last executing test programs: 31.635428564s ago: executing program 0 (id=1495): r0 = memfd_create(&(0x7f0000000380)='/dloop#\x00', 0x6) fallocate(r0, 0x0, 0x1000000, 0x5) finit_module(r0, 0x0, 0x0) 30.857195688s ago: executing program 0 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 30.71239937s ago: executing program 0 (id=1500): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/122, 0x7a}], 0x1, 0x0, 0x0) 30.632758186s ago: executing program 0 (id=1501): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00'], 0x1, 0x11aa, &(0x7f0000001280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) unlink(&(0x7f0000000180)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 29.7235882s ago: executing program 0 (id=1502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r2, 0x709, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) 28.948389113s ago: executing program 0 (id=1505): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000ffffffffffffffff1e277fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x82fa}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 20.352572623s ago: executing program 3 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020dac8b8fa52bf702500000000002020450026c9ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockname$unix(r1, &(0x7f0000000380), &(0x7f00000002c0)=0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) 20.231957853s ago: executing program 3 (id=1540): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xaab, 0x0, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x4, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setrlimit(0xf, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@file={0x0, './file0/file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func={0x5, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3cf8b7c6d6f923f6]}}, 0x0, 0x3f}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000980)='br_fdb_add\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 18.758388883s ago: executing program 3 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 18.564447889s ago: executing program 3 (id=1543): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 18.400987732s ago: executing program 3 (id=1546): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 18.354242196s ago: executing program 3 (id=1547): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) 17.585551909s ago: executing program 4 (id=1548): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) creat(&(0x7f0000000140)='./file1/file0\x00', 0x0) r0 = creat(&(0x7f0000000900)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 17.121954616s ago: executing program 1 (id=1479): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x800803fe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17.054584842s ago: executing program 4 (id=1550): timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000080)="d3967696f869cc53bf48accfe191562cdbae50c2d03234dc7921788794df9996bdc7f99142aeedb0c79c0ea7141aaa270d7fca7479"}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r10, r8, r9}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB='security'], &(0x7f0000000100)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in6=@remote}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, @in6=@dev, @in=@remote}]}]}, 0xec}}, 0x0) 17.002060946s ago: executing program 1 (id=1551): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 16.197379992s ago: executing program 1 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 15.801230894s ago: executing program 4 (id=1554): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x10e, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x40) 15.332646672s ago: executing program 2 (id=1555): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,codepage=iso8859-4,dir_umask=00000000000\x00\x00\x00\x0000000005,part=0x000000000000007e,\x00'], 0x1, 0x2fe, &(0x7f0000000240)="$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") chdir(&(0x7f0000000300)='./file0\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @empty}}}, 0xa0) 15.261392028s ago: executing program 4 (id=1556): unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40022000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setresuid(0xee01, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x0, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x0, 0x8, 0x2}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r4, 0x1, 0x0, 0x0, 0x0) ioctl$KDSKBENT(r3, 0x4b32, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0100000c0000000400000010000000000000e40200000000610000"], &(0x7f00000005c0)=""/223, 0x28, 0xdf, 0x0, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="8bdc0074f7af63", @ANYBLOB="051a0000000001"], 0x14}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xe9b5, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0) ftruncate(r6, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)) 15.135513688s ago: executing program 2 (id=1557): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc2604111, &(0x7f0000000180)) 14.584051493s ago: executing program 2 (id=1558): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x0, 0x8}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 11.253689144s ago: executing program 2 (id=1559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="13000000320081964e821382db44b904421d08", 0x13}], 0x1}, 0x0) 11.237902675s ago: executing program 4 (id=1560): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x1) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000e40800010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) memfd_create(&(0x7f0000001140)='!^*}.\x00', 0x1) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x0, 0x0, &(0x7f0000000040)) 11.100782057s ago: executing program 1 (id=1561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0x1d04}}, {@dir_umask={'dir_umask', 0x3d, 0x6}}, {@uid}, {@umask={'umask', 0x3d, 0xfffffffffffffffb}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}]}, 0x1, 0x2f5, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11.068281169s ago: executing program 2 (id=1562): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYBLOB="be86d0c8a108341980dd38774e35ada98c18e60e057aedf3b5804bba914cacd85849f8d0626ed8c4702287b776a6204ff901f4279c11098ca03e8076b602778614f3aee4e639368cf1fadae6c8f33028a8dbde2368f15dc323c115a566af43f5c71f03638413334e3552d7d03e019f42ad2a6ddc1dda16cd3f7e666c77595924074480f6884ca2a05fc14d5e2fc692b8208d17ccf4f4ea4aa6b465524a0030da81fa4f45cde00c40327f2d99182267acceef49380a51cc6dc5d745782f40ccbdece63fec9e419f7cdcbd462735bd17bae60341e65bcd5fedcf6b2c609a23e46c8171a209266581488f0072a6"], 0x118) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0xb, 0x0, 0x0, &(0x7f0000000140)}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000500)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000001000), &(0x7f0000001040)={'syz', 0x1}, 0x0, 0x0, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000e40)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r8, r7, r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 8.373259449s ago: executing program 4 (id=1563): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 8.270876107s ago: executing program 2 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) 8.191527694s ago: executing program 1 (id=1566): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x800803fe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000080)=0x4) 0s ago: executing program 1 (id=1567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000001f000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1b, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 1][ T4798] usb 1-1: media controller created [ 334.023381][ T4798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.053994][ T8578] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 334.065992][ T4798] dvb-usb: bulk message failed: -22 (6/0) [ 334.072439][ T4798] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 334.128855][ T8436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.140892][ T4798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 334.154013][ T4798] dvb-usb: schedule remote query interval to 150 msecs. [ 334.161748][ T4798] dvb-usb: bulk message failed: -22 (3/0) [ 334.323205][ T3960] dvb-usb: bulk message failed: -22 (1/0) [ 334.329593][ T3960] dvb-usb: error while querying for an remote control event. [ 334.337749][ T4798] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 334.379170][ T4798] usb 1-1: USB disconnect, device number 17 [ 335.168710][ T4798] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 335.257888][ T8587] openvswitch: netlink: Missing key (keys=40, expected=100) [ 335.358501][ T8436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.578836][ T8436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.840935][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 335.968630][ T8436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 336.120841][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 336.175600][ T8436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 336.291179][ T21] usb 2-1: config 0 has no interfaces? [ 336.481399][ T4798] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 336.932729][ T4798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 336.958781][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.058986][ T4798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 337.119824][ T4798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.143963][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.186289][ T21] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 337.195468][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.200824][ T4798] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.203659][ T21] usb 2-1: Product: syz [ 337.216847][ T21] usb 2-1: Manufacturer: syz [ 337.222348][ T21] usb 2-1: SerialNumber: syz [ 337.241333][ T21] r8152-cfgselector 2-1: config 0 descriptor?? [ 337.281270][ T4798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.332128][ T4798] usb 1-1: config 0 descriptor?? [ 337.363846][ T8591] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 337.606450][ T21] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 337.618864][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.632136][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.659477][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.717238][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.743890][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.751135][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.800047][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.810625][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.829320][ T21] usb 2-1: USB disconnect, device number 11 [ 337.845852][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.852993][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.890608][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.899060][ T8619] openvswitch: netlink: Missing key (keys=40, expected=100) [ 337.906795][ T4798] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 337.922029][ T4798] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 337.940913][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.949814][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.976759][ T4798] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 337.990436][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.015705][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.112089][ T8591] loop0: detected capacity change from 0 to 512 [ 338.168145][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.186476][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.204556][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.485344][ T8591] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.575467][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.820098][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.874070][ T8436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.910822][ T5903] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 338.927463][ T8591] EXT4-fs error (device loop0): __ext4_iget:4861: inode #12: block 2: comm syz.0.1184: invalid block [ 338.988151][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.006817][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.017258][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.292802][ T3630] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 339.337597][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.346345][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.351211][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.357408][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.379938][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.394692][ T5903] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 339.418190][ T5903] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 339.530893][ T3630] usb 2-1: Using ep0 maxpacket: 8 [ 339.611316][ T8581] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 161: padding at end of block bitmap is not set [ 339.852624][ T3630] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=ad.59 [ 339.945160][ T3630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.044724][ T3630] usb 2-1: Product: syz [ 340.087561][ T3630] usb 2-1: Manufacturer: syz [ 340.142169][ T3630] usb 2-1: SerialNumber: syz [ 340.209289][ T5903] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 340.219028][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.227849][ T5903] usb 4-1: SerialNumber: syz [ 340.232991][ T3630] usb 2-1: config 0 descriptor?? [ 340.283333][ T3630] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 340.295976][ T3630] dvb-usb: bulk message failed: -22 (3/0) [ 340.336100][ T3630] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.401169][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.420053][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.457289][ T4791] usb 1-1: USB disconnect, device number 18 [ 340.471196][ T3630] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 340.495062][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.496105][ T3630] usb 2-1: media controller created [ 340.517386][ T5903] usb 4-1: 0:2 : does not exist [ 340.535143][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.541379][ T3630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.551182][ T5903] usb 4-1: unit 5 not found! [ 340.575203][ T5903] usb 4-1: USB disconnect, device number 16 [ 340.589437][ T3630] dvb-usb: bulk message failed: -22 (6/0) [ 340.609330][ T3630] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 340.698188][ T3731] device hsr_slave_0 left promiscuous mode [ 340.701966][ T3630] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 340.726227][ T3731] device hsr_slave_1 left promiscuous mode [ 340.731648][ T3630] dvb-usb: schedule remote query interval to 150 msecs. [ 340.741694][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.759584][ T3630] dvb-usb: bulk message failed: -22 (3/0) [ 340.760997][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.796747][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.804980][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.821057][ T3630] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 340.841676][ T8552] udevd[8552]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.848464][ T3630] usb 2-1: USB disconnect, device number 12 [ 340.869165][ T3731] device bridge_slave_1 left promiscuous mode [ 340.901317][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.921725][ T3731] device bridge_slave_0 left promiscuous mode [ 340.942675][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.959259][ T3731] device veth1_macvtap left promiscuous mode [ 340.965955][ T3731] device veth0_macvtap left promiscuous mode [ 340.973964][ T3731] device veth1_vlan left promiscuous mode [ 340.979976][ T3731] device veth0_vlan left promiscuous mode [ 340.982598][ T3630] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 341.762683][ T8666] loop1: detected capacity change from 0 to 4096 [ 341.901286][ T3961] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 341.945881][ T8666] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.311365][ T3961] usb 3-1: Using ep0 maxpacket: 16 [ 342.578269][ T3731] team0 (unregistering): Port device team_slave_1 removed [ 342.602067][ T3961] usb 3-1: config 0 has no interfaces? [ 342.646416][ T8675] loop3: detected capacity change from 0 to 1024 [ 342.673192][ T3731] team0 (unregistering): Port device team_slave_0 removed [ 342.722792][ T8675] hfsplus: unable to parse mount options [ 342.752901][ T3731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.780649][ T3731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.781379][ T3961] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 342.849113][ T3961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.874436][ T3961] usb 3-1: Product: syz [ 342.878641][ T3961] usb 3-1: Manufacturer: syz [ 342.888937][ T8675] loop3: detected capacity change from 0 to 16 [ 342.895238][ T3961] usb 3-1: SerialNumber: syz [ 342.911393][ T3961] r8152-cfgselector 3-1: config 0 descriptor?? [ 342.961519][ T8675] erofs: Unknown parameter 't5;} 7_cN"Lam)p'6~' [ 343.132284][ T3731] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 343.192061][ T3961] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 343.257937][ T3731] bond0 (unregistering): Released all slaves [ 343.300946][ T4791] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 343.407060][ T8436] device veth0_vlan entered promiscuous mode [ 343.426950][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.427966][ T3630] usb 3-1: USB disconnect, device number 16 [ 343.442185][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.491635][ T8436] device veth1_vlan entered promiscuous mode [ 343.680082][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.700963][ T8678] loop0: detected capacity change from 0 to 512 [ 343.716752][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.741069][ T4791] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 236, changing to 4 [ 343.781545][ T4791] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid maxpacket 43974, setting to 1023 [ 343.796378][ T8436] device veth0_macvtap entered promiscuous mode [ 343.813613][ T8436] device veth1_macvtap entered promiscuous mode [ 343.850892][ T4791] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 343.874382][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.897082][ T4791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 343.903993][ T8678] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.950966][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.978397][ T8678] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 344.000713][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.011734][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.012177][ T8678] EXT4-fs (loop0): 1 truncate cleaned up [ 344.021712][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.021736][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.021754][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.021767][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.021785][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.021795][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.021813][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.021823][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.040819][ T5904] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 344.049274][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.088950][ T8678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.100136][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.148761][ T4791] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 344.159652][ T4791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.192721][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.211440][ T4791] usb 4-1: Product: syz [ 344.215633][ T4791] usb 4-1: Manufacturer: syz [ 344.231265][ T4791] usb 4-1: SerialNumber: syz [ 344.252408][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.416639][ T4791] usb 4-1: config 0 descriptor?? [ 344.441488][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.463328][ T4791] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 344.511440][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 344.557901][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 344.606082][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.624877][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.707574][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.720794][ T5904] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.770921][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.799805][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.861957][ T5904] usb 2-1: config 0 descriptor?? [ 344.867028][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.901042][ T8682] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 344.908328][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.960751][ T4798] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 344.961084][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.024481][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.078558][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.101319][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.133056][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.168527][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.201572][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.230879][ T4798] usb 3-1: Using ep0 maxpacket: 8 [ 345.263146][ T4791] usb 4-1: USB disconnect, device number 17 [ 345.274129][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.293935][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.313028][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.322145][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.333197][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.342720][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.427707][ T7991] EXT4-fs error (device loop0): ext4_map_blocks:601: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 345.429291][ T4798] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.453226][ T4798] usb 3-1: config 0 has no interface number 0 [ 345.460932][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.469606][ T4798] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.482077][ T4798] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.491201][ T4798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.544318][ T4798] usb 3-1: config 0 descriptor?? [ 345.595380][ T4798] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 345.620473][ T5904] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 345.632283][ T5904] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 345.637343][ T8436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.652919][ T5904] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 345.687714][ T7991] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 345.692388][ T8436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.740207][ T7991] EXT4-fs error (device loop0): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 346.049152][ T8436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.205473][ T8697] loop1: detected capacity change from 0 to 512 [ 346.244918][ T8436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.521644][ T8697] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.653363][ T8682] EXT4-fs error (device loop1): __ext4_iget:4861: inode #12: block 2: comm syz.1.1208: invalid block [ 347.254608][ T4791] usb 3-1: USB disconnect, device number 17 [ 347.263946][ T4791] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 347.310823][ T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.323302][ T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.418646][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.457679][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.485346][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.533004][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.849445][ T8700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 161: padding at end of block bitmap is not set [ 348.262297][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 348.274856][ T8710] loop3: detected capacity change from 0 to 32768 [ 348.294011][ T8735] loop4: detected capacity change from 0 to 8192 [ 348.383938][ T8732] kvm: emulating exchange as write [ 348.389762][ T3615] usb 2-1: USB disconnect, device number 13 [ 348.437527][ T8710] XFS: ikeep mount option is deprecated. [ 348.460280][ T8735] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 348.530824][ T8735] REISERFS (device loop4): using ordered data mode [ 348.553555][ T8735] reiserfs: using flush barriers [ 348.573559][ T8735] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 348.632248][ T8735] REISERFS (device loop4): checking transaction log (loop4) [ 348.651950][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.681094][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.714725][ T8710] XFS (loop3): Mounting V5 Filesystem [ 348.740038][ T8721] device bridge_slave_0 entered promiscuous mode [ 348.796230][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.875984][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.962145][ T8721] device bridge_slave_1 entered promiscuous mode [ 349.038524][ T8710] XFS (loop3): Ending clean mount [ 349.098330][ T8710] XFS (loop3): Quotacheck needed: Please wait. [ 349.450838][ T8735] REISERFS (device loop4): Using tea hash to sort names [ 349.528704][ T8735] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 349.552072][ T8735] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 349.552811][ T8710] XFS (loop3): Quotacheck: Done. [ 349.746714][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.253955][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.312206][ T8100] XFS (loop3): Unmounting Filesystem [ 350.403876][ T5904] Bluetooth: hci0: command 0x0409 tx timeout [ 350.566458][ T8721] team0: Port device team_slave_0 added [ 350.635412][ T8721] team0: Port device team_slave_1 added [ 350.731243][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.738209][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.866972][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.922684][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.949926][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.041123][ T3613] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 351.091842][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.431324][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 351.471284][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 351.501117][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.530810][ T3613] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.539878][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.573630][ T3613] usb 2-1: config 0 descriptor?? [ 351.601061][ T8774] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 351.663529][ T8721] device hsr_slave_0 entered promiscuous mode [ 351.711304][ T8721] device hsr_slave_1 entered promiscuous mode [ 351.791085][ T8721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.798718][ T8721] Cannot create hsr debugfs directory [ 352.062724][ T3613] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 352.087436][ T3613] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 352.139010][ T3613] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 352.153980][ T8721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.170814][ T4791] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 352.297572][ T8721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.330316][ T8774] loop1: detected capacity change from 0 to 512 [ 352.384213][ T8792] devpts: called with bogus options [ 352.420061][ T8792] loop3: detected capacity change from 0 to 764 [ 352.463435][ T8774] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.481663][ T1302] Bluetooth: hci0: command 0x041b tx timeout [ 352.497611][ T8721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.512372][ T8774] EXT4-fs error (device loop1): __ext4_iget:4861: inode #12: block 2: comm syz.1.1235: invalid block [ 352.692210][ T8795] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 161: padding at end of block bitmap is not set [ 352.713076][ T4791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.723446][ T4791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.732493][ T4791] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 352.743483][ T4791] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 352.883989][ T8721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.952538][ T4791] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.970856][ T4791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.978917][ T4791] usb 5-1: SerialNumber: syz [ 353.503627][ T4791] usb 5-1: 0:2 : does not exist [ 353.517122][ T4791] usb 5-1: unit 5 not found! [ 353.604723][ T4791] usb 5-1: USB disconnect, device number 18 [ 353.739693][ T8721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.804903][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 353.901867][ T8552] udevd[8552]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.021520][ T8721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.037414][ T8721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.074367][ T8721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.165376][ T8816] loop3: detected capacity change from 0 to 2048 [ 354.304096][ T8816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.319580][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.330812][ T5900] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 354.370262][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.393813][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.416069][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.490178][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.519599][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.531189][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.538253][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.580968][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 354.581325][ T3959] Bluetooth: hci0: command 0x040f tx timeout [ 354.598360][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.609635][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.631682][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.651048][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.658145][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.661735][ T3615] usb 2-1: USB disconnect, device number 14 [ 354.667443][ T8825] loop1: detected capacity change from 0 to 8192 [ 354.685893][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.711093][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 354.715104][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.730457][ T26] audit: type=1326 audit(1722366768.510:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f0a7d3b9 code=0x7ffc0000 [ 354.737863][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.756982][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 354.765394][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.788015][ T26] audit: type=1326 audit(1722366768.540:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f0a7d3b9 code=0x7ffc0000 [ 354.795261][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 354.810493][ T8825] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 354.810598][ T8825] REISERFS (device loop1): using ordered data mode [ 354.848419][ T8825] reiserfs: using flush barriers [ 354.857331][ T8825] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 354.879944][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 354.886708][ T8825] REISERFS (device loop1): checking transaction log (loop1) [ 355.023058][ T8825] REISERFS (device loop1): Using tea hash to sort names [ 355.030452][ T8825] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 355.060955][ T5900] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 355.076126][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.102884][ T5900] usb 5-1: Product: syz [ 355.106157][ T8825] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 355.107219][ T5900] usb 5-1: Manufacturer: syz [ 355.140926][ T5900] usb 5-1: SerialNumber: syz [ 355.159223][ T5900] usb 5-1: config 0 descriptor?? [ 355.202340][ T5900] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 355.202722][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.216044][ T5900] cyphidcom ttyUSB0: required endpoint is missing [ 355.228563][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.264960][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.303572][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.312989][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.348090][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.378898][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.389873][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.421225][ T3613] usb 5-1: USB disconnect, device number 19 [ 355.432851][ T3613] cypress_m8 5-1:0.0: device disconnected [ 355.689362][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 356.641003][ T3630] Bluetooth: hci0: command 0x0419 tx timeout [ 356.678671][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.741625][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.749249][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.923068][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.957733][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.022313][ T8861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1265'. [ 357.106367][ T8721] device veth0_vlan entered promiscuous mode [ 357.130015][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.142399][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.157909][ T8842] loop3: detected capacity change from 0 to 32768 [ 357.195635][ T8721] device veth1_vlan entered promiscuous mode [ 357.212307][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.227462][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.236057][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 357.238937][ T8842] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1258 (8842) [ 357.296131][ T8842] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 357.331227][ T8842] BTRFS info (device loop3): setting nodatacow, compression disabled [ 357.339417][ T8842] BTRFS info (device loop3): enabling auto defrag [ 357.359428][ T8842] BTRFS info (device loop3): doing ref verification [ 357.407602][ T8842] BTRFS info (device loop3): using free space tree [ 357.422636][ T1302] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 357.431779][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 357.450286][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.453859][ T8842] BTRFS info (device loop3): has skinny extents [ 357.482317][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.523927][ T8721] device veth0_macvtap entered promiscuous mode [ 357.559212][ T8721] device veth1_macvtap entered promiscuous mode [ 357.689654][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.700991][ T1302] usb 2-1: Using ep0 maxpacket: 16 [ 357.727924][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.770713][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.812742][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.854104][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.865521][ T1302] usb 2-1: config 0 has no interfaces? [ 357.906491][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.960215][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.001878][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.031169][ T1302] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 358.055472][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.066205][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.066564][ T1302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.095416][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.125090][ T1302] usb 2-1: Product: syz [ 358.130309][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.157800][ T1302] usb 2-1: Manufacturer: syz [ 358.170710][ T1302] usb 2-1: SerialNumber: syz [ 358.175562][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.201318][ T1302] r8152-cfgselector 2-1: config 0 descriptor?? [ 358.213704][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.241124][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.262000][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.314387][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.365489][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.382006][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.390140][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.421801][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.434530][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.470546][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.481420][ T1302] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 358.495478][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.523797][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.570788][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.606110][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.625107][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.636111][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.651564][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.662615][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.672954][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.684443][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.694695][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.706711][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.720614][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.735080][ T1302] usb 2-1: USB disconnect, device number 15 [ 358.750908][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.779409][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.824861][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.846288][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.867702][ T8721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.887427][ T8721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.904802][ T8721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.921970][ T8721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.124329][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 360.186017][ T8915] loop3: detected capacity change from 0 to 4096 [ 360.203184][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.222836][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.249579][ T8915] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 360.268707][ T8922] loop4: detected capacity change from 0 to 2048 [ 360.298529][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.312606][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.326680][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.364507][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.413173][ T8922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.639457][ T8927] netlink: 'syz.2.1281': attribute type 2 has an invalid length. [ 361.336241][ T26] audit: type=1326 audit(1722366775.120:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9d5883b9 code=0x7ffc0000 [ 361.337550][ T8927] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 361.410146][ T26] audit: type=1326 audit(1722366775.120:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9d5883b9 code=0x7ffc0000 [ 361.452688][ T8935] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 361.493848][ T26] audit: type=1326 audit(1722366775.120:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d9d586d50 code=0x7ffc0000 [ 361.544644][ T8934] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.558809][ T26] audit: type=1326 audit(1722366775.120:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9d5883b9 code=0x7ffc0000 [ 361.687285][ T26] audit: type=1326 audit(1722366775.120:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9d5883b9 code=0x7ffc0000 [ 361.774889][ T8943] loop3: detected capacity change from 0 to 512 [ 361.799675][ T8925] loop1: detected capacity change from 0 to 32768 [ 361.827385][ T26] audit: type=1326 audit(1722366775.170:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9d9d5883b9 code=0x7ffc0000 [ 362.182575][ T26] audit: type=1326 audit(1722366775.190:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9d5883b9 code=0x7ffc0000 [ 362.336322][ T8943] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.365501][ T8925] XFS: ikeep mount option is deprecated. [ 362.381534][ T26] audit: type=1326 audit(1722366775.210:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9d5883b9 code=0x7ffc0000 [ 362.504931][ T8943] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 362.537821][ T8925] XFS (loop1): Mounting V5 Filesystem [ 362.591072][ T5904] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 362.636764][ T8943] EXT4-fs (loop3): Remounting filesystem read-only [ 362.700222][ T8943] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1286: invalid indirect mapped block 1 (level 1) [ 362.727735][ T8925] XFS (loop1): Ending clean mount [ 362.728635][ T8943] EXT4-fs (loop3): 1 truncate cleaned up [ 362.736113][ T8925] XFS (loop1): Quotacheck needed: Please wait. [ 362.760047][ T8943] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 362.830972][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 362.855235][ T8925] XFS (loop1): Quotacheck: Done. [ 362.951006][ T5904] usb 5-1: config 0 has no interfaces? [ 362.968827][ T6276] device hsr_slave_0 left promiscuous mode [ 362.985415][ T6276] device hsr_slave_1 left promiscuous mode [ 363.003228][ T7368] XFS (loop1): Unmounting Filesystem [ 363.016392][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.028433][ T8943] kvm: pic: non byte write [ 363.050274][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.068510][ T8943] picdev_read: 65 callbacks suppressed [ 363.068526][ T8943] kvm: pic: non byte read [ 363.111055][ T5904] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 363.120232][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.126823][ T8941] loop0: detected capacity change from 0 to 32768 [ 363.129078][ T8943] kvm: pic: non byte write [ 363.139555][ T5904] usb 5-1: Product: syz [ 363.145813][ T8943] kvm: pic: non byte write [ 363.150473][ T8943] kvm: pic: non byte write [ 363.156718][ T5904] usb 5-1: Manufacturer: syz [ 363.161842][ T5904] usb 5-1: SerialNumber: syz [ 363.169938][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.178693][ T8943] kvm: pic: non byte write [ 363.198064][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.206005][ T5904] r8152-cfgselector 5-1: config 0 descriptor?? [ 363.209516][ T8941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1284 (8941) [ 363.225399][ T6276] device bridge_slave_1 left promiscuous mode [ 363.261186][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.294450][ T6276] device bridge_slave_0 left promiscuous mode [ 363.313948][ T8941] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 363.326530][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.342070][ T8941] BTRFS info (device loop0): setting nodatacow, compression disabled [ 363.367782][ T8941] BTRFS info (device loop0): enabling auto defrag [ 363.394629][ T8941] BTRFS info (device loop0): max_inline at 0 [ 363.402075][ T6276] device hsr_slave_0 left promiscuous mode [ 363.404714][ T8941] BTRFS info (device loop0): using free space tree [ 363.414929][ T6276] device hsr_slave_1 left promiscuous mode [ 363.428255][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.436275][ T8941] BTRFS info (device loop0): has skinny extents [ 363.446429][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.501368][ T5904] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 363.537814][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.620954][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.726771][ T3615] usb 5-1: USB disconnect, device number 20 [ 363.754812][ T6276] device hsr_slave_0 left promiscuous mode [ 363.791834][ T6276] device hsr_slave_1 left promiscuous mode [ 363.830135][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.892152][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.951890][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.969804][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.985840][ T6276] device bridge_slave_1 left promiscuous mode [ 363.999728][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.044322][ T6276] device bridge_slave_0 left promiscuous mode [ 364.070846][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.133061][ T6276] device veth1_macvtap left promiscuous mode [ 364.139135][ T6276] device veth0_macvtap left promiscuous mode [ 364.147014][ T6276] device veth1_vlan left promiscuous mode [ 364.203666][ T6276] device veth0_vlan left promiscuous mode [ 364.410933][ T6276] device veth1_macvtap left promiscuous mode [ 364.463518][ T6276] device veth0_macvtap left promiscuous mode [ 364.484976][ T6276] device veth1_vlan left promiscuous mode [ 364.524500][ T6276] device veth0_vlan left promiscuous mode [ 364.666418][ T9003] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 364.808990][ T6276] device veth1_macvtap left promiscuous mode [ 364.819643][ T6276] device veth0_macvtap left promiscuous mode [ 364.839405][ T6276] device veth1_vlan left promiscuous mode [ 364.859998][ T6276] device veth0_vlan left promiscuous mode [ 365.833916][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 365.858037][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 365.873502][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.891376][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.058381][ T6276] bond0 (unregistering): Released all slaves [ 366.347974][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 366.381566][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 366.411563][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.451347][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.483120][ T9018] loop0: detected capacity change from 0 to 32768 [ 366.532293][ T9018] XFS: ikeep mount option is deprecated. [ 366.592792][ T6276] bond0 (unregistering): Released all slaves [ 366.646419][ T9018] XFS (loop0): Mounting V5 Filesystem [ 366.737156][ T9018] XFS (loop0): Ending clean mount [ 366.773850][ T9018] XFS (loop0): Quotacheck needed: Please wait. [ 366.851228][ T9018] XFS (loop0): Quotacheck: Done. [ 366.895492][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 366.947357][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 366.979937][ T8721] XFS (loop0): Unmounting Filesystem [ 366.991160][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.040518][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.173585][ T6276] bond0 (unregistering): Released all slaves [ 367.232990][ T9002] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.399293][ T9005] netlink: 'syz.2.1296': attribute type 2 has an invalid length. [ 367.407621][ T9006] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 367.869754][ T9046] devpts: called with bogus options [ 367.953712][ T9046] loop1: detected capacity change from 0 to 764 [ 368.130423][ T9028] loop4: detected capacity change from 0 to 32768 [ 368.285114][ T9051] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 368.295146][ T9052] loop1: detected capacity change from 0 to 512 [ 368.361013][ T9051] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 368.384722][ T9028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1302 (9028) [ 368.477522][ T9052] EXT4-fs (loop1): Ignoring removed bh option [ 368.504657][ T9028] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 368.540254][ T9028] BTRFS info (device loop4): setting nodatacow, compression disabled [ 368.611377][ T9028] BTRFS info (device loop4): enabling auto defrag [ 368.617847][ T9028] BTRFS info (device loop4): doing ref verification [ 368.637375][ T9052] EXT4-fs error (device loop1): __ext4_iget:4861: inode #12: block 2: comm syz.1.1312: invalid block [ 368.690900][ T9028] BTRFS info (device loop4): using free space tree [ 368.697444][ T9028] BTRFS info (device loop4): has skinny extents [ 368.721723][ T9052] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1312: couldn't read orphan inode 12 (err -117) [ 368.734276][ T9052] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 368.772159][ T9052] fscrypt (loop1, inode 18): Mutually exclusive encryption flags (0x17) [ 368.895822][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1315'. [ 368.906619][ T9065] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1315'. [ 369.114271][ T9073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1301'. [ 369.177572][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 369.583583][ T9093] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 369.683602][ T9096] netlink: 'syz.0.1320': attribute type 13 has an invalid length. [ 369.695545][ T9096] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 369.703911][ T9096] device gretap1 entered promiscuous mode [ 370.159980][ T9104] loop3: detected capacity change from 0 to 512 [ 370.327287][ T9104] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 370.383070][ T9104] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 370.431940][ T9110] loop1: detected capacity change from 0 to 512 [ 370.504696][ T9110] EXT4-fs (loop1): Ignoring removed bh option [ 370.523680][ T9115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1328'. [ 370.559848][ T9110] EXT4-fs error (device loop1): __ext4_iget:4861: inode #12: block 2: comm syz.1.1326: invalid block [ 370.560243][ T9110] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1326: couldn't read orphan inode 12 (err -117) [ 370.560538][ T9110] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 370.652245][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 370.728085][ T9116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1329'. [ 370.779071][ T9116] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1329'. [ 370.827214][ T9127] netlink: 'syz.3.1333': attribute type 1 has an invalid length. [ 371.943805][ T9133] loop3: detected capacity change from 0 to 2048 [ 371.960955][ T9133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.045914][ T9128] loop1: detected capacity change from 0 to 32768 [ 372.152432][ T26] audit: type=1326 audit(1722366785.940:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f0a7d3b9 code=0x7ffc0000 [ 372.213997][ T9128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1332 (9128) [ 372.230220][ T9150] netlink: 'syz.2.1340': attribute type 13 has an invalid length. [ 372.241675][ T9150] batman_adv: Cannot find parent device [ 372.248045][ T9150] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.255784][ T9150] device gretap1 entered promiscuous mode [ 372.279361][ T26] audit: type=1326 audit(1722366785.940:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25f0a7bd50 code=0x7ffc0000 [ 372.359212][ T9128] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 372.400278][ T26] audit: type=1326 audit(1722366785.940:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f0a7d3b9 code=0x7ffc0000 [ 372.412518][ T9128] BTRFS info (device loop1): setting nodatacow, compression disabled [ 372.521584][ T9128] BTRFS info (device loop1): enabling auto defrag [ 372.528326][ T26] audit: type=1326 audit(1722366785.940:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f25f0a7d3b9 code=0x7ffc0000 [ 372.552127][ T9128] BTRFS info (device loop1): doing ref verification [ 372.600076][ T9128] BTRFS info (device loop1): using free space tree [ 372.605277][ T26] audit: type=1326 audit(1722366785.960:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f0a7d3b9 code=0x7ffc0000 [ 372.639718][ T9128] BTRFS info (device loop1): has skinny extents [ 372.651334][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1342'. [ 372.703952][ T9132] loop0: detected capacity change from 0 to 32768 [ 372.710476][ T26] audit: type=1326 audit(1722366786.060:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.3.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f0a7d3b9 code=0x7ffc0000 [ 372.786517][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 372.807625][ T9161] loop4: detected capacity change from 0 to 512 [ 372.866342][ T9161] EXT4-fs (loop4): Ignoring removed bh option [ 372.887401][ T9132] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1335 (9132) [ 372.944379][ T9175] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 372.948185][ T9161] EXT4-fs error (device loop4): __ext4_iget:4861: inode #12: block 2: comm syz.4.1343: invalid block [ 372.988554][ T9161] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1343: couldn't read orphan inode 12 (err -117) [ 373.028922][ T8552] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (8552) [ 373.073991][ T9161] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 373.178347][ T9179] overlayfs: missing 'lowerdir' [ 373.238271][ T9161] fscrypt (loop4, inode 18): Mutually exclusive encryption flags (0x17) [ 373.349746][ T9192] autofs4:pid:9192:autofs_fill_super: called with bogus options [ 373.967759][ T9216] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 374.149957][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 374.223017][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1358'. [ 375.181278][ T9231] loop4: detected capacity change from 0 to 512 [ 375.200056][ T9236] autofs4:pid:9236:autofs_fill_super: called with bogus options [ 375.226876][ T9231] EXT4-fs (loop4): Ignoring removed bh option [ 375.315639][ T9231] EXT4-fs error (device loop4): __ext4_iget:4861: inode #12: block 2: comm syz.4.1362: invalid block [ 375.360980][ T9231] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1362: couldn't read orphan inode 12 (err -117) [ 375.381032][ T9231] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 375.453555][ T9231] fscrypt (loop4, inode 18): Mutually exclusive encryption flags (0x17) [ 375.559897][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 375.869465][ T9253] loop4: detected capacity change from 0 to 2048 [ 375.937884][ T9253] hpfs: Bad version 183,140. Mount readonly to go around [ 375.950899][ T9253] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 376.328231][ T9271] program syz.1.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.660957][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.667282][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.756706][ T9282] overlayfs: missing 'lowerdir' [ 379.786965][ T9281] autofs4:pid:9281:autofs_fill_super: called with bogus options [ 380.545102][ T9305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 380.735386][ T9308] program syz.1.1388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.600786][ T6033] Bluetooth: hci6: command 0x0406 tx timeout [ 381.665882][ T9319] overlayfs: missing 'lowerdir' [ 382.028645][ T9335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1401'. [ 382.457031][ T9349] program syz.2.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.278489][ T26] audit: type=1326 audit(1722366798.060:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.1.1413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf843923b9 code=0x0 [ 384.357233][ T9355] loop0: detected capacity change from 0 to 32768 [ 384.410633][ T9355] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1409 (9355) [ 384.464762][ T9355] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 384.490961][ T9355] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 384.516288][ T9355] BTRFS info (device loop0): use zstd compression, level 3 [ 384.518454][ T4214] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.530742][ T9355] BTRFS info (device loop0): using free space tree [ 384.546443][ T9355] BTRFS info (device loop0): has skinny extents [ 384.649986][ T4214] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.690035][ T9355] BTRFS info (device loop0): enabling ssd optimizations [ 384.706664][ T9355] BTRFS info (device loop0): checking UUID tree [ 384.762439][ T4214] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.858240][ T9365] chnl_net:caif_netlink_parms(): no params data found [ 385.382889][ T4214] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.566304][ T9365] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.574468][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.584237][ T9365] device bridge_slave_0 entered promiscuous mode [ 385.596579][ T9365] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.608185][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.617461][ T9365] device bridge_slave_1 entered promiscuous mode [ 385.757191][ T3630] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 385.786200][ T3613] Bluetooth: hci1: command 0x0409 tx timeout [ 385.803889][ T9365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.898918][ T9413] program syz.0.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.124519][ T9365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.161782][ T3630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.161858][ T3630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.161973][ T3630] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 386.162038][ T3630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.190076][ T3630] usb 2-1: config 0 descriptor?? [ 386.759411][ T9365] team0: Port device team_slave_0 added [ 386.763719][ T1075] Bluetooth: hci2: command 0x0409 tx timeout [ 387.327792][ T9365] team0: Port device team_slave_1 added [ 387.463607][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.470575][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.513869][ T3630] usbhid 2-1:0.0: can't add hid device: -71 [ 387.542884][ T3630] usbhid: probe of 2-1:0.0 failed with error -71 [ 387.579545][ T3630] usb 2-1: USB disconnect, device number 16 [ 387.815042][ T9365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.326585][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.359751][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.448212][ T9365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.459818][ T9448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 388.482834][ T9437] EXT4-fs warning (device sda1): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 388.601044][ T9458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 389.416639][ T9469] program syz.1.1431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.463629][ T1075] Bluetooth: hci2: command 0x041b tx timeout [ 390.127800][ T9365] device hsr_slave_0 entered promiscuous mode [ 390.158861][ T9365] device hsr_slave_1 entered promiscuous mode [ 390.173414][ T9365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.190973][ T9365] Cannot create hsr debugfs directory [ 391.510784][ T1075] Bluetooth: hci2: command 0x040f tx timeout [ 391.975062][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 392.209885][ T9516] program syz.0.1445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.380541][ T4214] device hsr_slave_0 left promiscuous mode [ 392.401508][ T4214] device hsr_slave_1 left promiscuous mode [ 392.422543][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.440775][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.574103][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.632430][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.312292][ T4214] device bridge_slave_1 left promiscuous mode [ 393.375358][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.422862][ T4214] device bridge_slave_0 left promiscuous mode [ 393.423300][ T9510] loop1: detected capacity change from 0 to 32768 [ 393.429085][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.503351][ T9510] find_entry called with index = 0 [ 393.516567][ T9510] read_mapping_page failed! [ 393.530807][ T9510] ERROR: (device loop1): txCommit: [ 393.530807][ T9510] [ 393.552976][ T4214] device veth1_macvtap left promiscuous mode [ 393.559612][ T4214] device veth0_macvtap left promiscuous mode [ 393.590799][ T5905] Bluetooth: hci2: command 0x0419 tx timeout [ 393.591235][ T4214] device veth1_vlan left promiscuous mode [ 393.639504][ T9510] ERROR: (device loop1): remounting filesystem as read-only [ 393.650416][ T4214] device veth0_vlan left promiscuous mode [ 394.008759][ T26] audit: type=1326 audit(1722366807.790:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.1.1451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf843923b9 code=0x0 [ 394.386050][ T9545] program syz.0.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.402016][ T4214] team0 (unregistering): Port device team_slave_1 removed [ 394.426856][ T4214] team0 (unregistering): Port device team_slave_0 removed [ 394.456063][ T4214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.476418][ T4214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.679311][ T4214] bond0 (unregistering): Released all slaves [ 394.752611][ T9365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.776622][ T9365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.908966][ T9365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 394.964293][ T9365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.960765][ T5905] Bluetooth: hci1: command 0x0409 tx timeout [ 396.069499][ T9547] loop0: detected capacity change from 0 to 40427 [ 396.230194][ T9547] F2FS-fs (loop0): invalid crc value [ 396.383540][ T9547] F2FS-fs (loop0): Found nat_bits in checkpoint [ 396.531566][ T9547] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 396.536754][ T9532] chnl_net:caif_netlink_parms(): no params data found [ 396.663691][ T9365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.859543][ T9365] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.973951][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.992331][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.021867][ T9590] EXT4-fs warning (device sda1): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 397.078077][ T9365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.088628][ T9365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.169773][ T9568] loop1: detected capacity change from 0 to 32768 [ 397.190819][ T5905] Bluetooth: hci7: command 0x0409 tx timeout [ 397.197042][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.216143][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.256216][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.263395][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.271430][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.280463][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.299430][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.306581][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.367418][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.408043][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.429440][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.458870][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.469410][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.490016][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.510239][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.530554][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.533082][ T9611] loop0: detected capacity change from 0 to 4096 [ 397.551640][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.560453][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.581895][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.588963][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.614302][ T9568] XFS (loop1): Mounting V5 Filesystem [ 397.630471][ T9611] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 397.664668][ T9532] device bridge_slave_0 entered promiscuous mode [ 397.732023][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.740369][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.761373][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.771396][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.787954][ T9611] ntfs3: loop0: Failed to load $Extend. [ 397.842361][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.906303][ T9568] XFS (loop1): Ending clean mount [ 397.906695][ T9532] device bridge_slave_1 entered promiscuous mode [ 397.992881][ T3873] Bluetooth: hci1: command 0x041b tx timeout [ 397.998485][ T9611] overlayfs: './file0' not a directory [ 398.062171][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.070195][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.115305][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.167621][ T9365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.183540][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.335034][ T9532] team0: Port device team_slave_0 added [ 398.397205][ T7368] XFS (loop1): Unmounting Filesystem [ 398.464390][ T9532] team0: Port device team_slave_1 added [ 398.663319][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.695837][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.792909][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.839960][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.879531][ T9639] Invalid ELF header magic: != ELF [ 398.889482][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.011398][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.130083][ T9646] program syz.1.1465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.258796][ T9532] device hsr_slave_0 entered promiscuous mode [ 399.316679][ T9532] device hsr_slave_1 entered promiscuous mode [ 399.332884][ T9532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.340464][ T9532] Cannot create hsr debugfs directory [ 399.463095][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.511938][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.696571][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 399.745389][ T9365] device veth0_vlan entered promiscuous mode [ 399.782177][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.790597][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.841155][ T9365] device veth1_vlan entered promiscuous mode [ 399.866842][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.891579][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.911586][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 399.933335][ T9659] loop0: detected capacity change from 0 to 8192 [ 399.991769][ T9365] device veth0_macvtap entered promiscuous mode [ 400.027561][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 400.041467][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.063656][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.070367][ T9659] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 400.081478][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 400.111255][ T9659] REISERFS (device loop0): using journaled data mode [ 400.118355][ T9659] reiserfs: using flush barriers [ 400.129571][ T9365] device veth1_macvtap entered promiscuous mode [ 400.136820][ T9659] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 400.185693][ T9662] loop1: detected capacity change from 0 to 4096 [ 400.204384][ T9532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.272103][ T9662] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 400.281063][ T9659] REISERFS (device loop0): checking transaction log (loop0) [ 400.297630][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.314991][ T9659] REISERFS (device loop0): Using r5 hash to sort names [ 400.333627][ T9659] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 400.341540][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.386955][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.405129][ T9659] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 400.418356][ T9662] ntfs3: loop1: Failed to load $Extend. [ 400.490604][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.500625][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.504820][ T9659] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 400.550842][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.560769][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.582534][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.588390][ T9659] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 400.593171][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.630808][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.650791][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.670738][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.694093][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.738984][ T9659] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 400.764117][ T9532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.790913][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.831555][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.842454][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.885938][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.940731][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.968088][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.026225][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.045291][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.072526][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.095539][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.116714][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.138029][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.177353][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.232939][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.271995][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.303086][ T9532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.429919][ T9365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.452050][ T9365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.491443][ T9365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.502257][ T9365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.587821][ T9532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.602033][ T9665] loop1: detected capacity change from 0 to 32768 [ 401.788342][ T9665] XFS (loop1): Mounting V5 Filesystem [ 401.938897][ T9669] Invalid ELF header magic: != ELF [ 401.975391][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.005236][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.013814][ T9665] XFS (loop1): Ending clean mount [ 402.040912][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.048432][ T9532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.071854][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.122609][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 402.150369][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 402.171963][ T5519] Bluetooth: hci1: command 0x0419 tx timeout [ 402.178091][ T9532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.200223][ T9532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.279051][ T9680] program syz.0.1477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.300374][ T9532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.366608][ T7368] XFS (loop1): Unmounting Filesystem [ 402.629682][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.345389][ T9695] loop4: detected capacity change from 0 to 512 [ 403.360455][ T9532] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.375565][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.393921][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.421704][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.432134][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.441040][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.448159][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.461424][ T9695] EXT4-fs (loop4): Ignoring removed nobh option [ 403.478502][ T9695] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 403.488014][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.510755][ T9695] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1482: attempt to clear invalid blocks 2 len 1 [ 403.563867][ T9695] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 403.667971][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.678303][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.686911][ T9695] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1482: invalid indirect mapped block 1819239214 (level 0) [ 403.686948][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.707900][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.718027][ T8907] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 403.727279][ T9695] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1482: invalid indirect mapped block 1819239214 (level 1) [ 403.751064][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.791192][ T9695] EXT4-fs (loop4): 1 truncate cleaned up [ 403.799054][ T9695] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,user_xattr,jqfmt=vfsv1,grpid,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 403.834297][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.849225][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.869109][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.886390][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.898889][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.680830][ T8907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.728839][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.779108][ T8907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.799662][ T8907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 404.812619][ T8907] usb 1-1: SerialNumber: syz [ 404.863053][ T8907] usb 1-1: bad CDC descriptors [ 404.912854][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.922424][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.961725][ T9532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.999881][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.040139][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.059315][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.078112][ T3961] usb 1-1: USB disconnect, device number 19 [ 405.219605][ T9709] Invalid ELF header magic: != ELF [ 405.260218][ T9690] chnl_net:caif_netlink_parms(): no params data found [ 405.372460][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.380077][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.409373][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.490909][ T8907] Bluetooth: hci4: command 0x0409 tx timeout [ 405.567993][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.589767][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.811201][ T9726] block nbd2: NBD_DISCONNECT [ 405.828542][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.847941][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.863223][ T9690] device bridge_slave_0 entered promiscuous mode [ 405.882489][ T9726] block nbd2: Disconnected due to user request. [ 405.889518][ T9726] block nbd2: shutting down sockets [ 405.910446][ T4214] device hsr_slave_0 left promiscuous mode [ 405.922594][ T4214] device hsr_slave_1 left promiscuous mode [ 405.941376][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.947109][ T9725] loop0: detected capacity change from 0 to 8192 [ 405.955836][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.977805][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.024064][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.040429][ T4214] device bridge_slave_1 left promiscuous mode [ 406.065197][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.089355][ T4214] device bridge_slave_0 left promiscuous mode [ 406.101982][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.142981][ T4214] device veth1_macvtap left promiscuous mode [ 406.149051][ T4214] device veth0_macvtap left promiscuous mode [ 406.170128][ T4214] device veth1_vlan left promiscuous mode [ 406.183848][ T4214] device veth0_vlan left promiscuous mode [ 406.188041][ T9720] loop4: detected capacity change from 0 to 32768 [ 406.333988][ T9720] XFS (loop4): Mounting V5 Filesystem [ 406.490195][ T9720] XFS (loop4): Ending clean mount [ 406.496494][ T9742] loop0: detected capacity change from 0 to 256 [ 406.585151][ T9742] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 406.650625][ T9365] XFS (loop4): Unmounting Filesystem [ 407.128385][ T4214] team0 (unregistering): Port device team_slave_1 removed [ 407.185110][ T4214] team0 (unregistering): Port device team_slave_0 removed [ 407.229164][ T4214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.317048][ T4214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.323981][ T9746] loop4: detected capacity change from 0 to 512 [ 407.397655][ T9746] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 407.534644][ T3960] Bluetooth: hci4: command 0x041b tx timeout [ 407.599541][ T4214] bond0 (unregistering): Released all slaves [ 407.639139][ T9746] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 407.769654][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.782720][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.810901][ T9532] device veth0_vlan entered promiscuous mode [ 407.829456][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.847990][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.890528][ T9690] device bridge_slave_1 entered promiscuous mode [ 407.912869][ T9726] device bond0 entered promiscuous mode [ 407.918450][ T9726] device bond_slave_0 entered promiscuous mode [ 407.941551][ T9726] device bond_slave_1 entered promiscuous mode [ 407.961285][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.969838][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.987864][ T9726] device bond0 left promiscuous mode [ 407.997534][ T9726] device bond_slave_0 left promiscuous mode [ 408.036387][ T9726] device bond_slave_1 left promiscuous mode [ 408.078471][ T9748] Invalid ELF header magic: != ELF [ 408.088492][ T9690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.138407][ T9690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.163473][ T9532] device veth1_vlan entered promiscuous mode [ 408.305962][ T9690] team0: Port device team_slave_0 added [ 408.336152][ T8907] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 408.361431][ T9690] team0: Port device team_slave_1 added [ 408.415117][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.435942][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.484599][ T9532] device veth0_macvtap entered promiscuous mode [ 408.529472][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.544232][ T9760] loop0: detected capacity change from 0 to 128 [ 408.549284][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.608496][ T9690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.618407][ T9760] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 408.638230][ T9532] device veth1_macvtap entered promiscuous mode [ 408.650219][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.662053][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.750618][ T9690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.763621][ T9760] overlayfs: upper fs needs to support d_type. [ 408.788936][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.799104][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.801328][ T8907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.810060][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.835604][ T9760] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 408.849418][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.865534][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.881727][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.892704][ T9760] overlayfs: failed to set xattr on upper [ 408.897771][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.898614][ T9760] overlayfs: ...falling back to index=off,metacopy=off. [ 408.925996][ T8907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.939292][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.945422][ T8907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 408.959137][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.984188][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.985679][ T8907] usb 5-1: SerialNumber: syz [ 409.002949][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.026085][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.047732][ T8907] usb 5-1: bad CDC descriptors [ 409.049298][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.107986][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.126482][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.155937][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.174162][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.194470][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.215431][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.236127][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.290773][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.299433][ T9760] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 409.314404][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.354510][ T3615] usb 5-1: USB disconnect, device number 21 [ 409.373886][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.397551][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.420708][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.444838][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.459402][ T8721] UDF-fs: error (device loop0): udf_read_inode: (ino 114) failed !bh [ 409.481181][ T8721] UDF-fs: error (device loop0): udf_read_inode: (ino 114) failed !bh [ 409.531175][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.540065][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.583100][ T9532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.601046][ T3958] Bluetooth: hci4: command 0x040f tx timeout [ 409.601997][ T9532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.628579][ T9532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.645307][ T9532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.738588][ T9690] device hsr_slave_0 entered promiscuous mode [ 409.756427][ T9690] device hsr_slave_1 entered promiscuous mode [ 409.781397][ T9690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.788973][ T9690] Cannot create hsr debugfs directory [ 409.996539][ T9765] loop4: detected capacity change from 0 to 256 [ 410.019333][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.061164][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.097173][ T9765] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 410.119622][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.141015][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.167705][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.211181][ T9690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.267569][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.363223][ T9690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.499364][ T9690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.538150][ T9773] loop3: detected capacity change from 0 to 8 [ 410.588983][ T9690] bond0: (slave netdevsim0): Releasing backup interface [ 410.669434][ T9690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.793994][ T9773] unable to read inode lookup table [ 411.217898][ T9690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.229084][ T9784] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 411.359869][ T9690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.403054][ T9690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.433243][ T9690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.505648][ T9789] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 411.526664][ T9774] chnl_net:caif_netlink_parms(): no params data found [ 411.646549][ T9792] loop3: detected capacity change from 0 to 512 [ 411.680912][ T3958] Bluetooth: hci4: command 0x0419 tx timeout [ 411.714779][ T9792] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 411.776092][ T9792] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1512: inode #1: comm syz.3.1512: iget: illegal inode # [ 411.801795][ T9792] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1512: error while reading EA inode 1 err=-117 [ 411.819068][ T9792] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1512: inode #1: comm syz.3.1512: iget: illegal inode # [ 411.828157][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.845462][ T9774] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.859041][ T9792] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1512: error while reading EA inode 1 err=-117 [ 411.874217][ T9774] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.889439][ T9792] EXT4-fs (loop3): 1 orphan inode deleted [ 411.890780][ T9774] device bridge_slave_0 entered promiscuous mode [ 411.914579][ T9792] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 411.928374][ T9690] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.982821][ T9792] EXT4-fs error (device loop3): ext4_lookup:1855: inode #15: comm syz.3.1512: unexpected EA_INODE flag [ 412.009469][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 412.031540][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.043874][ T9774] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.061947][ T9774] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.100736][ T9774] device bridge_slave_1 entered promiscuous mode [ 412.130486][ T9800] sock: sock_timestamping_bind_phc: sock not bind to device [ 412.203221][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.212568][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.221430][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.228581][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.261085][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.284158][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.310456][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.317604][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.336383][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.352181][ T9774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.414407][ T9774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.427115][ T9806] loop4: detected capacity change from 0 to 128 [ 412.453522][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.482059][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.517768][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.571228][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.602481][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.687986][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.747814][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 412.791093][ T5905] Bluetooth: hci0: command 0x0409 tx timeout [ 413.384139][ T3958] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 413.407316][ T9774] team0: Port device team_slave_0 added [ 413.461951][ T9690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.510296][ T9690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.544101][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 413.557117][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 413.582934][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 413.591891][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.602181][ T9774] team0: Port device team_slave_1 added [ 413.654776][ T3958] usb 4-1: Using ep0 maxpacket: 16 [ 413.660163][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 413.705777][ T9774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.735459][ T9774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.816599][ T9774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.897660][ T9774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.911057][ T3958] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 413.927466][ T9774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.294249][ T9774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.680943][ T3958] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.690022][ T3958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 414.705680][ T3958] usb 4-1: SerialNumber: syz [ 414.742006][ T9830] loop4: detected capacity change from 0 to 512 [ 414.763440][ T3958] cdc_acm 4-1:1.0: skipping garbage [ 414.769529][ T3958] cdc_acm 4-1:1.0: invalid descriptor buffer length [ 414.776538][ T3958] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 414.783773][ T9774] device hsr_slave_0 entered promiscuous mode [ 414.784833][ T3958] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 414.797482][ T3958] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 414.815458][ T9774] device hsr_slave_1 entered promiscuous mode [ 414.824041][ T9774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.846256][ T9830] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 414.870426][ T9774] Cannot create hsr debugfs directory [ 414.879431][ T3613] Bluetooth: hci0: command 0x041b tx timeout [ 414.903333][ T9830] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1524: inode #1: comm syz.4.1524: iget: illegal inode # [ 414.917860][ T9830] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1524: error while reading EA inode 1 err=-117 [ 414.932704][ T9830] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1524: inode #1: comm syz.4.1524: iget: illegal inode # [ 414.953890][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.978980][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.991384][ T9830] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1524: error while reading EA inode 1 err=-117 [ 415.024166][ T9830] EXT4-fs (loop4): 1 orphan inode deleted [ 415.026091][ T4214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.029921][ T9830] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 415.070228][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.137879][ T9830] EXT4-fs error (device loop4): ext4_lookup:1855: inode #15: comm syz.4.1524: unexpected EA_INODE flag [ 415.191626][ T4214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.329508][ T4214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.435951][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 415.456912][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.511360][ T9834] netlink: 'syz.4.1525': attribute type 9 has an invalid length. [ 415.537220][ T5905] usb 4-1: USB disconnect, device number 18 [ 415.566400][ T4214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.627102][ T9839] loop4: detected capacity change from 0 to 128 [ 415.655001][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 415.679282][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.709818][ T9690] device veth0_vlan entered promiscuous mode [ 415.807074][ T9690] device veth1_vlan entered promiscuous mode [ 415.900724][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.908864][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.613111][ T9847] loop3: detected capacity change from 0 to 128 [ 416.733052][ T9847] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.775311][ T9847] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 416.817064][ T9690] device veth0_macvtap entered promiscuous mode [ 416.841376][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 416.850183][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 416.916914][ T9847] syz.3.1530 (pid 9847) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 416.992880][ T5907] Bluetooth: hci0: command 0x040f tx timeout [ 417.028526][ T9859] loop4: detected capacity change from 0 to 512 [ 417.090191][ T9690] device veth1_macvtap entered promiscuous mode [ 417.114271][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 417.127460][ T9859] EXT4-fs (loop4): Ignoring removed nobh option [ 417.148793][ T9859] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 417.231353][ T9859] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1533: attempt to clear invalid blocks 2 len 1 [ 417.233358][ T9847] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 417.250791][ T9859] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 417.269881][ T9859] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1533: invalid indirect mapped block 1819239214 (level 0) [ 417.285591][ T9859] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1533: invalid indirect mapped block 1819239214 (level 1) [ 417.316385][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.336500][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.357534][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.371813][ T9859] EXT4-fs (loop4): 1 truncate cleaned up [ 417.377487][ T9859] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,user_xattr,jqfmt=vfsv1,grpid,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 417.396964][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.456925][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.500127][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.551335][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.564335][ T3613] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 417.572858][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.583765][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.596170][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.606210][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.617275][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.629269][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.066349][ T3613] usb 3-1: Using ep0 maxpacket: 16 [ 418.190847][ T3613] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 418.252346][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.266475][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.278887][ T9847] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 418.291820][ T3613] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.304639][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 418.316329][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.327594][ T3613] usb 3-1: SerialNumber: syz [ 418.329697][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.345560][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.356057][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.367127][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.378034][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.381669][ T3613] cdc_acm 3-1:1.0: skipping garbage [ 418.388888][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.401069][ T3613] cdc_acm 3-1:1.0: invalid descriptor buffer length [ 418.417480][ T3613] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 418.419959][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.427122][ T3613] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 418.451008][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.451222][ T3613] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 418.472253][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.490553][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.509006][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.533181][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.554410][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 418.596111][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.634261][ T9690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.654199][ T9886] loop4: detected capacity change from 0 to 8 [ 418.659999][ T9690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.678579][ T9690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.700801][ T9690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.802487][ T9886] SQUASHFS error: zlib decompression failed, data probably corrupt [ 418.810953][ T9886] SQUASHFS error: Failed to read block 0x9b: -5 [ 418.817216][ T9886] SQUASHFS error: Unable to read metadata cache entry [99] [ 418.848791][ T9886] SQUASHFS error: Unable to read inode 0x127 [ 418.905193][ T9892] loop3: detected capacity change from 0 to 128 [ 419.079901][ T5905] Bluetooth: hci0: command 0x0419 tx timeout [ 420.404992][ T9774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.438031][ T6033] usb 3-1: USB disconnect, device number 18 [ 420.523133][ T9774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.524825][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.565206][ T9774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.573019][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.614249][ T9774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.727684][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.561612][ T4975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.676438][ T9918] overlayfs: failed to resolve './file1': -2 [ 421.701578][ T4975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.964569][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.200225][ T9927] loop1: detected capacity change from 0 to 128 [ 422.290335][ T9927] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.301104][ T9774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.307549][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.316776][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.325914][ T9927] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 422.328340][ T9774] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.512413][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 422.526651][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.566912][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.574075][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.669201][ C1] hrtimer: interrupt took 17632319 ns [ 423.736341][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.744774][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 423.753779][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.762243][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.769325][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.840500][ T9774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.940664][ T9774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.977420][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 423.999380][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.488965][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.515087][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.540275][ T9945] sock: sock_timestamping_bind_phc: sock not bind to device [ 424.573160][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 424.602773][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.612835][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.621811][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.631460][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.640131][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.660909][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.675771][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.689458][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 424.858522][ T9774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.936559][ T9774] device veth0_vlan entered promiscuous mode [ 424.956501][ T9774] device veth1_vlan entered promiscuous mode [ 425.018596][ T9774] device veth0_macvtap entered promiscuous mode [ 425.051229][ T9774] device veth1_macvtap entered promiscuous mode [ 425.101504][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.131755][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.151069][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.170093][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.197984][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.220059][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.248447][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.267051][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.296180][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.318328][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.336165][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.365504][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.383457][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.417471][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.437980][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.467435][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.486887][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.515742][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.539927][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.681980][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.695422][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.705697][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.717528][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.727411][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.737863][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.747835][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.758356][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.768190][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.816025][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.828267][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.840857][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.849983][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.863098][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.872458][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.881150][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.889414][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.898716][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.908901][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.918581][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.927531][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.936530][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.947137][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.963805][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.978892][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.988016][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.000188][ T9774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.009406][ T9774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.018339][ T9774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.027340][ T9774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.892198][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.900138][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.937397][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.962333][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1560'. [ 428.046026][ T9963] loop1: detected capacity change from 0 to 64 [ 430.774414][ T9971] loop4: detected capacity change from 0 to 128 [ 431.513994][ T9976] chnl_net:caif_netlink_parms(): no params data found [ 432.820763][ T3960] Bluetooth: hci7: command 0x0406 tx timeout [ 432.935559][ T9971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 432.961035][ T9971] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 433.211046][ T8907] Bluetooth: hci5: command 0x0409 tx timeout [ 436.233367][ T3958] Bluetooth: hci5: command 0x041b tx timeout [ 439.112528][ T3958] Bluetooth: hci5: command 0x040f tx timeout [ 445.697683][ T3630] Bluetooth: hci5: command 0x0419 tx timeout [ 445.705199][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.711477][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.952891][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.959206][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.748505][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 698.755129][ C1] rcu: 1-...!: (1 GPs behind) idle=c37/1/0x4000000000000000 softirq=42579/42590 fqs=0 [ 698.767221][ C1] (t=11787 jiffies g=52317 q=1127) [ 698.772509][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 11786 jiffies! g52317 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 698.784824][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=23486 [ 698.792696][ C1] rcu: rcu_preempt kthread starved for 11787 jiffies! g52317 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 698.804050][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 698.814004][ C1] rcu: RCU grace-period kthread stack dump: [ 698.819879][ C1] task:rcu_preempt state:I stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 698.829083][ C1] Call Trace: [ 698.832355][ C1] [ 698.835284][ C1] __schedule+0x12c4/0x45b0 [ 698.839794][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 698.846029][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 698.851925][ C1] ? __mod_timer+0xa8e/0xeb0 [ 698.856534][ C1] ? release_firmware_map_entry+0x190/0x190 [ 698.862447][ C1] ? mod_timer_pending+0x20/0x20 [ 698.867393][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 698.872767][ C1] schedule+0x11b/0x1f0 [ 698.876916][ C1] schedule_timeout+0x1b9/0x300 [ 698.881759][ C1] ? console_conditional_schedule+0x40/0x40 [ 698.887647][ C1] ? update_process_times+0x200/0x200 [ 698.893021][ C1] ? prepare_to_swait_event+0x321/0x340 [ 698.898568][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 698.903419][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 698.908609][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 698.913800][ C1] ? rcu_gp_init+0xdae/0x1140 [ 698.918479][ C1] ? rcu_gp_init+0x1140/0x1140 [ 698.923255][ C1] ? trace_hardirqs_on+0x30/0x80 [ 698.928193][ C1] rcu_gp_kthread+0xa4/0x360 [ 698.932777][ C1] ? _raw_spin_unlock+0x40/0x40 [ 698.937622][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 698.942727][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 698.948620][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 698.953645][ C1] kthread+0x3f6/0x4f0 [ 698.957791][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 698.962894][ C1] ? kthread_blkcg+0xd0/0xd0 [ 698.967482][ C1] ret_from_fork+0x1f/0x30 [ 698.971911][ C1] [ 698.974920][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 698.981230][ C1] Sending NMI from CPU 1 to CPUs 0: [ 698.986436][ C0] NMI backtrace for cpu 0 [ 698.986462][ C0] CPU: 0 PID: 3383 Comm: dhcpcd Not tainted 5.15.164-syzkaller #0 [ 698.986479][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 698.986492][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 698.986519][ C0] Code: 56 57 41 50 41 51 41 52 41 53 e8 bf 0a 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 c3 66 90 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 02 5a c3 56 0f b6 f0 e8 c5 ff ff ff 5e 5a c3 66 90 55 48 [ 698.986531][ C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00000046 [ 698.986545][ C0] RAX: 0000000000000001 RBX: 1ffffffff22cb48b RCX: 0000000000000000 [ 698.986556][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9165a450 [ 698.986566][ C0] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff22cb48b [ 698.986576][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff22cb48c [ 698.986587][ C0] R13: ffffffff9165a460 R14: ffffffff9165a458 R15: ffffffff9165a450 [ 698.986598][ C0] FS: 00007f8d6c9b5740(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 698.986611][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.986622][ C0] CR2: 00007ffc0a458e6c CR3: 000000001adaa000 CR4: 00000000003506f0 [ 698.986636][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 698.986644][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 698.986653][ C0] Call Trace: [ 698.986660][ C0] [ 698.986668][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 698.986685][ C0] ? read_lock_is_recursive+0x10/0x10 [ 698.986701][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 698.986716][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 698.986739][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 698.986755][ C0] ? nmi_handle+0xf7/0x370 [ 698.986771][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 698.986788][ C0] ? default_do_nmi+0x62/0x150 [ 698.986803][ C0] ? exc_nmi+0xa8/0x100 [ 698.986817][ C0] ? end_repeat_nmi+0x16/0x31 [ 698.986840][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 698.986857][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 698.986875][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 698.986892][ C0] [ 698.986896][ C0] [ 698.986901][ C0] do_raw_spin_unlock+0x137/0x8b0 [ 698.986920][ C0] _raw_spin_unlock_irqrestore+0x7d/0x130 [ 698.986936][ C0] ? _raw_spin_unlock+0x40/0x40 [ 698.986956][ C0] debug_deactivate+0x1b/0x1e0 [ 698.986971][ C0] __hrtimer_run_queues+0x31d/0xcf0 [ 698.986995][ C0] ? hrtimer_interrupt+0x980/0x980 [ 698.987009][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 698.987027][ C0] hrtimer_interrupt+0x392/0x980 [ 698.987053][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 698.987073][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 698.987089][ C0] [ 698.987094][ C0] [ 698.987099][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 698.987116][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 698.987132][ C0] Code: 45 31 c9 68 c7 99 59 81 e8 5c 12 09 00 48 83 c4 08 4c 89 ff e8 60 da fe ff 66 90 4c 89 ff e8 56 09 e3 08 e8 d1 47 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 698.987144][ C0] RSP: 0018:ffffc90002187438 EFLAGS: 00000286 [ 698.987156][ C0] RAX: 5c2525620018fc00 RBX: ffff88801dd23bb4 RCX: ffffffff91467f03 [ 698.987167][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: ffffffff8ad8f800 [ 698.987178][ C0] RBP: ffffc900021874b0 R08: ffffffff8186e200 R09: ffffed1017347469 [ 698.987189][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 698.987199][ C0] R13: 1ffff11017347613 R14: ffff8880b9a3b098 R15: ffff8880b9a3a340 [ 698.987213][ C0] ? trace_hardirqs_on+0x30/0x80 [ 698.987235][ C0] finish_task_switch+0x134/0x630 [ 698.987252][ C0] ? __switch_to_asm+0x34/0x60 [ 698.987275][ C0] __schedule+0x12cc/0x45b0 [ 698.987301][ C0] ? release_firmware_map_entry+0x190/0x190 [ 698.987319][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 698.987335][ C0] ? print_irqtrace_events+0x210/0x210 [ 698.987348][ C0] ? _raw_spin_lock_irqsave+0xac/0x120 [ 698.987365][ C0] schedule+0x11b/0x1f0 [ 698.987378][ C0] schedule_hrtimeout_range_clock+0x2e3/0x4a0 [ 698.987396][ C0] ? _raw_spin_unlock+0x40/0x40 [ 698.987411][ C0] ? hrtimer_nanosleep_restart+0x420/0x420 [ 698.987430][ C0] ? unix_dgram_poll+0x40c/0x640 [ 698.987448][ C0] poll_schedule_timeout+0x10c/0x150 [ 698.987469][ C0] do_sys_poll+0xd61/0x11f0 [ 698.987494][ C0] ? poll_select_finish+0x7b0/0x7b0 [ 698.987514][ C0] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 698.987533][ C0] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 698.987571][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 698.987586][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 698.987601][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 698.987616][ C0] ? _raw_spin_unlock_irq+0x2a/0x40 [ 698.987642][ C0] ? read_lock_is_recursive+0x10/0x10 [ 698.987656][ C0] ? sigprocmask+0x280/0x280 [ 698.987670][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 698.987687][ C0] __se_sys_ppoll+0x29c/0x330 [ 698.987705][ C0] ? __x64_sys_ppoll+0xc0/0xc0 [ 698.987724][ C0] ? __x64_sys_ppoll+0x1c/0xc0 [ 698.987740][ C0] do_syscall_64+0x3b/0xb0 [ 698.987753][ C0] ? clear_bhb_loop+0x15/0x70 [ 698.987769][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 698.987785][ C0] RIP: 0033:0x7f8d6ca82ad5 [ 698.987802][ C0] Code: 85 d2 74 0d 0f 10 02 48 8d 54 24 20 0f 11 44 24 20 64 8b 04 25 18 00 00 00 85 c0 75 27 41 b8 08 00 00 00 b8 0f 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 75 48 8b 15 24 73 0d 00 f7 d8 64 89 02 48 83 [ 698.987813][ C0] RSP: 002b:00007ffc0a459770 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 698.987827][ C0] RAX: ffffffffffffffda RBX: 0000558608abee20 RCX: 00007f8d6ca82ad5 [ 698.987838][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000558608ac9a80 [ 698.987847][ C0] RBP: 00007ffc0a459ac0 R08: 0000000000000008 R09: 0000000000000000 [ 698.987856][ C0] R10: 00007ffc0a459ac0 R11: 0000000000000246 R12: 0000000000000000 [ 698.987866][ C0] R13: 000055860880e610 R14: 0000000000000000 R15: 0000000000000000 [ 698.987882][ C0] [ 698.988461][ C1] Sending NMI from CPU 1 to CPUs 0: [ 699.582354][ C0] NMI backtrace for cpu 0 [ 699.582367][ C0] CPU: 0 PID: 3383 Comm: dhcpcd Not tainted 5.15.164-syzkaller #0 [ 699.582383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 699.582391][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 699.582416][ C0] Code: 1f 84 00 00 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 08 ed 68 0c 48 89 de 5b e9 c7 fc 48 00 cc cc cc cc cc cc cc <48> 8b 04 24 65 48 8b 0d 54 0e 82 7e 65 8b 15 55 0e 82 7e f7 c2 00 [ 699.582429][ C0] RSP: 0018:ffffc90000007cb8 EFLAGS: 00000086 [ 699.582442][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000002 [ 699.582452][ C0] RDX: 0000000000010002 RSI: ffff888023ae4b40 RDI: ffff8880b9a2a3d0 [ 699.582463][ C0] RBP: ffff8880b9a2a244 R08: ffffffff816f955e R09: fffffbfff1bd2986 [ 699.582474][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9a2a3d0 [ 699.582484][ C0] R13: ffff8880b9a2a3d0 R14: ffff888023ae4b40 R15: ffff888023ae4b40 [ 699.582495][ C0] FS: 00007f8d6c9b5740(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 699.582509][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.582519][ C0] CR2: 00007ffc0a458e6c CR3: 000000001adaa000 CR4: 00000000003506f0 [ 699.582533][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 699.582542][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 699.582551][ C0] Call Trace: [ 699.582558][ C0] [ 699.582565][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 699.582582][ C0] ? read_lock_is_recursive+0x10/0x10 [ 699.582599][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 699.582615][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 699.582637][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 699.582653][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 699.582668][ C0] ? nmi_handle+0xf7/0x370 [ 699.582684][ C0] ? audit_tree_destroy_watch+0x20/0x20 [ 699.582699][ C0] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 699.582715][ C0] ? default_do_nmi+0x62/0x150 [ 699.582731][ C0] ? exc_nmi+0xa8/0x100 [ 699.582745][ C0] ? end_repeat_nmi+0x16/0x31 [ 699.582764][ C0] ? enqueue_hrtimer+0x12e/0x390 [ 699.582780][ C0] ? audit_tree_destroy_watch+0x20/0x20 [ 699.582795][ C0] ? audit_tree_destroy_watch+0x20/0x20 [ 699.582812][ C0] ? audit_tree_destroy_watch+0x20/0x20 [ 699.582827][ C0] [ 699.582832][ C0] [ 699.582836][ C0] timerqueue_add+0x23/0x280 [ 699.582853][ C0] ? debug_object_activate+0x2f4/0x4e0 [ 699.582874][ C0] enqueue_hrtimer+0x1a0/0x390 [ 699.582889][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 699.582912][ C0] ? hrtimer_interrupt+0x980/0x980 [ 699.582926][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 699.582945][ C0] hrtimer_interrupt+0x392/0x980 [ 699.582969][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 699.582989][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 699.583006][ C0] [ 699.583010][ C0] [ 699.583015][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 699.583032][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 699.583048][ C0] Code: 45 31 c9 68 c7 99 59 81 e8 5c 12 09 00 48 83 c4 08 4c 89 ff e8 60 da fe ff 66 90 4c 89 ff e8 56 09 e3 08 e8 d1 47 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 699.583060][ C0] RSP: 0018:ffffc90002187438 EFLAGS: 00000286 [ 699.583072][ C0] RAX: 5c2525620018fc00 RBX: ffff88801dd23bb4 RCX: ffffffff91467f03 [ 699.583083][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: ffffffff8ad8f800 [ 699.583094][ C0] RBP: ffffc900021874b0 R08: ffffffff8186e200 R09: ffffed1017347469 [ 699.583105][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 699.583115][ C0] R13: 1ffff11017347613 R14: ffff8880b9a3b098 R15: ffff8880b9a3a340 [ 699.583129][ C0] ? trace_hardirqs_on+0x30/0x80 [ 699.583153][ C0] finish_task_switch+0x134/0x630 [ 699.583171][ C0] ? __switch_to_asm+0x34/0x60 [ 699.583188][ C0] __schedule+0x12cc/0x45b0 [ 699.583214][ C0] ? release_firmware_map_entry+0x190/0x190 [ 699.583238][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 699.583254][ C0] ? print_irqtrace_events+0x210/0x210 [ 699.583268][ C0] ? _raw_spin_lock_irqsave+0xac/0x120 [ 699.583284][ C0] schedule+0x11b/0x1f0 [ 699.583298][ C0] schedule_hrtimeout_range_clock+0x2e3/0x4a0 [ 699.583316][ C0] ? _raw_spin_unlock+0x40/0x40 [ 699.583330][ C0] ? hrtimer_nanosleep_restart+0x420/0x420 [ 699.583349][ C0] ? unix_dgram_poll+0x40c/0x640 [ 699.583368][ C0] poll_schedule_timeout+0x10c/0x150 [ 699.583389][ C0] do_sys_poll+0xd61/0x11f0 [ 699.583414][ C0] ? poll_select_finish+0x7b0/0x7b0 [ 699.583434][ C0] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 699.583453][ C0] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 699.583491][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 699.583507][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 699.583521][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 699.583537][ C0] ? _raw_spin_unlock_irq+0x2a/0x40 [ 699.583562][ C0] ? read_lock_is_recursive+0x10/0x10 [ 699.583576][ C0] ? sigprocmask+0x280/0x280 [ 699.583590][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 699.583607][ C0] __se_sys_ppoll+0x29c/0x330 [ 699.583625][ C0] ? __x64_sys_ppoll+0xc0/0xc0 [ 699.583645][ C0] ? __x64_sys_ppoll+0x1c/0xc0 [ 699.583661][ C0] do_syscall_64+0x3b/0xb0 [ 699.583675][ C0] ? clear_bhb_loop+0x15/0x70 [ 699.583690][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 699.583706][ C0] RIP: 0033:0x7f8d6ca82ad5 [ 699.583721][ C0] Code: 85 d2 74 0d 0f 10 02 48 8d 54 24 20 0f 11 44 24 20 64 8b 04 25 18 00 00 00 85 c0 75 27 41 b8 08 00 00 00 b8 0f 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 75 48 8b 15 24 73 0d 00 f7 d8 64 89 02 48 83 [ 699.583733][ C0] RSP: 002b:00007ffc0a459770 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 699.583747][ C0] RAX: ffffffffffffffda RBX: 0000558608abee20 RCX: 00007f8d6ca82ad5 [ 699.583758][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000558608ac9a80 [ 699.583767][ C0] RBP: 00007ffc0a459ac0 R08: 0000000000000008 R09: 0000000000000000 [ 699.583776][ C0] R10: 00007ffc0a459ac0 R11: 0000000000000246 R12: 0000000000000000 [ 699.583785][ C0] R13: 000055860880e610 R14: 0000000000000000 R15: 0000000000000000 [ 699.583802][ C0] [ 699.584347][ C1] NMI backtrace for cpu 1 [ 700.184029][ C1] CPU: 1 PID: 1075 Comm: kworker/1:2 Not tainted 5.15.164-syzkaller #0 [ 700.192262][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 700.202315][ C1] Workqueue: events_power_efficient gc_worker [ 700.208397][ C1] Call Trace: [ 700.211672][ C1] [ 700.214508][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 700.219185][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 700.224810][ C1] ? panic+0x860/0x860 [ 700.228885][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 700.233910][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 700.240057][ C1] ? init_x2apic_ldr+0x10/0x10 [ 700.244815][ C1] ? try_to_wake_up+0x844/0x1300 [ 700.249753][ C1] ? irq_work_queue+0xcd/0x150 [ 700.254512][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 700.260579][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 700.266558][ C1] rcu_dump_cpu_stacks+0x223/0x390 [ 700.271678][ C1] print_cpu_stall+0x320/0x600 [ 700.276445][ C1] rcu_sched_clock_irq+0x8d9/0x1150 [ 700.281645][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 700.286492][ C1] ? hrtimer_run_queues+0x163/0x450 [ 700.291689][ C1] ? account_process_tick+0x232/0x3a0 [ 700.297060][ C1] update_process_times+0x196/0x200 [ 700.302256][ C1] tick_sched_timer+0x386/0x550 [ 700.307110][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 700.312648][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 700.317855][ C1] ? hrtimer_interrupt+0x980/0x980 [ 700.322957][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 700.329027][ C1] hrtimer_interrupt+0x392/0x980 [ 700.333982][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 700.339959][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 700.345591][ C1] [ 700.348600][ C1] [ 700.351523][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 700.357500][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x1dc/0x220 [ 700.364346][ C1] Code: f8 4d 85 ed 75 16 e8 b3 c0 f0 f8 eb 15 e8 ac c0 f0 f8 e8 b7 6c a3 01 4d 85 ed 74 ea e8 9d c0 f0 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 700.383944][ C1] RSP: 0018:ffffc90004bd7a40 EFLAGS: 00000293 [ 700.390010][ C1] RAX: ffffffff888fa0c3 RBX: 0000000000000000 RCX: ffff88801befbb80 [ 700.397971][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.405933][ C1] RBP: ffffc90004bd7af0 R08: ffffffff888fa099 R09: fffffbfff1f8e02b [ 700.413896][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 700.421856][ C1] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff9200097af48 [ 700.429825][ C1] ? seqcount_lockdep_reader_access+0x1a9/0x220 [ 700.436069][ C1] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 700.442316][ C1] ? nf_conntrack_hash_check_insert+0x750/0x750 [ 700.448570][ C1] gc_worker+0x30f/0x14b0 [ 700.452909][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 700.458888][ C1] ? init_conntrack+0x1740/0x1740 [ 700.463995][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 700.469198][ C1] process_one_work+0x8a1/0x10c0 [ 700.474168][ C1] ? worker_detach_from_pool+0x260/0x260 [ 700.479813][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 700.485354][ C1] ? kthread_data+0x4e/0xc0 [ 700.489851][ C1] ? wq_worker_running+0x97/0x170 [ 700.494872][ C1] worker_thread+0xaca/0x1280 [ 700.499567][ C1] kthread+0x3f6/0x4f0 [ 700.503631][ C1] ? rcu_lock_release+0x20/0x20 [ 700.508476][ C1] ? kthread_blkcg+0xd0/0xd0 [ 700.513062][ C1] ret_from_fork+0x1f/0x30 [ 700.517486][ C1]