last executing test programs: 6.572476117s ago: executing program 4 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 6.340499535s ago: executing program 4 (id=99): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x154}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 6.088906023s ago: executing program 4 (id=102): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="a400000000020104000000000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c0002800500010000000000300001802c0001801400030000000000000000000000ffffac1e01011400040020010000000000000000000000000002"], 0xa4}, 0x1, 0x0, 0x0, 0x2404c884}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 5.910507216s ago: executing program 4 (id=104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000200)=0x8, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 5.836009162s ago: executing program 0 (id=105): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x802, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 5.601686479s ago: executing program 0 (id=108): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = dup(r0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=ANY=[], 0x6535}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) 5.336975938s ago: executing program 0 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$9p_fd(0x0, 0x0, &(0x7f0000000380), 0x2000000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 4.995490463s ago: executing program 0 (id=112): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000001, 0x400, 0x0, 0x341}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.422427489s ago: executing program 2 (id=122): unshare(0x2040600) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00'}, 0x10) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 3.356298204s ago: executing program 2 (id=123): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.120837401s ago: executing program 2 (id=127): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) 2.861847s ago: executing program 2 (id=129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000340)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2.780525006s ago: executing program 0 (id=131): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "ec299cd9"}, @global=@item_4={0x3, 0x1, 0x2}, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000100)={0x1, 0xffffffff, 0x40a}) 2.167887591s ago: executing program 1 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.102755526s ago: executing program 2 (id=137): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @main, @main=@item_4={0x3, 0x0, 0xc, "f53f0587"}]}}, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000000cc0)={0x2020}, 0x2020) 1.823685366s ago: executing program 1 (id=139): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.760690831s ago: executing program 1 (id=140): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@discard}, {@nodiscard}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa18, &(0x7f0000002800)="$eJzs3V+MXFUdAOBzZ3e2f7FTbGWFAlVUUGSXLa2CFVpCE2NMmj6DL6SU2rRUYwkRwkPlyRcCCaHPxfjiC0SNAV5Mw4MhJhBjYkh8QuJrTUh8MCawprvnzM7+OpM7s93d2dn5vuTsmXPPmTnnzt65c+fee85JwNhqLPw9eHC6Sun1d187dvsb779ybcmRdonWwt/JjlQzpVTl9GR4vY8nFuPPPn3xZLe4SgcW/pZ0On61/dwdKaWLaX+6klrp5ScuTX709vEP30xnnztx7IN31mbtl1RrXQEAAGwAJ64cPrj3n3+9bff/3rrjaNrSXl6Oz1s5vTMf9x/NB8rleLmRlqerjtBpKpSbzKERyk10KddZTzOUm+xR/1R43WaPcltq6p/oWNZtvWGUle24larGzLJ0ozEzs/ibPC38rp+qZs6fOff0hSE1FFh1/7kzpbRfEIRxDPO7hr0HAlgUrxde5+LqXqlrv9pkf/VffbTR/fmwCtZ7+1f/aNX/m1/a47B6NuvWVNarfI525nS8jhDvXxr0819eL16PaPbZzl7XEUbl+kKvdk6scztWqlf743axWT2c4/I+PBLyOz8/8X86Kv9joLv/Ov8vCGMb5oe9AwI2rHjf3HxW8uN9fTF/S03+1pr8bTX522vyd9Tkwzj7w7OvpFerpd/58Tf9oOfDynm2m3L8hQHbE89HDlp/vO93UDdaf7yfGDa0HX++9OBTj/9t8f7/qr39f5639/053cqfrSu5QDlfGM+rt+/9by2vptGj3M2hOTd1Kb/weM/yctWepddJHfuZ69oxvfx5u3qV27e8XCuU25bD1tDeeHyyPTyvHH+U/Wp5vybD+jbDekyFdpT9yu4cx3bASpTtsdf9/2X7nE7N6ukz507dn9NlO31/ornl2vK5dW43cOP67f8znZb3/9nZXt5sdO4Xdi0trzr3C62w/ECP5Q/kdPme+8nEtoXlMyd/eu6p1V55GHMXnn/h7JPnzp36uQceeOBB+8Gw90zAWpt99pmfzV54/oX7zjzz5OlTp0+dnzs09+BDh+bmvvPQ7MJx/Wzn0T2wmSx96Q+7JQAAAAAAAAAAAEC/Tn8ye/nv7333H4v9/5f6/5X+/+XO39L//1eh/3/sJ1/6wZd+gLu75C+UCQOsToVyzRy+GNq7J9SzNzzvSzluz+OX+/+X6uK4rqU9t4TlcfzeUi4MJ3DdeClTYQySOF/gV3P8Uo5/nWCIqm3dF+e4bnzrsq2X8SmMSzGayv+tbA1lHJPS/7vXuE5l/797HdrI6luP7oTDXkegu38b/1sQxjbMz5vFA9gYhj3/ZznvWeLzf/rh1muhFLv66PL9ZRy/FG7ERp9/Uv2ba/7P9vx3fe//wox5rZXVe/ilH/2ro9p0a7/1x/Uv40DvGaz+7+f6y9rcnfqrf/6NUH+8INSnh0P92/us/7r137ey+h/J9Ze37Z67+q1/scVVY3k74nnjcv0vnjcujoT1L2N7Drz+K5yo8WiuH8bZqMwzO6jVnv/3SnmwyvP/9hLvwziU02VHWO5ziPOdDHr8Uu6vKN8De8PrVzXfb5t1/t974xfWJvW9HNd9Hsr8v2V7bHVJNzrSzS7v7Wbd18Co+tj1P0EY2zA/P7+2J7RqDLVyhv7+D/t3wrDrH/b7XyfO/xuP4eP8vzE/zv8b8+P8vzE/zq8X8+P8v/H9jPP/xvxbwuvG+YGna/K/XJN/a03+bTX5+2ryb6/J/0pN/h01+XfW5N9ck39XTf7XavK/XpP/jZr8e2ryv1mTv9mV/ijjuv4wzmL/PJ9/GB/l+k+vz/+emnxgdF16a+6xx3//49Zi//+p9vmQch3vaE4382/nX+R0vO6dOtLX8t7L6U9C/kY/3wHjJI6fEb/f767JB0ZXuc/L5xvGUNV9xJ5+x63qdZzPaPlWju/N8bdzfF+OZ3I8m+O5HB9Yp/axNh773R8Pv1ot/d7fFfL7vZ889geK40Q90Gd74vmBQe9nj+P4DepG619hdzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIChaSz8PXhwukrp9XdfO3b5Lz/47bUlR9olWgt/JztSzfbzUro/xxM5vpwffPbpiyc7489zXKUDqUpVe3k6frVd046U0sW0P11JrfTyE5cmP3r7+IdvprPPnTj2wTtr9w4sqta6AgAAABii/wcAAP//Sy4HLA==") 1.655072529s ago: executing program 3 (id=141): r0 = syz_io_uring_setup(0x432e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x36, 0x0, r3, 0x0, &(0x7f0000000340)="ce", 0x1}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x402) 1.467568073s ago: executing program 3 (id=142): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0x172}, {0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000011c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 1.243812099s ago: executing program 3 (id=143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.242698939s ago: executing program 1 (id=144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0x0, 0x0, 0x0}) 1.124952507s ago: executing program 3 (id=145): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.017573526s ago: executing program 1 (id=146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x100) msgrcv(r1, &(0x7f0000000100)={0x0, ""/4096}, 0x1008, 0x2, 0x2000) msgsnd(r1, &(0x7f0000001380)={0x1}, 0x8, 0x0) 931.004832ms ago: executing program 3 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x442a, &(0x7f0000008940)="$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") sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00"], 0x24}}, 0x0) 639.735993ms ago: executing program 1 (id=148): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 223.437974ms ago: executing program 0 (id=149): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x4a, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x1, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x1000007, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8e, 0x6, 0x1, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x18000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x80000001, 0xc000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x2, 0x9, 0x4, 0x9, 0xe6f7, 0x9, 0x6, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x4, 0x9, 0x8, 0x3, 0x4, 0x3, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdbe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0xf0e8, 0x10000009, 0x3e7, 0x8, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xff, 0x3, 0x4, 0x8, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x8000006, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x7, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1c, 0xfffffffd, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) fcntl$setstatus(r0, 0x4, 0x42400) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 192.226666ms ago: executing program 4 (id=150): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000340)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={0x0, 0x1}) 63.678655ms ago: executing program 4 (id=151): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x2) 22.628708ms ago: executing program 2 (id=152): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100}) 0s ago: executing program 3 (id=153): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 69.264294][ T4242] cgroup: Unknown subsys name 'net' [ 69.404016][ T4242] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.958327][ T4242] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.398532][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.404990][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.820851][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.831241][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.839840][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.848576][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.856261][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.864004][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.871551][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.874932][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.881106][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.886735][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.894197][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.900888][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.906988][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.914305][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.920895][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.928048][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.935964][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.995958][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.015957][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.027668][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.035546][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.043915][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.052288][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.059874][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.071885][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.087409][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.095594][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.106461][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.126078][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.133521][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.426225][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 73.477162][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 73.543479][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 73.644261][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 73.665968][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.673129][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.682137][ T4259] device bridge_slave_0 entered promiscuous mode [ 73.719189][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.726535][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.734734][ T4259] device bridge_slave_1 entered promiscuous mode [ 73.781802][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 73.796372][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.803519][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.812347][ T4253] device bridge_slave_0 entered promiscuous mode [ 73.820034][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.827286][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.835215][ T4252] device bridge_slave_0 entered promiscuous mode [ 73.864722][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.872101][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.880803][ T4253] device bridge_slave_1 entered promiscuous mode [ 73.887977][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.895073][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.903155][ T4252] device bridge_slave_1 entered promiscuous mode [ 73.912796][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.972501][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.990366][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.997669][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.005792][ T4267] device bridge_slave_0 entered promiscuous mode [ 74.033335][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.054538][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.062518][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.070585][ T4267] device bridge_slave_1 entered promiscuous mode [ 74.079740][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.090941][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.125560][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.145338][ T4259] team0: Port device team_slave_0 added [ 74.186250][ T4252] team0: Port device team_slave_0 added [ 74.193382][ T4259] team0: Port device team_slave_1 added [ 74.199491][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.206739][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.214566][ T4264] device bridge_slave_0 entered promiscuous mode [ 74.224042][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.243793][ T4252] team0: Port device team_slave_1 added [ 74.258780][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.266063][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.274007][ T4264] device bridge_slave_1 entered promiscuous mode [ 74.282843][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.295031][ T4253] team0: Port device team_slave_0 added [ 74.334743][ T4253] team0: Port device team_slave_1 added [ 74.359207][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.366507][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.392586][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.432250][ T4267] team0: Port device team_slave_0 added [ 74.438674][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.446347][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.472493][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.484348][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.491666][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.517764][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.531280][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.553352][ T4267] team0: Port device team_slave_1 added [ 74.559760][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.566941][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.592982][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.611158][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.620915][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.628275][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.654353][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.697724][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.704711][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.730762][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.780208][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.787344][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.813378][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.837074][ T4252] device hsr_slave_0 entered promiscuous mode [ 74.843897][ T4252] device hsr_slave_1 entered promiscuous mode [ 74.854867][ T4264] team0: Port device team_slave_0 added [ 74.865618][ T4264] team0: Port device team_slave_1 added [ 74.871878][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.879107][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.905376][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.920804][ T4259] device hsr_slave_0 entered promiscuous mode [ 74.928005][ T4259] device hsr_slave_1 entered promiscuous mode [ 74.934570][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.945479][ T4259] Cannot create hsr debugfs directory [ 74.996253][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 75.021753][ T4253] device hsr_slave_0 entered promiscuous mode [ 75.028932][ T4253] device hsr_slave_1 entered promiscuous mode [ 75.038923][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.046609][ T4253] Cannot create hsr debugfs directory [ 75.056634][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.063622][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.090132][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 75.095666][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 75.096334][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.102480][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 75.155469][ T4257] Bluetooth: hci4: command 0x0409 tx timeout [ 75.163718][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.171191][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.197219][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.224524][ T4267] device hsr_slave_0 entered promiscuous mode [ 75.231421][ T4267] device hsr_slave_1 entered promiscuous mode [ 75.238281][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.246224][ T4267] Cannot create hsr debugfs directory [ 75.383426][ T4264] device hsr_slave_0 entered promiscuous mode [ 75.390364][ T4264] device hsr_slave_1 entered promiscuous mode [ 75.397317][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.404892][ T4264] Cannot create hsr debugfs directory [ 75.628325][ T4252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.656793][ T4252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.667481][ T4252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.681518][ T4252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.729056][ T4259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.738433][ T4259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.753854][ T4259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.781204][ T4259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.820906][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.847482][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.857389][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.868496][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.970275][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.977930][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.991628][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.001234][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.037935][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.067469][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.078329][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.098173][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.112334][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.141656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.152217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.162856][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.170185][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.193878][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.204561][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.216379][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.227124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.235789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.243636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.266462][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.278369][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.288387][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.295566][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.303677][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.317421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.326774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.336127][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.343212][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.353592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.369074][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.408762][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.419175][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.428385][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.435542][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.443546][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.453518][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.462511][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.472947][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.482122][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.491183][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.500450][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.534239][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.541757][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.550892][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.560005][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.584552][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.598874][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.610503][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.630998][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.639966][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.662813][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.683064][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.698259][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.708596][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.717399][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.728004][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.737744][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.747466][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.784492][ T4259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.796402][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.818385][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.827031][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.835118][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.844058][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.856196][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.867611][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.877199][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.886581][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.896661][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.906112][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.913236][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.922685][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.932280][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.941641][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.948816][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.958402][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.970888][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.989159][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.021479][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.031479][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.047837][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.061874][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.076019][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 77.101997][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.111937][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.121850][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.137374][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.147333][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.154469][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.162546][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 77.170156][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 77.170165][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 77.182393][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.194844][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.203763][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.210916][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.219243][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.228010][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.236431][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 77.245077][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.257273][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.286837][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.301876][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.319748][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.332956][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.343624][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.388841][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.406371][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.416867][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.426091][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.434646][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.444095][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.453316][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.462345][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.472179][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.481281][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.507054][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.519296][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.530864][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.554005][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.562735][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.571499][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.580526][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.589519][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.599062][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.608124][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.617262][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.626542][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.636860][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.646962][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.655590][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.662689][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.671596][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.680695][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.715164][ T4252] device veth0_vlan entered promiscuous mode [ 77.727878][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.744199][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.754680][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.761910][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.776937][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.790601][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.802866][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.818146][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.835669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.861596][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.888820][ T4252] device veth1_vlan entered promiscuous mode [ 77.902382][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.919042][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.932855][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.962531][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.986291][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.007839][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.037331][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.057965][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.111605][ T4259] device veth0_vlan entered promiscuous mode [ 78.127517][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.142423][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.151157][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.160766][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.169575][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.178744][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.187392][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.197092][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.205007][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.216158][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.250936][ T4259] device veth1_vlan entered promiscuous mode [ 78.278121][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.294800][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.304630][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.318791][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.329513][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.341252][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.373934][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.392116][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.406508][ T4252] device veth0_macvtap entered promiscuous mode [ 78.425964][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.447724][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.474273][ T4259] device veth0_macvtap entered promiscuous mode [ 78.498342][ T4252] device veth1_macvtap entered promiscuous mode [ 78.516413][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.536203][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.550194][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.561630][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.585059][ T4259] device veth1_macvtap entered promiscuous mode [ 78.619255][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.628551][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.653854][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.677223][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.703232][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.712703][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.729007][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.750421][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.762980][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.778178][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.789470][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.807191][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.818371][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.830629][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.842586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.852169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.861596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.870624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.880692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.889783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.904982][ T4252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.922468][ T4252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.931579][ T4252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.940799][ T4252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966349][ T4259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.975159][ T4259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.984576][ T4259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.000387][ T4259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.012818][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.021298][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.037166][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.046079][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.054602][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.064397][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.084660][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.093657][ T4264] device veth0_vlan entered promiscuous mode [ 79.127655][ T4264] device veth1_vlan entered promiscuous mode [ 79.155954][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 79.185914][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.198664][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.208303][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.218121][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.227343][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.236129][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 79.238491][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.242306][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 79.257682][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 79.284093][ T4267] device veth0_vlan entered promiscuous mode [ 79.310211][ T4264] device veth0_macvtap entered promiscuous mode [ 79.325333][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 79.337295][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.348343][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.357226][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.366305][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.402047][ T4264] device veth1_macvtap entered promiscuous mode [ 79.417444][ T4267] device veth1_vlan entered promiscuous mode [ 79.424358][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.433406][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.441726][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.450820][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.459205][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.503817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.512953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.523823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.533314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.569322][ T4253] device veth0_vlan entered promiscuous mode [ 79.579917][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.591593][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.592740][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.611185][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.621616][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.632903][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.645946][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.656984][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.667629][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.675711][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.677882][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.696539][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.697699][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.724318][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.737920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.747091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.756505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.764395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.773736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.788678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.797912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.814468][ T4253] device veth1_vlan entered promiscuous mode [ 79.823694][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.832541][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.842492][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.851452][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.923157][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.932827][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.945751][ T4253] device veth0_macvtap entered promiscuous mode [ 79.976439][ T4253] device veth1_macvtap entered promiscuous mode [ 79.998893][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.999311][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.014603][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.020614][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.031925][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.041366][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.050766][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.062568][ T4267] device veth0_macvtap entered promiscuous mode [ 80.069992][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.079640][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.087553][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.104316][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.116307][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.127165][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.137813][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.148763][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.160738][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.171251][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.182570][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.192922][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.204809][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.214864][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.225700][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.237929][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.255685][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.263921][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.273231][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.283756][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.293321][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.304097][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.326190][ T4267] device veth1_macvtap entered promiscuous mode [ 80.352549][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.364455][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.373325][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.382252][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.465068][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.484198][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.502109][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.514627][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.533462][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.544511][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.561172][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.572459][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.608340][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.644671][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.648610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.661467][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.673323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.684733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.694304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.706383][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.722988][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.733936][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.744850][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.756655][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.768753][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.779448][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.799829][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.814800][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.841326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.865195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.865966][ T4300] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.894482][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.912430][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.924964][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.934412][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.977598][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.025598][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.045746][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.066702][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.092256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.103820][ T4300] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 81.118683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.155770][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.185530][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.195868][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.239276][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 81.246575][ T4300] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 81.269899][ T4300] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 81.278909][ T4300] usb 1-1: Manufacturer: syz [ 81.297472][ T4300] usb 1-1: config 0 descriptor?? [ 81.303351][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.317092][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 81.323161][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 81.325899][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 81.330924][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.345953][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.394694][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.405749][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 81.455327][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.464355][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.522296][ T4350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.562334][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.622117][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.679391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.693533][ T4356] loop4: detected capacity change from 0 to 512 [ 81.718780][ T4300] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 81.746184][ T4356] ======================================================= [ 81.746184][ T4356] WARNING: The mand mount option has been deprecated and [ 81.746184][ T4356] and is ignored by this kernel. Remove the mand [ 81.746184][ T4356] option from the mount to silence this warning. [ 81.746184][ T4356] ======================================================= [ 81.786892][ T4300] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 81.866163][ T4300] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 81.927870][ T4356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.008388][ T4356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.124702][ T4356] EXT4-fs (loop4): 1 truncate cleaned up [ 82.127118][ T7] usb 1-1: USB disconnect, device number 2 [ 82.188889][ T4356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.444102][ T4366] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 82.472175][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 83.295195][ T4358] loop2: detected capacity change from 0 to 32768 [ 83.352717][ T4358] XFS: ikeep mount option is deprecated. [ 83.365300][ T4358] XFS: ikeep mount option is deprecated. [ 83.467227][ T4358] XFS (loop2): Mounting V5 Filesystem [ 83.701299][ T4358] XFS (loop2): Ending clean mount [ 83.734217][ T4358] XFS (loop2): Quotacheck needed: Please wait. [ 83.807046][ T4358] XFS (loop2): Quotacheck: Done. [ 83.811574][ T4377] loop4: detected capacity change from 0 to 32768 [ 83.866011][ T4377] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.16 (4377) [ 83.931230][ T4375] loop3: detected capacity change from 0 to 32768 [ 83.941452][ T4377] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 83.963003][ T4377] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 84.006696][ T4377] BTRFS info (device loop4): doing ref verification [ 84.013381][ T4377] BTRFS info (device loop4): turning off barriers [ 84.045387][ T4377] BTRFS info (device loop4): enabling auto defrag [ 84.062333][ T4377] BTRFS info (device loop4): using free space tree [ 84.068788][ T4375] XFS (loop3): Mounting V5 Filesystem [ 84.143968][ T4252] XFS (loop2): Unmounting Filesystem [ 84.269195][ T4375] XFS (loop3): Ending clean mount [ 84.281325][ T4375] XFS (loop3): Quotacheck needed: Please wait. [ 84.362080][ T4375] XFS (loop3): Quotacheck: Done. [ 84.535401][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.575384][ T4375] XFS (loop3): User initiated shutdown received. [ 84.588019][ T4375] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 84.622870][ T26] audit: type=1800 audit(1739461353.276:2): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 84.662896][ T4375] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 84.735440][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 84.751902][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 84.781944][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.813159][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.866199][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.888489][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.922054][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.941698][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.008135][ T4267] XFS (loop3): Unmounting Filesystem [ 85.153125][ T4253] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 85.192240][ T22] usb 1-1: GET_CAPABILITIES returned 0 [ 85.198872][ T22] usbtmc 1-1:16.0: can't read capabilities [ 85.508603][ T127] usb 1-1: USB disconnect, device number 3 [ 85.529863][ T4379] loop1: detected capacity change from 0 to 32768 [ 85.658884][ T4379] XFS (loop1): Mounting V5 Filesystem [ 85.955730][ T4379] XFS (loop1): Ending clean mount [ 85.975706][ T4419] loop2: detected capacity change from 0 to 32768 [ 86.011885][ T4419] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (4419) [ 86.044624][ T4419] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.046658][ T4436] loop4: detected capacity change from 0 to 1024 [ 86.064649][ T4379] XFS (loop1): Quotacheck needed: Please wait. [ 86.099999][ T4419] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 86.123858][ T4419] BTRFS info (device loop2): doing ref verification [ 86.162112][ T4419] BTRFS info (device loop2): doing ref verification [ 86.190411][ T4379] XFS (loop1): Quotacheck: Done. [ 86.219460][ T4419] BTRFS info (device loop2): disabling tree log [ 86.257796][ T4419] BTRFS info (device loop2): enabling ssd optimizations [ 86.264808][ T4419] BTRFS info (device loop2): using spread ssd allocation scheme [ 86.282510][ T4436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.289650][ T4419] BTRFS info (device loop2): not using ssd optimizations [ 86.303465][ T4264] XFS (loop1): Unmounting Filesystem [ 86.305682][ T4419] BTRFS info (device loop2): not using spread ssd allocation scheme [ 86.319424][ T4436] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.332821][ T4419] BTRFS info (device loop2): using free space tree [ 86.447567][ T4436] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.20: bg 0: block 393: padding at end of block bitmap is not set [ 86.504266][ T4436] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 29 with error 117 [ 86.525360][ T4304] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.585455][ T4436] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.585455][ T4436] [ 86.715421][ T4304] usb 1-1: Using ep0 maxpacket: 32 [ 86.722588][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.755806][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.759000][ T1169] cfg80211: failed to load regulatory.db [ 86.791280][ T4304] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.814595][ T4304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.856274][ T4304] usb 1-1: config 0 descriptor?? [ 86.881602][ T4296] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 20 with error 117 [ 86.981572][ T4296] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.981572][ T4296] [ 87.004425][ T4252] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 87.021929][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 87.309619][ T4304] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 87.611288][ T4255] usb 1-1: USB disconnect, device number 4 [ 88.161454][ T4471] loop4: detected capacity change from 0 to 32768 [ 88.184713][ T4485] loop1: detected capacity change from 0 to 512 [ 88.314522][ T4471] XFS (loop4): Mounting V5 Filesystem [ 88.595605][ T4471] XFS (loop4): Ending clean mount [ 88.612220][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.646500][ T4471] XFS (loop4): Quotacheck needed: Please wait. [ 88.681004][ T4485] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.714408][ T4471] XFS (loop4): Quotacheck: Done. [ 88.895343][ T4472] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.935524][ T4253] XFS (loop4): Unmounting Filesystem [ 89.084946][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 89.085580][ T4472] usb 3-1: Using ep0 maxpacket: 8 [ 89.118490][ T4472] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 89.137213][ T4472] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.165324][ T4472] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.189233][ T4472] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.211665][ T4508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 89.218582][ T4508] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.239069][ T4472] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.272717][ T4472] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.284821][ T4508] vhci_hcd vhci_hcd.0: Device attached [ 89.298626][ T4472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.364134][ T4498] loop0: detected capacity change from 0 to 32768 [ 89.457073][ T4498] XFS (loop0): Mounting V5 Filesystem [ 89.465466][ T4516] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 89.481156][ T1169] vhci_hcd: vhci_device speed not set [ 89.537680][ T4472] usb 3-1: GET_CAPABILITIES returned 0 [ 89.543278][ T4472] usbtmc 3-1:16.0: can't read capabilities [ 89.555761][ T1169] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 89.563446][ T7] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 89.587733][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 89.675635][ T4498] XFS (loop0): Ending clean mount [ 89.694502][ T4498] XFS (loop0): Quotacheck needed: Please wait. [ 89.765936][ T4498] XFS (loop0): Quotacheck: Done. [ 89.793904][ T7] usb 4-1: config 0 has no interfaces? [ 89.803090][ T7] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.815878][ T4472] usb 3-1: USB disconnect, device number 2 [ 89.823422][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.867184][ T7] usb 4-1: config 0 descriptor?? [ 89.917200][ T4498] XFS (loop0): User initiated shutdown received. [ 89.923637][ T4498] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 89.945472][ T4498] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 90.126584][ T4259] XFS (loop0): Unmounting Filesystem [ 90.161867][ T7] usb 4-1: USB disconnect, device number 2 [ 90.171762][ T4509] vhci_hcd: connection closed [ 90.183186][ T51] vhci_hcd: stop threads [ 90.213004][ T51] vhci_hcd: release socket [ 90.233433][ T1169] vhci_hcd: vhci_device speed not set [ 90.246762][ T51] vhci_hcd: disconnect device [ 91.194120][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 91.525779][ T4558] loop2: detected capacity change from 0 to 8 [ 91.623540][ T4558] SQUASHFS error: zlib decompression failed, data probably corrupt [ 91.649705][ T4559] loop4: detected capacity change from 0 to 4096 [ 91.653858][ T4558] SQUASHFS error: Failed to read block 0x4e8: -5 [ 91.712199][ T4559] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 91.726979][ T26] audit: type=1800 audit(1739461360.386:3): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.55" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 91.981336][ T4552] loop0: detected capacity change from 0 to 32768 [ 92.002131][ T4566] loop2: detected capacity change from 0 to 512 [ 92.018482][ T4546] loop1: detected capacity change from 0 to 32768 [ 92.046043][ T4566] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.121644][ T4546] XFS (loop1): Mounting V5 Filesystem [ 92.193808][ T4566] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.251676][ T4546] XFS (loop1): Ending clean mount [ 92.265670][ T4566] EXT4-fs (loop2): 1 truncate cleaned up [ 92.271376][ T4566] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.293199][ T4546] XFS (loop1): Quotacheck needed: Please wait. [ 92.358606][ T4546] XFS (loop1): Quotacheck: Done. [ 92.445310][ T26] audit: type=1800 audit(1739461361.096:4): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 92.749941][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 92.945023][ T4264] XFS (loop1): Unmounting Filesystem [ 93.339729][ T4598] syz.2.68[4598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.339841][ T4598] syz.2.68[4598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.995353][ T1169] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.022103][ T4622] loop4: detected capacity change from 0 to 1024 [ 94.188781][ T4622] hfsplus: invalid extended attribute record [ 94.236444][ T1169] usb 1-1: Using ep0 maxpacket: 8 [ 94.253174][ T1169] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 94.263591][ T1169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.277239][ T9] hfsplus: b-tree write err: -5, ino 4 [ 94.291218][ T1169] usb 1-1: Product: syz [ 94.300841][ T1169] usb 1-1: Manufacturer: syz [ 94.310902][ T1169] usb 1-1: SerialNumber: syz [ 94.319164][ T1169] usb 1-1: config 0 descriptor?? [ 94.347732][ T1169] gspca_main: se401-2.14.0 probing 047d:5003 [ 94.354352][ T4627] loop3: detected capacity change from 0 to 2048 [ 94.384741][ T4627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.467089][ T4629] device ip6gretap0 entered promiscuous mode [ 94.481036][ T4629] device ip6gretap0 left promiscuous mode [ 94.737420][ T1169] gspca_se401: Frame size: 0x0 1/16th janggu [ 94.748858][ T1169] gspca_se401: Frame size: 0x0 1/16th janggu [ 94.765400][ T1169] gspca_se401: Frame size: 0x0 1/16th janggu [ 94.779478][ T1169] gspca_se401: Frame size: 17x0 bayer [ 94.790556][ T1169] gspca_se401: Frame size: 0x0 1/16th janggu [ 94.803524][ T1169] gspca_se401: Frame size: 0x0 1/16th janggu [ 94.815024][ T4624] loop1: detected capacity change from 0 to 32768 [ 94.821753][ T1169] gspca_se401: Frame size: 0x1 1/4th janggu [ 94.835372][ T1169] gspca_se401: Frame size: 0x2 bayer [ 94.842082][ T4624] XFS: ikeep mount option is deprecated. [ 94.920416][ T4639] loop2: detected capacity change from 0 to 64 [ 94.931709][ T4639] MINIX-fs: bad superblock [ 94.942813][ T1169] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 95.010277][ T4635] loop4: detected capacity change from 0 to 4096 [ 95.019513][ T4635] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 95.037651][ T1169] usb 1-1: USB disconnect, device number 5 [ 95.051491][ T4645] loop2: detected capacity change from 0 to 512 [ 95.121462][ T4624] XFS (loop1): Mounting V5 Filesystem [ 95.214937][ T4645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.226947][ T4645] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.336339][ T4624] XFS (loop1): Ending clean mount [ 95.344721][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 95.401341][ T4624] XFS (loop1): Quotacheck needed: Please wait. [ 95.511735][ T4624] XFS (loop1): Quotacheck: Done. [ 95.544700][ T26] audit: type=1800 audit(1739461364.196:5): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.78" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 95.569513][ T4624] XFS (loop1): User initiated shutdown received. [ 95.606416][ T4624] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 95.676265][ T4624] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 95.844449][ T4264] XFS (loop1): Unmounting Filesystem [ 95.852345][ T4667] loop3: detected capacity change from 0 to 2048 [ 95.854871][ T4669] bridge0: port 3(vlan2) entered blocking state [ 95.873388][ T4669] bridge0: port 3(vlan2) entered disabled state [ 95.882704][ T4669] device vlan2 entered promiscuous mode [ 95.889137][ T4669] device vlan1 entered promiscuous mode [ 95.897054][ T4669] bridge0: port 3(vlan2) entered blocking state [ 95.903713][ T4669] bridge0: port 3(vlan2) entered forwarding state [ 96.002457][ T4672] loop0: detected capacity change from 0 to 512 [ 96.021944][ T4667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.114879][ T4672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.153994][ T4672] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.222023][ T4672] EXT4-fs (loop0): shut down requested (1) [ 96.237973][ T4679] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.91: bg 0: block 234: padding at end of block bitmap is not set [ 96.291197][ T4679] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 358 with error 28 [ 96.325457][ T4679] EXT4-fs (loop3): This should not happen!! Data will be lost [ 96.325457][ T4679] [ 96.344325][ T4679] EXT4-fs (loop3): Total free blocks count 0 [ 96.345605][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 96.357271][ T4679] EXT4-fs (loop3): Free/Dirty block details [ 96.395506][ T4679] EXT4-fs (loop3): free_blocks=0 [ 96.418526][ T4679] EXT4-fs (loop3): dirty_blocks=368 [ 96.443462][ T4679] EXT4-fs (loop3): Block reservation details [ 96.460115][ T4679] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 96.518474][ T4667] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 358 with max blocks 4 with error 28 [ 96.720921][ T4692] loop2: detected capacity change from 0 to 512 [ 96.762357][ T4692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.794453][ T4694] loop1: detected capacity change from 0 to 2048 [ 96.852243][ T4692] EXT4-fs (loop2): shut down requested (0) [ 96.961655][ T4700] Process accounting resumed [ 97.129828][ T26] audit: type=1326 audit(1739461365.786:6): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.1.106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb46e18cde9 code=0x0 [ 97.162026][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 97.347735][ T4712] netlink: 92 bytes leftover after parsing attributes in process `syz.2.107'. [ 97.433324][ T4715] loop3: detected capacity change from 0 to 512 [ 97.552528][ T4715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.562119][ T4715] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.862400][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 98.106841][ T4729] loop3: detected capacity change from 0 to 512 [ 98.154179][ T4729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.178858][ T4731] loop2: detected capacity change from 0 to 2048 [ 98.182521][ T4733] loop1: detected capacity change from 0 to 512 [ 98.244808][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.255156][ T4729] EXT4-fs (loop3): 1 truncate cleaned up [ 98.315407][ T4729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.388854][ T4738] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.114: bg 0: block 234: padding at end of block bitmap is not set [ 98.449808][ T4733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.503282][ T4733] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.610017][ T4738] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 636 with error 28 [ 98.636268][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 98.667974][ T4738] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.667974][ T4738] [ 98.723983][ T4738] EXT4-fs (loop2): Total free blocks count 0 [ 98.745411][ T4738] EXT4-fs (loop2): Free/Dirty block details [ 98.766125][ T4738] EXT4-fs (loop2): free_blocks=0 [ 98.793975][ T4738] EXT4-fs (loop2): dirty_blocks=640 [ 98.804859][ T4738] EXT4-fs (loop2): Block reservation details [ 98.820608][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 98.824446][ T4738] EXT4-fs (loop2): i_reserved_data_blocks=40 [ 98.903275][ T4296] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 636 with max blocks 4 with error 28 [ 99.042394][ T4725] loop0: detected capacity change from 0 to 32768 [ 99.075659][ T4725] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.112 (4725) [ 99.130362][ T4725] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 99.182876][ T4725] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 99.266742][ T4725] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.305308][ T4725] BTRFS info (device loop0): use zstd compression, level 3 [ 99.312599][ T4725] BTRFS info (device loop0): using free space tree [ 99.605000][ T4765] loop3: detected capacity change from 0 to 22 [ 99.646018][ T4765] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 99.659684][ T4765] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 99.764089][ T4725] BTRFS info (device loop0): enabling ssd optimizations [ 100.105192][ T4259] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.152495][ T4784] loop2: detected capacity change from 0 to 1024 [ 100.249185][ T4784] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.372290][ T4784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.463769][ T4792] device vlan2 entered promiscuous mode [ 100.480806][ T4784] process 'syz.2.129' launched './file0/file0' with NULL argv: empty string added [ 100.740504][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 100.946814][ T4300] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.135312][ T1169] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.147649][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.164138][ T4809] loop1: detected capacity change from 0 to 2048 [ 101.175326][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.205344][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.245630][ T4300] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.275182][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.281886][ T4812] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.286467][ T4300] usb 1-1: config 0 descriptor?? [ 101.362104][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.383471][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.421460][ T1169] usb 3-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 101.441448][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.462414][ T1169] usb 3-1: config 0 descriptor?? [ 101.745904][ T4300] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 101.771319][ T4300] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.922370][ T1169] wacom 0003:056A:00BC.0004: unknown main item tag 0x0 [ 101.942347][ T1169] wacom 0003:056A:00BC.0004: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 101.982480][ T1169] wacom 0003:056A:00BC.0004: hidraw1: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.2-1/input0 [ 102.009017][ T1169] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BC.0004/input/input6 [ 102.018326][ T4788] usb 1-1: USB disconnect, device number 6 [ 102.146043][ T1169] usb 3-1: USB disconnect, device number 3 [ 102.483827][ T4825] loop3: detected capacity change from 0 to 32768 [ 102.694291][ T4825] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.725334][ T4788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.802339][ T4835] [ 102.804728][ T4835] ===================================================== [ 102.811682][ T4835] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 102.819159][ T4835] 6.1.128-syzkaller #0 Not tainted [ 102.824286][ T4835] ----------------------------------------------------- [ 102.832206][ T4835] syz.0.149/4835 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 102.840068][ T4835] ffff88805828d018 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x196/0x4d0 [ 102.848827][ T4835] [ 102.848827][ T4835] and this task is already holding: [ 102.856247][ T4835] ffff888029e76230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xc1/0x330 [ 102.865990][ T4835] which would create a new lock dependency: [ 102.871882][ T4835] (&dev->event_lock#2){-...}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 102.879837][ T4835] [ 102.879837][ T4835] but this new dependency connects a HARDIRQ-irq-safe lock: [ 102.889296][ T4835] (&dev->event_lock#2){-...}-{2:2} [ 102.889334][ T4835] [ 102.889334][ T4835] ... which became HARDIRQ-irq-safe at: [ 102.902223][ T4835] lock_acquire+0x1f8/0x5a0 [ 102.906829][ T4835] _raw_spin_lock_irqsave+0xd1/0x120 [ 102.912212][ T4835] input_event+0x8d/0xd0 [ 102.916554][ T4835] psmouse_report_standard_packet+0x50/0x200 [ 102.922645][ T4835] psmouse_process_byte+0x45b/0x640 [ 102.927952][ T4835] psmouse_handle_byte+0x46/0x4b0 [ 102.933073][ T4835] psmouse_interrupt+0x697/0x10a0 [ 102.938189][ T4835] serio_interrupt+0x88/0x130 [ 102.942963][ T4835] i8042_interrupt+0x357/0x750 [ 102.947821][ T4835] __handle_irq_event_percpu+0x2a8/0xb20 [ 102.953543][ T4835] handle_irq_event+0x85/0x1e0 [ 102.958403][ T4835] handle_edge_irq+0x245/0xbf0 [ 102.963274][ T4835] __common_interrupt+0xd7/0x1f0 [ 102.968305][ T4835] common_interrupt+0xae/0xd0 [ 102.973074][ T4835] asm_common_interrupt+0x22/0x40 [ 102.978184][ T4835] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 102.983998][ T4835] i8042_aux_write+0x112/0x190 [ 102.988869][ T4835] ps2_do_sendbyte+0x20a/0x720 [ 102.993730][ T4835] ps2_sendbyte+0x5c/0x120 [ 102.998288][ T4835] cypress_send_ext_cmd+0x21d/0x900 [ 103.003579][ T4835] cypress_detect+0x8f/0x220 [ 103.008270][ T4835] psmouse_extensions+0xc2a/0x1550 [ 103.013477][ T4835] psmouse_switch_protocol+0x308/0x840 [ 103.019024][ T4835] psmouse_connect+0x903/0x14c0 [ 103.023966][ T4835] serio_driver_probe+0x74/0x90 [ 103.028914][ T4835] really_probe+0x2ab/0xcb0 [ 103.033511][ T4835] __driver_probe_device+0x1a2/0x3d0 [ 103.038888][ T4835] driver_probe_device+0x50/0x420 [ 103.044004][ T4835] __driver_attach+0x458/0x6f0 [ 103.048862][ T4835] bus_for_each_dev+0x17c/0x1f0 [ 103.053800][ T4835] serio_handle_event+0x56a/0x8f0 [ 103.058919][ T4835] process_one_work+0x8a9/0x11d0 [ 103.063948][ T4835] worker_thread+0xa47/0x1200 [ 103.068718][ T4835] kthread+0x28d/0x320 [ 103.072874][ T4835] ret_from_fork+0x1f/0x30 [ 103.077382][ T4835] [ 103.077382][ T4835] to a HARDIRQ-irq-unsafe lock: [ 103.084397][ T4835] (tasklist_lock){.+.+}-{2:2} [ 103.084425][ T4835] [ 103.084425][ T4835] ... which became HARDIRQ-irq-unsafe at: [ 103.097062][ T4835] ... [ 103.097069][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.104244][ T4835] _raw_read_lock+0x32/0x40 [ 103.108941][ T4835] do_wait+0x2c6/0xb80 [ 103.113122][ T4835] kernel_wait+0xe5/0x230 [ 103.117545][ T4835] call_usermodehelper_exec_work+0xb5/0x220 [ 103.123537][ T4835] process_one_work+0x8a9/0x11d0 [ 103.128567][ T4835] worker_thread+0xa47/0x1200 [ 103.133332][ T4835] kthread+0x28d/0x320 [ 103.137489][ T4835] ret_from_fork+0x1f/0x30 [ 103.142086][ T4835] [ 103.142086][ T4835] other info that might help us debug this: [ 103.142086][ T4835] [ 103.152311][ T4835] Chain exists of: [ 103.152311][ T4835] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 103.152311][ T4835] [ 103.165276][ T4835] Possible interrupt unsafe locking scenario: [ 103.165276][ T4835] [ 103.173594][ T4835] CPU0 CPU1 [ 103.178956][ T4835] ---- ---- [ 103.184318][ T4835] lock(tasklist_lock); [ 103.188565][ T4835] local_irq_disable(); [ 103.195314][ T4835] lock(&dev->event_lock#2); [ 103.202519][ T4835] lock(&new->fa_lock); [ 103.209284][ T4835] [ 103.212733][ T4835] lock(&dev->event_lock#2); [ 103.217589][ T4835] [ 103.217589][ T4835] *** DEADLOCK *** [ 103.217589][ T4835] [ 103.225729][ T4835] 6 locks held by syz.0.149/4835: [ 103.230747][ T4835] #0: ffff88802a1a0110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x26d/0x7c0 [ 103.239898][ T4835] #1: ffff888029e76230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xc1/0x330 [ 103.250015][ T4835] #2: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd1/0x330 [ 103.259688][ T4835] #3: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x12a0 [ 103.269352][ T4835] #4: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 103.279456][ T4835] #5: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x51/0x4d0 [ 103.288522][ T4835] [ 103.288522][ T4835] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 103.298930][ T4835] -> (&dev->event_lock#2){-...}-{2:2} { [ 103.304500][ T4835] IN-HARDIRQ-W at: [ 103.308481][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.314643][ T4835] _raw_spin_lock_irqsave+0xd1/0x120 [ 103.321588][ T4835] input_event+0x8d/0xd0 [ 103.327489][ T4835] psmouse_report_standard_packet+0x50/0x200 [ 103.335129][ T4835] psmouse_process_byte+0x45b/0x640 [ 103.341990][ T4835] psmouse_handle_byte+0x46/0x4b0 [ 103.348667][ T4835] psmouse_interrupt+0x697/0x10a0 [ 103.355343][ T4835] serio_interrupt+0x88/0x130 [ 103.361674][ T4835] i8042_interrupt+0x357/0x750 [ 103.368097][ T4835] __handle_irq_event_percpu+0x2a8/0xb20 [ 103.375385][ T4835] handle_irq_event+0x85/0x1e0 [ 103.381816][ T4835] handle_edge_irq+0x245/0xbf0 [ 103.388241][ T4835] __common_interrupt+0xd7/0x1f0 [ 103.394854][ T4835] common_interrupt+0xae/0xd0 [ 103.401187][ T4835] asm_common_interrupt+0x22/0x40 [ 103.407889][ T4835] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 103.415266][ T4835] i8042_aux_write+0x112/0x190 [ 103.421686][ T4835] ps2_do_sendbyte+0x20a/0x720 [ 103.428107][ T4835] ps2_sendbyte+0x5c/0x120 [ 103.434180][ T4835] cypress_send_ext_cmd+0x21d/0x900 [ 103.441037][ T4835] cypress_detect+0x8f/0x220 [ 103.447372][ T4835] psmouse_extensions+0xc2a/0x1550 [ 103.454152][ T4835] psmouse_switch_protocol+0x308/0x840 [ 103.461282][ T4835] psmouse_connect+0x903/0x14c0 [ 103.467796][ T4835] serio_driver_probe+0x74/0x90 [ 103.474305][ T4835] really_probe+0x2ab/0xcb0 [ 103.480467][ T4835] __driver_probe_device+0x1a2/0x3d0 [ 103.487409][ T4835] driver_probe_device+0x50/0x420 [ 103.494086][ T4835] __driver_attach+0x458/0x6f0 [ 103.500505][ T4835] bus_for_each_dev+0x17c/0x1f0 [ 103.507078][ T4835] serio_handle_event+0x56a/0x8f0 [ 103.513791][ T4835] process_one_work+0x8a9/0x11d0 [ 103.520480][ T4835] worker_thread+0xa47/0x1200 [ 103.526818][ T4835] kthread+0x28d/0x320 [ 103.532541][ T4835] ret_from_fork+0x1f/0x30 [ 103.538617][ T4835] INITIAL USE at: [ 103.542511][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.548589][ T4835] _raw_spin_lock_irqsave+0xd1/0x120 [ 103.555445][ T4835] input_inject_event+0xc1/0x330 [ 103.561963][ T4835] led_trigger_event+0x130/0x210 [ 103.568471][ T4835] kbd_led_trigger_activate+0xb9/0x100 [ 103.575504][ T4835] led_trigger_set+0x55a/0x970 [ 103.581836][ T4835] led_trigger_set_default+0x1c2/0x200 [ 103.588868][ T4835] led_classdev_register_ext+0x600/0x7e0 [ 103.596067][ T4835] input_leds_connect+0x48f/0x630 [ 103.602664][ T4835] input_register_device+0xcec/0x1080 [ 103.609630][ T4835] atkbd_connect+0x79d/0x9e0 [ 103.615790][ T4835] serio_driver_probe+0x74/0x90 [ 103.622214][ T4835] really_probe+0x2ab/0xcb0 [ 103.628286][ T4835] __driver_probe_device+0x1a2/0x3d0 [ 103.635149][ T4835] driver_probe_device+0x50/0x420 [ 103.641743][ T4835] __driver_attach+0x458/0x6f0 [ 103.648075][ T4835] bus_for_each_dev+0x17c/0x1f0 [ 103.654497][ T4835] serio_handle_event+0x56a/0x8f0 [ 103.661092][ T4835] process_one_work+0x8a9/0x11d0 [ 103.667598][ T4835] worker_thread+0xa47/0x1200 [ 103.674100][ T4835] kthread+0x28d/0x320 [ 103.679733][ T4835] ret_from_fork+0x1f/0x30 [ 103.685719][ T4835] } [ 103.688216][ T4835] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 103.697273][ T4835] [ 103.697273][ T4835] the dependencies between the lock to be acquired [ 103.697285][ T4835] and HARDIRQ-irq-unsafe lock: [ 103.710826][ T4835] -> (tasklist_lock){.+.+}-{2:2} { [ 103.716135][ T4835] HARDIRQ-ON-R at: [ 103.720291][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.726816][ T4835] _raw_read_lock+0x32/0x40 [ 103.733367][ T4835] do_wait+0x2c6/0xb80 [ 103.739456][ T4835] kernel_wait+0xe5/0x230 [ 103.745808][ T4835] call_usermodehelper_exec_work+0xb5/0x220 [ 103.753740][ T4835] process_one_work+0x8a9/0x11d0 [ 103.760708][ T4835] worker_thread+0xa47/0x1200 [ 103.767411][ T4835] kthread+0x28d/0x320 [ 103.773495][ T4835] ret_from_fork+0x1f/0x30 [ 103.779939][ T4835] SOFTIRQ-ON-R at: [ 103.784100][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.790615][ T4835] _raw_read_lock+0x32/0x40 [ 103.797127][ T4835] do_wait+0x2c6/0xb80 [ 103.803206][ T4835] kernel_wait+0xe5/0x230 [ 103.809542][ T4835] call_usermodehelper_exec_work+0xb5/0x220 [ 103.817458][ T4835] process_one_work+0x8a9/0x11d0 [ 103.824421][ T4835] worker_thread+0xa47/0x1200 [ 103.831119][ T4835] kthread+0x28d/0x320 [ 103.837195][ T4835] ret_from_fork+0x1f/0x30 [ 103.843643][ T4835] INITIAL USE at: [ 103.847730][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.854176][ T4835] _raw_write_lock_irq+0xcf/0x110 [ 103.861125][ T4835] copy_process+0x24b6/0x4060 [ 103.867720][ T4835] kernel_clone+0x222/0x920 [ 103.874159][ T4835] user_mode_thread+0x12e/0x190 [ 103.880946][ T4835] rest_init+0x23/0x300 [ 103.887052][ T4835] start_kernel+0x0/0x53f [ 103.893316][ T4835] start_kernel+0x496/0x53f [ 103.899760][ T4835] secondary_startup_64_no_verify+0xcf/0xdb [ 103.907586][ T4835] INITIAL READ USE at: [ 103.912095][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.918959][ T4835] _raw_read_lock+0x32/0x40 [ 103.925819][ T4835] do_wait+0x2c6/0xb80 [ 103.932264][ T4835] kernel_wait+0xe5/0x230 [ 103.938969][ T4835] call_usermodehelper_exec_work+0xb5/0x220 [ 103.947341][ T4835] process_one_work+0x8a9/0x11d0 [ 103.954652][ T4835] worker_thread+0xa47/0x1200 [ 103.961697][ T4835] kthread+0x28d/0x320 [ 103.968116][ T4835] ret_from_fork+0x1f/0x30 [ 103.974889][ T4835] } [ 103.977561][ T4835] ... key at: [] tasklist_lock+0x18/0x40 [ 103.985465][ T4835] ... acquired at: [ 103.989438][ T4835] lock_acquire+0x1f8/0x5a0 [ 103.994124][ T4835] _raw_read_lock+0x32/0x40 [ 103.998812][ T4835] send_sigio+0xf8/0x360 [ 104.003236][ T4835] kill_fasync+0x232/0x4d0 [ 104.007838][ T4835] sock_wake_async+0x145/0x170 [ 104.012802][ T4835] sk_wake_async+0x17f/0x280 [ 104.017586][ T4835] __mptcp_close_ssk+0xc90/0xec0 [ 104.022708][ T4835] mptcp_destroy_common+0x11c/0x570 [ 104.028102][ T4835] mptcp_disconnect+0x15a/0x350 [ 104.033141][ T4835] inet_shutdown+0x242/0x370 [ 104.037943][ T4835] __se_sys_shutdown+0x147/0x1a0 [ 104.043062][ T4835] do_syscall_64+0x3b/0xb0 [ 104.047655][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.053738][ T4835] [ 104.056059][ T4835] -> (&f->f_owner.lock){....}-{2:2} { [ 104.061541][ T4835] INITIAL USE at: [ 104.065519][ T4835] lock_acquire+0x1f8/0x5a0 [ 104.071769][ T4835] _raw_write_lock_irq+0xcf/0x110 [ 104.078541][ T4835] __f_setown+0x38/0x350 [ 104.084574][ T4835] f_setown+0x144/0x1f0 [ 104.090477][ T4835] sock_ioctl+0x58d/0x770 [ 104.096554][ T4835] __se_sys_ioctl+0xf1/0x160 [ 104.102885][ T4835] do_syscall_64+0x3b/0xb0 [ 104.109043][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.116690][ T4835] INITIAL READ USE at: [ 104.121106][ T4835] lock_acquire+0x1f8/0x5a0 [ 104.127791][ T4835] _raw_read_lock_irqsave+0xd9/0x120 [ 104.135271][ T4835] send_sigio+0x2f/0x360 [ 104.141697][ T4835] kill_fasync+0x232/0x4d0 [ 104.148293][ T4835] sock_wake_async+0x145/0x170 [ 104.155245][ T4835] sk_wake_async+0x17f/0x280 [ 104.162018][ T4835] __mptcp_close_ssk+0xc90/0xec0 [ 104.169135][ T4835] mptcp_destroy_common+0x11c/0x570 [ 104.176510][ T4835] mptcp_disconnect+0x15a/0x350 [ 104.183541][ T4835] inet_shutdown+0x242/0x370 [ 104.190313][ T4835] __se_sys_shutdown+0x147/0x1a0 [ 104.197432][ T4835] do_syscall_64+0x3b/0xb0 [ 104.204023][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.212100][ T4835] } [ 104.214698][ T4835] ... key at: [] __alloc_file.__key+0x0/0x10 [ 104.223301][ T4835] ... acquired at: [ 104.227274][ T4835] lock_acquire+0x1f8/0x5a0 [ 104.231964][ T4835] _raw_read_lock_irqsave+0xd9/0x120 [ 104.237432][ T4835] send_sigio+0x2f/0x360 [ 104.241860][ T4835] kill_fasync+0x232/0x4d0 [ 104.246460][ T4835] sock_wake_async+0x145/0x170 [ 104.251405][ T4835] sk_wake_async+0x17f/0x280 [ 104.256188][ T4835] __mptcp_close_ssk+0xc90/0xec0 [ 104.261315][ T4835] mptcp_destroy_common+0x11c/0x570 [ 104.266691][ T4835] mptcp_disconnect+0x15a/0x350 [ 104.271727][ T4835] inet_shutdown+0x242/0x370 [ 104.276585][ T4835] __se_sys_shutdown+0x147/0x1a0 [ 104.281714][ T4835] do_syscall_64+0x3b/0xb0 [ 104.286304][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.292383][ T4835] [ 104.294704][ T4835] -> (&new->fa_lock){....}-{2:2} { [ 104.299838][ T4835] INITIAL USE at: [ 104.303729][ T4835] lock_acquire+0x1f8/0x5a0 [ 104.309805][ T4835] _raw_write_lock_irq+0xcf/0x110 [ 104.316423][ T4835] fasync_remove_entry+0xfb/0x1d0 [ 104.323025][ T4835] sock_fasync+0x86/0xf0 [ 104.328835][ T4835] __fput+0x75e/0x8d0 [ 104.334387][ T4835] task_work_run+0x246/0x300 [ 104.340547][ T4835] exit_to_user_mode_loop+0xde/0x100 [ 104.347396][ T4835] exit_to_user_mode_prepare+0xb1/0x140 [ 104.354509][ T4835] syscall_exit_to_user_mode+0x60/0x270 [ 104.361629][ T4835] do_syscall_64+0x47/0xb0 [ 104.367609][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.375079][ T4835] INITIAL READ USE at: [ 104.379408][ T4835] lock_acquire+0x1f8/0x5a0 [ 104.385918][ T4835] _raw_read_lock_irqsave+0xd9/0x120 [ 104.393216][ T4835] kill_fasync+0x196/0x4d0 [ 104.399638][ T4835] sock_wake_async+0x145/0x170 [ 104.406407][ T4835] sk_wake_async+0x17f/0x280 [ 104.413003][ T4835] __mptcp_close_ssk+0xc90/0xec0 [ 104.419949][ T4835] mptcp_destroy_common+0x11c/0x570 [ 104.427153][ T4835] mptcp_disconnect+0x15a/0x350 [ 104.434010][ T4835] inet_shutdown+0x242/0x370 [ 104.440610][ T4835] __se_sys_shutdown+0x147/0x1a0 [ 104.447558][ T4835] do_syscall_64+0x3b/0xb0 [ 104.453983][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.461895][ T4835] } [ 104.464418][ T4835] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 104.473097][ T4835] ... acquired at: [ 104.476898][ T4835] lock_acquire+0x1f8/0x5a0 [ 104.481584][ T4835] _raw_read_lock_irqsave+0xd9/0x120 [ 104.487054][ T4835] kill_fasync+0x196/0x4d0 [ 104.491654][ T4835] mousedev_notify_readers+0x719/0xc80 [ 104.497295][ T4835] mousedev_event+0x554/0x1260 [ 104.502239][ T4835] input_pass_values+0x9ee/0x12a0 [ 104.507440][ T4835] input_event_dispose+0x366/0x650 [ 104.512734][ T4835] input_handle_event+0x97d/0xb00 [ 104.517943][ T4835] input_inject_event+0x224/0x330 [ 104.523154][ T4835] evdev_write+0x668/0x7c0 [ 104.527753][ T4835] vfs_write+0x2d9/0xbc0 [ 104.532169][ T4835] ksys_write+0x19c/0x2c0 [ 104.536677][ T4835] do_syscall_64+0x3b/0xb0 [ 104.541266][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.547344][ T4835] [ 104.549667][ T4835] [ 104.549667][ T4835] stack backtrace: [ 104.555563][ T4835] CPU: 1 PID: 4835 Comm: syz.0.149 Not tainted 6.1.128-syzkaller #0 [ 104.563540][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.573603][ T4835] Call Trace: [ 104.576887][ T4835] [ 104.579823][ T4835] dump_stack_lvl+0x1e3/0x2cb [ 104.584509][ T4835] ? nf_tcp_handle_invalid+0x642/0x642 [ 104.589987][ T4835] ? panic+0x764/0x764 [ 104.594073][ T4835] ? print_shortest_lock_dependencies+0xee/0x150 [ 104.600423][ T4835] validate_chain+0x4d16/0x5950 [ 104.605291][ T4835] ? reacquire_held_locks+0x660/0x660 [ 104.610672][ T4835] ? register_lock_class+0x100/0x990 [ 104.615973][ T4835] ? is_dynamic_key+0x260/0x260 [ 104.620836][ T4835] ? mark_lock+0x9a/0x340 [ 104.625179][ T4835] __lock_acquire+0x125b/0x1f80 [ 104.630049][ T4835] lock_acquire+0x1f8/0x5a0 [ 104.634563][ T4835] ? kill_fasync+0x196/0x4d0 [ 104.639172][ T4835] ? read_lock_is_recursive+0x10/0x10 [ 104.644556][ T4835] ? read_lock_is_recursive+0x10/0x10 [ 104.649956][ T4835] _raw_read_lock_irqsave+0xd9/0x120 [ 104.655278][ T4835] ? kill_fasync+0x196/0x4d0 [ 104.659954][ T4835] ? _raw_read_lock+0x40/0x40 [ 104.664658][ T4835] kill_fasync+0x196/0x4d0 [ 104.669102][ T4835] ? kill_fasync+0x51/0x4d0 [ 104.673625][ T4835] mousedev_notify_readers+0x719/0xc80 [ 104.679102][ T4835] ? mousedev_notify_readers+0x2a/0xc80 [ 104.684662][ T4835] mousedev_event+0x554/0x1260 [ 104.689438][ T4835] ? mousedev_packet+0x9f0/0x9f0 [ 104.694382][ T4835] input_pass_values+0x9ee/0x12a0 [ 104.699415][ T4835] ? input_pass_values+0xa3/0x12a0 [ 104.704533][ T4835] input_event_dispose+0x366/0x650 [ 104.709658][ T4835] input_handle_event+0x97d/0xb00 [ 104.714696][ T4835] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 104.720166][ T4835] ? userio_device_write+0x1f0/0x1f0 [ 104.725487][ T4835] input_inject_event+0x224/0x330 [ 104.730551][ T4835] ? input_inject_event+0xd1/0x330 [ 104.735689][ T4835] evdev_write+0x668/0x7c0 [ 104.740124][ T4835] ? evdev_read+0xe00/0xe00 [ 104.744633][ T4835] ? end_current_label_crit_section+0x147/0x170 [ 104.750885][ T4835] ? common_file_perm+0x17d/0x1d0 [ 104.755921][ T4835] ? fsnotify_perm+0x64/0x590 [ 104.760600][ T4835] ? security_file_permission+0x75/0xa0 [ 104.766148][ T4835] ? evdev_read+0xe00/0xe00 [ 104.770661][ T4835] vfs_write+0x2d9/0xbc0 [ 104.774913][ T4835] ? file_end_write+0x250/0x250 [ 104.779772][ T4835] ? __fget_files+0x28/0x4a0 [ 104.784368][ T4835] ? __fget_files+0x435/0x4a0 [ 104.789055][ T4835] ? __fget_files+0x28/0x4a0 [ 104.793654][ T4835] ? __fdget_pos+0x1db/0x360 [ 104.798246][ T4835] ? ksys_write+0x77/0x2c0 [ 104.802667][ T4835] ksys_write+0x19c/0x2c0 [ 104.807003][ T4835] ? print_irqtrace_events+0x210/0x210 [ 104.812476][ T4835] ? __ia32_sys_read+0x80/0x80 [ 104.817246][ T4835] ? syscall_enter_from_user_mode+0x2e/0x230 [ 104.823235][ T4835] ? lockdep_hardirqs_on+0x94/0x130 [ 104.828449][ T4835] ? syscall_enter_from_user_mode+0x2e/0x230 [ 104.834456][ T4835] do_syscall_64+0x3b/0xb0 [ 104.838882][ T4835] ? clear_bhb_loop+0x45/0xa0 [ 104.843598][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.849522][ T4835] RIP: 0033:0x7f77f8d8cde9 [ 104.853979][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.873610][ T4835] RSP: 002b:00007f77f9bbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.882035][ T4835] RAX: ffffffffffffffda RBX: 00007f77f8fa5fa0 RCX: 00007f77f8d8cde9 [ 104.890018][ T4835] RDX: 0000000000000918 RSI: 0000400000000040 RDI: 0000000000000004 [ 104.897993][ T4835] RBP: 00007f77f8e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.905977][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.913958][ T4835] R13: 0000000000000000 R14: 00007f77f8fa5fa0 R15: 00007ffd6cd00dc8 [ 104.921941][ T4835] [ 104.947079][ T4267] ocfs2: Unmounting device (7,3) on (node local) [ 105.035392][ T4788] usb 2-1: Using ep0 maxpacket: 8 [ 105.044153][ T4788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 105.073781][ T4788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.085807][ T1169] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.113319][ T4788] usb 2-1: Product: syz [ 105.124735][ T4788] usb 2-1: Manufacturer: syz [ 105.139827][ T4788] usb 2-1: SerialNumber: syz [ 105.161304][ T4788] usb 2-1: config 0 descriptor?? [ 105.261734][ T4788] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 105.279978][ T1169] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 105.281313][ T4788] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 105.295418][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 105.338315][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 105.352848][ T4788] usb 2-1: USB disconnect, device number 2 [ 105.376576][ T1169] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.421984][ T1169] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.453410][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.487294][ T1169] usb 3-1: config 0 descriptor?? [ 105.500342][ T4838] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.938085][ T1169] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 105.947196][ T1169] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 105.962907][ T1169] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 106.219290][ T4474] usb 3-1: USB disconnect, device number 4