last executing test programs: 30.88319805s ago: executing program 4 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000afd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.46628513s ago: executing program 4 (id=106): r0 = io_uring_setup(0x61df, &(0x7f0000000300)={0x0, 0x8d, 0x40, 0x8001002, 0x3d7}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xf3a, 0x0) fcntl$setpipe(r1, 0x407, 0xebea) close_range(r0, 0xffffffffffffffff, 0x0) 30.0334799s ago: executing program 4 (id=112): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 29.767829426s ago: executing program 4 (id=114): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x516, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 28.736085999s ago: executing program 4 (id=121): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x3, 'veth0_to_team\x00', {0x8000}, 0x3ff}) 27.583923906s ago: executing program 4 (id=123): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000280)="8d", 0x1) 27.020312789s ago: executing program 32 (id=123): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000280)="8d", 0x1) 9.949726941s ago: executing program 5 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC=r1], 0xfdef) 9.344351165s ago: executing program 5 (id=212): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 7.777524131s ago: executing program 0 (id=221): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.355285159s ago: executing program 0 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 3.655311506s ago: executing program 0 (id=237): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000ac0)={0x0, 0x3, 0x12, @string={0x12, 0x3, "666db16fa0c5ed6d385cf0d445f3ccd0"}}, 0x0, 0x0}, 0x0) 2.992441711s ago: executing program 1 (id=242): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x3, 0xa, 0xfffffffffffffffb, 0x40, 0x6, 0x6, 0x757, 0x2, 0x6, 0x0, 0x0, 0xee00, 0x0, 0x8bfffffd, 0x223b8fb9}}}, 0x78) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) 2.62564493s ago: executing program 2 (id=244): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.504917092s ago: executing program 3 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r2, 0x101, 0x2, 0x8, {{0x19}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x60}]}]}, 0x24}}, 0x0) 2.395052704s ago: executing program 2 (id=246): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) setgroups(0x40d6, &(0x7f00000000c0)=[0x0, 0x0]) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 2.207280769s ago: executing program 3 (id=247): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f00000001c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.17214212s ago: executing program 5 (id=248): r0 = getpid() syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 1.985288834s ago: executing program 1 (id=249): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 1.892272526s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="0200", 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)="00000080", 0x4, 0x0) 1.840308387s ago: executing program 2 (id=251): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="0201140098dc18000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="75e0aa83463e746c9153d700991d10dead1065b19f8e68d138da89b5fa55ce294609b0e83cfe2cd6d80a91298b5fc7aa6b894495ebc794"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 1.475936926s ago: executing program 2 (id=252): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020) 1.454379676s ago: executing program 3 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x4, 0x80000000000000, 0xe, 0x4, 0x101000, 0x0, 0x1002, 0x1, 0x3, 0x83, 0x2, 0x6, 0x8bda, 0xfffebffffffffefe, 0x3fb, 0xffffffffffffffff], 0x24fff, 0xc4a57}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.453514176s ago: executing program 1 (id=254): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x1, 0x20000000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.444508366s ago: executing program 5 (id=255): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.065149845s ago: executing program 0 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1.037494306s ago: executing program 1 (id=257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)="04c9498e6b718d1482cabcd20c57fcce064eb617077d1c2f0b544b96d26701497766f542a6e98afd8dbeb1e29229132a52d2717bf85a5a74926b70d66961be378424e2457ee98943672f9de2b24f5a736fc3a73aff079571fd8a84afbc632f9463154293388cafef428132fa5c311b99df93386680bf34c520a9b224d816d83d8b", 0x81}], 0x1}}], 0x1, 0x20000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x82, 0x0, &(0x7f0000000200)) 942.571498ms ago: executing program 5 (id=258): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)='8', 0x1}], 0x1}}], 0x1, 0xc080) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 722.975133ms ago: executing program 0 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001540), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 692.696094ms ago: executing program 1 (id=260): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000030400000000fcdbdf2500007400", @ANYRES32=r1], 0x54}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 457.138519ms ago: executing program 2 (id=261): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 392.674261ms ago: executing program 3 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x0, 0x4, 0xfe, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 299.094963ms ago: executing program 0 (id=263): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000140)=""/97) 279.592183ms ago: executing program 5 (id=264): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf4ff7f0000eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2c7}, 0x8) 132.212207ms ago: executing program 3 (id=265): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000400)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x80000425}, {0xff}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd}, {0x3}, @note={0x81}}], 0x38) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ptrace(0x10, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 119.791097ms ago: executing program 2 (id=266): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 1 (id=267): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000ac0)={0x0, 0x3, 0x12, @string={0x12, 0x3, "666db16fa0c5ed6d385cf0d445f3ccd0"}}, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 75.072546][ T4259] cgroup: Unknown subsys name 'net' [ 75.178230][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.739838][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.890658][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.897390][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.890259][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.890259][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.896045][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.900377][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.911932][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.913821][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.922923][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.930906][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.941632][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.951797][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.962365][ T4293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.964074][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.970705][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.977556][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.988770][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.998879][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.003900][ T4293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.009129][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.016349][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.028321][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.035969][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.043402][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.052353][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.061220][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.068754][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.080056][ T4294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.088841][ T4294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.105516][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.115242][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.122516][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.544963][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 79.717650][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.735989][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.744724][ T4275] device bridge_slave_0 entered promiscuous mode [ 79.754721][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 79.773359][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 79.789269][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.796408][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.804785][ T4275] device bridge_slave_1 entered promiscuous mode [ 79.830573][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 79.853690][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 79.920455][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.944113][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.010256][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.021169][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.029540][ T4274] device bridge_slave_0 entered promiscuous mode [ 80.066390][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.073882][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.085675][ T4274] device bridge_slave_1 entered promiscuous mode [ 80.095641][ T4275] team0: Port device team_slave_0 added [ 80.136460][ T4275] team0: Port device team_slave_1 added [ 80.156462][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.164859][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.173514][ T4272] device bridge_slave_0 entered promiscuous mode [ 80.197268][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.205990][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.216963][ T4283] device bridge_slave_0 entered promiscuous mode [ 80.226597][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.234277][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.244504][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.252791][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.260981][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.269693][ T4272] device bridge_slave_1 entered promiscuous mode [ 80.278749][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.296255][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.303894][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.312463][ T4283] device bridge_slave_1 entered promiscuous mode [ 80.319961][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.327176][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.338834][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.362979][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.373151][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.380432][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.406878][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.433976][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.441087][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.467370][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.508146][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.531740][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.543741][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.559158][ T4274] team0: Port device team_slave_0 added [ 80.568636][ T4274] team0: Port device team_slave_1 added [ 80.576561][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.602328][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.613661][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.642403][ T4275] device hsr_slave_0 entered promiscuous mode [ 80.652487][ T4275] device hsr_slave_1 entered promiscuous mode [ 80.699227][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.706265][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.732985][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.746245][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.753452][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.779752][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.801690][ T4283] team0: Port device team_slave_0 added [ 80.811574][ T4272] team0: Port device team_slave_0 added [ 80.830349][ T4273] team0: Port device team_slave_0 added [ 80.842735][ T4283] team0: Port device team_slave_1 added [ 80.850321][ T4272] team0: Port device team_slave_1 added [ 80.894089][ T4273] team0: Port device team_slave_1 added [ 80.909549][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.916564][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.946539][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.967864][ T4274] device hsr_slave_0 entered promiscuous mode [ 80.975462][ T4274] device hsr_slave_1 entered promiscuous mode [ 80.982666][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.993222][ T4274] Cannot create hsr debugfs directory [ 81.019401][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.026501][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.053626][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.066242][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.074066][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.100298][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.128880][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 81.134176][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.142451][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.168770][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.180924][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.188827][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.215125][ T4295] Bluetooth: hci4: command 0x0409 tx timeout [ 81.218362][ T4295] Bluetooth: hci1: command 0x0409 tx timeout [ 81.223676][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.228361][ T4295] Bluetooth: hci3: command 0x0409 tx timeout [ 81.238660][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 81.269975][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.277120][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.307232][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.406647][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.413790][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.421050][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.428999][ T4273] Cannot create hsr debugfs directory [ 81.440154][ T4283] device hsr_slave_0 entered promiscuous mode [ 81.447038][ T4283] device hsr_slave_1 entered promiscuous mode [ 81.454968][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.463017][ T4283] Cannot create hsr debugfs directory [ 81.501176][ T4272] device hsr_slave_0 entered promiscuous mode [ 81.508513][ T4272] device hsr_slave_1 entered promiscuous mode [ 81.515380][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.523558][ T4272] Cannot create hsr debugfs directory [ 81.877218][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.893559][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.924655][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.944921][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.999997][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.016403][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.033812][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.049015][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.085827][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.113734][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.142532][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.175603][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.236603][ T4283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.269958][ T4283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.282823][ T4283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.322978][ T4283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.344170][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.368445][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.384602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.400957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.410548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.422280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.432500][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.440222][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.450779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.460960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.470435][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.477834][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.486003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.507009][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.532355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.561852][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.578707][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.590021][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.603198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.612076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.620824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.660275][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.674606][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.683504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.697213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.753000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.762198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.773016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.782623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.792240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.802513][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.809737][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.819879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.829147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.838627][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.845792][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.854083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.863573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.876637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.891291][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.907896][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.935582][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.959034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.974480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.984491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.038284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.059527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.080219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.113195][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.133293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.147152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.156683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.166221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.175898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.186633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.195177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.208073][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 83.227012][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.251169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.269377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.278687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.287921][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 83.288541][ T4295] Bluetooth: hci3: command 0x041b tx timeout [ 83.294033][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 83.300480][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 83.313930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.338362][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.345535][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.355390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.371020][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.421749][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.450903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.466833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.485792][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.493013][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.503311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.512753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.521820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.530854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.567299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.584880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.594665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.609812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.624845][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.632083][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.646621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.656112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.670513][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.677924][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.689024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.698570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.729713][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.782923][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.802013][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.816976][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.826097][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.835416][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.844000][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.860010][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.869010][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.885569][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.915252][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.927739][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.946831][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.959847][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.975861][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.001813][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.021714][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.054040][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.078571][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.090261][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.112080][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.139701][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.172439][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.215896][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.251198][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.259276][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.284072][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.353330][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.370102][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.379601][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.386794][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.402337][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.415265][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.429181][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.441943][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.453367][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.460605][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.477101][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.492080][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.527797][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.536064][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.560450][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.576194][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.594120][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.605239][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.648938][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.657261][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.690082][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.706661][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.729206][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.748606][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.791424][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.802699][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.855770][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.879465][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.901486][ T4274] device veth0_vlan entered promiscuous mode [ 84.935744][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.959657][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.987197][ T4274] device veth1_vlan entered promiscuous mode [ 85.077005][ T4274] device veth0_macvtap entered promiscuous mode [ 85.102321][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.118703][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.138158][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.170923][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.200148][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.245414][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.253440][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.289009][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 85.300978][ T4274] device veth1_macvtap entered promiscuous mode [ 85.315382][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.328827][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.337218][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.359093][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.368279][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 85.374372][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 85.381004][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 85.381024][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 85.390960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.402375][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.415314][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.499082][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.513981][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.524496][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.540256][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.555642][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.590399][ T4275] device veth0_vlan entered promiscuous mode [ 85.612361][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.622223][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.632794][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.643323][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.653062][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.663581][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.682198][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.726731][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.736471][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.758421][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.774443][ T4275] device veth1_vlan entered promiscuous mode [ 85.784465][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.793507][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.805608][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.815347][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.824845][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.833933][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.864620][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.877062][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.889290][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.899087][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.913196][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.923921][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.933401][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.943043][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.961326][ T4272] device veth0_vlan entered promiscuous mode [ 85.980907][ T4283] device veth0_vlan entered promiscuous mode [ 86.023655][ T4275] device veth0_macvtap entered promiscuous mode [ 86.032202][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.044475][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.053947][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.063472][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.081192][ T4283] device veth1_vlan entered promiscuous mode [ 86.103694][ T4275] device veth1_macvtap entered promiscuous mode [ 86.121488][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.134943][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.144492][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.157180][ T4272] device veth1_vlan entered promiscuous mode [ 86.223967][ T4273] device veth0_vlan entered promiscuous mode [ 86.247968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.256572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.269670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.278889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.293970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.304123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.315886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.325455][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.337138][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.350849][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.364803][ T4273] device veth1_vlan entered promiscuous mode [ 86.392636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.401446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.411826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.421922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.433186][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.443878][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.456125][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.473859][ T4283] device veth0_macvtap entered promiscuous mode [ 86.493686][ T4283] device veth1_macvtap entered promiscuous mode [ 86.504386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.514849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.524355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.538241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.549602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.585972][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.598898][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.607211][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.621717][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.633214][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.644972][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.659794][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.673844][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.687962][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.698647][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.710372][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.723426][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.734059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.745845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.754542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.765783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.776987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.786301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.816054][ T4272] device veth0_macvtap entered promiscuous mode [ 86.828022][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.836817][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.849868][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.858728][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.881618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.894158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.904752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.921586][ T4272] device veth1_macvtap entered promiscuous mode [ 86.946480][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.956020][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.965235][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.977122][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.989718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.999626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.009677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.024007][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.040012][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.070799][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.080967][ T4273] device veth0_macvtap entered promiscuous mode [ 87.141952][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.167512][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.178748][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.189621][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.199832][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.218332][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.259865][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.280899][ T4273] device veth1_macvtap entered promiscuous mode [ 87.352196][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.361401][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.369132][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 87.383937][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.395150][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.418453][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.429228][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.439692][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.451237][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 87.457983][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 87.459963][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 87.464087][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 87.487569][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.502950][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.534674][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.564459][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.592865][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.626252][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.642602][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.688892][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.713386][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.742600][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.775446][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.813917][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.839579][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.854420][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.888509][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.921383][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.931230][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.966454][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.990919][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.003810][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016412][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.040893][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.074819][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.094001][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.115268][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.132189][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.145579][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.162258][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.176500][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.196456][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.245236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.263095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.300789][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.311582][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.321449][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.332025][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.341316][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.365964][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.403745][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.416221][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.442270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.453111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.556504][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.587552][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.622448][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.638501][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.707817][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.718688][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.769984][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.822772][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.870134][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.917786][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.942211][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.005409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.020910][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.039304][ T4384] ======================================================= [ 89.039304][ T4384] WARNING: The mand mount option has been deprecated and [ 89.039304][ T4384] and is ignored by this kernel. Remove the mand [ 89.039304][ T4384] option from the mount to silence this warning. [ 89.039304][ T4384] ======================================================= [ 89.075405][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.092043][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.107500][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.116673][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.172514][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.234349][ T4384] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.246861][ T4388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.463529][ T4398] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 89.667233][ T4402] loop4: detected capacity change from 0 to 512 [ 89.703819][ T4402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.750279][ T4402] EXT4-fs: inline encryption not supported [ 90.090451][ T4412] loop1: detected capacity change from 0 to 2048 [ 90.158098][ T4412] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 90.227520][ T4412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.345827][ T4402] EXT4-fs: Conflicting test_dummy_encryption options [ 90.543353][ T4402] loop4: detected capacity change from 0 to 2048 [ 90.580233][ T4402] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 90.664084][ T4402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.907625][ T4431] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 91.380970][ T4448] loop2: detected capacity change from 0 to 128 [ 91.444663][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.523654][ T4448] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.543499][ T4451] loop3: detected capacity change from 0 to 2048 [ 91.559410][ T4451] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 91.580397][ T4451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.686762][ T26] audit: type=1800 audit(1786717296.454:2): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.30" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 91.777545][ T4323] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.896033][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 91.982056][ T4323] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 92.005444][ T4323] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 92.055770][ T4323] usb 1-1: config 220 has no interface number 2 [ 92.096786][ T4323] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 92.140892][ T4323] usb 1-1: config 220 interface 0 has no altsetting 0 [ 92.187397][ T4323] usb 1-1: config 220 interface 76 has no altsetting 0 [ 92.194624][ T4323] usb 1-1: config 220 interface 1 has no altsetting 0 [ 92.242778][ T4323] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 92.270853][ T7] cfg80211: failed to load regulatory.db [ 92.277827][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.286024][ T4323] usb 1-1: Product: syz [ 92.317449][ T4323] usb 1-1: Manufacturer: syz [ 92.328078][ T4323] usb 1-1: SerialNumber: syz [ 93.271696][ T4494] loop4: detected capacity change from 0 to 2048 [ 93.341122][ T4471] loop1: detected capacity change from 0 to 32768 [ 93.388293][ T4494] Alternate GPT is invalid, using primary GPT. [ 93.420725][ T4494] loop4: p2 p3 p7 [ 93.454514][ T4323] usb 1-1: selecting invalid altsetting 0 [ 93.467261][ T4467] loop2: detected capacity change from 0 to 40427 [ 93.492752][ T4323] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 93.506084][ T4323] usb 1-1: No valid video chain found. [ 93.512216][ T4467] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 93.544199][ T4467] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 93.584635][ T4323] usb 1-1: selecting invalid altsetting 0 [ 93.625960][ T4323] usbtest: probe of 1-1:220.1 failed with error -22 [ 93.636241][ T4467] F2FS-fs (loop2): invalid crc value [ 93.655536][ T26] audit: type=1800 audit(1786717298.424:3): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.37" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 93.743226][ T4467] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.787695][ T4323] usb 1-1: USB disconnect, device number 2 [ 94.062217][ T4467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.167169][ T4512] loop4: detected capacity change from 0 to 512 [ 94.187410][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 94.194034][ T4378] udevd[4378]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.254628][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 94.409214][ T26] audit: type=1800 audit(1786717299.184:4): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.35" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 94.499416][ T4467] syz.2.35: attempt to access beyond end of device [ 94.499416][ T4467] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 94.792773][ T4274] syz-executor: attempt to access beyond end of device [ 94.792773][ T4274] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 94.875069][ T26] audit: type=1326 audit(1786717299.644:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18d5d9e0d9 code=0x0 [ 95.075066][ T4535] loop4: detected capacity change from 0 to 64 [ 95.246300][ T4537] Illegal XDP return value 709711961 on prog (id 3) dev syz_tun, expect packet loss! [ 95.748164][ T4549] loop3: detected capacity change from 0 to 512 [ 95.836512][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.858901][ T4549] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.002563][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 96.407867][ T4325] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.439514][ T4572] loop4: detected capacity change from 0 to 8 [ 96.456703][ T4572] squashfs image failed sanity check [ 96.492426][ T4378] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.599568][ T4325] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 96.610210][ T4325] usb 3-1: config 0 has no interface number 0 [ 96.616561][ T4325] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 96.666430][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.706625][ T4325] usb 3-1: config 0 descriptor?? [ 96.733984][ T4325] cp210x 3-1:0.148: cp210x converter detected [ 96.758050][ T4579] capability: warning: `syz.4.71' uses deprecated v2 capabilities in a way that may be insecure [ 97.117639][ T4323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.131721][ T4325] cp210x 3-1:0.148: failed to get vendor val 0x000e size 3: -32 [ 97.307509][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 97.319153][ T4323] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 97.328663][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.336887][ T4323] usb 2-1: Product: syz [ 97.341977][ T4323] usb 2-1: Manufacturer: syz [ 97.346669][ T4323] usb 2-1: SerialNumber: syz [ 97.353340][ T4325] cp210x 3-1:0.148: GPIO initialisation failed: -19 [ 97.362941][ T4323] r8152-cfgselector 2-1: config 0 descriptor?? [ 97.381396][ T4325] usb 3-1: cp210x converter now attached to ttyUSB0 [ 97.567452][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.575392][ T4325] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.609833][ T4323] r8152-cfgselector 2-1: Needed 2 retries to read version [ 97.653669][ T7] usb 3-1: USB disconnect, device number 2 [ 97.666608][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 97.683927][ T7] cp210x 3-1:0.148: device disconnected [ 97.768040][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 97.775150][ T4327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.784591][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.797297][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.797482][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 97.815563][ T4325] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.827297][ T4325] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.840816][ T4323] r8152-cfgselector 2-1: Unknown version 0x0000 [ 97.847475][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.858901][ T4323] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 97.867275][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.877459][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.887624][ T4325] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 97.905089][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.920959][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.938503][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.949744][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.003671][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 98.017600][ T4327] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.027770][ T4327] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.038112][ T4327] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.048697][ T4327] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 98.058535][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.066715][ T4327] usb 4-1: Product: syz [ 98.071098][ T4327] usb 4-1: Manufacturer: syz [ 98.075887][ T4327] usb 4-1: SerialNumber: syz [ 98.083883][ T4327] usb 4-1: config 0 descriptor?? [ 98.170336][ T27] usb 5-1: usb_control_msg returned -32 [ 98.176037][ T27] usbtmc 5-1:16.0: can't read capabilities [ 98.456445][ T4593] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 98.456490][ T27] usb 5-1: USB disconnect, device number 2 [ 98.500274][ T4327] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 98.523803][ T4602] device netdevsim0 entered promiscuous mode [ 98.536456][ T4602] device netdevsim0 left promiscuous mode [ 98.568974][ T4603] device netdevsim0 entered promiscuous mode [ 98.577075][ T4603] device netdevsim0 left promiscuous mode [ 98.629471][ T4603] Zero length message leads to an empty skb [ 99.451825][ T4611] loop4: detected capacity change from 0 to 1024 [ 99.635678][ T4605] loop1: detected capacity change from 0 to 131072 [ 99.654629][ T4327] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 99.685366][ T4325] gud 1-1:1.0: USB-1: Failed to add properties (ret=-5) [ 99.694651][ T4325] gud 1-1:1.0: Failed to get connectors (error=-5) [ 99.704930][ T4325] gud: probe of 1-1:1.0 failed with error -5 [ 99.718606][ T4611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.739160][ T4611] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.763514][ T4605] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.829978][ T4605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.888801][ T4610] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.84: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.922317][ T4325] usb 4-1: USB disconnect, device number 2 [ 99.936714][ T4327] usb 1-1: USB disconnect, device number 3 [ 99.979142][ T4610] EXT4-fs (loop4): Remounting filesystem read-only [ 99.986071][ T4610] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.84: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.000867][ T4610] EXT4-fs (loop4): Remounting filesystem read-only [ 100.041799][ T4611] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.84: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.089318][ T4611] EXT4-fs (loop4): Remounting filesystem read-only [ 100.220409][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 100.797063][ T4632] loop4: detected capacity change from 0 to 16 [ 100.893412][ T4632] erofs: (device loop4): mounted with root inode @ nid 36. [ 101.082398][ T4634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.142684][ T4632] overlayfs: failed to resolve './file0': -2 [ 101.157768][ T4638] netlink: 144 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.167648][ T4637] loop1: detected capacity change from 0 to 128 [ 101.219113][ T4637] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 101.251728][ T4637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.750847][ T4650] loop2: detected capacity change from 0 to 128 [ 101.772212][ T4650] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.814684][ T4650] hpfs: filesystem error: improperly stopped [ 101.850019][ T4650] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.895730][ T4650] hpfs: You really don't want any checks? You are crazy... [ 101.924960][ T4650] hpfs: Code page index out of array [ 101.946030][ T4650] hpfs: code page support is disabled [ 101.973304][ T4650] hpfs: hpfs_map_4sectors(): unaligned read [ 101.999622][ T4650] hpfs: hpfs_map_4sectors(): unaligned read [ 102.022370][ T4650] hpfs: filesystem error: unable to find root dir [ 102.393523][ T4662] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.596889][ T4667] loop1: detected capacity change from 0 to 4096 [ 102.657590][ T4667] NILFS (loop1): invalid segment: Checksum error in segment payload [ 102.698554][ T4667] NILFS (loop1): trying rollback from an earlier position [ 102.806392][ T4667] NILFS (loop1): recovery complete [ 102.859452][ T4676] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.138700][ T4667] NILFS (loop1): nilfs_sufile_do_free: segment 13 is already clean [ 103.240979][ T4684] device syzkaller1 entered promiscuous mode [ 103.530545][ T4692] loop4: detected capacity change from 0 to 512 [ 103.677492][ T4692] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.114: iget: bad i_size value: 38620345925642 [ 103.722999][ T4692] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.114: couldn't read orphan inode 15 (err -117) [ 103.787102][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.800324][ T4681] loop0: detected capacity change from 0 to 32768 [ 103.845237][ T4681] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.108 (4681) [ 103.948209][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.001340][ T4681] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.017190][ T4681] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 104.057827][ T4681] BTRFS info (device loop0): turning on sync discard [ 104.079704][ T4681] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.082997][ T4701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.114: bg 0: block 5: invalid block bitmap [ 104.119400][ T4681] BTRFS info (device loop0): use zstd compression, level 3 [ 104.147712][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 104.152871][ T4681] BTRFS info (device loop0): turning on async discard [ 104.164484][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 104.187838][ T4681] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 104.214169][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.220205][ T4681] BTRFS info (device loop0): trying to use backup root at mount time [ 104.266522][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.307494][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.338122][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.381021][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.390445][ T4681] BTRFS info (device loop0): enabling auto defrag [ 104.396999][ T4681] BTRFS info (device loop0): using free space tree [ 104.457550][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.734286][ T7] usb 2-1: usb_control_msg returned -32 [ 104.740704][ T7] usbtmc 2-1:16.0: can't read capabilities [ 104.784643][ T47] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 104.882432][ T4681] BTRFS error (device loop0): failed to load root extent [ 104.910654][ T4681] BTRFS warning (device loop0): try to load backup roots slot 1 [ 104.978388][ T4336] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 105.045501][ T4681] BTRFS warning (device loop0): couldn't read tree root [ 105.053521][ T4681] BTRFS warning (device loop0): try to load backup roots slot 2 [ 105.083989][ T7] usb 2-1: USB disconnect, device number 3 [ 105.108029][ T4681] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 105.186548][ T4681] BTRFS warning (device loop0): couldn't read tree root [ 105.211588][ T4681] BTRFS warning (device loop0): try to load backup roots slot 3 [ 105.247344][ C1] sched: RT throttling activated [ 105.284747][ T4681] BTRFS info (device loop0): enabling ssd optimizations [ 105.302235][ T4681] BTRFS info (device loop0): rebuilding free space tree [ 105.364259][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 105.380156][ T4707] loop2: detected capacity change from 0 to 131072 [ 105.407584][ T4707] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 105.415925][ T4707] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.428191][ T4707] F2FS-fs (loop2): invalid crc value [ 105.466196][ T4707] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.536725][ T4707] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.544059][ T4707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 105.589321][ T4336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.661658][ T4681] BTRFS info (device loop0): checking UUID tree [ 105.789722][ T4336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.939086][ T4336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.091100][ T4336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.974524][ T4272] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.497833][ T4750] use of bytesused == 0 is deprecated and will be removed in the future, [ 107.506871][ T4750] use the actual size instead. [ 107.552623][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.563549][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.574605][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.595304][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.605011][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.637466][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.557474][ T4103] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.760453][ T4103] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 108.787692][ T4103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.832434][ T4103] usb 4-1: Product: syz [ 108.857638][ T4103] usb 4-1: Manufacturer: syz [ 108.882802][ T4103] usb 4-1: SerialNumber: syz [ 108.897873][ T4103] usb 4-1: config 0 descriptor?? [ 108.947878][ T4103] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 108.996929][ T4797] device sit0 entered promiscuous mode [ 109.049189][ T4797] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 109.070569][ T4797] netlink: 1 bytes leftover after parsing attributes in process `syz.0.139'. [ 109.202174][ T4801] loop2: detected capacity change from 0 to 512 [ 109.246193][ T4801] EXT4-fs (loop2): Test dummy encryption mode enabled [ 109.286540][ T4801] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.316693][ T4801] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.383930][ T4801] EXT4-fs (loop2): 1 truncate cleaned up [ 109.405984][ T4801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.580782][ T4103] i2c i2c-1: failure reading functionality [ 109.610420][ T4103] i2c i2c-1: connected i2c-tiny-usb device [ 109.665775][ T4103] usb 4-1: USB disconnect, device number 3 [ 109.687558][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 109.768907][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 110.036337][ T4753] chnl_net:caif_netlink_parms(): no params data found [ 110.222283][ T4336] device hsr_slave_0 left promiscuous mode [ 110.291143][ T4336] device hsr_slave_1 left promiscuous mode [ 110.309503][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.365213][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.395572][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.412898][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.449591][ T4834] loop1: detected capacity change from 0 to 2048 [ 110.468335][ T4336] device bridge_slave_1 left promiscuous mode [ 110.484460][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.524650][ T4834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.545170][ T4336] device bridge_slave_0 left promiscuous mode [ 110.555278][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.718843][ T4336] device veth1_macvtap left promiscuous mode [ 110.725895][ T4336] device veth0_macvtap left promiscuous mode [ 110.768079][ T4336] device veth1_vlan left promiscuous mode [ 110.803942][ T4336] device veth0_vlan left promiscuous mode [ 110.852421][ T4842] loop3: detected capacity change from 0 to 256 [ 110.926589][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 110.949170][ T4842] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.777643][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 112.054264][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 112.115984][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 112.166084][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.218470][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.592196][ T4336] bond0 (unregistering): Released all slaves [ 112.992803][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.048687][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.081654][ T4753] device bridge_slave_0 entered promiscuous mode [ 113.101914][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.148119][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.203901][ T4753] device bridge_slave_1 entered promiscuous mode [ 113.314588][ T4753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.376795][ T4753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.469015][ T4878] loop1: detected capacity change from 0 to 1024 [ 113.511983][ T4753] team0: Port device team_slave_0 added [ 113.519156][ T4878] EXT4-fs: Ignoring removed orlov option [ 113.539298][ T4753] team0: Port device team_slave_1 added [ 113.628577][ T4878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.659655][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.667684][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.694169][ T4753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.720450][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.730050][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.792177][ T4753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.847642][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 114.041881][ T4753] device hsr_slave_0 entered promiscuous mode [ 114.109181][ T4753] device hsr_slave_1 entered promiscuous mode [ 114.284107][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 114.400768][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 114.437576][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 114.495739][ T4896] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.505293][ T4896] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.514218][ T4896] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.523016][ T4896] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.718223][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 114.727119][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 115.172217][ T4917] jffs2: notice: (4917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.194876][ T4753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.258699][ T4753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.346072][ T4753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.378901][ T4753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.531935][ T4894] loop2: detected capacity change from 0 to 32768 [ 115.740567][ T4753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.793879][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.824446][ T4894] JBD2: Ignoring recovery information on journal [ 115.855271][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.930099][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 115.955077][ T4753] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.001376][ T4894] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.023979][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.057981][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.098517][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.105754][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.158024][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.208603][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.224502][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.245835][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.253504][ T4840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.316059][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.351494][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.391729][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.422082][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.445940][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.472355][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.516244][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.526884][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.548894][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.562484][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.583808][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.690260][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.779168][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 116.814315][ T4948] input: syz0 as /devices/virtual/input/input5 [ 117.179764][ T4953] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004ÿÿ [ 117.460290][ T4940] loop0: detected capacity change from 0 to 32768 [ 117.553579][ T4940] JBD2: Ignoring recovery information on journal [ 117.670608][ T4940] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.782798][ T4940] (syz.0.178,4940,1):ocfs2_file_write_iter:2446 ERROR: status = -27 [ 117.872185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.894653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.915944][ T4753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.036430][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 118.965932][ T4996] loop1: detected capacity change from 0 to 512 [ 119.029710][ T4996] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.106698][ T4996] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.190: inode has both inline data and extents flags [ 119.140758][ T4996] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.190: couldn't read orphan inode 15 (err -117) [ 119.201614][ T4996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.432401][ T4996] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 119.544097][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.574055][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.666846][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.711742][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.747075][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.798582][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.811964][ T4753] device veth0_vlan entered promiscuous mode [ 119.855308][ T4753] device veth1_vlan entered promiscuous mode [ 119.954102][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.973992][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.003945][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.080676][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.102272][ T4753] device veth0_macvtap entered promiscuous mode [ 120.142727][ T4753] device veth1_macvtap entered promiscuous mode [ 120.150104][ T4996] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 120.246889][ T5020] gadgetfs: bound to dummy_udc driver [ 120.276358][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.296747][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.347409][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.392935][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.427546][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.459530][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.527736][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.564791][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.593539][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.601167][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 120.669380][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.702832][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.731076][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.793591][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.888642][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.920970][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.963226][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.010122][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.044498][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.087066][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.097398][ T4324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.127396][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.147405][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.169642][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.177159][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.194305][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.288219][ T4324] usb 3-1: Using ep0 maxpacket: 16 [ 121.295902][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.309521][ T4753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.338101][ T4753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.348286][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.387416][ T4753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.406300][ T4324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.428896][ T4753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.447878][ T4324] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.484103][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.506753][ T4324] usb 3-1: config 0 descriptor?? [ 121.896131][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.920575][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.952699][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 121.965182][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.980978][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.000142][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.021290][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.032941][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.042734][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.056058][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.080527][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.098003][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.105994][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.120792][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.131188][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.142568][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.153831][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.164195][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.182326][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.190594][ T4324] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 122.263351][ T4324] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input6 [ 122.315874][ T4324] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 122.389774][ T4324] usb 3-1: USB disconnect, device number 3 [ 122.424575][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.848835][ T5059] fido_id[5059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 122.905687][ T5068] netlink: 1404 bytes leftover after parsing attributes in process `syz.0.203'. [ 123.535517][ T5091] loop2: detected capacity change from 0 to 256 [ 123.727486][ T4103] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.132283][ T4103] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.162245][ T4103] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 124.176546][ T4103] usb 2-1: can't read configurations, error -71 [ 124.221257][ T4763] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.523691][ T5107] loop0: detected capacity change from 0 to 32768 [ 124.542924][ T5107] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.214 (5107) [ 124.562785][ T5107] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.573573][ T5107] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 124.582371][ T5107] BTRFS info (device loop0): setting nodatacow, compression disabled [ 124.590770][ T5107] BTRFS info (device loop0): setting datasum, datacow enabled [ 124.598453][ T5107] BTRFS info (device loop0): force clearing of disk cache [ 124.605631][ T5107] BTRFS info (device loop0): enabling ssd optimizations [ 124.612854][ T5107] BTRFS info (device loop0): using spread ssd allocation scheme [ 124.621037][ T5107] BTRFS info (device loop0): turning on sync discard [ 124.628602][ T5107] BTRFS info (device loop0): turning off barriers [ 124.635525][ T5107] BTRFS info (device loop0): setting nodatacow, compression disabled [ 124.643833][ T5107] BTRFS info (device loop0): not using ssd optimizations [ 124.651038][ T5107] BTRFS info (device loop0): not using spread ssd allocation scheme [ 124.659160][ T5107] BTRFS info (device loop0): using free space tree [ 124.695114][ T4763] usb 6-1: unable to get BOS descriptor or descriptor too short [ 124.727649][ T4763] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.793001][ T4763] usb 6-1: string descriptor 0 read error: -22 [ 124.814117][ T4763] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 124.834529][ T4763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.914558][ T5107] BTRFS info (device loop0): rebuilding free space tree [ 125.119249][ T5107] BTRFS info (device loop0): scrub: started on devid 1 [ 125.152952][ T5107] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 125.533726][ T4272] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.567659][ T4324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.766398][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 125.785048][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.815403][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.825707][ T4324] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.835040][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.864708][ T5159] loop1: detected capacity change from 0 to 128 [ 125.899557][ T4324] usb 3-1: config 0 descriptor?? [ 125.910164][ T4324] hub 3-1:0.0: USB hub found [ 125.934744][ T5159] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.991685][ T5159] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.119112][ T4324] hub 3-1:0.0: 1 port detected [ 126.397900][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 126.626474][ T4378] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop0 scanned by udevd (4378) [ 126.647792][ T4763] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.768728][ T4324] hub 3-1:0.0: activate --> -90 [ 126.842474][ T4763] usb 1-1: Using ep0 maxpacket: 8 [ 126.858035][ T4763] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 126.883483][ T5181] device bridge1 entered promiscuous mode [ 126.897381][ T4763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.915941][ T4763] usb 1-1: Product: syz [ 126.927946][ T4763] usb 1-1: Manufacturer: syz [ 126.940469][ T4763] usb 1-1: SerialNumber: syz [ 126.981298][ T4763] usb 1-1: config 0 descriptor?? [ 127.031919][ T4763] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 127.182403][ T4278] usb 3-1: USB disconnect, device number 4 [ 127.254373][ T5189] loop1: detected capacity change from 0 to 512 [ 127.320862][ T5189] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.393749][ T5189] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.229: bad orphan inode 13 [ 127.436861][ T5189] ext4_test_bit(bit=12, block=18) = 1 [ 127.443230][ T5189] is_bad_inode(inode)=0 [ 127.456490][ T5189] NEXT_ORPHAN(inode)=0 [ 127.461561][ T5189] max_ino=32 [ 127.464852][ T5189] i_nlink=1 [ 127.468695][ T5189] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.624915][ T5189] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 127.725872][ T5195] Bluetooth: MGMT ver 1.22 [ 127.744742][ T5189] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.229: bg 0: block 248: padding at end of block bitmap is not set [ 127.805862][ T5189] Quota error (device loop1): write_blk: dquota write failed [ 127.856841][ T5189] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 127.907060][ T5189] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.229: Failed to acquire dquot type 1 [ 127.912913][ T5196] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 127.968322][ T5196] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 127.997736][ T5196] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.229: Failed to acquire dquot type 1 [ 128.134915][ T5203] loop3: detected capacity change from 0 to 512 [ 128.182749][ T5203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.221965][ T4763] gspca_sonixj: reg_w1 err -71 [ 128.262221][ T5203] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.278422][ T4763] sonixj: probe of 1-1:0.0 failed with error -71 [ 128.297987][ T4763] usb 1-1: USB disconnect, device number 4 [ 128.317120][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 128.357931][ T5203] EXT4-fs (loop3): 1 truncate cleaned up [ 128.363664][ T5203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.374818][ T4336] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 128.408423][ T4336] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 128.576381][ T5208] loop1: detected capacity change from 0 to 512 [ 128.612711][ T5208] EXT4-fs: inline encryption not supported [ 128.636642][ T5208] EXT4-fs: Ignoring removed i_version option [ 128.674256][ T5208] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 128.674477][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 129.254933][ T5208] EXT4-fs (loop1): failed to open journal device unknown-block(11,127) -6 [ 129.857574][ T5163] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.070147][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.084454][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.114135][ T5163] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.144744][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.180548][ T5163] usb 1-1: config 0 descriptor?? [ 130.811999][ T5163] usb 1-1: language id specifier not provided by device, defaulting to English [ 130.825040][ T5099] usb 6-1: 1:1: usb_set_interface failed (-110) [ 130.841470][ T5099] snd-usb-audio 6-1:1.0: Runtime PM usage count underflow! [ 130.856324][ T5099] snd-usb-audio 6-1:1.2: Runtime PM usage count underflow! [ 130.875770][ T4278] usb 6-1: USB disconnect, device number 2 [ 131.222476][ T5163] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input7 [ 131.343091][ T5163] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input8 [ 131.387434][ T5163] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input9 [ 131.435208][ T5163] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input10 [ 131.531174][ T5163] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 131.569145][ T5163] usb 1-1: USB disconnect, device number 5 [ 131.845158][ T5286] netlink: 14 bytes leftover after parsing attributes in process `syz.2.252'. [ 132.576715][ T5296] fido_id[5296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 132.622077][ T5304] overlayfs: failed to create directory ./file0/work (errno: 17); mounting read-only [ 132.687712][ T5304] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 133.328165][ T4278] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.397550][ T4322] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.467612][ T4763] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.519375][ T4278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.537403][ T4278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.547240][ T4278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.587438][ T4278] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.587936][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 133.596733][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.612008][ T4278] usb 1-1: config 0 descriptor?? [ 133.634010][ T4322] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 133.645338][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.653618][ T4322] usb 3-1: Product: syz [ 133.658312][ T4322] usb 3-1: Manufacturer: syz [ 133.663468][ T4322] usb 3-1: SerialNumber: syz [ 133.672247][ T4763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.685935][ T4763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.697641][ T4322] usb 3-1: config 0 descriptor?? [ 133.705155][ T4763] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 133.707920][ T4322] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 133.724222][ T4763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.751085][ T4763] usb 2-1: config 0 descriptor?? [ 134.035122][ T4278] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 134.048635][ T4278] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 134.378108][ T4763] usb 2-1: language id specifier not provided by device, defaulting to English [ 134.805767][ T4763] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input11 [ 134.904920][ T4763] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input12 [ 134.945916][ T4763] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input13 [ 134.986983][ T4763] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input14 [ 135.018153][ T4763] uclogic 0003:256C:006D.0004: input,hiddev1,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 135.228407][ T4322] gspca_sonixj: reg_w1 err -110 [ 135.287562][ T4322] sonixj: probe of 3-1:0.0 failed with error -110 [ 135.527963][ T4755] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 135.697550][ T4755] usb 1-1: device descriptor read/64, error -32 [ 135.967442][ T4755] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 136.007432][ T4278] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 136.117490][ T4755] usb 1-1: device descriptor read/64, error -32 [ 136.389229][ T4755] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 136.428969][ T4755] usb 1-1: device descriptor read/8, error -32 [ 136.707983][ T4755] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 136.737875][ T4755] usb 1-1: device descriptor read/8, error -32 [ 136.862095][ T4322] usb 1-1: USB disconnect, device number 6 [ 137.027569][ T4322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.187579][ T4322] usb 1-1: device descriptor read/64, error -32 [ 137.457584][ T4322] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.607715][ T4322] usb 1-1: device descriptor read/64, error -32 [ 137.727708][ T4322] usb usb1-port1: attempt power cycle [ 138.137622][ T4322] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.180302][ T4322] usb 1-1: device descriptor read/8, error -32 [ 138.330403][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.337686][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.457513][ T4322] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.487949][ T4322] usb 1-1: device descriptor read/8, error -32 [ 138.607792][ T4322] usb usb1-port1: unable to enumerate USB device [ 141.207585][ T4278] usb 2-1: device descriptor read/64, error -110 [ 141.487475][ T4278] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 141.657775][ T4278] usb 2-1: device descriptor read/64, error -32 [ 141.937569][ T4278] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 141.976493][ T4278] usb 2-1: device descriptor read/8, error -32 [ 142.257589][ T4278] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 142.320954][ T4278] usb 2-1: device descriptor read/8, error -32 [ 142.444946][ T4324] usb 2-1: USB disconnect, device number 6 [ 142.667757][ T4324] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.837523][ T4324] usb 2-1: device descriptor read/64, error -32 [ 143.117647][ T4324] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.287700][ T4324] usb 2-1: device descriptor read/64, error -32 [ 143.417738][ T4324] usb usb2-port1: attempt power cycle [ 143.837756][ T4324] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.877735][ T4324] usb 2-1: device descriptor read/8, error -32 [ 144.167802][ T4324] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.229711][ T4324] usb 2-1: device descriptor read/8, error -32 [ 144.347776][ T4324] usb usb2-port1: unable to enumerate USB device [ 199.781588][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.791964][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.847527][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 201.847958][ T4295] Bluetooth: hci0: command 0x0406 tx timeout [ 201.853632][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 201.859725][ T4295] Bluetooth: hci4: command 0x0406 tx timeout [ 232.567570][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 261.209581][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.216017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.767632][ T28] INFO: task syz-executor:4259 blocked for more than 143 seconds. [ 279.775738][ T28] Not tainted syzkaller #0 [ 279.781296][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.790515][ T28] task:syz-executor state:D stack:22032 pid:4259 ppid:4258 flags:0x00004002 [ 279.801177][ T28] Call Trace: [ 279.804503][ T28] [ 279.808106][ T28] __schedule+0x107f/0x4030 [ 279.812723][ T28] ? mark_lock+0x94/0x320 [ 279.817103][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 279.823302][ T28] ? __sched_text_start+0x8/0x8 [ 279.828497][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 279.834450][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 279.840839][ T28] schedule+0xb9/0x180 [ 279.844998][ T28] io_schedule+0x7c/0xd0 [ 279.849706][ T28] bit_wait_io+0xd/0xc0 [ 279.853919][ T28] __wait_on_bit+0x9b/0x2c0 [ 279.858810][ T28] ? bit_wait+0xc0/0xc0 [ 279.863629][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 279.869597][ T28] ? bit_wait+0xc0/0xc0 [ 279.873813][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 279.879192][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 279.884260][ T28] ? bit_waitqueue+0x30/0x30 [ 279.889212][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 279.894509][ T28] do_get_write_access+0x605/0xf20 [ 279.900014][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 279.906046][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 279.912596][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 279.919065][ T28] ? rcu_is_watching+0x11/0xa0 [ 279.923900][ T28] ext4_reserve_inode_write+0x201/0x290 [ 279.930080][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 279.935620][ T28] ext4_dirty_inode+0xbf/0x100 [ 279.940762][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 279.946619][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 279.952587][ T28] __file_update_time+0x21d/0x240 [ 279.957922][ T28] file_update_time+0x2f3/0x370 [ 279.962826][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 279.969355][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 279.974895][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 279.980295][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 279.986586][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 279.992663][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 279.998003][ T28] do_page_mkwrite+0x16b/0x5c0 [ 280.002854][ T28] wp_page_shared+0x167/0x370 [ 280.007726][ T28] handle_mm_fault+0x1b1b/0x3d40 [ 280.012733][ T28] ? mt_find+0x157/0x830 [ 280.017082][ T28] ? numa_migrate_prep+0x250/0x250 [ 280.022368][ T28] ? lock_chain_count+0x20/0x20 [ 280.027365][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 280.032711][ T28] do_user_addr_fault+0x58e/0xb20 [ 280.038039][ T28] exc_page_fault+0x60/0x100 [ 280.042679][ T28] ? clear_bhb_loop+0x60/0xb0 [ 280.047654][ T28] asm_exc_page_fault+0x22/0x30 [ 280.052568][ T28] RIP: 0033:0x7f0a5527c662 [ 280.057057][ T28] RSP: 002b:00007ffce2993420 EFLAGS: 00010202 [ 280.063263][ T28] RAX: 00007f0a5309c000 RBX: 00005555895a2b10 RCX: 0000000000000004 [ 280.071993][ T28] RDX: 0000000000002903 RSI: 00005555895ad518 RDI: 0000000000000010 [ 280.080125][ T28] RBP: 00007ffce2993920 R08: 00005555895ad568 R09: 000000000000008d [ 280.088340][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffce2993760 [ 280.096479][ T28] R13: 00007ffce2993550 R14: 585858582e7a7973 R15: 00007ffce29934a0 [ 280.105302][ T28] [ 280.108449][ T28] INFO: task syz.0.263:5315 blocked for more than 143 seconds. [ 280.116016][ T28] Not tainted syzkaller #0 [ 280.121164][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.130110][ T28] task:syz.0.263 state:D stack:26288 pid:5315 ppid:4272 flags:0x00004004 [ 280.139437][ T28] Call Trace: [ 280.142750][ T28] [ 280.145709][ T28] __schedule+0x107f/0x4030 [ 280.150322][ T28] ? mark_lock+0x94/0x320 [ 280.154710][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 280.159864][ T28] ? __sched_text_start+0x8/0x8 [ 280.164786][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 280.171412][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 280.177136][ T28] schedule+0xb9/0x180 [ 280.181408][ T28] io_schedule+0x7c/0xd0 [ 280.185713][ T28] bit_wait_io+0xd/0xc0 [ 280.190133][ T28] __wait_on_bit+0x9b/0x2c0 [ 280.194739][ T28] ? bit_wait+0xc0/0xc0 [ 280.199202][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 280.204736][ T28] ? bit_wait+0xc0/0xc0 [ 280.209292][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 280.214114][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 280.219271][ T28] ? bit_waitqueue+0x30/0x30 [ 280.224115][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 280.230266][ T28] do_get_write_access+0x605/0xf20 [ 280.235570][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 280.241689][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 280.248715][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 280.254996][ T28] ? rcu_is_watching+0x11/0xa0 [ 280.261037][ T28] ext4_reserve_inode_write+0x201/0x290 [ 280.266675][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 280.273394][ T28] ext4_dirty_inode+0xbf/0x100 [ 280.278430][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 280.284374][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 280.289626][ T28] __file_update_time+0x21d/0x240 [ 280.294715][ T28] file_update_time+0x2f3/0x370 [ 280.299751][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 280.305121][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 280.310652][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 280.315771][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 280.322163][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 280.327538][ T28] ? put_page+0x270/0x270 [ 280.331928][ T28] do_page_mkwrite+0x16b/0x5c0 [ 280.336760][ T28] handle_mm_fault+0x199c/0x3d40 [ 280.341930][ T28] ? mt_find+0x157/0x830 [ 280.346233][ T28] ? numa_migrate_prep+0x250/0x250 [ 280.351478][ T28] ? lock_chain_count+0x20/0x20 [ 280.356383][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 280.361905][ T28] do_user_addr_fault+0x58e/0xb20 [ 280.367021][ T28] exc_page_fault+0x60/0x100 [ 280.371876][ T28] ? clear_bhb_loop+0x60/0xb0 [ 280.377991][ T28] asm_exc_page_fault+0x22/0x30 [ 280.382917][ T28] RIP: 0033:0x7f97ce072729 [ 280.387442][ T28] RSP: 002b:00007ffe70bd29a0 EFLAGS: 00010202 [ 280.393653][ T28] RAX: 0000001b2fd19000 RBX: ffffffff83d37a97 RCX: 0000001b2fd18ff8 [ 280.401836][ T28] RDX: 0000001b2f724224 RSI: 0000000000000008 RDI: 00007f97cef55720 [ 280.409931][ T28] RBP: 000000000000000c R08: 00007f97ce410000 R09: 00007f97ce412000 [ 280.418062][ T28] R10: 0000000083d37a9b R11: 0000000000000005 R12: 00007f97ce426128 [ 280.426253][ T28] R13: 000000000000000b R14: ffffffff83d37bca R15: 00007f97cef55720 [ 280.434392][ T28] ? tomoyo_path_number_perm+0x18a/0x650 [ 280.440199][ T28] ? tomoyo_path_number_perm+0x57/0x650 [ 280.445808][ T28] [ 280.448983][ T28] INFO: task syz.5.264:5318 blocked for more than 144 seconds. [ 280.456567][ T28] Not tainted syzkaller #0 [ 280.461694][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.470490][ T28] task:syz.5.264 state:D stack:24848 pid:5318 ppid:4753 flags:0x00004006 [ 280.481224][ T28] Call Trace: [ 280.484576][ T28] [ 280.487608][ T28] __schedule+0x107f/0x4030 [ 280.492810][ T28] ? __sched_text_start+0x8/0x8 [ 280.498030][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 280.504385][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 280.509600][ T28] ? lock_chain_count+0x20/0x20 [ 280.514653][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 280.519831][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 280.525533][ T28] schedule+0xb9/0x180 [ 280.529694][ T28] io_schedule+0x7c/0xd0 [ 280.534114][ T28] folio_wait_bit_common+0x877/0xfa0 [ 280.539571][ T28] ? folio_wait_bit+0x30/0x30 [ 280.544396][ T28] ? migration_entry_wait_on_locked+0xe80/0xe80 [ 280.550828][ T28] ? rcu_is_watching+0x11/0xa0 [ 280.555839][ T28] ? trace_folio_wait_writeback+0xa5/0x240 [ 280.561881][ T28] folio_wait_writeback+0xe3/0x1f0 [ 280.567593][ T28] shmem_swapin_folio+0xe09/0x1600 [ 280.572809][ T28] ? folio_lock+0x190/0x190 [ 280.577470][ T28] ? __filemap_get_folio+0x10f/0xde0 [ 280.583674][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 280.588880][ T28] ? xas_load+0x127/0x140 [ 280.593393][ T28] ? __filemap_get_folio+0x10f/0xde0 [ 280.598923][ T28] ? __filemap_get_folio+0xb5d/0xde0 [ 280.604460][ T28] ? __filemap_get_folio+0x10f/0xde0 [ 280.609888][ T28] ? page_cache_prev_miss+0x380/0x380 [ 280.615479][ T28] shmem_get_folio_gfp+0x3f7/0x35e0 [ 280.620883][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 280.626113][ T28] shmem_fault+0x1b6/0x790 [ 280.630662][ T28] ? shmem_fallocate+0xfc0/0xfc0 [ 280.635688][ T28] ? filemap_map_pages+0x1ae/0x11e0 [ 280.641134][ T28] ? count_memcg_event_mm+0x36b/0x3c0 [ 280.646555][ T28] ? filemap_read_folio+0x7a0/0x7a0 [ 280.651874][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 280.657210][ T28] __do_fault+0x13b/0x4e0 [ 280.661667][ T28] ? handle_mm_fault+0x2600/0x3d40 [ 280.666824][ T28] handle_mm_fault+0x2610/0x3d40 [ 280.671906][ T28] ? mt_find+0x157/0x830 [ 280.676223][ T28] ? numa_migrate_prep+0x250/0x250 [ 280.683187][ T28] ? lock_chain_count+0x20/0x20 [ 280.688316][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 280.693667][ T28] do_user_addr_fault+0x58e/0xb20 [ 280.698840][ T28] exc_page_fault+0x60/0x100 [ 280.703663][ T28] asm_exc_page_fault+0x22/0x30 [ 280.708656][ T28] RIP: 0010:copy_user_short_string+0xa/0x40 [ 280.714619][ T28] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 280.734948][ T28] RSP: 0018:ffffc900046a7d48 EFLAGS: 00050202 [ 280.741283][ T28] RAX: ffffffff8415c301 RBX: 0000000000000008 RCX: 0000000000000001 [ 280.749517][ T28] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffc900046a7dc0 [ 280.757600][ T28] RBP: 0000000000000000 R08: ffffc900046a7dc7 R09: 1ffff920008d4fb8 [ 280.765626][ T28] R10: dffffc0000000000 R11: fffff520008d4fb9 R12: 00007fffffffeff8 [ 280.773844][ T28] R13: 0000000000000008 R14: ffffc900046a7dc0 R15: 0000200000000200 [ 280.782090][ T28] ? _copy_from_user+0x21/0x170 [ 280.789083][ T28] _copy_from_user+0xf4/0x170 [ 280.793852][ T28] __sys_bpf+0x2ea/0x780 [ 280.798407][ T28] ? bpf_link_show_fdinfo+0x380/0x380 [ 280.803970][ T28] ? lock_chain_count+0x20/0x20 [ 280.808941][ T28] __x64_sys_bpf+0x78/0x90 [ 280.813449][ T28] do_syscall_64+0x4c/0xa0 [ 280.818047][ T28] ? clear_bhb_loop+0x60/0xb0 [ 280.822786][ T28] ? clear_bhb_loop+0x60/0xb0 [ 280.827587][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.833567][ T28] RIP: 0033:0x7f96ad59e0d9 [ 280.838722][ T28] RSP: 002b:00007f96ae431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.847205][ T28] RAX: ffffffffffffffda RBX: 00007f96ad825fa0 RCX: 00007f96ad59e0d9 [ 280.855433][ T28] RDX: 0000000000000008 RSI: 0000200000000200 RDI: 0000000000000017 [ 280.863534][ T28] RBP: 00007f96ad635024 R08: 0000000000000000 R09: 0000000000000000 [ 280.871656][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.879921][ T28] R13: 00007f96ad826038 R14: 00007f96ad825fa0 R15: 00007ffcc98c3be8 [ 280.889514][ T28] [ 280.892592][ T28] INFO: task syz.2.266:5319 blocked for more than 144 seconds. [ 280.900397][ T28] Not tainted syzkaller #0 [ 280.905819][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.914887][ T28] task:syz.2.266 state:D stack:26288 pid:5319 ppid:4274 flags:0x00004004 [ 280.924337][ T28] Call Trace: [ 280.927709][ T28] [ 280.930693][ T28] __schedule+0x107f/0x4030 [ 280.935354][ T28] ? mark_lock+0x94/0x320 [ 280.940847][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 280.945974][ T28] ? __sched_text_start+0x8/0x8 [ 280.951301][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 280.957484][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 280.962840][ T28] schedule+0xb9/0x180 [ 280.967048][ T28] io_schedule+0x7c/0xd0 [ 280.971828][ T28] bit_wait_io+0xd/0xc0 [ 280.976062][ T28] __wait_on_bit+0x9b/0x2c0 [ 280.980965][ T28] ? bit_wait+0xc0/0xc0 [ 280.985203][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 280.991776][ T28] ? bit_wait+0xc0/0xc0 [ 280.996107][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 281.001225][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 281.006317][ T28] ? bit_waitqueue+0x30/0x30 [ 281.012057][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 281.017614][ T28] do_get_write_access+0x605/0xf20 [ 281.023001][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 281.029168][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 281.035521][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 281.041846][ T28] ? rcu_is_watching+0x11/0xa0 [ 281.047294][ T28] ext4_reserve_inode_write+0x201/0x290 [ 281.052924][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 281.059705][ T28] ext4_dirty_inode+0xbf/0x100 [ 281.064543][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 281.070834][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 281.075922][ T28] __file_update_time+0x21d/0x240 [ 281.081518][ T28] file_update_time+0x2f3/0x370 [ 281.086491][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 281.093536][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 281.099142][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 281.105470][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 281.111064][ T28] ? put_page+0x270/0x270 [ 281.115439][ T28] do_page_mkwrite+0x16b/0x5c0 [ 281.122228][ T28] handle_mm_fault+0x199c/0x3d40 [ 281.127702][ T28] ? mt_find+0x157/0x830 [ 281.132027][ T28] ? numa_migrate_prep+0x250/0x250 [ 281.137193][ T28] ? lock_chain_count+0x20/0x20 [ 281.142328][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 281.147856][ T28] do_user_addr_fault+0x58e/0xb20 [ 281.152961][ T28] exc_page_fault+0x60/0x100 [ 281.157727][ T28] asm_exc_page_fault+0x22/0x30 [ 281.162648][ T28] RIP: 0033:0x7f5b85472eb2 [ 281.167106][ T28] RSP: 002b:00007fffe8e59da0 EFLAGS: 00010202 [ 281.173445][ T28] RAX: 000000000000a008 RBX: 00007f5b86355720 RCX: 0000000000000000 [ 281.182737][ T28] RDX: 0000001b2ff1a000 RSI: 0000000000000008 RDI: 00007f5b86355720 [ 281.190898][ T28] RBP: 000000000000013e R08: 00007f5b85810000 R09: 00007f5b85826038 [ 281.199792][ T28] R10: 0000000000000003 R11: 0000000000000005 R12: ffffffff81dda2ad [ 281.208006][ T28] R13: 00007f5b85826038 R14: 00000000000000b8 R15: ffffffffffff6000 [ 281.216042][ T28] ? __page_table_check_zero+0x28d/0x4b0 [ 281.221888][ T28] [ 281.224997][ T28] INFO: task syz.1.267:5322 blocked for more than 144 seconds. [ 281.232780][ T28] Not tainted syzkaller #0 [ 281.238029][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.246759][ T28] task:syz.1.267 state:D stack:26288 pid:5322 ppid:4273 flags:0x00004004 [ 281.256315][ T28] Call Trace: [ 281.260027][ T28] [ 281.263029][ T28] __schedule+0x107f/0x4030 [ 281.267709][ T28] ? mark_lock+0x94/0x320 [ 281.272473][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 281.277731][ T28] ? __sched_text_start+0x8/0x8 [ 281.282664][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 281.289210][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 281.294577][ T28] schedule+0xb9/0x180 [ 281.300613][ T28] io_schedule+0x7c/0xd0 [ 281.305051][ T28] bit_wait_io+0xd/0xc0 [ 281.309348][ T28] __wait_on_bit+0x9b/0x2c0 [ 281.313939][ T28] ? bit_wait+0xc0/0xc0 [ 281.318467][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 281.324006][ T28] ? bit_wait+0xc0/0xc0 [ 281.328369][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 281.333457][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 281.338628][ T28] ? bit_waitqueue+0x30/0x30 [ 281.343300][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 281.348935][ T28] do_get_write_access+0x605/0xf20 [ 281.354312][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 281.360498][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 281.366904][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 281.373530][ T28] ? rcu_is_watching+0x11/0xa0 [ 281.378685][ T28] ext4_reserve_inode_write+0x201/0x290 [ 281.384321][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 281.390043][ T28] ext4_dirty_inode+0xbf/0x100 [ 281.394872][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 281.406203][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 281.411691][ T28] __file_update_time+0x21d/0x240 [ 281.416896][ T28] file_update_time+0x2f3/0x370 [ 281.422198][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 281.427632][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 281.432890][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 281.439258][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 281.444595][ T28] ? put_page+0x270/0x270 [ 281.450026][ T28] do_page_mkwrite+0x16b/0x5c0 [ 281.455215][ T28] handle_mm_fault+0x199c/0x3d40 [ 281.460429][ T28] ? mt_find+0x157/0x830 [ 281.464745][ T28] ? numa_migrate_prep+0x250/0x250 [ 281.472294][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 281.478051][ T28] do_user_addr_fault+0x58e/0xb20 [ 281.483227][ T28] exc_page_fault+0x60/0x100 [ 281.488195][ T28] asm_exc_page_fault+0x22/0x30 [ 281.493116][ T28] RIP: 0033:0x7f3fe8a72eb2 [ 281.497876][ T28] RSP: 002b:00007fff5d2cebe0 EFLAGS: 00010202 [ 281.504841][ T28] RAX: 0000000000006008 RBX: 00007f3fe9955720 RCX: 0000000000000000 [ 281.513265][ T28] RDX: 0000001b2fe1e000 RSI: 0000000000000008 RDI: 00007f3fe9955720 [ 281.521630][ T28] RBP: 0000000000000130 R08: 00007f3fe8e10000 R09: 00007f3fe8e26038 [ 281.536209][ T28] R10: 0000000000000003 R11: 0000000000000005 R12: ffffffff81e9413a [ 281.544423][ T28] R13: 00007f3fe8e26038 R14: 00000000000000a2 R15: ffffffffffffa000 [ 281.552821][ T28] ? __fget_files+0x36a/0x460 [ 281.557771][ T28] [ 281.560930][ T28] [ 281.560930][ T28] Showing all locks held in the system: [ 281.568892][ T28] 1 lock held by rcu_tasks_kthre/12: [ 281.574226][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 281.584957][ T28] 1 lock held by rcu_tasks_trace/13: [ 281.590491][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 281.601745][ T28] 1 lock held by khungtaskd/28: [ 281.607364][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 281.617448][ T28] 6 locks held by kworker/u4:4/76: [ 281.622708][ T28] #0: ffff888142edd138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 281.633635][ T28] #1: ffffc900015c7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 281.645665][ T28] #2: ffff88814e5c20e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 281.655783][ T28] #3: ffff88814e5c4c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 281.666484][ T28] #4: ffff88814e5c6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 281.676255][ T28] #5: ffff8880746734b0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 281.686403][ T28] 2 locks held by getty/4025: [ 281.692322][ T28] #0: ffff88807e358098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 281.702294][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 281.713556][ T28] 3 locks held by syz-executor/4259: [ 281.718985][ T28] #0: ffff88802f96b5d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 281.729088][ T28] #1: ffff88814e5c2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 281.739048][ T28] #2: ffff88814e5c6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 281.749116][ T28] 3 locks held by kworker/u4:9/4840: [ 281.754454][ T28] 3 locks held by syz.0.263/5315: [ 281.759601][ T28] #0: ffff88802fbf62d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 281.769637][ T28] #1: ffff88814e5c2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 281.779567][ T28] #2: ffff88814e5c6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 281.789696][ T28] 1 lock held by syz.5.264/5318: [ 281.794679][ T28] #0: ffff88802e9c4c58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 281.804800][ T28] 3 locks held by syz.2.266/5319: [ 281.811216][ T28] #0: ffff88802fbf0158 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 281.821437][ T28] #1: ffff88814e5c2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 281.831318][ T28] #2: ffff88814e5c6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 281.841159][ T28] 3 locks held by syz.1.267/5322: [ 281.846337][ T28] #0: ffff88802fbf5b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 281.856509][ T28] #1: ffff88814e5c2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 281.866386][ T28] #2: ffff88814e5c6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 281.876227][ T28] [ 281.878677][ T28] ============================================= [ 281.878677][ T28] [ 281.887325][ T28] NMI backtrace for cpu 0 [ 281.891750][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 281.898994][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.909113][ T28] Call Trace: [ 281.912442][ T28] [ 281.915414][ T28] dump_stack_lvl+0x188/0x24e [ 281.920159][ T28] ? show_regs_print_info+0x12/0x12 [ 281.925573][ T28] ? load_image+0x410/0x410 [ 281.930199][ T28] ? vprintk_emit+0x59f/0x6a0 [ 281.935006][ T28] ? printk_sprint+0x460/0x460 [ 281.939982][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 281.944961][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 281.951148][ T28] ? _printk+0xda/0x130 [ 281.955363][ T28] ? load_image+0x410/0x410 [ 281.959921][ T28] ? load_image+0x410/0x410 [ 281.964459][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 281.970572][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 281.976676][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 281.982698][ T28] watchdog+0xf0e/0xf50 [ 281.986890][ T28] ? watchdog+0x1ed/0xf50 [ 281.991248][ T28] kthread+0x29d/0x330 [ 281.995353][ T28] ? hungtask_pm_notify+0x40/0x40 [ 282.000432][ T28] ? kthread_blkcg+0xd0/0xd0 [ 282.005047][ T28] ret_from_fork+0x1f/0x30 [ 282.009508][ T28] [ 282.013576][ T28] Sending NMI from CPU 0 to CPUs 1: [ 282.018985][ C1] NMI backtrace for cpu 1 [ 282.019000][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 282.019016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.019034][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 282.019067][ C1] RIP: 0010:unwind_next_frame+0x4c/0x1fd0 [ 282.019092][ C1] Code: 48 c1 e8 03 48 89 44 24 28 42 80 3c 30 00 74 05 e8 09 60 9a 00 4c 8b 63 48 48 8d 7b 38 48 89 fd 48 c1 ed 03 42 80 7c 35 00 00 <74> 05 e8 ed 5f 9a 00 4c 8b 6b 38 49 89 df 49 c1 ef 03 43 0f b6 04 [ 282.019106][ C1] RSP: 0018:ffffc900000e7680 EFLAGS: 00000246 [ 282.019120][ C1] RAX: 1ffff9200001ceee RBX: ffffc900000e7728 RCX: 0000000080000000 [ 282.019132][ C1] RDX: dffffc0000000000 RSI: ffffffff815577ab RDI: ffffc900000e7760 [ 282.019144][ C1] RBP: 1ffff9200001ceec R08: ffffc900000e77f0 R09: 0000000000000006 [ 282.019156][ C1] R10: dffffc0000000000 R11: fffff5200001cef1 R12: ffffffff815577ab [ 282.019168][ C1] R13: ffffc900000e7b40 R14: dffffc0000000000 R15: ffffc900000e7728 [ 282.019180][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 282.019194][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.019205][ C1] CR2: 000055bc1e528660 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 282.019220][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.019230][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.019240][ C1] Call Trace: [ 282.019245][ C1] [ 282.019255][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 282.019278][ C1] ? process_one_work+0x8ab/0x1160 [ 282.019300][ C1] ? stack_trace_save+0xf0/0xf0 [ 282.019322][ C1] arch_stack_walk+0x10c/0x140 [ 282.019345][ C1] ? process_one_work+0x8ab/0x1160 [ 282.019366][ C1] stack_trace_save+0xa6/0xf0 [ 282.019386][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 282.019406][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 282.019429][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 282.019450][ C1] ? process_one_work+0x8ab/0x1160 [ 282.019468][ C1] ? worker_thread+0xaf5/0x12a0 [ 282.019488][ C1] kasan_set_track+0x4b/0x70 [ 282.019510][ C1] ? kasan_set_track+0x4b/0x70 [ 282.019530][ C1] ? kasan_save_free_info+0x27/0x40 [ 282.019546][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 282.019567][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 282.019587][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 282.019603][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 282.019624][ C1] ? process_one_work+0x8ab/0x1160 [ 282.019663][ C1] ? skb_release_data+0x5e9/0x7e0 [ 282.019687][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 282.019704][ C1] kasan_save_free_info+0x27/0x40 [ 282.019719][ C1] ____kasan_slab_free+0x126/0x1f0 [ 282.019743][ C1] slab_free_freelist_hook+0x133/0x1b0 [ 282.019765][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 282.019786][ C1] kmem_cache_free+0xf7/0x2a0 [ 282.019806][ C1] nsim_dev_trap_report_work+0x71f/0xa80 [ 282.019834][ C1] ? process_one_work+0x7b4/0x1160 [ 282.019853][ C1] process_one_work+0x8ab/0x1160 [ 282.019879][ C1] ? worker_detach_from_pool+0x240/0x240 [ 282.019899][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 282.019919][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 282.019939][ C1] ? wq_worker_running+0x97/0x190 [ 282.019967][ C1] worker_thread+0xaf5/0x12a0 [ 282.019999][ C1] kthread+0x29d/0x330 [ 282.020012][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 282.020037][ C1] ? kthread_blkcg+0xd0/0xd0 [ 282.020052][ C1] ret_from_fork+0x1f/0x30 [ 282.020082][ C1] [ 282.022466][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 282.374790][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 282.382014][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.392092][ T28] Call Trace: [ 282.395383][ T28] [ 282.398343][ T28] dump_stack_lvl+0x188/0x24e [ 282.403152][ T28] ? memcpy+0x3c/0x60 [ 282.407163][ T28] ? show_regs_print_info+0x12/0x12 [ 282.412405][ T28] ? load_image+0x410/0x410 [ 282.416969][ T28] panic+0x2d3/0x710 [ 282.420904][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 282.426590][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 282.431200][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 282.436942][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 282.443129][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 282.449537][ T28] watchdog+0xf4d/0xf50 [ 282.453730][ T28] ? watchdog+0x1ed/0xf50 [ 282.458180][ T28] kthread+0x29d/0x330 [ 282.462293][ T28] ? hungtask_pm_notify+0x40/0x40 [ 282.467484][ T28] ? kthread_blkcg+0xd0/0xd0 [ 282.472129][ T28] ret_from_fork+0x1f/0x30 [ 282.476580][ T28] [ 282.480216][ T28] Kernel Offset: disabled [ 282.484579][ T28] Rebooting in 86400 seconds..