last executing test programs: 1.479301915s ago: executing program 2 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.478831745s ago: executing program 3 (id=690): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c696f636861727365743d6d616363726f617469616e2c6e616d65636173653d312c616c6c6f775f7574696d653d3030303030303030303030372c756d61736b3d30303030303030303030303030303030303030303232362c0000000000000000d74bdc68"], 0x1, 0x14f7, &(0x7f0000002a80)="$eJzs3HuYjlXbMPB1rrUuxjTpbpLNsM51XtxpsEySZJOQTZIkSZJdQtIkSUJiyC5pSEK2k2QzhGQzjUljv99knzR5pEmSkOzC+g49z/d6nrfnffve7+n7HO875+841nGvc677PO+15pxjrs0f9w89R9VrUb92MyIS/xL460uKECJGCDFMCHGDECIQQlSKrxR/5XgBBSn/2oewP9ej6dd6Bexa4v7nbdz/vI37n7dx//M27n/exv3P27j/eRv3n7G8bPucYjfyyLuDn//nZXz+/x8kt/zkbzaWv7nXfyGF+5+3cf/zNu5/3sb9z9u4/3kb9/9/vlr/yTHuf97G/WcsL7vWz595XNtxrf/+GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlDef8VVoIceU1uNaLYowxxhhjjDHG2J/K57/WK2CMMcYYY4wxxtj/eyCkUEKLQOQT+UWMKCBixXUiTlwvCoobRETcKOLFTaKQuFkUFkVEUVFMJIjiooQwAoUVJEJRUpQSUXGLKC1uFYmijCgrygknyoskcZuoIG4XFcUdopK4U1QWd4kqoqqoJqqLu0UNcY+oKWqJ2uJeUUfUFfVEfXGfaCDuFw3FA6KReFA0Fg+JJuJh0VQ8IpqJR0Vz8ZhoIR4XLcUTopVoLdqItqLd/1X+K6KveFX0E/1FihggBorXxCAxWAwRQ8Uw8boYLt4QI8SbIlWMFKPEW2K0eFuMEe+IsWKcGC/eFRPERDFJTBZTxFSRJt4T08T7Yrr4QMwQM8UsMVukizlirvhQzBPzxQLxkVgoPhaLxGKxRCwVGeITkSmWiSzxqVguPhPZYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7eJzsUPsFLvEbrFH7BX7xBdiv/hSHBBfiRzx9X8x/+y/y+8FAgRIkKBBQz7IBzEQA7EQC3EQBwWhIEQgAvEQD4WgEBSGwlAUikICJEAJKAEICAQEJaEkRCEKpaE0JEIilIWy4MBBEiRBBbgdKkJFqASVoDJUhipQFapCdagONaAG1ISaUBtqQx2oA/WgHtwH98H90BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCK2gFbaANtIN20B7aQwfoAJ2gE3SGztAFukAyJENX6ArdoBt0h+7QA3pAT+gJvaA39IZX4BV4FV6F/lBHDoCBMBAGwSAYAkNhKLwOw+ENeAPehFQYCaPgLXgL3oYxcAbGwjgYD+OhhpwIk2AykJwKaZAG02AaTIfpMANmwkyYDekwB+bCXJgH82E+fAQL4WP4GBbDYlgKGZABmbAMsiALlsNZyIYVsBJWwWpYA6thHayHdbARNsFG2AJbYBtsg8/hc9gJO2E37Ia9sBe+gC/gS/gSUiEHcuAgHIRDcAgOw2HIhVw4AkfgKByFY3AMjsNxOAEn4RSchNNwGs7AWTgH5+ACXICL8FLCd833ltmQKuQVWmqZT+aTMTJGxspYGSfjZEFZUEZkRMbLeFlIFpKFZWFZVBaVCTJBlpAlJEqUJENZUpaUURmVpWVpmSgTZVlZVjrpZJJMkhVkBVlRVpSV5J2ysrxLVpFVZUdXXVaXNWQnV1PWkrVlbVlH1pX1ZH1ZXzaQDWRD2VA2ko1kY9lYNpEPy6ZyAAyBR+WVzrSQI6GlHAWtZGvZRraVb8OTsr0cAx1kR9lJPi3HwVjoItu7ZPmc7ConQTf5gpwML8oecir0lC/LXrK37CNfkX1lB9dP9pczYIAcKGfDIDlYDpFD5TyoK690rJ58U6bKkXKUfEsuhbflGPmOHCvHyfHyXTlBTpST5GQ5RU6VafI9OU2+L6fLD+QMOVPOkrNlupwj58oP5Tw5Xy6QH8mF8mO5SC6WS+RSmSE/kZlymcySn8rl8jOZLVfIlXKVXC3XyLVynVwvN8iNcpPcLLfIrXKb3C4/lzvkTrlL7pZ75F65T34h98sv5QH5lcyRX8uD8i/ykPxGHpbfylz5nTwiv5dH5Q/ymPxRHpc/yRPypDwlf5an5S/yjDwrz8nz8oL8VV6Ul+Rl6aVQoKRSSqtA5VP5VYwqoGLVdSpOXa8KqhtURN2o4tVNqpC6WRVWRVRRVUwlqOKqhDIKlVWkQlVSlVJRdYsqrW5ViaqMKqvKKafKqyR1m6qgblcV1R2qkrpTVVZ3qSqqqqqmqqu7VQ11j6qpaqna6l5VR9VV9VR9dZ9qoO5XDdUDqpF6UDVWD6km6mHVVD2imqlHVXP1mGqhHlct1ROqlWqt2qi2qp16UrVXT6kOqqPqpJ5WndUzqot6ViWr51RX9bzqpl5Q3dWLqod6SfVUL6teqrfqoy6py8qrfqq/SlED1ED1mhqkBqshaqgapl5Xw9UbaoR6U6WqkWqUekuNVm+rMeodNVaNU+PVu2qCmqgmqclqipqq0tR7app6X01XH6gZaqaapWardDVHDflbpQX/B/nv/5P8Eb99+ja1XX2udqidapfarfaovWqf2qf2q/3qgDqgclSOOqgOqkPqkDqsDqtclauOqCPqqDqqjqlj6rg6rk6ok+q8+lmdVr+oM+qsOqvOqwvqgrr4t9+B0KClVlrrQOfT+XWMLqBj9XU6Tl+vC+obdETfqOP1TbqQvlkX1kV0UV1MJ+jiuoQ2GrXVpENdUpfSUX2LLq1v1Ym6jC6ry2mny+skfdu/nP9H62un2+n2ur3uoDvoTrqT7qw76y66i07Wybqr7qq76W66u+6ue+geuqfuqXvpXrqP7qP76r66n+6nU3SKHqhf04P0YD1ED9XD9Ot6uB6uR+gROlWn6lF6lB6tR+sxeoweq8fq8Xq8nqAn6El6kp6ip+g0naan6Wl6up6uZ+gZepaepdN1up6r5+p5ep5eoBfohXqhXqQX6SV6ic7QGTpTZ+osnaWX6+U6W6/QK/QqvUqv0Wv0Or1Ob9Ab9Ca9SW/RW3S23q636x16h96ld+k9eo/ep/fp/Xq/PqAP6Bydow/qg/qQPqQP68M6V+fqI/qIPqqP6mP6mD6uj+sT+oQ+pU/p0/q0PqPP6HP6nL6gL+iL+qK+rC9fuewLZCADHeggX5AviAligtggNogL4oKCQcEgEkSC+CA+KBTcHBQOigRFg2JBQlA8KBGYAAMbUBAGJYNSQTS4JSgd3BokBmWCskG5wAXlg6TgtqBCcHtQMbgjqBTcGVQO7gqqBFWDakH14O6gRnBPUDOoFdQO7g3qBHWDekH94L6gQXB/0DB4IGgUPBg0Dh4KmgQPB02DR4JmwaNB8+CxoEXweNAyeCJoFbQO2gRtg3Z/an3vzxR5yvUz/U2KGWAGmtfMIDPYDDFDzTDzuhlu3jAjzJsm1Yw0o8xbZrR524wx75ixZpwZb941E8xEM8lMNlPMVJNm3jPTzPtmuvnAzDAzzSwz26SbOWau+dDMM/PNAvORWWg+NovMYrPELDUZ5hOTaZaZLPOpWW4+M9lmhVlpVpnVZo1Za9aZ9WaD2Wg2mc1mi9lqtpnt5nOzw+w0u8xus8fsNfvMF2a/+dIcMF+ZHPO1OWj+Yg6Zb8xh863JNd+ZI+Z7c9T8YI6ZH81x85M5YU6aU+Znc9r8Ys6Ys+acOW8umF/NRXPJXDb+ysX9ldM7atSYD/NhDMZgLMZiHMZhQSyIEYxgPMZjISyEhbEwFsWimIAJWAJL4BWEhCWxJEYxiqWxNCZiIpbFsujQYRImYQWsgBWxIlbCSlgZK2MVrILVsBrejXfjPXgP1sJaeC/ei3WxLtbH+tgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZNsfm2AJbYEtsia2wFbbBNtgO22F7bI8dsAN2wk7YGTtjF+yCyZiMXbErdsNu2B27Yw/sgT2xJ/bCXtgH+2Bf7Iv9sB+mYAoOxIE4CAfhEByCw3AYDsfhOAJHYCqm4igchaNxNI7BMTgWx+F4fBcn4ESchJNxCk7FNEzDaTgNp+N0nIEzcBbOwnRMx7k4F+fhPFyAC3AhLsRFuAiX4BLMwAzMxEzMwixcjssxG7NxJa7E1bga1+JaXI/rcSNuxM24GbfiVtyO23EH7sBduAv34B7ch/twP+7HA3gAczAHD+JBPISH8DAexlzMxSN4BI/iUTyGx/A4HscTeAJP4Sk8jafxDJ7Bc3gOL+CveBEv4WX0GGOliLXX2Th7vS1ob7AxtoD9+7ioLWYTbHFbwhpb2Bb5hxittYm2jC1ry1lny9ske9vv4iq2qq1mq9u7bQ17j635u7iBvd82tA/YRvZBW9/e9w9xY/uQbWIft03tE7aZbW2b27a2hX3ctrRP2Fa2tW1j29rO9hnbxT5rk+1ztqt9/ndxpl1m19sNdqPdZPfbL+05e94etT/YC/ZX28/2t8Ps63a4fcOOsG/aVDvyd/F4+66dYCfaSXaynWKn/i6eZWfbdDvHzrUf2nl2/u/iDPuJXWiz7CK72C6xS3+Lr6wpy35ql9vPbLZdYVfaVXa1XWPX2nX/ttZVdovdarfZffYLu8PutLvsbrvH7v0tvrKPA/Yrm2O/tkfs9/aQ/cYetsdsrv3ut/jK/o7ZH+1x+5M9YU/aU/Zne9r+Ys/Ys7/t/8ref7aX7GXrrSAgSYo0BZSP8lMMFaBYuo7i6HoqSDdQhG6keLqJCtHNVJiKUFEqRglUnEqQISRLRCGVpFIUpVuoNN1KiVSGylI5clSekug2qkC3U0W6gyrRnVSZ7qIqVJWqUXW6m2rQPVSTalFtupfqUF2qR/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk9Ss3pMWpBj1NLeoJaUWtqQ22pHT1J7ekp6kAdqRM9TZ3pGepCz1IyPUdd6XnqRi9Qd3qRetBL1JNepl7Um/rQK9SXXqV+1J9SaAANpNdoEA2mITSUhtHrNJzeoBH0JqXSSBpFb9FoepvG0Ds0lsbReHqXJtBEmkSTaQpNpTR6j6bR+zSdPqAZNJNm0WxKpzk0lz6keTSfFtBHtJA+pkW0mJbQUsqgTyiTllEWfUrL6TPKphW0klbRalpDa2kdracNtJE20WbaQltpG22nz2kH7aRdtJv20F7aR1/QfvqSDtBXlENf00H6Cx2ib+gwfUu59B0doe/pKP1Ax+hHOk4/0Qk6SafoZzpNv9AZOkvn6DxdoF/pIl2iy+RJhBDKUIU6DMJ8Yf4wJiwQxobXhXHh9WHB8IYwEt4Yxoc3hYXCm8PCYZGwaFgsTAiLhyVCE2JoQwrDsGRYKoyGt4Slw1vDxLBMWDYsF7qwfJgU3hZWCG8PK4Z3hJXCO8PK4V1hlbBq+PiD1cO7wxrhPWHNsFZYO7w3rBPWDeuF9cP7wgbh/WHD8IGwUfhgWDF8KGwSPhw2DR8Jm4WPhs3Dx8IW4eNhy/CJsFXYOmwTtg3bhU+G7cOnwg5hx7BT+HTYOXwm7BI+GyaHz4Vdw+f/8HhKOCAcGL4WvhZ6/4BaEl0azYh+Es2MLotmRT+NLo9+Fs2OroiujK6Kro6uia6Nrouuj26Iboxuim6ObolujW6Lel8/v3DgpFNOu8Dlc/ldjCvgYt11Ls5d7wq6G1zE3eji3U2ukLvZFXZFXFFXzCW44q6EMw6ddeRCV9KVclF3iyvtbnWJrowr68o558q7JNfWtXPtXHv3lOvgOrpO7mn3tHvGPeOedc+651xX97zr5l5w3d2Lrod7yb3kXna9XG/Xx73i+rpXXT/X36W4FDfQDXSD3CA3xA1xw9wwN9wNdyPcCJfqUt0oN8qNdqPdGDfGjXVj3Xg33k1wE9wkN8lNcVNcmktz09w0N91NdzPcDDfLzXLpLt3NdXPdPDfPLXAL3MLEhW6RW+SWuCUuw2W4TJfpslyWW+6Wu2yX7Va6lW61W+3WurVuvVvvNrqNbrPb7La6rW672+52uB1ul9vl9rg9bp/b5/a7/e6AO+ByXI476A66Q+6QO+y+dbnuO3fEfe+Ouh/cMfejO+5+cifcSXfK/exOu1/cGXfWnXPn3QX3q7voLrnLzru0yHuRaZH3I9MjH0RmRGZGZkVmR9IjcyJzIx9G5kXmRxZEPoosjHwcWRRZHFkSWRrJiHwSyYwsi2RFPo0sj3wWyY6siKyMrIqsjqyJeF98R+hL+lI+6m/xpf2tPtGX8WV9Oe98eZ/kb/MV/O2+or/DV/J3+sr+Ll/FV/XV/BO+lW/t2/i2vp1/0rf3T/kOvqPv5J/2nf0zvot/1if753xX/7zv5l/w3f2Lvod/yff0L/tevrfv41/xff2rvp/v71P8AD/Qv+YH+cF+iB/qh/nX/XD/hh/h3/SpfqQf5d/yo/3bfox/x4/14/x4/66f4Cf6SX6yn+Kn+jT/np/m3/fT/Qd+hp/pZ/nZPt3P8XP9h36en+8X+I/8Qv+xX+QX+yV+qc/wn/hMv8xn+U/9cv+Zz/Yr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/sdfqff5Xf7PX6v3+e/8Pv9l/6A/8rn+K/9Qf8Xf8h/4w/7b32u/84f8d/7o/4Hf8z/6I/7n/wJf9Kf8j/70/4Xf8af9ef8eX/B/+ov+kv+svf+Wj9JZ4wxxhj770D9wfEB/+Rn8m/jioFCiOt3Fsv99zU3F/7rfLBM6BwRQjzXv+ej/3vUqZOSkvK392YrEZRaLISIXM3PJ67GK0Qn8YxIFh1FhX+6vsGy9wX6g/rRO4WI/bucGHE1vlr/9v+g/pNPj8+sHJ6L/0/qLxYisdTVnALiany1fsX/oH6R9n+w/gLfpAnR4e9y4sTV+Gr9JPGUeF4k/8M7GWOMMcYYY4yxvxosq3X/o/vnK/fnCfpqTn5xNf6j+3PGGGOMMcYYY4xdey/27vPsk8nJHbvzhCc84cm/Ta71fybGGGOMMcbYn+3qRf+1XgljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZZ3/f/4OrFrvUfGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsWvtfAQAA//9itDg8") mount$nfs(&(0x7f0000000000)='-:,*\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x101904a, 0x0) 1.240698709s ago: executing program 1 (id=693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) 1.21361192s ago: executing program 2 (id=694): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) 1.130099976s ago: executing program 0 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x3}, [@typed={0x4}]}, 0x18}}, 0x0) 1.04676705s ago: executing program 4 (id=696): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) 1.010288743s ago: executing program 1 (id=697): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000500)=@generic={0x1, 0x7, 0xf}) 972.070325ms ago: executing program 0 (id=698): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000040c0)={0x0, 0x0}) 935.055036ms ago: executing program 3 (id=699): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000003, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0xfffffffe, 0x0, 0x101c, 0x7, 0x3, 0xa, 0x0, 0x3}}) 883.120319ms ago: executing program 0 (id=700): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b52, &(0x7f0000000000)) 854.919801ms ago: executing program 2 (id=701): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) 824.959313ms ago: executing program 1 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x48, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e24}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 773.580596ms ago: executing program 3 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 731.089308ms ago: executing program 0 (id=704): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) 685.570031ms ago: executing program 2 (id=705): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x354}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 681.621321ms ago: executing program 1 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x74}}, 0x0) 678.509992ms ago: executing program 4 (id=707): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000c00)={0x1, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x80d8d344c6f9587c}]}) 621.275445ms ago: executing program 3 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x50, 0x27, 0x1, 0x4, 0x1, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 561.835848ms ago: executing program 0 (id=709): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) 545.545399ms ago: executing program 2 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) 520.27638ms ago: executing program 4 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 512.794291ms ago: executing program 1 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x94, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 435.216815ms ago: executing program 3 (id=713): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x170, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x4000, 0x7}, {@in=@rand_addr=0x64010100, 0x4d3, 0x32}, @in6=@loopback, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0xb8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x19}}}]}, 0x170}}, 0x0) 399.451367ms ago: executing program 4 (id=714): r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$damon_attrs(r0, &(0x7f00000002c0), 0xfffa) 369.530869ms ago: executing program 2 (id=715): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x4e7, 0x12) 356.66977ms ago: executing program 0 (id=716): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 352.69339ms ago: executing program 1 (id=717): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000c1100)) 179.73373ms ago: executing program 4 (id=718): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 99.821364ms ago: executing program 4 (id=719): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file4\x00', 0x3008800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x1f4, &(0x7f00000004c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc000, 0x3) 0s ago: executing program 3 (id=720): r0 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) fcntl$addseals(r0, 0x409, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. syzkaller login: [ 65.242879][ T4172] cgroup: Unknown subsys name 'net' [ 65.354618][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.875947][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.306648][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 68.356482][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.390812][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.463594][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.473591][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.517471][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.524839][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.532961][ T4198] device bridge_slave_0 entered promiscuous mode [ 68.571734][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.579230][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.587703][ T4198] device bridge_slave_1 entered promiscuous mode [ 68.602699][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.609918][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.618892][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.630628][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.638080][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.646391][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.715378][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.726768][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.747422][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.754835][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.762798][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.772432][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.779838][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.788494][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.797604][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.808502][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.817982][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.825739][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.833613][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.848158][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.855779][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.864923][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.924089][ T4186] team0: Port device team_slave_0 added [ 68.937277][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.944700][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.952941][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.962865][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.973380][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.980555][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.988925][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.998506][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.009832][ T4186] team0: Port device team_slave_1 added [ 69.017830][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.030400][ T4198] team0: Port device team_slave_0 added [ 69.038397][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.067115][ T4198] team0: Port device team_slave_1 added [ 69.105418][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.112410][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.138922][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.160891][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.173036][ T4194] team0: Port device team_slave_0 added [ 69.186636][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.193642][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.219777][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.233616][ T4185] team0: Port device team_slave_0 added [ 69.241549][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.252799][ T4194] team0: Port device team_slave_1 added [ 69.259098][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.266384][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.292605][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.311389][ T4185] team0: Port device team_slave_1 added [ 69.340351][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.348240][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.375047][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.412273][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.419528][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.446120][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.473565][ T4190] team0: Port device team_slave_0 added [ 69.491974][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.499117][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.526034][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.546709][ T4190] team0: Port device team_slave_1 added [ 69.558550][ T4198] device hsr_slave_0 entered promiscuous mode [ 69.566535][ T4198] device hsr_slave_1 entered promiscuous mode [ 69.574033][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.581027][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.608166][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.638966][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.646199][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.673055][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.690486][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.697842][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.705224][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.713374][ T4186] Cannot create hsr debugfs directory [ 69.729152][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.736422][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.762592][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.794608][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.801841][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.828296][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.900055][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.907629][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.914851][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.922664][ T4194] Cannot create hsr debugfs directory [ 69.955317][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.962733][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.970295][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.978054][ T4185] Cannot create hsr debugfs directory [ 69.999677][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.007188][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.014550][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.022248][ T4190] Cannot create hsr debugfs directory [ 70.029755][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 70.036535][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 70.038980][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.042782][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 70.089935][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 70.368134][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.382069][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.393134][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.404799][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.471223][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.481041][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.493670][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.503625][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.599675][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.623718][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.645907][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.656285][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.693239][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.718842][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.742013][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.754325][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.761570][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.782137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.793277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.801994][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.822242][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.834452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.844218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.853671][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.861464][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.875448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.885606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.895057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.903749][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.911013][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.941745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.952194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.976424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.986224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.999007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.008936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.020229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.047253][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.062860][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.077943][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.089459][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.102333][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.115913][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.125186][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.133939][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.143755][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.152711][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.167880][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.184104][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.210107][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.226679][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.240370][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.247585][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.263251][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.280908][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.290073][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.297212][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.306514][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.323148][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.332440][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.355271][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.377108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.395578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.403692][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.410575][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.413294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.433271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.459607][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.472721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.490001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.501406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.511332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.519894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.564965][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.579708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.589865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.599853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.608895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.617748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.626787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.636113][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.643291][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.651543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.660561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.669392][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.676619][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.684920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.693962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.727334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.741352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.750771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.760172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.770146][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.778804][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.801647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.811905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.822417][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.835815][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.843886][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.867125][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.879369][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.889240][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.900842][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.916088][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.930311][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.939869][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.949622][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.958813][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.017690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.045880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.054894][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.062022][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.070826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.084803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.093385][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.100568][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.104812][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 72.120488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.125138][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 72.135119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.141369][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 72.149900][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 72.156611][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 72.157730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.174899][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.192038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.201943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.242900][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.263261][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.305745][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.312828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.340990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.353646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.363217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.375033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.384498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.393406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.401786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.410798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.419207][ T4186] device veth0_vlan entered promiscuous mode [ 72.438018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.448415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.466242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.476754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.487582][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.494780][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.511233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.528150][ T4186] device veth1_vlan entered promiscuous mode [ 72.537728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.547879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.556417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.565456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.575069][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.582360][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.604661][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.645877][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.661212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.669909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.678304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.688287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.698593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.708859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.723937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.733208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.745819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.771191][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.781853][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.794426][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.803420][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.813692][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.831823][ T4186] device veth0_macvtap entered promiscuous mode [ 72.853837][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.871645][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.896883][ T4186] device veth1_macvtap entered promiscuous mode [ 72.912855][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.921756][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.937525][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.948373][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.957726][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.966769][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.975673][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.020234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.033069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.045461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.053002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.071653][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.095365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.110925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.120312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.130124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.139692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.148094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.169266][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.179872][ T4198] device veth0_vlan entered promiscuous mode [ 73.190055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.203941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.220070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.229699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.248270][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.260345][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.277267][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.291397][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.302431][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.348596][ T4198] device veth1_vlan entered promiscuous mode [ 73.366642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.375058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.383555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.397665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.406683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.415083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.439462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.448977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.472132][ T4194] device veth0_vlan entered promiscuous mode [ 73.496996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.507186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.521776][ T4198] device veth0_macvtap entered promiscuous mode [ 73.541634][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.553670][ T4194] device veth1_vlan entered promiscuous mode [ 73.582677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.598725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.612964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.631540][ T4198] device veth1_macvtap entered promiscuous mode [ 73.663656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.687814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.696902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.716551][ T4185] device veth0_vlan entered promiscuous mode [ 73.737581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.746965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.781535][ T4185] device veth1_vlan entered promiscuous mode [ 73.796147][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.812359][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.831798][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.839379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.849941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.859084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.870201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.879386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.901116][ T4194] device veth0_macvtap entered promiscuous mode [ 73.913607][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.929861][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.942944][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.981404][ T4194] device veth1_macvtap entered promiscuous mode [ 74.001595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.011262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.022972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.032237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.041166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.054762][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.064728][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.073471][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.082593][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.115935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.125433][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.142071][ T4185] device veth0_macvtap entered promiscuous mode [ 74.156871][ T4185] device veth1_macvtap entered promiscuous mode [ 74.164106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.172070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.181932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.190380][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 74.197119][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 74.202677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.203374][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 74.217388][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 74.223504][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 74.229318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.259501][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.271507][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.282272][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.293802][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.306917][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.338309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.353534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.363447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.372594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.392715][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.401505][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.415122][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.427642][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.440008][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.451109][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.461640][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.472527][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.484823][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.501022][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.513310][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.524568][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.535863][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.548268][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.561851][ T4190] device veth0_vlan entered promiscuous mode [ 74.572456][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.580891][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.598064][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.608103][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.618301][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.627228][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.640793][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.652897][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.663595][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.676890][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.687411][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.698930][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.712933][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.732584][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.742060][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.750932][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.759097][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.769005][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.778246][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.800140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.809610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.819727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.839548][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.850396][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.860304][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.870367][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.890430][ T4190] device veth1_vlan entered promiscuous mode [ 74.917583][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.942959][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.983278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.092477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.111147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.150990][ T4190] device veth0_macvtap entered promiscuous mode [ 75.159718][ T1618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.194214][ T1618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.221305][ T4190] device veth1_macvtap entered promiscuous mode [ 75.231377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.242299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.251797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.285276][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.293519][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.359348][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.377194][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.384349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.435325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.464890][ T1618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.473111][ T1618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.527361][ T4305] device netdevsim0 entered promiscuous mode [ 75.546078][ T4305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.569435][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.594883][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.615438][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.630710][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.651085][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.662621][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.672795][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.699325][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.715742][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.728584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.745601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.763734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.836045][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.851533][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.862334][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.874030][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.885814][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.897217][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.914127][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.945120][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.993554][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.013299][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.047781][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.078155][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091663][ T3090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.105915][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.131056][ T3090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.154797][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.183098][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.205014][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.265179][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 76.271743][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 76.304624][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 76.313734][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 76.336515][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 76.453726][ T1618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.477180][ T1618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.518700][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.536977][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.553729][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.580624][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.633134][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 76.653474][ T4339] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21'. [ 76.835158][ T4300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.275047][ T4300] usb 3-1: config index 0 descriptor too short (expected 29, got 18) [ 77.314369][ T4300] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.354423][ T4300] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 77.363817][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.426250][ T4300] usb 3-1: config 0 descriptor?? [ 77.455034][ T4377] loop1: detected capacity change from 0 to 1024 [ 77.512911][ T4377] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 77.525264][ T4383] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 77.672218][ T4383] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 77.734494][ T4385] netlink: 'syz.0.42': attribute type 3 has an invalid length. [ 77.765847][ T4389] cgroup: name respecified [ 77.793905][ T4300] usb 3-1: string descriptor 0 read error: -71 [ 77.824611][ T4300] ldusb 3-1:0.0: Interrupt in endpoint not found [ 77.854249][ T4300] usb 3-1: USB disconnect, device number 2 [ 78.128995][ T4407] loop0: detected capacity change from 0 to 256 [ 78.309113][ T4407] FAT-fs (loop0): Directory bread(block 64) failed [ 78.324138][ T4407] FAT-fs (loop0): Directory bread(block 65) failed [ 78.337173][ T4407] FAT-fs (loop0): Directory bread(block 66) failed [ 78.350989][ T4407] FAT-fs (loop0): Directory bread(block 67) failed [ 78.392736][ T4407] FAT-fs (loop0): Directory bread(block 68) failed [ 78.409767][ T4407] FAT-fs (loop0): Directory bread(block 69) failed [ 78.425466][ T4407] FAT-fs (loop0): Directory bread(block 70) failed [ 78.443830][ T4407] FAT-fs (loop0): Directory bread(block 71) failed [ 78.465972][ T4407] FAT-fs (loop0): Directory bread(block 72) failed [ 78.492569][ T4407] FAT-fs (loop0): Directory bread(block 73) failed [ 78.504379][ T4257] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.541315][ T4429] dlm: no locking on control device [ 78.784587][ T4257] usb 2-1: Using ep0 maxpacket: 16 [ 78.914530][ T4257] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.923784][ T4433] loop4: detected capacity change from 0 to 4096 [ 78.939654][ T4257] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.944337][ C1] hrtimer: interrupt took 321978 ns [ 79.015287][ T4440] overlayfs: conflicting options: nfs_export=on,index=off [ 79.025781][ T4433] ======================================================= [ 79.025781][ T4433] WARNING: The mand mount option has been deprecated and [ 79.025781][ T4433] and is ignored by this kernel. Remove the mand [ 79.025781][ T4433] option from the mount to silence this warning. [ 79.025781][ T4433] ======================================================= [ 79.053339][ T4442] syz.2.69 (4442): drop_caches: 0 [ 79.060693][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.226448][ T4257] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.244352][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.258481][ T4257] usb 2-1: Product: syz [ 79.283139][ T4257] usb 2-1: Manufacturer: syz [ 79.287998][ T4433] ntfs3: loop4: Failed to load $Extend. [ 79.310893][ T4423] loop3: detected capacity change from 0 to 32768 [ 79.316791][ T4257] usb 2-1: SerialNumber: syz [ 79.386318][ T4433] ntfs3: loop4: ino=5, "/" directory corrupted [ 79.400827][ T4448] netlink: 'syz.2.73': attribute type 15 has an invalid length. [ 79.419669][ T4448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 79.455455][ T4423] JBD2: Ignoring recovery information on journal [ 79.462729][ T4444] loop0: detected capacity change from 0 to 4096 [ 79.533550][ T4444] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 79.603595][ T4423] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 79.685620][ T4444] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 79.874548][ T4257] usb 2-1: cannot find UAC_HEADER [ 79.962217][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 80.018187][ T4257] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 80.067840][ T4257] usb 2-1: USB disconnect, device number 2 [ 80.080703][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.254212][ T1324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.289897][ T4471] netlink: 'syz.0.83': attribute type 24 has an invalid length. [ 80.304224][ T4472] netlink: 'syz.4.84': attribute type 5 has an invalid length. [ 80.369439][ T4474] cgroup: noprefix used incorrectly [ 80.390496][ T4472] device ip6erspan0 entered promiscuous mode [ 80.420144][ T4476] ieee802154 phy0 wpan0: encryption failed: -90 [ 80.550116][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 80.675117][ T4492] x_tables: duplicate underflow at hook 2 [ 80.784303][ T1324] usb 3-1: config 5 has an invalid interface number: 3 but max is 0 [ 80.792515][ T1324] usb 3-1: config 5 has no interface number 0 [ 80.814457][ T1324] usb 3-1: config 5 interface 3 has no altsetting 0 [ 80.836992][ T4500] netlink: 168 bytes leftover after parsing attributes in process `syz.1.97'. [ 81.179871][ T1324] usb 3-1: string descriptor 0 read error: -22 [ 81.184370][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.190774][ T1324] usb 3-1: New USB device found, idVendor=2955, idProduct=1001, bcdDevice= 7.b5 [ 81.209342][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.223750][ T4514] loop3: detected capacity change from 0 to 4096 [ 81.259506][ T4520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.300604][ T4514] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 81.455353][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 81.493554][ T23] usb 3-1: USB disconnect, device number 3 [ 81.577899][ T21] usb 1-1: config 0 has an invalid interface number: 78 but max is 0 [ 81.614359][ T21] usb 1-1: config 0 has no interface number 0 [ 81.688538][ T4538] netlink: 'syz.3.116': attribute type 3 has an invalid length. [ 81.730682][ T4538] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.116'. [ 81.761059][ T4540] process 'syz.1.117' launched './file0' with NULL argv: empty string added [ 81.798023][ T21] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 81.825331][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.847819][ T21] usb 1-1: Product: syz [ 81.863443][ T21] usb 1-1: Manufacturer: syz [ 81.879788][ T21] usb 1-1: SerialNumber: syz [ 81.901037][ T21] usb 1-1: config 0 descriptor?? [ 82.166568][ T4557] netlink: 'syz.1.125': attribute type 5 has an invalid length. [ 82.190416][ T4561] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 82.207527][ T21] usbhid 1-1:0.78: couldn't find an input interrupt endpoint [ 82.225886][ T21] usb 1-1: USB disconnect, device number 2 [ 82.257928][ T4563] loop4: detected capacity change from 0 to 256 [ 82.310227][ T4563] FAT-fs (loop4): Directory bread(block 64) failed [ 82.324643][ T4563] FAT-fs (loop4): Directory bread(block 65) failed [ 82.343587][ T4563] FAT-fs (loop4): Directory bread(block 66) failed [ 82.362953][ T4563] FAT-fs (loop4): Directory bread(block 67) failed [ 82.401941][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.416990][ T4563] FAT-fs (loop4): Directory bread(block 68) failed [ 82.428224][ T4563] FAT-fs (loop4): Directory bread(block 69) failed [ 82.438730][ T4563] FAT-fs (loop4): Directory bread(block 70) failed [ 82.469854][ T4563] FAT-fs (loop4): Directory bread(block 71) failed [ 82.485497][ T4563] FAT-fs (loop4): Directory bread(block 72) failed [ 82.492281][ T4563] FAT-fs (loop4): Directory bread(block 73) failed [ 82.664778][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 82.794209][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.862470][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.896702][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.924555][ T4583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.954387][ T23] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 82.972648][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.996291][ T4589] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 83.022461][ T23] usb 3-1: Product: syz [ 83.031568][ T23] usb 3-1: Manufacturer: syz [ 83.051041][ T23] usb 3-1: SerialNumber: syz [ 83.084871][ T23] usb 3-1: config 0 descriptor?? [ 83.114398][ T4595] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 83.148364][ T23] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 83.216562][ T4595] team0: Device veth1_macvtap failed to register rx_handler [ 83.354830][ T4595] syz.4.144 (4595) used greatest stack depth: 20112 bytes left [ 83.365469][ T23] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 83.373858][ T23] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 83.396230][ T23] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 83.620921][ T23] usb 3-1: USB disconnect, device number 4 [ 83.625602][ T4617] Restarting kernel threads ... done. [ 83.664707][ T4615] loop3: detected capacity change from 0 to 2048 [ 83.730819][ T4615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.839388][ T4627] loop4: detected capacity change from 0 to 256 [ 84.440594][ T4653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 84.479852][ T4653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 84.798255][ T4678] loop3: detected capacity change from 0 to 256 [ 84.808897][ T4670] loop0: detected capacity change from 0 to 1024 [ 84.820433][ T4676] device gtp0 entered promiscuous mode [ 84.918872][ T4680] Option '2 O€ÉÇ—Wz [ 84.918872][ T4680] ­ f:ó–ã5úÉùÔAŠÀ- [ 84.918872][ T4680] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 84.998480][ T4455] hfsplus: b-tree write err: -5, ino 4 [ 85.174463][ T4693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 85.185996][ T4692] netlink: 'syz.4.193': attribute type 6 has an invalid length. [ 85.330553][ T4700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 85.391210][ T4704] QAT: Stopping all acceleration devices. [ 85.746732][ T4727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.210'. [ 85.863827][ T4732] loop3: detected capacity change from 0 to 256 [ 85.899288][ T4736] loop0: detected capacity change from 0 to 64 [ 85.938247][ T4732] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.957510][ T4739] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 85.968508][ T4739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.977880][ T4732] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 86.068162][ T4732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.087762][ T4736] Trying to free block not in datazone [ 86.100181][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 86.417175][ T4754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.222'. [ 86.534136][ T4257] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 86.751876][ T1108] cfg80211: failed to load regulatory.db [ 86.850392][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 86.874381][ T4773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.231'. [ 86.934363][ T4257] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 86.942506][ T4257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.001521][ T4257] usb 5-1: config 0 has no interface number 0 [ 87.008324][ T4257] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 87.021015][ T4778] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.234'. [ 87.044301][ T4257] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 155, setting to 64 [ 87.071865][ T4257] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.103869][ T4257] usb 5-1: config 0 interface 52 has no altsetting 0 [ 87.196289][ T4781] loop1: detected capacity change from 0 to 4096 [ 87.225995][ T4781] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 87.228258][ T4257] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 87.271111][ T4257] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 87.288932][ T4257] usb 5-1: Manufacturer: syz [ 87.307748][ T4257] usb 5-1: config 0 descriptor?? [ 87.375341][ T4257] hub 5-1:0.52: bad descriptor, ignoring hub [ 87.381426][ T4257] hub: probe of 5-1:0.52 failed with error -5 [ 87.469978][ T4781] ntfs3: loop1: Failed to load $Extend. [ 87.504983][ T4789] loop2: detected capacity change from 0 to 1024 [ 87.615969][ T4257] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input6 [ 87.639016][ T4797] x_tables: duplicate entry at hook 3 [ 87.867489][ T144] hfsplus: b-tree write err: -5, ino 4 [ 88.025439][ T4257] usb 5-1: USB disconnect, device number 2 [ 88.253021][ T4810] loop2: detected capacity change from 0 to 4096 [ 88.349025][ T26] audit: type=1800 audit(88.305:2): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.246" name="/newroot/59/bus" dev="tmpfs" ino=317 res=0 errno=0 [ 88.466593][ T4810] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.530884][ T4810] ntfs3: loop2: Failed to load $Extend. [ 88.653540][ T4833] loop0: detected capacity change from 0 to 1024 [ 88.776204][ T4833] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 88.783830][ T4833] EXT4-fs (loop0): Ignoring removed oldalloc option [ 88.818135][ T4838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 88.845880][ T4833] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.919450][ T4833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.929291][ T4833] System zones: 0-1, 3-36 [ 88.957216][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: writeback. [ 89.089472][ T4851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.265'. [ 89.252022][ T4863] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.272'. [ 89.286100][ T4862] Cannot find add_set index 1 as target [ 89.742943][ T4884] loop3: detected capacity change from 0 to 512 [ 90.138588][ T4884] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 90.219163][ T4884] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.254608][ T4884] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.282: Failed to acquire dquot type 1 [ 90.335552][ T4884] EXT4-fs (loop3): 1 truncate cleaned up [ 90.341280][ T4884] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 90.389792][ T4906] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 90.437747][ T4909] dlm: no locking on control device [ 90.490689][ T4884] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 90.535139][ T4884] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.590494][ T4884] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.282: Failed to acquire dquot type 1 [ 90.628180][ T4877] loop2: detected capacity change from 0 to 32768 [ 90.732084][ T4877] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.808246][ T4914] loop1: detected capacity change from 0 to 4096 [ 90.863087][ T4914] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 90.973669][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 91.194963][ T4936] loop4: detected capacity change from 0 to 256 [ 91.232590][ T4313] ntfs3: loop1: MFT: r=5, expect seq=0 instead of 5! [ 91.249973][ T4313] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 91.261303][ T4936] exfat: Deprecated parameter 'namecase' [ 91.269705][ T4936] exfat: Deprecated parameter 'utf8' [ 91.313153][ T4936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 91.454096][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.468827][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 91.531332][ T4944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 91.620826][ T4949] netlink: 'syz.4.312': attribute type 10 has an invalid length. [ 91.680534][ T4949] device hsr0 entered promiscuous mode [ 91.718884][ T4949] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.744384][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 91.780933][ T4949] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 91.810654][ T4949] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 91.824319][ T4949] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 91.899571][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 91.929005][ T1324] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.094455][ T13] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.106396][ T13] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.115284][ T13] usb 4-1: Product: syz [ 92.119577][ T13] usb 4-1: Manufacturer: syz [ 92.124738][ T13] usb 4-1: SerialNumber: syz [ 92.132231][ T13] usb 4-1: config 0 descriptor?? [ 92.154726][ T4935] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.176129][ T13] hub 4-1:0.0: bad descriptor, ignoring hub [ 92.182461][ T13] hub: probe of 4-1:0.0 failed with error -5 [ 92.234443][ T4257] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 92.524474][ T1324] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 92.536310][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.549395][ T1324] usb 3-1: Product: syz [ 92.553731][ T1324] usb 3-1: Manufacturer: syz [ 92.561218][ T1324] usb 3-1: SerialNumber: syz [ 92.571691][ T1324] r8152-cfgselector 3-1: config 0 descriptor?? [ 92.584612][ T4229] usb 4-1: USB disconnect, device number 2 [ 92.644452][ T4257] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 92.657651][ T4257] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 92.674037][ T4257] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 92.703488][ T4257] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 92.741386][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 92.761868][ T4257] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 93.044473][ T1324] r8152-cfgselector 3-1: Unknown version 0x0000 [ 93.063902][ T1324] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 93.084973][ T4257] usb 5-1: string descriptor 0 read error: -22 [ 93.091357][ T4257] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 93.116076][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.180363][ T4257] usb 5-1: config 0 descriptor?? [ 93.212690][ T5008] loop0: detected capacity change from 0 to 16 [ 93.215152][ T4962] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 93.256020][ T4257] hub 5-1:0.0: bad descriptor, ignoring hub [ 93.262176][ T4257] hub: probe of 5-1:0.0 failed with error -5 [ 93.286977][ T4257] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 93.299542][ T5008] erofs: (device loop0): mounted with root inode @ nid 36. [ 93.347168][ T4992] loop1: detected capacity change from 0 to 32768 [ 93.353742][ T5008] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 93.380402][ T5008] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 93.390263][ T5008] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 93.412014][ T5008] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 93.426260][ T26] audit: type=1800 audit(93.375:3): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.342" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 93.547317][ T4992] read_mapping_page failed! [ 93.578032][ T4228] usb 5-1: USB disconnect, device number 3 [ 93.974844][ T5027] loop3: detected capacity change from 0 to 2048 [ 94.033862][ T5032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.355'. [ 94.101991][ T5032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.355'. [ 94.175242][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.573094][ T5054] Cannot find set identified by id 0 to match [ 95.224411][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.344791][ T5095] loop4: detected capacity change from 0 to 4096 [ 95.380509][ T5095] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 95.474303][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 95.563650][ T5095] ntfs3: loop4: failed to convert "c46c" to macroman [ 95.678920][ T5113] loop2: detected capacity change from 0 to 4096 [ 95.754454][ T1108] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 95.787428][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.827470][ T1108] usb 2-1: Product: syz [ 95.862693][ T1108] usb 2-1: Manufacturer: syz [ 95.876655][ T1108] usb 2-1: SerialNumber: syz [ 95.904022][ T5123] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.921298][ T1108] usb 2-1: config 0 descriptor?? [ 95.950838][ T150] block nbd3: Attempted send on invalid socket [ 95.959026][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.974263][ T5124] hpfs: hpfs_map_sector(): read error [ 96.016667][ T1108] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 96.211384][ T5133] netlink: zone id is out of range [ 96.216835][ T5133] netlink: zone id is out of range [ 96.224365][ T5133] netlink: zone id is out of range [ 96.232706][ T5133] netlink: zone id is out of range [ 96.239534][ T5133] netlink: zone id is out of range [ 96.249914][ T5133] netlink: zone id is out of range [ 96.264385][ T5133] netlink: del zone limit has 4 unknown bytes [ 96.396352][ T4257] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 96.464393][ T1108] gspca_topro: reg_w err -71 [ 96.504422][ T1108] gspca_topro: Sensor soi763a [ 96.538405][ T1108] usb 2-1: USB disconnect, device number 3 [ 96.814265][ T4257] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.834349][ T4257] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.855332][ T5160] usb usb8: usbfs: process 5160 (syz.4.412) did not claim interface 0 before use [ 96.885857][ T4257] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 96.897215][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.923703][ T4257] usb 4-1: config 0 descriptor?? [ 97.214278][ T4257] usb 4-1: string descriptor 0 read error: -71 [ 97.226033][ T4257] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 97.266167][ T4257] usb 4-1: USB disconnect, device number 3 [ 97.405307][ T5150] loop2: detected capacity change from 0 to 32768 [ 97.462950][ T5187] netlink: 48 bytes leftover after parsing attributes in process `syz.4.425'. [ 97.489606][ T5150] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.407 (5150) [ 97.601070][ T5150] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 97.657509][ T5150] BTRFS info (device loop2): setting nodatacow, compression disabled [ 97.671634][ T5194] loop4: detected capacity change from 0 to 256 [ 97.683241][ T5150] BTRFS info (device loop2): force clearing of disk cache [ 97.721477][ T5196] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.430'. [ 97.737104][ T5150] BTRFS info (device loop2): enabling ssd optimizations [ 97.749346][ T5150] BTRFS info (device loop2): using spread ssd allocation scheme [ 97.763392][ T5150] BTRFS info (device loop2): disabling free space tree [ 97.813007][ T5150] BTRFS info (device loop2): setting datasum, datacow enabled [ 97.832108][ T5150] BTRFS info (device loop2): turning on sync discard [ 97.898544][ T5150] BTRFS info (device loop2): has skinny extents [ 97.958868][ T5202] loop3: detected capacity change from 0 to 128 [ 98.227117][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 98.295712][ T5150] BTRFS info (device loop2): clearing free space tree [ 98.303291][ T5150] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.334379][ T5150] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.514689][ T5242] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 98.676438][ T5247] loop1: detected capacity change from 0 to 16 [ 98.704260][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.949455][ T5247] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.968950][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 99.094497][ T21] usb 1-1: config 1 has an invalid interface number: 223 but max is 0 [ 99.106454][ T5263] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 99.134170][ T21] usb 1-1: config 1 has no interface number 0 [ 99.140521][ T21] usb 1-1: config 1 interface 223 has no altsetting 0 [ 99.324347][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=42.53 [ 99.339165][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.378071][ T21] usb 1-1: Product: syz [ 99.382314][ T21] usb 1-1: Manufacturer: syz [ 99.404173][ T21] usb 1-1: SerialNumber: syz [ 99.467498][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.223/input/input8 [ 99.543390][ T5278] loop3: detected capacity change from 0 to 1764 [ 99.700895][ T3546] bcm5974 1-1:1.223: could not read from device [ 99.754375][ T3546] bcm5974 1-1:1.223: could not read from device [ 99.785168][ T5293] loop1: detected capacity change from 0 to 256 [ 99.805419][ T21] usb 1-1: USB disconnect, device number 3 [ 99.874774][ T5293] FAT-fs (loop1): Directory bread(block 64) failed [ 99.958104][ T5293] FAT-fs (loop1): Directory bread(block 65) failed [ 99.989945][ T5293] FAT-fs (loop1): Directory bread(block 66) failed [ 100.010727][ T5293] FAT-fs (loop1): Directory bread(block 67) failed [ 100.057791][ T5293] FAT-fs (loop1): Directory bread(block 68) failed [ 100.069954][ T5293] FAT-fs (loop1): Directory bread(block 69) failed [ 100.085073][ T5293] FAT-fs (loop1): Directory bread(block 70) failed [ 100.091936][ T5293] FAT-fs (loop1): Directory bread(block 71) failed [ 100.111639][ T5305] loop3: detected capacity change from 0 to 4096 [ 100.123223][ T5293] FAT-fs (loop1): Directory bread(block 72) failed [ 100.130120][ T5293] FAT-fs (loop1): Directory bread(block 73) failed [ 100.157899][ T5309] --map-set only usable from mangle table [ 100.231359][ T5310] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.316268][ T5305] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 100.353608][ T5305] Remounting filesystem read-only [ 100.536963][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 100.624400][ T5328] UBIFS error (pid: 5328): cannot open "", error -22 [ 100.739042][ T5332] block device autoloading is deprecated and will be removed. [ 100.777651][ T5342] kAFS: unparsable volume name [ 101.133558][ T5366] loop1: detected capacity change from 0 to 8 [ 101.172433][ T5369] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 101.181247][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.247063][ T5366] SQUASHFS error: lzo decompression failed, data probably corrupt [ 101.283128][ T5366] SQUASHFS error: Failed to read block 0x1dd: -5 [ 101.302863][ T5366] SQUASHFS error: Unable to read metadata cache entry [1db] [ 101.333168][ T5366] SQUASHFS error: Unable to read inode 0xa7 [ 101.346025][ T5379] usb usb8: check_ctrlrecip: process 5379 (syz.0.502) requesting ep 01 but needs 81 [ 101.374565][ T5379] usb usb8: usbfs: process 5379 (syz.0.502) did not claim interface 0 before use [ 101.457331][ T5382] loop3: detected capacity change from 0 to 256 [ 101.564351][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.589013][ T5382] FAT-fs (loop3): Directory bread(block 64) failed [ 101.603016][ T5382] FAT-fs (loop3): Directory bread(block 65) failed [ 101.659642][ T5382] FAT-fs (loop3): Directory bread(block 66) failed [ 101.679355][ T5382] FAT-fs (loop3): Directory bread(block 67) failed [ 101.694606][ T5382] FAT-fs (loop3): Directory bread(block 68) failed [ 101.701820][ T5382] FAT-fs (loop3): Directory bread(block 69) failed [ 101.714485][ T5382] FAT-fs (loop3): Directory bread(block 70) failed [ 101.724287][ T5382] FAT-fs (loop3): Directory bread(block 71) failed [ 101.731123][ T5382] FAT-fs (loop3): Directory bread(block 72) failed [ 101.738521][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.759016][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.774064][ T21] usb 5-1: Product: syz [ 101.784193][ T5382] FAT-fs (loop3): Directory bread(block 73) failed [ 101.794055][ T21] usb 5-1: Manufacturer: syz [ 101.798757][ T21] usb 5-1: SerialNumber: syz [ 101.814089][ T5260] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.936094][ T5402] xt_limit: Overflow, try lower: 0/0 [ 102.055468][ T5260] usb 2-1: Using ep0 maxpacket: 32 [ 102.184488][ T5260] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.354488][ T21] cdc_ncm 5-1:1.0: bind() failure [ 102.356507][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.360777][ T5260] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 102.388035][ T5260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.396351][ T21] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 102.411314][ T5260] usb 2-1: Product: syz [ 102.420225][ T5413] device vlan1 entered promiscuous mode [ 102.424923][ T21] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 102.432730][ T5260] usb 2-1: Manufacturer: syz [ 102.453088][ T5260] usb 2-1: SerialNumber: syz [ 102.464287][ T21] usbtest: probe of 5-1:1.1 failed with error -71 [ 102.483137][ T5260] usb 2-1: config 0 descriptor?? [ 102.489015][ T21] usb 5-1: USB disconnect, device number 4 [ 102.550759][ T5260] usb 2-1: bad CDC descriptors [ 102.561462][ T5260] usb 2-1: unsupported MDLM descriptors [ 102.578064][ T5419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 102.598451][ T5419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 102.636923][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 102.774296][ T13] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 102.783846][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.815880][ T13] usb 3-1: config 0 has no interface number 0 [ 102.822822][ T4229] usb 2-1: USB disconnect, device number 4 [ 102.933316][ T5435] syz.4.526 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.024279][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 103.043712][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.075471][ T13] usb 3-1: Product: syz [ 103.079707][ T13] usb 3-1: Manufacturer: syz [ 103.114400][ T13] usb 3-1: SerialNumber: syz [ 103.163631][ T13] usb 3-1: config 0 descriptor?? [ 103.444439][ T13] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 103.451154][ T13] usb 3-1: No valid video chain found. [ 103.680398][ T21] usb 3-1: USB disconnect, device number 6 [ 103.750419][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 103.813656][ T5471] loop3: detected capacity change from 0 to 8192 [ 103.899999][ T5471] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 103.912948][ T5471] REISERFS (device loop3): using ordered data mode [ 103.923000][ T5471] reiserfs: using flush barriers [ 103.944234][ T5471] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.964894][ T5471] REISERFS (device loop3): checking transaction log (loop3) [ 103.979669][ T5471] REISERFS (device loop3): Using r5 hash to sort names [ 103.998037][ T5471] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 104.009130][ T5471] REISERFS warning (device loop3): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 104.019857][ T5471] REISERFS error (device loop3): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 104.036630][ T5471] REISERFS (device loop3): Remounting filesystem read-only [ 104.421915][ T5512] netlink: 216 bytes leftover after parsing attributes in process `syz.4.563'. [ 104.548262][ T5515] loop0: detected capacity change from 0 to 1764 [ 104.796770][ T26] audit: type=1400 audit(104.745:4): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5530 comm="syz.3.575" [ 104.824257][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.874139][ T5533] loop0: detected capacity change from 0 to 256 [ 105.035760][ T5533] FAT-fs (loop0): Directory bread(block 64) failed [ 105.042471][ T5533] FAT-fs (loop0): Directory bread(block 65) failed [ 105.064185][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 105.074227][ T5533] FAT-fs (loop0): Directory bread(block 66) failed [ 105.080972][ T5533] FAT-fs (loop0): Directory bread(block 67) failed [ 105.144375][ T5533] FAT-fs (loop0): Directory bread(block 68) failed [ 105.151029][ T5533] FAT-fs (loop0): Directory bread(block 69) failed [ 105.184164][ T5533] FAT-fs (loop0): Directory bread(block 70) failed [ 105.184411][ T21] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 105.199444][ T5540] netlink: 84 bytes leftover after parsing attributes in process `syz.1.577'. [ 105.200130][ T5533] FAT-fs (loop0): Directory bread(block 71) failed [ 105.218491][ T21] usb 3-1: config 0 has no interface number 0 [ 105.234131][ T21] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 105.263606][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.299390][ T21] usb 3-1: config 0 descriptor?? [ 105.308247][ T5533] FAT-fs (loop0): Directory bread(block 72) failed [ 105.332474][ T5533] FAT-fs (loop0): Directory bread(block 73) failed [ 105.345870][ T5545] capability: warning: `syz.1.579' uses deprecated v2 capabilities in a way that may be insecure [ 105.581272][ T21] usb 3-1: USB disconnect, device number 7 [ 105.596808][ T5553] netlink: 96 bytes leftover after parsing attributes in process `syz.0.583'. [ 105.672302][ T5555] No such timeout policy "syz1" [ 105.724657][ T5526] loop4: detected capacity change from 0 to 32768 [ 105.791545][ T5526] [ 105.791545][ T5526] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.791545][ T5526] [ 105.930892][ T5526] [ 105.930892][ T5526] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.930892][ T5526] [ 106.065883][ T4190] [ 106.065883][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.065883][ T4190] [ 106.087678][ T4190] [ 106.087678][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.087678][ T4190] [ 106.231189][ T5576] loop2: detected capacity change from 0 to 1024 [ 106.278616][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.445186][ T5576] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x000000000000000f,nodioread_nolock,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 106.507636][ T5590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.526866][ T5593] netlink: 'syz.1.600': attribute type 5 has an invalid length. [ 106.554091][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 106.706573][ T4229] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.754527][ T4229] usb 4-1: config 0 has no interface number 0 [ 106.852459][ T5607] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 106.879914][ T5607] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 106.974377][ T4229] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 106.983582][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.034021][ T4229] usb 4-1: Product: syz [ 107.038287][ T4229] usb 4-1: Manufacturer: syz [ 107.083889][ T4229] usb 4-1: SerialNumber: syz [ 107.105642][ T4229] usb 4-1: config 0 descriptor?? [ 107.160127][ T4229] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 107.214602][ T5630] netlink: 5 bytes leftover after parsing attributes in process `syz.1.617'. [ 107.229199][ T5631] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 107.262238][ T5630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.521571][ T5646] loop1: detected capacity change from 0 to 64 [ 107.541527][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.625'. [ 107.576280][ T4229] gspca_spca1528: reg_w err -71 [ 107.612978][ T5654] overlayfs: unrecognized mount option "\" or missing value [ 107.628165][ T4229] spca1528: probe of 4-1:0.1 failed with error -71 [ 107.654572][ T4229] usb 4-1: USB disconnect, device number 4 [ 107.860523][ T5665] netlink: 'syz.0.635': attribute type 32 has an invalid length. [ 107.885079][ T264] block nbd1: Attempted send on invalid socket [ 107.891481][ T264] blk_update_request: I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.903288][ T5668] VFS: could not find a valid V7 on nbd1. [ 108.508292][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 108.521315][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 108.701249][ T5728] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.663'. [ 108.716421][ T5726] loop2: detected capacity change from 0 to 512 [ 108.798128][ T5726] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 108.813861][ T5726] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 108.853509][ T5726] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 108.873606][ T5726] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.984653][ T5726] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 72 vs 41 free clusters [ 109.023053][ T5726] Quota error (device loop2): write_blk: dquota write failed [ 109.041144][ T5726] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 109.093478][ T5726] Quota error (device loop2): write_blk: dquota write failed [ 109.126665][ T5726] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 109.149754][ T5755] loop3: detected capacity change from 0 to 128 [ 109.194432][ T5726] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.662: Failed to acquire dquot type 1 [ 109.261325][ T5726] EXT4-fs (loop2): 1 truncate cleaned up [ 109.270561][ T5757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.285349][ T5742] loop4: detected capacity change from 0 to 8192 [ 109.310844][ T5726] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,mblk_io_submit,jqfmt=vfsold,nodelalloc,nomblk_io_submit,usrjquota=,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 109.349441][ T5755] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.360334][ T5755] FAT-fs (loop3): Filesystem has been set read-only [ 109.367523][ T5755] attempt to access beyond end of device [ 109.367523][ T5755] loop3: rw=524288, want=2073, limit=128 [ 109.374162][ T5742] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 109.383100][ T5755] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.397423][ T5755] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.407360][ T5755] attempt to access beyond end of device [ 109.407360][ T5755] loop3: rw=0, want=2073, limit=128 [ 109.444218][ T5742] REISERFS (device loop4): using ordered data mode [ 109.451111][ T5742] reiserfs: using flush barriers [ 109.463292][ T5726] Quota error (device loop2): write_blk: dquota write failed [ 109.473263][ T5726] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 109.483940][ T5726] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.662: Failed to acquire dquot type 1 [ 109.500131][ T26] audit: type=1800 audit(109.455:5): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.676" name="file2" dev="loop3" ino=1048601 res=0 errno=0 [ 109.544202][ T5742] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.635838][ T5742] REISERFS (device loop4): checking transaction log (loop4) [ 109.679099][ T5742] REISERFS (device loop4): Using rupasov hash to sort names [ 109.720654][ T5742] REISERFS (device loop4): using 3.5.x disk format [ 109.791076][ T5742] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.873926][ T5773] netlink: 45 bytes leftover after parsing attributes in process `syz.0.684'. [ 109.895235][ T5742] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.965513][ T5742] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.979452][ T5777] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 109.996208][ T5742] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 110.014793][ T5779] x_tables: duplicate underflow at hook 4 [ 110.021516][ T5777] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 110.042127][ T5777] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 110.066105][ T5742] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 110.147223][ T5742] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 110.202754][ T5784] loop3: detected capacity change from 0 to 256 [ 110.237494][ T5742] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 110.293257][ T5784] exfat: Deprecated parameter 'utf8' [ 110.305324][ T5742] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 110.329241][ T5784] exfat: Deprecated parameter 'utf8' [ 110.407083][ T5784] exfat: Deprecated parameter 'namecase' [ 110.422752][ T5742] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 110.450058][ T5784] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 110.512360][ T5793] libceph: resolve '. [ 110.512360][ T5793] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 110.512360][ T5793] ' (ret=-3): failed [ 110.664299][ T4228] Bluetooth: hci0: command 0x0401 tx timeout [ 111.061184][ T5822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.708'. [ 111.092519][ T5822] unsupported nlmsg_type 40 [ 111.113729][ T5824] netlink: 'syz.0.709': attribute type 5 has an invalid length. [ 111.296904][ T5835] damon: min_nr_regions (0) must be at least 3 [ 111.572489][ T5851] loop4: detected capacity change from 0 to 64 [ 111.635812][ T5841] [ 111.638199][ T5841] ====================================================== [ 111.645434][ T5841] WARNING: possible circular locking dependency detected [ 111.652784][ T5841] syzkaller #0 Not tainted [ 111.657247][ T5841] ------------------------------------------------------ [ 111.664297][ T5841] syz.0.716/5841 is trying to acquire lock: [ 111.670232][ T5841] ffff8880785c4b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 111.680738][ T5841] [ 111.680738][ T5841] but task is already holding lock: [ 111.688142][ T5841] ffff8880785c4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 111.697744][ T5841] [ 111.697744][ T5841] which lock already depends on the new lock. [ 111.697744][ T5841] [ 111.708184][ T5841] [ 111.708184][ T5841] the existing dependency chain (in reverse order) is: [ 111.717246][ T5841] [ 111.717246][ T5841] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 111.724970][ T5841] __mutex_lock_common+0x1e3/0x2400 [ 111.730746][ T5841] mutex_lock_nested+0x17/0x20 [ 111.736081][ T5841] hci_dev_do_close+0x5f/0x1030 [ 111.741779][ T5841] hci_rfkill_set_block+0x10a/0x190 [ 111.748520][ T5841] rfkill_set_block+0x1c6/0x420 [ 111.754312][ T5841] rfkill_fop_write+0x452/0x560 [ 111.760428][ T5841] vfs_write+0x30b/0xd60 [ 111.765355][ T5841] ksys_write+0x152/0x260 [ 111.770467][ T5841] do_syscall_64+0x4c/0xa0 [ 111.775451][ T5841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.781909][ T5841] [ 111.781909][ T5841] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 111.790002][ T5841] __mutex_lock_common+0x1e3/0x2400 [ 111.795786][ T5841] mutex_lock_nested+0x17/0x20 [ 111.801229][ T5841] rfkill_register+0x33/0x8a0 [ 111.806480][ T5841] hci_register_dev+0x452/0x970 [ 111.812018][ T5841] vhci_create_device+0x32c/0x5c0 [ 111.817616][ T5841] vhci_write+0x391/0x450 [ 111.822572][ T5841] vfs_write+0x745/0xd60 [ 111.827468][ T5841] ksys_write+0x152/0x260 [ 111.832361][ T5841] do_syscall_64+0x4c/0xa0 [ 111.837429][ T5841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.843880][ T5841] [ 111.843880][ T5841] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 111.851749][ T5841] __mutex_lock_common+0x1e3/0x2400 [ 111.857778][ T5841] mutex_lock_nested+0x17/0x20 [ 111.863120][ T5841] vhci_send_frame+0x88/0x100 [ 111.868476][ T5841] hci_send_frame+0x1a9/0x2e0 [ 111.873736][ T5841] hci_tx_work+0x9f9/0x1710 [ 111.878801][ T5841] process_one_work+0x85f/0x1010 [ 111.884306][ T5841] worker_thread+0xaa6/0x1290 [ 111.889644][ T5841] kthread+0x436/0x520 [ 111.894287][ T5841] ret_from_fork+0x1f/0x30 [ 111.899352][ T5841] [ 111.899352][ T5841] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 111.908599][ T5841] __lock_acquire+0x2c42/0x7d10 [ 111.914029][ T5841] lock_acquire+0x19e/0x400 [ 111.919130][ T5841] __flush_work+0x116/0x210 [ 111.924190][ T5841] hci_dev_do_close+0x1e7/0x1030 [ 111.929683][ T5841] hci_rfkill_set_block+0x10a/0x190 [ 111.935441][ T5841] rfkill_set_block+0x1c6/0x420 [ 111.940862][ T5841] rfkill_fop_write+0x452/0x560 [ 111.946504][ T5841] vfs_write+0x30b/0xd60 [ 111.951467][ T5841] ksys_write+0x152/0x260 [ 111.956455][ T5841] do_syscall_64+0x4c/0xa0 [ 111.961435][ T5841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.967918][ T5841] [ 111.967918][ T5841] other info that might help us debug this: [ 111.967918][ T5841] [ 111.978176][ T5841] Chain exists of: [ 111.978176][ T5841] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 111.978176][ T5841] [ 111.993257][ T5841] Possible unsafe locking scenario: [ 111.993257][ T5841] [ 112.001001][ T5841] CPU0 CPU1 [ 112.006606][ T5841] ---- ---- [ 112.012085][ T5841] lock(&hdev->req_lock); [ 112.016634][ T5841] lock(rfkill_global_mutex); [ 112.023953][ T5841] lock(&hdev->req_lock); [ 112.031028][ T5841] lock((work_completion)(&hdev->tx_work)); [ 112.037047][ T5841] [ 112.037047][ T5841] *** DEADLOCK *** [ 112.037047][ T5841] [ 112.045235][ T5841] 2 locks held by syz.0.716/5841: [ 112.050312][ T5841] #0: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 112.060549][ T5841] #1: ffff8880785c4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 112.070441][ T5841] [ 112.070441][ T5841] stack backtrace: [ 112.076563][ T5841] CPU: 0 PID: 5841 Comm: syz.0.716 Not tainted syzkaller #0 [ 112.083899][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.094096][ T5841] Call Trace: [ 112.097408][ T5841] [ 112.100372][ T5841] dump_stack_lvl+0x188/0x250 [ 112.105441][ T5841] ? load_image+0x400/0x400 [ 112.110177][ T5841] ? show_regs_print_info+0x20/0x20 [ 112.115454][ T5841] ? print_circular_bug+0x12b/0x1a0 [ 112.120942][ T5841] check_noncircular+0x296/0x330 [ 112.125918][ T5841] ? look_up_lock_class+0x71/0x110 [ 112.131075][ T5841] ? add_chain_block+0x940/0x940 [ 112.136059][ T5841] ? lockdep_lock+0xf1/0x1f0 [ 112.140705][ T5841] ? mark_lock+0x94/0x320 [ 112.145078][ T5841] __lock_acquire+0x2c42/0x7d10 [ 112.150080][ T5841] ? lockdep_unlock+0x143/0x2e0 [ 112.155064][ T5841] ? mark_lock+0x94/0x320 [ 112.159430][ T5841] ? verify_lock_unused+0x140/0x140 [ 112.164764][ T5841] ? __lock_acquire+0x12e8/0x7d10 [ 112.169935][ T5841] lock_acquire+0x19e/0x400 [ 112.174521][ T5841] ? __flush_work+0xfa/0x210 [ 112.179150][ T5841] ? verify_lock_unused+0x140/0x140 [ 112.184473][ T5841] ? __mutex_trylock_common+0x155/0x260 [ 112.190058][ T5841] ? read_lock_is_recursive+0x10/0x10 [ 112.195597][ T5841] __flush_work+0x116/0x210 [ 112.200255][ T5841] ? __flush_work+0xfa/0x210 [ 112.204999][ T5841] ? flush_work+0x20/0x20 [ 112.209388][ T5841] ? hci_leds_update_powered+0x148/0x160 [ 112.215064][ T5841] ? rcu_lock_release+0x5/0x20 [ 112.219879][ T5841] ? __lock_acquire+0x7d10/0x7d10 [ 112.224949][ T5841] hci_dev_do_close+0x1e7/0x1030 [ 112.229931][ T5841] ? _raw_spin_unlock+0x40/0x40 [ 112.234842][ T5841] hci_rfkill_set_block+0x10a/0x190 [ 112.240083][ T5841] ? rcu_lock_release+0x20/0x20 [ 112.244974][ T5841] rfkill_set_block+0x1c6/0x420 [ 112.249872][ T5841] rfkill_fop_write+0x452/0x560 [ 112.254766][ T5841] ? rfkill_fop_read+0x4d0/0x4d0 [ 112.259745][ T5841] ? common_file_perm+0xc0/0x1c0 [ 112.264730][ T5841] ? fsnotify_perm+0x5d/0x560 [ 112.269457][ T5841] ? security_file_permission+0x75/0xa0 [ 112.275049][ T5841] ? rfkill_fop_read+0x4d0/0x4d0 [ 112.280031][ T5841] vfs_write+0x30b/0xd60 [ 112.284311][ T5841] ? file_end_write+0x250/0x250 [ 112.289295][ T5841] ? __fget_files+0x40f/0x480 [ 112.294104][ T5841] ? __fdget_pos+0x1e2/0x370 [ 112.298725][ T5841] ? ksys_write+0x71/0x260 [ 112.303187][ T5841] ksys_write+0x152/0x260 [ 112.307557][ T5841] ? __ia32_sys_read+0x80/0x80 [ 112.312369][ T5841] ? lockdep_hardirqs_on+0x94/0x140 [ 112.317609][ T5841] do_syscall_64+0x4c/0xa0 [ 112.322065][ T5841] ? clear_bhb_loop+0x30/0x80 [ 112.326931][ T5841] ? clear_bhb_loop+0x30/0x80 [ 112.331687][ T5841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.337633][ T5841] RIP: 0033:0x7f55101ddeb9 [ 112.342313][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.362305][ T5841] RSP: 002b:00007f550e439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.371002][ T5841] RAX: ffffffffffffffda RBX: 00007f5510458fa0 RCX: 00007f55101ddeb9 [ 112.379014][ T5841] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 112.387026][ T5841] RBP: 00007f551024bc1f R08: 0000000000000000 R09: 0000000000000000 [ 112.395230][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.403248][ T5841] R13: 00007f5510459038 R14: 00007f5510458fa0 R15: 00007fff57463e18 [ 112.411273][ T5841] [ 112.499007][ T5842] loop1: detected capacity change from 0 to 32768 [ 112.563329][ T5842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.717 (5842) [ 112.646526][ T5842] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 112.658464][ T5842] BTRFS info (device loop1): force clearing of disk cache [ 112.666262][ T5842] BTRFS info (device loop1): metadata ratio 0 [ 112.672685][ T5842] BTRFS info (device loop1): enabling ssd optimizations [ 112.696252][ T5842] BTRFS info (device loop1): using spread ssd allocation scheme [ 112.705216][ T5842] BTRFS info (device loop1): using free space tree [ 112.711942][ T5842] BTRFS info (device loop1): has skinny extents [ 112.851752][ T5842] BTRFS info (device loop1): clearing free space tree [ 112.859524][ T5842] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.871231][ T5842] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.892869][ T5842] BTRFS info (device loop1): creating free space tree [ 112.904788][ T5842] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.914885][ T5842] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)