last executing test programs: 1m44.02042748s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0xe7) 1m43.226616736s ago: executing program 3 (id=9): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.257847903s ago: executing program 3 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f0000000180)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x129100, 0x3) 1m40.246937881s ago: executing program 3 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd27, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0) 1m39.589353687s ago: executing program 3 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f00000001c0)={0x50, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1m39.20880798s ago: executing program 32 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f00000001c0)={0x50, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) 10.303972392s ago: executing program 5 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$inet6(0xa, 0x6, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r2}, 0x20) ppoll(&(0x7f0000000240)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40090) socket$can_bcm(0x1d, 0x2, 0x2) 7.230219388s ago: executing program 1 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(r3, 0x80) utime(0x0, 0x0) dup3(r4, r3, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f}) 7.101816019s ago: executing program 2 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002840)={@val={0x8, 0x8864}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) 7.085338829s ago: executing program 5 (id=363): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 5.968541859s ago: executing program 1 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) 5.913720649s ago: executing program 0 (id=365): r0 = userfaultfd(0x80001) r1 = fanotify_init(0x0, 0x40000) fanotify_mark(r1, 0x445, 0x1011, r0, 0x0) r2 = userfaultfd(0x1) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 5.726402611s ago: executing program 5 (id=366): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64760e7ac0bdecc465d6bdb5f172325940329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614c"], 0x2, 0x2bc, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 5.726165341s ago: executing program 2 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 5.711007821s ago: executing program 0 (id=368): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.692226551s ago: executing program 1 (id=369): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x2800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 5.432064483s ago: executing program 0 (id=371): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40000000) 5.291649524s ago: executing program 1 (id=372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r5, &(0x7f0000000180), 0x0, 0x5fae, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x0, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x9, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x10000, 0xf1}, {0x5, 0x56}, 0xea5}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x218, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0x6, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@cpu={{0x28}, {0xfff, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9d}}}, {{@ip={@multicast2, @rand_addr=0x64010104, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9f7ffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) 5.193197165s ago: executing program 2 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(r3, 0x80) utime(0x0, 0x0) dup3(r4, r3, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f}) 4.998313037s ago: executing program 0 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(r3, 0x80) utime(0x0, 0x0) dup3(r4, r3, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f}) 2.380833499s ago: executing program 2 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)={0x44, r1, 0x203, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000}, 0x810) 2.169453241s ago: executing program 5 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x101005, @remote, 0x7}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000040)="5f8ac0b43b8a578fb4c42480dd12061539b9", 0x12}, {&(0x7f0000000080)="a6733686dbdb5ebe409c77e840bcab630872ec8f5fb022f875bd0bcfc9703b2b070e849d308d195846d3f27038d340177d6b1156c5da2d647f6bbad3918b78244657c568665c955fe935b0c549fbf131093ca92f7e5d003e42e96babb556d3e880d8434de16235f095253e82451e77b2d11f2abd3154662c6a89cd7a", 0x7c}, {&(0x7f0000000100)="a79ca6193f3c9b2929b76ad9ae3fe870024839a6ce4d24e6a61464e53131a80e607b5a96def0e24c62d405f4752b90e19c77389e84", 0x35}, {&(0x7f0000000180)="7149ea", 0x3}, {&(0x7f0000000600)="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", 0x42b}], 0x5, &(0x7f0000001840)=ANY=[], 0x70}}], 0x1, 0x40000c0) 1.383846217s ago: executing program 0 (id=378): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000300)={0x30, r1, 0xd1d, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xf1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 1.229986949s ago: executing program 2 (id=379): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'veth1_virt_wifi\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x200, @local, 'wg2\x00'}}) 1.229424949s ago: executing program 4 (id=380): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 1.215953999s ago: executing program 1 (id=381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000400)="06", 0x1}, {0x0}], 0x2}}], 0x2a0, 0x20004840) 1.11409721s ago: executing program 0 (id=382): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 950.434601ms ago: executing program 5 (id=383): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) 950.272781ms ago: executing program 2 (id=384): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 895.678572ms ago: executing program 4 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003a00)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 820.971452ms ago: executing program 1 (id=386): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2008412, &(0x7f00000001c0)=ANY=[], 0x1, 0x556e, &(0x7f0000005a80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x10003, &(0x7f0000000200)=ANY=[]) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', 0x0, 0x0) 720.418783ms ago: executing program 4 (id=387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x1c, r3, 0x98ab6252ea2eedd7, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) 578.422105ms ago: executing program 5 (id=388): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x9, {0x9, 0x21, "32a70bf12da40a"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xe, 0x2, {0x2, 0x11}}, 0x0}, 0x0) 487.409405ms ago: executing program 4 (id=389): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 214.383858ms ago: executing program 4 (id=390): mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) 0s ago: executing program 4 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="110000", 0x3}, {&(0x7f0000000a80)='h?\x00W', 0x4}], 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 74.410291][ T4262] cgroup: Unknown subsys name 'net' [ 74.512682][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.037089][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.599514][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.607710][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.616802][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.624932][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.625032][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.632805][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.639809][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.646829][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.661598][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.667511][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.670717][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.676891][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.690538][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.691630][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.698912][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.705541][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.712412][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.726201][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.726859][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.741246][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.741775][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.765010][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.777577][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.785516][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.789327][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.801926][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.823289][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.831865][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.845062][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.852526][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.179652][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.227687][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 78.366523][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.374422][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.383223][ T4286] device bridge_slave_0 entered promiscuous mode [ 78.392318][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 78.413101][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.420748][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.429300][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.438091][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.445631][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.453759][ T4286] device bridge_slave_1 entered promiscuous mode [ 78.472792][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.481815][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.490349][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.505704][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 78.548738][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 78.582035][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.593722][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.612620][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.634255][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.718498][ T4275] team0: Port device team_slave_0 added [ 78.727150][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.736090][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.743904][ T4277] device bridge_slave_0 entered promiscuous mode [ 78.761456][ T4286] team0: Port device team_slave_0 added [ 78.774683][ T4275] team0: Port device team_slave_1 added [ 78.781074][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.788479][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.796940][ T4277] device bridge_slave_1 entered promiscuous mode [ 78.820076][ T4286] team0: Port device team_slave_1 added [ 78.855936][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.863153][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.871601][ T4276] device bridge_slave_0 entered promiscuous mode [ 78.894710][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.901712][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.928681][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.942372][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.954355][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.964215][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.972258][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.980460][ T4276] device bridge_slave_1 entered promiscuous mode [ 78.993726][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.002758][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.011208][ T4282] device bridge_slave_0 entered promiscuous mode [ 79.019598][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.027122][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.053777][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.086176][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.093198][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.120664][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.141687][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.149184][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.157594][ T4282] device bridge_slave_1 entered promiscuous mode [ 79.194819][ T4277] team0: Port device team_slave_0 added [ 79.201576][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.209384][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.236127][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.253911][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.279685][ T4277] team0: Port device team_slave_1 added [ 79.298379][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.313147][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.344394][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.372352][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.380095][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.389658][ T4276] team0: Port device team_slave_0 added [ 79.409144][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.416588][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.443235][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.465607][ T4276] team0: Port device team_slave_1 added [ 79.473242][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.480384][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.507258][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.562610][ T4286] device hsr_slave_0 entered promiscuous mode [ 79.570135][ T4286] device hsr_slave_1 entered promiscuous mode [ 79.577061][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.585758][ T4286] Cannot create hsr debugfs directory [ 79.601493][ T4282] team0: Port device team_slave_0 added [ 79.618976][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.626313][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.653332][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.682735][ T4282] team0: Port device team_slave_1 added [ 79.699587][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.706693][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.733441][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.753520][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.760721][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.767814][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 79.772790][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 79.781813][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.789541][ T4277] Cannot create hsr debugfs directory [ 79.844670][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 79.850925][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 79.862362][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.869597][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.895851][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.910826][ T4276] device hsr_slave_0 entered promiscuous mode [ 79.921268][ T4276] device hsr_slave_1 entered promiscuous mode [ 79.927960][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.934786][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 79.935978][ T4276] Cannot create hsr debugfs directory [ 79.977388][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.984476][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.015043][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.172735][ T4282] device hsr_slave_0 entered promiscuous mode [ 80.179839][ T4282] device hsr_slave_1 entered promiscuous mode [ 80.188844][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.196816][ T4282] Cannot create hsr debugfs directory [ 80.324754][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.361529][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.371762][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.398031][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.441350][ T4286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.453023][ T4286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.468261][ T4286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.499123][ T4286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.611436][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.656016][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.667997][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.679662][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.696937][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.731155][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.740537][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.757330][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.776370][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.786967][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.834428][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.844180][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.873313][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.903595][ T4282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.921555][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.932847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.944320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.952980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.963926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.973926][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.981285][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.990430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.001139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.010016][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.017241][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.038938][ T4282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.053144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.065145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.082639][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.106490][ T4282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.120521][ T4282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.131662][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.141353][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.151238][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.158534][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.167446][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.176960][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.185900][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.194400][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.201615][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.209863][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.239418][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.250207][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.264352][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.275017][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.284036][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.294260][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.304096][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.327672][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.361229][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.381846][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.392120][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.402593][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.411486][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.420340][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.429453][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.439367][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.448991][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.479441][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.490720][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.509890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.519894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.530475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.542090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.552155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.562353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.572234][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.579831][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.592157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.601430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.614121][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.621734][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.631914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.641399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.650567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.658793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.675156][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.695810][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.779106][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.794396][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.817147][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.845377][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 81.851461][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 81.858509][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.874671][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.883611][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.893308][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.902519][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.911905][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.925337][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 81.931682][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 81.964043][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.982005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.993070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.005449][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 82.016309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.024078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.065804][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.075540][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.105689][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.124858][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.132016][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.171652][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.199863][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.222950][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.240918][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.248327][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.290678][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.327589][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.355005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.404473][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.413750][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.431198][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.440533][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.450154][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.459559][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.467761][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.476143][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.484649][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.498854][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.507653][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.516496][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.531868][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.548367][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.568604][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.581100][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.590783][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.607146][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.621062][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.633725][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.640993][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.650551][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.671684][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.704927][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.713826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.738227][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.745471][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.775763][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.783627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.806221][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.825541][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.876454][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.895646][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.914968][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.936162][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.945878][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.960079][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.970574][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.978608][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.011877][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.037463][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.066106][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.075110][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.095421][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.122695][ T4286] device veth0_vlan entered promiscuous mode [ 83.137364][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.153967][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.191158][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.200334][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.229054][ T4286] device veth1_vlan entered promiscuous mode [ 83.263995][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.275443][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.295872][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.307753][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.321309][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.371563][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.383836][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.397421][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.415587][ T4276] device veth0_vlan entered promiscuous mode [ 83.441793][ T4286] device veth0_macvtap entered promiscuous mode [ 83.474364][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.489485][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.501057][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.511210][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.546116][ T4276] device veth1_vlan entered promiscuous mode [ 83.557791][ T4286] device veth1_macvtap entered promiscuous mode [ 83.579889][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.589879][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.616663][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.624250][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.640038][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.671314][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.691561][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.708638][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.737657][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.753708][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.769350][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.783714][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.800869][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.810257][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.820860][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.832923][ T4286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.842622][ T4286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.853495][ T4286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.862613][ T4286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.924819][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 83.926679][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 83.945850][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.955026][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.963589][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.972882][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.982227][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.990441][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.999184][ T4276] device veth0_macvtap entered promiscuous mode [ 84.005776][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 84.009812][ T4276] device veth1_macvtap entered promiscuous mode [ 84.015248][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 84.033880][ T4277] device veth0_vlan entered promiscuous mode [ 84.066854][ T4275] device veth0_vlan entered promiscuous mode [ 84.078448][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.086050][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 84.094189][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.102941][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.111480][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.120158][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.130070][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.138078][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.146847][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.167233][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.186244][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.201367][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.214016][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.231424][ T4277] device veth1_vlan entered promiscuous mode [ 84.246033][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.254308][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.263815][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.278584][ T4275] device veth1_vlan entered promiscuous mode [ 84.295490][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.306380][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.319609][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.363246][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.372125][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.380830][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.389875][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.398914][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.409169][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.419895][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.458920][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.468092][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.480394][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.494770][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.515003][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.523861][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.533439][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.542515][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.551506][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.560195][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.579708][ T4282] device veth0_vlan entered promiscuous mode [ 84.585013][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.596934][ T4277] device veth0_macvtap entered promiscuous mode [ 84.607507][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.620537][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.631896][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.640791][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.649969][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.668913][ T4277] device veth1_macvtap entered promiscuous mode [ 84.682830][ T4275] device veth0_macvtap entered promiscuous mode [ 84.719111][ T4275] device veth1_macvtap entered promiscuous mode [ 84.729393][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.750405][ T4282] device veth1_vlan entered promiscuous mode [ 84.756635][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.764475][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.778028][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.788439][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.798169][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.806768][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.825935][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.836671][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.847590][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.858608][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.870018][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.900103][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.911607][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.921876][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.932496][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.942702][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.954465][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.968986][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.982522][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.991867][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.007707][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.017973][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.028575][ T2919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.056921][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.072294][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.083482][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.094393][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.107533][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.118191][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.133255][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.143990][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.155088][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.165314][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.175853][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.188848][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.209785][ T4282] device veth0_macvtap entered promiscuous mode [ 85.220905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.252402][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.263599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.273458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.284270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.294147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.311683][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.322008][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.332658][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.342471][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.357261][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.367315][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.376263][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.386544][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.403408][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.432676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.482045][ T4282] device veth1_macvtap entered promiscuous mode [ 85.488657][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.497313][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.546456][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.611613][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.613599][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.626093][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.654853][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.664966][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.675717][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.686585][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.697696][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.716389][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.733844][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.750055][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.795205][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.810048][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.819344][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.831473][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.856171][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.867103][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.877840][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.888705][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.901178][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.911781][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.923405][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.936113][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.978832][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.994256][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.005054][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 86.015388][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 86.065562][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.082132][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.088446][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.098978][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 86.098988][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 86.106107][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.120538][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.129493][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.148408][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.162897][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.171403][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 86.195227][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.205794][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.228755][ T4371] loop3: detected capacity change from 0 to 1024 [ 86.247488][ T4371] EXT4-fs: Ignoring removed bh option [ 86.253449][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.281411][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.306681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.330683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.345007][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.357946][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.372436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.403121][ T4371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.424475][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.435680][ T126] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 86.445054][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.459860][ T126] usb 3-1: config 0 descriptor?? [ 86.475016][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 86.503660][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.518010][ T4371] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.586244][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.629739][ T4379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.631888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.748843][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.862282][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.877662][ T126] pwc: recv_control_msg error -32 req 02 val 2b00 [ 86.886776][ T7] cfg80211: failed to load regulatory.db [ 86.911839][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 86.943891][ T4379] xt_hashlimit: size too large, truncated to 1048576 [ 86.952486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.976885][ T4379] xt_hashlimit: invalid rate [ 87.107943][ T126] pwc: recv_control_msg error -71 req 02 val 2c00 [ 87.134705][ T126] pwc: recv_control_msg error -71 req 04 val 1000 [ 87.161410][ T126] pwc: recv_control_msg error -71 req 04 val 1300 [ 87.168277][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.187345][ T126] pwc: recv_control_msg error -71 req 04 val 1400 [ 87.201128][ T126] pwc: recv_control_msg error -71 req 02 val 2000 [ 87.229091][ T126] pwc: recv_control_msg error -71 req 02 val 2100 [ 87.265606][ T126] pwc: recv_control_msg error -71 req 04 val 1500 [ 87.429441][ T4318] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.441169][ T126] pwc: recv_control_msg error -71 req 02 val 2500 [ 87.448575][ T4318] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.459058][ T4318] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.468557][ T126] pwc: recv_control_msg error -71 req 02 val 2400 [ 87.475185][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.483670][ T126] pwc: recv_control_msg error -71 req 02 val 2600 [ 87.555795][ T126] pwc: recv_control_msg error -71 req 02 val 2900 [ 87.564787][ T4385] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 87.595851][ T126] pwc: recv_control_msg error -71 req 02 val 2800 [ 87.622640][ T126] pwc: recv_control_msg error -71 req 04 val 1100 [ 87.657173][ T126] pwc: recv_control_msg error -71 req 04 val 1200 [ 87.710352][ T126] pwc: Registered as video103. [ 87.751902][ T126] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 87.825711][ T126] usb 3-1: USB disconnect, device number 2 [ 87.910869][ T22] usb 5-1: USB disconnect, device number 2 [ 88.307723][ T4401] udevd[4401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.925932][ T4420] loop4: detected capacity change from 0 to 4096 [ 89.091775][ T4427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.099740][ T4426] loop3: detected capacity change from 0 to 1024 [ 89.230937][ T4426] hfsplus: invalid length 32517 has been corrected to 255 [ 89.364008][ T4429] loop1: detected capacity change from 0 to 4096 [ 89.809779][ T4277] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 89.845210][ T4277] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.858934][ T4276] hfsplus: invalid length 32517 has been corrected to 255 [ 89.923423][ T4435] syz.3.19 (4435) used greatest stack depth: 20792 bytes left [ 89.935998][ T4276] hfsplus: invalid length 32517 has been corrected to 255 [ 89.995457][ T4324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.217628][ T4324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.258350][ T4324] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.285057][ T4324] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.333241][ T4324] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 90.346265][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 90.363474][ T4324] usb 3-1: Product: syz [ 90.374014][ T4456] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 90.388234][ T4324] usb 3-1: Manufacturer: syz [ 90.393023][ T4324] usb 3-1: SerialNumber: syz [ 90.400267][ T56] hfsplus: b-tree write err: -5, ino 4 [ 90.422906][ T56] hfsplus: b-tree write err: -5, ino 2 [ 90.440097][ T56] hfsplus: b-tree write err: -5, ino 20 [ 90.588279][ T4347] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.647187][ T4324] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 90.675259][ T4461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.36'. [ 90.768890][ T4347] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.862184][ T4347] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.888262][ T4320] usb 3-1: USB disconnect, device number 3 [ 90.927782][ T4320] usblp0: removed [ 90.981589][ T4347] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.084681][ T4322] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.154184][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.173995][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.183747][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.199522][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.208602][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.230946][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.286905][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.308483][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.323592][ T4322] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 92.334375][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.346903][ T4322] usb 1-1: config 0 descriptor?? [ 92.786418][ T4322] hid (null): nested delimiters [ 92.801034][ T4322] wacom 0003:056A:030C.0001: nested delimiters [ 92.818741][ T4322] wacom 0003:056A:030C.0001: item 0 1 2 10 parsing failed [ 92.835762][ T4322] wacom 0003:056A:030C.0001: parse failed [ 92.841771][ T4322] wacom: probe of 0003:056A:030C.0001 failed with error -22 [ 92.996249][ T4318] usb 1-1: USB disconnect, device number 2 [ 93.072822][ T4518] loop4: detected capacity change from 0 to 512 [ 93.081475][ T4518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.114254][ T4518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.235054][ T4518] EXT4-fs (loop4): 1 truncate cleaned up [ 93.240893][ T4518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.073821][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 94.239988][ T4494] chnl_net:caif_netlink_parms(): no params data found [ 94.306137][ T4538] capability: warning: `syz.1.56' uses 32-bit capabilities (legacy support in use) [ 94.324806][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 94.326778][ T4538] program syz.1.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.898865][ T4347] device hsr_slave_0 left promiscuous mode [ 94.907621][ T4347] device hsr_slave_1 left promiscuous mode [ 94.925302][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.942478][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.996918][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.004482][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.041827][ T4347] device bridge_slave_1 left promiscuous mode [ 95.076555][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.101535][ T4347] device bridge_slave_0 left promiscuous mode [ 95.116255][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.193840][ T4567] kvm [4564]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 95.244844][ T4347] device veth1_macvtap left promiscuous mode [ 95.255314][ T4347] device veth0_macvtap left promiscuous mode [ 95.267683][ T4347] device veth1_vlan left promiscuous mode [ 95.278648][ T4347] device veth0_vlan left promiscuous mode [ 96.404708][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 96.527161][ T4587] capability: warning: `syz.0.67' uses deprecated v2 capabilities in a way that may be insecure [ 96.938769][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 96.979372][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 97.018450][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.056167][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.348870][ T4347] bond0 (unregistering): Released all slaves [ 97.540624][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.574254][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.645809][ T4494] device bridge_slave_0 entered promiscuous mode [ 97.657908][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.695724][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.720520][ T4494] device bridge_slave_1 entered promiscuous mode [ 98.484655][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 99.789593][ T4494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.104341][ T4494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.564627][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 100.982436][ T4494] team0: Port device team_slave_0 added [ 101.314933][ T4322] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.421474][ T4494] team0: Port device team_slave_1 added [ 102.584650][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 102.619008][ T4322] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 102.855936][ T4322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.012466][ T4322] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 103.228959][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.561819][ T4322] usb 1-1: config 0 descriptor?? [ 103.603321][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.756283][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.035374][ T4494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.093870][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.125122][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.247385][ T4494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.398217][ T4494] device hsr_slave_0 entered promiscuous mode [ 104.436254][ T4494] device hsr_slave_1 entered promiscuous mode [ 104.445489][ T4494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.453151][ T4494] Cannot create hsr debugfs directory [ 104.518334][ T4322] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 104.547254][ T4322] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 104.563432][ T4322] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 104.588588][ T4322] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 104.609393][ T4322] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 104.673564][ T4322] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 104.935701][ T4494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.941348][ T4652] loop2: detected capacity change from 0 to 4096 [ 104.965856][ T4494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.010755][ T4494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.045280][ T4322] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-110) [ 105.064715][ T4652] ntfs: volume version 3.1. [ 105.072599][ T4322] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -110 [ 105.112608][ T4494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.145190][ T4322] usb 1-1: USB disconnect, device number 3 [ 105.339864][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 105.835202][ T4494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.959946][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.974009][ T4661] fido_id[4661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 106.110134][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.176380][ T4494] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.252386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.314859][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.347197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.380786][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.393276][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.422952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.462888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.464725][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.516805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.530278][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 106.545788][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 106.733413][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 106.751717][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.759688][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.928483][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.015807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.029678][ T7] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 107.148684][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.329186][ T7] usb 2-1: config 0 descriptor?? [ 107.983191][ T7] hid (null): unknown global tag 0xe [ 107.999989][ T7] hid (null): unknown global tag 0xe [ 108.068293][ T7] hid (null): unknown global tag 0x63 [ 108.126653][ T7] hid (null): unknown global tag 0xe [ 108.144672][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 108.176724][ T7] hid (null): global environment stack underflow [ 108.280494][ T7] hid (null): unknown global tag 0xc [ 108.380055][ T7] hid (null): unknown global tag 0xe4 [ 108.461114][ T7] hid (null): unknown global tag 0x52 [ 108.509400][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.575567][ T7] hid (null): unknown global tag 0xe [ 108.636734][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.676274][ T7] hid (null): invalid report_size 222345300 [ 108.792640][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.980980][ T7] usb 2-1: USB disconnect, device number 2 [ 108.999499][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.153425][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.374313][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.521689][ T126] usb 5-1: unable to read config index 0 descriptor/all [ 109.531279][ T126] usb 5-1: can't read configurations, error -71 [ 109.582193][ T4494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.669913][ T4494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.738733][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.775746][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.820567][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.847130][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.901510][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.458726][ T4721] sched: RT throttling activated [ 111.704588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 112.184539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 112.194531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 113.169036][ T4321] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.327069][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.342396][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.376859][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.400918][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.411447][ T4321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.412178][ T4741] loop0: detected capacity change from 0 to 2048 [ 113.436017][ T4321] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.494619][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.538627][ T4321] usb 3-1: SerialNumber: syz [ 113.596241][ T4741] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.672767][ T26] audit: type=1800 audit(1777945440.773:2): pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.105" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 113.737481][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 113.827380][ T4757] futex_wake_op: syz.4.108 tries to shift op by 144; fix this program [ 114.664539][ T4321] usb 3-1: 0:2 : does not exist [ 114.755741][ T4321] usb 3-1: USB disconnect, device number 4 [ 115.050394][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.554640][ T4324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.603915][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.638816][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.734319][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.743732][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.744949][ T4324] usb 2-1: Using ep0 maxpacket: 8 [ 115.754775][ T4494] device veth0_vlan entered promiscuous mode [ 115.765378][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.774188][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.790647][ T4494] device veth1_vlan entered promiscuous mode [ 115.804360][ T4324] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 115.834281][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.854417][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.864557][ T4324] usb 2-1: Product: syz [ 115.868908][ T4324] usb 2-1: Manufacturer: syz [ 115.873644][ T4324] usb 2-1: SerialNumber: syz [ 115.880866][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.905415][ T4324] usb 2-1: config 0 descriptor?? [ 115.933542][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.941284][ T4324] gspca_main: sq930x-2.14.0 probing 2770:930c [ 115.973139][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.011844][ T4494] device veth0_macvtap entered promiscuous mode [ 116.032348][ T4494] device veth1_macvtap entered promiscuous mode [ 116.072647][ T4803] loop0: detected capacity change from 0 to 512 [ 116.091048][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.109733][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.130316][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.160410][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.190591][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.221926][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.231921][ T4803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.274693][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.285472][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.297455][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.309970][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.321334][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.332838][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.343971][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.354959][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.365966][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.375959][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.386638][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.398268][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.409528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.427796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.442867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.513044][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 116.515943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.536963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.546600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.584427][ T4494] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.593889][ T4494] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.614642][ T4324] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 116.633362][ T4324] sq930x: probe of 2-1:0.0 failed with error -71 [ 116.655461][ T4324] usb 2-1: USB disconnect, device number 3 [ 116.670387][ T4494] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.691222][ T4494] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.809412][ T4816] futex_wake_op: syz.4.121 tries to shift op by 144; fix this program [ 117.690782][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 117.697241][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.877585][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.894602][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.922954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.990011][ T4691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.018492][ T4691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.075978][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.224637][ T4320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.384745][ T4834] xt_hashlimit: size too large, truncated to 1048576 [ 118.429947][ T4834] xt_hashlimit: invalid rate [ 118.714895][ T4325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.914751][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 118.930605][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.985756][ T4325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.119057][ T4325] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.189412][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.330661][ T4325] usb 3-1: config 0 descriptor?? [ 119.804566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 119.984597][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 119.992192][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 120.051274][ T4325] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 120.058128][ T4320] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.076077][ T4325] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 120.094599][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.130327][ T4325] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 120.136944][ T4320] usb 2-1: Product: syz [ 120.152343][ T4325] microsoft 0003:045E:07DA.0004: no inputs found [ 120.189579][ T4320] usb 2-1: Manufacturer: syz [ 120.190073][ T4325] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 120.194423][ T4320] usb 2-1: SerialNumber: syz [ 120.269832][ T4320] usb 2-1: config 0 descriptor?? [ 120.278562][ T4851] loop4: detected capacity change from 0 to 4096 [ 120.301880][ T4320] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 120.335467][ T4851] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 120.373672][ T4320] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 120.380232][ T4851] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 120.402025][ T4329] usb 3-1: USB disconnect, device number 5 [ 120.444153][ T4851] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 120.510376][ T4851] ntfs: volume version 3.1. [ 120.563812][ T4856] fido_id[4856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 120.631425][ T4851] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 120.704938][ T4867] futex_wake_op: syz.0.133 tries to shift op by 144; fix this program [ 120.970409][ T4851] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 121.586025][ T4320] em28xx 2-1:0.0: chip ID is em2874 [ 121.673842][ T4275] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 121.861616][ T4320] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 121.914114][ T4320] em28xx 2-1:0.0: board has no eeprom [ 122.304707][ T4320] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 122.388173][ T4320] em28xx 2-1:0.0: dvb set to bulk mode. [ 122.398572][ T4883] xt_hashlimit: size too large, truncated to 1048576 [ 122.405868][ T4883] xt_hashlimit: invalid rate [ 122.718859][ T4320] usb 2-1: USB disconnect, device number 4 [ 122.745008][ T4887] xt_hashlimit: size too large, truncated to 1048576 [ 122.754078][ T4887] xt_hashlimit: invalid rate [ 122.825433][ T4320] em28xx 2-1:0.0: Disconnecting em28xx [ 122.841150][ T4322] em28xx 2-1:0.0: Binding DVB extension [ 123.322915][ T4322] em28xx 2-1:0.0: Registering input extension [ 123.634576][ T4920] futex_wake_op: syz.1.144 tries to shift op by 144; fix this program [ 124.536587][ T4322] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 124.543274][ T4322] Registered IR keymap rc-empty [ 124.586986][ T4322] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 124.617669][ T4322] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 124.685871][ T4322] em28xx 2-1:0.0: Input extension successfully initialized [ 124.710388][ T4320] em28xx 2-1:0.0: Closing input extension [ 124.732433][ T4931] loop5: detected capacity change from 0 to 512 [ 124.835834][ T4320] em28xx 2-1:0.0: Freeing device [ 124.886562][ T4931] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.149: Directory hole found for htree index block 0 [ 124.905107][ T4931] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 124.976584][ T4931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 125.046522][ T4931] EXT4-fs (loop5): shut down requested (1) [ 125.256217][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 126.475463][ T4954] xt_hashlimit: size too large, truncated to 1048576 [ 126.482280][ T4954] xt_hashlimit: invalid rate [ 128.921600][ T4976] netlink: 56 bytes leftover after parsing attributes in process `syz.5.160'. [ 129.624535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 129.755039][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.163'. [ 129.788701][ T4960] loop2: detected capacity change from 0 to 32768 [ 130.121205][ T4998] syz.1.165[4998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.121379][ T4998] syz.1.165[4998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.173373][ T5030] loop5: detected capacity change from 0 to 1024 [ 131.301063][ T26] audit: type=1800 audit(1777945458.403:3): pid=5030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.177" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 131.703317][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.180'. [ 132.299559][ T5059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.185'. [ 132.347620][ T5059] netem: unknown loss type 13 [ 132.368385][ T5059] netem: change failed [ 132.450464][ T5060] loop5: detected capacity change from 0 to 4096 [ 132.476960][ T5060] EXT4-fs: inline encryption not supported [ 132.523924][ T5060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.586369][ T5060] EXT4-fs (loop5): Test dummy encryption mode enabled [ 132.644383][ T5060] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c019, mo2=0003] [ 132.671028][ T5060] System zones: 0-5 [ 132.754766][ T5060] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 132.801726][ T26] audit: type=1800 audit(1777945459.903:4): pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.186" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 132.969293][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.976295][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.996973][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 135.564540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 135.574553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 135.584538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 135.594536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 135.604529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 136.688784][ T5092] device vlan2 entered promiscuous mode [ 136.799601][ T5092] device syz_tun entered promiscuous mode [ 136.994797][ T5102] futex_wake_op: syz.2.198 tries to shift op by 144; fix this program [ 137.327624][ T5106] loop4: detected capacity change from 0 to 256 [ 137.931426][ T5105] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 138.290228][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.334605][ T4321] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.508131][ T7] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 138.527655][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.540610][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.561784][ T4321] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 138.571437][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.594451][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.603898][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.625966][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.636498][ T4321] usb 3-1: config 0 descriptor?? [ 138.641723][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.674609][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.683033][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.710951][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.736406][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.756399][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.794749][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.807336][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.834262][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.871841][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.886868][ T5122] loop4: detected capacity change from 0 to 32768 [ 138.904060][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.918149][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.929506][ T5122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.202 (5122) [ 138.999920][ T5131] loop1: detected capacity change from 0 to 512 [ 139.006724][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.019324][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 139.034358][ T5131] ======================================================= [ 139.034358][ T5131] WARNING: The mand mount option has been deprecated and [ 139.034358][ T5131] and is ignored by this kernel. Remove the mand [ 139.034358][ T5131] option from the mount to silence this warning. [ 139.034358][ T5131] ======================================================= [ 139.058833][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.083172][ T4321] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 139.117873][ T5122] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.135640][ T4321] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input8 [ 139.154813][ T5122] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 139.163660][ T5122] BTRFS info (device loop4): using free space tree [ 139.174641][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.201575][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 139.218555][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.229083][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.240564][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 139.251411][ T7] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 139.261653][ T7] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 139.264137][ T5131] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.205: EA inode hash validation failed [ 139.276750][ T7] usb 6-1: Product: syz [ 139.287883][ T7] usb 6-1: Manufacturer: syz [ 139.293089][ T7] usb 6-1: SerialNumber: syz [ 139.302259][ T7] usb 6-1: config 0 descriptor?? [ 139.335161][ T7] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 139.358299][ T4321] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 139.408095][ T5131] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.205: corrupted inode contents [ 139.438160][ T5131] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #15: comm syz.1.205: mark_inode_dirty error [ 139.544791][ T5128] loop0: detected capacity change from 0 to 32768 [ 139.565615][ T5131] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.205: corrupted inode contents [ 139.604332][ T5131] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2945: inode #15: comm syz.1.205: mark_inode_dirty error [ 139.657876][ T4318] usb 6-1: USB disconnect, device number 2 [ 139.698983][ T4318] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 139.718936][ T5131] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2948: inode #15: comm syz.1.205: mark inode dirty (error -117) [ 139.749759][ T5122] BTRFS info (device loop4): enabling ssd optimizations [ 139.781530][ T4325] usb 3-1: USB disconnect, device number 6 [ 139.838450][ T5131] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 139.853463][ T5131] EXT4-fs (loop1): 1 orphan inode deleted [ 139.867304][ T5131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.176610][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 140.353125][ T4275] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.394409][ T5158] loop0: detected capacity change from 0 to 64 [ 140.787528][ T5158] gfs2: path_lookup on c::: returned error -2 [ 140.942257][ T4360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4360) [ 141.054863][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.254687][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 141.265503][ T126] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 141.301815][ T126] usb 3-1: config 0 has no interface number 0 [ 141.323218][ T126] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.348607][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.383046][ T126] usb 3-1: Product: syz [ 141.418091][ T126] usb 3-1: Manufacturer: syz [ 141.446810][ T126] usb 3-1: SerialNumber: syz [ 141.528769][ T126] usb 3-1: config 0 descriptor?? [ 141.550069][ T126] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.768056][ T126] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 143.380623][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 143.536344][ T126] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.035379][ T126] usb 3-1: USB disconnect, device number 7 [ 144.435020][ T126] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.928583][ T126] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.250689][ T126] quatech2 3-1:0.51: device disconnected [ 146.295444][ T5215] loop5: detected capacity change from 0 to 512 [ 146.425436][ T5215] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.509870][ T5215] EXT4-fs (loop5): 1 truncate cleaned up [ 146.554934][ T5215] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.816586][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 147.192781][ T5217] loop2: detected capacity change from 0 to 40427 [ 147.253946][ T5217] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 147.310290][ T5217] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 147.370904][ T5217] F2FS-fs (loop2): invalid crc value [ 147.428090][ T5246] xt_hashlimit: size too large, truncated to 1048576 [ 147.494162][ T5217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.548472][ T5246] xt_hashlimit: invalid rate [ 147.559066][ T5211] loop0: detected capacity change from 0 to 32768 [ 147.675223][ T5211] [ 147.675223][ T5211] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.675223][ T5211] [ 147.947128][ T5211] ERROR: (device loop0): diWrite: ixpxd invalid [ 147.947128][ T5211] [ 147.997623][ T5217] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 148.110632][ T5211] ERROR: (device loop0): txCommit: [ 148.110632][ T5211] [ 148.182715][ T5253] ERROR: (device loop0): dtSearch: stack overrun! [ 148.182715][ T5253] [ 148.251545][ T5217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.277032][ T5253] btstack dump: [ 148.280580][ T5253] bn = 0, index = 0 [ 148.378039][ T5253] bn = 0, index = 0 [ 148.381937][ T5253] bn = 0, index = 0 [ 148.446853][ T5253] bn = 0, index = 0 [ 148.494587][ T5253] bn = 0, index = 0 [ 148.498491][ T5253] bn = 0, index = 0 [ 148.553300][ T5253] bn = 0, index = 0 [ 148.611844][ T5253] bn = 0, index = 0 [ 148.621997][ T5253] jfs_unlink: dtDelete returned -5 [ 148.667849][ T5253] ERROR: (device loop0): jfs_unlink: [ 148.667849][ T5253] [ 148.699319][ T5217] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10 [ 148.860768][ T5217] F2FS-fs (loop2) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x123/0xbd0 [ 149.837331][ T4282] [ 149.837331][ T4282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.837331][ T4282] [ 149.863105][ T4286] syz-executor: attempt to access beyond end of device [ 149.863105][ T4286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.944255][ T4282] [ 149.944255][ T4282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.944255][ T4282] [ 150.575461][ T5279] futex_wake_op: syz.5.236 tries to shift op by 144; fix this program [ 151.613273][ T5291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 151.817027][ T5294] loop1: detected capacity change from 0 to 256 [ 152.383392][ T5294] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.724197][ T5294] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 153.157828][ T5294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 156.730327][ T5326] xt_hashlimit: size too large, truncated to 1048576 [ 156.737323][ T5326] xt_hashlimit: invalid rate [ 158.125812][ T5332] syz.0.245 uses obsolete (PF_INET,SOCK_PACKET) [ 158.270617][ T5341] loop5: detected capacity change from 0 to 128 [ 158.330199][ T5341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 158.400090][ T5345] futex_wake_op: syz.4.249 tries to shift op by 144; fix this program [ 159.185156][ T5341] hpfs: filesystem error: improperly stopped [ 159.201705][ T5341] hpfs: You really don't want any checks? You are crazy... [ 159.287899][ T5341] hpfs: hpfs_map_sector(): read error [ 159.293383][ T5341] hpfs: code page support is disabled [ 159.336096][ T5341] hpfs: hpfs_map_4sectors(): unaligned read [ 159.342344][ T5341] hpfs: hpfs_map_4sectors(): unaligned read [ 159.375043][ T5341] hpfs: filesystem error: unable to find root dir [ 159.442852][ T5342] loop1: detected capacity change from 0 to 8192 [ 159.503386][ T5342] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.555337][ T5342] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 159.565455][ T5342] REISERFS (device loop1): using ordered data mode [ 159.665138][ T5342] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.715494][ T5342] REISERFS (device loop1): checking transaction log (loop1) [ 159.779607][ T5342] REISERFS (device loop1): Using r5 hash to sort names [ 159.818396][ T5342] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 159.904896][ T5342] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 160.398379][ T5373] loop0: detected capacity change from 0 to 256 [ 160.445546][ T5375] netlink: 80 bytes leftover after parsing attributes in process `syz.4.262'. [ 160.509049][ T5373] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 160.668524][ T26] audit: type=1800 audit(1777945487.773:5): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.261" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 160.759270][ T5382] loop1: detected capacity change from 0 to 64 [ 160.963422][ T5382] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 161.005492][ T5389] netlink: 204 bytes leftover after parsing attributes in process `syz.2.266'. [ 161.907410][ T5413] loop1: detected capacity change from 0 to 256 [ 161.998255][ T5413] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9218ae8, utbl_chksum : 0xe619d30d) [ 162.091517][ T5390] loop5: detected capacity change from 0 to 32768 [ 162.095354][ T26] audit: type=1800 audit(1777945489.193:6): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.273" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 162.118161][ T5390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.267 (5390) [ 162.274617][ T5390] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.313665][ T5390] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 162.361119][ T5390] BTRFS info (device loop5): setting nodatasum [ 162.387941][ T5390] BTRFS info (device loop5): force zlib compression, level 3 [ 162.439376][ T5390] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 162.484042][ T5390] BTRFS info (device loop5): use lzo compression, level 0 [ 162.521922][ T5390] BTRFS info (device loop5): turning on flush-on-commit [ 162.552468][ T5390] BTRFS info (device loop5): enabling auto defrag [ 162.593230][ T5390] BTRFS info (device loop5): max_inline at 4096 [ 162.613537][ T5390] BTRFS info (device loop5): using free space tree [ 162.944962][ T5390] BTRFS info (device loop5): enabling ssd optimizations [ 162.950375][ T5418] loop2: detected capacity change from 0 to 32768 [ 163.158197][ T5418] JBD2: Ignoring recovery information on journal [ 163.493336][ T5418] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 163.707883][ T4494] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.834596][ T5465] netlink: 268 bytes leftover after parsing attributes in process `syz.4.281'. [ 163.924274][ T4360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (4360) [ 163.952011][ T5467] loop0: detected capacity change from 0 to 256 [ 164.009501][ T5467] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.198698][ T26] audit: type=1800 audit(1777945491.303:7): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.282" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 164.271751][ T5467] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 164.336830][ T5467] FAT-fs (loop0): Filesystem has been set read-only [ 164.357763][ T4286] ocfs2: Unmounting device (7,2) on (node local) [ 164.596596][ T5480] loop4: detected capacity change from 0 to 512 [ 164.662354][ T5480] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.695218][ T5452] loop1: detected capacity change from 0 to 32768 [ 164.730506][ T5452] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.278 (5452) [ 164.829199][ T5480] EXT4-fs (loop4): 1 truncate cleaned up [ 164.840533][ T5480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.849282][ T5452] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.860600][ T5452] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.869467][ T26] audit: type=1800 audit(1777945491.973:8): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.284" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 164.892107][ T5452] BTRFS info (device loop1): force clearing of disk cache [ 164.899937][ T5452] BTRFS info (device loop1): turning on async discard [ 164.907152][ T5452] BTRFS info (device loop1): use no compression [ 164.913771][ T5452] BTRFS info (device loop1): disabling free space tree [ 164.935313][ T5452] BTRFS info (device loop1): enabling ssd optimizations [ 164.983184][ T5452] BTRFS info (device loop1): using spread ssd allocation scheme [ 165.004699][ T5452] BTRFS info (device loop1): not using ssd optimizations [ 165.011839][ T5452] BTRFS info (device loop1): not using spread ssd allocation scheme [ 165.070550][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 165.114680][ T4322] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 165.364844][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 165.378182][ T4322] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.435748][ T4322] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 165.448062][ T5514] loop4: detected capacity change from 0 to 512 [ 165.454898][ T4322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.468371][ T5514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.486989][ T4322] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 165.497982][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.506193][ T4322] usb 1-1: Product: syz [ 165.510625][ T4322] usb 1-1: Manufacturer: syz [ 165.516694][ T4322] usb 1-1: SerialNumber: syz [ 165.523482][ T4322] usb 1-1: config 0 descriptor?? [ 165.527206][ T5452] BTRFS info (device loop1): rebuilding free space tree [ 165.556093][ T5514] EXT4-fs (loop4): 1 truncate cleaned up [ 165.561825][ T5514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.737273][ T5452] BTRFS info (device loop1): disabling free space tree [ 165.769869][ T5452] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.825191][ T5514] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.289: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 165.864775][ T5452] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.909026][ T5521] input: syz0 as /devices/virtual/input/input9 [ 165.922463][ T5452] BTRFS info (device loop1): checking UUID tree [ 165.940315][ T5514] EXT4-fs (loop4): Remounting filesystem read-only [ 165.946746][ T4322] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 165.951140][ T5514] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 165.972104][ T5514] EXT4-fs (loop4): Remounting filesystem read-only [ 166.225489][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 166.430661][ T22] usb 1-1: USB disconnect, device number 4 [ 166.501473][ T5537] loop4: detected capacity change from 0 to 256 [ 166.543375][ T5537] exfat: Deprecated parameter 'utf8' [ 166.617196][ T5537] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 166.938954][ T4277] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.176524][ T5550] loop4: detected capacity change from 0 to 8 [ 167.325078][ T5550] SQUASHFS error: zlib decompression failed, data probably corrupt [ 167.364187][ T5550] SQUASHFS error: Failed to read block 0x9b: -5 [ 167.377857][ T5553] loop5: detected capacity change from 0 to 4096 [ 167.416437][ T5550] SQUASHFS error: Unable to read metadata cache entry [99] [ 167.454390][ T5553] EXT4-fs: inline encryption not supported [ 167.484739][ T5550] SQUASHFS error: Unable to read inode 0x127 [ 168.149480][ T5579] loop4: detected capacity change from 0 to 32768 [ 168.166946][ T5579] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 168.790923][ T4397] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 169.734156][ T5553] EXT4-fs (loop5): Test dummy encryption mode enabled [ 169.795600][ T5553] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 169.843956][ T5553] System zones: 0-5 [ 169.874618][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.903845][ T5553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.012031][ T5553] EXT4-fs (loop5): shut down requested (1) [ 170.066822][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.113788][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.161972][ T7] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 170.210062][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.244165][ T7] usb 5-1: config 0 descriptor?? [ 170.266511][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 170.673910][ T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 170.690790][ T7] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 170.873308][ T5599] cp2112 0003:10C4:EA90.0006: pid 5599 passed too short report [ 170.905316][ T7] cp2112 0003:10C4:EA90.0006: error requesting version [ 170.922869][ T7] cp2112: probe of 0003:10C4:EA90.0006 failed with error -71 [ 170.962347][ T7] usb 5-1: USB disconnect, device number 5 [ 171.050764][ T5641] futex_wake_op: syz.5.321 tries to shift op by 144; fix this program [ 172.170129][ T5655] loop1: detected capacity change from 0 to 256 [ 172.259092][ T5655] exfat: Deprecated parameter 'utf8' [ 172.292639][ T5648] fido_id[5648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 172.328951][ T5655] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 173.012595][ T5679] futex_wake_op: syz.2.334 tries to shift op by 144; fix this program [ 175.733500][ T5703] loop4: detected capacity change from 0 to 512 [ 175.757211][ T5704] loop0: detected capacity change from 0 to 512 [ 176.184275][ T5703] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.257663][ T5704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.358033][ T5703] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.457933][ T5704] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.033784][ T5704] EXT4-fs (loop0): shut down requested (2) [ 177.256864][ T5703] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.337: corrupted inode contents [ 177.437093][ T5703] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.337: mark_inode_dirty error [ 177.451244][ T5703] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.337: corrupted inode contents [ 177.463831][ T5703] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.337: mark_inode_dirty error [ 177.533341][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 177.567063][ T5703] EXT4-fs error (device loop4): ext4_lookup:1855: inode #19: comm syz.4.337: 'file0' linked to parent dir [ 177.824753][ T4320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.856949][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 178.018005][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.034066][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.082319][ T4320] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.127201][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.144796][ T4320] usb 2-1: SerialNumber: syz [ 178.381668][ T4320] usb 2-1: 0:2 : does not exist [ 178.393607][ T5729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 178.462529][ T4320] usb 2-1: USB disconnect, device number 5 [ 178.533728][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 178.630591][ T5740] futex_wake_op: syz.5.346 tries to shift op by 144; fix this program [ 179.686336][ T5749] loop0: detected capacity change from 0 to 1024 [ 179.945121][ T5756] netlink: 152 bytes leftover after parsing attributes in process `syz.1.352'. [ 180.030586][ T5303] hfsplus: b-tree write err: -5, ino 25 [ 180.044839][ T5303] hfsplus: b-tree write err: -5, ino 4 [ 180.065593][ T5303] hfsplus: b-tree write err: -5, ino 2 [ 180.074446][ T5303] hfsplus: b-tree write err: -5, ino 20 [ 183.062401][ T5784] futex_wake_op: syz.1.359 tries to shift op by 144; fix this program [ 183.198787][ T5791] futex_wake_op: syz.0.360 tries to shift op by 144; fix this program [ 184.481083][ T5806] loop5: detected capacity change from 0 to 256 [ 184.564176][ T5806] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.621671][ T5815] Zero length message leads to an empty skb [ 184.760046][ T26] audit: type=1800 audit(1777945511.863:9): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.366" name="file1" dev="loop5" ino=1048609 res=0 errno=0 [ 184.885609][ T26] audit: type=1800 audit(1777945511.893:10): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.366" name="file1" dev="loop5" ino=1048609 res=0 errno=0 [ 184.916737][ T5821] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 185.017766][ T5821] FAT-fs (loop5): Filesystem has been set read-only [ 185.116231][ T5821] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 185.199022][ T5841] futex_wake_op: syz.2.374 tries to shift op by 144; fix this program [ 186.488075][ T5838] xt_hashlimit: size too large, truncated to 1048576 [ 186.495072][ T5838] xt_hashlimit: invalid rate [ 187.695614][ T5821] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 188.005047][ T5851] futex_wake_op: syz.0.375 tries to shift op by 144; fix this program [ 189.083021][ T4283] Bluetooth: hci1: link tx timeout [ 189.088991][ T4283] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.106958][ T4283] Bluetooth: hci1: link tx timeout [ 189.112160][ T4283] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.367168][ T4329] kernel read not supported for file /admmidi2 (pid: 4329 comm: kworker/0:7) [ 189.444579][ T4264] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.628049][ T4264] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 189.661337][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.685017][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.716685][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.740977][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.769652][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.792110][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.811070][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.828295][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 189.830591][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.864538][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.876161][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.914680][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.928507][ T5865] loop0: detected capacity change from 0 to 32768 [ 189.946089][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.970812][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.984909][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.997039][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.015958][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.025322][ T5865] JBD2: Ignoring recovery information on journal [ 190.044630][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.054023][ T22] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 190.066011][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.075480][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.091700][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.103154][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.111682][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.120919][ T4264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.132433][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.139705][ T22] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 190.141933][ T4264] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.156862][ T4264] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.176254][ T4264] usb 3-1: Product: syz [ 190.181762][ T4264] usb 3-1: Manufacturer: syz [ 190.192688][ T4264] usb 3-1: SerialNumber: syz [ 190.199017][ T5865] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 190.202139][ T4264] usb 3-1: config 0 descriptor?? [ 190.218831][ T4264] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 190.226302][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.306610][ T22] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 190.330342][ T5865] [ 190.332760][ T5865] ====================================================== [ 190.339814][ T5865] WARNING: possible circular locking dependency detected [ 190.346864][ T5865] syzkaller #0 Not tainted [ 190.351310][ T5865] ------------------------------------------------------ [ 190.358359][ T5865] syz.0.382/5865 is trying to acquire lock: [ 190.364286][ T5865] ffff888029e31488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b2/0x850 [ 190.375321][ T5865] [ 190.375321][ T5865] but task is already holding lock: [ 190.382711][ T5865] ffff888054ec94a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x19f/0x320 [ 190.387649][ T5873] loop1: detected capacity change from 0 to 40427 [ 190.393264][ T5865] [ 190.393264][ T5865] which lock already depends on the new lock. [ 190.393264][ T5865] [ 190.393276][ T5865] [ 190.393276][ T5865] the existing dependency chain (in reverse order) is: [ 190.393281][ T5865] [ 190.393281][ T5865] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 190.393316][ T5865] down_read+0x42/0x2d0 [ 190.423277][ T5873] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 190.429162][ T5865] ocfs2_read_virt_blocks+0x25d/0x970 [ 190.429200][ T5865] ocfs2_find_entry+0x3c1/0x2180 [ 190.429218][ T5865] ocfs2_find_files_on_disk+0x102/0x390 [ 190.429237][ T5865] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 190.429256][ T5865] ocfs2_get_system_file_inode+0x36a/0x850 [ 190.451663][ T4320] usb 3-1: USB disconnect, device number 8 [ 190.453146][ T5865] ocfs2_init_global_system_inodes+0x2f3/0x6d0 [ 190.471093][ T4320] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 190.471746][ T5865] ocfs2_fill_super+0x2bc2/0x5090 [ 190.471775][ T5865] mount_bdev+0x287/0x3c0 [ 190.482428][ T5873] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 190.484336][ T5865] legacy_get_tree+0xe6/0x180 [ 190.510391][ T5873] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 190.514320][ T5865] vfs_get_tree+0x88/0x270 [ 190.514352][ T5865] do_new_mount+0x24a/0xa40 [ 190.514369][ T5865] __se_sys_mount+0x2e3/0x3d0 [ 190.536171][ T5865] do_syscall_64+0x4c/0xa0 [ 190.541176][ T5865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.547908][ T5865] [ 190.547908][ T5865] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 190.556485][ T5865] __lock_acquire+0x2d07/0x7d10 [ 190.561915][ T5865] lock_acquire+0x1bb/0x4a0 [ 190.567117][ T5865] __mutex_lock+0x12d/0xaf0 [ 190.572280][ T5865] ocfs2_get_system_file_inode+0x1b2/0x850 [ 190.580055][ T5865] ocfs2_reserve_local_alloc_bits+0xfd/0x2700 [ 190.588458][ T5865] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 190.595438][ T5865] ocfs2_lock_allocators+0x2d5/0x5f0 [ 190.601334][ T5865] ocfs2_write_begin_nolock+0x1b70/0x44f0 [ 190.607644][ T5865] ocfs2_write_begin+0x1c2/0x320 [ 190.613131][ T5865] generic_perform_write+0x2fa/0x5c0 [ 190.619043][ T5865] __generic_file_write_iter+0x148/0x2a0 [ 190.625490][ T5865] ocfs2_file_write_iter+0x1660/0x1f00 [ 190.631697][ T5865] vfs_write+0x4b1/0xa30 [ 190.636494][ T5865] ksys_write+0x14c/0x250 [ 190.641375][ T5865] do_syscall_64+0x4c/0xa0 [ 190.646417][ T5865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.652881][ T5865] [ 190.652881][ T5865] other info that might help us debug this: [ 190.652881][ T5865] [ 190.663227][ T5865] Possible unsafe locking scenario: [ 190.663227][ T5865] [ 190.670690][ T5865] CPU0 CPU1 [ 190.676072][ T5865] ---- ---- [ 190.681445][ T5865] lock(&ocfs2_file_ip_alloc_sem_key); [ 190.687004][ T5865] lock(&osb->system_file_mutex); [ 190.694647][ T5865] lock(&ocfs2_file_ip_alloc_sem_key); [ 190.702731][ T5865] lock(&osb->system_file_mutex); [ 190.708028][ T5865] [ 190.708028][ T5865] *** DEADLOCK *** [ 190.708028][ T5865] [ 190.716191][ T5865] 4 locks held by syz.0.382/5865: [ 190.721316][ T5865] #0: ffff8880787d79e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 190.730660][ T5865] #1: ffff888055d68460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 190.739651][ T5865] #2: ffff888054ec9808 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x448/0x1f00 [ 190.751183][ T5865] #3: ffff888054ec94a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x19f/0x320 [ 190.762161][ T5865] [ 190.762161][ T5865] stack backtrace: [ 190.768066][ T5865] CPU: 1 PID: 5865 Comm: syz.0.382 Not tainted syzkaller #0 [ 190.775357][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.785461][ T5865] Call Trace: [ 190.788777][ T5865] [ 190.791726][ T5865] dump_stack_lvl+0x188/0x24e [ 190.796431][ T5865] ? load_image+0x400/0x400 [ 190.800948][ T5865] ? show_regs_print_info+0x12/0x12 [ 190.806170][ T5865] ? print_circular_bug+0x12b/0x1a0 [ 190.811405][ T5865] check_noncircular+0x296/0x330 [ 190.816365][ T5865] ? add_chain_block+0x940/0x940 [ 190.821325][ T5865] ? lockdep_lock+0xf1/0x1f0 [ 190.825948][ T5865] ? mark_lock+0x94/0x320 [ 190.830320][ T5865] ? _find_first_zero_bit+0xcf/0x100 [ 190.835723][ T5865] __lock_acquire+0x2d07/0x7d10 [ 190.840599][ T5865] ? mark_lock+0x94/0x320 [ 190.845124][ T5865] ? mark_lock+0x94/0x320 [ 190.849475][ T5865] ? verify_lock_unused+0x140/0x140 [ 190.854795][ T5865] ? __lock_acquire+0x13cf/0x7d10 [ 190.859854][ T5865] ? hlock_conflict+0x59/0x1f0 [ 190.865240][ T5865] ? rcu_is_watching+0x11/0xa0 [ 190.870055][ T5865] lock_acquire+0x1bb/0x4a0 [ 190.874587][ T5865] ? ocfs2_get_system_file_inode+0x1b2/0x850 [ 190.880669][ T5865] ? __might_sleep+0xd0/0xd0 [ 190.885358][ T5865] ? read_lock_is_recursive+0x10/0x10 [ 190.890754][ T5865] __mutex_lock+0x12d/0xaf0 [ 190.895298][ T5865] ? ocfs2_get_system_file_inode+0x1b2/0x850 [ 190.901318][ T5865] ? ocfs2_get_system_file_inode+0x151/0x850 [ 190.907317][ T5865] ? ocfs2_get_system_file_inode+0x1b2/0x850 [ 190.913310][ T5865] ? mutex_lock_nested+0x10/0x10 [ 190.918266][ T5865] ? do_raw_spin_lock+0x128/0x2f0 [ 190.923391][ T5865] ? __rwlock_init+0x140/0x140 [ 190.928166][ T5865] ? do_raw_spin_unlock+0x11d/0x230 [ 190.933375][ T5865] ocfs2_get_system_file_inode+0x1b2/0x850 [ 190.939297][ T5865] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 190.945479][ T5865] ? lockdep_unlock+0x142/0x2e0 [ 190.950373][ T5865] ? lockdep_lock+0x1f0/0x1f0 [ 190.955077][ T5865] ? add_lock_to_list+0x191/0x280 [ 190.960124][ T5865] ? __lock_acquire+0x28c4/0x7d10 [ 190.965252][ T5865] ? lock_chain_count+0x20/0x20 [ 190.970125][ T5865] ocfs2_reserve_local_alloc_bits+0xfd/0x2700 [ 190.976215][ T5865] ? stack_trace_save+0xa6/0xf0 [ 190.981085][ T5865] ? verify_lock_unused+0x140/0x140 [ 190.986310][ T5865] ? ocfs2_complete_local_alloc_recovery+0x580/0x580 [ 190.993027][ T5865] ? kasan_set_track+0x60/0x70 [ 190.997831][ T5865] ? __generic_file_write_iter+0x148/0x2a0 [ 191.003665][ T5865] ? ocfs2_file_write_iter+0x1660/0x1f00 [ 191.009322][ T5865] ? vfs_write+0x4b1/0xa30 [ 191.013756][ T5865] ? ksys_write+0x14c/0x250 [ 191.018279][ T5865] ? do_syscall_64+0x4c/0xa0 [ 191.022894][ T5865] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 191.028990][ T5865] ? __lock_acquire+0x7d10/0x7d10 [ 191.034051][ T5865] ? do_raw_spin_lock+0x128/0x2f0 [ 191.039107][ T5865] ? __rwlock_init+0x140/0x140 [ 191.044004][ T5865] ? do_raw_spin_unlock+0x11d/0x230 [ 191.049238][ T5865] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 191.055328][ T5865] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 191.061768][ T5865] ? ocfs2_reserve_clusters+0x30/0x30 [ 191.067265][ T5865] ? rcu_is_watching+0x11/0xa0 [ 191.072048][ T5865] ? ocfs2_num_free_extents+0x307/0x630 [ 191.077705][ T5865] ? ocfs2_validate_extent_block+0x620/0x620 [ 191.083698][ T5865] ? __brelse+0x55/0x90 [ 191.088052][ T5865] ocfs2_lock_allocators+0x2d5/0x5f0 [ 191.093357][ T5865] ? _ocfs2_clear_bit+0x30/0x30 [ 191.098220][ T5865] ? do_raw_spin_lock+0x128/0x2f0 [ 191.103250][ T5865] ? __rwlock_init+0x140/0x140 [ 191.108034][ T5865] ? ocfs2_write_begin_nolock+0xf90/0x44f0 [ 191.113977][ T5865] ocfs2_write_begin_nolock+0x1b70/0x44f0 [ 191.119779][ T5865] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 191.125600][ T5865] ? __lock_acquire+0x28c4/0x7d10 [ 191.130648][ T5865] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 191.136641][ T5865] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.142642][ T5865] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 191.148635][ T5865] ? finish_task_switch+0x265/0x8f0 [ 191.153876][ T5865] ? rwsem_write_trylock+0x135/0x1c0 [ 191.159232][ T5865] ? clear_nonspinnable+0x60/0x60 [ 191.164284][ T5865] ? __sched_text_start+0x8/0x8 [ 191.169161][ T5865] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.175159][ T5865] ocfs2_write_begin+0x1c2/0x320 [ 191.180124][ T5865] ? ocfs2_readahead+0x190/0x190 [ 191.185097][ T5865] ? __lock_acquire+0x7d10/0x7d10 [ 191.190155][ T5865] ? fault_in_readable+0x15d/0x1f0 [ 191.195282][ T5865] ? fault_in_iov_iter_readable+0xbb/0x2e0 [ 191.201127][ T5865] generic_perform_write+0x2fa/0x5c0 [ 191.206518][ T5865] ? generic_file_direct_write+0x330/0x330 [ 191.212337][ T5865] ? __file_remove_privs+0x5f0/0x5f0 [ 191.217631][ T5865] ? __up_read+0x2b2/0x6b0 [ 191.222065][ T5865] ? do_raw_spin_unlock+0x11d/0x230 [ 191.227271][ T5865] __generic_file_write_iter+0x148/0x2a0 [ 191.232931][ T5865] ocfs2_file_write_iter+0x1660/0x1f00 [ 191.238411][ T5865] ? verify_lock_unused+0x140/0x140 [ 191.243627][ T5865] ? ocfs2_file_read_iter+0xbb0/0xbb0 [ 191.249017][ T5865] ? aa_file_perm+0x3ea/0xf00 [ 191.253712][ T5865] ? rcu_read_lock_any_held+0xb0/0x130 [ 191.259187][ T5865] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 191.264486][ T5865] ? end_current_label_crit_section+0x14b/0x170 [ 191.270739][ T5865] ? common_file_perm+0x171/0x1c0 [ 191.275776][ T5865] vfs_write+0x4b1/0xa30 [ 191.280058][ T5865] ? file_end_write+0x250/0x250 [ 191.284926][ T5865] ? __fget_files+0x43d/0x4b0 [ 191.289623][ T5865] ? __fdget_pos+0x2ae/0x360 [ 191.294227][ T5865] ? ksys_write+0x71/0x250 [ 191.298669][ T5865] ksys_write+0x14c/0x250 [ 191.303040][ T5865] ? __ia32_sys_read+0x80/0x80 [ 191.307943][ T5865] ? lockdep_hardirqs_on+0x94/0x140 [ 191.313216][ T5865] do_syscall_64+0x4c/0xa0 [ 191.318473][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 191.324069][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 191.329592][ T5865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.335521][ T5865] RIP: 0033:0x7f5ddb19cdd9 [ 191.339962][ T5865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.361332][ T5865] RSP: 002b:00007f5ddc0a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.369766][ T5865] RAX: ffffffffffffffda RBX: 00007f5ddb415fa0 RCX: 00007f5ddb19cdd9 [ 191.377751][ T5865] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 191.385739][ T5865] RBP: 00007f5ddb232d69 R08: 0000000000000000 R09: 0000000000000000 [ 191.393814][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.402061][ T5865] R13: 00007f5ddb416038 R14: 00007f5ddb415fa0 R15: 00007fff33e15c08 [ 191.410246][ T5865] [ 191.418540][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 191.444330][ T5873] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.487808][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 191.511421][ T5873] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 191.518937][ T5873] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.492850][ T22] stv0680 6-1:4.0: Could not get descriptor 0200 [ 192.694605][ T22] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 192.706151][ T22] stv0680 6-1:4.0: last error: 2, command = 0x11 [ 192.715315][ T22] usb 6-1: USB disconnect, device number 3 [ 194.406693][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.413137][ T1277] ieee802154 phy1 wpan1: encryption failed: -22