last executing test programs: 34.33551085s ago: executing program 4 (id=67): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x0, 0x3a, 0x0, 0x6}, 0x28) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 34.189563235s ago: executing program 4 (id=69): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 34.029774971s ago: executing program 4 (id=70): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) 33.809446612s ago: executing program 4 (id=73): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "bb85a4", 0x0, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000d00)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[], 0x1, 0x1de, &(0x7f0000000d40)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaUJG3jpCPp923yk3Nv7r1hmGSTk7e3P+zvfhy9/37zW3Q6SbR2YieOktiOVvxxEADAOjkqivhRFBtN7wMAuDjV5//YnCE/F82f/uLQqXNrAMCKvHr95tmjLOu9TNNOxOFB3s/75WNZf/I0691Px7Ynsw7zvH/luP6grKfT9atxLSK2Ius9nFnfjHt3x/O//q49fp6dqLdjd/XHBwAAAAAAAAAAAAAAAAAAAACARnTTYzP7+3S78+pl+qs/0In+PRtxS1dhAAAAAAAAAAAAAAAAAAAAOJPRp8/77waDveEktCNi+pnlQnFj7hKzQhoR/77oeUMrVr5EtMr34ULPVUdI/o9tnDNE1XViwZg79VzhL66fNiaWe+XNU6+WrcUHrCNM7hHtBu5LAAAAAAAAAAAAAAAAAABwGVW/9U2Go6Z3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNKf//f7A3XCZ8iYgzDK6WSho+KgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGvsVwAAAP//rS4drg==") syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x47]}}]}) 33.440761609s ago: executing program 4 (id=78): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x0, 0x4}}, 0x50) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) 32.010206601s ago: executing program 4 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0x32feb97c}]}) 31.943843668s ago: executing program 32 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0x32feb97c}]}) 28.408892608s ago: executing program 2 (id=106): r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1, 0x0, 0x0, 0x10}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) close_range(r0, 0xffffffffffffffff, 0x0) 25.88215847s ago: executing program 2 (id=121): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r1, 0x8, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe48) close_range(r0, 0xffffffffffffffff, 0x0) 25.664106801s ago: executing program 2 (id=122): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @aes128, 0x1, '\x00', @auto="8ac943e09e65a26034b7d34f0f8b59fe"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 24.850778362s ago: executing program 2 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0xc, 0x20000, {r0}}, 0x20) 24.406881906s ago: executing program 2 (id=129): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103", @ANYBLOB="6809efea31dad5f929af285c005229d10c44dded14df8410c3ca83b00ad3aa7a5db8d27a6bb2c82c9a9ed01424fc3cc6eeadeda5dbdc43cf266510a2276a5771ae45a9acafd713bf0bf3e3d7ace8f81141e2e8fe4502d6cd00f859037390c3232fdb09a12e83696ee514f85708dd03741cf75c54c2be54e5be858dbcfd4b"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.692739417s ago: executing program 2 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents64(r0, 0x0, 0x0) 23.423066464s ago: executing program 33 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents64(r0, 0x0, 0x0) 4.035988689s ago: executing program 1 (id=299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 3.82781223s ago: executing program 1 (id=302): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/53, 0x35) 3.302549932s ago: executing program 1 (id=305): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x40, 0xe, 0x2, "a287"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x20, 0x0, 0xf, "2ce46fdb45d768399e1a87af3de9ec"}, 0x0, 0x0, 0x0, 0x0}) 2.408420931s ago: executing program 3 (id=313): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) 2.288083523s ago: executing program 6 (id=315): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 2.21774759s ago: executing program 3 (id=316): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mlockall(0x7) 2.11374073s ago: executing program 6 (id=318): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', r2, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xc, 0x0}, @local}}}}) 1.952333476s ago: executing program 6 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @local, @void, {@x25={0x805, {0x0, 0xb3, 0x1f}}}}}, 0x15) 1.752834766s ago: executing program 6 (id=323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xffffffffffffffff, 0x100000}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.707423171s ago: executing program 3 (id=324): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) sendto(r0, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x7, 0xfffe}, 0x8) 1.573870404s ago: executing program 0 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x9, 0x4, 0x9, 0xff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x18) 1.499398871s ago: executing program 0 (id=326): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0xe4, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}}, 0x24040084) 1.425913599s ago: executing program 0 (id=327): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x20, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x71, 0x8000000, r2, 0x0) fanotify_mark(r1, 0x12, 0x8000001, r0, 0x0) 1.306488151s ago: executing program 0 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 1.224761509s ago: executing program 0 (id=330): r0 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0x5}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0xf, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) 1.067921814s ago: executing program 5 (id=332): r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f0000002480)=[{}], 0x1) semop(r0, &(0x7f0000000300)=[{0x1, 0xc600}, {0x2, 0x800, 0x800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 1.01311153s ago: executing program 0 (id=333): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, 'a#\bY'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 871.178894ms ago: executing program 1 (id=334): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000130700000000000000000a01010000000000680e000000000000ac1e010100000000000000fffe00d0a16c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000410000000232000000fe8000000000000000000000000000bb07000000000000000000000000000000fffffeffffffffff0000000000000000040000000000000007000000000200000500000000000000fdffffffffffffff61f4ffffffffffff0000000000000000000000000000000003000000000000000300000002000000810000002abd7000000000000a"], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 863.065675ms ago: executing program 6 (id=335): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea648c7453) 823.024249ms ago: executing program 5 (id=336): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x2000, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 790.437892ms ago: executing program 3 (id=337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000340)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000340), 0x0}, 0x20) 667.334074ms ago: executing program 3 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="2200000000000000ff81bcc2a6"]) 666.007594ms ago: executing program 5 (id=339): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1}, 0x3ff}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 437.876997ms ago: executing program 3 (id=340): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 383.220702ms ago: executing program 5 (id=341): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 356.516985ms ago: executing program 6 (id=342): syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10001) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="1e93"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 242.259897ms ago: executing program 1 (id=343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x505, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 186.635642ms ago: executing program 5 (id=344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 125.061578ms ago: executing program 5 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r2, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 1 (id=346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x117a, &(0x7f0000002300)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. [ 48.854715][ T4172] cgroup: Unknown subsys name 'net' [ 49.004776][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.455442][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.857051][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.905466][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.971759][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.057459][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.075592][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.084894][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.094264][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.131843][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.142820][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.151758][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.197058][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.204801][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.214854][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.233473][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.240789][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.252451][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.268507][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.279189][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.288398][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.296718][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.310730][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.321476][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.332265][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.343003][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.389092][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.407736][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.456719][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.468588][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.478369][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.490929][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.501037][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.535510][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.544363][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.553817][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.563709][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.576249][ T4184] team0: Port device team_slave_0 added [ 52.587173][ T4183] team0: Port device team_slave_0 added [ 52.608374][ T4184] team0: Port device team_slave_1 added [ 52.623771][ T4183] team0: Port device team_slave_1 added [ 52.668047][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.680317][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.691878][ T4193] team0: Port device team_slave_0 added [ 52.710429][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.717833][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.751695][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.765037][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.773440][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.781876][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.804516][ T4193] team0: Port device team_slave_1 added [ 52.814382][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.823458][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.859569][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.879090][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.889973][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.900499][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.910610][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.919946][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.956943][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.996248][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.003574][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.035379][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.055286][ T4191] team0: Port device team_slave_0 added [ 53.071324][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.078507][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.108874][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.132801][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.147546][ T4191] team0: Port device team_slave_1 added [ 53.171616][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.180098][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.210771][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.224928][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.250648][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.258678][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.285779][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.322670][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.329864][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.357569][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.392427][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.401627][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.413687][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.422575][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.430726][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.442719][ T4184] Cannot create hsr debugfs directory [ 53.467852][ T4189] team0: Port device team_slave_0 added [ 53.495069][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.503458][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.510492][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.518113][ T4193] Cannot create hsr debugfs directory [ 53.537277][ T4189] team0: Port device team_slave_1 added [ 53.558711][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.568316][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.576098][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.580561][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 53.586352][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 53.598621][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 53.600395][ T4191] Cannot create hsr debugfs directory [ 53.615359][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.615914][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 53.657111][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.665408][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.694387][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.737560][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.746814][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.785288][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.889130][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.898183][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.908282][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.918391][ T4189] Cannot create hsr debugfs directory [ 54.141251][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.155940][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.166006][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.176427][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.234887][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.247651][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.265280][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.288494][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.360494][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.379376][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.402162][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.416216][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.481485][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.518337][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.533678][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.554359][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.565911][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.601893][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.627010][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.638162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.652070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.669163][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.695637][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.714336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.725011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.735296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.745936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.757696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.768362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.780596][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.790571][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.805233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.818278][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.833875][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.846719][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.860476][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.882711][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.899791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.910713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.921725][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.932175][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.945046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.958293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.969192][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.976971][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.988421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.002050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.016004][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.023779][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.034189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.047537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.058476][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.067696][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.085783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.099826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.127767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.138648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.152284][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.161753][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.174569][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.212220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.224959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.235157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.251078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.262939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.273679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.283739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.295187][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.307934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.317899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.328627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.338477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.350028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.362355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.373551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.402492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.412023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.423039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.434571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.447231][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.456994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.466644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.479581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.489399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.498661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.510794][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.536456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.551434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.563084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.572383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.582815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.593672][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.612135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.628306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.655745][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.659887][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 55.684343][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 55.713960][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.728656][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 55.748884][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 55.755992][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 55.763103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.793177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.836918][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.851885][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.868937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.878442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.897277][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.914578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.947279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.955631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.965936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.975862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.986511][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.994333][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.003660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.013085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.022141][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.029959][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.039884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.049227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.062639][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.073415][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.108565][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.135868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.149001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.165383][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.176574][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.188760][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.205290][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.215328][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.248553][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.269962][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.277958][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.293015][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.303860][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.314349][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.326956][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.338064][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.350031][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.359683][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.371625][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.379319][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.389298][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.414003][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.440810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.460821][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.474537][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.491484][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.519980][ T4184] device veth0_vlan entered promiscuous mode [ 56.527299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.537304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.546913][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.554117][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.564844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.574387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.583489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.592299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.604470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.634374][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.649002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.666783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.678501][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.692740][ T4184] device veth1_vlan entered promiscuous mode [ 56.703177][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.711993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.721119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.744638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.755673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.765281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.774790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.784301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.793760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.804378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.814235][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.826388][ T4183] device veth0_vlan entered promiscuous mode [ 56.837428][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.851604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.860480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.869015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.901088][ T4183] device veth1_vlan entered promiscuous mode [ 56.911010][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.923612][ T4184] device veth0_macvtap entered promiscuous mode [ 56.934890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.958040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.967721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.979226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.987992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.010540][ T4184] device veth1_macvtap entered promiscuous mode [ 57.057008][ T4183] device veth0_macvtap entered promiscuous mode [ 57.067422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.077196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.089417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.103137][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.128588][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.137699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.148816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.162701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.174974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.194047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.205052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.215728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.227405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.236314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.251462][ T4183] device veth1_macvtap entered promiscuous mode [ 57.267955][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.279444][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.290439][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.300714][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.320139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.331824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.348813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.361014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.373003][ T4193] device veth0_vlan entered promiscuous mode [ 57.391195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.403948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.432667][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.448040][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.462886][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.479189][ T4191] device veth0_vlan entered promiscuous mode [ 57.486607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.497857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.508685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.518711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.531581][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.552904][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.568249][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.587260][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.600255][ T4193] device veth1_vlan entered promiscuous mode [ 57.615745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.627462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.641238][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.652984][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.664876][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.674640][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.708109][ T4191] device veth1_vlan entered promiscuous mode [ 57.745273][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 57.753652][ T4193] device veth0_macvtap entered promiscuous mode [ 57.766256][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 57.776412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.787735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.798927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.809298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.819993][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 57.821020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.834970][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 57.843268][ T4193] device veth1_macvtap entered promiscuous mode [ 57.846350][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 57.876686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.887994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.902779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.931707][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.947444][ T4189] device veth0_vlan entered promiscuous mode [ 57.957627][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.962038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.977512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.992316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.002318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.014831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.040322][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.054176][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.066411][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.078291][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.090971][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.110824][ T4191] device veth0_macvtap entered promiscuous mode [ 58.119139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.128237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.137572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.146795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.161916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.181857][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.197669][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.200916][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.209235][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.233335][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.249216][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.262567][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.278705][ T4191] device veth1_macvtap entered promiscuous mode [ 58.295857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.305868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.316209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.328853][ T4189] device veth1_vlan entered promiscuous mode [ 58.346647][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.357132][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.368988][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.378806][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.407082][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.418565][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.432212][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.444245][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.456407][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.470782][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.484681][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.507496][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.519902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.529844][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.532822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.548758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.561689][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.575242][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.585419][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.596834][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.608765][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.622680][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.636765][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.670303][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.687087][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.701719][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.712161][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.723356][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.733204][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.766662][ T4189] device veth0_macvtap entered promiscuous mode [ 58.775832][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.792980][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.806876][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.820463][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.831071][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.842608][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.869662][ T4189] device veth1_macvtap entered promiscuous mode [ 58.960731][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.984539][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.996249][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.014506][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.037166][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.053593][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.076893][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.094226][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.108015][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.128848][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.154153][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.189159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.240989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.295999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.320679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.362894][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.420548][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.459256][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.507131][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.582094][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.603207][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.620850][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.638586][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.658227][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.703359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.732549][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.768944][ T4291] loop3: detected capacity change from 0 to 131072 [ 59.783516][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.803719][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.820172][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 59.829641][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.837668][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 59.844532][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.858337][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.858924][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.895632][ T4291] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 59.903501][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 59.906815][ T4291] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.923508][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 59.926253][ T4291] F2FS-fs (loop3): invalid crc value [ 59.950073][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 59.967701][ T1549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.981610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.006470][ T4291] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.048159][ T1549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.051464][ T4291] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 60.063805][ T4291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 60.093982][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.197983][ T1549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.235427][ T1549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.299067][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.357800][ T1549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.397174][ T1549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.425358][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.462294][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.481363][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.514375][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.706933][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.732965][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.959862][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 61.081441][ T7] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.092440][ T7] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 61.103742][ T7] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.119368][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 61.140857][ T4330] Zero length message leads to an empty skb [ 61.393920][ T4337] loop1: detected capacity change from 0 to 512 [ 61.441124][ T4332] loop3: detected capacity change from 0 to 32768 [ 61.459394][ T4337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.473459][ T4337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.493940][ T4337] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.16: inode has both inline data and extents flags [ 61.512794][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 61.526024][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.534210][ T4337] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.16: couldn't read orphan inode 15 (err -117) [ 61.534737][ T7] usb 5-1: Product: syz [ 61.552619][ T7] usb 5-1: Manufacturer: syz [ 61.559451][ T7] usb 5-1: SerialNumber: syz [ 61.575490][ T4337] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.584898][ T4332] XFS (loop3): Mounting V5 Filesystem [ 61.648832][ T4332] XFS (loop3): Ending clean mount [ 61.669100][ T4332] XFS (loop3): Quotacheck needed: Please wait. [ 61.760145][ T4332] XFS (loop3): Quotacheck: Done. [ 61.845403][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 61.870436][ T4184] XFS (loop3): Unmounting Filesystem [ 62.001815][ T4353] loop1: detected capacity change from 0 to 128 [ 62.029285][ T4354] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 62.093428][ T4353] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 62.116504][ T4353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.372230][ T26] audit: type=1800 audit(1763139723.184:2): pid=4353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=104 res=0 errno=0 [ 62.414045][ T4359] usblp0:failed reading printer status (-32) [ 62.455323][ T21] usb 5-1: USB disconnect, device number 2 [ 62.512024][ T21] usblp0: removed [ 62.844120][ T4361] loop0: detected capacity change from 0 to 32768 [ 62.888131][ T4361] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.20 (4361) [ 62.949869][ T4361] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 62.978123][ T4361] BTRFS info (device loop0): using free space tree [ 63.010631][ T4361] BTRFS info (device loop0): has skinny extents [ 63.064203][ T4369] loop3: detected capacity change from 0 to 32768 [ 63.151170][ T4369] ======================================================= [ 63.151170][ T4369] WARNING: The mand mount option has been deprecated and [ 63.151170][ T4369] and is ignored by this kernel. Remove the mand [ 63.151170][ T4369] option from the mount to silence this warning. [ 63.151170][ T4369] ======================================================= [ 63.324595][ T4369] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 63.443003][ T4369] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 63.465345][ T4391] loop4: detected capacity change from 0 to 4096 [ 63.487804][ T9] (kworker/u4:0,9,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 63.531210][ T4391] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 63.564250][ T4391] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 63.617640][ T4391] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 63.626740][ T4361] BTRFS info (device loop0): enabling ssd optimizations [ 63.638264][ T4408] loop2: detected capacity change from 0 to 128 [ 63.653406][ T4391] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 63.673122][ T4369] (syz.3.18,4369,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 63.726571][ T4391] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 63.815950][ T4408] EXT4-fs (loop2): Test dummy encryption mode enabled [ 63.850865][ T4408] EXT4-fs (loop2): Test dummy encryption mode enabled [ 63.858822][ T4408] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 63.876831][ T4391] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 63.890579][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.939194][ T4408] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 63.944231][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 63.967363][ T4408] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.999675][ T4391] ntfs: volume version 0.0. [ 64.048136][ T4391] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 64.064831][ T4391] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 64.067756][ T4408] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 64.099858][ T4391] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 64.223230][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 64.373912][ T1111] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.392187][ T1111] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.416469][ T4408] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.429795][ T4418] netlink: 'syz.3.31': attribute type 6 has an invalid length. [ 64.430086][ T4408] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.449735][ T4408] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 64.468659][ T4408] EXT4-fs (loop2): re-mounted. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,. Quota mode: none. [ 64.550079][ T1111] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 64.564974][ T1111] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 64.619732][ T1111] usb 2-1: Product: syz [ 64.629529][ T1111] usb 2-1: Manufacturer: syz [ 64.710856][ T1111] hub 2-1:4.0: USB hub found [ 64.733690][ T4430] loop0: detected capacity change from 0 to 1024 [ 64.829824][ T4430] EXT4-fs (loop0): inline encryption not supported [ 64.837229][ T4430] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.976163][ T4430] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,errors=remount-ro,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 64.979778][ T1111] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 65.042744][ T1111] usb 2-1: USB disconnect, device number 2 [ 65.169383][ T4441] loop2: detected capacity change from 0 to 1024 [ 65.466316][ T4427] loop3: detected capacity change from 0 to 32768 [ 65.891058][ T4455] loop2: detected capacity change from 0 to 1024 [ 66.007027][ T4460] loop4: detected capacity change from 0 to 64 [ 66.075780][ T4460] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 66.107298][ T4455] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 66.130690][ T4455] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.183568][ T4455] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.45: bg 0: block 112: padding at end of block bitmap is not set [ 66.215836][ T4455] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.45: Freeing blocks not in datazone - block = 0, count = 16 [ 66.367140][ T155] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 66.440171][ T155] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.440171][ T155] [ 66.517560][ T155] EXT4-fs (loop2): Total free blocks count 0 [ 66.525333][ T155] EXT4-fs (loop2): Free/Dirty block details [ 66.542218][ T155] EXT4-fs (loop2): free_blocks=16 [ 66.547975][ T155] EXT4-fs (loop2): dirty_blocks=16 [ 66.584369][ T155] EXT4-fs (loop2): Block reservation details [ 66.603562][ T155] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 66.899734][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.036323][ T4497] device syzkaller1 entered promiscuous mode [ 67.139562][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 67.158430][ T4503] loop2: detected capacity change from 0 to 512 [ 67.217196][ T4507] loop9: detected capacity change from 0 to 7 [ 67.233322][ T4507] Dev loop9: unable to read RDB block 7 [ 67.249744][ T4503] EXT4-fs (loop2): Ignoring removed nobh option [ 67.266178][ T7] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 67.270360][ T4503] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 67.286145][ T7] usb 4-1: config 135 has an invalid descriptor of length 123, skipping remainder of the config [ 67.318580][ T4507] loop9: AHDI p1 p2 [ 67.338817][ T4507] loop9: partition table partially beyond EOD, truncated [ 67.347947][ T7] usb 4-1: config 135 has no interface number 0 [ 67.372579][ T4503] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.66: iget: bad i_size value: 38620345925642 [ 67.384691][ T7] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 67.407401][ T4503] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.66: couldn't read orphan inode 15 (err -117) [ 67.416074][ T4507] loop9: p1 start 1853095936 is beyond EOD, [ 67.423318][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 67.451246][ T4507] truncated [ 67.490440][ T4503] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1447: inode #12: block 7: comm syz.2.66: path /12/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 67.498139][ T7] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 67.595864][ T7] usb 4-1: config 135 interface 230 has no altsetting 0 [ 67.759682][ T7] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 67.780797][ T4516] loop4: detected capacity change from 0 to 256 [ 67.793024][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.833407][ T7] usb 4-1: Product: syz [ 67.837995][ T7] usb 4-1: Manufacturer: syz [ 67.845756][ T7] usb 4-1: SerialNumber: syz [ 67.949939][ T4526] loop2: detected capacity change from 0 to 256 [ 68.071482][ T4193] FAT-fs (loop4): error, invalid access to FAT (entry 0x000004ff) [ 68.078287][ T4526] FAT-fs (loop2): Directory bread(block 64) failed [ 68.125815][ T4193] FAT-fs (loop4): Filesystem has been set read-only [ 68.133536][ T4526] FAT-fs (loop2): Directory bread(block 65) failed [ 68.154064][ T7] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 68.184576][ T7] usb 4-1: No valid video chain found. [ 68.206125][ T4526] FAT-fs (loop2): Directory bread(block 66) failed [ 68.229693][ T4526] FAT-fs (loop2): Directory bread(block 67) failed [ 68.245161][ T7] usb 4-1: USB disconnect, device number 2 [ 68.308148][ T4526] FAT-fs (loop2): Directory bread(block 68) failed [ 68.338810][ T4526] FAT-fs (loop2): Directory bread(block 69) failed [ 68.348984][ T4526] FAT-fs (loop2): Directory bread(block 70) failed [ 68.359454][ T4526] FAT-fs (loop2): Directory bread(block 71) failed [ 68.368704][ T4526] FAT-fs (loop2): Directory bread(block 72) failed [ 68.391953][ T4526] FAT-fs (loop2): Directory bread(block 73) failed [ 68.697804][ T4532] sctp: [Deprecated]: syz.1.80 (pid 4532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.697804][ T4532] Use struct sctp_sack_info instead [ 68.962552][ T4534] capability: warning: `syz.3.81' uses deprecated v2 capabilities in a way that may be insecure [ 69.101058][ T4541] loop3: detected capacity change from 0 to 1024 [ 69.143332][ T4541] EXT4-fs (loop3): Ignoring removed nobh option [ 69.151834][ T4541] EXT4-fs (loop3): Ignoring removed bh option [ 69.158432][ T4541] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.188648][ T4541] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 69.295951][ T4541] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.83: Allocating blocks 449-513 which overlap fs metadata [ 69.321019][ T4540] EXT4-fs (loop3): pa ffff8880740a77e0: logic 16, phys. 273, len 15 [ 69.329634][ T4413] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.330336][ T4540] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 4 [ 69.390575][ T145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.427660][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.567725][ T145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.585805][ T4549] binder: 4548:4549 ioctl c018620c 200000000000 returned -22 [ 69.651722][ T145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.699762][ T4413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.719564][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 69.725963][ T4413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.770417][ T4413] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.806480][ T4413] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.837561][ T4413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.873934][ T7] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 69.884511][ T4413] usb 3-1: config 0 descriptor?? [ 69.890001][ T7] usb 1-1: config 0 has no interface number 0 [ 69.898046][ T145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.079793][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 70.099373][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.114826][ T7] usb 1-1: Product: syz [ 70.117499][ T4556] loop3: detected capacity change from 0 to 32768 [ 70.119120][ T7] usb 1-1: Manufacturer: syz [ 70.131538][ T7] usb 1-1: SerialNumber: syz [ 70.145569][ T7] usb 1-1: config 0 descriptor?? [ 70.185965][ T4556] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.90 (4556) [ 70.204509][ T7] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 70.239020][ T4557] chnl_net:caif_netlink_parms(): no params data found [ 70.297318][ T4556] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 70.322021][ T4556] BTRFS info (device loop3): setting nodatacow, compression disabled [ 70.347137][ T4556] BTRFS info (device loop3): force clearing of disk cache [ 70.365963][ T4556] BTRFS info (device loop3): enabling ssd optimizations [ 70.385410][ T4556] BTRFS info (device loop3): using spread ssd allocation scheme [ 70.393922][ T4556] BTRFS info (device loop3): turning off barriers [ 70.409388][ T4413] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 70.417762][ T4556] BTRFS info (device loop3): disabling free space tree [ 70.421703][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 70.428285][ T4556] BTRFS info (device loop3): not using ssd optimizations [ 70.455849][ T4556] BTRFS info (device loop3): not using spread ssd allocation scheme [ 70.466573][ T4413] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 70.469919][ T4556] BTRFS info (device loop3): has skinny extents [ 70.512290][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 70.675463][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.698347][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.718108][ T4557] device bridge_slave_0 entered promiscuous mode [ 70.728488][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.740523][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.745132][ T7] usb 3-1: USB disconnect, device number 2 [ 70.751445][ T4557] device bridge_slave_1 entered promiscuous mode [ 70.913759][ T4556] BTRFS info (device loop3): clearing free space tree [ 70.923630][ T4226] usb 1-1: USB disconnect, device number 2 [ 70.932372][ T4556] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.932824][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 70.945540][ T4556] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.981807][ T4226] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 71.001820][ T4557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.006784][ T4226] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 71.050094][ T4226] quatech2 1-1:0.51: device disconnected [ 71.127224][ T4557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.232439][ T4557] team0: Port device team_slave_0 added [ 71.242889][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.272340][ T4557] team0: Port device team_slave_1 added [ 71.347256][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.355018][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.398185][ T4557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.426770][ T4557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.471302][ T4557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.520221][ T4557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.541523][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 71.578041][ T4557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.636514][ T4557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.707325][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 71.716434][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.740103][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.756564][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.768840][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.797594][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.816218][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.994458][ T4637] Bluetooth: hci4: command 0x0409 tx timeout [ 72.342530][ T4557] device hsr_slave_0 entered promiscuous mode [ 72.358349][ T4557] device hsr_slave_1 entered promiscuous mode [ 72.367050][ T4557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.378279][ T4557] Cannot create hsr debugfs directory [ 72.577208][ T4657] syz.3.102 uses obsolete (PF_INET,SOCK_PACKET) [ 72.714496][ T4663] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 72.733141][ T145] device hsr_slave_0 left promiscuous mode [ 72.782107][ T145] device hsr_slave_1 left promiscuous mode [ 72.783683][ T4414] kernel write not supported for file /sg0 (pid: 4414 comm: kworker/1:10) [ 72.802551][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.822740][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.861122][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.888116][ T4670] loop2: detected capacity change from 0 to 256 [ 72.900466][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.921449][ T4414] usb 2-1: USB disconnect, device number 3 [ 72.939014][ T145] device bridge_slave_1 left promiscuous mode [ 72.961620][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.981414][ T4670] exfat: Bad value for 'fmask' [ 73.053083][ T145] device bridge_slave_0 left promiscuous mode [ 73.062577][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.155522][ T145] device veth1_macvtap left promiscuous mode [ 73.169460][ T145] device veth0_macvtap left promiscuous mode [ 73.207830][ T145] device veth1_vlan left promiscuous mode [ 73.225024][ T145] device veth0_vlan left promiscuous mode [ 73.330252][ T7] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 73.375119][ T4682] fido_id[4682]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 73.389737][ T4413] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 73.789895][ T4413] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 73.873504][ T4413] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.905448][ T4691] loop0: detected capacity change from 0 to 32768 [ 73.974188][ T145] team0 (unregistering): Port device team_slave_1 removed [ 73.979108][ T4691] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 74.010468][ T4691] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.061551][ T4414] Bluetooth: hci4: command 0x041b tx timeout [ 74.073243][ T145] team0 (unregistering): Port device team_slave_0 removed [ 74.079857][ T4413] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.121270][ T4691] (syz.0.111,4691,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 74.133978][ T4691] (syz.0.111,4691,0):ocfs2_search_chain:1761 ERROR: status = -12 [ 74.144170][ T4691] (syz.0.111,4691,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 74.146208][ T4413] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 74.154604][ T4691] (syz.0.111,4691,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 74.154733][ T4691] (syz.0.111,4691,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 74.154758][ T4691] (syz.0.111,4691,0):__ocfs2_claim_clusters:2355 ERROR: status = -12 [ 74.154778][ T4691] (syz.0.111,4691,0):__ocfs2_claim_clusters:2363 ERROR: status = -12 [ 74.154798][ T4691] (syz.0.111,4691,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 74.154823][ T4691] (syz.0.111,4691,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 74.154843][ T4691] (syz.0.111,4691,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 74.231280][ T4691] (syz.0.111,4691,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 74.243574][ T4691] (syz.0.111,4691,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 74.252865][ T4691] (syz.0.111,4691,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 74.263486][ T4691] (syz.0.111,4691,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 74.273291][ T4691] (syz.0.111,4691,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 74.283489][ T4413] usb 3-1: Product: syz [ 74.285126][ T4691] (syz.0.111,4691,0):ocfs2_mknod:357 ERROR: status = -12 [ 74.300188][ T4691] (syz.0.111,4691,0):ocfs2_mknod:502 ERROR: status = -12 [ 74.309817][ T4691] (syz.0.111,4691,0):ocfs2_mkdir:659 ERROR: status = -12 [ 74.318986][ T4694] (syz.0.111,4694,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 74.333278][ T4694] (syz.0.111,4694,0):ocfs2_search_chain:1761 ERROR: status = -12 [ 74.341435][ T4694] (syz.0.111,4694,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 74.341737][ T4413] usb 3-1: Manufacturer: syz [ 74.351223][ T4694] (syz.0.111,4694,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 74.367367][ T4694] (syz.0.111,4694,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 74.376508][ T4694] (syz.0.111,4694,0):__ocfs2_claim_clusters:2355 ERROR: status = -12 [ 74.389007][ T4694] (syz.0.111,4694,0):__ocfs2_claim_clusters:2363 ERROR: status = -12 [ 74.397515][ T4694] (syz.0.111,4694,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 74.403579][ T4413] usb 3-1: SerialNumber: syz [ 74.435796][ T4413] usb 3-1: config 0 descriptor?? [ 74.458138][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.468673][ T4694] (syz.0.111,4694,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 74.468707][ T4694] (syz.0.111,4694,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 74.494866][ T4413] usb 3-1: selecting invalid altsetting 0 [ 74.561943][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.616599][ T4694] (syz.0.111,4694,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 74.665998][ T4694] (syz.0.111,4694,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 74.681374][ T4694] (syz.0.111,4694,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 74.707648][ T4694] (syz.0.111,4694,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 74.751011][ T4694] (syz.0.111,4694,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 74.783792][ T4675] usb 3-1: selecting invalid altsetting 0 [ 74.799614][ T4694] (syz.0.111,4694,0):ocfs2_mknod:357 ERROR: status = -12 [ 74.800307][ T4675] usb 3-1: 0:0: usb_set_interface failed (-22) [ 74.808093][ T4694] (syz.0.111,4694,0):ocfs2_mknod:502 ERROR: status = -12 [ 74.823252][ T4675] usb 3-1: selecting invalid altsetting 0 [ 74.837524][ T4675] usb 3-1: 0:0: usb_set_interface failed (-22) [ 74.842383][ T4694] (syz.0.111,4694,0):ocfs2_mkdir:659 ERROR: status = -12 [ 74.856098][ T4700] usb 3-1: selecting invalid altsetting 0 [ 74.861974][ T145] bond0 (unregistering): Released all slaves [ 74.867049][ T4700] usb 3-1: 0:0: usb_set_interface failed (-22) [ 74.885756][ T4700] usb 3-1: selecting invalid altsetting 0 [ 74.893339][ T4700] usb 3-1: 0:0: usb_set_interface failed (-22) [ 74.922151][ T4700] usb 3-1: selecting invalid altsetting 0 [ 74.930894][ T4700] usb 3-1: 0:0: usb_set_interface failed (-22) [ 74.939727][ T4638] usb 3-1: USB disconnect, device number 3 [ 74.956710][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 75.413891][ T4557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.434877][ T4557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.467470][ T4557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.482288][ T4557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.720239][ T4422] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.867689][ T4557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.907864][ T4732] loop2: detected capacity change from 0 to 512 [ 75.981474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.994529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.004646][ T4422] usb 1-1: Using ep0 maxpacket: 8 [ 76.051922][ T4732] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.105945][ T4557] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.139779][ T4414] Bluetooth: hci4: command 0x040f tx timeout [ 76.150544][ T4422] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 76.209391][ T4732] EXT4-fs (loop2): 1 truncate cleaned up [ 76.231094][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.241518][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.258013][ T1549] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.265997][ T1549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.266342][ T4422] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.277418][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.307288][ T4732] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,bsddf,noblock_validity,,errors=continue. Quota mode: none. [ 76.308561][ T4744] process 'syz.1.125' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 76.352352][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.371504][ T1549] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.371879][ T4422] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.380902][ T1549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.400928][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.451678][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.465085][ T1108] cfg80211: failed to load regulatory.db [ 76.486594][ T4422] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.524420][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.529996][ T4422] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.568029][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.609251][ T4422] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.621233][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.659566][ T4422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.678541][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.724676][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.742322][ T4723] loop3: detected capacity change from 0 to 32768 [ 76.765650][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.814492][ T4557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.891227][ T4723] (syz.3.120,4723,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.895178][ T4557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.942665][ T4723] (syz.3.120,4723,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.959692][ T4422] usb 1-1: usb_control_msg returned -32 [ 76.968829][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.984625][ T4422] usbtmc 1-1:16.0: can't read capabilities [ 77.017100][ T4723] JBD2: Ignoring recovery information on journal [ 77.057653][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.118703][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.210235][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.272793][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.300019][ T4723] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 77.555421][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.575870][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.621208][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.895166][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.928987][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.986660][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 78.045448][ T4557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.219656][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 78.317771][ T4785] binder: 4784:4785 ioctl c0306201 200000000640 returned -14 [ 78.561196][ T1111] usb 1-1: USB disconnect, device number 3 [ 78.761567][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.820253][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.912621][ T4811] block nbd3: shutting down sockets [ 78.951343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.015530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.077256][ T4557] device veth0_vlan entered promiscuous mode [ 79.160480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.195935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.245356][ T4557] device veth1_vlan entered promiscuous mode [ 79.291085][ T4823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 79.362777][ T4829] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 79.406703][ T4557] device veth0_macvtap entered promiscuous mode [ 79.425315][ T4829] netlink: 228 bytes leftover after parsing attributes in process `syz.3.150'. [ 79.456906][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.500331][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.526804][ T4833] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 79.540150][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.552552][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.565437][ T4557] device veth1_macvtap entered promiscuous mode [ 79.597810][ T4833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.615482][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.637384][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.688013][ T4795] chnl_net:caif_netlink_parms(): no params data found [ 79.709800][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.747226][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.787131][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.798336][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.809201][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.826730][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.847472][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.867578][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.901230][ T4557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.942107][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.977582][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.015008][ T4851] sctp: [Deprecated]: syz.1.157 (pid 4851) Use of int in max_burst socket option deprecated. [ 80.015008][ T4851] Use struct sctp_assoc_value instead [ 80.125675][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.169524][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.199204][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.246201][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.304431][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.366097][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.403222][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.436050][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.457038][ T4876] loop0: detected capacity change from 0 to 1024 [ 80.483771][ T4557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.515982][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.541723][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.594078][ T4557] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.609743][ T4876] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.624515][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 80.657508][ T4557] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.679806][ T4557] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.700209][ T4557] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.741520][ T4876] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,min_batch_time=0x0000000000000001,usrjquota=,,errors=continue. Quota mode: none. [ 80.795195][ T4876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.047993][ T4878] loop1: detected capacity change from 0 to 32768 [ 81.049293][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.192832][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.212254][ T4878] JFS: block map error in dbBackSplit [ 81.217036][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.219709][ T4878] ERROR: (device loop1): dbDiscardAG: -EIO [ 81.219709][ T4878] [ 81.232730][ T4795] device bridge_slave_0 entered promiscuous mode [ 81.286034][ T4878] ERROR: (device loop1): remounting filesystem as read-only [ 81.301521][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.320989][ T4878] attempt to access beyond end of device [ 81.320989][ T4878] loop1: rw=2051, want=2637824, limit=32768 [ 81.340231][ T4878] JFS: sb_issue_discard(ffff888059f50000, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 81.353304][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.354197][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.378451][ T4878] blkno = 50400, nblocks = 400 [ 81.384434][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.388871][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.397444][ T4878] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 81.397444][ T4878] [ 81.413892][ T4795] device bridge_slave_1 entered promiscuous mode [ 81.461833][ T278] blkno = 5002c, nblocks = 4 [ 81.472269][ T278] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 81.472269][ T278] [ 81.485826][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.496068][ T4183] JFS: metapage_get_blocks failed [ 81.496143][ T4183] JFS: metapage_get_blocks failed [ 81.496168][ T4183] JFS: metapage_get_blocks failed [ 81.542301][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.559651][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.580928][ T4795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.661423][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.700613][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.721580][ T4795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.759926][ T4183] JFS: metapage_get_blocks failed [ 81.794895][ T145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.922059][ T4899] loop3: detected capacity change from 0 to 8192 [ 81.972161][ T4795] team0: Port device team_slave_0 added [ 81.993609][ T4899] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 82.019520][ T4899] REISERFS (device loop3): using ordered data mode [ 82.041041][ T4899] reiserfs: using flush barriers [ 82.089611][ T4899] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.143983][ T4899] REISERFS (device loop3): checking transaction log (loop3) [ 82.208209][ T4911] input: syz1 as /devices/virtual/input/input6 [ 82.282619][ T4795] team0: Port device team_slave_1 added [ 82.413346][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.478553][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.586977][ T4899] REISERFS (device loop3): Using tea hash to sort names [ 82.612129][ T4795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.629655][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.629672][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.629694][ T4795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.665856][ T4899] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 82.720212][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 82.806320][ T4795] device hsr_slave_0 entered promiscuous mode [ 82.807166][ T4795] device hsr_slave_1 entered promiscuous mode [ 82.807662][ T4795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.807771][ T4795] Cannot create hsr debugfs directory [ 83.282407][ T4795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.360096][ T4795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.423761][ T4795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.520702][ T4795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.973508][ T145] device hsr_slave_0 left promiscuous mode [ 83.990278][ T145] device hsr_slave_1 left promiscuous mode [ 84.034677][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.058042][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.076609][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.093886][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.113872][ T145] device bridge_slave_1 left promiscuous mode [ 84.131741][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.156430][ T145] device bridge_slave_0 left promiscuous mode [ 84.172552][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.223132][ T145] device veth1_macvtap left promiscuous mode [ 84.259628][ T145] device veth0_macvtap left promiscuous mode [ 84.289683][ T145] device veth1_vlan left promiscuous mode [ 84.298024][ T4951] loop5: detected capacity change from 0 to 32768 [ 84.319762][ T145] device veth0_vlan left promiscuous mode [ 84.359438][ T4951] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.182 (4951) [ 84.472105][ T4946] loop1: detected capacity change from 0 to 40427 [ 84.477368][ T4951] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 84.524040][ T4946] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 84.557658][ T4951] BTRFS info (device loop5): using free space tree [ 84.558436][ T4946] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.596428][ T4951] BTRFS info (device loop5): has skinny extents [ 84.636273][ T4946] F2FS-fs (loop1): invalid crc value [ 84.678158][ T4946] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.790754][ T4631] Bluetooth: hci3: command 0x040f tx timeout [ 84.888285][ T4946] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.900288][ T4946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.928342][ T4951] BTRFS info (device loop5): enabling ssd optimizations [ 85.105408][ T4946] attempt to access beyond end of device [ 85.105408][ T4946] loop1: rw=10241, want=45232, limit=40427 [ 85.180440][ T145] team0 (unregistering): Port device team_slave_1 removed [ 85.219452][ T145] team0 (unregistering): Port device team_slave_0 removed [ 85.239055][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.263547][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.405854][ T4348] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop5 scanned by udevd (4348) [ 85.439692][ T4631] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.622356][ T145] bond0 (unregistering): Released all slaves [ 85.739821][ T4631] usb 1-1: Using ep0 maxpacket: 16 [ 85.770330][ T4795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.838156][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.876406][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.900184][ T4631] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 85.931117][ T4631] usb 1-1: config 0 has no interface number 0 [ 85.934163][ T4795] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.970933][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.982718][ T4631] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.990747][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.080201][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.089175][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.177086][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.206579][ T4631] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 86.289782][ T4631] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 86.352453][ T4631] usb 1-1: Product: syz [ 86.357442][ T4631] usb 1-1: SerialNumber: syz [ 86.398385][ T4795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.488563][ T4631] usb 1-1: config 0 descriptor?? [ 86.508227][ T4795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.581823][ T4631] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 86.590479][ T4638] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.659298][ T4631] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input7 [ 86.902712][ T4639] Bluetooth: hci3: command 0x0419 tx timeout [ 86.952213][ T5025] loop1: detected capacity change from 0 to 131072 [ 86.964575][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.977361][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.000561][ T1108] usb 1-1: USB disconnect, device number 4 [ 87.009548][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.011444][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.017490][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 87.028991][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.047488][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.066713][ T4638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.088698][ T4638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.097952][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.134417][ T5025] F2FS-fs (loop1): invalid crc value [ 87.148004][ T4638] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.166204][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.175499][ T5025] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.185623][ T4638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.220199][ T5025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.238616][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.251072][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.261522][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.274358][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.294497][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.295280][ T4638] usb 4-1: config 0 descriptor?? [ 87.327666][ T5025] F2FS-fs (loop1): inode (7) has corrupted xattr [ 87.356841][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.402966][ T1108] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 87.410774][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.445768][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.530773][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.560497][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.832975][ T4638] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 87.863879][ T4638] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 87.951460][ T4638] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 88.036832][ T4795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.090283][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.127365][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.292453][ T4274] usb 4-1: USB disconnect, device number 3 [ 88.529935][ T5089] syz.5.210 sent an empty control message without MSG_MORE. [ 88.737688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.772927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.927494][ T5101] loop3: detected capacity change from 0 to 512 [ 88.978602][ T4795] device veth0_vlan entered promiscuous mode [ 89.017153][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.028907][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.082164][ T4795] device veth1_vlan entered promiscuous mode [ 89.140644][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.170351][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.244957][ T5101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.340560][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.560141][ T5101] EXT4-fs (loop3): 1 orphan inode deleted [ 89.566180][ T5101] EXT4-fs (loop3): 1 truncate cleaned up [ 89.640449][ T4795] device veth0_macvtap entered promiscuous mode [ 89.717032][ T5101] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 89.774094][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.800383][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.845876][ T5105] loop5: detected capacity change from 0 to 131072 [ 89.884469][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.965783][ T4795] device veth1_macvtap entered promiscuous mode [ 89.991739][ T5105] F2FS-fs (loop5): Found nat_bits in checkpoint [ 90.069534][ T5105] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 90.092240][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.171378][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 90.171401][ T26] audit: type=1800 audit(1763139750.984:3): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.214" name="file2" dev="loop5" ino=8 res=0 errno=0 [ 90.204945][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.283680][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.409612][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.469548][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.497679][ T5138] loop1: detected capacity change from 0 to 1024 [ 90.522943][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.574512][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.630816][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.661783][ T5138] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.664706][ T4795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.833129][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.885566][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.937878][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.029844][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.072150][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.114927][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.162978][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.197671][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.248082][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.298027][ T4795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.339308][ T4795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.352808][ T4795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.413281][ T4795] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.453250][ T4795] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.496299][ T4795] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.529962][ T4795] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.560107][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.586627][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.608054][ T5177] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 91.639958][ T5177] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 91.681569][ T5179] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 91.710464][ T5179] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 91.930735][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.977693][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.064439][ T1549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.093359][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.171166][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.234183][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.432496][ T5202] device syzkaller1 entered promiscuous mode [ 92.833262][ T5225] loop3: detected capacity change from 0 to 128 [ 92.868839][ T5229] device batadv_slave_1 entered promiscuous mode [ 92.896166][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.248'. [ 92.924011][ T5229] device batadv_slave_1 left promiscuous mode [ 93.395672][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 93.700400][ T5259] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.721812][ T5261] loop3: detected capacity change from 0 to 128 [ 93.952847][ T5261] attempt to access beyond end of device [ 93.952847][ T5261] loop3: rw=2049, want=250, limit=128 [ 94.331909][ T5286] loop0: detected capacity change from 0 to 2048 [ 94.443990][ T5286] EXT4-fs (loop0): Ignoring removed bh option [ 94.495574][ T5286] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 94.572670][ T5266] loop6: detected capacity change from 0 to 32768 [ 94.666385][ T5266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.261 (5266) [ 94.678364][ T5286] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.731874][ T5286] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 94.763314][ T5299] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.765423][ T5266] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 94.871113][ T5286] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.871113][ T5286] [ 94.919553][ T5266] BTRFS info (device loop6): turning on sync discard [ 94.968207][ T5299] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.968207][ T5299] [ 94.985878][ T5266] BTRFS info (device loop6): setting nodatacow, compression disabled [ 95.035711][ T5286] EXT4-fs (loop0): Total free blocks count 0 [ 95.058195][ T5315] tipc: Started in network mode [ 95.086441][ T5286] EXT4-fs (loop0): Free/Dirty block details [ 95.100254][ T5266] BTRFS info (device loop6): turning off barriers [ 95.132021][ T5315] tipc: Node identity 7f000001, cluster identity 4711 [ 95.141201][ T5266] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 95.244745][ T5299] EXT4-fs (loop0): Total free blocks count 0 [ 95.264735][ T5315] tipc: Enabled bearer , priority 10 [ 95.300118][ T5311] loop5: detected capacity change from 0 to 32768 [ 95.313116][ T5266] BTRFS info (device loop6): trying to use backup root at mount time [ 95.350168][ T5286] EXT4-fs (loop0): free_blocks=2415919104 [ 95.371974][ T5266] BTRFS info (device loop6): metadata ratio 32769 [ 95.379197][ T5266] BTRFS info (device loop6): max_inline at 0 [ 95.382087][ T5299] EXT4-fs (loop0): Free/Dirty block details [ 95.452251][ T5311] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 95.456168][ T5266] BTRFS info (device loop6): using free space tree [ 95.463203][ T5311] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 95.476716][ T5286] EXT4-fs (loop0): dirty_blocks=32 [ 95.488571][ T5323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.543169][ T5323] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 95.558269][ T5266] BTRFS info (device loop6): has skinny extents [ 95.570865][ T5311] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 95.621425][ T5311] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 95.844938][ T5339] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 96.019396][ T4749] BTRFS warning (device loop6): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 96.136795][ T5266] BTRFS warning (device loop6): failed to read root (objectid=2): -5 [ 96.193782][ T1549] BTRFS warning (device loop6): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 96.243773][ T5357] vivid-001: disconnect [ 96.271014][ T5266] BTRFS warning (device loop6): couldn't read tree root [ 96.272215][ T5356] vivid-001: reconnect [ 96.292515][ T5266] BTRFS error (device loop6): parent transid verify failed on 5255168 wanted 5 found 7 [ 96.420010][ T5266] BTRFS warning (device loop6): couldn't read tree root [ 96.422075][ T4274] tipc: Node number set to 2130706433 [ 96.516539][ T5266] BTRFS info (device loop6): enabling ssd optimizations [ 96.545495][ T5266] BTRFS info (device loop6): clearing free space tree [ 96.609813][ T5266] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.672283][ T5266] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.906990][ T5266] BTRFS info (device loop6): creating free space tree [ 97.002352][ T5266] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.124378][ T5266] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.218558][ T5404] nftables ruleset with unbound set [ 97.382569][ T5409] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.511358][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.701644][ T5450] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 98.831710][ T5457] input: syz1 as /devices/virtual/input/input10 [ 98.970338][ T1108] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 98.994151][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.051319][ T1108] usb 2-1: config 0 descriptor?? [ 99.111156][ T1108] cp210x 2-1:0.0: cp210x converter detected [ 99.415370][ T26] audit: type=1326 audit(1763139760.224:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.5.317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf27b8a6c9 code=0x0 [ 99.429374][ T5477] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 99.531045][ T1108] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 99.847205][ T1108] usb 2-1: cp210x converter now attached to ttyUSB0 [ 100.069126][ T4632] usb 2-1: USB disconnect, device number 4 [ 100.089182][ T4632] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 100.127863][ T4632] cp210x 2-1:0.0: device disconnected [ 100.297718][ T26] audit: type=1326 audit(1763139761.104:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf27b8a6c9 code=0x7ffc0000 [ 100.410628][ T26] audit: type=1326 audit(1763139761.104:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf27b8a6c9 code=0x7ffc0000 [ 100.436974][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.473976][ T26] audit: type=1326 audit(1763139761.104:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7faf27b8a6c9 code=0x7ffc0000 [ 100.501951][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.512342][ T26] audit: type=1326 audit(1763139761.104:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf27b8a6c9 code=0x7ffc0000 [ 100.538368][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.547994][ T26] audit: type=1326 audit(1763139761.104:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf27b8a6c9 code=0x7ffc0000 [ 100.780158][ T4416] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.136192][ T5570] loop3: detected capacity change from 0 to 512 [ 101.149889][ T4416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.197213][ T5573] device netdevsim0 entered promiscuous mode [ 101.199719][ T4416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.210844][ T5573] device macsec2 entered promiscuous mode [ 101.240328][ T5573] device netdevsim0 left promiscuous mode [ 101.331376][ T5570] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 101.353526][ T4416] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 101.364779][ T5570] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.367079][ T4416] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 101.390077][ T4416] usb 1-1: Manufacturer: syz [ 101.399027][ T4416] usb 1-1: config 0 descriptor?? [ 101.418203][ T5584] tipc: Started in network mode [ 101.427244][ T5584] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.435959][ T5584] tipc: Enabled bearer , priority 10 [ 101.498723][ T5570] [ 101.503180][ T5570] ====================================================== [ 101.511123][ T5570] WARNING: possible circular locking dependency detected [ 101.520797][ T5570] syzkaller #0 Not tainted [ 101.525220][ T5570] ------------------------------------------------------ [ 101.533885][ T5570] syz.3.340/5570 is trying to acquire lock: [ 101.541060][ T5570] ffff8880742ee0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 101.552012][ T5570] [ 101.552012][ T5570] but task is already holding lock: [ 101.563312][ T5570] ffff8880604d8278 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 101.574576][ T5570] [ 101.574576][ T5570] which lock already depends on the new lock. [ 101.574576][ T5570] [ 101.588341][ T5570] [ 101.588341][ T5570] the existing dependency chain (in reverse order) is: [ 101.598755][ T5570] [ 101.598755][ T5570] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 101.610574][ T5570] down_write+0x38/0x60 [ 101.616214][ T5570] ext4_truncate+0x96d/0x10d0 [ 101.622218][ T5570] ext4_setattr+0xffe/0x19e0 [ 101.629448][ T5570] notify_change+0xbcd/0xee0 [ 101.635379][ T5570] do_truncate+0x197/0x220 [ 101.641955][ T5570] do_sys_ftruncate+0x31b/0x3d0 [ 101.650259][ T5570] do_syscall_64+0x4c/0xa0 [ 101.658254][ T5570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.666472][ T5570] [ 101.666472][ T5570] -> #4 (jbd2_handle){++++}-{0:0}: [ 101.677799][ T5570] start_this_handle+0x1338/0x15a0 [ 101.686077][ T5570] jbd2__journal_start+0x2b7/0x5a0 [ 101.692344][ T5570] jbd2_journal_start+0x26/0x30 [ 101.698738][ T5570] ocfs2_start_trans+0x374/0x6c0 [ 101.705967][ T5570] ocfs2_mknod+0xe2f/0x22b0 [ 101.711466][ T5570] ocfs2_mkdir+0x192/0x410 [ 101.717850][ T5570] vfs_mkdir+0x387/0x570 [ 101.722814][ T5570] do_mkdirat+0x1d7/0x5a0 [ 101.729277][ T5570] __x64_sys_mkdirat+0x85/0x90 [ 101.735451][ T5570] do_syscall_64+0x4c/0xa0 [ 101.743625][ T5570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.751533][ T5570] [ 101.751533][ T5570] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 101.760894][ T5570] down_read+0x44/0x2e0 [ 101.766730][ T5570] ocfs2_start_trans+0x368/0x6c0 [ 101.773637][ T5570] ocfs2_mknod+0xe2f/0x22b0 [ 101.780851][ T5570] ocfs2_mkdir+0x192/0x410 [ 101.786824][ T5570] vfs_mkdir+0x387/0x570 [ 101.794187][ T5570] do_mkdirat+0x1d7/0x5a0 [ 101.799860][ T5570] __x64_sys_mkdirat+0x85/0x90 [ 101.805844][ T5570] do_syscall_64+0x4c/0xa0 [ 101.812793][ T5570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.820226][ T5570] [ 101.820226][ T5570] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 101.829813][ T5570] ocfs2_start_trans+0x269/0x6c0 [ 101.836079][ T5570] ocfs2_acquire_dquot+0x677/0xaf0 [ 101.842332][ T5570] dqget+0x778/0xeb0 [ 101.848863][ T5570] ocfs2_setattr+0xc93/0x1a10 [ 101.856193][ T5570] notify_change+0xbcd/0xee0 [ 101.863847][ T5570] chown_common+0x483/0x610 [ 101.872517][ T5570] ksys_fchown+0xe2/0x150 [ 101.878816][ T5570] __x64_sys_fchown+0x76/0x80 [ 101.885558][ T5570] do_syscall_64+0x4c/0xa0 [ 101.891382][ T5570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.901066][ T5570] [ 101.901066][ T5570] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 101.911143][ T5570] down_write+0x38/0x60 [ 101.916815][ T5570] ocfs2_create_local_dquot+0x194/0x1750 [ 101.924030][ T5570] ocfs2_acquire_dquot+0x7cb/0xaf0 [ 101.932049][ T5570] dqget+0x778/0xeb0 [ 101.941064][ T5570] ocfs2_setattr+0xc93/0x1a10 [ 101.947773][ T5570] notify_change+0xbcd/0xee0 [ 101.955264][ T5570] chown_common+0x483/0x610 [ 101.962806][ T5570] ksys_fchown+0xe2/0x150 [ 101.969019][ T5570] __x64_sys_fchown+0x76/0x80 [ 101.975465][ T5570] do_syscall_64+0x4c/0xa0 [ 101.983465][ T5570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.992722][ T5570] [ 101.992722][ T5570] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 102.001913][ T5570] __lock_acquire+0x2c33/0x7c60 [ 102.011003][ T5570] lock_acquire+0x197/0x3f0 [ 102.017619][ T5570] __mutex_lock_common+0x1eb/0x2390 [ 102.025821][ T5570] mutex_lock_nested+0x17/0x20 [ 102.032908][ T5570] dquot_commit+0x5a/0x410 [ 102.038817][ T5570] ext4_write_dquot+0x1f0/0x360 [ 102.046910][ T5570] mark_all_dquot_dirty+0x1e3/0x400 [ 102.054063][ T5570] __dquot_free_space+0x7ca/0xb90 [ 102.060498][ T5570] ext4_free_blocks+0x1af5/0x2480 [ 102.067565][ T5570] ext4_ext_remove_space+0x1eaa/0x43a0 [ 102.076222][ T5570] ext4_ext_truncate+0x192/0x240 [ 102.082578][ T5570] ext4_truncate+0x9f1/0x10d0 [ 102.088310][ T5570] ext4_setattr+0xffe/0x19e0 [ 102.097682][ T5570] notify_change+0xbcd/0xee0 [ 102.105246][ T5570] do_truncate+0x197/0x220 [ 102.110603][ T5570] path_openat+0x28af/0x2f30 [ 102.116549][ T5570] do_filp_open+0x1b3/0x3e0 [ 102.122851][ T5570] do_sys_openat2+0x142/0x4a0 [ 102.129515][ T5570] __x64_sys_open+0x11b/0x140 [ 102.136507][ T5570] do_syscall_64+0x4c/0xa0 [ 102.144752][ T5570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.151548][ T5570] [ 102.151548][ T5570] other info that might help us debug this: [ 102.151548][ T5570] [ 102.165699][ T5570] Chain exists of: [ 102.165699][ T5570] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 102.165699][ T5570] [ 102.180971][ T5570] Possible unsafe locking scenario: [ 102.180971][ T5570] [ 102.190188][ T5570] CPU0 CPU1 [ 102.197664][ T5570] ---- ---- [ 102.206162][ T5570] lock(&ei->i_data_sem); [ 102.211657][ T5570] lock(jbd2_handle); [ 102.218627][ T5570] lock(&ei->i_data_sem); [ 102.226362][ T5570] lock(&dquot->dq_lock); [ 102.231919][ T5570] [ 102.231919][ T5570] *** DEADLOCK *** [ 102.231919][ T5570] [ 102.242835][ T5570] 5 locks held by syz.3.340/5570: [ 102.248580][ T5570] #0: ffff888076bce460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 102.261041][ T5570] #1: ffff8880604d83f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 102.273151][ T5570] #2: ffff8880604d8590 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xdb6/0x19e0 [ 102.285819][ T5570] #3: ffff8880604d8278 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 102.299728][ T5570] #4: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 102.314732][ T5570] [ 102.314732][ T5570] stack backtrace: [ 102.328348][ T5570] CPU: 1 PID: 5570 Comm: syz.3.340 Not tainted syzkaller #0 [ 102.338262][ T5570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.349909][ T5570] Call Trace: [ 102.353911][ T5570] [ 102.358602][ T5570] dump_stack_lvl+0x168/0x230 [ 102.363550][ T5570] ? load_image+0x3b0/0x3b0 [ 102.371457][ T5570] ? show_regs_print_info+0x20/0x20 [ 102.379594][ T5570] ? print_circular_bug+0x12b/0x1a0 [ 102.387060][ T5570] check_noncircular+0x274/0x310 [ 102.392993][ T5570] ? add_chain_block+0x940/0x940 [ 102.399371][ T5570] ? lockdep_lock+0xdc/0x1e0 [ 102.407459][ T5570] ? mark_lock+0x94/0x320 [ 102.413366][ T5570] __lock_acquire+0x2c33/0x7c60 [ 102.418698][ T5570] ? verify_lock_unused+0x140/0x140 [ 102.426684][ T5570] ? mark_lock+0x94/0x320 [ 102.431997][ T5570] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 102.438674][ T5570] ? lock_chain_count+0x20/0x20 [ 102.445614][ T5570] lock_acquire+0x197/0x3f0 [ 102.450398][ T5570] ? dquot_commit+0x5a/0x410 [ 102.457208][ T5570] ? finish_task_switch+0x12f/0x640 [ 102.463242][ T5570] ? __might_sleep+0xf0/0xf0 [ 102.468805][ T5570] ? read_lock_is_recursive+0x10/0x10 [ 102.475662][ T5570] ? __schedule+0x11c3/0x4390 [ 102.483051][ T5570] ? dquot_commit+0x5a/0x410 [ 102.488541][ T5570] __mutex_lock_common+0x1eb/0x2390 [ 102.494499][ T5570] ? dquot_commit+0x5a/0x410 [ 102.499987][ T5570] ? __might_sleep+0xf0/0xf0 [ 102.505577][ T5570] ? mutex_lock_io_nested+0x60/0x60 [ 102.511928][ T5570] ? preempt_schedule+0xa7/0xb0 [ 102.517567][ T5570] mutex_lock_nested+0x17/0x20 [ 102.523023][ T5570] dquot_commit+0x5a/0x410 [ 102.528925][ T5570] ? __ext4_journal_start_sb+0x1bd/0x360 [ 102.535604][ T5570] ext4_write_dquot+0x1f0/0x360 [ 102.540667][ T5570] mark_all_dquot_dirty+0x1e3/0x400 [ 102.546330][ T5570] __dquot_free_space+0x7ca/0xb90 [ 102.553376][ T5570] ext4_free_blocks+0x1af5/0x2480 [ 102.559219][ T5570] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 102.569391][ T5570] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 102.577448][ T5570] ? ext4_inode_journal_mode+0x18f/0x460 [ 102.583838][ T5570] ext4_ext_remove_space+0x1eaa/0x43a0 [ 102.590012][ T5570] ? rcu_is_watching+0x11/0xa0 [ 102.595958][ T5570] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 102.602146][ T5570] ? ext4_es_remove_extent+0x24f/0x3e0 [ 102.608852][ T5570] ext4_ext_truncate+0x192/0x240 [ 102.614821][ T5570] ext4_truncate+0x9f1/0x10d0 [ 102.620283][ T5570] ? clear_nonspinnable+0x60/0x60 [ 102.625591][ T5570] ? preempt_count_add+0x8d/0x190 [ 102.631233][ T5570] ? up_write+0x1bb/0x420 [ 102.639101][ T5570] ? __ext4_mark_inode_dirty+0x700/0x700 [ 102.645440][ T5570] ext4_setattr+0xffe/0x19e0 [ 102.651424][ T5570] ? ext4_write_inode+0x5f0/0x5f0 [ 102.658418][ T5570] notify_change+0xbcd/0xee0 [ 102.663300][ T5570] do_truncate+0x197/0x220 [ 102.668034][ T5570] ? aa_get_task_label+0x21c/0x2c0 [ 102.673249][ T5570] ? rcu_lock_release+0x20/0x20 [ 102.679297][ T5570] ? ima_bprm_check+0x1f0/0x1f0 [ 102.684418][ T5570] ? bpf_lsm_path_truncate+0x5/0x10 [ 102.692660][ T5570] path_openat+0x28af/0x2f30 [ 102.698347][ T5570] ? do_filp_open+0x3e0/0x3e0 [ 102.703807][ T5570] do_filp_open+0x1b3/0x3e0 [ 102.710773][ T5570] ? vfs_tmpfile+0x300/0x300 [ 102.716523][ T5570] ? _raw_spin_unlock+0x24/0x40 [ 102.721740][ T5570] ? alloc_fd+0x598/0x630 [ 102.727261][ T5570] do_sys_openat2+0x142/0x4a0 [ 102.732848][ T5570] ? do_sys_open+0xe0/0xe0 [ 102.738013][ T5570] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 102.744447][ T5570] ? lock_chain_count+0x20/0x20 [ 102.750730][ T5570] ? vtime_user_exit+0x2dc/0x400 [ 102.756791][ T5570] __x64_sys_open+0x11b/0x140 [ 102.761938][ T5570] do_syscall_64+0x4c/0xa0 [ 102.766465][ T5570] ? clear_bhb_loop+0x30/0x80 [ 102.772052][ T5570] ? clear_bhb_loop+0x30/0x80 [ 102.777453][ T5570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.784840][ T5570] RIP: 0033:0x7f037a4fc6c9 [ 102.789722][ T5570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.815086][ T5570] RSP: 002b:00007f0378763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 102.826353][ T5570] RAX: ffffffffffffffda RBX: 00007f037a752fa0 RCX: 00007f037a4fc6c9 [ 102.837023][ T5570] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000200000000300 [ 102.846654][ T5570] RBP: 00007f037a57ef91 R08: 0000000000000000 R09: 0000000000000000 [ 102.855719][ T5570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.866769][ T5570] R13: 00007f037a753038 R14: 00007f037a752fa0 R15: 00007ffef96fc7b8 [ 102.877397][ T5570] [ 102.882261][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.897120][ T4197] tipc: Node number set to 2886997162 [ 103.591727][ T4416] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input11 [ 103.671222][ T4416] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input12 [ 103.687919][ T4416] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 103.823733][ T13] usb 1-1: USB disconnect, device number 5