last executing test programs: 4.273958205s ago: executing program 1 (id=823): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r2, &(0x7f0000000340), 0x0}, 0x20) 4.169537645s ago: executing program 1 (id=824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a3", 0x27}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b80000090581"], 0x0) 2.552789741s ago: executing program 4 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@nouid32}, {@noblock_validity}, {@discard}, {@errors_remount}, {@nomblk_io_submit, 0x0}, {@noauto_da_alloc}, {@data_err_ignore}, {@grpjquota}, {@data_journal}, {@init_itable}, {@discard}, {@nolazytime}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@i_version}, {@acl}], [{@fowner_eq}, {@dont_appraise}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") sched_setscheduler(0x0, 0x2, 0x0) 2.369572467s ago: executing program 0 (id=846): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.239448338s ago: executing program 2 (id=849): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@my=0x1}, @local, 0x0, 0x2925, 0x0, 0x0, 0x4}) 2.237344839s ago: executing program 1 (id=850): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18) 2.171239155s ago: executing program 2 (id=851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020029003505d25a806f8c6394f90424fc602f0016000b740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.171054814s ago: executing program 4 (id=852): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) 2.123742789s ago: executing program 1 (id=853): r0 = syz_io_uring_setup(0xd41, &(0x7f00000007c0), &(0x7f0000000080)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r0, 0x4ac9, 0x0, 0x0, 0x0, 0x0) 2.051422726s ago: executing program 1 (id=855): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80a800, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 2.050641976s ago: executing program 4 (id=865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 2.032836707s ago: executing program 2 (id=856): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0xd7, 0xffffffff}, 0x10) 1.9937662s ago: executing program 1 (id=857): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x70694000) 1.904837568s ago: executing program 4 (id=859): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$llc(r0, &(0x7f0000000040), 0x10) 1.831121846s ago: executing program 4 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20004000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010405"], 0x1c}}, 0x44) 1.829310446s ago: executing program 2 (id=871): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x409, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="091d64e631d3"}]}, 0x50}, 0x1, 0x0, 0x0, 0xc010}, 0x4000850) 1.828770565s ago: executing program 3 (id=861): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x28}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 1.592848717s ago: executing program 2 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@nouid32}, {@noblock_validity}, {@discard}, {@errors_remount}, {@nomblk_io_submit, 0x0}, {@noauto_da_alloc}, {@data_err_ignore}, {@grpjquota}, {@data_journal}, {@init_itable}, {@discard}, {@nolazytime}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@i_version}, {@acl}], [{@fowner_eq}, {@dont_appraise}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") sched_setscheduler(0x0, 0x2, 0x0) 1.592692057s ago: executing program 3 (id=863): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) 1.592534417s ago: executing program 4 (id=864): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003380000003803b3c7d1ed1101eb79e5fb9dd36389c91545b6a40a54b8da8c11d4ee01a7190d8c4200e9f8ce5b3bb2a8f2fe9a73fee71f0b2e4e20af1c"], 0x0, 0x0, 0x0}, 0x0) open(0x0, 0x903840, 0x0) 1.267334456s ago: executing program 2 (id=866): syz_usb_connect(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xc6, 0x1e, 0x1d, 0x10, 0x2040, 0x4900, 0x816b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0x6, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0xb3, 0x2, 0xa5, 0xa7, 0x6a, 0x4, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x6}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0xf, 0xb0, 0xc}}]}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) capset(0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 685.816778ms ago: executing program 3 (id=867): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6b4, &(0x7f00000001c0)="$eJzs3c1vHGcdB/DvrNcvmwrHbdM0oEo1jVQQEUkcK4VwSUAIBalCVZDgbDVOY2WTBset0h6IA0hcOfAHlEO4wAmEkJCQIpUz3CpuFqdKSFx6Sntg0M7Obtburu3ETdahn481O79nntlnfvObl32RrA3wuXX+WJp308r5Y6/e7LQ37iy2N+4sXu3GjXaS6SSNpNmdpbiWFO8n59Kd8sXOwnq4YtR2fr1y5sIHH2182G01c3+8zkNrdILN3ezFej1lPslEPd+DTeO9/nDjTd8Pi35lOgU72iscjNtkknKTnxy+3zNMOTHQGHm9A0+Oovu6OaB7/c8lB5LM9F7Q1rudjcef4Y4e6F60/ujyAAAAgH3j4L1byc3MjjsPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJLUv/9f1FOjF8+n6P3+/9TAb+xPjTnd0bbPbKYX3G08jmQAAAAAAAAA4NF68V5+d6EsZ3vtskjjRxN141D1+FTeyo0sZzXHczNLWctaVrOQZG5goKmbS2trqwt5qfvMT8qyHPHMU0OfeWqXCbf2vs8AAAAAAAAA8H/kbD3/Wc5ndsy5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJkUy0Z1V06FePJdGM8lMkqnOeuvJP3rxk+zuuBMAAACAx+DgvdzLzcz22mVRfeY/XH3un8lbuZa1rGQt7SznYvVdQPdTf2PjzmJ7487i1c706XG//Z/78R9nd0yjGjHd7x6Gb/lItUYrl7JSLTme1/Nm2rmYRvXMjiO9fIbndbuTU3G2qywzvZsCXaznnT3/VT3fH+aqikz2K3Kyk1vRrePT21di8Og8xJYW0uh/83PoAWp+dtutFP8ty250IG9/Id1aP/X9nWs++UA7sydbK3Fq4Ow7vH0lkq/86fc/vty+duVysX5s/5xGw7w4fPH0v3pHqFeJrvUsZ3GgEs/vuhKXbuzzSozU3NRq5Ll+fD7fyw9zLPN5LatZydtZylqWM5/vVtFSfT53Hue2r9S5Ta3Xdsppqj4uE1ty+vLB7ny7nF6qnjublfwgb+ZilvNK9XcqC/lGTud0zgwc4ed2cdU3hlz1fx6d/NGv1kEryS/r+f7QqevTA3UdvOfOVX2DSxop61eWZz6ze2Nf80t10DkSPx+4BsevX4mZ9F8letk926vA5NBK/Ka6rdxoX7uyennp+pZxi/Xh23s5m3a/tX9uJJ3z5Zn+PWLz2dHpe3Zo30LVd6jf19ja99tWv2+nK3Wqfg/36ZFOVX3PD+1brPqODPR13m/NJFnOJ2VZdt9vAbDvHfjaganWv1t/b73X+kXrcuvVme9Mf3P6halM/m3yW82TEy83Xij+kPfy0+z8CR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjRjXfevbLUbi+vbgnKsrw1omsvwe1RXWkmm5b89S8D61S/NZZk99vqrH2ukVRLmqmDB8v51sPt6e2Hrc8/62PyWRb80QYzI8+frcHHZVnuj5x3E5S1/ZLPOIKx3paAx+DE2tXrJ2688+7XV64uvbH8xvK1M6dPnzl55vQriycurbRnxp0e8AhVr/XV+5xxZwIAAAAAAAAAAADs1q7+HyBFf0kzyYP+O8G49xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4sp0/lubdFFk4efxkp71xZ7HdmXrx/TU/TtJIUswnxfvJuXSnzA0MV4zaznpy4YOPNj7stpr1VK3f2PterNdT5pNM1PMhZoYtLG+NGq+oxrk+erxdKvqV6RTsaK9wMG7/CwAA//9nHhZn") truncate(&(0x7f0000000000)='./file1\x00', 0x2ba4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r0, r0, 0x0, 0xfffe80) 441.721841ms ago: executing program 3 (id=868): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x800) wait4(0x0, &(0x7f0000000000), 0x0, 0x0) 302.913703ms ago: executing program 0 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 263.696437ms ago: executing program 0 (id=870): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}, {0x4}]}]}}]}, 0xac}}, 0x0) 228.55604ms ago: executing program 0 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 188.128453ms ago: executing program 0 (id=873): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) 153.169747ms ago: executing program 3 (id=874): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 116.34854ms ago: executing program 0 (id=875): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="4dcdc7d96a76000000110805000000000040f2e3", 0x14, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="bae03d032c36"}, 0x14) 0s ago: executing program 3 (id=876): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x36) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 58.301987][ T4156] cgroup: Unknown subsys name 'net' [ 58.462991][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.920463][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.665392][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 61.702763][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 61.764267][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 61.811162][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 61.834456][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.842497][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.850718][ T4168] device bridge_slave_0 entered promiscuous mode [ 61.862187][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.869614][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.877945][ T4168] device bridge_slave_1 entered promiscuous mode [ 61.908222][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 61.950770][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.958058][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.965782][ T4167] device bridge_slave_0 entered promiscuous mode [ 61.983921][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.003485][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.010943][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.019614][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.039647][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.089824][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.097085][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.104844][ T4166] device bridge_slave_0 entered promiscuous mode [ 62.119006][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.139194][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.146349][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.155059][ T4166] device bridge_slave_1 entered promiscuous mode [ 62.167038][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.185878][ T4168] team0: Port device team_slave_0 added [ 62.218474][ T4168] team0: Port device team_slave_1 added [ 62.245113][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.252437][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.260753][ T4175] device bridge_slave_0 entered promiscuous mode [ 62.277187][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.296970][ T4167] team0: Port device team_slave_0 added [ 62.303172][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.310371][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.318718][ T4175] device bridge_slave_1 entered promiscuous mode [ 62.334416][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.344290][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.351443][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.359737][ T4169] device bridge_slave_0 entered promiscuous mode [ 62.368630][ T4167] team0: Port device team_slave_1 added [ 62.383406][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.390443][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.416372][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.434683][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.442537][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.450565][ T4169] device bridge_slave_1 entered promiscuous mode [ 62.473633][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.480822][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.506929][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.543149][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.558708][ T4166] team0: Port device team_slave_0 added [ 62.566072][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.585165][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.592278][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.618322][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.632268][ T4166] team0: Port device team_slave_1 added [ 62.660577][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.676561][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.683528][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.709933][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.734073][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.745968][ T4175] team0: Port device team_slave_0 added [ 62.770399][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.777751][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.803738][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.828592][ T4175] team0: Port device team_slave_1 added [ 62.844685][ T4168] device hsr_slave_0 entered promiscuous mode [ 62.852058][ T4168] device hsr_slave_1 entered promiscuous mode [ 62.869716][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.876931][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.903038][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.925006][ T4169] team0: Port device team_slave_0 added [ 62.955908][ T4169] team0: Port device team_slave_1 added [ 62.976413][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.983636][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.009975][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.036917][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.043774][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.050760][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.058704][ T4167] Cannot create hsr debugfs directory [ 63.065592][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.072688][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.098879][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.150241][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.157327][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.183311][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.209384][ T4166] device hsr_slave_0 entered promiscuous mode [ 63.216285][ T4166] device hsr_slave_1 entered promiscuous mode [ 63.223361][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.230996][ T4166] Cannot create hsr debugfs directory [ 63.244554][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.251599][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.277859][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.297739][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 63.304447][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.315856][ T4175] device hsr_slave_0 entered promiscuous mode [ 63.323381][ T4175] device hsr_slave_1 entered promiscuous mode [ 63.330449][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.338109][ T4175] Cannot create hsr debugfs directory [ 63.376656][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 63.389179][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 63.397428][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 63.470273][ T4169] device hsr_slave_0 entered promiscuous mode [ 63.477204][ T4169] device hsr_slave_1 entered promiscuous mode [ 63.485293][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.493884][ T4169] Cannot create hsr debugfs directory [ 63.687012][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.710884][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.722973][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.744392][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.808414][ T4167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.817926][ T4167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.830836][ T4167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.841219][ T4167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.898161][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.915217][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.932484][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.942710][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.012285][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.049925][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.065971][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.075272][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.091560][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.111194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.121614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.145826][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.167586][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.183276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.192729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.202861][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.210303][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.244647][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.252821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.262207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.271500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.280291][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.287416][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.297433][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.313368][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.332609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.342017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.350633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.362263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.372554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.381654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.391172][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.418033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.426108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.434948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.443741][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.450874][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.463478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.471328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.479522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.488939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.499733][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.506837][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.514496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.523689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.532353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.542184][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.549616][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.565401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.574542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.597094][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.612483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.622134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.631020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.641189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.650163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.659050][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.666106][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.675206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.706472][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.714943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.723860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.734355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.744098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.752847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.763222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.793950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.803023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.813145][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.820254][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.829479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.838995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.848265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.857364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.869251][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.878739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.888863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.920280][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.938717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.955733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.965097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.974407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.983808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.993530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.001933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.010569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.020178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.031686][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.047314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.056209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.093799][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.114531][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.127883][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.163186][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.183556][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.190723][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.200262][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.217286][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.226492][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.238592][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.245671][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.254572][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.265261][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.273712][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.295829][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.312111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.326010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.336257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.372666][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.379873][ T4214] Bluetooth: hci0: command 0x041b tx timeout [ 65.387104][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 65.393195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.402775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.413685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.422760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.432027][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.439156][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.448242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.455676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.463525][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 65.464649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.469716][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 65.469814][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 65.491979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.500893][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.508012][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.516378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.525521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.534076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.548220][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.573112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.583140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.592072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.603894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.613267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.622414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.631808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.641543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.649133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.656666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.685490][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.701448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.711752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.722341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.731056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.739799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.749758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.763857][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.782738][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.798862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.810337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.819200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.827952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.889548][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.904890][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.935981][ T4168] device veth0_vlan entered promiscuous mode [ 65.973397][ T4167] device veth0_vlan entered promiscuous mode [ 65.984770][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.995183][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.004691][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.013688][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.023633][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.032362][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.042064][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.050787][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.060097][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.069761][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.084331][ T4168] device veth1_vlan entered promiscuous mode [ 66.105360][ T4167] device veth1_vlan entered promiscuous mode [ 66.127864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.136303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.145023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.155496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.164856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.173732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.183795][ T4175] device veth0_vlan entered promiscuous mode [ 66.196370][ T4175] device veth1_vlan entered promiscuous mode [ 66.207960][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.222338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.230523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.239865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.249583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.258716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.279350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.287938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.296405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.332974][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.342585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.353167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.366444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.383447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.396132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.405501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.417301][ T4168] device veth0_macvtap entered promiscuous mode [ 66.445690][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.454844][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.465719][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.478961][ T4167] device veth0_macvtap entered promiscuous mode [ 66.494785][ T4168] device veth1_macvtap entered promiscuous mode [ 66.504487][ T4175] device veth0_macvtap entered promiscuous mode [ 66.515115][ T4175] device veth1_macvtap entered promiscuous mode [ 66.534217][ T4167] device veth1_macvtap entered promiscuous mode [ 66.570877][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.592201][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.604309][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.618095][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.625521][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.634134][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.643077][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.651218][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.660290][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.669794][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.679636][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.690023][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.699056][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.708558][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.717827][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.727580][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.735335][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.748281][ T4166] device veth0_vlan entered promiscuous mode [ 66.763693][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.774280][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.784980][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.797630][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.806024][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.815977][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.827525][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.836217][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.847409][ T4166] device veth1_vlan entered promiscuous mode [ 66.865152][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.874167][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.883311][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.892317][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.904887][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.915730][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.926738][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.937657][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.949483][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.958707][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.968248][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.977457][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.986157][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.025364][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.035427][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.045287][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.054605][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.065521][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.077141][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.087311][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.098121][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.109908][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.135000][ T4166] device veth0_macvtap entered promiscuous mode [ 67.157450][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.166170][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.177886][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.187822][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.196377][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.213427][ T4169] device veth0_vlan entered promiscuous mode [ 67.224306][ T4166] device veth1_macvtap entered promiscuous mode [ 67.240589][ T4167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251554][ T4167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.261510][ T4167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.270559][ T4167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.281196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.289734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.299306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.308275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.316149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.334093][ T4169] device veth1_vlan entered promiscuous mode [ 67.370970][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.383190][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.393061][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.403519][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.413580][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.424063][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.435181][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.459043][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 67.465117][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 67.492566][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.499410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.503390][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.509507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.524606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.533521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.542005][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 67.548804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.556860][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 67.560252][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.562943][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 67.573674][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.589818][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.600388][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.610239][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.621885][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.632921][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.645561][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.654581][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.663426][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.672152][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.697539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.710377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.724947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.734250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.806618][ T4169] device veth0_macvtap entered promiscuous mode [ 67.815146][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.824033][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.854407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.863863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.876167][ T4169] device veth1_macvtap entered promiscuous mode [ 67.883101][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.906285][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.914035][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.944717][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.957747][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.964055][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.975148][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.986026][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.996129][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.006713][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.017632][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.028260][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.040453][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.051192][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.062088][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.072452][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.084160][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.094324][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.106657][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.116465][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.127363][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.139248][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.150051][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.158248][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.166036][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.176011][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.185700][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.194700][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.218954][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.219264][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.232166][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.239130][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.254063][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.263713][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.298257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.324323][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.341412][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.375729][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.424908][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.489640][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.496239][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.525165][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.537425][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.545589][ T4247] loop0: detected capacity change from 0 to 256 [ 68.573064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.582360][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.606447][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.638152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.656305][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.658202][ T4247] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 68.688423][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.704710][ T4247] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 68.731852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.783230][ T4247] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 68.827944][ T4247] UDF-fs: Scanning with blocksize 512 failed [ 68.867073][ T4247] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 68.969919][ T4247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.999241][ T4253] loop2: detected capacity change from 0 to 4096 [ 69.054283][ T4253] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 69.189914][ T4253] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 69.265775][ T4270] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.312275][ T4253] ntfs3: loop2: Failed to load $Extend. [ 69.475700][ T4274] loop0: detected capacity change from 0 to 1024 [ 69.538391][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.544558][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 69.573690][ T4175] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 69.618120][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 69.628955][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 69.656900][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.702959][ T26] audit: type=1800 audit(1730990514.474:2): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 70.161118][ T4306] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 70.460504][ T26] audit: type=1326 audit(1730990515.234:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 70.493076][ T4265] loop1: detected capacity change from 0 to 32768 [ 70.507739][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 70.527925][ T26] audit: type=1326 audit(1730990515.234:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 70.577963][ T4265] ======================================================= [ 70.577963][ T4265] WARNING: The mand mount option has been deprecated and [ 70.577963][ T4265] and is ignored by this kernel. Remove the mand [ 70.577963][ T4265] option from the mount to silence this warning. [ 70.577963][ T4265] ======================================================= [ 70.627649][ T26] audit: type=1326 audit(1730990515.234:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 70.652997][ T26] audit: type=1326 audit(1730990515.234:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 70.662973][ T4265] XFS: attr2 mount option is deprecated. [ 70.707489][ T4335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.42'. [ 70.742475][ T26] audit: type=1326 audit(1730990515.234:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 70.765177][ T4265] XFS: ikeep mount option is deprecated. [ 70.786557][ T4265] XFS: noikeep mount option is deprecated. [ 70.837100][ T4338] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.957505][ T4265] XFS (loop1): Mounting V5 Filesystem [ 71.145717][ T4265] XFS (loop1): Ending clean mount [ 71.153737][ T4361] loop2: detected capacity change from 0 to 512 [ 71.172233][ T4265] XFS (loop1): Quotacheck needed: Please wait. [ 71.265511][ T4265] XFS (loop1): Quotacheck: Done. [ 71.302722][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.309505][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.378013][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 71.421017][ T4166] XFS (loop1): Unmounting Filesystem [ 71.929176][ T4343] loop4: detected capacity change from 0 to 32768 [ 71.955233][ T4380] loop2: detected capacity change from 0 to 4096 [ 72.021234][ T4380] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 72.053914][ T4343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.45 (4343) [ 72.093125][ T4395] loop0: detected capacity change from 0 to 512 [ 72.134660][ T4395] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.172997][ T4343] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 72.214016][ T4343] BTRFS info (device loop4): setting nodatacow, compression disabled [ 72.244530][ T4343] BTRFS info (device loop4): max_inline at 0 [ 72.254110][ T4395] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 72.293614][ T4343] BTRFS info (device loop4): enabling disk space caching [ 72.314675][ T4343] BTRFS info (device loop4): turning off barriers [ 72.342910][ T4175] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 72.357563][ T4343] BTRFS info (device loop4): turning on flush-on-commit [ 72.364555][ T4343] BTRFS info (device loop4): doing ref verification [ 72.392262][ T4343] BTRFS info (device loop4): force clearing of disk cache [ 72.407630][ T4175] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 72.414187][ T4175] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 72.423603][ T4343] BTRFS info (device loop4): enabling ssd optimizations [ 72.433028][ T4343] BTRFS info (device loop4): max_inline at 4096 [ 72.440303][ T4343] BTRFS info (device loop4): disk space caching is enabled [ 72.449010][ T4343] BTRFS info (device loop4): has skinny extents [ 72.476692][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.484665][ T4395] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -6 [ 72.736364][ T26] audit: type=1326 audit(1730990517.504:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 72.795891][ T26] audit: type=1326 audit(1730990517.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 72.797775][ T4343] BTRFS info (device loop4): clearing free space tree [ 72.829271][ T26] audit: type=1326 audit(1730990517.604:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f8a90c2a719 code=0x7ffc0000 [ 72.864255][ T4343] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.876021][ T4343] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.922739][ T4394] loop3: detected capacity change from 0 to 40427 [ 72.987026][ T4394] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 73.006335][ T4394] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.029088][ T1110] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 73.054464][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.068909][ T4394] F2FS-fs (loop3): invalid crc value [ 73.097887][ T4394] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.102420][ T1110] usb 2-1: Product: syz [ 73.119500][ T1110] usb 2-1: Manufacturer: syz [ 73.126208][ T1110] usb 2-1: SerialNumber: syz [ 73.167096][ T1110] usb 2-1: config 0 descriptor?? [ 73.219947][ T4394] F2FS-fs (loop3): Start checkpoint disabled! [ 73.279294][ T4394] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.293959][ T4394] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 73.537068][ T4215] usb 2-1: USB disconnect, device number 2 [ 74.233896][ T4467] process 'syz.2.85' launched './file1' with NULL argv: empty string added [ 74.340331][ T26] audit: type=1326 audit(1730990519.114:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a90c2a719 code=0x0 [ 74.416317][ T4477] loop4: detected capacity change from 0 to 2048 [ 74.555486][ T4477] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none. [ 74.616222][ T4491] netlink: 'syz.2.96': attribute type 4 has an invalid length. [ 74.714610][ T4495] lo speed is unknown, defaulting to 1000 [ 74.766157][ T4495] lo speed is unknown, defaulting to 1000 [ 74.786351][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 74.795809][ T4499] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 74.808585][ T4495] lo speed is unknown, defaulting to 1000 [ 74.922036][ T4501] loop3: detected capacity change from 0 to 2048 [ 75.070959][ T4244] lo speed is unknown, defaulting to 1000 [ 75.072341][ T4501] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 75.078378][ T4495] infiniband syz2: set down [ 75.107365][ T4495] infiniband syz2: added lo [ 75.115036][ T4501] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.170899][ T4501] fs-verity: sha512 using implementation "sha512-avx2" [ 75.190061][ T4501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.100: bg 0: block 345: padding at end of block bitmap is not set [ 75.214105][ T4501] fs-verity (loop3, inode 13): Error -117 writing Merkle tree block 0 [ 75.223415][ T4501] fs-verity (loop3, inode 13): Error -117 building Merkle tree [ 75.267440][ T4495] RDS/IB: syz2: added [ 75.273420][ T4495] smc: adding ib device syz2 with port count 1 [ 75.287321][ T4495] smc: ib device syz2 port 1 has pnetid [ 75.295888][ T4211] lo speed is unknown, defaulting to 1000 [ 75.309075][ T4495] lo speed is unknown, defaulting to 1000 [ 75.412449][ T4520] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.627747][ T4495] lo speed is unknown, defaulting to 1000 [ 75.790470][ T4244] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.867961][ T4538] loop1: detected capacity change from 0 to 1024 [ 75.871313][ T4495] lo speed is unknown, defaulting to 1000 [ 75.906641][ T4211] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.952491][ T4538] hfsplus: request for non-existent node 3 in B*Tree [ 75.980888][ T4538] hfsplus: request for non-existent node 3 in B*Tree [ 76.056037][ T4495] lo speed is unknown, defaulting to 1000 [ 76.057137][ T4244] usb 4-1: Using ep0 maxpacket: 8 [ 76.221911][ T4244] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 76.224577][ T4495] lo speed is unknown, defaulting to 1000 [ 76.232613][ T4244] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 76.246940][ T4244] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 76.256308][ T4244] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 76.274658][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 76.306944][ T4216] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.326393][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.346853][ T4244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 76.431374][ T4211] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 76.450443][ T4211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.466673][ T4211] usb 1-1: Product: syz [ 76.476479][ T4211] usb 1-1: Manufacturer: syz [ 76.487511][ T4211] usb 1-1: SerialNumber: syz [ 76.497273][ T4552] input: syz0 as /devices/virtual/input/input5 [ 76.548462][ T4211] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 76.567249][ T4244] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 76.576323][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.608984][ T4244] usb 4-1: Product: syz [ 76.613197][ T4244] usb 4-1: Manufacturer: syz [ 76.642021][ T4244] usb 4-1: SerialNumber: syz [ 76.650151][ T4244] usb 4-1: config 0 descriptor?? [ 76.691212][ T4216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.697852][ T4244] hub 4-1:0.0: bad descriptor, ignoring hub [ 76.716814][ T4244] hub: probe of 4-1:0.0 failed with error -5 [ 76.722771][ T4216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.734469][ T4216] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.746589][ T4244] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 76.749188][ T4216] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 76.765654][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.777645][ T4216] usb 5-1: config 0 descriptor?? [ 76.967172][ T4522] udc-core: couldn't find an available UDC or it's busy [ 76.973958][ T4550] loop1: detected capacity change from 0 to 32768 [ 76.974183][ T4522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.007896][ T23] usb 4-1: USB disconnect, device number 2 [ 77.103365][ T4550] XFS (loop1): Mounting V5 Filesystem [ 77.172586][ T4550] XFS (loop1): Ending clean mount [ 77.182950][ T4550] XFS (loop1): Quotacheck needed: Please wait. [ 77.186837][ T4211] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 77.261467][ T4216] hid-udraw 0003:20D6:CB17.0001: unbalanced delimiter at end of report description [ 77.285779][ T4216] hid-udraw 0003:20D6:CB17.0001: parse failed [ 77.293249][ T4216] hid-udraw: probe of 0003:20D6:CB17.0001 failed with error -22 [ 77.306158][ T4550] XFS (loop1): Quotacheck: Done. [ 77.379277][ T4578] loop2: detected capacity change from 0 to 256 [ 77.409830][ T4166] XFS (loop1): Unmounting Filesystem [ 77.512351][ T4578] FAT-fs (loop2): Directory bread(block 64) failed [ 77.521726][ T4578] FAT-fs (loop2): Directory bread(block 65) failed [ 77.528923][ T4578] FAT-fs (loop2): Directory bread(block 66) failed [ 77.535553][ T4578] FAT-fs (loop2): Directory bread(block 67) failed [ 77.540583][ T4244] usb 5-1: USB disconnect, device number 2 [ 77.551387][ T4578] FAT-fs (loop2): Directory bread(block 68) failed [ 77.565267][ T4578] FAT-fs (loop2): Directory bread(block 69) failed [ 77.575669][ T4578] FAT-fs (loop2): Directory bread(block 70) failed [ 77.622481][ T4578] FAT-fs (loop2): Directory bread(block 71) failed [ 77.629845][ T4578] FAT-fs (loop2): Directory bread(block 72) failed [ 77.636402][ T4578] FAT-fs (loop2): Directory bread(block 73) failed [ 77.799838][ T4578] attempt to access beyond end of device [ 77.799838][ T4578] loop2: rw=1, want=1324, limit=256 [ 77.825720][ T4216] usb 1-1: USB disconnect, device number 2 [ 77.950004][ T4584] loop1: detected capacity change from 0 to 8192 [ 78.002737][ T4584] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.037331][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 78.066423][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 78.110066][ T4586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.135'. [ 78.192534][ T4590] loop1: detected capacity change from 0 to 64 [ 78.238634][ T4580] loop3: detected capacity change from 0 to 32768 [ 78.257789][ T4592] loop2: detected capacity change from 0 to 2048 [ 78.314089][ T4580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.133 (4580) [ 78.374781][ T4592] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.496804][ T4211] usb 1-1: Service connection timeout for: 256 [ 78.503036][ T4211] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 78.568135][ T4211] ath9k_htc: Failed to initialize the device [ 78.579089][ T4216] usb 1-1: ath9k_htc: USB layer deinitialized [ 78.614663][ T4580] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 78.686750][ T4580] BTRFS info (device loop3): setting nodatacow, compression disabled [ 78.694907][ T4580] BTRFS info (device loop3): max_inline at 0 [ 78.746996][ T4580] BTRFS info (device loop3): enabling disk space caching [ 78.755159][ T4580] BTRFS info (device loop3): setting datasum, datacow enabled [ 78.776566][ T4580] BTRFS info (device loop3): turning on flush-on-commit [ 78.798693][ T4580] BTRFS info (device loop3): doing ref verification [ 78.817652][ T4580] BTRFS info (device loop3): force clearing of disk cache [ 78.840216][ T4580] BTRFS info (device loop3): enabling ssd optimizations [ 78.868335][ T4580] BTRFS info (device loop3): turning off barriers [ 78.874842][ T4580] BTRFS info (device loop3): max_inline at 4096 [ 78.896951][ T4580] BTRFS info (device loop3): disk space caching is enabled [ 78.904200][ T4580] BTRFS info (device loop3): has skinny extents [ 79.202946][ T4604] loop4: detected capacity change from 0 to 32768 [ 79.221018][ T4580] BTRFS info (device loop3): clearing free space tree [ 79.260924][ T4580] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.293356][ T4580] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.425884][ T4604] XFS (loop4): Mounting V5 Filesystem [ 79.553527][ T4604] XFS (loop4): Ending clean mount [ 79.559515][ T4669] fuse: Invalid user_id [ 79.573602][ T4604] XFS (loop4): Quotacheck needed: Please wait. [ 79.652013][ T4211] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.712704][ T4604] XFS (loop4): Quotacheck: Done. [ 79.837048][ T4169] XFS (loop4): Unmounting Filesystem [ 79.921120][ T4211] usb 2-1: Using ep0 maxpacket: 16 [ 80.036832][ T4211] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 80.045041][ T4211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.073787][ T4211] usb 2-1: config 0 has no interface number 0 [ 80.211703][ T4674] loop0: detected capacity change from 0 to 32768 [ 80.236970][ T4211] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 80.246138][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.264761][ T4211] usb 2-1: Product: syz [ 80.269340][ T4211] usb 2-1: Manufacturer: syz [ 80.273967][ T4211] usb 2-1: SerialNumber: syz [ 80.288173][ T4211] usb 2-1: config 0 descriptor?? [ 80.330705][ T4211] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 80.340151][ T4211] usb 2-1: No valid video chain found. [ 80.588874][ T4683] usb 2-1: USB disconnect, device number 3 [ 80.731860][ T4695] loop3: detected capacity change from 0 to 164 [ 80.846856][ T4695] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 80.970730][ T4705] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.173'. [ 81.003705][ T4705] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 81.011793][ T4703] loop0: detected capacity change from 0 to 4096 [ 81.135848][ T4708] loop3: detected capacity change from 0 to 512 [ 81.143846][ T26] audit: type=1800 audit(1730990525.914:12): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.172" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 81.317677][ T4708] EXT4-fs (loop3): Invalid log block size: 3607101440 [ 81.341577][ T4692] loop4: detected capacity change from 0 to 32768 [ 81.433847][ T4718] loop2: detected capacity change from 0 to 1024 [ 81.534685][ T4692] XFS (loop4): Mounting V5 Filesystem [ 81.551341][ T1335] cfg80211: failed to load regulatory.db [ 81.588583][ T442] hfsplus: b-tree write err: -5, ino 4 [ 81.767123][ T4741] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.844887][ T4692] XFS (loop4): Ending clean mount [ 81.877860][ T4745] loop0: detected capacity change from 0 to 64 [ 82.154503][ T4169] XFS (loop4): Unmounting Filesystem [ 82.480331][ T4768] capability: warning: `syz.0.197' uses deprecated v2 capabilities in a way that may be insecure [ 82.522717][ T4768] program syz.0.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.533236][ T4762] loop3: detected capacity change from 0 to 4096 [ 82.676713][ T4762] NILFS (loop3): invalid segment: Checksum error in segment payload [ 82.685172][ T4762] NILFS (loop3): trying rollback from an earlier position [ 82.707559][ T4774] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 82.715761][ T4774] netlink: 'syz.0.201': attribute type 2 has an invalid length. [ 82.811234][ T4762] NILFS (loop3): recovery complete [ 82.854835][ T4781] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.431729][ T26] audit: type=1326 audit(1730990528.204:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61b59b9719 code=0x0 [ 83.479490][ T4245] kernel write not supported for file /snd/seq (pid: 4245 comm: kworker/0:7) [ 83.545198][ T4812] loop2: detected capacity change from 0 to 512 [ 83.628827][ T4812] EXT4-fs (loop2): Ignoring removed orlov option [ 83.740762][ T4812] EXT4-fs (loop2): 1 orphan inode deleted [ 83.773519][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 83.807442][ T4812] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.081000][ T4842] capability: warning: `syz.0.227' uses 32-bit capabilities (legacy support in use) [ 84.114956][ T4843] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.291531][ T4853] netlink: 'syz.2.231': attribute type 5 has an invalid length. [ 84.743734][ T4869] loop4: detected capacity change from 0 to 4096 [ 84.829405][ T4869] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 85.269804][ T4851] loop0: detected capacity change from 0 to 32768 [ 85.480394][ T4851] XFS (loop0): Mounting V5 Filesystem [ 85.685458][ T4851] XFS (loop0): Ending clean mount [ 85.741782][ T4168] XFS (loop0): Unmounting Filesystem [ 86.052611][ T4932] loop4: detected capacity change from 0 to 764 [ 86.148591][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 86.743105][ T4959] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 86.777861][ T4961] netlink: 260 bytes leftover after parsing attributes in process `syz.1.280'. [ 86.912157][ T4971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 87.045895][ T4973] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.287'. [ 87.097652][ T4973] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.111713][ T4975] loop3: detected capacity change from 0 to 512 [ 87.393957][ T4975] EXT4-fs (loop3): 1 orphan inode deleted [ 87.397801][ T4942] loop0: detected capacity change from 0 to 32768 [ 87.416681][ T4975] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.457349][ T4975] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.489745][ T4992] loop2: detected capacity change from 0 to 1024 [ 87.666029][ T4967] loop1: detected capacity change from 0 to 32768 [ 87.686052][ T4782] hfsplus: b-tree write err: -5, ino 4 [ 87.748998][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 87.813708][ T4967] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 87.813708][ T4967] [ 87.827017][ T5004] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 87.827017][ T5004] The task syz.3.295 (5004) triggered the difference, watch for misbehavior. [ 87.857025][ T4967] ERROR: (device loop1): remounting filesystem as read-only [ 88.213212][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 88.341826][ T5029] ipt_CLUSTERIP: Please specify destination IP [ 88.710246][ T5044] loop2: detected capacity change from 0 to 64 [ 88.892045][ T5052] batman_adv: batadv0: Adding interface: ip6gretap1 [ 88.954235][ T5052] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.002685][ T5054] libceph: resolve '40.' (ret=-3): failed [ 89.122739][ T5052] batman_adv: batadv0: Interface activated: ip6gretap1 [ 89.474582][ T5027] loop4: detected capacity change from 0 to 40427 [ 89.547553][ T5027] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 89.624746][ T5048] loop0: detected capacity change from 0 to 32768 [ 89.665606][ T5071] loop4: detected capacity change from 0 to 512 [ 89.676060][ T5048] XFS: noikeep mount option is deprecated. [ 89.682829][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.819367][ T5071] EXT4-fs (loop4): 1 orphan inode deleted [ 89.835470][ T5048] XFS (loop0): Mounting V5 Filesystem [ 89.842364][ T5071] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.917510][ T5071] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.948102][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 89.990290][ T5048] XFS (loop0): Ending clean mount [ 90.029041][ T5048] XFS (loop0): Quotacheck needed: Please wait. [ 90.068318][ T1107] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 90.087015][ T1107] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 90.099471][ T5048] XFS (loop0): Quotacheck: Done. [ 90.180225][ T1107] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 90.217988][ T1107] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 90.250711][ T4168] XFS (loop0): Unmounting Filesystem [ 90.280421][ T1107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.453743][ T5067] loop2: detected capacity change from 0 to 32768 [ 90.487149][ T1107] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 90.517388][ T1107] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 90.527499][ T1107] usb 4-1: Product: syz [ 90.552049][ T1107] usb 4-1: Manufacturer: syz [ 90.586435][ T5067] read_mapping_page failed! [ 90.587265][ T1107] usb 4-1: SerialNumber: syz [ 90.592156][ T5067] ERROR: (device loop2): txCommit: [ 90.592156][ T5067] [ 90.624593][ T5067] ERROR: (device loop2): remounting filesystem as read-only [ 90.636402][ T1107] usb 4-1: config 0 descriptor?? [ 90.718471][ T1107] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 90.804596][ T1107] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 90.997139][ T5111] netlink: 'syz.2.340': attribute type 15 has an invalid length. [ 91.009512][ T1107] usb 4-1: USB disconnect, device number 3 [ 91.040324][ T1107] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 91.217852][ T5069] ldusb: No device or device unplugged -19 [ 91.591688][ T5127] loop1: detected capacity change from 0 to 64 [ 91.690548][ T5127] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 91.837635][ T5119] loop2: detected capacity change from 0 to 32768 [ 91.853155][ T5107] loop4: detected capacity change from 0 to 40427 [ 91.893702][ T5119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.348 (5119) [ 91.922188][ T5107] F2FS-fs (loop4): invalid crc value [ 91.972123][ T5107] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.996824][ T5119] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.032162][ T5119] BTRFS info (device loop2): using free space tree [ 92.074367][ T5119] BTRFS info (device loop2): has skinny extents [ 92.151792][ T5107] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 92.161955][ T5107] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 92.271271][ T5119] BTRFS info (device loop2): enabling ssd optimizations [ 92.303718][ T4169] attempt to access beyond end of device [ 92.303718][ T4169] loop4: rw=2049, want=45104, limit=40427 [ 92.318389][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 92.372175][ T5172] loop3: detected capacity change from 0 to 4096 [ 92.450301][ T5172] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 92.523558][ T5172] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 92.977838][ T5189] netlink: 160 bytes leftover after parsing attributes in process `syz.3.366'. [ 92.980916][ T5190] loop1: detected capacity change from 0 to 512 [ 93.100858][ T5190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.137219][ T5190] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.166005][ T5202] loop4: detected capacity change from 0 to 1024 [ 93.402208][ T3081] hfsplus: b-tree write err: -5, ino 4 [ 93.724227][ T5236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 93.748914][ T5234] block nbd1: shutting down sockets [ 93.768627][ T5222] loop4: detected capacity change from 0 to 8192 [ 93.840923][ T5222] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 93.907053][ T5222] REISERFS (device loop4): using ordered data mode [ 93.914093][ T5222] reiserfs: using flush barriers [ 93.998920][ T5222] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.040329][ T5248] loop0: detected capacity change from 0 to 1024 [ 94.125871][ T5222] REISERFS (device loop4): checking transaction log (loop4) [ 94.207759][ T5222] REISERFS (device loop4): Using r5 hash to sort names [ 94.249631][ T26] audit: type=1800 audit(1730990539.024:14): pid=5259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 94.387522][ T5222] reiserfs: enabling write barrier flush mode [ 94.541001][ T5222] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 94.597623][ T5279] loop2: detected capacity change from 0 to 64 [ 94.786610][ T5279] attempt to access beyond end of device [ 94.786610][ T5279] loop2: rw=16812033, want=164, limit=64 [ 94.821471][ T5279] attempt to access beyond end of device [ 94.821471][ T5279] loop2: rw=16812033, want=168, limit=64 [ 94.843147][ T5279] attempt to access beyond end of device [ 94.843147][ T5279] loop2: rw=16812033, want=170, limit=64 [ 94.893683][ T5285] CIFS: iocharset name too long [ 94.911269][ T5279] attempt to access beyond end of device [ 94.911269][ T5279] loop2: rw=16812033, want=178, limit=64 [ 95.014916][ T5279] attempt to access beyond end of device [ 95.014916][ T5279] loop2: rw=16812033, want=742, limit=64 [ 95.042415][ T5289] netlink: 'syz.4.404': attribute type 11 has an invalid length. [ 95.054620][ T5289] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.404'. [ 95.163408][ T5293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 95.183797][ T5293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 95.334796][ T5299] loop2: detected capacity change from 0 to 512 [ 95.373961][ T5273] loop3: detected capacity change from 0 to 32768 [ 95.422397][ T5299] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 95.422397][ T5299] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 95.422397][ T5299] [ 95.477009][ T5299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.509695][ T5299] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.581051][ T5299] EXT4-fs (loop2): 1 orphan inode deleted [ 95.587723][ T5273] XFS (loop3): Mounting V5 Filesystem [ 95.597038][ T5299] EXT4-fs (loop2): 1 truncate cleaned up [ 95.629341][ T5299] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 95.729796][ T5299] EXT4-fs (loop2): shut down requested (2) [ 95.751482][ T5273] XFS (loop3): Ending clean mount [ 95.969877][ T5333] loop0: detected capacity change from 0 to 16 [ 96.016290][ T4167] XFS (loop3): Unmounting Filesystem [ 96.120398][ T5333] erofs: (device loop0): mounted with root inode @ nid 36. [ 96.171426][ T5333] overlayfs: failed to get redirect (-117) [ 96.567969][ T5349] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.075491][ T5375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 97.105617][ T5375] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 97.269571][ T5381] loop2: detected capacity change from 0 to 1024 [ 97.307446][ T1335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.453042][ T5388] netlink: 'syz.2.449': attribute type 12 has an invalid length. [ 97.496209][ T5356] loop4: detected capacity change from 0 to 32768 [ 97.523676][ T5393] loop2: detected capacity change from 0 to 64 [ 97.576919][ T1335] usb 4-1: Using ep0 maxpacket: 8 [ 97.619280][ T5356] XFS (loop4): Mounting V5 Filesystem [ 97.706800][ T1335] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 97.715530][ T1335] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 97.746591][ T1335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.801598][ T5356] XFS (loop4): Ending clean mount [ 97.854389][ T5356] XFS (loop4): Quotacheck needed: Please wait. [ 97.890613][ T5412] loop2: detected capacity change from 0 to 512 [ 97.944093][ T5356] XFS (loop4): Quotacheck: Done. [ 97.960828][ T5412] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 97.986926][ T1335] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.007159][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.015193][ T1335] usb 4-1: Product: syz [ 98.042467][ T5412] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,nogrpid,nogrpid,,errors=continue. Quota mode: none. [ 98.057933][ T1335] usb 4-1: Manufacturer: syz [ 98.074577][ T5420] loop1: detected capacity change from 0 to 128 [ 98.094817][ T4169] XFS (loop4): Unmounting Filesystem [ 98.100898][ T26] audit: type=1800 audit(1730990542.874:15): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.454" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 98.119392][ T1335] usb 4-1: SerialNumber: syz [ 98.184131][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.204773][ T5420] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.560920][ T5432] loop0: detected capacity change from 0 to 2048 [ 98.617336][ T1335] usb 4-1: 0:2 : does not exist [ 98.697239][ T5432] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.894100][ T4681] usb 4-1: USB disconnect, device number 4 [ 99.019363][ T5458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 99.193570][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.620103][ T5471] loop3: detected capacity change from 0 to 2048 [ 99.734945][ T5476] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.919346][ T5471] syz.3.479 (5471) used greatest stack depth: 18832 bytes left [ 100.572469][ T5462] loop2: detected capacity change from 0 to 40427 [ 100.589914][ T5465] loop0: detected capacity change from 0 to 40427 [ 100.716465][ T5465] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.758595][ T5462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.956471][ T5465] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.966936][ T5462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.123128][ T4175] attempt to access beyond end of device [ 101.123128][ T4175] loop2: rw=2049, want=45104, limit=40427 [ 101.143088][ T4168] attempt to access beyond end of device [ 101.143088][ T4168] loop0: rw=2049, want=45104, limit=40427 [ 101.154480][ T4245] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.232665][ T5496] loop3: detected capacity change from 0 to 32768 [ 101.311851][ T5496] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.490 (5496) [ 101.414004][ T5496] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 101.426716][ T4245] usb 2-1: Using ep0 maxpacket: 16 [ 101.454050][ T5496] BTRFS info (device loop3): using free space tree [ 101.476659][ T5496] BTRFS info (device loop3): has skinny extents [ 101.510142][ T5527] tipc: Started in network mode [ 101.523651][ T5527] tipc: Node identity 7ff, cluster identity 4711 [ 101.541402][ T5527] tipc: Node number set to 2047 [ 101.546975][ T4245] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 101.736796][ T4245] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 101.743352][ T5539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.502'. [ 101.756233][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.798077][ T4245] usb 2-1: Product: syz [ 101.812649][ T4245] usb 2-1: Manufacturer: syz [ 101.812692][ T5496] BTRFS info (device loop3): enabling ssd optimizations [ 101.842696][ T4245] usb 2-1: SerialNumber: syz [ 101.888278][ T4245] usb 2-1: config 0 descriptor?? [ 101.953760][ T4245] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 101.988159][ T4245] usb 2-1: Detected FT232RL [ 102.167580][ T4245] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 102.258231][ T5564] loop4: detected capacity change from 0 to 256 [ 102.336423][ T5564] exfat: Deprecated parameter 'namecase' [ 102.402079][ T5564] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 102.459131][ T4245] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 102.699766][ T4245] usb 2-1: USB disconnect, device number 4 [ 102.761334][ T4245] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 102.773131][ T4245] ftdi_sio 2-1:0.0: device disconnected [ 102.906741][ T5589] loop3: detected capacity change from 0 to 2048 [ 102.969261][ T5589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.145507][ T5597] loop4: detected capacity change from 0 to 512 [ 103.295181][ T5597] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 103.336665][ T5597] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.348872][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 103.384128][ T5597] EXT4-fs (loop4): shut down requested (2) [ 103.414854][ T5614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'. [ 103.769255][ T5632] loop2: detected capacity change from 0 to 128 [ 103.924197][ T5634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.946821][ T4245] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.971321][ T5636] syz.1.536 (5636) used greatest stack depth: 18776 bytes left [ 104.033145][ T5638] loop0: detected capacity change from 0 to 16 [ 104.121758][ T5608] loop3: detected capacity change from 0 to 32768 [ 104.129002][ T5642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.538'. [ 104.138190][ T5638] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.158399][ T5638] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 104.175125][ T5638] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 104.356809][ T4245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.390316][ T4245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.419912][ T4245] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 104.478064][ T4245] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 104.511634][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.513480][ T5659] netlink: 'syz.0.549': attribute type 4 has an invalid length. [ 104.547560][ T4245] usb 5-1: config 0 descriptor?? [ 104.559080][ T5659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.567063][ T5659] IPv6: NLM_F_CREATE should be set when creating new route [ 104.822941][ T5671] mmap: syz.3.552 (5671) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 104.848210][ T5673] sg_write: process 279 (syz.2.555) changed security contexts after opening file descriptor, this is not allowed. [ 104.879316][ T5673] program syz.2.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.001791][ T5677] loop3: detected capacity change from 0 to 64 [ 105.069425][ T4245] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 105.076437][ T4245] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 105.106600][ T4245] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 105.116945][ T4245] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 105.134105][ T4245] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 105.171279][ T4245] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 105.183128][ T5677] hfs: unable to parse mount options [ 105.255013][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 105.290810][ T4245] ntrig 0003:1B96:000A.0002: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 105.536176][ T5573] usb 5-1: USB disconnect, device number 3 [ 105.782712][ T5669] loop0: detected capacity change from 0 to 32768 [ 105.870802][ T5717] loop2: detected capacity change from 0 to 16 [ 105.934178][ T5717] erofs: (device loop2): mounted with root inode @ nid 36. [ 105.969717][ T5717] erofs: (device loop2): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 105.973061][ T5669] XFS (loop0): Mounting V5 Filesystem [ 106.015717][ T5717] erofs: (device loop2): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 106.057993][ T5717] erofs: (device loop2): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 106.124850][ T5717] attempt to access beyond end of device [ 106.124850][ T5717] loop2: rw=524288, want=32, limit=16 [ 106.136236][ T5717] attempt to access beyond end of device [ 106.136236][ T5717] loop2: rw=524288, want=24, limit=16 [ 106.243101][ T5669] XFS (loop0): Ending clean mount [ 106.291487][ T5669] XFS (loop0): Quotacheck needed: Please wait. [ 106.353515][ T5746] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 106.373084][ T5669] XFS (loop0): Quotacheck: Done. [ 106.745800][ T4168] XFS (loop0): Unmounting Filesystem [ 107.264607][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 107.613098][ T5818] loop1: detected capacity change from 0 to 1024 [ 107.742728][ T5818] EXT4-fs (loop1): Ignoring removed bh option [ 107.812689][ T5818] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,discard,grpid,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,init_itable=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 108.014539][ T5839] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.193805][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 108.260158][ T5857] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 108.368458][ T5866] loop2: detected capacity change from 0 to 16 [ 108.427690][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 108.443657][ T5866] erofs: (device loop2): mounted with root inode @ nid 36. [ 108.494741][ T5872] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.546455][ T26] audit: type=1800 audit(1730990553.314:16): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.636" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 108.745929][ T5890] xt_bpf: check failed: parse error [ 108.768286][ T5884] lo speed is unknown, defaulting to 1000 [ 109.027702][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.041993][ T5896] loop0: detected capacity change from 0 to 4096 [ 109.045718][ T5898] sp0: Synchronizing with TNC [ 109.115171][ T5896] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 109.229657][ T5896] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 109.276634][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 109.406848][ T1110] usb 3-1: config 0 has no interfaces? [ 109.415249][ T5914] loop4: detected capacity change from 0 to 16 [ 109.457690][ T5914] erofs: (device loop4): mounted with root inode @ nid 36. [ 109.497258][ T5914] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 109.526582][ T5914] erofs: (device loop4): z_erofs_readahead: readahead error at page 3604 @ nid 36 [ 109.549051][ T5914] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 109.567071][ T1110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.573857][ T5919] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 109.594649][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.595530][ T5914] erofs: (device loop4): z_erofs_readahead: readahead error at page 3603 @ nid 36 [ 109.612266][ T1110] usb 3-1: Product: syz [ 109.619207][ T1110] usb 3-1: Manufacturer: syz [ 109.619275][ T5919] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 109.626887][ T4211] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.642537][ T1110] usb 3-1: SerialNumber: syz [ 109.652521][ T5914] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 109.665778][ T5914] erofs: (device loop4): z_erofs_readahead: readahead error at page 3602 @ nid 36 [ 109.675630][ T5914] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 109.680864][ T1110] usb 3-1: config 0 descriptor?? [ 109.693284][ T5914] erofs: (device loop4): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 109.703178][ T5914] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 109.717406][ T5914] erofs: (device loop4): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 109.727235][ T5914] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 109.748757][ T5914] erofs: (device loop4): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 109.784432][ T5923] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.661'. [ 109.861369][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 110.071213][ T4245] usb 3-1: USB disconnect, device number 2 [ 110.181956][ T4211] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.210019][ T4211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.252349][ T4211] usb 4-1: Product: syz [ 110.264328][ T4211] usb 4-1: Manufacturer: syz [ 110.275787][ T4211] usb 4-1: SerialNumber: syz [ 110.327424][ T4211] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.668213][ T5972] loop0: detected capacity change from 0 to 64 [ 110.802745][ T5982] loop2: detected capacity change from 0 to 128 [ 110.916822][ T1110] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.992299][ T5982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.036907][ T5982] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.105640][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.360756][ T6005] loop2: detected capacity change from 0 to 4096 [ 111.367595][ T6014] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 111.372302][ T4211] usb 4-1: USB disconnect, device number 5 [ 111.628346][ T6005] ntfs3: loop2: failed to convert "0080" to cp850 [ 111.689050][ T6005] ntfs3: loop2: failed to convert name for inode 1e. [ 111.731384][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 111.936150][ T6027] loop2: detected capacity change from 0 to 2048 [ 112.014085][ T6027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.016612][ T1110] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 112.046998][ T1110] ath9k_htc: Failed to initialize the device [ 112.077341][ T4211] usb 4-1: ath9k_htc: USB layer deinitialized [ 112.150138][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 112.176724][ T1335] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.338550][ T6011] loop4: detected capacity change from 0 to 32768 [ 112.371309][ T6011] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.695 (6011) [ 112.424444][ T6011] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 112.467297][ T6011] BTRFS info (device loop4): enabling auto defrag [ 112.473765][ T6011] BTRFS info (device loop4): doing ref verification [ 112.492595][ T1335] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 112.546566][ T6011] BTRFS info (device loop4): use no compression [ 112.573071][ T6011] BTRFS info (device loop4): force clearing of disk cache [ 112.586889][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.600891][ T6011] BTRFS info (device loop4): disabling free space tree [ 112.616795][ T6046] device ip6erspan0 entered promiscuous mode [ 112.623371][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.633077][ T6011] BTRFS info (device loop4): has skinny extents [ 112.654913][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.768034][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.781906][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.796715][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.839705][ T6056] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 112.897235][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.906375][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.985555][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.084686][ T6011] BTRFS info (device loop4): enabling ssd optimizations [ 113.116793][ T6011] BTRFS info (device loop4): clearing free space tree [ 113.117026][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.135047][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.146683][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.149927][ T6011] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.204806][ T6088] loop1: detected capacity change from 0 to 256 [ 113.226705][ T6011] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.237453][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.246367][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.270563][ T6090] program syz.3.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.281342][ T6088] exfat: Deprecated parameter 'namecase' [ 113.293552][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.306626][ T4683] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.363372][ T26] audit: type=1800 audit(1730990558.134:17): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.695" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 113.384278][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.395438][ T6092] netlink: 68 bytes leftover after parsing attributes in process `syz.3.724'. [ 113.405961][ T6088] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 113.431000][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.447048][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.546578][ T4683] usb 3-1: Using ep0 maxpacket: 8 [ 113.575941][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.603504][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.632643][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.666868][ T4683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.686591][ T4683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.695505][ T4683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 113.746568][ T4683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 113.768446][ T1335] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.785379][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.790570][ T4683] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 113.856171][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.864255][ T4683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.963222][ T4683] hub 3-1:1.0: bad descriptor, ignoring hub [ 113.972826][ T4683] hub: probe of 3-1:1.0 failed with error -5 [ 113.993135][ T4683] cdc_wdm 3-1:1.0: skipping garbage [ 114.022864][ T4683] cdc_wdm 3-1:1.0: skipping garbage [ 114.063727][ T4683] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 114.077473][ T1335] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 114.090368][ T4683] cdc_wdm 3-1:1.0: Unknown control protocol [ 114.103960][ T1335] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 114.136469][ T6104] loop3: detected capacity change from 0 to 4096 [ 114.152051][ T1335] usb 1-1: Product: syz [ 114.176630][ T1335] usb 1-1: Manufacturer: syz [ 114.183925][ T1335] usb 1-1: SerialNumber: syz [ 114.203704][ T1335] usb 1-1: config 0 descriptor?? [ 114.267310][ T6104] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 114.367504][ T6104] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 114.486869][ T5192] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 114.519698][ T4167] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 114.537993][ T4167] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 114.644301][ T6120] nbd: must specify a device to reconfigure [ 114.734606][ T6124] loop1: detected capacity change from 0 to 256 [ 114.769798][ T6124] exfat: Unknown parameter '' [ 114.914080][ T5192] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 114.926064][ T5192] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 114.951238][ T5192] usb 5-1: config 0 has no interface number 0 [ 114.971226][ T5192] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 115.000191][ T5192] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.028261][ T5192] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 115.048905][ T5192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.073707][ T5192] usb 5-1: config 0 descriptor?? [ 115.205767][ T4211] usb 3-1: USB disconnect, device number 3 [ 115.223754][ T6081] cdc_wdm 3-1:1.0: Error autopm - -16 [ 115.264646][ T1335] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 115.272701][ T6025] cdc_wdm 3-1:1.0: Error autopm - -16 [ 115.288303][ T1335] usb 1-1: USB disconnect, device number 3 [ 115.339510][ T1335] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 115.379071][ T6134] loop1: detected capacity change from 0 to 8192 [ 115.517429][ T6134] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 115.528465][ T6134] REISERFS (device loop1): using ordered data mode [ 115.535054][ T6134] reiserfs: using flush barriers [ 115.542943][ T6134] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.588844][ T6134] REISERFS (device loop1): checking transaction log (loop1) [ 115.775717][ T6149] loop3: detected capacity change from 0 to 4096 [ 115.789348][ T5192] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input7 [ 115.814995][ T5192] input: failed to attach handler kbd to device input7, error: -5 [ 115.852898][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.750'. [ 115.853658][ T6134] REISERFS (device loop1): Using tea hash to sort names [ 115.897803][ T6149] NILFS (loop3): invalid segment: Checksum error in segment payload [ 115.913750][ T6134] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 115.938701][ T6149] NILFS (loop3): trying rollback from an earlier position [ 115.963209][ T6134] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 116.013202][ T5192] usb 5-1: USB disconnect, device number 4 [ 116.073409][ T6149] NILFS (loop3): recovery complete [ 116.108818][ T6158] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.136022][ T6134] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "ÿÿ0xffffffffffffffff¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 116.240187][ T6164] rose0: tun_chr_ioctl cmd 1074025672 [ 116.252436][ T6164] rose0: ignored: set checksum enabled [ 116.654787][ T6182] loop4: detected capacity change from 0 to 64 [ 116.876779][ T5191] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.949308][ T6189] loop0: detected capacity change from 0 to 4096 [ 117.079516][ T6189] NILFS (loop0): invalid segment: Checksum error in segment payload [ 117.094390][ T6189] NILFS (loop0): trying rollback from an earlier position [ 117.149271][ T6189] NILFS (loop0): recovery complete [ 117.167255][ T6194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.186473][ T6174] loop3: detected capacity change from 0 to 40427 [ 117.200417][ T5191] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 117.298261][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.327659][ T6174] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.346775][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.386696][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.455988][ T6205] loop0: detected capacity change from 0 to 2048 [ 117.506818][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.516143][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.524256][ T6174] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.548609][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.616196][ T6205] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.645391][ T6205] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.682729][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.692363][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.732160][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.790275][ T4167] attempt to access beyond end of device [ 117.790275][ T4167] loop3: rw=2049, want=45104, limit=40427 [ 117.857832][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.877015][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.958682][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.965231][ T6225] loop4: detected capacity change from 0 to 4096 [ 118.046991][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.073171][ T6225] NILFS (loop4): invalid segment: Checksum error in segment payload [ 118.085062][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.089305][ T6225] NILFS (loop4): trying rollback from an earlier position [ 118.122092][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.126366][ T6225] NILFS (loop4): recovery complete [ 118.160144][ T6230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.216799][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.225814][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.286848][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.382531][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.409187][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.464115][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.566809][ T5191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.575792][ T5191] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.631164][ T5191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.766076][ T6253] netlink: 'syz.1.803': attribute type 12 has an invalid length. [ 118.836988][ T5191] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 118.846096][ T5191] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 118.897824][ T5191] usb 3-1: Product: syz [ 118.902064][ T5191] usb 3-1: Manufacturer: syz [ 118.924715][ T5191] usb 3-1: SerialNumber: syz [ 118.970560][ T5191] usb 3-1: config 0 descriptor?? [ 118.980319][ T6263] loop4: detected capacity change from 0 to 128 [ 119.036993][ T5191] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 119.082831][ T6265] loop3: detected capacity change from 0 to 4096 [ 119.142909][ T6263] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.166825][ T6263] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.253145][ T6249] loop0: detected capacity change from 0 to 40427 [ 119.366231][ T6249] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.370507][ T4681] usb 3-1: USB disconnect, device number 4 [ 119.372705][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 119.424494][ T4681] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 119.587555][ T6281] netlink: 68 bytes leftover after parsing attributes in process `syz.1.814'. [ 119.609396][ T6249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.662814][ T6281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.814'. [ 119.715180][ T4168] attempt to access beyond end of device [ 119.715180][ T4168] loop0: rw=2049, want=45104, limit=40427 [ 119.721534][ T6282] loop4: detected capacity change from 0 to 8192 [ 119.773915][ T6282] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 119.791143][ T6282] REISERFS (device loop4): using ordered data mode [ 119.802402][ T6282] reiserfs: using flush barriers [ 119.817967][ T6282] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.838233][ T6282] REISERFS (device loop4): checking transaction log (loop4) [ 119.974641][ T6282] REISERFS (device loop4): Using tea hash to sort names [ 119.993358][ T6282] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 120.007339][ T6282] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 120.094853][ T6282] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿÿ0xffffffffffffffff¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 120.697139][ T6310] loop3: detected capacity change from 0 to 4096 [ 120.725606][ T6317] loop0: detected capacity change from 0 to 512 [ 120.775814][ T6317] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 120.785771][ T6317] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 120.815967][ T6317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 120.825523][ T6317] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.838676][ T6317] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.802: attempt to clear invalid blocks 1024 len 1 [ 120.862636][ T6324] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.879671][ T6317] EXT4-fs (loop0): Remounting filesystem read-only [ 120.886897][ T6317] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.802: bg 0: block 361: padding at end of block bitmap is not set [ 120.922435][ T6317] EXT4-fs (loop0): Remounting filesystem read-only [ 120.929085][ T6317] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 120.940060][ T6317] EXT4-fs (loop0): Remounting filesystem read-only [ 120.974572][ T6317] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.802: invalid indirect mapped block 1811939328 (level 0) [ 120.990546][ T6317] EXT4-fs (loop0): Remounting filesystem read-only [ 120.997317][ T6317] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.802: invalid indirect mapped block 2185560079 (level 1) [ 121.027462][ T6317] EXT4-fs (loop0): Remounting filesystem read-only [ 121.034456][ T6317] EXT4-fs (loop0): 1 truncate cleaned up [ 121.040259][ T6317] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 121.196650][ T4681] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.231764][ T6330] loop3: detected capacity change from 0 to 512 [ 121.303102][ T6332] loop0: detected capacity change from 0 to 4096 [ 121.379030][ T6330] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 121.389445][ T6330] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 121.436567][ T4681] usb 2-1: Using ep0 maxpacket: 8 [ 121.445530][ T6330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 121.468794][ T6330] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.487222][ T6330] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.836: attempt to clear invalid blocks 1024 len 1 [ 121.501441][ T6330] EXT4-fs (loop3): Remounting filesystem read-only [ 121.508937][ T6330] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.836: bg 0: block 361: padding at end of block bitmap is not set [ 121.528682][ T6330] EXT4-fs (loop3): Remounting filesystem read-only [ 121.535298][ T6330] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 121.544681][ T6330] EXT4-fs (loop3): Remounting filesystem read-only [ 121.551618][ T6330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.836: invalid indirect mapped block 1811939328 (level 0) [ 121.567442][ T6330] EXT4-fs (loop3): Remounting filesystem read-only [ 121.574015][ T6330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.836: invalid indirect mapped block 2185560079 (level 1) [ 121.588346][ T4681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.600727][ T6330] EXT4-fs (loop3): Remounting filesystem read-only [ 121.607598][ T6330] EXT4-fs (loop3): 1 truncate cleaned up [ 121.613310][ T6330] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 121.637075][ T4681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.726675][ T4681] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 121.759961][ T4681] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 121.786317][ T4681] usb 2-1: Manufacturer: syz [ 121.845789][ T4681] usb 2-1: config 0 descriptor?? [ 121.888974][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 121.915722][ T4681] appledisplay 2-1:0.0: Submitting URB failed [ 121.945886][ T4681] appledisplay: probe of 2-1:0.0 failed with error -5 [ 122.013106][ T6352] loop2: detected capacity change from 0 to 128 [ 122.142632][ T4681] usb 2-1: USB disconnect, device number 5 [ 122.156338][ T6352] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.177300][ T6352] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.555231][ T6375] loop4: detected capacity change from 0 to 512 [ 122.601647][ T6375] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 122.612687][ T6375] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 122.624722][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 122.634673][ T6375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 122.643797][ T6375] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.653680][ T6375] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.843: attempt to clear invalid blocks 1024 len 1 [ 122.670761][ T6375] EXT4-fs (loop4): Remounting filesystem read-only [ 122.678800][ T6375] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.843: bg 0: block 361: padding at end of block bitmap is not set [ 122.695036][ T6375] EXT4-fs (loop4): Remounting filesystem read-only [ 122.701655][ T6375] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 122.719090][ T6375] EXT4-fs (loop4): Remounting filesystem read-only [ 122.727067][ T6375] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.843: invalid indirect mapped block 1811939328 (level 0) [ 122.741591][ T6375] EXT4-fs (loop4): Remounting filesystem read-only [ 122.748242][ T6375] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.843: invalid indirect mapped block 2185560079 (level 1) [ 122.763952][ T6375] EXT4-fs (loop4): Remounting filesystem read-only [ 122.771171][ T6375] EXT4-fs (loop4): 1 truncate cleaned up [ 122.777161][ T6375] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 122.898827][ T6392] netlink: 'syz.2.851': attribute type 11 has an invalid length. [ 122.937069][ T6392] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.851'. [ 122.956626][ T4681] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.206633][ T4681] usb 1-1: Using ep0 maxpacket: 16 [ 123.271831][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.282660][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 123.283308][ T6415] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.298959][ T6415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.314993][ T6415] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 123.327075][ T4681] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.377870][ T4245] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.392853][ T4681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.430917][ T4681] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 123.456619][ T4681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.484860][ T6421] loop2: detected capacity change from 0 to 512 [ 123.501606][ T4681] usb 1-1: config 0 descriptor?? [ 123.572141][ T6421] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 123.580171][ T6421] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 123.594407][ T6421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 123.603593][ T6421] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.613321][ T6421] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.862: attempt to clear invalid blocks 1024 len 1 [ 123.627632][ T6421] EXT4-fs (loop2): Remounting filesystem read-only [ 123.634449][ T6421] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.862: bg 0: block 361: padding at end of block bitmap is not set [ 123.649373][ T6421] EXT4-fs (loop2): Remounting filesystem read-only [ 123.655917][ T6421] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 123.665282][ T6421] EXT4-fs (loop2): Remounting filesystem read-only [ 123.673824][ T6421] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.862: invalid indirect mapped block 1811939328 (level 0) [ 123.688312][ T6421] EXT4-fs (loop2): Remounting filesystem read-only [ 123.694852][ T6421] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.862: invalid indirect mapped block 2185560079 (level 1) [ 123.709347][ T6421] EXT4-fs (loop2): Remounting filesystem read-only [ 123.716097][ T6421] EXT4-fs (loop2): 1 truncate cleaned up [ 123.721901][ T6421] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 123.816828][ T4211] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.976838][ T4245] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 123.981097][ T4681] logitech 0003:046D:C29C.0003: unexpected long global item [ 123.992766][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.998623][ T4681] logitech 0003:046D:C29C.0003: parse failed [ 124.007749][ T4681] logitech: probe of 0003:046D:C29C.0003 failed with error -22 [ 124.008013][ T4245] usb 2-1: Product: syz [ 124.024016][ T4245] usb 2-1: Manufacturer: syz [ 124.030029][ T4245] usb 2-1: SerialNumber: syz [ 124.037525][ T4245] usb 2-1: config 0 descriptor?? [ 124.056623][ T4211] usb 5-1: Using ep0 maxpacket: 8 [ 124.176737][ T4211] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.186126][ T4211] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 124.196912][ T4211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.202423][ T5191] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.218840][ T4245] usb 1-1: USB disconnect, device number 4 [ 124.321254][ T4681] usb 2-1: USB disconnect, device number 6 [ 124.356877][ T4211] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.370953][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.380764][ T4211] usb 5-1: Product: syz [ 124.384955][ T4211] usb 5-1: Manufacturer: syz [ 124.392605][ T4211] usb 5-1: SerialNumber: syz [ 124.394655][ T6428] loop3: detected capacity change from 0 to 1024 [ 124.440231][ T4211] debugfs: Directory 'card3' with parent 'sound' already present! [ 124.496654][ T5191] usb 3-1: Using ep0 maxpacket: 16 [ 124.538544][ T26] audit: type=1800 audit(1730990569.314:18): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.867" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 124.542332][ T6428] attempt to access beyond end of device [ 124.542332][ T6428] loop3: rw=0, want=5780, limit=1024 [ 124.636895][ T5191] usb 3-1: config 6 has an invalid interface number: 193 but max is 0 [ 124.645294][ T5191] usb 3-1: config 6 has no interface number 0 [ 124.667192][ T5191] usb 3-1: config 6 interface 193 altsetting 179 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 124.683472][ T5191] usb 3-1: config 6 interface 193 altsetting 179 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 124.698411][ T5191] usb 3-1: config 6 interface 193 has no altsetting 0 [ 124.877055][ T4211] usb 5-1: 0:2 : does not exist [ 124.892925][ T5191] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=81.6b [ 124.923314][ T5191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.936459][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 229.936569][ C1] rcu: 0-...!: (1 ticks this GP) idle=dc9/1/0x4000000000000000 softirq=14747/14747 fqs=0 [ 229.937369][ C1] (detected by 1, t=10502 jiffies, g=18009, q=213) [ 229.937396][ C1] Sending NMI from CPU 1 to CPUs 0: [ 229.937432][ C0] NMI backtrace for cpu 0 [ 229.937451][ C0] CPU: 0 PID: 5191 Comm: kworker/0:13 Not tainted 5.15.170-syzkaller #0 [ 229.937467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.937480][ C0] Workqueue: usb_hub_wq hub_event [ 229.937510][ C0] RIP: 0010:timerqueue_add+0x1df/0x280 [ 229.937532][ C0] Code: 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 85 19 9c fd 4c 8b 7c 24 10 4e 89 7c 35 00 45 84 e4 75 40 e8 21 4e 52 fd <31> db 4c 8b 64 24 08 eb 69 e8 13 4e 52 fd ba 18 00 00 00 4c 89 ff [ 229.937545][ C0] RSP: 0018:ffffc90000007cc0 EFLAGS: 00000006 [ 229.937558][ C0] RAX: ffffffff842e259f RBX: ffff8880767a8b40 RCX: ffff8880261e1dc0 [ 229.937571][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: ffff8880767a8b58 [ 229.937581][ C0] RBP: ffff88802cf78340 R08: dffffc0000000000 R09: ffff8880767a8b48 [ 229.937594][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 229.937604][ C0] R13: 1ffff110059ef069 R14: 0000000000000008 R15: ffff8880767a8b40 [ 229.937615][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 229.937629][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.937641][ C0] CR2: 0000001b3061bff8 CR3: 00000000666f9000 CR4: 00000000003506f0 [ 229.937655][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 229.937665][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 229.937675][ C0] Call Trace: [ 229.937681][ C0] [ 229.937687][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 229.937705][ C0] ? read_lock_is_recursive+0x10/0x10 [ 229.937724][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 229.937743][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 229.937768][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 229.937786][ C0] ? nmi_handle+0xf7/0x370 [ 229.937804][ C0] ? timerqueue_add+0x1df/0x280 [ 229.937822][ C0] ? default_do_nmi+0x62/0x150 [ 229.937842][ C0] ? exc_nmi+0xa8/0x100 [ 229.937858][ C0] ? end_repeat_nmi+0x16/0x31 [ 229.937876][ C0] ? timerqueue_add+0x1df/0x280 [ 229.937896][ C0] ? timerqueue_add+0x1df/0x280 [ 229.937914][ C0] ? timerqueue_add+0x1df/0x280 [ 229.937934][ C0] ? timerqueue_add+0x1df/0x280 [ 229.937953][ C0] [ 229.937957][ C0] [ 229.937966][ C0] enqueue_hrtimer+0x1a0/0x390 [ 229.937985][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 229.938011][ C0] ? hrtimer_interrupt+0x980/0x980 [ 229.938026][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 229.938049][ C0] hrtimer_interrupt+0x392/0x980 [ 229.938077][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 229.938100][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 229.938120][ C0] [ 229.938124][ C0] [ 229.938129][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 229.938150][ C0] RIP: 0010:console_unlock+0xe53/0x12b0 [ 229.938169][ C0] Code: 00 48 83 7c 24 18 00 75 19 e8 59 06 1a 00 eb 18 e8 52 06 1a 00 e8 6d b1 cd 08 48 83 7c 24 18 00 74 e7 e8 40 06 1a 00 fb 31 ff <44> 89 f6 e8 95 09 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 17 [ 229.938183][ C0] RSP: 0018:ffffc900040e7180 EFLAGS: 00000246 [ 229.938196][ C0] RAX: ffffffff81666d80 RBX: 0000000000000000 RCX: 0000000000100000 [ 229.938207][ C0] RDX: ffffc900103d6000 RSI: 00000000000224f4 RDI: 0000000000000000 [ 229.938218][ C0] RBP: ffffc900040e7410 R08: ffffffff81666d4b R09: fffffbfff20ec621 [ 229.938231][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a4c62e [ 229.938243][ C0] R13: ffffffff8d2631a8 R14: 0000000000000000 R15: dffffc0000000000 [ 229.938258][ C0] ? console_unlock+0xe1b/0x12b0 [ 229.938273][ C0] ? console_unlock+0xe50/0x12b0 [ 229.938300][ C0] ? console_trylock_spinning+0x3f0/0x3f0 [ 229.938319][ C0] ? __down_trylock_console_sem+0x1f2/0x250 [ 229.938336][ C0] ? vprintk_emit+0xa6/0x150 [ 229.938351][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 229.938367][ C0] ? vprintk_emit+0xa6/0x150 [ 229.938388][ C0] ? console_trylock+0x70/0x70 [ 229.938412][ C0] ? vprintk_emit+0x150/0x150 [ 229.938427][ C0] ? snprintf+0xd6/0x120 [ 229.938444][ C0] ? vscnprintf+0x80/0x80 [ 229.938462][ C0] vprintk_emit+0xbf/0x150 [ 229.938480][ C0] dev_vprintk_emit+0x2aa/0x330 [ 229.938500][ C0] ? _dev_info+0x170/0x170 [ 229.938515][ C0] ? worker_thread+0xaca/0x1280 [ 229.938541][ C0] dev_printk_emit+0xd9/0x120 [ 229.938557][ C0] ? mark_lock+0x98/0x340 [ 229.938576][ C0] ? dev_vprintk_emit+0x330/0x330 [ 229.938597][ C0] ? __dev_printk+0x137/0x1a0 [ 229.938614][ C0] _dev_info+0x11e/0x170 [ 229.938634][ C0] ? entropy_timer+0x40/0x40 [ 229.938654][ C0] ? __usb_get_extra_descriptor+0x161/0x1d0 [ 229.938673][ C0] usb_new_device+0x81f/0x18e0 [ 229.938700][ C0] ? usb_disconnect+0x8c0/0x8c0 [ 229.938715][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 229.938733][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 229.938751][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 229.938771][ C0] hub_event+0x2cdf/0x54c0 [ 229.938812][ C0] ? led_work+0x700/0x700 [ 229.938829][ C0] ? read_lock_is_recursive+0x10/0x10 [ 229.938846][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 229.938864][ C0] ? __up_read+0x530/0x690 [ 229.938881][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 229.938902][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 229.938923][ C0] process_one_work+0x8a1/0x10c0 [ 229.938949][ C0] ? worker_detach_from_pool+0x260/0x260 [ 229.938970][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 229.938988][ C0] ? kthread_data+0x4e/0xc0 [ 229.939004][ C0] ? wq_worker_running+0x97/0x170 [ 229.939022][ C0] worker_thread+0xaca/0x1280 [ 229.939053][ C0] kthread+0x3f6/0x4f0 [ 229.939068][ C0] ? rcu_lock_release+0x20/0x20 [ 229.939085][ C0] ? kthread_blkcg+0xd0/0xd0 [ 229.939102][ C0] ret_from_fork+0x1f/0x30 [ 229.939127][ C0] [ 229.939432][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g18009 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 229.939458][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=6538 [ 229.939470][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g18009 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 229.939494][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 229.939505][ C1] rcu: RCU grace-period kthread stack dump: [ 229.939514][ C1] task:rcu_preempt state:I stack:26144 pid: 15 ppid: 2 flags:0x00004000 [ 229.939552][ C1] Call Trace: [ 229.939559][ C1] [ 229.939572][ C1] __schedule+0x12c4/0x45b0 [ 229.939594][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 229.939623][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 229.939668][ C1] ? __mod_timer+0xa8e/0xeb0 [ 229.939698][ C1] ? release_firmware_map_entry+0x190/0x190 [ 229.939722][ C1] ? mod_timer_pending+0x20/0x20 [ 229.939748][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 229.939778][ C1] schedule+0x11b/0x1f0 [ 229.939801][ C1] schedule_timeout+0x1b9/0x300 [ 229.939825][ C1] ? console_conditional_schedule+0x40/0x40 [ 229.939851][ C1] ? update_process_times+0x200/0x200 [ 229.939883][ C1] ? prepare_to_swait_event+0x321/0x340 [ 229.939912][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 229.939939][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 229.939963][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 229.939990][ C1] ? rcu_gp_init+0xdae/0x1140 [ 229.940016][ C1] ? rcu_gp_init+0x1140/0x1140 [ 229.940045][ C1] ? finish_swait+0xc5/0x1d0 [ 229.940071][ C1] rcu_gp_kthread+0xa4/0x360 [ 229.940094][ C1] ? _raw_spin_unlock+0x40/0x40 [ 229.940121][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 229.940144][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 229.940174][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 229.940201][ C1] kthread+0x3f6/0x4f0 [ 229.940222][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 229.940244][ C1] ? kthread_blkcg+0xd0/0xd0 [ 229.940268][ C1] ret_from_fork+0x1f/0x30 [ 229.940305][ C1] [ 229.940313][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 229.940321][ C1] Sending NMI from CPU 1 to CPUs 0: [ 229.940340][ C0] NMI backtrace for cpu 0 [ 229.940347][ C0] CPU: 0 PID: 5191 Comm: kworker/0:13 Not tainted 5.15.170-syzkaller #0 [ 229.940363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.940372][ C0] Workqueue: usb_hub_wq hub_event [ 229.940392][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 229.940411][ C0] Code: 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d e8 f4 68 0c 48 89 de 5b e9 b7 f3 48 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0d f4 fb 81 7e 65 8b 15 f5 fb 81 7e 81 e2 00 01 ff 00 74 [ 229.940425][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00000096 [ 229.940449][ C0] RAX: ffffffff816fa3fa RBX: 0000000000000000 RCX: 0000000000010003 [ 229.940460][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 229.940469][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff2d4989e [ 229.940480][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 229.940491][ C0] R13: ffff8880b902a300 R14: ffff8880767a8b40 R15: dffffc0000000000 [ 229.940504][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 229.940518][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.940529][ C0] CR2: 0000001b3061bff8 CR3: 00000000666f9000 CR4: 00000000003506f0 [ 229.940542][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 229.940551][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 229.940561][ C0] Call Trace: [ 229.940565][ C0] [ 229.940570][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 229.940587][ C0] ? read_lock_is_recursive+0x10/0x10 [ 229.940605][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 229.940623][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 229.940647][ C0] ? timerqueue_add+0x1df/0x280 [ 229.940664][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 229.940680][ C0] ? nmi_handle+0xf7/0x370 [ 229.940697][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 229.940713][ C0] ? timerqueue_add+0x1df/0x280 [ 229.940731][ C0] ? default_do_nmi+0x62/0x150 [ 229.940748][ C0] ? exc_nmi+0xa8/0x100 [ 229.940764][ C0] ? end_repeat_nmi+0x16/0x31 [ 229.940781][ C0] ? enqueue_hrtimer+0x3a/0x390 [ 229.940797][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 229.940815][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 229.940833][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 229.940850][ C0] [ 229.940854][ C0] [ 229.940858][ C0] enqueue_hrtimer+0x3a/0x390 [ 229.940876][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 229.940900][ C0] ? hrtimer_interrupt+0x980/0x980 [ 229.940915][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 229.940937][ C0] hrtimer_interrupt+0x392/0x980 [ 229.940964][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 229.940984][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 229.941003][ C0] [ 229.941007][ C0] [ 229.941012][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 229.941031][ C0] RIP: 0010:console_unlock+0xe53/0x12b0 [ 229.941047][ C0] Code: 00 48 83 7c 24 18 00 75 19 e8 59 06 1a 00 eb 18 e8 52 06 1a 00 e8 6d b1 cd 08 48 83 7c 24 18 00 74 e7 e8 40 06 1a 00 fb 31 ff <44> 89 f6 e8 95 09 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 17 [ 229.941060][ C0] RSP: 0018:ffffc900040e7180 EFLAGS: 00000246 [ 229.941072][ C0] RAX: ffffffff81666d80 RBX: 0000000000000000 RCX: 0000000000100000 [ 229.941083][ C0] RDX: ffffc900103d6000 RSI: 00000000000224f4 RDI: 0000000000000000 [ 229.941093][ C0] RBP: ffffc900040e7410 R08: ffffffff81666d4b R09: fffffbfff20ec621 [ 229.941105][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a4c62e [ 229.941116][ C0] R13: ffffffff8d2631a8 R14: 0000000000000000 R15: dffffc0000000000 [ 229.941131][ C0] ? console_unlock+0xe1b/0x12b0 [ 229.941145][ C0] ? console_unlock+0xe50/0x12b0 [ 229.941170][ C0] ? console_trylock_spinning+0x3f0/0x3f0 [ 229.941188][ C0] ? __down_trylock_console_sem+0x1f2/0x250 [ 229.941205][ C0] ? vprintk_emit+0xa6/0x150 [ 229.941220][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 229.941235][ C0] ? vprintk_emit+0xa6/0x150 [ 229.941250][ C0] ? console_trylock+0x70/0x70 [ 229.941273][ C0] ? vprintk_emit+0x150/0x150 [ 229.941287][ C0] ? snprintf+0xd6/0x120 [ 229.941303][ C0] ? vscnprintf+0x80/0x80 [ 229.941321][ C0] vprintk_emit+0xbf/0x150 [ 229.941338][ C0] dev_vprintk_emit+0x2aa/0x330 [ 229.941355][ C0] ? _dev_info+0x170/0x170 [ 229.941369][ C0] ? worker_thread+0xaca/0x1280 [ 229.941398][ C0] dev_printk_emit+0xd9/0x120 [ 229.941414][ C0] ? mark_lock+0x98/0x340 [ 229.941431][ C0] ? dev_vprintk_emit+0x330/0x330 [ 229.941450][ C0] ? __dev_printk+0x137/0x1a0 [ 229.941466][ C0] _dev_info+0x11e/0x170 [ 229.941484][ C0] ? entropy_timer+0x40/0x40 [ 229.941503][ C0] ? __usb_get_extra_descriptor+0x161/0x1d0 [ 229.941521][ C0] usb_new_device+0x81f/0x18e0 [ 229.941545][ C0] ? usb_disconnect+0x8c0/0x8c0 [ 229.941559][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 229.941577][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 229.941593][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 229.941612][ C0] hub_event+0x2cdf/0x54c0 [ 229.941651][ C0] ? led_work+0x700/0x700 [ 229.941668][ C0] ? read_lock_is_recursive+0x10/0x10 [ 229.941684][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 229.941701][ C0] ? __up_read+0x530/0x690 [ 229.941717][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 229.941736][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 229.941757][ C0] process_one_work+0x8a1/0x10c0 [ 229.941781][ C0] ? worker_detach_from_pool+0x260/0x260 [ 229.941801][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 229.941819][ C0] ? kthread_data+0x4e/0xc0 [ 229.941834][ C0] ? wq_worker_running+0x97/0x170 [ 229.941851][ C0] worker_thread+0xaca/0x1280 [ 229.941880][ C0] kthread+0x3f6/0x4f0 [ 229.941894][ C0] ? rcu_lock_release+0x20/0x20 [ 229.941910][ C0] ? kthread_blkcg+0xd0/0xd0 [ 229.941927][ C0] ret_from_fork+0x1f/0x30 [ 229.941949][ C0] [ 376.050164][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz.3.876:6445] [ 376.050197][ C1] Modules linked in: [ 376.050211][ C1] irq event stamp: 50998 [ 376.050219][ C1] hardirqs last enabled at (50997): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.050261][ C1] hardirqs last disabled at (50998): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 376.050291][ C1] softirqs last enabled at (660): [] __irq_exit_rcu+0x157/0x240 [ 376.050317][ C1] softirqs last disabled at (421): [] __irq_exit_rcu+0x157/0x240 [ 376.050360][ C1] CPU: 1 PID: 6445 Comm: syz.3.876 Not tainted 5.15.170-syzkaller #0 [ 376.050382][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.050401][ C1] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90 [ 376.050436][ C1] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 5c d5 0b 00 41 83 e7 01 75 07 e8 f1 d1 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 376.050455][ C1] RSP: 0018:ffffc900031a7220 EFLAGS: 00000246 [ 376.050476][ C1] RAX: ffffffff8174a1f4 RBX: 1ffff11017208541 RCX: 0000000000040000 [ 376.050493][ C1] RDX: ffffc90004109000 RSI: 000000000003ffff RDI: 0000000000040000 [ 376.050509][ C1] RBP: ffffc900031a7360 R08: ffffffff8174a1c4 R09: fffffbfff20ec622 [ 376.050527][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 376.050543][ C1] R13: ffff8880b9042a08 R14: ffff8880b913b380 R15: 0000000000000001 [ 376.050560][ C1] FS: 00007fed1a4896c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 376.050580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.050596][ C1] CR2: 000000110c301c91 CR3: 0000000058501000 CR4: 00000000003506e0 [ 376.050616][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.050631][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.050645][ C1] Call Trace: [ 376.050673][ C1] [ 376.050686][ C1] ? watchdog_timer_fn+0x484/0x5a0 [ 376.050713][ C1] ? proc_watchdog_cpumask+0xc0/0xc0 [ 376.050738][ C1] ? __hrtimer_run_queues+0x55b/0xcf0 [ 376.050779][ C1] ? hrtimer_interrupt+0x980/0x980 [ 376.050801][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 376.050834][ C1] ? hrtimer_interrupt+0x392/0x980 [ 376.050878][ C1] ? __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 376.050910][ C1] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 376.050935][ C1] [ 376.050942][ C1] [ 376.050951][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.050983][ C1] ? smp_call_function_many_cond+0xa84/0xd90 [ 376.051019][ C1] ? smp_call_function_many_cond+0xab4/0xd90 [ 376.051045][ C1] ? smp_call_function_many_cond+0xa93/0xd90 [ 376.051075][ C1] ? flush_tlb_all+0x20/0x20 [ 376.051102][ C1] ? smp_call_function_many+0x30/0x30 [ 376.051123][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 376.051155][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.051178][ C1] ? flush_tlb_all+0x20/0x20 [ 376.051200][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 376.051225][ C1] __purge_vmap_area_lazy+0x294/0x1740 [ 376.051249][ C1] ? cpumask_next+0xc3/0xf0 [ 376.051268][ C1] ? purge_fragmented_blocks_allcpus+0x855/0x950 [ 376.051297][ C1] ? purge_fragmented_blocks_allcpus+0x8da/0x950 [ 376.051323][ C1] ? _vm_unmap_aliases+0x441/0x4e0 [ 376.051356][ C1] ? purge_fragmented_blocks_allcpus+0x950/0x950 [ 376.051395][ C1] _vm_unmap_aliases+0x453/0x4e0 [ 376.051427][ C1] change_page_attr_set_clr+0x308/0x1050 [ 376.051463][ C1] ? __set_memory_prot+0x100/0x100 [ 376.051500][ C1] ? find_vm_area+0xf9/0x130 [ 376.051525][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 376.051545][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 376.051575][ C1] set_memory_ro+0xa1/0xe0 [ 376.051597][ C1] ? set_memory_nx+0x130/0x130 [ 376.051624][ C1] ? _raw_spin_unlock+0x24/0x40 [ 376.051651][ C1] bpf_int_jit_compile+0xbf36/0xc6c0 [ 376.051709][ C1] ? emit_bpf_dispatcher+0xd90/0xd90 [ 376.051755][ C1] ? ktime_get_with_offset+0x101/0x320 [ 376.051773][ C1] ? seqcount_lockdep_reader_access+0x153/0x220 [ 376.051798][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 376.051826][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 376.051856][ C1] bpf_prog_select_runtime+0x701/0x9f0 [ 376.051882][ C1] ? memset+0x1f/0x40 [ 376.051904][ C1] ? bpf_obj_name_cpy+0x186/0x1d0 [ 376.051933][ C1] bpf_prog_load+0x131c/0x1b60 [ 376.051966][ C1] ? map_freeze+0x360/0x360 [ 376.051986][ C1] ? __might_fault+0xb8/0x110 [ 376.052032][ C1] ? __might_fault+0xb4/0x110 [ 376.052057][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 376.052077][ C1] ? security_bpf+0x7d/0xa0 [ 376.052102][ C1] __sys_bpf+0x343/0x670 [ 376.052129][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 376.052171][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 376.052196][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 376.052223][ C1] __x64_sys_bpf+0x78/0x90 [ 376.052249][ C1] do_syscall_64+0x3b/0xb0 [ 376.052270][ C1] ? clear_bhb_loop+0x15/0x70 [ 376.052290][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.052316][ C1] RIP: 0033:0x7fed1c011719 [ 376.052354][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.052372][ C1] RSP: 002b:00007fed1a489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.052396][ C1] RAX: ffffffffffffffda RBX: 00007fed1c1c8f80 RCX: 00007fed1c011719 [ 376.052412][ C1] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 376.052427][ C1] RBP: 00007fed1c08439e R08: 0000000000000000 R09: 0000000000000000 [ 376.052441][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.052455][ C1] R13: 0000000000000000 R14: 00007fed1c1c8f80 R15: 00007ffffc9f7d78 [ 376.052485][ C1] [ 376.052497][ C1] Sending NMI from CPU 1 to CPUs 0: [ 376.052542][ C0] NMI backtrace for cpu 0 [ 376.052550][ C0] CPU: 0 PID: 5191 Comm: kworker/0:13 Not tainted 5.15.170-syzkaller #0 [ 376.052565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.052577][ C0] Workqueue: usb_hub_wq hub_event [ 376.052594][ C0] RIP: 0010:advance_sched+0x200/0x940 [ 376.052614][ C0] Code: 8b 7c 24 10 e8 f1 94 48 f9 48 8b 44 24 10 48 c7 00 00 00 00 00 48 8b 44 24 20 48 89 44 24 08 31 c0 48 89 44 24 20 48 8b 04 24 <48> 85 c0 4c 89 7c 24 60 0f 84 73 06 00 00 48 89 6c 24 40 4c 89 6c [ 376.052628][ C0] RSP: 0018:ffffc90000007cc0 EFLAGS: 00000006 [ 376.052641][ C0] RAX: ffff88805cbcaa80 RBX: ffff88802cf78330 RCX: ffff8880261e1dc0 [ 376.052653][ C0] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000000 [ 376.052663][ C0] RBP: ffff88802cf782e8 R08: ffffffff8881a988 R09: 0000000000000003 [ 376.052675][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88802cf78000 [ 376.052687][ C0] R13: ffff88802cf78340 R14: dffffc0000000000 R15: ffff88802cf78328 [ 376.052700][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 376.052715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.052726][ C0] CR2: 0000001b3061bff8 CR3: 00000000666f9000 CR4: 00000000003506f0 [ 376.052740][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.052757][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.052767][ C0] Call Trace: [ 376.052773][ C0] [ 376.052778][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 376.052797][ C0] ? read_lock_is_recursive+0x10/0x10 [ 376.052815][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 376.052834][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 376.052858][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 376.052876][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 376.052893][ C0] ? nmi_handle+0xf7/0x370 [ 376.052912][ C0] ? advance_sched+0x200/0x940 [ 376.052927][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 376.052945][ C0] ? default_do_nmi+0x62/0x150 [ 376.052963][ C0] ? exc_nmi+0xa8/0x100 [ 376.052979][ C0] ? end_repeat_nmi+0x16/0x31 [ 376.052997][ C0] ? advance_sched+0x148/0x940 [ 376.053017][ C0] ? advance_sched+0x200/0x940 [ 376.053034][ C0] ? advance_sched+0x200/0x940 [ 376.053053][ C0] ? advance_sched+0x200/0x940 [ 376.053070][ C0] [ 376.053075][ C0] [ 376.053085][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 376.053103][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 376.053129][ C0] ? hrtimer_interrupt+0x980/0x980 [ 376.053145][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 376.053167][ C0] hrtimer_interrupt+0x392/0x980 [ 376.053195][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 376.053217][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 376.053238][ C0] [ 376.053243][ C0] [ 376.053248][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.053269][ C0] RIP: 0010:console_unlock+0xe53/0x12b0 [ 376.053287][ C0] Code: 00 48 83 7c 24 18 00 75 19 e8 59 06 1a 00 eb 18 e8 52 06 1a 00 e8 6d b1 cd 08 48 83 7c 24 18 00 74 e7 e8 40 06 1a 00 fb 31 ff <44> 89 f6 e8 95 09 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 17 [ 376.053301][ C0] RSP: 0018:ffffc900040e7180 EFLAGS: 00000246 [ 376.053314][ C0] RAX: ffffffff81666d80 RBX: 0000000000000000 RCX: 0000000000100000 [ 376.053325][ C0] RDX: ffffc900103d6000 RSI: 00000000000224f4 RDI: 0000000000000000 [ 376.053337][ C0] RBP: ffffc900040e7410 R08: ffffffff81666d4b R09: fffffbfff20ec621 [ 376.053349][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a4c62e [ 376.053361][ C0] R13: ffffffff8d2631a8 R14: 0000000000000000 R15: dffffc0000000000 [ 376.053376][ C0] ? console_unlock+0xe1b/0x12b0 [ 376.053392][ C0] ? console_unlock+0xe50/0x12b0 [ 376.053418][ C0] ? console_trylock_spinning+0x3f0/0x3f0 [ 376.053437][ C0] ? __down_trylock_console_sem+0x1f2/0x250 [ 376.053454][ C0] ? vprintk_emit+0xa6/0x150 [ 376.053469][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 376.053485][ C0] ? vprintk_emit+0xa6/0x150 [ 376.053501][ C0] ? console_trylock+0x70/0x70 [ 376.053525][ C0] ? vprintk_emit+0x150/0x150 [ 376.053539][ C0] ? snprintf+0xd6/0x120 [ 376.053556][ C0] ? vscnprintf+0x80/0x80 [ 376.053574][ C0] vprintk_emit+0xbf/0x150 [ 376.053592][ C0] dev_vprintk_emit+0x2aa/0x330 [ 376.053611][ C0] ? _dev_info+0x170/0x170 [ 376.053625][ C0] ? worker_thread+0xaca/0x1280 [ 376.053651][ C0] dev_printk_emit+0xd9/0x120 [ 376.053668][ C0] ? mark_lock+0x98/0x340 [ 376.053686][ C0] ? dev_vprintk_emit+0x330/0x330 [ 376.053706][ C0] ? __dev_printk+0x137/0x1a0 [ 376.053723][ C0] _dev_info+0x11e/0x170 [ 376.053742][ C0] ? entropy_timer+0x40/0x40 [ 376.053767][ C0] ? __usb_get_extra_descriptor+0x161/0x1d0 [ 376.053787][ C0] usb_new_device+0x81f/0x18e0 [ 376.053813][ C0] ? usb_disconnect+0x8c0/0x8c0 [ 376.053828][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.053846][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 376.053864][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 376.053883][ C0] hub_event+0x2cdf/0x54c0 [ 376.053924][ C0] ? led_work+0x700/0x700 [ 376.053941][ C0] ? read_lock_is_recursive+0x10/0x10 [ 376.053958][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 376.053977][ C0] ? __up_read+0x530/0x690 [ 376.053993][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 376.054015][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.054037][ C0] process_one_work+0x8a1/0x10c0 [ 376.054063][ C0] ? worker_detach_from_pool+0x260/0x260 [ 376.054083][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 376.054101][ C0] ? kthread_data+0x4e/0xc0 [ 376.054117][ C0] ? wq_worker_running+0x97/0x170 [ 376.054135][ C0] worker_thread+0xaca/0x1280 [ 376.054167][ C0] kthread+0x3f6/0x4f0 [ 376.054182][ C0] ? rcu_lock_release+0x20/0x20 [ 376.054199][ C0] ? kthread_blkcg+0xd0/0xd0 [ 376.054216][ C0] ret_from_fork+0x1f/0x30 [ 376.054241][ C0] [ 376.054537][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 376.054550][ C1] CPU: 1 PID: 6445 Comm: syz.3.876 Tainted: G L 5.15.170-syzkaller #0 [ 376.054571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.054583][ C1] Call Trace: [ 376.054590][ C1] [ 376.054598][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 376.054624][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 376.054647][ C1] ? panic+0x860/0x860 [ 376.054675][ C1] ? vprintk_emit+0xf5/0x150 [ 376.054702][ C1] panic+0x318/0x860 [ 376.054729][ C1] ? watchdog_timer_fn+0x555/0x5a0 [ 376.054752][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 376.054777][ C1] ? __irq_work_queue_local+0x122/0x180 [ 376.054803][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 376.054827][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 376.054850][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 376.054877][ C1] watchdog_timer_fn+0x593/0x5a0 [ 376.054902][ C1] ? proc_watchdog_cpumask+0xc0/0xc0 [ 376.054927][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 376.054966][ C1] ? hrtimer_interrupt+0x980/0x980 [ 376.054987][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 376.055024][ C1] hrtimer_interrupt+0x392/0x980 [ 376.055068][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 376.055097][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 376.055122][ C1] [ 376.055129][ C1] [ 376.055137][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.055162][ C1] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90 [ 376.055186][ C1] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 5c d5 0b 00 41 83 e7 01 75 07 e8 f1 d1 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 376.055204][ C1] RSP: 0018:ffffc900031a7220 EFLAGS: 00000246 [ 376.055222][ C1] RAX: ffffffff8174a1f4 RBX: 1ffff11017208541 RCX: 0000000000040000 [ 376.055238][ C1] RDX: ffffc90004109000 RSI: 000000000003ffff RDI: 0000000000040000 [ 376.055254][ C1] RBP: ffffc900031a7360 R08: ffffffff8174a1c4 R09: fffffbfff20ec622 [ 376.055271][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 376.055285][ C1] R13: ffff8880b9042a08 R14: ffff8880b913b380 R15: 0000000000000001 [ 376.055307][ C1] ? smp_call_function_many_cond+0xa84/0xd90 [ 376.055329][ C1] ? smp_call_function_many_cond+0xab4/0xd90 [ 376.055362][ C1] ? flush_tlb_all+0x20/0x20 [ 376.055388][ C1] ? smp_call_function_many+0x30/0x30 [ 376.055408][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 376.055438][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.055460][ C1] ? flush_tlb_all+0x20/0x20 [ 376.055482][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 376.055506][ C1] __purge_vmap_area_lazy+0x294/0x1740 [ 376.055528][ C1] ? cpumask_next+0xc3/0xf0 [ 376.055545][ C1] ? purge_fragmented_blocks_allcpus+0x855/0x950 [ 376.055573][ C1] ? purge_fragmented_blocks_allcpus+0x8da/0x950 [ 376.055599][ C1] ? _vm_unmap_aliases+0x441/0x4e0 [ 376.055631][ C1] ? purge_fragmented_blocks_allcpus+0x950/0x950 [ 376.055669][ C1] _vm_unmap_aliases+0x453/0x4e0 [ 376.055699][ C1] change_page_attr_set_clr+0x308/0x1050 [ 376.055734][ C1] ? __set_memory_prot+0x100/0x100 [ 376.055771][ C1] ? find_vm_area+0xf9/0x130 [ 376.055795][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 376.055815][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 376.055843][ C1] set_memory_ro+0xa1/0xe0 [ 376.055864][ C1] ? set_memory_nx+0x130/0x130 [ 376.055890][ C1] ? _raw_spin_unlock+0x24/0x40 [ 376.055916][ C1] bpf_int_jit_compile+0xbf36/0xc6c0 [ 376.055972][ C1] ? emit_bpf_dispatcher+0xd90/0xd90 [ 376.056024][ C1] ? ktime_get_with_offset+0x101/0x320 [ 376.056045][ C1] ? seqcount_lockdep_reader_access+0x153/0x220 [ 376.056068][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 376.056095][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 376.056125][ C1] bpf_prog_select_runtime+0x701/0x9f0 [ 376.056150][ C1] ? memset+0x1f/0x40 [ 376.056177][ C1] ? bpf_obj_name_cpy+0x186/0x1d0 [ 376.056205][ C1] bpf_prog_load+0x131c/0x1b60 [ 376.056236][ C1] ? map_freeze+0x360/0x360 [ 376.056257][ C1] ? __might_fault+0xb8/0x110 [ 376.056295][ C1] ? __might_fault+0xb4/0x110 [ 376.056320][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 376.056339][ C1] ? security_bpf+0x7d/0xa0 [ 376.056364][ C1] __sys_bpf+0x343/0x670 [ 376.056390][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 376.056431][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 376.056456][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 376.056483][ C1] __x64_sys_bpf+0x78/0x90 [ 376.056508][ C1] do_syscall_64+0x3b/0xb0 [ 376.056529][ C1] ? clear_bhb_loop+0x15/0x70 [ 376.056549][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.056574][ C1] RIP: 0033:0x7fed1c011719 [ 376.056591][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.056609][ C1] RSP: 002b:00007fed1a489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.056630][ C1] RAX: ffffffffffffffda RBX: 00007fed1c1c8f80 RCX: 00007fed1c011719 [ 376.056647][ C1] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 376.056661][ C1] RBP: 00007fed1c08439e R08: 0000000000000000 R09: 0000000000000000 [ 376.056675][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.056688][ C1] R13: 0000000000000000 R14: 00007fed1c1c8f80 R15: 00007ffffc9f7d78 [ 376.056718][ C1] [ 377.206112][ C1] Shutting down cpus with NMI [ 377.206417][ C1] Kernel Offset: disabled [ 380.243798][ C1] Rebooting in 86400 seconds..