last executing test programs: 5.105510064s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mapper/control\x00', 0x2002, 0xf0) ioctl(r0, 0xc138fd0a, &(0x7f0000000100)="04000000000000000000000000020000380100000100000000000000000000000000000000000000000000000000000074") 4.805662611s ago: executing program 3 (id=6): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f0000000240)="1a00000002000000", 0x8) 4.767984951s ago: executing program 1 (id=7): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) 4.453035649s ago: executing program 3 (id=9): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(r0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="a7", 0x1}], 0x1) 3.717840855s ago: executing program 1 (id=13): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00') 2.260452619s ago: executing program 3 (id=19): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) 2.153159821s ago: executing program 1 (id=20): r0 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setresuid(0xee00, 0xee01, 0x0) sendmmsg$inet6(r0, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x5c}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], 0x40}}], 0x1, 0x4000000) 1.866167348s ago: executing program 3 (id=21): openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x800) r0 = syz_io_uring_setup(0xf14, &(0x7f00000001c0)={0x0, 0xb86d, 0x10401, 0x2, 0x8e}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0xd, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 1.664395602s ago: executing program 0 (id=23): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) setresuid(0x0, 0xee00, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 1.663950302s ago: executing program 1 (id=24): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.561189595s ago: executing program 3 (id=25): io_uring_setup(0xc90, &(0x7f0000000080)) r0 = io_uring_setup(0x416c, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0xa0}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0) 1.367340059s ago: executing program 3 (id=27): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.265547892s ago: executing program 0 (id=29): creat(&(0x7f0000000040)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) 1.109300325s ago: executing program 2 (id=30): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 946.717929ms ago: executing program 0 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 864.328621ms ago: executing program 2 (id=32): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x32}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x6, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x1, 0x9}, 0xfffffffa, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x34ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 640.906276ms ago: executing program 0 (id=33): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000080)={'virt_wifi0\x00', @local}) 579.265347ms ago: executing program 2 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 468.99051ms ago: executing program 0 (id=35): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="0dff9c97783051ce079297e051eee2cc55a5a0dd0095bb6de9f872f1179d678b4f", 0x21}], 0x1, 0x0, 0x0, 0x4000}, 0x50) 381.992722ms ago: executing program 2 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020c00048008000140000000031c000480080002401f25c4ea080002403cb140bb08"], 0x88}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 345.642063ms ago: executing program 0 (id=37): r0 = memfd_create(&(0x7f0000000480)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\b\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8-\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x13\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~f\xb4%!X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x00\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xaek\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\b\x00\x00\x00\x00\x00\x00\x00\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x93(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/704, 0x7) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 180.063506ms ago: executing program 2 (id=38): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) 0s ago: executing program 2 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 80.039190][ T5761] cgroup: Unknown subsys name 'net' [ 80.184079][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.989027][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.790529][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.801146][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.809732][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.828570][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.843811][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.852230][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.864549][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.884604][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.886791][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.901526][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.909283][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.918509][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.925591][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.928965][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.940271][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.940816][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.950499][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.961021][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.970518][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.971516][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.980252][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.986935][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.002144][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.011578][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.516884][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 84.569057][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 84.701420][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.758002][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.766056][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.773873][ T5781] bridge_slave_0: entered allmulticast mode [ 84.781296][ T5781] bridge_slave_0: entered promiscuous mode [ 84.836249][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.843654][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.851046][ T5781] bridge_slave_1: entered allmulticast mode [ 84.858463][ T5781] bridge_slave_1: entered promiscuous mode [ 84.867201][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.927453][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.934861][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.942373][ T5772] bridge_slave_0: entered allmulticast mode [ 84.949848][ T5772] bridge_slave_0: entered promiscuous mode [ 84.959086][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.966628][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.974129][ T5772] bridge_slave_1: entered allmulticast mode [ 84.981343][ T5772] bridge_slave_1: entered promiscuous mode [ 85.018187][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.069869][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.102340][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.112976][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.120685][ T5773] bridge_slave_0: entered allmulticast mode [ 85.128031][ T5773] bridge_slave_0: entered promiscuous mode [ 85.162610][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.175835][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.185985][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.193332][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.200811][ T5773] bridge_slave_1: entered allmulticast mode [ 85.208224][ T5773] bridge_slave_1: entered promiscuous mode [ 85.232762][ T5781] team0: Port device team_slave_0 added [ 85.242060][ T5781] team0: Port device team_slave_1 added [ 85.299589][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.343702][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.354154][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.361174][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.388239][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.400468][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.410333][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.418097][ T5776] bridge_slave_0: entered allmulticast mode [ 85.425937][ T5776] bridge_slave_0: entered promiscuous mode [ 85.435096][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.442281][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.450188][ T5776] bridge_slave_1: entered allmulticast mode [ 85.457697][ T5776] bridge_slave_1: entered promiscuous mode [ 85.468195][ T5772] team0: Port device team_slave_0 added [ 85.488379][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.498534][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.527806][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.561801][ T5772] team0: Port device team_slave_1 added [ 85.603396][ T5773] team0: Port device team_slave_0 added [ 85.628527][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.651340][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.658777][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.685473][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.699922][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.710002][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.724336][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.751216][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.765182][ T5773] team0: Port device team_slave_1 added [ 85.814412][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.822132][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.848626][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.906504][ T5781] hsr_slave_0: entered promiscuous mode [ 85.913249][ T5781] hsr_slave_1: entered promiscuous mode [ 85.921456][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.928774][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.955657][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.970456][ T5776] team0: Port device team_slave_0 added [ 85.999657][ T5776] team0: Port device team_slave_1 added [ 86.028291][ T5789] Bluetooth: hci1: command tx timeout [ 86.058981][ T5772] hsr_slave_0: entered promiscuous mode [ 86.066053][ T5772] hsr_slave_1: entered promiscuous mode [ 86.072453][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.103756][ T5772] Cannot create hsr debugfs directory [ 86.104128][ T5789] Bluetooth: hci2: command tx timeout [ 86.109650][ T5786] Bluetooth: hci0: command tx timeout [ 86.121492][ T5782] Bluetooth: hci3: command tx timeout [ 86.253342][ T5773] hsr_slave_0: entered promiscuous mode [ 86.260509][ T5773] hsr_slave_1: entered promiscuous mode [ 86.272922][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.281041][ T5773] Cannot create hsr debugfs directory [ 86.296057][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.303083][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.329394][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.371495][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.378676][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.405703][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.646054][ T5776] hsr_slave_0: entered promiscuous mode [ 86.652830][ T5776] hsr_slave_1: entered promiscuous mode [ 86.662359][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.670373][ T5776] Cannot create hsr debugfs directory [ 86.889999][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.914980][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.925967][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.950064][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.025036][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.040271][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.052043][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.075784][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.143999][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.184316][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.198306][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.238883][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.368987][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.442362][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.458498][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.523600][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.628658][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.720647][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.776136][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.789322][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.818081][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.825719][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.922814][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.937790][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.945072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.987634][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.025228][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.046828][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.054211][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.069915][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.077337][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.090420][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.097737][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.115065][ T5786] Bluetooth: hci1: command tx timeout [ 88.135311][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.142625][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.194699][ T5786] Bluetooth: hci0: command tx timeout [ 88.200218][ T5782] Bluetooth: hci2: command tx timeout [ 88.200229][ T5789] Bluetooth: hci3: command tx timeout [ 88.258322][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.290059][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.297318][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.310607][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.317870][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.495869][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.910848][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.949095][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.002302][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.062267][ T5773] veth0_vlan: entered promiscuous mode [ 89.107130][ T5773] veth1_vlan: entered promiscuous mode [ 89.161439][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.171222][ T5772] veth0_vlan: entered promiscuous mode [ 89.207441][ T5772] veth1_vlan: entered promiscuous mode [ 89.243084][ T5781] veth0_vlan: entered promiscuous mode [ 89.257612][ T5773] veth0_macvtap: entered promiscuous mode [ 89.290141][ T5781] veth1_vlan: entered promiscuous mode [ 89.321273][ T5773] veth1_macvtap: entered promiscuous mode [ 89.338387][ T5772] veth0_macvtap: entered promiscuous mode [ 89.361432][ T5772] veth1_macvtap: entered promiscuous mode [ 89.419465][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.429843][ T5776] veth0_vlan: entered promiscuous mode [ 89.446664][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.458741][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.473162][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.487942][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.502101][ T5781] veth0_macvtap: entered promiscuous mode [ 89.518377][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.530127][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.542003][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.555491][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565017][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.575616][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.586280][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.598572][ T5776] veth1_vlan: entered promiscuous mode [ 89.617076][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.627759][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.643243][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.652267][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.676164][ T5781] veth1_macvtap: entered promiscuous mode [ 89.768559][ T5776] veth0_macvtap: entered promiscuous mode [ 89.780530][ T5776] veth1_macvtap: entered promiscuous mode [ 89.835640][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.847315][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.858904][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.870306][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.895093][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.913035][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.930982][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.941885][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.956110][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.969427][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.002042][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.014140][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.022955][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.036216][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.074393][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.082509][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.165091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.173138][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.185449][ T5789] Bluetooth: hci1: command tx timeout [ 90.208057][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.232935][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.247900][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.258508][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.264528][ T5789] Bluetooth: hci3: command tx timeout [ 90.274028][ T5782] Bluetooth: hci2: command tx timeout [ 90.279506][ T5782] Bluetooth: hci0: command tx timeout [ 90.286276][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.297495][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.307495][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.318651][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.330336][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.343358][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.354511][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.369016][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.379669][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.391717][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.402681][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.418036][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.469254][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.488320][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.498317][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.508065][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.600018][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.612539][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.631464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.639714][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.772031][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.797414][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.905493][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.945317][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.102202][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.173109][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.588374][ T5858] syz.2.3[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.759888][ T5858] loop2: detected capacity change from 0 to 4096 [ 91.810099][ T5858] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 91.923804][ T2186] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.138987][ T2186] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.163762][ T2186] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.193990][ T2186] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.237327][ T2186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.265122][ T5782] Bluetooth: hci1: command tx timeout [ 92.280906][ T28] cfg80211: failed to load regulatory.db [ 92.308695][ T5861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.329103][ T2186] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 92.345105][ T5782] Bluetooth: hci0: command tx timeout [ 92.348362][ T5789] Bluetooth: hci3: command tx timeout [ 92.350693][ T5786] Bluetooth: hci2: command tx timeout [ 92.492990][ T5871] loop1: detected capacity change from 0 to 4096 [ 92.509118][ T5871] EXT4-fs: Ignoring removed nobh option [ 92.795784][ T2186] usb 4-1: USB disconnect, device number 2 [ 92.883145][ T5871] EXT4-fs: Ignoring removed bh option [ 92.928512][ T5871] EXT4-fs (loop1): Test dummy encryption mode enabled [ 93.021664][ T5886] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 93.030475][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 93.041449][ T5871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.179132][ T5889] loop0: detected capacity change from 0 to 512 [ 93.215655][ T5889] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 93.328204][ T5889] EXT4-fs (loop0): 1 truncate cleaned up [ 93.355186][ T5893] loop2: detected capacity change from 0 to 512 [ 93.376706][ T5893] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.403837][ T5889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.468334][ T5893] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 93.499059][ T5893] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #11: comm syz.2.18: corrupted inode contents [ 93.514594][ T5893] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #11: comm syz.2.18: mark_inode_dirty error [ 93.531648][ T5893] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.18: invalid indirect mapped block 1 (level 1) [ 93.531688][ T5871] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 93.578243][ T5893] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #11: comm syz.2.18: corrupted inode contents [ 93.596187][ T5893] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 93.606958][ T5896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.17: invalid indirect mapped block 4294901760 (level 0) [ 93.654771][ T5893] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #11: comm syz.2.18: corrupted inode contents [ 93.667106][ T5896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.17: invalid indirect mapped block 2185560079 (level 0) [ 93.681695][ T5893] EXT4-fs error (device loop2): ext4_truncate:4302: inode #11: comm syz.2.18: mark_inode_dirty error [ 93.710363][ T5893] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 93.723662][ T5896] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.17: corrupted inode contents [ 93.745777][ T5893] EXT4-fs (loop2): 1 truncate cleaned up [ 93.753076][ T5893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.805520][ T5899] process 'syz.3.19' launched '/dev/fd/3' with NULL argv: empty string added [ 93.816001][ T5896] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #13: comm syz.0.17: mark_inode_dirty error [ 93.858896][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.889449][ T5896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.17: invalid indirect mapped block 65535 (level 2) [ 93.932117][ T5893] CacheFiles: mkdir cache failed with error -105 [ 93.955330][ T5896] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.17: corrupted inode contents [ 93.960075][ T5893] CacheFiles: Failed to register: -105 [ 94.045025][ T5896] EXT4-fs error (device loop0): ext4_truncate:4302: inode #13: comm syz.0.17: mark_inode_dirty error [ 94.095203][ T5896] EXT4-fs error (device loop0) in ext4_setattr:5683: Corrupt filesystem [ 94.104061][ T5889] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.17: corrupted inode contents [ 94.126373][ T5889] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #13: comm syz.0.17: mark_inode_dirty error [ 94.168422][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.179620][ T27] audit: type=1800 audit(1789041532.542:2): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 94.363028][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.702341][ T5815] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.744735][ T27] audit: type=1326 audit(1789041533.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 94.798266][ T27] audit: type=1326 audit(1789041533.102:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 94.823692][ T27] audit: type=1326 audit(1789041533.152:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 94.893588][ T27] audit: type=1326 audit(1789041533.152:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 94.949132][ T5815] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 94.958505][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.970779][ T27] audit: type=1326 audit(1789041533.152:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 94.995936][ T5815] usb 2-1: Product: syz [ 95.000355][ T5815] usb 2-1: Manufacturer: syz [ 95.003822][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.006949][ T5815] usb 2-1: SerialNumber: syz [ 95.020017][ T27] audit: type=1326 audit(1789041533.152:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 95.051357][ T5815] usb 2-1: config 0 descriptor?? [ 95.093706][ T27] audit: type=1326 audit(1789041533.152:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 95.132781][ T27] audit: type=1326 audit(1789041533.152:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 95.194027][ T27] audit: type=1326 audit(1789041533.152:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.28" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc62f19e159 code=0x7ffc0000 [ 95.232628][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.252521][ T8] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 95.280475][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.288988][ T8] usb 4-1: Product: syz [ 95.309507][ T8] usb 4-1: Manufacturer: syz [ 95.315421][ T5815] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 95.323959][ T8] usb 4-1: SerialNumber: syz [ 95.431268][ T5933] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.751913][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 95.929560][ T5815] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 95.951729][ T5815] usb 2-1: USB disconnect, device number 2 [ 95.955324][ T5851] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.980383][ T8] speedtch 4-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 96.070690][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.182824][ T5851] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.195381][ T5851] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.208536][ T5851] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.218421][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.226879][ T5851] usb 1-1: Product: syz [ 96.231160][ T5851] usb 1-1: Manufacturer: syz [ 96.235985][ T5851] usb 1-1: SerialNumber: syz [ 96.254798][ T5851] usb 1-1: config 0 descriptor?? [ 96.270281][ T5851] usb 1-1: selecting invalid altsetting 0 [ 101.066328][ T8] speedtch: probe of 4-1:1.0 failed with error -22 [ 101.084358][ T8] usbtest: probe of 4-1:1.1 failed with error -32 [ 101.091376][ T8] speedtch: probe of 4-1:1.1 failed with error -32 [ 133.226647][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.233293][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.666963][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.674731][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.992904][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 206.993756][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 206.999165][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 207.011279][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 243.943779][ T29] INFO: task syz-executor:5761 blocked for more than 143 seconds. [ 243.951913][ T29] Not tainted syzkaller #0 [ 243.957643][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.966425][ T29] task:syz-executor state:D stack:22856 pid:5761 ppid:5760 flags:0x00004002 [ 243.975897][ T29] Call Trace: [ 243.979249][ T29] [ 243.982227][ T29] __schedule+0x15ae/0x4660 [ 243.986957][ T29] ? mark_lock+0x94/0x320 [ 243.991350][ T29] ? asan.module_dtor+0x20/0x20 [ 243.996460][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 244.001702][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 244.007731][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 244.012993][ T29] schedule+0xbd/0x170 [ 244.017171][ T29] io_schedule+0x80/0xd0 [ 244.021471][ T29] bit_wait_io+0x11/0xd0 [ 244.033863][ T29] __wait_on_bit+0x9f/0x2c0 [ 244.038463][ T29] ? bit_wait+0xd0/0xd0 [ 244.042687][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 244.048339][ T29] ? bit_wait+0xd0/0xd0 [ 244.052555][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 244.057998][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 244.063098][ T29] ? bit_waitqueue+0x30/0x30 [ 244.068939][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 244.075416][ T29] do_get_write_access+0x5c9/0xe00 [ 244.080636][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 244.089995][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 244.097437][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 244.104959][ T29] ? __might_sleep+0xe0/0xe0 [ 244.109635][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 244.115363][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 244.120909][ T29] ext4_dirty_inode+0xcb/0x110 [ 244.125933][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 244.131970][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 244.140351][ T29] file_update_time+0x187/0x1a0 [ 244.145416][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 244.150517][ T29] ? do_wp_page+0x4ce/0x34d0 [ 244.161024][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 244.167402][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 244.172530][ T29] do_page_mkwrite+0x153/0x3f0 [ 244.177538][ T29] do_wp_page+0xd4d/0x34d0 [ 244.182037][ T29] ? folio_put+0xd0/0xd0 [ 244.186402][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 244.191497][ T29] ? __rwlock_init+0x150/0x150 [ 244.196423][ T29] handle_mm_fault+0x1306/0x4a50 [ 244.201451][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 244.206536][ T29] ? numa_migrate_prep+0x350/0x350 [ 244.211725][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 244.218304][ T29] do_user_addr_fault+0x736/0x12d0 [ 244.223566][ T29] exc_page_fault+0x64/0x100 [ 244.228219][ T29] ? clear_bhb_loop+0x40/0x90 [ 244.232959][ T29] asm_exc_page_fault+0x26/0x30 [ 244.237965][ T29] RIP: 0033:0x7f985747c6e2 [ 244.242429][ T29] RSP: 002b:00007fffd602b6c0 EFLAGS: 00010246 [ 244.250783][ T29] RAX: 00007f9855218000 RBX: 000055556b5fb320 RCX: 0000000000000000 [ 244.260985][ T29] RDX: 0000000000001ef4 RSI: 000055556b6057c8 RDI: 0000000000000001 [ 244.273317][ T29] RBP: 00007fffd602bbc0 R08: 000055556b6057e8 R09: 0000000000000090 [ 244.285594][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffd602ba00 [ 244.293736][ T29] R13: 00007fffd602b7f0 R14: 585858582e7a7973 R15: 00007fffd602b740 [ 244.301777][ T29] [ 244.305883][ T29] INFO: task syz.1.24:5910 blocked for more than 143 seconds. [ 244.313426][ T29] Not tainted syzkaller #0 [ 244.318404][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.327351][ T29] task:syz.1.24 state:D stack:26664 pid:5910 ppid:5773 flags:0x00004004 [ 244.336720][ T29] Call Trace: [ 244.340046][ T29] [ 244.343025][ T29] __schedule+0x15ae/0x4660 [ 244.347976][ T29] ? mark_lock+0x94/0x320 [ 244.352399][ T29] ? asan.module_dtor+0x20/0x20 [ 244.357343][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 244.362428][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 244.369033][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 244.378506][ T29] schedule+0xbd/0x170 [ 244.382661][ T29] io_schedule+0x80/0xd0 [ 244.387078][ T29] bit_wait_io+0x11/0xd0 [ 244.391406][ T29] __wait_on_bit+0x9f/0x2c0 [ 244.399371][ T29] ? bit_wait+0xd0/0xd0 [ 244.404847][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 244.410379][ T29] ? bit_wait+0xd0/0xd0 [ 244.418252][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 244.423126][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 244.428335][ T29] ? bit_waitqueue+0x30/0x30 [ 244.432982][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 244.442830][ T29] do_get_write_access+0x5c9/0xe00 [ 244.449053][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 244.459579][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 244.465933][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 244.472724][ T29] ? __might_sleep+0xe0/0xe0 [ 244.483551][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 244.489205][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 244.498144][ T29] ext4_dirty_inode+0xcb/0x110 [ 244.502983][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 244.509403][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 244.514668][ T29] file_update_time+0x187/0x1a0 [ 244.519586][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 244.524760][ T29] ? filemap_fault+0x103c/0x1540 [ 244.529749][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 244.535592][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 244.541895][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 244.547190][ T29] ? __pte_offset_map+0x20d/0x280 [ 244.552273][ T29] do_page_mkwrite+0x153/0x3f0 [ 244.557235][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 244.562222][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 244.567267][ T29] ? numa_migrate_prep+0x350/0x350 [ 244.573049][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 244.578508][ T29] do_user_addr_fault+0x736/0x12d0 [ 244.583823][ T29] exc_page_fault+0x64/0x100 [ 244.588778][ T29] asm_exc_page_fault+0x26/0x30 [ 244.593815][ T29] RIP: 0033:0x7f44994727a9 [ 244.598283][ T29] RSP: 002b:00007fff5cb93240 EFLAGS: 00010202 [ 244.604515][ T29] RAX: 0000001b2db15000 RBX: ffffffff81e031f1 RCX: 0000001b2db14ff8 [ 244.612530][ T29] RDX: 0000001b2d524220 RSI: 0000000000000008 RDI: 00007f449a355720 [ 244.620628][ T29] RBP: 00000000000001e8 R08: 00007f4499810000 R09: 00007f4499812000 [ 244.629133][ T29] R10: 0000000081e031f5 R11: 00000000000000ff R12: 00007f4499825f40 [ 244.637399][ T29] R13: 0000000000014dc7 R14: ffffffff81e03fc4 R15: 00007f449a355720 [ 244.645659][ T29] ? __kfence_free+0x14/0x180 [ 244.650397][ T29] ? kfence_guarded_alloc+0x1f1/0xe50 [ 244.656883][ T29] [ 244.659951][ T29] INFO: task syz.3.27:5920 blocked for more than 144 seconds. [ 244.667827][ T29] Not tainted syzkaller #0 [ 244.673488][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.682200][ T29] task:syz.3.27 state:D stack:23720 pid:5920 ppid:5772 flags:0x00004004 [ 244.691749][ T29] Call Trace: [ 244.695284][ T29] [ 244.698275][ T29] __schedule+0x15ae/0x4660 [ 244.703165][ T29] ? mark_lock+0x94/0x320 [ 244.707850][ T29] ? asan.module_dtor+0x20/0x20 [ 244.712753][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 244.718318][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 244.724321][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 244.729585][ T29] schedule+0xbd/0x170 [ 244.733779][ T29] io_schedule+0x80/0xd0 [ 244.738088][ T29] bit_wait_io+0x11/0xd0 [ 244.742418][ T29] __wait_on_bit+0x9f/0x2c0 [ 244.747506][ T29] ? bit_wait+0xd0/0xd0 [ 244.751721][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 244.757356][ T29] ? bit_wait+0xd0/0xd0 [ 244.761574][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 244.766713][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 244.771830][ T29] ? bit_waitqueue+0x30/0x30 [ 244.777116][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 244.782439][ T29] do_get_write_access+0x5c9/0xe00 [ 244.787695][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 244.793815][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 244.800038][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 244.806403][ T29] ? __might_sleep+0xe0/0xe0 [ 244.811096][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 244.816815][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 244.822358][ T29] ext4_dirty_inode+0xcb/0x110 [ 244.827561][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 244.833517][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 244.838720][ T29] file_update_time+0x187/0x1a0 [ 244.843753][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 244.848860][ T29] ? filemap_fault+0x103c/0x1540 [ 244.853924][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 244.859722][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 244.866081][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 244.871171][ T29] ? __pte_offset_map+0x20d/0x280 [ 244.877007][ T29] do_page_mkwrite+0x153/0x3f0 [ 244.881851][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 244.886915][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 244.891916][ T29] ? numa_migrate_prep+0x350/0x350 [ 244.897148][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 244.902490][ T29] do_user_addr_fault+0x736/0x12d0 [ 244.908305][ T29] exc_page_fault+0x64/0x100 [ 244.912958][ T29] ? clear_bhb_loop+0x40/0x90 [ 244.917859][ T29] asm_exc_page_fault+0x26/0x30 [ 244.922761][ T29] RIP: 0033:0x7fca51272f32 [ 244.927328][ T29] RSP: 002b:00007ffc08e27c40 EFLAGS: 00010202 [ 244.933540][ T29] RAX: 0000000000005008 RBX: 00007fca52155720 RCX: 0000000000000000 [ 244.941553][ T29] RDX: 0000001b2dd1f000 RSI: 0000000000000008 RDI: 00007fca52155720 [ 244.949665][ T29] RBP: 0000000000000136 R08: 00007fca51610000 R09: 00007fca51626038 [ 244.957765][ T29] R10: 0000000000000003 R11: 0000000000000003 R12: ffffffff83f0cfed [ 244.965941][ T29] R13: 00007fca51626038 R14: 0000000000000050 R15: ffffffffffffb000 [ 244.974068][ T29] ? tomoyo_init_request_info+0x1dd/0x330 [ 244.980561][ T29] [ 244.984026][ T29] INFO: task syz.0.37:5938 blocked for more than 144 seconds. [ 244.991538][ T29] Not tainted syzkaller #0 [ 244.996829][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.005885][ T29] task:syz.0.37 state:D stack:27048 pid:5938 ppid:5781 flags:0x00004004 [ 245.015469][ T29] Call Trace: [ 245.018825][ T29] [ 245.021810][ T29] __schedule+0x15ae/0x4660 [ 245.026749][ T29] ? mark_lock+0x94/0x320 [ 245.031236][ T29] ? asan.module_dtor+0x20/0x20 [ 245.036509][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 245.041725][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 245.047740][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 245.052996][ T29] schedule+0xbd/0x170 [ 245.057157][ T29] io_schedule+0x80/0xd0 [ 245.061486][ T29] bit_wait_io+0x11/0xd0 [ 245.068629][ T29] __wait_on_bit+0x9f/0x2c0 [ 245.073206][ T29] ? bit_wait+0xd0/0xd0 [ 245.080286][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 245.088140][ T29] ? bit_wait+0xd0/0xd0 [ 245.092372][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 245.097389][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 245.102591][ T29] ? bit_waitqueue+0x30/0x30 [ 245.107291][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 245.112584][ T29] do_get_write_access+0x5c9/0xe00 [ 245.117844][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 245.125024][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 245.131360][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 245.137751][ T29] ? __might_sleep+0xe0/0xe0 [ 245.142414][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 245.148475][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 245.154088][ T29] ext4_dirty_inode+0xcb/0x110 [ 245.158924][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 245.164861][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 245.169955][ T29] file_update_time+0x187/0x1a0 [ 245.174929][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 245.180009][ T29] ? filemap_fault+0x103c/0x1540 [ 245.186861][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 245.192658][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 245.199101][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 245.204221][ T29] ? __pte_offset_map+0x20d/0x280 [ 245.209305][ T29] do_page_mkwrite+0x153/0x3f0 [ 245.214168][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 245.219158][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 245.224259][ T29] ? numa_migrate_prep+0x350/0x350 [ 245.229425][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 245.234884][ T29] do_user_addr_fault+0x736/0x12d0 [ 245.240067][ T29] exc_page_fault+0x64/0x100 [ 245.244826][ T29] asm_exc_page_fault+0x26/0x30 [ 245.249731][ T29] RIP: 0033:0x7f79cf472f32 [ 245.254279][ T29] RSP: 002b:00007fffb3acb720 EFLAGS: 00010202 [ 245.260400][ T29] RAX: 0000000000001008 RBX: 00007f79d0355720 RCX: 0000000000000000 [ 245.268704][ T29] RDX: 0000001b2da23000 RSI: 0000000000000008 RDI: 00007f79d0355720 [ 245.276826][ T29] RBP: 000000000000062f R08: 00007f79cf810000 R09: 00007f79cf826038 [ 245.284907][ T29] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8a7b837d [ 245.296012][ T29] R13: 00007f79cf826038 R14: 00000000000000e6 R15: fffffffffffff000 [ 245.304561][ T29] ? kobject_set_name_vargs+0xed/0x110 [ 245.310114][ T29] [ 245.313259][ T29] INFO: task syz.2.39:5945 blocked for more than 144 seconds. [ 245.320873][ T29] Not tainted syzkaller #0 [ 245.325968][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.334798][ T29] task:syz.2.39 state:D stack:27048 pid:5945 ppid:5776 flags:0x00004004 [ 245.344203][ T29] Call Trace: [ 245.347532][ T29] [ 245.350511][ T29] __schedule+0x15ae/0x4660 [ 245.355241][ T29] ? mark_lock+0x94/0x320 [ 245.359620][ T29] ? asan.module_dtor+0x20/0x20 [ 245.364985][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 245.370071][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 245.376304][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 245.381589][ T29] schedule+0xbd/0x170 [ 245.386105][ T29] io_schedule+0x80/0xd0 [ 245.391742][ T29] bit_wait_io+0x11/0xd0 [ 245.396365][ T29] __wait_on_bit+0x9f/0x2c0 [ 245.400941][ T29] ? bit_wait+0xd0/0xd0 [ 245.405476][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 245.411005][ T29] ? bit_wait+0xd0/0xd0 [ 245.415620][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 245.420448][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 245.425817][ T29] ? bit_waitqueue+0x30/0x30 [ 245.430490][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 245.436036][ T29] do_get_write_access+0x5c9/0xe00 [ 245.441221][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 245.447566][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 245.454022][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 245.460250][ T29] ? __might_sleep+0xe0/0xe0 [ 245.465270][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 245.470922][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 245.477594][ T29] ext4_dirty_inode+0xcb/0x110 [ 245.482597][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 245.488604][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 245.494856][ T29] file_update_time+0x187/0x1a0 [ 245.499785][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 245.504943][ T29] ? filemap_fault+0x103c/0x1540 [ 245.509951][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 245.516666][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 245.522986][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 245.528519][ T29] ? __pte_offset_map+0x20d/0x280 [ 245.533951][ T29] do_page_mkwrite+0x153/0x3f0 [ 245.538787][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 245.544159][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 245.549311][ T29] ? numa_migrate_prep+0x350/0x350 [ 245.554860][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 245.560217][ T29] do_user_addr_fault+0x736/0x12d0 [ 245.565696][ T29] exc_page_fault+0x64/0x100 [ 245.570371][ T29] asm_exc_page_fault+0x26/0x30 [ 245.575730][ T29] RIP: 0033:0x7fc62f072f32 [ 245.580335][ T29] RSP: 002b:00007fffe08c01b0 EFLAGS: 00010202 [ 245.586767][ T29] RAX: 0000000000001008 RBX: 00007fc62ff55720 RCX: 0000000000000000 [ 245.596037][ T29] RDX: 0000001b2dc23000 RSI: 0000000000000008 RDI: 00007fc62ff55720 [ 245.604320][ T29] RBP: 000000000000068b R08: 00007fc62f410000 R09: 00007fc62f426038 [ 245.612338][ T29] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8a83a632 [ 245.620624][ T29] R13: 00007fc62f426038 R14: 000000000000000a R15: fffffffffffff000 [ 245.628938][ T29] ? insn_decode+0x42/0x530 [ 245.633639][ T29] [ 245.636747][ T29] [ 245.636747][ T29] Showing all locks held in the system: [ 245.647298][ T29] 5 locks held by kworker/u4:1/12: [ 245.652476][ T29] 1 lock held by khungtaskd/29: [ 245.657454][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 245.667721][ T29] 6 locks held by kworker/u4:4/59: [ 245.672883][ T29] #0: ffff8880182e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 245.685358][ T29] #1: ffffc900015a7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 245.698992][ T29] #2: ffff8880210cc0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 245.710517][ T29] #3: ffff8880210cec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 245.721155][ T29] #4: ffff8880210d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 245.730972][ T29] #5: ffff88807726e688 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 245.740934][ T29] 2 locks held by getty/5530: [ 245.745737][ T29] #0: ffff88802d1fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 245.755637][ T29] #1: ffffc900032762f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 245.765904][ T29] 3 locks held by syz-executor/5761: [ 245.771239][ T29] #0: ffff88807883c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 245.781419][ T29] #1: ffff8880210cc510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 245.791809][ T29] #2: ffff8880210d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 245.802807][ T29] 3 locks held by syz.1.24/5910: [ 245.808040][ T29] #0: ffff8880241814a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 245.818109][ T29] #1: ffff8880210cc510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 245.828025][ T29] #2: ffff8880210d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 245.837837][ T29] 3 locks held by syz.3.27/5920: [ 245.842817][ T29] #0: ffff8880788381a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 245.852888][ T29] #1: ffff8880210cc510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 245.863633][ T29] #2: ffff8880210d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 245.874790][ T29] 3 locks held by syz.0.37/5938: [ 245.879808][ T29] #0: ffff88807883d720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 245.890144][ T29] #1: ffff8880210cc510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 245.900287][ T29] #2: ffff8880210d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 245.911358][ T29] 3 locks held by syz.2.39/5945: [ 245.916588][ T29] #0: ffff88802c85cda0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 245.926876][ T29] #1: ffff8880210cc510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 245.936986][ T29] #2: ffff8880210d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 245.947049][ T29] [ 245.949439][ T29] ============================================= [ 245.949439][ T29] [ 245.958895][ T29] NMI backtrace for cpu 1 [ 245.963283][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 245.970498][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.980653][ T29] Call Trace: [ 245.983947][ T29] [ 245.986996][ T29] dump_stack_lvl+0x18c/0x250 [ 245.991703][ T29] ? __wake_up_klogd+0xd9/0x100 [ 245.996595][ T29] ? show_regs_print_info+0x20/0x20 [ 246.001830][ T29] ? load_image+0x420/0x420 [ 246.006409][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 246.011425][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 246.017643][ T29] ? load_image+0x420/0x420 [ 246.022178][ T29] ? wq_watchdog_touch+0xef/0x170 [ 246.027235][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 246.033397][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 246.039419][ T29] watchdog+0xf59/0xfa0 [ 246.043602][ T29] ? watchdog+0x1e1/0xfa0 [ 246.047958][ T29] kthread+0x2fa/0x390 [ 246.052066][ T29] ? hungtask_pm_notify+0x50/0x50 [ 246.057136][ T29] ? kthread_blkcg+0xd0/0xd0 [ 246.061789][ T29] ret_from_fork+0x48/0x80 [ 246.066272][ T29] ? kthread_blkcg+0xd0/0xd0 [ 246.070923][ T29] ret_from_fork_asm+0x11/0x20 [ 246.075728][ T29] [ 246.079749][ T29] Sending NMI from CPU 1 to CPUs 0: [ 246.085218][ C0] NMI backtrace for cpu 0 [ 246.085230][ C0] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 246.085248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.085260][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 246.085285][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 246.085315][ C0] Code: 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e <65> 8b 0d d1 31 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 246.085330][ C0] RSP: 0018:ffffc90000117510 EFLAGS: 00000246 [ 246.085345][ C0] RAX: ffffffff813bd0fb RBX: 0000000080000001 RCX: 0000000000000000 [ 246.085358][ C0] RDX: ffff88801be65a00 RSI: 0000000080000001 RDI: 0000000000000000 [ 246.085370][ C0] RBP: 0000000000000001 R08: ffff88801be65a00 R09: 0000000000000003 [ 246.085381][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90000117730 [ 246.085392][ C0] R13: ffffc900001175e8 R14: ffffc90000117970 R15: ffffc900001175f8 [ 246.085406][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 246.085421][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.085434][ C0] CR2: 0000563df7b110d0 CR3: 000000002de5e000 CR4: 00000000003526f0 [ 246.085451][ C0] Call Trace: [ 246.085457][ C0] [ 246.085462][ C0] unwind_next_frame+0x1d2b/0x2990 [ 246.085489][ C0] ? kasan_set_track+0x4e/0x70 [ 246.085511][ C0] ? kasan_set_track+0x4e/0x70 [ 246.085531][ C0] ? stack_trace_save+0x100/0x100 [ 246.085555][ C0] arch_stack_walk+0x144/0x190 [ 246.085577][ C0] ? kasan_save_free_info+0x28/0x40 [ 246.085605][ C0] stack_trace_save+0xaa/0x100 [ 246.085628][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 246.085650][ C0] ? __asan_memset+0x22/0x40 [ 246.085675][ C0] ? chacha_block_generic+0x5ea/0xda0 [ 246.085705][ C0] kasan_set_track+0x4e/0x70 [ 246.085725][ C0] ? kasan_set_track+0x4e/0x70 [ 246.085774][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 246.085809][ C0] kasan_save_free_info+0x28/0x40 [ 246.085834][ C0] ____kasan_slab_free+0x126/0x1f0 [ 246.085857][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 246.085878][ C0] ? skb_release_data+0x609/0x7f0 [ 246.085900][ C0] __kmem_cache_free+0xba/0x1f0 [ 246.085930][ C0] skb_release_data+0x609/0x7f0 [ 246.085957][ C0] consume_skb+0xb2/0x110 [ 246.085977][ C0] nsim_dev_trap_report_work+0x723/0xa90 [ 246.086004][ C0] ? process_scheduled_works+0x975/0x1600 [ 246.086030][ C0] process_scheduled_works+0xa60/0x1600 [ 246.086070][ C0] ? worker_attach_to_pool+0x370/0x370 [ 246.086097][ C0] ? assign_work+0x3cc/0x5d0 [ 246.086123][ C0] worker_thread+0xa5e/0xfe0 [ 246.086161][ C0] kthread+0x2fa/0x390 [ 246.086179][ C0] ? pr_cont_work+0x550/0x550 [ 246.086202][ C0] ? kthread_blkcg+0xd0/0xd0 [ 246.086220][ C0] ret_from_fork+0x48/0x80 [ 246.086242][ C0] ? kthread_blkcg+0xd0/0xd0 [ 246.086261][ C0] ret_from_fork_asm+0x11/0x20 [ 246.086294][ C0] [ 246.102450][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 246.102496][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 246.102565][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.102607][ T29] Call Trace: [ 246.102638][ T29] [ 246.102677][ T29] dump_stack_lvl+0x18c/0x250 [ 246.102778][ T29] ? show_regs_print_info+0x20/0x20 [ 246.102852][ T29] ? load_image+0x420/0x420 [ 246.102945][ T29] panic+0x2ca/0x720 [ 246.103050][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 246.103141][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 246.103222][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 246.103330][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 246.103435][ T29] watchdog+0xf98/0xfa0 [ 246.103527][ T29] ? watchdog+0x1e1/0xfa0 [ 246.103631][ T29] kthread+0x2fa/0x390 [ 246.103690][ T29] ? hungtask_pm_notify+0x50/0x50 [ 246.103765][ T29] ? kthread_blkcg+0xd0/0xd0 [ 246.103827][ T29] ret_from_fork+0x48/0x80 [ 246.103892][ T29] ? kthread_blkcg+0xd0/0xd0 [ 246.103967][ T29] ret_from_fork_asm+0x11/0x20 [ 246.104114][ T29] [ 246.110366][ T29] Kernel Offset: disabled [ 246.494888][ T29] Rebooting in 86400 seconds..