82b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 337.841876][ T31] #4: ffff888033d84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 337.853859][ T31] #5: ffff88806f9d8cb0 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 337.869742][ T31] 3 locks held by kworker/1:0/24: [ 337.876267][ T31] 1 lock held by khungtaskd/31: [ 337.881146][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 337.894664][ T31] 2 locks held by kworker/u8:4/81: [ 337.899841][ T31] 2 locks held by getty/5581: [ 337.904542][ T31] #0: ffff8880355d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 337.921500][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 337.934888][ T31] 3 locks held by syz-executor/5813: [ 337.942754][ T31] #0: ffff88806ff1abc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 337.959509][ T31] #1: ffff888033d80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 337.972744][ T31] #2: ffff888033d84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 337.986527][ T31] 3 locks held by syz.1.1050/8675: [ 337.991687][ T31] #0: ffff88805e290a88 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 338.003653][ T31] #1: ffff888033d80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 338.016999][ T31] #2: ffff888033d84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 338.027827][ T31] 3 locks held by syz.0.1051/8677: [ 338.032968][ T31] #0: ffff888070b2dbc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 338.043156][ T31] #1: ffff888033d80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 338.052817][ T31] #2: ffff888033d84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 338.062503][ T31] 3 locks held by syz.4.1052/8678: [ 338.067673][ T31] #0: ffff888033365bc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 338.077491][ T31] #1: ffff888033d80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 338.087382][ T31] #2: ffff888033d84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 338.097161][ T31] 3 locks held by syz.2.1053/8681: [ 338.102306][ T31] #0: ffff88806c9ab448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 338.111948][ T31] #1: ffff888033d80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 338.121582][ T31] #2: ffff888033d84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 338.131285][ T31] [ 338.133631][ T31] ============================================= [ 338.133631][ T31] [ 338.142121][ T31] NMI backtrace for cpu 1 [ 338.142147][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 338.142195][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 338.142212][ T31] Call Trace: [ 338.142222][ T31] [ 338.142233][ T31] dump_stack_lvl+0x116/0x1f0 [ 338.142278][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 338.142311][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.142361][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 338.142399][ T31] watchdog+0xf70/0x12c0 [ 338.142504][ T31] ? __pfx_watchdog+0x10/0x10 [ 338.142543][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 338.142586][ T31] ? __kthread_parkme+0x19e/0x250 [ 338.142625][ T31] ? __pfx_watchdog+0x10/0x10 [ 338.142668][ T31] kthread+0x3c2/0x780 [ 338.142714][ T31] ? __pfx_kthread+0x10/0x10 [ 338.142756][ T31] ? __pfx_kthread+0x10/0x10 [ 338.142800][ T31] ? __pfx_kthread+0x10/0x10 [ 338.142852][ T31] ? __pfx_kthread+0x10/0x10 [ 338.142892][ T31] ? rcu_is_watching+0x12/0xc0 [ 338.142920][ T31] ? __pfx_kthread+0x10/0x10 [ 338.142963][ T31] ret_from_fork+0x45/0x80 [ 338.143008][ T31] ? __pfx_kthread+0x10/0x10 [ 338.143051][ T31] ret_from_fork_asm+0x1a/0x30 [ 338.143113][ T31] [ 338.143124][ T31] Sending NMI from CPU 1 to CPUs 0: [ 338.276097][ C0] NMI backtrace for cpu 0 [ 338.276115][ C0] CPU: 0 UID: 0 PID: 81 Comm: kworker/u8:4 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 338.276153][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 338.276188][ C0] Workqueue: bat_events batadv_nc_worker [ 338.276220][ C0] RIP: 0010:__lock_acquire+0x44/0x1ba0 [ 338.276254][ C0] Code: c9 ed 0e 44 89 04 24 4c 8b bc 24 a8 00 00 00 65 48 8b 05 77 b9 0b 12 48 89 44 24 68 31 c0 45 85 d2 0f 84 d0 06 00 00 48 8b 07 <49> 89 fb 48 3d 00 fb a9 93 0f 84 be 06 00 00 45 89 cc 44 8b 0d 83 [ 338.276277][ C0] RSP: 0018:ffffc9000154f960 EFLAGS: 00000002 [ 338.276306][ C0] RAX: ffffffff9afd9760 RBX: ffff88807a9d5b58 RCX: 0000000000000000 [ 338.276320][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a9d5b58 [ 338.276334][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 338.276347][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 338.276359][ C0] R13: 0000000000000000 R14: ffff88801d3c9e00 R15: 0000000000000000 [ 338.276373][ C0] FS: 0000000000000000(0000) GS:ffff8881249ec000(0000) knlGS:0000000000000000 [ 338.276394][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.276408][ C0] CR2: 000056454b333600 CR3: 000000000e180000 CR4: 00000000003526f0 [ 338.276431][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.276444][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.276458][ C0] Call Trace: [ 338.276464][ C0] [ 338.276479][ C0] lock_acquire+0x179/0x350 [ 338.276507][ C0] ? batadv_nc_purge_paths+0xd9/0x3a0 [ 338.276536][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 338.276566][ C0] _raw_spin_lock_bh+0x33/0x40 [ 338.276591][ C0] ? batadv_nc_purge_paths+0xd9/0x3a0 [ 338.276616][ C0] batadv_nc_purge_paths+0xd9/0x3a0 [ 338.276646][ C0] batadv_nc_worker+0x958/0x1030 [ 338.276673][ C0] ? try_to_wake_up+0x157/0x1680 [ 338.276695][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 338.276725][ C0] ? rcu_is_watching+0x12/0xc0 [ 338.276747][ C0] process_one_work+0x9cc/0x1b70 [ 338.276787][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 338.276825][ C0] ? __pfx_process_one_work+0x10/0x10 [ 338.276863][ C0] ? assign_work+0x1a0/0x250 [ 338.276895][ C0] worker_thread+0x6c8/0xf10 [ 338.276934][ C0] ? __kthread_parkme+0x19e/0x250 [ 338.276961][ C0] ? __pfx_worker_thread+0x10/0x10 [ 338.276995][ C0] kthread+0x3c2/0x780 [ 338.277026][ C0] ? __pfx_kthread+0x10/0x10 [ 338.277057][ C0] ? __pfx_kthread+0x10/0x10 [ 338.277086][ C0] ? __pfx_kthread+0x10/0x10 [ 338.277117][ C0] ? __pfx_kthread+0x10/0x10 [ 338.277147][ C0] ? rcu_is_watching+0x12/0xc0 [ 338.277168][ C0] ? __pfx_kthread+0x10/0x10 [ 338.277199][ C0] ret_from_fork+0x45/0x80 [ 338.277234][ C0] ? __pfx_kthread+0x10/0x10 [ 338.277265][ C0] ret_from_fork_asm+0x1a/0x30 [ 338.277304][ C0] [ 338.278315][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 338.569683][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 338.581510][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 338.591584][ T31] Call Trace: [ 338.594887][ T31] [ 338.597828][ T31] dump_stack_lvl+0x3d/0x1f0 [ 338.602452][ T31] panic+0x71c/0x800 [ 338.606376][ T31] ? __pfx_panic+0x10/0x10 [ 338.610826][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 338.616240][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.622254][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 338.627660][ T31] ? watchdog+0xdda/0x12c0 [ 338.632103][ T31] ? watchdog+0xdcd/0x12c0 [ 338.636563][ T31] watchdog+0xdeb/0x12c0 [ 338.641147][ T31] ? __pfx_watchdog+0x10/0x10 [ 338.647722][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 338.659686][ T31] ? __kthread_parkme+0x19e/0x250 [ 338.669380][ T31] ? __pfx_watchdog+0x10/0x10 [ 338.680802][ T31] kthread+0x3c2/0x780 [ 338.686459][ T31] ? __pfx_kthread+0x10/0x10 [ 338.693056][ T31] ? __pfx_kthread+0x10/0x10 [ 338.698496][ T31] ? __pfx_kthread+0x10/0x10 [ 338.703595][ T31] ? __pfx_kthread+0x10/0x10 [ 338.708674][ T31] ? rcu_is_watching+0x12/0xc0 [ 338.713457][ T31] ? __pfx_kthread+0x10/0x10 [ 338.718091][ T31] ret_from_fork+0x45/0x80 [ 338.722556][ T31] ? __pfx_kthread+0x10/0x10 [ 338.727179][ T31] ret_from_fork_asm+0x1a/0x30 [ 338.732028][ T31] [ 338.735377][ T31] Kernel Offset: disabled [ 338.743460][ T31] Rebooting in 86400 seconds..