last executing test programs: 49.399944575s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 49.13345018s ago: executing program 4 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x80, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 48.451910093s ago: executing program 4 (id=12): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010007000009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 46.966752111s ago: executing program 4 (id=20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 46.424622762s ago: executing program 32 (id=20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 8.70061882s ago: executing program 3 (id=235): r0 = io_uring_setup(0x45af, &(0x7f0000000000)={0x0, 0xb1bb, 0x40, 0x7, 0x38c}) close(r0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0xc9}) read(r1, &(0x7f0000000080)=""/179, 0xb3) 6.312586208s ago: executing program 3 (id=248): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8448}}) io_uring_enter(r1, 0x100000f, 0x63b6, 0x1, 0x0, 0x1f) 5.950311818s ago: executing program 3 (id=251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.593221128s ago: executing program 3 (id=255): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) 5.020645693s ago: executing program 0 (id=258): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) umount2(&(0x7f0000000040)='.\x00', 0x0) 4.628752188s ago: executing program 0 (id=261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x9, 0x200, 0x5}, &(0x7f0000000100)=0x10) 4.44127316s ago: executing program 3 (id=263): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.371069552s ago: executing program 0 (id=264): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000003440)=[{0x4, 0x0, 0x0, 0x0}, {0x80, 0x1, 0x0, 0x0}, {0x5, 0xd011, 0x0, 0x0}], 0x3}) 4.036678907s ago: executing program 2 (id=265): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') 3.970996718s ago: executing program 5 (id=266): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, &(0x7f0000000080)={[{@gid={'gid', 0x3d, r1}}]}) 3.802223086s ago: executing program 2 (id=268): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 3.522619193s ago: executing program 5 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.461552663s ago: executing program 2 (id=271): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x9032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x4, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0, 0xfffffffffffffd94}) 3.230577912s ago: executing program 5 (id=272): add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x16200224) keyctl$read(0xb, r0, 0x0, 0xffffffffffffffe6) 2.850171685s ago: executing program 5 (id=273): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sed\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.506270822s ago: executing program 5 (id=275): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0xc0000, 0x84) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00') 2.345162949s ago: executing program 1 (id=276): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.229163779s ago: executing program 1 (id=277): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 2.131001895s ago: executing program 0 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.086716142s ago: executing program 1 (id=279): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x39}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1.996138068s ago: executing program 3 (id=280): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.821924427s ago: executing program 0 (id=281): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x20}, {&(0x7f0000000280)="9e91d91a92dc7c8f33658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 1.801919s ago: executing program 1 (id=282): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) close(0x3) 1.588749255s ago: executing program 0 (id=283): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1.504460309s ago: executing program 2 (id=284): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 1.44122869s ago: executing program 1 (id=285): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.145861869s ago: executing program 1 (id=286): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.13909581s ago: executing program 2 (id=287): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 1.055393974s ago: executing program 2 (id=288): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect$midi(0x2, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x2, 0x20, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x30, 0x1, [{0xf, 0x7}], 0xf2}], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0xfc, 0x8, 0x6, {0x7, 0x25, 0x1, 0x3, "cdf1c5"}}}]}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=289): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0xb02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 80.610387][ T4256] cgroup: Unknown subsys name 'net' [ 80.718761][ T4256] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.492824][ T4256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.080764][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.080764][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.094652][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.103907][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.104168][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.116502][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.127885][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.129596][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.144326][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.146816][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.161240][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.168673][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.228317][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.237643][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.250560][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.259184][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.267923][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.275673][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.349259][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.361165][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.380739][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.388422][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.395921][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.405935][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.414365][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.414439][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.430280][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.431527][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.446600][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.454527][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.722142][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 84.882571][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 84.951917][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 84.978794][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.987399][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.997628][ T4270] device bridge_slave_0 entered promiscuous mode [ 85.048749][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.060482][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.068820][ T4270] device bridge_slave_1 entered promiscuous mode [ 85.112936][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 85.134977][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.143428][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.152499][ T4269] device bridge_slave_0 entered promiscuous mode [ 85.194338][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.202126][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.210414][ T4269] device bridge_slave_1 entered promiscuous mode [ 85.227735][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.241033][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.289784][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 85.301818][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.309538][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.319157][ T4279] device bridge_slave_0 entered promiscuous mode [ 85.360867][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.368425][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.378020][ T4279] device bridge_slave_1 entered promiscuous mode [ 85.387884][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.407367][ T4270] team0: Port device team_slave_0 added [ 85.433422][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.469058][ T4270] team0: Port device team_slave_1 added [ 85.510045][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.517808][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.526440][ T4282] device bridge_slave_0 entered promiscuous mode [ 85.544432][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.566936][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.574605][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.583399][ T4282] device bridge_slave_1 entered promiscuous mode [ 85.592026][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.599053][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.630828][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.647808][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.664836][ T4269] team0: Port device team_slave_0 added [ 85.689343][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.696568][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.724126][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.767083][ T4269] team0: Port device team_slave_1 added [ 85.794199][ T4279] team0: Port device team_slave_0 added [ 85.817253][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.829933][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.850658][ T4279] team0: Port device team_slave_1 added [ 85.857166][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.871005][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.879564][ T4283] device bridge_slave_0 entered promiscuous mode [ 85.920677][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.928201][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.936992][ T4283] device bridge_slave_1 entered promiscuous mode [ 85.954604][ T4282] team0: Port device team_slave_0 added [ 85.969103][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.977678][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.006412][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.022261][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.029630][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.059173][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.081035][ T4282] team0: Port device team_slave_1 added [ 86.093316][ T4270] device hsr_slave_0 entered promiscuous mode [ 86.101513][ T4270] device hsr_slave_1 entered promiscuous mode [ 86.109665][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.117263][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.144594][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.156766][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.166212][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.194172][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.238632][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.262181][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 86.268973][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 86.285511][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.320806][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.327942][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.355532][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 86.363551][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.416305][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.424867][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.452491][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.467738][ T4283] team0: Port device team_slave_0 added [ 86.478664][ T4269] device hsr_slave_0 entered promiscuous mode [ 86.486637][ T4269] device hsr_slave_1 entered promiscuous mode [ 86.494128][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.502220][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 86.508655][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 86.516191][ T4269] Cannot create hsr debugfs directory [ 86.541417][ T4283] team0: Port device team_slave_1 added [ 86.574093][ T4279] device hsr_slave_0 entered promiscuous mode [ 86.581446][ T4279] device hsr_slave_1 entered promiscuous mode [ 86.588280][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.596306][ T4279] Cannot create hsr debugfs directory [ 86.617231][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.624643][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.651083][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.713327][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.720676][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.747752][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.780297][ T4282] device hsr_slave_0 entered promiscuous mode [ 86.788377][ T4282] device hsr_slave_1 entered promiscuous mode [ 86.798003][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.805906][ T4282] Cannot create hsr debugfs directory [ 86.984067][ T4283] device hsr_slave_0 entered promiscuous mode [ 86.991244][ T4283] device hsr_slave_1 entered promiscuous mode [ 86.997967][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.006483][ T4283] Cannot create hsr debugfs directory [ 87.199069][ T4270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.226594][ T4270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.252240][ T4270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.267933][ T4270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.385267][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.425072][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.467924][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.487708][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.551001][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.609294][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.644139][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.670714][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.682059][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.753691][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.792936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.810801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.869203][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.895384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.906149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.918933][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.926472][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.936896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.947046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.955906][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.964015][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.972602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.982585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.010905][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.044495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.064943][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.078488][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.096239][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.107328][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.117901][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.164122][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.173038][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.185970][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.200092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.210763][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.235150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.250998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.274948][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.292740][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.307404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.316354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.337702][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.350690][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 88.356876][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 88.364368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.377192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.386505][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.393950][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.416156][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.423538][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 88.434913][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.451597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.459915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.470134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.482070][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.489916][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.499799][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.534633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.580750][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 88.587128][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 88.602188][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.622620][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.636340][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.646836][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.687031][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.697427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.712169][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.763732][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.773023][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.782871][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.792685][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.802919][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.812168][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.821581][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.843185][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.901801][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.912082][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.922598][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.930405][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.940978][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.949886][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.959028][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.966656][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.987665][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.009524][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.022530][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.047205][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.084100][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.094402][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.105568][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.115485][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.127924][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.137787][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.147581][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.159687][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.197434][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.219397][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.229424][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.249019][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.259975][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.278333][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.288571][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.306248][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.326045][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.377443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.392111][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.401120][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.408707][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.417569][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.426716][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.435999][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.443285][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.451459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.461985][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.471043][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.478359][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.487130][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.497636][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.506880][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.514196][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.522592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.530607][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.538322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.548301][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.557830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.577721][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.607263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.627522][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.647468][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.657997][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.668327][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.694603][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.715276][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.747471][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.771168][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.806575][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.835711][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.852863][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.901510][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.921258][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.943240][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.988105][ T4270] device veth0_vlan entered promiscuous mode [ 90.007140][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.028298][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.045327][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.057683][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.067757][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.078270][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.088066][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.111129][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.122077][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.136963][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.146541][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.161920][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.179215][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.203567][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.225606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.235461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.255819][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.284876][ T4270] device veth1_vlan entered promiscuous mode [ 90.344964][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.371658][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.379339][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.420555][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 90.426666][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 90.458469][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.500962][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 90.520821][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.560953][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.569932][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.606466][ T4270] device veth0_macvtap entered promiscuous mode [ 90.642483][ T4270] device veth1_macvtap entered promiscuous mode [ 90.657490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.666340][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 90.673095][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 90.701579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.710672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.732612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.829090][ T4269] device veth0_vlan entered promiscuous mode [ 90.868610][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.891244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.912380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.947771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.982336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.001978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.015174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.035042][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.075222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.094959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.126409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.160939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.171829][ T4269] device veth1_vlan entered promiscuous mode [ 91.199821][ T4270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.230021][ T4270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.257215][ T4270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.266302][ T4270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.286044][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.318860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.351780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.416703][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.436375][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.448650][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.509780][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.538037][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.566635][ T4269] device veth0_macvtap entered promiscuous mode [ 91.577711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.586545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.597068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.608181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.616967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.640613][ T4283] device veth0_vlan entered promiscuous mode [ 91.662477][ T4269] device veth1_macvtap entered promiscuous mode [ 91.677124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.695922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.706074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.735754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.749349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.768185][ T4283] device veth1_vlan entered promiscuous mode [ 91.814109][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.827870][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.841200][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.859931][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.873533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.882795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.891783][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.901283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.911084][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.930396][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.938690][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.948535][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.964405][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.976271][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.982602][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.997147][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.006865][ T4282] device veth0_vlan entered promiscuous mode [ 92.036363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.044985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.054450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.064292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.074292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.083834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.094274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.120723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.137930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.147830][ T4279] device veth0_vlan entered promiscuous mode [ 92.165912][ T4283] device veth0_macvtap entered promiscuous mode [ 92.177909][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.195710][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205368][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.216154][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.245200][ T4282] device veth1_vlan entered promiscuous mode [ 92.255982][ T4283] device veth1_macvtap entered promiscuous mode [ 92.283043][ T4279] device veth1_vlan entered promiscuous mode [ 92.330380][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.339833][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.351108][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.360082][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.373937][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.376607][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.390893][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.402508][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.412862][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.423656][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.427286][ T14] cfg80211: failed to load regulatory.db [ 92.452101][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.479745][ T4282] device veth0_macvtap entered promiscuous mode [ 92.497252][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.505753][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 92.512486][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 92.522184][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.532349][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.541993][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.553137][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.570659][ T4279] device veth0_macvtap entered promiscuous mode [ 92.580625][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 92.586959][ T4282] device veth1_macvtap entered promiscuous mode [ 92.605537][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.623169][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.634575][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.661250][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.694065][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.704477][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.715700][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.728046][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.738174][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.751365][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 92.757462][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 92.764541][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.774922][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.785718][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.796336][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.807169][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.819120][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.832060][ T4279] device veth1_macvtap entered promiscuous mode [ 92.858630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.869274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.882535][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.892406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.902542][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.917826][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.927790][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.937057][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.946800][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.959862][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.971879][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.987013][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.998336][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.009221][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.023158][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.047148][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.092835][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.110468][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.120843][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.133471][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.144740][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.156293][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.168125][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.179220][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.194480][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.221136][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.233308][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.243400][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.255196][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.269520][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.279973][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.289196][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.298709][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.349170][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.362953][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.386240][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.403379][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.415408][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.426825][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.437333][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.449243][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.462420][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.491075][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.499292][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.520706][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.547680][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.581445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.646889][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.659716][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.671301][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.680814][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.736502][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.763639][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.792053][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.824942][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.861213][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.874244][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.885428][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.909250][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.919194][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.965292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.022379][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.041938][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.056662][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.082000][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.090541][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 94.103631][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.118874][ T4316] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.146334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.154312][ T4316] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.185245][ T4316] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.217840][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.240998][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.247587][ T4316] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.280363][ T4316] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.297941][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.321170][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.346555][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.367106][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.409885][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.558687][ T4316] usb 4-1: GET_CAPABILITIES returned 0 [ 94.565491][ T4316] usbtmc 4-1:16.0: can't read capabilities [ 94.849547][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.873272][ T4318] usb 4-1: USB disconnect, device number 2 [ 94.930588][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.084359][ T4381] loop4: detected capacity change from 0 to 2048 [ 95.136793][ T4316] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 95.150704][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.191236][ T4316] usb 2-1: config 0 descriptor?? [ 95.219200][ T4316] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 95.252509][ T4381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.632722][ T4316] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 95.658192][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 96.241880][ T4316] gspca_cpia1: usb_control_msg 05, error -71 [ 96.248344][ T4316] cpia1 2-1:0.0: unexpected systemstate: 00 [ 96.297287][ T4316] usb 2-1: USB disconnect, device number 2 [ 96.844588][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 96.938847][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.132694][ T27] audit: type=1326 audit(1776260629.889:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.19" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16f1d9c819 code=0x0 [ 97.185832][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.352413][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.458972][ T4392] loop2: detected capacity change from 0 to 40427 [ 97.512056][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.524837][ T4392] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 97.557528][ T4392] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 97.596734][ T4392] F2FS-fs (loop2): invalid crc value [ 97.670690][ T4392] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 97.781466][ T4411] loop0: detected capacity change from 0 to 512 [ 97.887882][ T4411] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 97.970631][ T4411] System zones: 0-2, 18-18, 34-35 [ 98.014749][ T4411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.079140][ T4411] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.141778][ T4409] loop3: detected capacity change from 0 to 8192 [ 98.174771][ T4392] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 98.217238][ T4392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.228064][ T4409] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.249814][ T4409] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 98.259899][ T4409] REISERFS (device loop3): using ordered data mode [ 98.267262][ T4409] reiserfs: using flush barriers [ 98.274691][ T4409] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.318298][ T4409] REISERFS (device loop3): checking transaction log (loop3) [ 98.366073][ T4409] REISERFS (device loop3): Using r5 hash to sort names [ 98.442103][ T4409] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 98.566007][ T4392] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 98.584356][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 98.885189][ T4282] syz-executor: attempt to access beyond end of device [ 98.885189][ T4282] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.916641][ T4424] loop0: detected capacity change from 0 to 128 [ 98.969354][ T4424] ======================================================= [ 98.969354][ T4424] WARNING: The mand mount option has been deprecated and [ 98.969354][ T4424] and is ignored by this kernel. Remove the mand [ 98.969354][ T4424] option from the mount to silence this warning. [ 98.969354][ T4424] ======================================================= [ 99.221129][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.231852][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.253811][ T4424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.263196][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.300559][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.309555][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.318720][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.432946][ T4424] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.537034][ T4424] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 63 (only 1 groups) [ 99.685900][ T7] kernel write not supported for file /media4 (pid: 7 comm: kworker/0:0) [ 99.759284][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 99.923466][ T4441] loop0: detected capacity change from 0 to 512 [ 99.978856][ T4418] loop1: detected capacity change from 0 to 32768 [ 100.093136][ T4447] loop2: detected capacity change from 0 to 1764 [ 100.153208][ T4418] XFS (loop1): Mounting V5 Filesystem [ 100.364394][ T4418] XFS (loop1): Ending clean mount [ 100.591533][ T4418] XFS (loop1): User initiated shutdown received. [ 100.632326][ T4427] chnl_net:caif_netlink_parms(): no params data found [ 100.681639][ T4418] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 100.781959][ T4418] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 101.004038][ T4269] XFS (loop1): Unmounting Filesystem [ 101.382253][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 101.648841][ T11] device hsr_slave_0 left promiscuous mode [ 101.672420][ T11] device hsr_slave_1 left promiscuous mode [ 101.699519][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.730047][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.753474][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.763101][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.773363][ T11] device bridge_slave_1 left promiscuous mode [ 101.781181][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.824055][ T11] device bridge_slave_0 left promiscuous mode [ 101.831752][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.931781][ T11] device veth1_macvtap left promiscuous mode [ 101.958586][ T11] device veth0_macvtap left promiscuous mode [ 101.982815][ T11] device veth1_vlan left promiscuous mode [ 102.007891][ T11] device veth0_vlan left promiscuous mode [ 102.090688][ T4481] loop2: detected capacity change from 0 to 32768 [ 102.123609][ T4481] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.40 (4481) [ 102.243799][ T4481] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.283691][ T4481] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 102.324042][ T4481] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.368664][ T4481] BTRFS info (device loop2): use zstd compression, level 3 [ 102.396082][ T4481] BTRFS info (device loop2): using free space tree [ 102.658833][ T4481] BTRFS info (device loop2): enabling ssd optimizations [ 102.750634][ T4492] loop0: detected capacity change from 0 to 40427 [ 102.772327][ T4492] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 102.781531][ T4492] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.791780][ T4492] F2FS-fs (loop0): invalid crc value [ 102.823002][ T4492] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.883980][ T27] audit: type=1800 audit(1776260635.639:3): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.40" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 103.046699][ T4492] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 103.097607][ T4492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.344969][ T27] audit: type=1800 audit(1776260636.099:4): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 103.460489][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 103.673571][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 103.753579][ T4282] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 104.030347][ T4530] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.124401][ T4533] loop1: detected capacity change from 0 to 128 [ 104.157514][ T4533] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.194280][ T4533] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.903551][ T11] team0 (unregistering): Port device team_slave_1 removed [ 104.986249][ T11] team0 (unregistering): Port device team_slave_0 removed [ 105.040649][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.131314][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.526534][ T11] bond0 (unregistering): Released all slaves [ 105.540537][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 105.657460][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.680527][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.689026][ T4427] device bridge_slave_0 entered promiscuous mode [ 105.742103][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.749530][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.805714][ T4427] device bridge_slave_1 entered promiscuous mode [ 105.959444][ T4427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.013849][ T4427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.070493][ T4539] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.169794][ T4427] team0: Port device team_slave_0 added [ 106.197505][ T4559] loop2: detected capacity change from 0 to 4096 [ 106.204894][ T4427] team0: Port device team_slave_1 added [ 106.292759][ T4539] usb 4-1: Using ep0 maxpacket: 32 [ 106.305707][ T4539] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 106.345366][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.380730][ T4539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.389474][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.423743][ T4539] usb 4-1: config 0 descriptor?? [ 106.478788][ T4427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.517987][ T4568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'. [ 106.539866][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.560563][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.644785][ T4539] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 106.681519][ T4539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.689222][ T4427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.729555][ T4539] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 106.760666][ T4539] usb 4-1: media controller created [ 106.869783][ T4539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.906507][ T4559] EXT4-fs: Ignoring removed orlov option [ 106.926274][ T4559] EXT4-fs (loop2): Test dummy encryption mode enabled [ 106.962767][ T4559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.113200][ T4427] device hsr_slave_0 entered promiscuous mode [ 107.138122][ T27] audit: type=1800 audit(1776260639.889:5): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.55" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 107.165194][ T4559] fs-verity: sha512 using implementation "sha512-avx2" [ 107.227233][ T4427] device hsr_slave_1 entered promiscuous mode [ 107.260874][ T4427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.301501][ T4427] Cannot create hsr debugfs directory [ 107.446221][ T4539] DVB: Unable to find symbol dib7000p_attach() [ 107.464647][ T4539] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 107.477371][ T4588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.61'. [ 107.505430][ T4588] netlink: 'syz.0.61': attribute type 32 has an invalid length. [ 107.526980][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 107.533761][ T4588] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 107.620462][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 107.942806][ T4539] rc_core: IR keymap rc-dib0700-rc5 not found [ 107.954538][ T4539] Registered IR keymap rc-empty [ 107.990786][ T4539] dvb-usb: could not initialize remote control. [ 107.997421][ T4539] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 108.054408][ T4539] usb 4-1: USB disconnect, device number 3 [ 108.137758][ T4427] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.167892][ T4539] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 108.248554][ T4600] loop1: detected capacity change from 0 to 8192 [ 108.274810][ T4427] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.325924][ T4427] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.343886][ T4600] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.431104][ T4427] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.462160][ T4600] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 108.518643][ T4612] loop3: detected capacity change from 0 to 256 [ 108.537876][ T4600] REISERFS (device loop1): using ordered data mode [ 108.573084][ T4600] reiserfs: using flush barriers [ 108.620846][ T4600] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.664653][ T4612] FAT-fs (loop3): Directory bread(block 64) failed [ 108.691951][ T4612] FAT-fs (loop3): Directory bread(block 65) failed [ 108.709578][ T4600] REISERFS (device loop1): checking transaction log (loop1) [ 108.741271][ T4612] FAT-fs (loop3): Directory bread(block 66) failed [ 108.748459][ T4612] FAT-fs (loop3): Directory bread(block 67) failed [ 108.846846][ T4612] FAT-fs (loop3): Directory bread(block 68) failed [ 108.873785][ T4612] FAT-fs (loop3): Directory bread(block 69) failed [ 108.899663][ T4427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.914941][ T4612] FAT-fs (loop3): Directory bread(block 70) failed [ 108.957251][ T4612] FAT-fs (loop3): Directory bread(block 71) failed [ 108.979896][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.987941][ T4612] FAT-fs (loop3): Directory bread(block 72) failed [ 109.004892][ T4612] FAT-fs (loop3): Directory bread(block 73) failed [ 109.034097][ T4600] REISERFS (device loop1): Using tea hash to sort names [ 109.034287][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.061984][ T4600] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 109.084698][ T4427] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.143380][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.173313][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.224232][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.231491][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.259162][ T4604] loop0: detected capacity change from 0 to 40427 [ 109.299922][ T4604] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 109.321912][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.351568][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.374088][ T4604] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4 [ 109.394241][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.412779][ T27] audit: type=1800 audit(1776260642.169:6): pid=4600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.64" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 109.433211][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.441307][ T4604] F2FS-fs (loop0): invalid crc value [ 109.461589][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.469104][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.492693][ T4604] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.521425][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.588542][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.628470][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.672757][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.711977][ T4604] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 109.718716][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.761579][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.792480][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.836609][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.885565][ T4604] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.888367][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.947822][ T4427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.041843][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.074076][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.088039][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.151954][ T4604] F2FS-fs (loop0) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10 [ 110.219222][ T4604] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x107/0x640 [ 110.357323][ T4283] syz-executor: attempt to access beyond end of device [ 110.357323][ T4283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.410799][ T4539] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.554373][ T4627] process 'syz.1.72' launched './file0' with NULL argv: empty string added [ 110.612590][ T4627] Invalid argument reading file caps for ./file0 [ 110.630460][ T4539] usb 4-1: Using ep0 maxpacket: 32 [ 110.638676][ T4539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.681216][ T4539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.705473][ T4539] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 110.756072][ T4539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.797518][ T4539] usb 4-1: config 0 descriptor?? [ 111.250161][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.258048][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.289557][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.334487][ T4539] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 111.580596][ T4538] usb 4-1: USB disconnect, device number 4 [ 111.870648][ T4647] fido_id[4647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 111.972582][ T4539] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.180405][ T4539] usb 1-1: Using ep0 maxpacket: 32 [ 112.188838][ T4539] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.239725][ T4539] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.289913][ T4539] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.317458][ T4539] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 112.344466][ T4539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.365201][ T4539] usb 1-1: Product: syz [ 112.369468][ T4539] usb 1-1: Manufacturer: syz [ 112.384342][ T4539] usb 1-1: SerialNumber: syz [ 112.425124][ T4539] usb 1-1: config 0 descriptor?? [ 112.458299][ T4676] loop3: detected capacity change from 0 to 128 [ 112.525814][ T4676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.556802][ T4676] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.893382][ T4539] gs_usb 1-1:0.0: Configuring for 159 interfaces [ 113.036450][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.068813][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.153606][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.174707][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.199861][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.229024][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.271427][ T4427] device veth0_vlan entered promiscuous mode [ 113.328191][ T4427] device veth1_vlan entered promiscuous mode [ 113.421271][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.441081][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.450044][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.485437][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.499629][ T4539] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 113.512320][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 113.615864][ T4427] device veth0_macvtap entered promiscuous mode [ 113.672709][ T4427] device veth1_macvtap entered promiscuous mode [ 113.694766][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.707273][ T4539] gs_usb: probe of 1-1:0.0 failed with error -71 [ 113.734107][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.757434][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.771801][ T4539] usb 1-1: USB disconnect, device number 2 [ 113.790083][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.859335][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.896581][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.906975][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.931611][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.963855][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.997049][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.022580][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.043557][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.060777][ T4704] binder: 4703:4704 ioctl c0306201 2000000003c0 returned -14 [ 114.068482][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.091007][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.147610][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.180028][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.244143][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.283850][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.313604][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.328623][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.363897][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.383817][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.428304][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.455152][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.146834][ T4718] loop3: detected capacity change from 0 to 512 [ 115.182802][ T4718] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 115.410198][ C1] sched: RT throttling activated [ 115.415649][ T4702] netlink: 'syz.1.89': attribute type 2 has an invalid length. [ 115.472587][ T4427] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.502003][ T4712] loop2: detected capacity change from 0 to 131072 [ 115.512913][ T4712] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 115.521215][ T4712] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.534277][ T4712] F2FS-fs (loop2): invalid crc value [ 115.545379][ T4427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.555837][ T4712] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.574903][ T4427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.607402][ T4427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.667198][ T4712] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.674636][ T4712] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 115.884587][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.930339][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.953981][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.053440][ T4718] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6 [ 116.124247][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.170304][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.177996][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.342521][ T4735] overlayfs: failed to set xattr on upper [ 116.348829][ T4735] overlayfs: ...falling back to index=off,metacopy=off. [ 116.490570][ T4735] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 116.968028][ T27] audit: type=1326 audit(1776260649.719:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 117.063422][ T27] audit: type=1326 audit(1776260649.759:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 117.168621][ T27] audit: type=1326 audit(1776260649.759:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 117.409773][ T27] audit: type=1326 audit(1776260649.759:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 117.600263][ T27] audit: type=1326 audit(1776260649.759:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 117.796751][ T4759] loop0: detected capacity change from 0 to 4096 [ 117.826084][ T27] audit: type=1326 audit(1776260649.759:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 118.050330][ T27] audit: type=1326 audit(1776260649.759:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 118.205593][ T4757] loop2: detected capacity change from 0 to 131072 [ 118.215149][ T4757] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 118.223606][ T4757] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.236891][ T4757] F2FS-fs (loop2): invalid crc value [ 118.306067][ T27] audit: type=1326 audit(1776260649.759:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 118.354748][ T4757] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.395502][ T4773] loop5: detected capacity change from 0 to 7 [ 118.411481][ T4757] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.418875][ T4757] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 118.448233][ T27] audit: type=1326 audit(1776260649.759:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 118.485287][ T4773] Dev loop5: unable to read RDB block 7 [ 118.522996][ T4773] loop5: unable to read partition table [ 118.546560][ T27] audit: type=1326 audit(1776260649.759:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16f1d9c819 code=0x7ffc0000 [ 118.606491][ T4782] sctp: [Deprecated]: syz.1.114 (pid 4782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.606491][ T4782] Use struct sctp_sack_info instead [ 118.621053][ T4773] loop5: partition table beyond EOD, truncated [ 118.697393][ T4773] loop_reread_partitions: partition scan of loop5 ( @,X'@bJG'|wK)-5n=rosE|) failed (rc=-5) [ 119.008142][ T4283] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 119.085058][ T4283] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 119.180067][ T4793] loop5: detected capacity change from 0 to 512 [ 119.340695][ T4793] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 119.349800][ T4793] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.534495][ T4802] syz.0.117 uses obsolete (PF_INET,SOCK_PACKET) [ 119.693970][ T4806] loop1: detected capacity change from 0 to 1024 [ 119.765207][ T4806] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.853773][ T4800] loop3: detected capacity change from 0 to 8192 [ 119.868882][ T4806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.979981][ T4806] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.056519][ T4800] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.087407][ T4427] EXT4-fs (loop5): unmounting filesystem. [ 120.130936][ T4800] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 120.174928][ T4806] EXT4-fs (loop1): shut down requested (2) [ 120.221215][ T4800] REISERFS (device loop3): using ordered data mode [ 120.228464][ T4800] reiserfs: using flush barriers [ 120.315465][ T4800] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.420835][ T4800] REISERFS (device loop3): checking transaction log (loop3) [ 120.444247][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 120.474584][ T4800] REISERFS (device loop3): Using r5 hash to sort names [ 120.520608][ T4800] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.151664][ T4832] loop1: detected capacity change from 0 to 64 [ 121.752211][ T4844] loop3: detected capacity change from 0 to 512 [ 121.880305][ T4844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.905682][ T4849] autofs4:pid:4849:autofs_fill_super: could not open pipe file descriptor [ 121.990091][ T4844] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.053674][ T4844] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.132: corrupted xattr entries [ 122.086136][ T4844] EXT4-fs (loop3): Remounting filesystem read-only [ 122.094751][ T4844] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.112011][ T4844] EXT4-fs (loop3): 1 orphan inode deleted [ 122.118047][ T4844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.471634][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 122.541452][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 122.541734][ T4858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.942890][ T4838] loop5: detected capacity change from 0 to 40427 [ 123.057995][ T4838] F2FS-fs (loop5): Found nat_bits in checkpoint [ 123.180345][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.199496][ T4838] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 123.373830][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 123.373846][ T27] audit: type=1800 audit(1776260656.129:26): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.130" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 123.412544][ T4318] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.435105][ T4838] syz.5.130: attempt to access beyond end of device [ 123.435105][ T4838] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.471119][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.519648][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.600556][ T4318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.665015][ T4318] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.705929][ T4318] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.733201][ T4318] usb 1-1: Manufacturer: syz [ 123.759460][ T4318] usb 1-1: config 0 descriptor?? [ 123.784141][ T4427] syz-executor: attempt to access beyond end of device [ 123.784141][ T4427] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 124.193276][ T4318] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 124.237230][ T4318] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 124.310906][ T4318] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 124.495464][ T4318] usb 1-1: USB disconnect, device number 3 [ 124.818125][ T4910] fido_id[4910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.928083][ T4912] loop1: detected capacity change from 0 to 8192 [ 124.944750][ T4912] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 124.980333][ T4912] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 124.990916][ T4912] REISERFS (device loop1): using ordered data mode [ 125.000994][ T4912] reiserfs: using flush barriers [ 125.059043][ T4912] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.140448][ T4323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.169533][ T4912] REISERFS (device loop1): checking transaction log (loop1) [ 125.210134][ T4932] loop0: detected capacity change from 0 to 128 [ 125.336047][ T4932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.344970][ T4323] usb 6-1: Using ep0 maxpacket: 8 [ 125.350825][ T4932] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.359174][ T4323] usb 6-1: unable to get BOS descriptor or descriptor too short [ 125.372304][ T4323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.382841][ T4323] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.392424][ T4323] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.408786][ T4323] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.426778][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.435548][ T4323] usb 6-1: Product: syz [ 125.440047][ T4323] usb 6-1: Manufacturer: syz [ 125.445284][ T4323] usb 6-1: SerialNumber: syz [ 125.598501][ T4912] REISERFS (device loop1): Using tea hash to sort names [ 125.630965][ T4912] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 125.676206][ T4912] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 125.687015][ T4323] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 125.712756][ T4323] cdc_ncm 6-1:1.0: bind() failure [ 125.754702][ T4323] usb 6-1: USB disconnect, device number 2 [ 125.877844][ T27] audit: type=1800 audit(1776260658.629:27): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.156" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 125.949660][ T27] audit: type=1800 audit(1776260658.629:28): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.156" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 126.159404][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 126.400076][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 126.510272][ T4949] netlink: 9 bytes leftover after parsing attributes in process `syz.2.166'. [ 126.547012][ T4949] device gretap0 entered promiscuous mode [ 126.582417][ T4944] netlink: 65011 bytes leftover after parsing attributes in process `syz.0.163'. [ 126.650519][ T4949] netlink: 5 bytes leftover after parsing attributes in process `syz.2.166'. [ 126.660008][ T4949] 0{X: renamed from gretap0 [ 126.716562][ T4948] loop5: detected capacity change from 0 to 4096 [ 126.763678][ T4949] device 30{X left promiscuous mode [ 126.802467][ T4949] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 127.350718][ T4962] netlink: 'syz.1.170': attribute type 13 has an invalid length. [ 127.531742][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.603236][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.631640][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.875538][ T5002] Zero length message leads to an empty skb [ 129.036943][ T5012] Invalid ELF header magic: != ELF [ 129.235861][ T4323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.436034][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 129.457365][ T4323] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.482478][ T4323] usb 4-1: config 0 has no interface number 0 [ 129.504434][ T4323] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.567555][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.604981][ T4323] usb 4-1: Product: syz [ 129.609268][ T4323] usb 4-1: Manufacturer: syz [ 129.630858][ T4323] usb 4-1: SerialNumber: syz [ 129.671185][ T4323] usb 4-1: config 0 descriptor?? [ 129.702471][ T4323] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.255470][ C0] usb-serial (null): qt2_process_read_urb - port change to invalid port: 128 [ 130.342387][ T4323] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.382217][ T4323] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.446518][ T5051] netlink: 'syz.2.202': attribute type 10 has an invalid length. [ 130.457442][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 130.482610][ T4323] usb 4-1: USB disconnect, device number 5 [ 130.502769][ T5051] device syz_tun entered promiscuous mode [ 130.513489][ T4323] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 130.561483][ T4323] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 130.579365][ T4323] quatech2 4-1:0.51: device disconnected [ 130.594113][ T5051] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 131.195893][ T4323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.394173][ T4323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.425115][ T4323] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 131.462759][ T4323] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.504408][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.539369][ T4323] usb 2-1: Product: syz [ 131.555493][ T4323] usb 2-1: Manufacturer: syz [ 131.572026][ T4323] usb 2-1: SerialNumber: syz [ 131.607847][ T4323] cdc_mbim 2-1:1.0: skipping garbage [ 131.807981][ T5064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.954633][ T5068] loop5: detected capacity change from 0 to 32768 [ 132.067858][ T5068] XFS (loop5): Mounting V5 Filesystem [ 132.207912][ T5068] XFS (loop5): Ending clean mount [ 132.453562][ T5064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.488280][ T4323] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 132.596948][ T4323] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, e2:b7:8f:6f:51:a3 [ 132.740665][ T4427] XFS (loop5): Unmounting Filesystem [ 132.799513][ T4323] usb 2-1: USB disconnect, device number 3 [ 132.812829][ T4323] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 132.850023][ T5078] loop0: detected capacity change from 0 to 32768 [ 134.017157][ T5114] team0 (unregistering): Port device team_slave_0 removed [ 134.150082][ T5114] team0 (unregistering): Port device team_slave_1 removed [ 134.627475][ T5110] loop3: detected capacity change from 0 to 32768 [ 134.828059][ T4258] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.023001][ T4258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.085443][ T4258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.184810][ T4258] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.295498][ T5151] loop5: detected capacity change from 0 to 512 [ 135.310341][ T4258] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.367903][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.458193][ T4258] usb 1-1: config 0 descriptor?? [ 135.925342][ T5146] loop1: detected capacity change from 0 to 131072 [ 135.933803][ T4258] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 135.943515][ T5146] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 135.952458][ T5146] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 135.961953][ T5146] F2FS-fs (loop1): invalid crc value [ 135.993325][ T5146] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.038539][ T4258] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 136.048695][ T5146] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 136.056038][ T5146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 136.127308][ T4258] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 136.230325][ T4258] usb 1-1: USB disconnect, device number 4 [ 136.716318][ T5166] fido_id[5166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 136.890575][ T128] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 137.104029][ T128] usb 6-1: Using ep0 maxpacket: 16 [ 137.117642][ T128] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 137.154111][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.213428][ T128] usb 6-1: Product: syz [ 137.245238][ T128] usb 6-1: Manufacturer: syz [ 137.286742][ T128] usb 6-1: SerialNumber: syz [ 137.316587][ T128] usb 6-1: config 0 descriptor?? [ 137.337361][ T128] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 138.148019][ T5209] Illegal XDP return value 4294967274 on prog (id 26) dev syz_tun, expect packet loss! [ 138.370264][ T128] ssu100: probe of 6-1:0.0 failed with error -71 [ 138.387543][ T128] usb 6-1: USB disconnect, device number 3 [ 138.497723][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 138.512592][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.512940][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.567184][ T5234] loop5: detected capacity change from 0 to 8192 [ 139.620756][ T5234] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 139.660394][ T5234] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 139.669714][ T5234] REISERFS (device loop5): using ordered data mode [ 139.691003][ T5234] reiserfs: using flush barriers [ 139.699788][ T5234] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.716749][ T5234] REISERFS (device loop5): checking transaction log (loop5) [ 139.775584][ T5234] REISERFS (device loop5): Using r5 hash to sort names [ 139.787742][ T5219] loop1: detected capacity change from 0 to 32768 [ 139.819853][ T5234] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 139.830480][ T5247] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 139.845178][ T27] audit: type=1800 audit(1776260672.599:29): pid=5219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.254" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 140.020837][ T4318] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.060391][ T4323] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.216944][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 140.226591][ T4318] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 140.250384][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 140.257718][ T4323] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 140.261534][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.304670][ T4318] usb 1-1: Product: syz [ 140.312870][ T4323] usb 4-1: config 0 has no interface number 0 [ 140.322500][ T4318] usb 1-1: Manufacturer: syz [ 140.327237][ T4318] usb 1-1: SerialNumber: syz [ 140.340136][ T4323] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 140.379386][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.383027][ T4318] usb 1-1: config 0 descriptor?? [ 140.406770][ T4323] usb 4-1: Product: syz [ 140.430400][ T4323] usb 4-1: Manufacturer: syz [ 140.443809][ T4323] usb 4-1: SerialNumber: syz [ 140.483044][ T4323] usb 4-1: config 0 descriptor?? [ 140.532085][ T4323] smsc95xx v2.0.0 [ 140.669983][ T5264] loop1: detected capacity change from 0 to 1764 [ 140.881535][ T4318] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 140.901944][ T4323] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 140.924202][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.937454][ T4323] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 140.963071][ T4318] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 140.999560][ T4318] usb 1-1: media controller created [ 141.078218][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.192685][ T4318] zl10353_read_register: readreg error (reg=127, ret==0) [ 141.206736][ T4318] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 141.244298][ T4318] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 141.287233][ T4318] usb 1-1: USB disconnect, device number 5 [ 141.386427][ T4323] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 141.430452][ T4323] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 141.439987][ T4318] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 141.456829][ T4323] usb 4-1: USB disconnect, device number 6 [ 142.365563][ T4323] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.435493][ T5277] loop5: detected capacity change from 0 to 32768 [ 142.565170][ T5277] (syz.5.275,5277,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.594235][ T4323] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 142.620369][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.660287][ T4323] usb 4-1: Product: syz [ 142.664566][ T4323] usb 4-1: Manufacturer: syz [ 142.676416][ T5277] (syz.5.275,5277,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.701943][ T4323] usb 4-1: SerialNumber: syz [ 142.734116][ T4323] usb 4-1: config 0 descriptor?? [ 142.773199][ T4323] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 142.836255][ T5277] JBD2: Ignoring recovery information on journal [ 143.153857][ T5277] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 143.240389][ T4318] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 143.447573][ T4318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.487442][ T4318] usb 3-1: not running at top speed; connect to a high speed hub [ 143.517882][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 143.562082][ T4318] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 143.580245][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.598784][ T4318] usb 3-1: Product: syz [ 143.608989][ T4318] usb 3-1: Manufacturer: syz [ 143.614242][ T4318] usb 3-1: SerialNumber: syz [ 143.641227][ T5309] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.673041][ T5299] loop0: detected capacity change from 0 to 40427 [ 143.711528][ T5277] (syz.5.275,5277,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 143.749155][ T5299] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.775307][ T4323] gspca_sunplus: reg_w_riv err -71 [ 143.780903][ T4323] sunplus: probe of 4-1:0.0 failed with error -71 [ 143.815993][ T4323] usb 4-1: USB disconnect, device number 7 [ 143.921821][ T4318] usb 3-1: MIDIStreaming interface descriptor not found [ 144.000443][ T4320] [ 144.003054][ T4320] ====================================================== [ 144.010130][ T4320] WARNING: possible circular locking dependency detected [ 144.017223][ T4320] syzkaller #0 Not tainted [ 144.021692][ T4320] ------------------------------------------------------ [ 144.028859][ T4320] kworker/u4:6/4320 is trying to acquire lock: [ 144.035053][ T4320] ffff888065f4e990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270 [ 144.042848][ T5299] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.044776][ T4320] [ 144.044776][ T4320] but task is already holding lock: [ 144.044786][ T4320] ffff888028ad90e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 144.070731][ T4320] [ 144.070731][ T4320] which lock already depends on the new lock. [ 144.070731][ T4320] [ 144.081268][ T4320] [ 144.081268][ T4320] the existing dependency chain (in reverse order) is: [ 144.090360][ T4320] [ 144.090360][ T4320] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 144.099879][ T4320] down_read+0x42/0x2d0 [ 144.104858][ T4320] ocfs2_start_trans+0x3a4/0x6f0 [ 144.110395][ T4320] ocfs2_modify_bh+0xe0/0x4c0 [ 144.115841][ T4320] ocfs2_local_read_info+0x13c8/0x1750 [ 144.122343][ T4320] dquot_load_quota_sb+0x756/0xac0 [ 144.129125][ T4320] dquot_load_quota_inode+0x2d8/0x5d0 [ 144.135532][ T4320] ocfs2_enable_quotas+0x1c5/0x490 [ 144.141490][ T4320] ocfs2_fill_super+0x43b5/0x5090 [ 144.147281][ T4320] mount_bdev+0x287/0x3c0 [ 144.152213][ T4320] legacy_get_tree+0xe6/0x180 [ 144.157498][ T4320] vfs_get_tree+0x88/0x270 [ 144.162612][ T4320] do_new_mount+0x24a/0xa40 [ 144.167882][ T4320] __se_sys_mount+0x2e3/0x3d0 [ 144.173589][ T4320] do_syscall_64+0x4c/0xa0 [ 144.178310][ T4318] usb 3-1: USB disconnect, device number 2 [ 144.178757][ T4320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.192334][ T4320] [ 144.192334][ T4320] -> #4 (sb_internal#5){.+.+}-{0:0}: [ 144.200427][ T4320] ocfs2_start_trans+0x2a5/0x6f0 [ 144.206410][ T4320] ocfs2_acquire_dquot+0x681/0xb20 [ 144.212494][ T4320] dqget+0x778/0xeb0 [ 144.217146][ T4320] __dquot_initialize+0x3c3/0xcd0 [ 144.223021][ T4320] ocfs2_get_init_inode+0x144/0x1b0 [ 144.229074][ T4320] ocfs2_mknod+0x8c8/0x25b0 [ 144.234203][ T4320] ocfs2_mkdir+0x1b6/0x4b0 [ 144.239472][ T4320] vfs_mkdir+0x387/0x570 [ 144.244416][ T4320] do_mkdirat+0x1d8/0x440 [ 144.249589][ T4320] __x64_sys_mkdirat+0x85/0x90 [ 144.255468][ T4320] do_syscall_64+0x4c/0xa0 [ 144.261010][ T4320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.267532][ T4320] [ 144.267532][ T4320] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 144.276473][ T4320] down_write+0x36/0x60 [ 144.281229][ T4320] ocfs2_create_local_dquot+0x1a5/0x18e0 [ 144.287453][ T4320] ocfs2_acquire_dquot+0x7c6/0xb20 [ 144.293179][ T4320] dqget+0x778/0xeb0 [ 144.297698][ T4320] __dquot_initialize+0x3c3/0xcd0 [ 144.303411][ T4320] ocfs2_get_init_inode+0x144/0x1b0 [ 144.309471][ T4320] ocfs2_mknod+0x8c8/0x25b0 [ 144.314579][ T4320] ocfs2_mkdir+0x1b6/0x4b0 [ 144.319672][ T4320] vfs_mkdir+0x387/0x570 [ 144.324515][ T4320] do_mkdirat+0x1d8/0x440 [ 144.329423][ T4320] __x64_sys_mkdirat+0x85/0x90 [ 144.335027][ T4320] do_syscall_64+0x4c/0xa0 [ 144.340223][ T4320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.346889][ T4320] [ 144.346889][ T4320] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 144.354619][ T4320] __mutex_lock+0x12d/0xaf0 [ 144.359861][ T4320] dquot_commit+0x5a/0x410 [ 144.365083][ T4320] ext4_write_dquot+0x1f0/0x360 [ 144.371068][ T4320] mark_all_dquot_dirty+0xf9/0x400 [ 144.376989][ T4320] __dquot_alloc_space+0x5fc/0xe60 [ 144.382689][ T4320] ext4_mb_new_blocks+0xfc4/0x4610 [ 144.388505][ T4320] ext4_ext_map_blocks+0x195b/0x6810 [ 144.394379][ T4320] ext4_map_blocks+0x9de/0x1b70 [ 144.399930][ T4320] _ext4_get_block+0x1e7/0x540 [ 144.405546][ T4320] ext4_block_write_begin+0x644/0x1300 [ 144.411697][ T4320] ext4_write_begin+0x629/0xf80 [ 144.417172][ T4320] pagecache_write+0x20a/0x380 [ 144.422820][ T4320] ext4_end_enable_verity+0x1cb/0x570 [ 144.428802][ T4320] enable_verity+0x1a30/0x2040 [ 144.434345][ T4320] fsverity_ioctl_enable+0x40c/0x4b0 [ 144.440801][ T4320] ext4_ioctl+0x1aab/0x4160 [ 144.446538][ T4320] __se_sys_ioctl+0xfa/0x170 [ 144.451943][ T4320] do_syscall_64+0x4c/0xa0 [ 144.457607][ T4320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.464785][ T4320] [ 144.464785][ T4320] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 144.474036][ T4320] down_write+0x36/0x60 [ 144.479751][ T4320] ext4_truncate+0x999/0x1240 [ 144.485159][ T4320] ext4_setattr+0x11f8/0x1b50 [ 144.490409][ T4320] notify_change+0xc74/0xf40 [ 144.496027][ T4320] do_truncate+0x1ac/0x240 [ 144.501296][ T4320] do_sys_ftruncate+0x312/0x3c0 [ 144.506738][ T4320] do_syscall_64+0x4c/0xa0 [ 144.511845][ T4320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.518338][ T4320] [ 144.518338][ T4320] -> #0 (jbd2_handle){++++}-{0:0}: [ 144.525730][ T4320] __lock_acquire+0x2d07/0x7d10 [ 144.531360][ T4320] lock_acquire+0x1bb/0x4a0 [ 144.536455][ T4320] wait_transaction_locked+0x1bf/0x270 [ 144.542702][ T4320] start_this_handle+0x7ec/0x2230 [ 144.548508][ T4320] jbd2__journal_start+0x2b7/0x5a0 [ 144.554202][ T4320] jbd2_journal_start+0x26/0x30 [ 144.559711][ T4320] ocfs2_start_trans+0x3b0/0x6f0 [ 144.565238][ T4320] ocfs2_release_dquot+0x47c/0xc70 [ 144.570929][ T4320] quota_release_workfn+0x35e/0x610 [ 144.576772][ T4320] process_one_work+0x8a2/0x1160 [ 144.582389][ T4320] worker_thread+0xaa2/0x1270 [ 144.587751][ T4320] kthread+0x29d/0x330 [ 144.592502][ T4320] ret_from_fork+0x1f/0x30 [ 144.597621][ T4320] [ 144.597621][ T4320] other info that might help us debug this: [ 144.597621][ T4320] [ 144.607899][ T4320] Chain exists of: [ 144.607899][ T4320] jbd2_handle --> sb_internal#5 --> &journal->j_trans_barrier [ 144.607899][ T4320] [ 144.616466][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.622217][ T4320] Possible unsafe locking scenario: [ 144.622217][ T4320] [ 144.622225][ T4320] CPU0 CPU1 [ 144.622230][ T4320] ---- ---- [ 144.622235][ T4320] lock(&journal->j_trans_barrier); [ 144.622254][ T4320] lock(sb_internal#5); [ 144.622275][ T4320] lock(&journal->j_trans_barrier); [ 144.676624][ T4320] lock(jbd2_handle); [ 144.680882][ T4320] [ 144.680882][ T4320] *** DEADLOCK *** [ 144.680882][ T4320] [ 144.689184][ T4320] 7 locks held by kworker/u4:6/4320: [ 144.694518][ T4320] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 144.707301][ T4320] #1: ffffc90004087d00 ((quota_release_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 144.718146][ T4320] #2: ffff888055e0c2a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_release_dquot+0x260/0xc70 [ 144.728920][ T4320] #3: ffff888055d4ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 144.742172][ T4320] #4: ffff888055d4ea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 144.753573][ T4320] #5: ffff88807ac70650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_release_dquot+0x47c/0xc70 [ 144.763584][ T4320] #6: ffff888028ad90e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 144.774493][ T4320] [ 144.774493][ T4320] stack backtrace: [ 144.780453][ T4320] CPU: 0 PID: 4320 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 144.788053][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.798242][ T4320] Workqueue: events_unbound quota_release_workfn [ 144.804820][ T4320] Call Trace: [ 144.808156][ T4320] [ 144.811157][ T4320] dump_stack_lvl+0x188/0x24e [ 144.816014][ T4320] ? load_image+0x400/0x400 [ 144.820582][ T4320] ? show_regs_print_info+0x12/0x12 [ 144.825854][ T4320] ? print_circular_bug+0x12b/0x1a0 [ 144.831128][ T4320] check_noncircular+0x296/0x330 [ 144.836135][ T4320] ? add_chain_block+0x940/0x940 [ 144.841269][ T4320] ? lockdep_lock+0xf1/0x1f0 [ 144.846031][ T4320] ? _find_first_zero_bit+0xcf/0x100 [ 144.851399][ T4320] __lock_acquire+0x2d07/0x7d10 [ 144.856692][ T4320] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 144.862748][ T4320] ? verify_lock_unused+0x140/0x140 [ 144.868101][ T4320] ? lock_chain_count+0x20/0x20 [ 144.873025][ T4320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.879261][ T4320] ? lockdep_hardirqs_on+0x94/0x140 [ 144.884510][ T4320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.890751][ T4320] lock_acquire+0x1bb/0x4a0 [ 144.895311][ T4320] ? wait_transaction_locked+0x1a6/0x270 [ 144.901171][ T4320] ? __lock_acquire+0x7d10/0x7d10 [ 144.906349][ T4320] ? ret_from_fork+0x1f/0x30 [ 144.911074][ T4320] ? read_lock_is_recursive+0x10/0x10 [ 144.917034][ T4320] ? prepare_to_wait_exclusive+0x7e/0x220 [ 144.922829][ T4320] ? wait_transaction_locked+0x1a6/0x270 [ 144.928703][ T4320] wait_transaction_locked+0x1bf/0x270 [ 144.934240][ T4320] ? wait_transaction_locked+0x1a6/0x270 [ 144.940811][ T4320] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 144.947613][ T4320] ? stack_trace_save+0xa6/0xf0 [ 144.952527][ T4320] ? wake_bit_function+0x200/0x200 [ 144.957701][ T4320] ? __lock_acquire+0x13cf/0x7d10 [ 144.962784][ T4320] start_this_handle+0x7ec/0x2230 [ 144.967863][ T4320] ? slab_post_alloc_hook+0x4b/0x480 [ 144.973571][ T4320] ? kmem_cache_alloc+0x123/0x2f0 [ 144.978745][ T4320] ? jbd2__journal_start+0x13c/0x5a0 [ 144.984121][ T4320] ? jbd2__journal_start+0x5a0/0x5a0 [ 144.989832][ T4320] ? __kasan_slab_alloc+0x6b/0x80 [ 144.995025][ T4320] ? slab_post_alloc_hook+0x67/0x480 [ 145.000491][ T4320] ? slab_pre_alloc_hook+0x59/0x310 [ 145.005942][ T4320] ? rcu_is_watching+0x11/0xa0 [ 145.011021][ T4320] ? kmem_cache_alloc+0x151/0x2f0 [ 145.016448][ T4320] ? jbd2__journal_start+0x13c/0x5a0 [ 145.022068][ T4320] jbd2__journal_start+0x2b7/0x5a0 [ 145.027435][ T4320] jbd2_journal_start+0x26/0x30 [ 145.032449][ T4320] ocfs2_start_trans+0x3b0/0x6f0 [ 145.037517][ T4320] ? down_write+0x42/0x60 [ 145.041897][ T4320] ? ocfs2_recovery_exit+0x50/0x50 [ 145.047047][ T4320] ocfs2_release_dquot+0x47c/0xc70 [ 145.052226][ T4320] ? ocfs2_acquire_dquot+0xb20/0xb20 [ 145.057564][ T4320] ? __lock_acquire+0x7d10/0x7d10 [ 145.062676][ T4320] ? do_raw_spin_lock+0x128/0x2f0 [ 145.067760][ T4320] ? __rwlock_init+0x140/0x140 [ 145.072665][ T4320] ? do_raw_spin_unlock+0x11d/0x230 [ 145.077948][ T4320] quota_release_workfn+0x35e/0x610 [ 145.083194][ T4320] ? dquot_quota_disable+0x380/0x380 [ 145.088980][ T4320] ? _raw_spin_unlock_irq+0x1f/0x40 [ 145.094580][ T4320] ? process_one_work+0x7b0/0x1160 [ 145.099932][ T4320] process_one_work+0x8a2/0x1160 [ 145.105221][ T4320] ? worker_detach_from_pool+0x240/0x240 [ 145.111186][ T4320] ? _raw_spin_lock_irq+0xb7/0xf0 [ 145.116397][ T4320] ? _raw_spin_lock_irqsave+0x100/0x100 [ 145.122273][ T4320] ? kthread_data+0x4b/0xc0 [ 145.126938][ T4320] worker_thread+0xaa2/0x1270 [ 145.131783][ T4320] kthread+0x29d/0x330 [ 145.135929][ T4320] ? worker_clr_flags+0x1a0/0x1a0 [ 145.141012][ T4320] ? kthread_blkcg+0xd0/0xd0 [ 145.145741][ T4320] ret_from_fork+0x1f/0x30 [ 145.150305][ T4320] [ 145.213741][ T4427] ocfs2: Unmounting device (7,5) on (node local)