last executing test programs: 8.665057234s ago: executing program 4 (id=267): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x323, @time={0x0, 0x6}, 0x0, {}, 0x1, 0x0, 0x1}) 8.110443762s ago: executing program 4 (id=274): bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) 7.988708504s ago: executing program 4 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41201}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 7.897994376s ago: executing program 3 (id=278): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4], 0x0, [0x8, 0x4, 0x0, 0x8000, 0x0, 0x0, 0xfffe, 0x100, 0x0, 0x2000, 0x0, 0x1fff], [0x5, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x80]}}]}}]}, 0x8c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 7.880477706s ago: executing program 4 (id=279): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000010980)=""/204, 0xcc) 7.746793078s ago: executing program 4 (id=281): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.478075052s ago: executing program 3 (id=283): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0/file0\x00') 4.498297709s ago: executing program 0 (id=299): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 4.381549851s ago: executing program 0 (id=300): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x80000000, 0x4) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0) 4.359962951s ago: executing program 0 (id=301): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") fallocate(0xffffffffffffffff, 0x10, 0x3, 0x7c27) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.329437472s ago: executing program 2 (id=303): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@resize={'resize', 0x3d, 0x1875140b}}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 4.104170626s ago: executing program 4 (id=305): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xe) 3.245843329s ago: executing program 2 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 3.070488112s ago: executing program 0 (id=309): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) 2.742203807s ago: executing program 2 (id=312): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000003400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004000)={0x24, 0x0, &(0x7f0000003f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc47}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.670238318s ago: executing program 0 (id=313): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, "5e037948"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 2.240899655s ago: executing program 1 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xb4}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.180535626s ago: executing program 1 (id=317): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2.080299847s ago: executing program 3 (id=283): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0/file0\x00') 1.861476401s ago: executing program 1 (id=318): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) 1.686087824s ago: executing program 3 (id=319): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.332499289s ago: executing program 3 (id=320): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x921}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) 1.151673002s ago: executing program 3 (id=321): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000680)={0x40, 0x16, 0x2, "72db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 825.174867ms ago: executing program 1 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 727.572149ms ago: executing program 1 (id=323): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2491, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16c3b14a4ab08a4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 627.44173ms ago: executing program 0 (id=324): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x11, 0x2e1, &(0x7f0000000540)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 513.320712ms ago: executing program 1 (id=325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0x0, 0xffffffff, 0x800, 0x401, 0x3, 0xc, 0x7f18, 0x7, 0x7, 0x10000009, 0x7, 0x6, 0xfffffffc, 0x270f}) 122.208089ms ago: executing program 2 (id=326): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.45894ms ago: executing program 2 (id=327): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006}) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x2) 0s ago: executing program 2 (id=328): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f00000000c0)={0x20, 0x12}, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. syzkaller login: [ 48.680552][ T4171] cgroup: Unknown subsys name 'net' [ 48.787148][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.926015][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.144945][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.256933][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.269494][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.312570][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.319637][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.328597][ T4181] device bridge_slave_0 entered promiscuous mode [ 51.353734][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.363611][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.370924][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.378433][ T4181] device bridge_slave_1 entered promiscuous mode [ 51.435423][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.456487][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.469405][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.488049][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.495174][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.502819][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.527691][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.534929][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.542834][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.587804][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.595032][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.602725][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.612268][ T4181] team0: Port device team_slave_0 added [ 51.618218][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.625521][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.633718][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.659704][ T4181] team0: Port device team_slave_1 added [ 51.677611][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.684788][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.692975][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.701535][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.713186][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.731255][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.740404][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.747411][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.755143][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.779422][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.807766][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.814923][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.840865][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.865234][ T4183] team0: Port device team_slave_0 added [ 51.871280][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.878320][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.886469][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.894122][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.901141][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.927129][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.946542][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.956857][ T4183] team0: Port device team_slave_1 added [ 51.962923][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.970061][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.977585][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.989581][ T4182] team0: Port device team_slave_0 added [ 51.997045][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.028332][ T4182] team0: Port device team_slave_1 added [ 52.049402][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.060898][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.091120][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.098058][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.123992][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.160778][ T4188] team0: Port device team_slave_0 added [ 52.166848][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.174060][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.200599][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.215039][ T4181] device hsr_slave_0 entered promiscuous mode [ 52.221643][ T4181] device hsr_slave_1 entered promiscuous mode [ 52.229903][ T4191] team0: Port device team_slave_0 added [ 52.236121][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.243180][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.269134][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.281416][ T4188] team0: Port device team_slave_1 added [ 52.287429][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.294427][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.320404][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.350145][ T4191] team0: Port device team_slave_1 added [ 52.403830][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.410519][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.417347][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.425280][ T4183] Cannot create hsr debugfs directory [ 52.436158][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.443279][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.469160][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.481042][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.487976][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.513873][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.541577][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.548516][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.574529][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.614676][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.621773][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.648444][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.700393][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.706947][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.716033][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.723627][ T4182] Cannot create hsr debugfs directory [ 52.735882][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.742789][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.749200][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.756961][ T4188] Cannot create hsr debugfs directory [ 52.777187][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.783812][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.791112][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.798659][ T4191] Cannot create hsr debugfs directory [ 52.910706][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 52.917143][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 52.923635][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 52.930181][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 52.936198][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 53.036322][ T4181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.049174][ T4181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.057999][ T4181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.069837][ T4181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.111873][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.125114][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.133407][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.146167][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.206890][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.215214][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.230473][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.239232][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.257525][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.290542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.298857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.320878][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.358494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.367790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.376780][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.383934][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.397179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.415712][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.426090][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.450289][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.459394][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.468741][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.475805][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.484530][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.493357][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.503753][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.520192][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.530585][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.539768][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.558474][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.567608][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.575510][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.584443][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.595750][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.612959][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.626678][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.644990][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.655574][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.668060][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.677250][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.685543][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.693757][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.703030][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.711381][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.719498][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.728816][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.738533][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.746858][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.756277][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.764308][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.784636][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.848590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.858087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.868091][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.875189][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.885567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.896544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.905852][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.912923][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.920791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.929195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.938365][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.945422][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.954273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.962781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.971179][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.978210][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.985838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.994671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.003270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.011384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.026495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.036507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.045173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.054109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.064112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.082224][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.093514][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.108991][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.119538][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.148663][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.158251][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.166734][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.175718][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.185849][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.194273][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.201994][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.209349][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.217865][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.225605][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.233651][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.242375][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.251312][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.259038][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.284778][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.297286][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.308323][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.321068][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.329495][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.344086][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.352429][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.396729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.406958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.423122][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.430208][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.444281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.453760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.466687][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.473804][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.482958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.491723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.512569][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.525067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.533712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.542972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.552431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.562653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.571373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.579699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.589456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.608852][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.627736][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.639415][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.657508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.665792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.675191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.683628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.692562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.701974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.710457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.718182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.725969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.738402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.747615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.756057][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.763129][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.771257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.779634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.788312][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.795564][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.818317][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.829740][ T4181] device veth0_vlan entered promiscuous mode [ 54.844571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.853065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.862960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.870678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.878868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.887571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.895959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.913624][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.924967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.939242][ T4181] device veth1_vlan entered promiscuous mode [ 54.970852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.979578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.988205][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 54.990020][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 54.994530][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 55.007031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.017117][ T4250] Bluetooth: hci1: command 0x041b tx timeout [ 55.022128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.023792][ T4250] Bluetooth: hci2: command 0x041b tx timeout [ 55.037729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.046787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.055361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.078946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.087829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.097242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.106584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.114994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.124142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.132939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.143724][ T4183] device veth0_vlan entered promiscuous mode [ 55.159058][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.170559][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.190631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.198260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.209539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.218059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.227237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.235949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.244302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.253295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.261128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.269138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.281811][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.315297][ T4188] device veth0_vlan entered promiscuous mode [ 55.326505][ T4183] device veth1_vlan entered promiscuous mode [ 55.335102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.344053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.352178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.360827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.372328][ T4181] device veth0_macvtap entered promiscuous mode [ 55.394913][ T4188] device veth1_vlan entered promiscuous mode [ 55.412215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.426594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.441977][ T4181] device veth1_macvtap entered promiscuous mode [ 55.474063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.483655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.502144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.511471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.520533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.528989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.547339][ T4183] device veth0_macvtap entered promiscuous mode [ 55.555570][ T4188] device veth0_macvtap entered promiscuous mode [ 55.577191][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.589376][ T4183] device veth1_macvtap entered promiscuous mode [ 55.600075][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.608568][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.624423][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.636017][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.643678][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.652771][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.661273][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.675368][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.690291][ T4188] device veth1_macvtap entered promiscuous mode [ 55.700829][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.707785][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.717541][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.726262][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.741003][ T4181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.749802][ T4181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.758849][ T4181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.767766][ T4181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.791132][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.802162][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.814991][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.836852][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.847411][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.858456][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.869268][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.881669][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.898812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.907558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.916778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.926040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.935384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.944367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.953155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.962729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.973330][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.984211][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.995087][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.008767][ T4182] device veth0_vlan entered promiscuous mode [ 56.034288][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.044540][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.053481][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.061883][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.070323][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.078955][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.087145][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.095753][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.104496][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.112178][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.122447][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.131648][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.140627][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.149310][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.161789][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.173302][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.184317][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.194999][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.205913][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.234675][ T4182] device veth1_vlan entered promiscuous mode [ 56.242309][ T4191] device veth0_vlan entered promiscuous mode [ 56.249330][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.258358][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.267864][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.283567][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.293078][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.303217][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.312185][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.353485][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.367112][ T4191] device veth1_vlan entered promiscuous mode [ 56.377043][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.400855][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.408673][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.417008][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.449770][ T4182] device veth0_macvtap entered promiscuous mode [ 56.467526][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.487294][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.496333][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.512771][ T4182] device veth1_macvtap entered promiscuous mode [ 56.544086][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.558749][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.564916][ T4191] device veth0_macvtap entered promiscuous mode [ 56.580507][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.588948][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.591576][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.602728][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.612691][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.622094][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.629728][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.637832][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.657996][ T4191] device veth1_macvtap entered promiscuous mode [ 56.672509][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.684960][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.696666][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.707135][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.717347][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.727939][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.740139][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.758050][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.774777][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.786617][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.797573][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.807576][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.818195][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.830938][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.854549][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.862993][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.871936][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.881067][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.889434][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.903348][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.915165][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.925674][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.936182][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.946293][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.958078][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.968644][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.982843][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.995387][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.005348][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.037083][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.048547][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.050892][ T4297] loop2: detected capacity change from 0 to 256 [ 57.058257][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.070758][ T4248] Bluetooth: hci2: command 0x040f tx timeout [ 57.079075][ T4248] Bluetooth: hci1: command 0x040f tx timeout [ 57.090197][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.096909][ T4248] Bluetooth: hci4: command 0x040f tx timeout [ 57.098091][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.109879][ T4297] exfat: Deprecated parameter 'namecase' [ 57.117959][ T4248] Bluetooth: hci0: command 0x040f tx timeout [ 57.123713][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.126060][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.139804][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.141124][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.160283][ T4297] exfat: Deprecated parameter 'namecase' [ 57.170723][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.177819][ T4248] Bluetooth: hci3: command 0x040f tx timeout [ 57.180358][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.196559][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.211265][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.223322][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.235572][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.246879][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.261065][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.272119][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.287116][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.323757][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.331700][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.341184][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.353084][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.365675][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.375373][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.393666][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.470153][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.486646][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.498015][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.619200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.663609][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.676725][ T400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.708528][ T400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.716134][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.753769][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.790510][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.835066][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.865686][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.873530][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.888086][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.889661][ T4318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11'. [ 57.923197][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.943781][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.130101][ T4326] loop4: detected capacity change from 0 to 164 [ 58.170356][ T4326] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.530825][ T4339] loop0: detected capacity change from 0 to 512 [ 58.632172][ T4315] loop3: detected capacity change from 0 to 32768 [ 58.687686][ T4315] ======================================================= [ 58.687686][ T4315] WARNING: The mand mount option has been deprecated and [ 58.687686][ T4315] and is ignored by this kernel. Remove the mand [ 58.687686][ T4315] option from the mount to silence this warning. [ 58.687686][ T4315] ======================================================= [ 58.760411][ T4315] XFS: attr2 mount option is deprecated. [ 58.767231][ T4339] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 58.788887][ T4325] loop1: detected capacity change from 0 to 32768 [ 58.870169][ T4339] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.931497][ T4325] XFS (loop1): Mounting V5 Filesystem [ 58.938541][ T26] audit: type=1800 audit(1753104540.398:2): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 58.987140][ T4330] loop2: detected capacity change from 0 to 32768 [ 58.993680][ T4315] XFS (loop3): Mounting V5 Filesystem [ 59.043966][ T4337] loop4: detected capacity change from 0 to 32768 [ 59.051974][ T4330] XFS: ikeep mount option is deprecated. [ 59.076559][ T4325] XFS (loop1): Ending clean mount [ 59.094225][ T4315] XFS (loop3): Ending clean mount [ 59.140844][ T26] audit: type=1800 audit(1753104540.608:3): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 59.150571][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 59.166241][ T4325] XFS (loop1): Quotacheck needed: Please wait. [ 59.169209][ T4315] XFS (loop3): Quotacheck needed: Please wait. [ 59.230661][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 59.245031][ T4325] XFS (loop1): Quotacheck: Done. [ 59.276636][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 59.338911][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 59.354292][ T4315] XFS (loop3): Quotacheck: Done. [ 59.382513][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 59.437574][ T4330] XFS (loop2): Mounting V5 Filesystem [ 59.504251][ T4188] XFS (loop1): Unmounting Filesystem [ 59.534635][ T4183] XFS (loop3): Unmounting Filesystem [ 59.691946][ T4330] XFS (loop2): Ending clean mount [ 59.738154][ T4330] XFS (loop2): Quotacheck needed: Please wait. [ 59.823891][ T4330] XFS (loop2): Quotacheck: Done. [ 59.965373][ T4181] XFS (loop2): Unmounting Filesystem [ 60.103198][ T4380] loop4: detected capacity change from 0 to 256 [ 60.717051][ T4397] loop4: detected capacity change from 0 to 512 [ 60.770234][ T4397] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 60.779105][ T4385] loop1: detected capacity change from 0 to 32768 [ 60.794873][ T4397] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.800420][ T4248] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.819504][ T4397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.31: bg 0: block 248: padding at end of block bitmap is not set [ 60.838621][ T4397] Quota error (device loop4): write_blk: dquota write failed [ 60.848276][ T4397] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 60.858470][ T4397] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.31: Failed to acquire dquot type 1 [ 60.884981][ T4397] EXT4-fs (loop4): 1 truncate cleaned up [ 60.902351][ T4397] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 60.975041][ T4385] XFS (loop1): Mounting V5 Filesystem [ 60.996972][ T4397] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 61.023259][ T4397] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 61.037120][ T4385] XFS (loop1): Ending clean mount [ 61.047412][ T4385] XFS (loop1): Quotacheck needed: Please wait. [ 61.068931][ T4397] EXT4-fs (loop4): re-mounted. Opts: usrjquota=,journal_ioprio=0x0000000000000006,journal_checksum,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 61.087394][ T4397] ext4 filesystem being remounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.096484][ T4385] XFS (loop1): Quotacheck: Done. [ 61.166906][ T4397] syz.4.31 (4397) used greatest stack depth: 21128 bytes left [ 61.220659][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.228071][ T4188] XFS (loop1): Unmounting Filesystem [ 61.259892][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.277688][ T4416] loop0: detected capacity change from 0 to 2048 [ 61.280128][ T4248] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.312606][ T4416] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.315719][ T4417] loop3: detected capacity change from 0 to 4096 [ 61.328556][ T4248] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.347043][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.369578][ T4248] usb 3-1: config 0 descriptor?? [ 61.486376][ T4421] loop4: detected capacity change from 0 to 256 [ 61.558304][ T4421] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 61.580770][ T4421] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 61.591812][ T4417] EXT4-fs (loop3): Test dummy encryption mode enabled [ 61.627877][ T4417] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 61.637089][ T4427] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET) [ 61.703044][ T4417] System zones: 0-5 [ 61.766712][ T4417] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 61.866358][ T4248] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xe [ 61.894405][ T4248] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 61.965525][ T4248] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 62.005751][ T4248] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.007768][ T4417] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 62.271312][ T21] usb 3-1: USB disconnect, device number 2 [ 62.287652][ T4448] loop4: detected capacity change from 0 to 4096 [ 62.439900][ T4453] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.494124][ T4448] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 62.539359][ T4448] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 62.633922][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.777240][ T4466] loop1: detected capacity change from 0 to 4096 [ 62.809992][ T4248] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.845399][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 62.861423][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 62.879464][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 62.898945][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 62.908045][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 62.919746][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 62.928276][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 62.938374][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 62.946560][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 62.954740][ T4466] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 63.010256][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 63.023655][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.034890][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.044947][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 63.070059][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 63.130288][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 63.141566][ T23] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 63.155861][ T23] usb 1-1: Manufacturer: syz [ 63.173371][ T23] usb 1-1: config 0 descriptor?? [ 63.213643][ T4248] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.233078][ T4248] usb 4-1: config 0 has no interface number 0 [ 63.239198][ T4248] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.250677][ T4248] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.261224][ T4248] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 63.264880][ T4477] loop1: detected capacity change from 0 to 4096 [ 63.270297][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.273334][ T4248] usb 4-1: config 0 descriptor?? [ 63.326589][ T4477] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 63.336331][ T4477] ntfs3: loop1: Failed to load $Extend. [ 63.652163][ T23] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 63.751889][ T23] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 63.792302][ T4485] loop1: detected capacity change from 0 to 4096 [ 63.931749][ T4485] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 63.943589][ T23] usb 1-1: USB disconnect, device number 2 [ 64.027806][ T4485] ntfs3: loop1: Failed to load $Extend. [ 64.095479][ T4488] fido_id[4488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 64.417541][ T4481] sched: RT throttling activated [ 64.432727][ T1108] Bluetooth: hci3: command 0x0405 tx timeout [ 64.705551][ T4487] loop4: detected capacity change from 0 to 32768 [ 64.767845][ T4487] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.63 (4487) [ 64.814848][ T4495] loop0: detected capacity change from 0 to 2048 [ 64.909210][ T4495] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.033563][ T4481] loop2: detected capacity change from 0 to 262144 [ 65.083572][ T4248] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0003/input/input5 [ 65.110353][ T4487] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 65.126573][ T4487] BTRFS info (device loop4): using free space tree [ 65.133198][ T4481] F2FS-fs (loop2): invalid crc value [ 65.141293][ T4487] BTRFS info (device loop4): has skinny extents [ 65.158188][ T4481] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.199447][ T4481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.263987][ T4248] uclogic 0003:28BD:0094.0003: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 65.294143][ T4248] usb 4-1: USB disconnect, device number 2 [ 65.480632][ T4518] fido_id[4518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 65.495217][ T4491] loop1: detected capacity change from 0 to 32768 [ 65.565742][ T4487] BTRFS info (device loop4): enabling ssd optimizations [ 65.727198][ T26] audit: type=1800 audit(1753104547.188:4): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.64" name="bus" dev="loop1" ino=4096 res=0 errno=0 [ 65.780678][ T4487] fs-verity: sha512 using implementation "sha512-avx2" [ 65.816131][ T4487] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 65.876559][ T4528] loop3: detected capacity change from 0 to 512 [ 66.261571][ T4517] loop0: detected capacity change from 0 to 32768 [ 66.356378][ T4532] ODEBUG: Out of memory. ODEBUG disabled [ 66.418526][ T4517] XFS (loop0): Mounting V5 Filesystem [ 66.536550][ T4517] XFS (loop0): Ending clean mount [ 66.590525][ T4517] XFS (loop0): Quotacheck needed: Please wait. [ 66.646587][ T4517] XFS (loop0): Quotacheck: Done. [ 66.695746][ T4530] loop1: detected capacity change from 0 to 32768 [ 66.784149][ T4530] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.69 (4530) [ 66.830133][ T4191] XFS (loop0): Unmounting Filesystem [ 66.845365][ T4530] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 66.888080][ T4530] BTRFS info (device loop1): using free space tree [ 66.910764][ T4530] BTRFS info (device loop1): has skinny extents [ 66.953167][ T4556] loop3: detected capacity change from 0 to 512 [ 67.163136][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.187275][ T4556] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.227912][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.315695][ T4530] BTRFS info (device loop1): enabling ssd optimizations [ 67.450004][ T26] audit: type=1800 audit(1753104548.908:5): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.69" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 67.525444][ T4590] loop3: detected capacity change from 0 to 256 [ 67.585874][ T26] audit: type=1326 audit(1753104549.048:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f168b43c9a9 code=0x0 [ 67.731651][ T4241] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 67.766570][ T4241] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.919302][ T4605] loop4: detected capacity change from 0 to 64 [ 68.120139][ T4541] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.219910][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.460062][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 68.582012][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.596151][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 68.627064][ T4636] process 'syz.3.94' launched './file1' with NULL argv: empty string added [ 68.640213][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.663312][ T23] usb 1-1: config 0 descriptor?? [ 69.000012][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.088135][ T4644] loop3: detected capacity change from 0 to 2048 [ 69.127842][ T4644] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.141881][ T4628] loop4: detected capacity change from 0 to 131072 [ 69.146450][ T23] hid (null): report_id 3899690137 is invalid [ 69.157104][ T4541] usb 3-1: Using ep0 maxpacket: 16 [ 69.162502][ T4644] NILFS (loop3): mounting unchecked fs [ 69.166953][ T23] hid (null): report_id 1862125167 is invalid [ 69.176914][ T4200] udevd[4200]: incorrect nilfs2 checksum on /dev/loop3 [ 69.185318][ T4628] F2FS-fs (loop4): invalid crc value [ 69.198405][ T4644] NILFS (loop3): recovery complete [ 69.205619][ T4648] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.218466][ T4628] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.252766][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 69.267245][ T4628] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 69.291807][ T4628] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 69.319976][ T4541] usb 3-1: config 0 has no interfaces? [ 69.325481][ T4541] usb 3-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 69.344181][ T4541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.356149][ T4541] usb 3-1: config 0 descriptor?? [ 69.380152][ T4234] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.401651][ T4608] usb 1-1: USB disconnect, device number 3 [ 69.408927][ T4234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.463278][ T4234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.483573][ T4234] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.518669][ T4234] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.538146][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.625598][ T4597] hid-generic 0000:0000:0000.0004: pid 4597 passed too large report [ 69.635325][ T4541] usb 3-1: USB disconnect, device number 3 [ 69.830079][ T4234] usb 2-1: GET_CAPABILITIES returned 0 [ 69.835594][ T4234] usbtmc 2-1:16.0: can't read capabilities [ 70.059948][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.074711][ T4541] usb 2-1: USB disconnect, device number 2 [ 70.155509][ T4658] loop4: detected capacity change from 0 to 40427 [ 70.173929][ T4658] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 70.181089][ T4658] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.200406][ T4658] F2FS-fs (loop4): invalid crc value [ 70.227411][ T4658] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.272566][ T4534] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.335505][ T4658] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.343649][ T4658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.418267][ T26] audit: type=1800 audit(1753104551.878:7): pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.102" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 70.462031][ T4182] attempt to access beyond end of device [ 70.462031][ T4182] loop4: rw=2049, want=45104, limit=40427 [ 70.510907][ T4676] loop2: detected capacity change from 0 to 512 [ 70.576110][ T4678] loop3: detected capacity change from 0 to 8 [ 70.590049][ T4534] usb 1-1: Using ep0 maxpacket: 16 [ 70.618641][ T4678] unable to read fragment index table [ 70.632846][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,. Quota mode: writeback. [ 70.675124][ T4676] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.738621][ T4678] netlink: 'syz.3.111': attribute type 2 has an invalid length. [ 70.750202][ T4678] netlink: 'syz.3.111': attribute type 2 has an invalid length. [ 70.940825][ T4534] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 70.969942][ T4534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.978966][ T4689] TCP: MD5 Hash failed for (172.20.20.187, 20002)->(172.20.20.187, 20002) L3 index 0 [ 70.995075][ T4534] usb 1-1: Product: syz [ 71.029119][ T4534] usb 1-1: Manufacturer: syz [ 71.037877][ T4534] usb 1-1: SerialNumber: syz [ 71.061557][ T4534] usb 1-1: config 0 descriptor?? [ 71.146817][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.153342][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.170731][ T4696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.117'. [ 71.227849][ T4696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.117'. [ 71.254519][ T4683] loop1: detected capacity change from 0 to 32768 [ 71.364267][ T4683] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 71.399826][ T4683] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 71.496389][ T4708] loop3: detected capacity change from 0 to 2048 [ 71.540052][ T4608] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.553003][ T4708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.590110][ T4534] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 71.648668][ T4534] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.710370][ T4534] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 71.718584][ T4534] usb 1-1: media controller created [ 71.751028][ T4534] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.837589][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 71.921627][ T4713] input: syz0 as /devices/virtual/input/input6 [ 71.960193][ T4608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 71.983598][ T4608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 72.004855][ T4608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 72.055270][ T4608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 72.193403][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 72.277707][ T4608] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 72.299987][ T4608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.308664][ T4608] usb 5-1: Product: syz [ 72.316375][ T4731] loop3: detected capacity change from 0 to 256 [ 72.339259][ T4733] loop1: detected capacity change from 0 to 512 [ 72.350137][ T4608] usb 5-1: Manufacturer: syz [ 72.354737][ T4608] usb 5-1: SerialNumber: syz [ 72.361913][ T4534] zl10353_read_register: readreg error (reg=127, ret==0) [ 72.368986][ T4534] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 72.373981][ T4662] dtv5100: wlen = 0, aborting. [ 72.377484][ T4534] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 72.398068][ T4608] usb 5-1: config 0 descriptor?? [ 72.406807][ T4534] usb 1-1: USB disconnect, device number 4 [ 72.427354][ T4534] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 72.545874][ T4733] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.582970][ T4733] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.600944][ T4733] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.133: corrupted inode contents [ 72.618154][ T4733] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #2: comm syz.1.133: mark_inode_dirty error [ 72.637859][ T4733] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.133: corrupted inode contents [ 72.695522][ T4608] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 72.715386][ T4733] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.133: corrupted inode contents [ 72.722082][ T4735] loop2: detected capacity change from 0 to 32768 [ 72.846655][ T4735] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 72.895128][ T4735] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.928936][ T4250] usb 5-1: USB disconnect, device number 2 [ 73.044194][ T4181] ocfs2: Unmounting device (7,2) on (node local) [ 73.124241][ T4757] loop3: detected capacity change from 0 to 256 [ 73.365579][ T4765] loop3: detected capacity change from 0 to 256 [ 73.563296][ T4250] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.755889][ T4773] loop3: detected capacity change from 0 to 4096 [ 73.778984][ T4752] loop1: detected capacity change from 0 to 40427 [ 73.839990][ T4250] usb 3-1: Using ep0 maxpacket: 8 [ 73.852013][ T4783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.862921][ T4752] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 73.872644][ T4752] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 73.902945][ T4782] loop4: detected capacity change from 0 to 16 [ 73.910981][ T4752] F2FS-fs (loop1): invalid crc value [ 73.947407][ T4752] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.957796][ T4780] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.975712][ T4782] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 74.031856][ T4780] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.085929][ T4752] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 74.107674][ T4752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.126117][ T4250] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.161184][ T4250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.187027][ T4250] usb 3-1: Product: syz [ 74.191459][ T4250] usb 3-1: Manufacturer: syz [ 74.196060][ T4250] usb 3-1: SerialNumber: syz [ 74.227317][ T4250] usb 3-1: config 0 descriptor?? [ 74.276983][ T26] audit: type=1800 audit(1753104555.738:8): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.139" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 74.309427][ T4188] attempt to access beyond end of device [ 74.309427][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 74.520077][ T4250] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 74.696090][ T4790] loop3: detected capacity change from 0 to 32768 [ 74.724207][ T4790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.155 (4790) [ 74.766240][ T23] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 74.798990][ T4790] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 74.839654][ T4790] BTRFS info (device loop3): setting nodatasum [ 74.848501][ T4790] BTRFS info (device loop3): enabling auto defrag [ 74.884994][ T4790] BTRFS info (device loop3): disabling tree log [ 74.899571][ T4790] BTRFS info (device loop3): using free space tree [ 74.919907][ T4790] BTRFS info (device loop3): has skinny extents [ 75.040113][ T4250] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 75.050631][ T4250] usb 3-1: USB disconnect, device number 4 [ 75.164253][ T23] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 75.176247][ T4790] BTRFS info (device loop3): enabling ssd optimizations [ 75.178291][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.307622][ T23] usb 5-1: config 0 descriptor?? [ 75.382101][ T23] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 75.590080][ T23] gp8psk: usb in 128 operation failed. [ 75.668314][ T4832] loop1: detected capacity change from 0 to 32768 [ 75.804873][ T4832] ERROR: (device loop1): jfs_readdir: DT_GETPAGE: dtree page corrupt [ 75.804873][ T4832] [ 75.850061][ T23] gp8psk: usb in 146 operation failed. [ 75.856067][ T23] gp8psk: failed to get FW version [ 75.874919][ T4832] ERROR: (device loop1): remounting filesystem as read-only [ 75.945210][ T4603] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 76.133372][ T23] gp8psk: usb in 149 operation failed. [ 76.138996][ T23] gp8psk: failed to get FPGA version [ 76.189971][ T23] gp8psk: usb in 138 operation failed. [ 76.195496][ T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 76.229923][ T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 76.267587][ T23] usb 5-1: USB disconnect, device number 3 [ 76.287709][ T13] cfg80211: failed to load regulatory.db [ 76.365261][ T4603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 76.390009][ T4603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 76.416821][ T4603] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.446374][ T4603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.466858][ T4603] usb 3-1: config 0 descriptor?? [ 76.475734][ T4871] sp0: Synchronizing with TNC [ 76.685268][ T4877] loop1: detected capacity change from 0 to 1024 [ 76.838705][ T4877] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 76.866590][ T4877] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.963242][ T4603] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 76.987338][ T4603] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input7 [ 77.015433][ T4877] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,dioread_nolock,nobarrier,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,usrjquota=,nomblk_io_submit,,errors=continue. Quota mode: none. [ 77.048444][ T4894] input: syz0 as /devices/virtual/input/input8 [ 77.117634][ T4603] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 77.219895][ C0] usb 3-1: input irq status -75 received [ 77.415939][ T4603] usb 3-1: USB disconnect, device number 5 [ 77.814912][ T4898] loop4: detected capacity change from 0 to 32768 [ 77.903950][ T4898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.190 (4898) [ 77.960605][ T4898] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 77.962661][ T4921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.198'. [ 77.969274][ T4898] BTRFS info (device loop4): using free space tree [ 77.969311][ T4898] BTRFS info (device loop4): has skinny extents [ 78.105986][ T4921] Zero length message leads to an empty skb [ 78.125969][ T4923] loop2: detected capacity change from 0 to 4096 [ 78.244468][ T4898] BTRFS info (device loop4): enabling ssd optimizations [ 78.435640][ T4181] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 78.457808][ T4948] loop1: detected capacity change from 0 to 24 [ 78.489200][ T4181] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 78.804892][ T4958] loop4: detected capacity change from 0 to 4096 [ 78.828740][ T4961] loop2: detected capacity change from 0 to 256 [ 78.860114][ T4963] loop1: detected capacity change from 0 to 128 [ 78.875905][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.910162][ T4963] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 78.942576][ T4961] exFAT-fs (loop2): failed to load upcase table [ 78.962532][ T4963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.977174][ T4961] exFAT-fs (loop2): failed to recognize exfat type [ 79.795669][ T5014] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.114500][ T5025] loop3: detected capacity change from 0 to 64 [ 80.162576][ T5029] loop4: detected capacity change from 0 to 256 [ 80.172700][ T4999] loop0: detected capacity change from 0 to 32768 [ 80.244078][ T4999] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.222 (4999) [ 80.298292][ T4999] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 80.331192][ T4999] BTRFS info (device loop0): setting nodatacow, compression disabled [ 80.405058][ T4999] BTRFS info (device loop0): setting datacow [ 80.413429][ T5035] loop2: detected capacity change from 0 to 1024 [ 80.436110][ T4999] BTRFS info (device loop0): doing ref verification [ 80.449984][ T4999] BTRFS info (device loop0): force clearing of disk cache [ 80.459052][ T4999] BTRFS info (device loop0): turning off barriers [ 80.465742][ T4999] BTRFS info (device loop0): turning on flush-on-commit [ 80.474211][ T4999] BTRFS info (device loop0): turning on sync discard [ 80.485752][ T4999] BTRFS info (device loop0): using free space tree [ 80.498476][ T5035] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 80.516122][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.529176][ T4999] BTRFS info (device loop0): has skinny extents [ 80.545835][ T5035] EXT4-fs error (device loop2): ext4_quota_enable:6418: comm syz.2.238: Bad quota inode: 3, type: 0 [ 80.587881][ T5035] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 80.614550][ T5035] EXT4-fs (loop2): mount failed [ 80.618184][ T5044] loop4: detected capacity change from 0 to 2048 [ 80.665990][ T4175] loop4: p1 < > p2 < > p3 p4 [ 80.679689][ T4175] loop4: partition table partially beyond EOD, truncated [ 80.760066][ T4175] loop4: p1 start 2305 is beyond EOD, truncated [ 80.766380][ T4175] loop4: p2 start 4294902784 is beyond EOD, truncated [ 80.775054][ T4175] loop4: p3 start 3724543488 is beyond EOD, truncated [ 80.782374][ T4175] loop4: p4 size 8192 extends beyond EOD, truncated [ 80.794789][ T5035] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 80.813936][ T5035] team0: Device dummy0 is up. Set it down before adding it as a team port [ 80.815130][ T5044] loop4: p1 < > p2 < > p3 p4 [ 80.888061][ T5044] loop4: partition table partially beyond EOD, truncated [ 80.902045][ T4999] BTRFS info (device loop0): enabling ssd optimizations [ 80.967674][ T5044] loop4: p1 start 2305 is beyond EOD, truncated [ 80.986008][ T5071] loop2: detected capacity change from 0 to 2048 [ 80.992754][ T5044] loop4: p2 start 4294902784 is beyond EOD, truncated [ 81.005892][ T4999] BTRFS info (device loop0): clearing free space tree [ 81.017860][ T5073] loop1: detected capacity change from 0 to 512 [ 81.040826][ T4999] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.051691][ T5044] loop4: p3 start 3724543488 is beyond EOD, truncated [ 81.058482][ T5044] loop4: p4 size 8192 extends beyond EOD, truncated [ 81.084526][ T4999] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.123268][ T5073] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.143489][ T5075] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.186431][ T5073] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.223186][ T4999] BTRFS info (device loop0): creating free space tree [ 81.243539][ T4999] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.280028][ T4999] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.289282][ T3560] loop4: p1 < > p2 < > p3 p4 [ 81.294938][ T3560] loop4: partition table partially beyond EOD, truncated [ 81.312831][ T4370] attempt to access beyond end of device [ 81.312831][ T4370] loop3: rw=1, want=162, limit=64 [ 81.332015][ T5073] EXT4-fs (loop1): 1 truncate cleaned up [ 81.338132][ T5073] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 81.358823][ T3560] loop4: p1 start 2305 is beyond EOD, truncated [ 81.367256][ T4370] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 81.400621][ T3560] loop4: p2 start 4294902784 is beyond EOD, truncated [ 81.403392][ T4370] attempt to access beyond end of device [ 81.403392][ T4370] loop3: rw=1, want=163, limit=64 [ 81.418322][ T4370] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 81.427579][ T4370] attempt to access beyond end of device [ 81.427579][ T4370] loop3: rw=1, want=164, limit=64 [ 81.434254][ T3560] loop4: p3 start 3724543488 is beyond EOD, truncated [ 81.438225][ T4370] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 81.455353][ T4370] attempt to access beyond end of device [ 81.455353][ T4370] loop3: rw=1, want=168, limit=64 [ 81.463717][ T3560] loop4: p4 size 8192 extends beyond EOD, truncated [ 81.477772][ T4370] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 81.494559][ T4370] attempt to access beyond end of device [ 81.494559][ T4370] loop3: rw=1, want=170, limit=64 [ 81.508664][ T4370] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 81.515442][ T5079] netlink: 'syz.4.247': attribute type 9 has an invalid length. [ 81.518298][ T4370] attempt to access beyond end of device [ 81.518298][ T4370] loop3: rw=1, want=172, limit=64 [ 81.540357][ T5079] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.247'. [ 81.561985][ T4370] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 81.589403][ T4738] udevd[4738]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.600248][ T4370] attempt to access beyond end of device [ 81.600248][ T4370] loop3: rw=1, want=173, limit=64 [ 81.637583][ T4370] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 81.647402][ T4370] attempt to access beyond end of device [ 81.647402][ T4370] loop3: rw=1, want=174, limit=64 [ 81.658623][ T4370] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 81.691970][ T4738] udevd[4738]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.701916][ T5080] netlink: 'syz.4.247': attribute type 9 has an invalid length. [ 81.718880][ T4370] attempt to access beyond end of device [ 81.718880][ T4370] loop3: rw=1, want=175, limit=64 [ 81.721971][ T5080] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.247'. [ 81.747322][ T4370] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 81.773138][ T4738] udevd[4738]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.815324][ T4370] attempt to access beyond end of device [ 81.815324][ T4370] loop3: rw=1, want=176, limit=64 [ 81.839816][ T4370] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 81.879520][ T5082] loop2: detected capacity change from 0 to 4096 [ 81.981401][ T5082] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 82.223232][ T5090] loop1: detected capacity change from 0 to 32768 [ 82.282776][ T5090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.250 (5090) [ 82.299261][ T5082] ntfs3: loop2: failed to convert "076c" to ascii [ 82.328003][ T5090] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 82.336832][ T5090] BTRFS info (device loop1): disabling tree log [ 82.343841][ T5090] BTRFS info (device loop1): setting nodatacow, compression disabled [ 82.352784][ T5090] BTRFS info (device loop1): max_inline at 0 [ 82.358780][ T5090] BTRFS info (device loop1): enabling ssd optimizations [ 82.365797][ T5090] BTRFS info (device loop1): using spread ssd allocation scheme [ 82.373509][ T5090] BTRFS info (device loop1): turning off barriers [ 82.380026][ T5090] BTRFS info (device loop1): turning on flush-on-commit [ 82.384864][ T5082] ntfs3: loop2: ino=5, "/" directory corrupted [ 82.386962][ T5090] BTRFS info (device loop1): doing ref verification [ 82.399727][ T5090] BTRFS info (device loop1): force clearing of disk cache [ 82.406926][ T5090] BTRFS info (device loop1): turning on sync discard [ 82.413671][ T5090] BTRFS info (device loop1): max_inline at 4096 [ 82.419972][ T5090] BTRFS info (device loop1): using free space tree [ 82.426474][ T5090] BTRFS info (device loop1): has skinny extents [ 82.591476][ T5110] block nbd3: shutting down sockets [ 82.606541][ T5113] loop0: detected capacity change from 0 to 4096 [ 82.807304][ T5090] BTRFS info (device loop1): clearing free space tree [ 82.814851][ T5090] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.824611][ T5090] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.842018][ T5090] BTRFS info (device loop1): creating free space tree [ 82.850116][ T5090] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.860233][ T5090] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.895964][ T5141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.935608][ T5137] loop2: detected capacity change from 0 to 4096 [ 82.975018][ T5113] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 83.003604][ T5143] netlink: 'syz.3.263': attribute type 2 has an invalid length. [ 83.127162][ T5143] syz.3.263 (5143) used greatest stack depth: 20864 bytes left [ 83.720520][ T5084] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.746747][ T5165] loop1: detected capacity change from 0 to 128 [ 83.792385][ T5168] cgroup: fork rejected by pids controller in /syz3 [ 83.849378][ T5165] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.871115][ T5165] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.110157][ T5084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.132221][ T5084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.145132][ T5084] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.158212][ T5084] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.167301][ T5084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.177826][ T5084] usb 3-1: config 0 descriptor?? [ 84.433778][ T4192] kernel read not supported for file /dsp (pid: 4192 comm: kworker/1:3) [ 84.672647][ T5084] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 84.762043][ T5084] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 84.935573][ T5187] loop0: detected capacity change from 0 to 131072 [ 84.962642][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 85.002064][ T5084] usb 3-1: USB disconnect, device number 6 [ 85.034798][ T5187] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 85.041582][ T5187] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.051336][ T5187] F2FS-fs (loop0): invalid crc value [ 85.072843][ T5187] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.110637][ T4603] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.128740][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.135913][ T5187] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.143151][ T5187] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 85.159053][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.186404][ T5189] device bridge_slave_0 entered promiscuous mode [ 85.258762][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.278587][ T5187] F2FS-fs (loop0): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:10232 [ 85.296448][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.325160][ T5189] device bridge_slave_1 entered promiscuous mode [ 85.386297][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.405857][ T4603] usb 5-1: Using ep0 maxpacket: 16 [ 85.406979][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.463682][ T5189] team0: Port device team_slave_0 added [ 85.474523][ T5211] loop1: detected capacity change from 0 to 8192 [ 85.481589][ T5189] team0: Port device team_slave_1 added [ 85.518579][ T5211] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 85.540327][ T5211] REISERFS (device loop1): using ordered data mode [ 85.546844][ T5211] reiserfs: using flush barriers [ 85.547586][ T4603] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.570466][ T5211] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.574004][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.593561][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.619771][ T4603] usb 5-1: config 0 has no interface number 0 [ 85.624405][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.634553][ T5214] loop2: detected capacity change from 0 to 512 [ 85.638222][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.649483][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.675785][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.694101][ T5211] REISERFS (device loop1): checking transaction log (loop1) [ 85.714745][ T5211] REISERFS (device loop1): Using r5 hash to sort names [ 85.727359][ T5189] device hsr_slave_0 entered promiscuous mode [ 85.732497][ T5211] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 85.744442][ T5189] device hsr_slave_1 entered promiscuous mode [ 85.764441][ T5189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.780151][ T5189] Cannot create hsr debugfs directory [ 85.820239][ T4603] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 85.850627][ T4603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.858634][ T4603] usb 5-1: Product: syz [ 85.890154][ T5214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.288: bg 0: block 248: padding at end of block bitmap is not set [ 85.946451][ T4603] usb 5-1: Manufacturer: syz [ 85.953098][ T5214] Quota error (device loop2): write_blk: dquota write failed [ 85.968999][ T4603] usb 5-1: SerialNumber: syz [ 85.997448][ T4603] usb 5-1: config 0 descriptor?? [ 86.011322][ T5214] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 86.059342][ T5214] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.288: Failed to acquire dquot type 1 [ 86.082576][ T5214] EXT4-fs (loop2): 1 truncate cleaned up [ 86.088292][ T5214] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.089066][ T5189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.111560][ T4603] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 86.126877][ T5214] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.205510][ T5219] loop0: detected capacity change from 0 to 4096 [ 86.216344][ T5214] Quota error (device loop2): find_block_dqentry: Quota for id 131074 referenced but not present [ 86.233577][ T5214] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131074 [ 86.247400][ T5214] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.288: Failed to acquire dquot type 1 [ 86.277431][ T5189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.304673][ T5219] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 86.322179][ T5214] syz.2.288 (5214) used greatest stack depth: 18880 bytes left [ 86.329813][ T5219] ntfs3: loop0: Failed to load $MFT. [ 86.409775][ T5189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.451093][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 86.460090][ T5225] netlink: 'syz.0.292': attribute type 18 has an invalid length. [ 86.467871][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 86.515692][ T4534] kernel read not supported for file [timerfd] (pid: 4534 comm: kworker/0:8) [ 86.552256][ T5189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.660068][ T5084] Bluetooth: hci2: command 0x0409 tx timeout [ 86.739660][ T5244] loop1: detected capacity change from 0 to 1024 [ 86.771946][ T5189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.210080][ T4603] gspca_spca1528: reg_w err -71 [ 87.215192][ T4603] spca1528: probe of 5-1:0.1 failed with error -71 [ 87.224791][ T5189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.234069][ T4603] usb 5-1: USB disconnect, device number 4 [ 87.258831][ T5244] EXT4-fs (loop1): Ignoring removed orlov option [ 87.286146][ T5189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.348790][ T5189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.367303][ T5244] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 87.583889][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.632668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.643869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.655183][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.667434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.677260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.685852][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.692960][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.720932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.729535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.732756][ T5261] loop2: detected capacity change from 0 to 8192 [ 87.790871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.815375][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.822498][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.859324][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.877148][ T5261] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 87.893071][ T5261] REISERFS (device loop2): using ordered data mode [ 87.899586][ T5261] reiserfs: using flush barriers [ 87.904388][ T5266] loop1: detected capacity change from 0 to 512 [ 87.914398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.925508][ T5267] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.927417][ T5261] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 87.937518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.984109][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.997848][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.035500][ T5259] loop0: detected capacity change from 0 to 32768 [ 88.047349][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.057827][ T5259] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.301 (5259) [ 88.071874][ T5261] REISERFS (device loop2): checking transaction log (loop2) [ 88.084111][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.101319][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.109668][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.114179][ T5266] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 88.118118][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.136076][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.143670][ T5259] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 88.144488][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.173177][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.182305][ T5266] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.191880][ T5261] REISERFS (device loop2): Using r5 hash to sort names [ 88.194113][ T5266] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.304: Failed to acquire dquot type 1 [ 88.199570][ T5261] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 88.210597][ T5259] BTRFS info (device loop0): using free space tree [ 88.231373][ T5259] BTRFS info (device loop0): has skinny extents [ 88.260418][ T5266] EXT4-fs (loop1): 1 truncate cleaned up [ 88.270570][ T5266] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 88.287004][ T5261] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 88.299528][ T5266] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.506937][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.524062][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.564681][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.606640][ T5259] BTRFS info (device loop0): enabling ssd optimizations [ 88.625239][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.643402][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.693406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.710634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.745656][ T5083] Bluetooth: hci2: command 0x041b tx timeout [ 88.746683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.779186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.810571][ T5189] device veth0_vlan entered promiscuous mode [ 88.824884][ T5189] device veth1_vlan entered promiscuous mode [ 88.865054][ T5189] device veth0_macvtap entered promiscuous mode [ 88.889327][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.898812][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.937745][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.977475][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.017471][ T5189] device veth1_macvtap entered promiscuous mode [ 89.036216][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.055267][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.126836][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.153183][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.163390][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.184447][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.200764][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.212445][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.223926][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.238026][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.250135][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.265306][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.277315][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.288760][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.307970][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.335726][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.346284][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.356709][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.367276][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.377179][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.387778][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.397702][ T5084] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 89.398813][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.415970][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.427642][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.435040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.443684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.452340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.460967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.481797][ T5189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.491311][ T5189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.500359][ T5083] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.508085][ T5189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.517938][ T5189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.634592][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.649560][ T5084] usb 3-1: Using ep0 maxpacket: 16 [ 89.653157][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.679236][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.697420][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.707714][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.718311][ T5326] loop1: detected capacity change from 0 to 512 [ 89.734256][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.800795][ T5330] loop3: detected capacity change from 0 to 512 [ 89.808605][ T5326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.822797][ T5326] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.840059][ T5330] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 89.862893][ T4192] Bluetooth: hci5: command 0x1003 tx timeout [ 89.869566][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 89.876567][ T5083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.887730][ T5083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.898087][ T5083] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 89.907583][ T5083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.909685][ T5330] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 89.925337][ T5330] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.283: attempt to clear invalid blocks 2 len 1 [ 89.930097][ T5084] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 89.947907][ T5330] EXT4-fs (loop3): Remounting filesystem read-only [ 89.966735][ T5083] usb 1-1: config 0 descriptor?? [ 89.971244][ T5330] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 89.982166][ T5084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.995565][ T5330] EXT4-fs (loop3): Remounting filesystem read-only [ 89.998514][ T5084] usb 3-1: Product: syz [ 90.002375][ T5330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.283: invalid indirect mapped block 1819239214 (level 0) [ 90.008973][ T5084] usb 3-1: Manufacturer: syz [ 90.025983][ T5330] EXT4-fs (loop3): Remounting filesystem read-only [ 90.028653][ T5084] usb 3-1: SerialNumber: syz [ 90.037627][ T5330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.283: invalid indirect mapped block 1819239214 (level 1) [ 90.055197][ T5330] EXT4-fs (loop3): Remounting filesystem read-only [ 90.062437][ T5330] EXT4-fs (loop3): 1 truncate cleaned up [ 90.068356][ T5330] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 90.111818][ T5330] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 90.265056][ T5340] loop3: detected capacity change from 0 to 1024 [ 90.323980][ T5340] EXT4-fs (loop3): inline encryption not supported [ 90.334263][ T5340] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.362587][ T5340] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 90.456939][ T5340] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.319: Allocating blocks 497-513 which overlap fs metadata [ 90.473875][ T5083] samsung 0003:0419:0600.0008: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.0-1/input0 [ 90.681844][ T4233] usb 1-1: USB disconnect, device number 5 [ 90.820313][ T5083] Bluetooth: hci2: command 0x040f tx timeout [ 90.993867][ T5084] snd-usb-audio: probe of 3-1:222.0 failed with error -2 [ 90.999975][ T4550] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.019627][ T4738] udevd[4738]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.199214][ T5084] usb 3-1: USB disconnect, device number 7 [ 91.233343][ T5359] loop0: detected capacity change from 0 to 64 [ 91.289933][ T4550] usb 4-1: Using ep0 maxpacket: 16 [ 91.441131][ T4550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.630122][ T4550] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.639208][ T4550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.647289][ T4292] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.654887][ T4550] usb 4-1: Product: syz [ 91.659046][ T4550] usb 4-1: Manufacturer: syz [ 91.664154][ T4550] usb 4-1: SerialNumber: syz [ 91.670783][ T4550] usb 4-1: config 0 descriptor?? [ 91.731976][ T4550] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 91.755484][ T4550] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 91.910097][ T4292] usb 2-1: Using ep0 maxpacket: 32 [ 91.946509][ T4192] Bluetooth: hci5: command 0x1001 tx timeout [ 91.956627][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 92.071429][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.093526][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.114863][ T4292] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 92.125864][ T5359] [ 92.128207][ T5359] ============================================ [ 92.134300][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.134343][ T5359] WARNING: possible recursive locking detected [ 92.134357][ T5359] 5.15.189-syzkaller #0 Not tainted [ 92.145416][ T4292] usb 2-1: config 0 descriptor?? [ 92.148418][ T5359] -------------------------------------------- [ 92.148425][ T5359] syz.0.324/5359 is trying to acquire lock: [ 92.170499][ T5359] ffff8880593220b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 92.173325][ T4233] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 92.179816][ T5359] [ 92.179816][ T5359] but task is already holding lock: [ 92.179823][ T5359] ffff8880593220b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 92.179867][ T5359] [ 92.179867][ T5359] other info that might help us debug this: [ 92.179871][ T5359] Possible unsafe locking scenario: [ 92.179871][ T5359] [ 92.179875][ T5359] CPU0 [ 92.179878][ T5359] ---- [ 92.179881][ T5359] lock(&tree->tree_lock/1); [ 92.179895][ T5359] lock(&tree->tree_lock/1); [ 92.179907][ T5359] [ 92.179907][ T5359] *** DEADLOCK *** [ 92.179907][ T5359] [ 92.179910][ T5359] May be due to missing lock nesting notation [ 92.179910][ T5359] [ 92.179915][ T5359] 6 locks held by syz.0.324/5359: [ 92.179924][ T5359] #0: ffff88802adc2870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 92.179962][ T5359] #1: ffff888078988460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 92.180003][ T5359] #2: ffff888058b62328 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: generic_file_write_iter+0x7e/0x1b0 [ 92.180047][ T5359] #3: ffff888058b62178 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 92.296672][ T5359] #4: ffff8880593220b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 92.306385][ T5359] #5: ffff888058b60778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 92.317573][ T5359] [ 92.317573][ T5359] stack backtrace: [ 92.323445][ T5359] CPU: 1 PID: 5359 Comm: syz.0.324 Not tainted 5.15.189-syzkaller #0 [ 92.331483][ T5359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.341518][ T5359] Call Trace: [ 92.344786][ T5359] [ 92.347693][ T5359] dump_stack_lvl+0x168/0x230 [ 92.352351][ T5359] ? show_regs_print_info+0x20/0x20 [ 92.357528][ T5359] ? load_image+0x3b0/0x3b0 [ 92.362009][ T5359] __lock_acquire+0x1227/0x7c60 [ 92.366838][ T5359] ? mark_lock+0x94/0x320 [ 92.371150][ T5359] ? verify_lock_unused+0x140/0x140 [ 92.376340][ T5359] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 92.382309][ T5359] ? lock_chain_count+0x20/0x20 [ 92.387136][ T5359] ? __rwlock_init+0x140/0x140 [ 92.391881][ T5359] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 92.397244][ T5359] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 92.403111][ T5359] ? lockdep_hardirqs_on+0x94/0x140 [ 92.408284][ T5359] lock_acquire+0x197/0x3f0 [ 92.412764][ T5359] ? hfs_find_init+0x15b/0x1d0 [ 92.417506][ T5359] ? __might_sleep+0xf0/0xf0 [ 92.420132][ T4550] em28xx 4-1:0.0: chip ID is em28178 [ 92.422071][ T5359] ? read_lock_is_recursive+0x10/0x10 [ 92.422093][ T5359] ? __kasan_kmalloc+0xcc/0xf0 [ 92.437449][ T5359] ? __kasan_kmalloc+0xb5/0xf0 [ 92.442189][ T5359] ? hfs_find_init+0x84/0x1d0 [ 92.446842][ T5359] ? hfs_bmap_reserve+0x103/0x420 [ 92.451840][ T5359] ? __hfs_ext_write_extent+0x1fa/0x470 [ 92.457357][ T5359] ? __hfs_ext_cache_extent+0x6b/0x9b0 [ 92.462791][ T5359] ? hfs_get_block+0x3d4/0xbd0 [ 92.467529][ T5359] ? __block_write_begin_int+0x54e/0x15a0 [ 92.473224][ T5359] ? cont_write_begin+0x58a/0x7b0 [ 92.478223][ T5359] ? hfs_find_init+0x15b/0x1d0 [ 92.482963][ T5359] __mutex_lock_common+0x1eb/0x2390 [ 92.488139][ T5359] ? hfs_find_init+0x15b/0x1d0 [ 92.492881][ T5359] ? mutex_lock_io_nested+0x60/0x60 [ 92.498091][ T5359] mutex_lock_nested+0x17/0x20 [ 92.502834][ T5359] hfs_find_init+0x15b/0x1d0 [ 92.507398][ T5359] hfs_extend_file+0x2eb/0x1280 [ 92.512226][ T5359] ? hfs_ext_keycmp+0x1c3/0x310 [ 92.517065][ T5359] ? hfs_get_block+0xbd0/0xbd0 [ 92.521817][ T5359] ? hfs_rename+0x320/0x320 [ 92.526315][ T5359] ? hfs_find_exit+0xa0/0xa0 [ 92.530882][ T5359] ? hfs_brec_find+0x3c5/0x500 [ 92.535622][ T5359] hfs_bmap_reserve+0x103/0x420 [ 92.540455][ T5359] __hfs_ext_write_extent+0x1fa/0x470 [ 92.545800][ T5359] __hfs_ext_cache_extent+0x6b/0x9b0 [ 92.551058][ T5359] ? mutex_lock_nested+0x17/0x20 [ 92.555998][ T5359] ? hfs_find_init+0x15b/0x1d0 [ 92.560734][ T5359] hfs_extend_file+0x313/0x1280 [ 92.565560][ T5359] ? hfs_get_block+0xbd0/0xbd0 [ 92.570305][ T5359] ? memset+0x1e/0x40 [ 92.574282][ T5359] ? lockdep_init_map_type+0x9d/0x850 [ 92.579633][ T5359] ? slab_post_alloc_hook+0x2aa/0x380 [ 92.584980][ T5359] hfs_get_block+0x3d4/0xbd0 [ 92.589551][ T5359] ? hfs_free_extents+0x430/0x430 [ 92.594553][ T5359] ? do_raw_spin_unlock+0x11d/0x230 [ 92.599731][ T5359] ? create_page_buffers+0x238/0x320 [ 92.605003][ T5359] __block_write_begin_int+0x54e/0x15a0 [ 92.610524][ T5359] ? hfs_free_extents+0x430/0x430 [ 92.615527][ T5359] ? page_zero_new_buffers+0x490/0x490 [ 92.620970][ T5359] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 92.626943][ T5359] ? lock_chain_count+0x20/0x20 [ 92.631783][ T5359] ? do_user_addr_fault+0x694/0xc80 [ 92.636959][ T5359] ? wait_for_stable_page+0xd9/0x110 [ 92.642220][ T5359] cont_write_begin+0x58a/0x7b0 [ 92.647043][ T5359] ? lockdep_hardirqs_on+0x94/0x140 [ 92.652216][ T5359] ? generic_cont_expand_simple+0x190/0x190 [ 92.658087][ T5359] ? __get_user_nocheck_1+0x6/0x10 [ 92.663180][ T5359] hfs_write_begin+0x92/0xe0 [ 92.667744][ T5359] ? hfs_free_extents+0x430/0x430 [ 92.672750][ T5359] generic_perform_write+0x2aa/0x530 [ 92.678028][ T5359] ? atime_needs_update+0x780/0x780 [ 92.683207][ T5359] ? grab_cache_page_write_begin+0xa0/0xa0 [ 92.688990][ T5359] ? file_remove_privs+0x590/0x590 [ 92.694083][ T5359] ? read_lock_is_recursive+0x10/0x10 [ 92.699432][ T5359] ? preempt_count_add+0x8d/0x190 [ 92.704430][ T5359] ? rwsem_write_trylock+0x12f/0x1b0 [ 92.709688][ T5359] ? clear_nonspinnable+0x60/0x60 [ 92.714685][ T5359] __generic_file_write_iter+0x25f/0x4e0 [ 92.720302][ T5359] generic_file_write_iter+0xa6/0x1b0 [ 92.725665][ T5359] vfs_write+0x712/0xd00 [ 92.729886][ T5359] ? file_end_write+0x250/0x250 [ 92.734710][ T5359] ? __fget_files+0x40f/0x480 [ 92.739364][ T5359] ? mutex_lock_nested+0x17/0x20 [ 92.744277][ T5359] ? __fdget_pos+0x2bf/0x370 [ 92.748839][ T5359] ? ksys_write+0x71/0x250 [ 92.753230][ T5359] ksys_write+0x14d/0x250 [ 92.757535][ T5359] ? __ia32_sys_read+0x80/0x80 [ 92.762277][ T5359] ? lockdep_hardirqs_on+0x94/0x140 [ 92.767465][ T5359] do_syscall_64+0x4c/0xa0 [ 92.771867][ T5359] ? clear_bhb_loop+0x30/0x80 [ 92.776540][ T5359] ? clear_bhb_loop+0x30/0x80 [ 92.781195][ T5359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.787071][ T5359] RIP: 0033:0x7f168b43c9a9 [ 92.791467][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.811049][ T5359] RSP: 002b:00007f16892a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.819441][ T5359] RAX: ffffffffffffffda RBX: 00007f168b663fa0 RCX: 00007f168b43c9a9 [ 92.827394][ T5359] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000005 [ 92.835343][ T5359] RBP: 00007f168b4bed69 R08: 0000000000000000 R09: 0000000000000000 [ 92.843291][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.851239][ T5359] R13: 0000000000000000 R14: 00007f168b663fa0 R15: 00007fff2d536c28 [ 92.859196][ T5359] [ 92.900034][ T4192] Bluetooth: hci2: command 0x0419 tx timeout [ 93.009945][ T4550] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 93.017972][ T4550] em28xx 4-1:0.0: board has no eeprom [ 93.030027][ T4233] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 93.039058][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.047224][ T4233] usb 3-1: Product: syz [ 93.051412][ T4233] usb 3-1: Manufacturer: syz [ 93.056036][ T4233] usb 3-1: SerialNumber: syz [ 93.061724][ T4233] usb 3-1: config 0 descriptor?? [ 93.082992][ T4292] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 93.140016][ T4550] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 93.147856][ T4550] em28xx 4-1:0.0: dvb set to bulk mode. [ 93.155735][ T4550] usb 4-1: USB disconnect, device number 3 [ 93.162017][ T4550] em28xx 4-1:0.0: Disconnecting em28xx [ 93.167520][ T4292] em28xx 4-1:0.0: Binding DVB extension [ 93.186432][ T4292] em28xx 4-1:0.0: Registering input extension [ 93.239922][ T4292] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 93.246486][ T4292] Registered IR keymap rc-empty [ 93.251892][ T4292] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 93.262449][ T4292] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 93.273663][ T4292] em28xx 4-1:0.0: Input extension successfully initialized [ 93.280910][ T4550] em28xx 4-1:0.0: Closing input extension [ 93.301609][ T4550] em28xx 4-1:0.0: Freeing device [ 93.360738][ T4292] usb 2-1: USB disconnect, device number 3 [ 93.540439][ T4233] airspy 3-1:0.0: Board ID: 00 [ 93.545260][ T4233] airspy 3-1:0.0: Firmware version: [ 94.020167][ T5083] Bluetooth: hci5: command 0x1009 tx timeout [ 94.180012][ T4233] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 94.187964][ T4233] airspy 3-1:0.0: Registered as swradio24 [ 94.193772][ T4233] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 94.205660][ T4233] usb 3-1: USB disconnect, device number 8