last executing test programs: 7.313307779s ago: executing program 0 (id=379): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) 6.842068117s ago: executing program 0 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 6.600372611s ago: executing program 0 (id=386): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x96) close(r0) eventfd(0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x20834a6f, 0x3a, '#@', 0x3a, '', 0x3a, './bus'}, 0x27) 6.08439844s ago: executing program 0 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f1018, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x102) 5.823945724s ago: executing program 0 (id=392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001440)='U', 0xfdef}], 0x1}, 0x3) 5.401629161s ago: executing program 3 (id=393): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 4.668057513s ago: executing program 0 (id=397): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x8}) 4.27443188s ago: executing program 32 (id=397): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x8}) 3.896767866s ago: executing program 4 (id=404): r0 = syz_io_uring_setup(0x952, &(0x7f0000000240), &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r2, 0x1) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 3.197955577s ago: executing program 1 (id=408): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.197161747s ago: executing program 4 (id=417): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.968952091s ago: executing program 1 (id=409): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000580)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000001c0)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0xc7, 0x204, 0xd0, 0xb, 0x6, 0x4, 0x2732, r2}}], 0x30, 0x4040}, 0x40810) 2.968506521s ago: executing program 4 (id=410): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000080)) dup3(r2, r1, 0x0) 2.624093007s ago: executing program 4 (id=411): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}]}) 2.597587397s ago: executing program 1 (id=413): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.466350389s ago: executing program 4 (id=414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, '\x00', @b}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 2.291489622s ago: executing program 3 (id=415): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 2.077838446s ago: executing program 1 (id=419): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) 1.997359017s ago: executing program 3 (id=420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/158, 0x9e) ioctl$TCSETS(r1, 0x5402, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x2, 0x0, "f937267f0f7ba57603a6a12e3f0a7f64c64c56"}) 1.120072562s ago: executing program 1 (id=421): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000140)) 1.119840772s ago: executing program 2 (id=422): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) 1.024037943s ago: executing program 2 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2400, 0x2e) getdents(r0, &(0x7f0000000000)=""/36, 0x24) lseek(r0, 0x101, 0x1) 983.620274ms ago: executing program 3 (id=424): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/98, 0x62}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000009c0)="0a2ca221d440bae485b2447df3e8a908254dcfd6019b61073814f0402d99176b08c64ff16fa023db8a312792d94b693fcbcc9843a8117eefc059923e6a909e945ceaa504c0", 0x45}], 0x1}}], 0x1, 0x40800) 835.069437ms ago: executing program 1 (id=425): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x141842, 0x100) 724.002988ms ago: executing program 3 (id=426): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 723.252298ms ago: executing program 2 (id=435): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000002e40)=""/4086, 0xff6}) 560.171891ms ago: executing program 2 (id=427): unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 286.199736ms ago: executing program 2 (id=428): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 98.288449ms ago: executing program 4 (id=429): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) setuid(0xee01) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 8.94587ms ago: executing program 3 (id=430): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 0s ago: executing program 2 (id=440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, '\x00', @b}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 57.072813][ T4238] cgroup: Unknown subsys name 'net' [ 57.205973][ T4238] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.589087][ T4238] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.274443][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.278345][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.284453][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.291364][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.297024][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.304119][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.310313][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.317106][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.324685][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.331439][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.337712][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.345381][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.352836][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.359656][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.366177][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.372986][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.379782][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.393995][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.394449][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.401603][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.408468][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.421902][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.437595][ T4259] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.445650][ T4259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.453371][ T4259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.460714][ T4259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.469719][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.495537][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.511458][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.518953][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.829900][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 60.909746][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 60.948445][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 61.031340][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 61.108175][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.115805][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.124411][ T4252] device bridge_slave_0 entered promiscuous mode [ 61.136204][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 61.159779][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.166902][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.174850][ T4251] device bridge_slave_0 entered promiscuous mode [ 61.183643][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.190973][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.198630][ T4252] device bridge_slave_1 entered promiscuous mode [ 61.212915][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.220002][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.228102][ T4250] device bridge_slave_0 entered promiscuous mode [ 61.235813][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.242956][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.250998][ T4251] device bridge_slave_1 entered promiscuous mode [ 61.294046][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.301212][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.309057][ T4250] device bridge_slave_1 entered promiscuous mode [ 61.334021][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.366889][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.377587][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.388217][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.401449][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.408533][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.416921][ T4249] device bridge_slave_0 entered promiscuous mode [ 61.426449][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.437149][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.462784][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.469873][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.477899][ T4249] device bridge_slave_1 entered promiscuous mode [ 61.530549][ T4250] team0: Port device team_slave_0 added [ 61.546228][ T4252] team0: Port device team_slave_0 added [ 61.567734][ T4250] team0: Port device team_slave_1 added [ 61.575454][ T4251] team0: Port device team_slave_0 added [ 61.582487][ T4252] team0: Port device team_slave_1 added [ 61.589644][ T4251] team0: Port device team_slave_1 added [ 61.595626][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.603269][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.611159][ T4257] device bridge_slave_0 entered promiscuous mode [ 61.620193][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.650721][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.657792][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.666278][ T4257] device bridge_slave_1 entered promiscuous mode [ 61.674707][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.718857][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.726032][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.751975][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.764473][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.771446][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.797886][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.810021][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.817064][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.843552][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.869398][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.876640][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.902965][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.922064][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.929019][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.955073][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.971719][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.978677][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.004767][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.021466][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.032691][ T4249] team0: Port device team_slave_0 added [ 62.054382][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.073049][ T4249] team0: Port device team_slave_1 added [ 62.124477][ T4251] device hsr_slave_0 entered promiscuous mode [ 62.131469][ T4251] device hsr_slave_1 entered promiscuous mode [ 62.141250][ T4252] device hsr_slave_0 entered promiscuous mode [ 62.147987][ T4252] device hsr_slave_1 entered promiscuous mode [ 62.155453][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.163440][ T4252] Cannot create hsr debugfs directory [ 62.171001][ T4257] team0: Port device team_slave_0 added [ 62.205238][ T4257] team0: Port device team_slave_1 added [ 62.219758][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.226819][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.252771][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.267163][ T4250] device hsr_slave_0 entered promiscuous mode [ 62.273983][ T4250] device hsr_slave_1 entered promiscuous mode [ 62.280796][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.288902][ T4250] Cannot create hsr debugfs directory [ 62.318541][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.325567][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.352031][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.374863][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.382392][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.409256][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.458203][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.465340][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.491386][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.511028][ T4263] Bluetooth: hci4: command 0x0409 tx timeout [ 62.511048][ T4253] Bluetooth: hci2: command 0x0409 tx timeout [ 62.520758][ T4263] Bluetooth: hci3: command 0x0409 tx timeout [ 62.523423][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 62.565735][ T4249] device hsr_slave_0 entered promiscuous mode [ 62.572492][ T4249] device hsr_slave_1 entered promiscuous mode [ 62.578972][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.586629][ T4249] Cannot create hsr debugfs directory [ 62.592471][ T4253] Bluetooth: hci1: command 0x0409 tx timeout [ 62.623386][ T4257] device hsr_slave_0 entered promiscuous mode [ 62.630334][ T4257] device hsr_slave_1 entered promiscuous mode [ 62.637196][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.645089][ T4257] Cannot create hsr debugfs directory [ 62.859495][ T4252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.889363][ T4252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.909445][ T4252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.922896][ T4252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.950018][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.969079][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.986433][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.997311][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.030351][ T4251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.039764][ T4251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.054050][ T4251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.081040][ T4251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.165672][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.185261][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.215678][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.228257][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.253941][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.273106][ T4257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.289333][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.299204][ T4257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.310273][ T4257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.321301][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.331776][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.349572][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.356581][ T4257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.375188][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.382237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.390268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.402668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.411795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.420539][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.427888][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.438495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.453939][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.475560][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.484826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.493800][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.500925][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.511235][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.519771][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.528298][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.535389][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.544289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.553724][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.562314][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.569372][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.577151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.589107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.600698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.625576][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.635114][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.644407][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.654369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.663201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.671899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.680229][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.688858][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.697276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.705431][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.718047][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.727632][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.744228][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.775568][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.785763][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.805982][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.814887][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.824906][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.835012][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.877226][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.888470][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.897355][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.904503][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.912705][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.921333][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.929628][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.943882][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.952685][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.961119][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.969661][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.978687][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.985803][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.994762][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.009843][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.023296][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.038921][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.058982][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.068174][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.082570][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.110059][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.152154][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.161729][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.173498][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.188611][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.197643][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.206346][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.213617][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.250939][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.259331][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.272362][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.281262][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.289771][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.301051][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.309817][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.319316][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.333459][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.343567][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.354574][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.361711][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.370570][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.379425][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.391836][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.399690][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.421614][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.432636][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.447556][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.458563][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.467318][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.477569][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.486913][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.518981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.527285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.541839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.549283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.562844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.571892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.580453][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.587580][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.595696][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 64.601742][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 64.605389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.607733][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 64.620613][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 64.635581][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.645330][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.653881][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.664152][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.672051][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 64.679799][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.689084][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.697739][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.704848][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.716658][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.727037][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.740368][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.782570][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.801874][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.847536][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.871724][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.880340][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.889831][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.899714][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.909406][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.918956][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.927890][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.937152][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.948806][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.958997][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.968018][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.978494][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.987420][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.023033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.036803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.045791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.059211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.069026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.083946][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.107232][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.141510][ T4252] device veth0_vlan entered promiscuous mode [ 65.164153][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.176597][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.201751][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.222797][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.246371][ T4250] device veth0_vlan entered promiscuous mode [ 65.261931][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.269345][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.298585][ T4250] device veth1_vlan entered promiscuous mode [ 65.309246][ T4252] device veth1_vlan entered promiscuous mode [ 65.345526][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.378082][ T4250] device veth0_macvtap entered promiscuous mode [ 65.405277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.417320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.442340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.455121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.464623][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.484678][ T4250] device veth1_macvtap entered promiscuous mode [ 65.499310][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.509359][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.526775][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.540205][ T4252] device veth0_macvtap entered promiscuous mode [ 65.572076][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.581633][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.590297][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.606078][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.615061][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.624884][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.635549][ T4252] device veth1_macvtap entered promiscuous mode [ 65.650174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.658546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.668412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.682078][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.692156][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.702241][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.713258][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.727762][ T4257] device veth0_vlan entered promiscuous mode [ 65.743811][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.753427][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.762433][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.771404][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.787171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.796957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.805903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.814188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.822318][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.834425][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.845476][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.857220][ T4257] device veth1_vlan entered promiscuous mode [ 65.884376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.894175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.902966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.912367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.921331][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.931640][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.942864][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.955105][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.997412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.005693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.014949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.024838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.034272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.043582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.052616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.061288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.069048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.081453][ T4252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.090156][ T4252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.099534][ T4252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.109766][ T4252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.137830][ T4251] device veth0_vlan entered promiscuous mode [ 66.155030][ T4249] device veth0_vlan entered promiscuous mode [ 66.183561][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.192461][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.201920][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.210281][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.219299][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.227623][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.241536][ T4257] device veth0_macvtap entered promiscuous mode [ 66.269889][ T4251] device veth1_vlan entered promiscuous mode [ 66.285449][ T4249] device veth1_vlan entered promiscuous mode [ 66.300093][ T4257] device veth1_macvtap entered promiscuous mode [ 66.346470][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.362745][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.373551][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.384204][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.395695][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.424035][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.436293][ T4251] device veth0_macvtap entered promiscuous mode [ 66.440198][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.443694][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.457899][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.466104][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.474700][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.483074][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.492048][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.501053][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.508793][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.517627][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.526707][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.536990][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.549274][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.559336][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.570825][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.581886][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.598918][ T4251] device veth1_macvtap entered promiscuous mode [ 66.616448][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.628517][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.637322][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.657400][ T4257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.667838][ T4257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.673988][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 66.677313][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 66.682770][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 66.688501][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 66.696006][ T4257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.709244][ T4257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.740851][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.748789][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.761973][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 66.783625][ T4249] device veth0_macvtap entered promiscuous mode [ 66.797822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.807101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.816193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.831295][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.839247][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.856281][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.867114][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.877442][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.887922][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.897836][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.908520][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.920204][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.931075][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.941687][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.957480][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.968019][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.977915][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.989892][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.009021][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.028443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.046831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.055183][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.063986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.073748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.082540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.095255][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.095892][ T4249] device veth1_macvtap entered promiscuous mode [ 67.122471][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.124282][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.139953][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.148883][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.161624][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.184095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.194042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.295553][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.314659][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.325038][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.329807][ T4329] Bluetooth: MGMT ver 1.22 [ 67.336546][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.350617][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.361518][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.371549][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.382211][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.404308][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.415010][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.428924][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.439564][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.455854][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.466206][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.485943][ T27] audit: type=1326 audit(1744896722.677:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4330 comm="syz.3.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb93f8e169 code=0x0 [ 67.486146][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.517554][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.528791][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.540940][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.553424][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.563569][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.565105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.579886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.588948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.598141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.607169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.619125][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.645771][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.667732][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.677021][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.770142][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.790326][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.812045][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.821881][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.860086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.882257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.911051][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.927078][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.962776][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.979481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.003455][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.029503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.078204][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.137356][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.168140][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.434962][ T4344] loop4: detected capacity change from 0 to 1764 [ 68.654563][ T4348] loop2: detected capacity change from 0 to 8192 [ 68.681409][ T4348] ======================================================= [ 68.681409][ T4348] WARNING: The mand mount option has been deprecated and [ 68.681409][ T4348] and is ignored by this kernel. Remove the mand [ 68.681409][ T4348] option from the mount to silence this warning. [ 68.681409][ T4348] ======================================================= [ 68.751560][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 68.757594][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 68.764858][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 68.764954][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 68.810885][ T4295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.830859][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 68.882606][ T27] audit: type=1800 audit(1744896724.077:3): pid=4348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file2" dev="loop2" ino=1048596 res=0 errno=0 [ 68.925420][ T4348] syz.2.7: attempt to access beyond end of device [ 68.925420][ T4348] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.953179][ T4363] Zero length message leads to an empty skb [ 69.002539][ T4295] usb 4-1: Using ep0 maxpacket: 16 [ 69.007960][ T4327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.023383][ T4295] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.035233][ T4295] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.049383][ T4295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.056300][ T4295] usb 4-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 69.065851][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.134286][ T4295] usb 4-1: config 0 descriptor?? [ 69.168180][ T4367] loop4: detected capacity change from 0 to 256 [ 69.210754][ T4327] usb 1-1: Using ep0 maxpacket: 16 [ 69.225962][ T4327] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 69.243584][ T4327] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.267336][ T4327] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.297295][ T4327] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.326515][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.336785][ T4327] usb 1-1: Product: syz [ 69.347505][ T4327] usb 1-1: Manufacturer: syz [ 69.359412][ T4327] usb 1-1: SerialNumber: syz [ 69.498554][ T4373] sctp: [Deprecated]: syz.4.17 (pid 4373) Use of int in max_burst socket option. [ 69.498554][ T4373] Use struct sctp_assoc_value instead [ 69.589669][ T4295] hid (null): unknown global tag 0x83 [ 69.600659][ T4295] hid (null): unknown global tag 0xc [ 69.606014][ T4295] hid (null): global environment stack underflow [ 69.636025][ T4295] hid-generic 0003:060B:430A.0001: unexpected long global item [ 69.658610][ T4295] hid-generic: probe of 0003:060B:430A.0001 failed with error -22 [ 69.788503][ T4327] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 69.837808][ T4295] usb 4-1: USB disconnect, device number 2 [ 70.159115][ T4389] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.237808][ T4392] loop1: detected capacity change from 0 to 8 [ 70.271788][ T4392] SQUASHFS error: zlib decompression failed, data probably corrupt [ 70.279953][ T4392] SQUASHFS error: Failed to read block 0x4e8: -5 [ 70.287552][ T27] audit: type=1800 audit(1744896725.477:4): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 70.319215][ T4392] SQUASHFS error: Failed to read block 0x6e6: -5 [ 70.326359][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.333828][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.340769][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.347038][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.355197][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.362089][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.368353][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.375746][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.382692][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.388936][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.396335][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.403216][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.409904][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.417324][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.424400][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.431118][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.438427][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.445272][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.451547][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.458846][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.465764][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.472041][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.479339][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.486205][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.492470][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.499771][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.506672][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.514299][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.521662][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.528466][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.534739][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.542099][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.548914][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.555216][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.562546][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.569345][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.575588][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.582940][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.589754][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.596309][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.603831][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.611038][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.617273][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.624620][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.631483][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.637695][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.645037][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.652707][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.659405][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.666763][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.674001][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.680208][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.687544][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.694408][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.700661][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.707959][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.715172][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.721462][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.728818][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.735711][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.742115][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.749418][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.756847][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.763127][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.770476][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.777293][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.783564][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.790912][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.797729][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.804002][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.811362][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.818648][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.824907][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.828484][ T4397] loop2: detected capacity change from 0 to 128 [ 70.832206][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.832260][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.832324][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.832338][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.832384][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.832435][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.832449][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.832492][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.832544][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.832558][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.832598][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.832650][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.922168][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.928995][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.935237][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.942569][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.949383][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.955624][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.962961][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.969770][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.976024][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 70.983360][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 70.990160][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 70.996401][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 71.003641][ T4397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.012136][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 71.012185][ T4392] SQUASHFS error: Failed to read block 0x0: -5 [ 71.012421][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 71.032524][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 71.039844][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 71.047552][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 71.051920][ T4397] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.054483][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 71.093419][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 71.100340][ T4392] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 71.107685][ T4392] SQUASHFS error: read_indexes: reading block [6e4:0] [ 71.120761][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.127284][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.134255][ T4327] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 71.168457][ T4327] usb 1-1: USB disconnect, device number 2 [ 71.285549][ T4397] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.28: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 71.338060][ T4397] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 71.394149][ T4405] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.28: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 71.441860][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.476986][ T4405] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 71.609275][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 71.694959][ T4416] loop1: detected capacity change from 0 to 128 [ 71.734852][ T4416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.761309][ T4416] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.934472][ T4423] loop4: detected capacity change from 0 to 8192 [ 71.971016][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 71.981932][ T4423] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.022421][ T4398] loop3: detected capacity change from 0 to 32768 [ 72.070339][ T4423] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 72.103067][ T4398] XFS (loop3): Mounting V5 Filesystem [ 72.117628][ T4423] REISERFS (device loop4): using ordered data mode [ 72.124421][ T4423] reiserfs: using flush barriers [ 72.197998][ T4437] loop2: detected capacity change from 0 to 512 [ 72.198556][ T4423] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.225630][ T4398] XFS (loop3): Ending clean mount [ 72.240137][ T4437] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.285562][ T4423] REISERFS (device loop4): checking transaction log (loop4) [ 72.289072][ T4437] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.38: invalid block [ 72.326804][ T4437] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.38: invalid indirect mapped block 10 (level 1) [ 72.328630][ T4423] REISERFS (device loop4): Using r5 hash to sort names [ 72.371146][ T4423] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 72.390598][ T4437] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.38: invalid indirect mapped block 8 (level 1) [ 72.459604][ T4252] XFS (loop3): Unmounting Filesystem [ 72.473282][ T4437] EXT4-fs (loop2): 1 truncate cleaned up [ 72.493479][ T4437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.584507][ T4419] loop0: detected capacity change from 0 to 32768 [ 72.591301][ T4419] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.35 (4419) [ 72.626457][ T4419] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 72.626633][ T4419] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 72.626725][ T4419] BTRFS info (device loop0): using free space tree [ 72.691078][ T4448] vxcan0: tx drop: invalid sa for name 0x0000040000000001 [ 72.879190][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 73.119093][ T4419] BTRFS info (device loop0): enabling ssd optimizations [ 73.357496][ T4481] device vlan2 entered promiscuous mode [ 73.406020][ T4481] device macvtap0 entered promiscuous mode [ 73.434603][ T4485] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 73.488144][ T4486] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 73.528454][ T4483] device veth0_macvtap left promiscuous mode [ 73.645129][ T4483] device macvtap0 left promiscuous mode [ 73.649476][ T4249] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 73.710834][ T4468] loop1: detected capacity change from 0 to 32768 [ 73.904442][ T4468] XFS (loop1): Mounting V5 Filesystem [ 74.013908][ T4468] XFS (loop1): Ending clean mount [ 74.048351][ T4468] XFS (loop1): Quotacheck needed: Please wait. [ 74.058353][ T4511] loop2: detected capacity change from 0 to 256 [ 74.100201][ T27] audit: type=1804 audit(1744896729.287:5): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.51" name="/newroot/11/file0/bus" dev="loop2" ino=1048599 res=1 errno=0 [ 74.129701][ T27] audit: type=1800 audit(1744896729.317:6): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.51" name="bus" dev="loop2" ino=1048599 res=0 errno=0 [ 74.165504][ T4468] XFS (loop1): Quotacheck: Done. [ 74.387031][ T4519] input: syz0 as /devices/virtual/input/input5 [ 74.440004][ T4250] XFS (loop1): Unmounting Filesystem [ 75.005611][ T4535] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET) [ 75.209667][ T4543] netlink: 'syz.3.65': attribute type 11 has an invalid length. [ 75.296036][ T4546] kernel read not supported for file /!sel (pid: 4546 comm: syz.1.66) [ 75.329211][ T27] audit: type=1800 audit(1744896730.517:7): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.66" name="!sel" dev="mqueue" ino=33761 res=0 errno=0 [ 75.347996][ T4549] 9pnet_fd: Insufficient options for proto=fd [ 76.194279][ T14] cfg80211: failed to load regulatory.db [ 76.430689][ T4262] Bluetooth: hci5: command 0x1003 tx timeout [ 76.437588][ T4253] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 76.965695][ T4585] loop0: detected capacity change from 0 to 128 [ 77.092618][ T4585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 77.111969][ T4585] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.483669][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 77.513532][ T4600] overlayfs: failed to verify upper (28/file0, ino=166, err=-116) [ 77.522171][ T4600] overlayfs: failed to verify index dir 'upper' xattr [ 77.529019][ T4600] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 78.097188][ T4620] input: syz1 as /devices/virtual/input/input6 [ 78.147229][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057783000: rx timeout, send abort [ 78.156786][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057787c00: rx timeout, send abort [ 78.165932][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057783000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.180993][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057787c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.289827][ T4626] loop2: detected capacity change from 0 to 512 [ 78.589838][ T4633] input: syz1 as /devices/virtual/input/input7 [ 79.146425][ T4650] loop4: detected capacity change from 0 to 1024 [ 79.175217][ T4650] EXT4-fs: Ignoring removed nobh option [ 79.190491][ T4650] EXT4-fs: Ignoring removed bh option [ 79.215222][ T4650] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.279734][ T4650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.437647][ T4650] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.107: Allocating blocks 385-513 which overlap fs metadata [ 79.485161][ T4650] EXT4-fs (loop4): pa ffff88807362d8c0: logic 16, phys. 129, len 24 [ 79.493752][ T4650] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 79.637590][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 79.716756][ T4645] loop2: detected capacity change from 0 to 40427 [ 79.759720][ T4645] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 79.800080][ T4645] F2FS-fs (loop2): invalid crc value [ 79.855634][ T4645] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.950557][ T4645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.068654][ T4257] syz-executor: attempt to access beyond end of device [ 80.068654][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.170953][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.365382][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 80.376758][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.404043][ T14] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 80.424011][ T14] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 80.446696][ T14] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 80.465167][ T14] usb 1-1: config 128 has no interface number 0 [ 80.478353][ T14] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 80.490050][ T14] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.500644][ T14] usb 1-1: config 128 interface 127 has no altsetting 0 [ 80.525256][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 80.556060][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.574351][ T14] usb 1-1: Product: syz [ 80.583056][ T14] usb 1-1: Manufacturer: syz [ 80.587738][ T14] usb 1-1: SerialNumber: syz [ 80.865343][ T14] usb 1-1: USB disconnect, device number 3 [ 80.947886][ T4686] raw_sendmsg: syz.1.118 forgot to set AF_INET. Fix it! [ 81.081991][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.140818][ T4690] loop1: detected capacity change from 0 to 256 [ 81.148823][ T4690] exfat: Deprecated parameter 'namecase' [ 81.203806][ T4690] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 81.339002][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 81.352109][ T4697] netlink: 'syz.4.121': attribute type 5 has an invalid length. [ 81.383944][ T4697] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.393201][ T4697] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.402015][ T4697] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.410754][ T4697] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.422052][ T4697] device vxlan0 entered promiscuous mode [ 81.664764][ T4707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.127'. [ 81.706802][ T4709] loop1: detected capacity change from 0 to 512 [ 81.750381][ T4709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.760829][ T4709] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.009245][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 82.687944][ T4749] loop2: detected capacity change from 0 to 8192 [ 82.711586][ T4296] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 82.843760][ T4755] loop1: detected capacity change from 0 to 4096 [ 82.905639][ T4296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.926365][ T4296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.964798][ T4296] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.980821][ T4758] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.001676][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.019963][ T4296] usb 5-1: Product: syz [ 83.028919][ T4296] usb 5-1: Manufacturer: syz [ 83.038099][ T4296] usb 5-1: SerialNumber: syz [ 83.263795][ T4296] usb 5-1: 0:2 : does not exist [ 83.277705][ T4296] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 83.346822][ T4296] usb 5-1: USB disconnect, device number 2 [ 83.535777][ T4775] loop2: detected capacity change from 0 to 256 [ 83.586422][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.611336][ T4777] loop3: detected capacity change from 0 to 128 [ 83.654653][ T4777] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 83.920506][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.130464][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 84.137175][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.201495][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.238063][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 84.257558][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.285233][ T26] usb 1-1: config 0 descriptor?? [ 84.368414][ T4803] loop2: detected capacity change from 0 to 164 [ 84.455186][ T4803] Unable to read rock-ridge attributes [ 84.636276][ T4805] loop4: detected capacity change from 0 to 4096 [ 84.678364][ T4807] loop1: detected capacity change from 0 to 8192 [ 84.686208][ T4809] loop3: detected capacity change from 0 to 1024 [ 84.720280][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.726142][ T4809] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.730007][ T4807] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.800626][ T4807] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 84.835310][ T4807] REISERFS (device loop1): using ordered data mode [ 84.842286][ T4807] reiserfs: using flush barriers [ 84.861718][ T4809] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.896488][ T4807] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.963813][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 84.969846][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 84.976799][ T4807] REISERFS (device loop1): checking transaction log (loop1) [ 84.994213][ T26] usb 1-1: USB disconnect, device number 4 [ 85.003029][ T4807] REISERFS (device loop1): Using r5 hash to sort names [ 85.020929][ T4807] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.035415][ T4807] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 85.067742][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 85.129164][ T4807] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.160802][ T4294] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.166683][ T4807] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.204294][ T4820] loop3: detected capacity change from 0 to 1024 [ 85.214895][ T4807] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.242740][ T4807] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.270376][ T4820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.332026][ T4820] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 85.346518][ T4820] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 85.367430][ T4294] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 85.388099][ T4294] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.416234][ T4294] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 85.432284][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.483769][ T4294] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 85.544958][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 85.557324][ T4818] loop2: detected capacity change from 0 to 32768 [ 85.599863][ T4818] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.174 (4818) [ 85.653575][ T4818] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 85.680631][ T4818] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 85.689897][ T4818] BTRFS info (device loop2): force zlib compression, level 3 [ 85.715609][ T4818] BTRFS info (device loop2): force clearing of disk cache [ 85.765910][ T4818] BTRFS info (device loop2): setting nodatasum [ 85.790989][ T4818] BTRFS info (device loop2): allowing degraded mounts [ 85.797789][ T4818] BTRFS info (device loop2): enabling disk space caching [ 85.851285][ T4818] BTRFS info (device loop2): disk space caching is enabled [ 86.219852][ T26] usb 5-1: USB disconnect, device number 3 [ 86.230668][ T4818] BTRFS info (device loop2): rebuilding free space tree [ 86.247719][ T4805] EXT4-fs (loop4): unmounting filesystem. [ 86.284171][ T4818] BTRFS info (device loop2): disabling free space tree [ 86.297207][ T4818] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.317957][ T4818] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.319780][ T4862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.187'. [ 86.418918][ T4862] netlink: 43 bytes leftover after parsing attributes in process `syz.1.187'. [ 86.436435][ T4862] netlink: 'syz.1.187': attribute type 6 has an invalid length. [ 86.460468][ T4862] netlink: 'syz.1.187': attribute type 5 has an invalid length. [ 86.506383][ T4862] netlink: 43 bytes leftover after parsing attributes in process `syz.1.187'. [ 86.578946][ T4818] BTRFS info (device loop2): balance: start -d -m -slimit=0 [ 86.622999][ T4818] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 86.629072][ T4871] loop4: detected capacity change from 0 to 16 [ 86.701912][ T4871] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 86.831321][ T4871] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQI¸¥Šte [ 87.024626][ T4818] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 87.186528][ T4865] loop3: detected capacity change from 0 to 32768 [ 87.231356][ T4865] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.188 (4865) [ 87.321232][ T4865] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.370655][ T4865] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 87.407778][ T4818] BTRFS info (device loop2): found 9 extents, stage: move data extents [ 87.416464][ T4865] BTRFS info (device loop3): force clearing of disk cache [ 87.448281][ T4865] BTRFS info (device loop3): enabling auto defrag [ 87.483233][ T4865] BTRFS info (device loop3): max_inline at 0 [ 87.499934][ T4865] BTRFS info (device loop3): enabling disk space caching [ 87.519244][ T4865] BTRFS info (device loop3): disk space caching is enabled [ 87.556084][ T4818] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 87.806378][ T4818] BTRFS info (device loop2): balance: ended with status: 0 [ 87.820260][ T4865] BTRFS info (device loop3): enabling ssd optimizations [ 87.844540][ T4865] BTRFS info (device loop3): rebuilding free space tree [ 87.878281][ T4865] BTRFS info (device loop3): disabling free space tree [ 87.886837][ T4865] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.897384][ T4865] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.979694][ T4257] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 88.239232][ T11] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 88.969909][ T4252] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.457493][ T5019] loop0: detected capacity change from 0 to 1024 [ 89.545685][ T5019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.562105][ T5019] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.605244][ T4491] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.635474][ T5019] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 89.681180][ T5019] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28 [ 89.695352][ T5019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.695352][ T5019] [ 89.705570][ T5019] EXT4-fs (loop0): Total free blocks count 0 [ 89.724691][ T5019] EXT4-fs (loop0): Free/Dirty block details [ 89.745204][ T5019] EXT4-fs (loop0): free_blocks=4293918720 [ 89.763880][ T5019] EXT4-fs (loop0): dirty_blocks=32 [ 89.769139][ T5019] EXT4-fs (loop0): Block reservation details [ 89.775579][ T5019] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 89.804584][ T4491] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 89.823566][ T4491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.847072][ T4491] usb 3-1: Product: syz [ 89.855375][ T4491] usb 3-1: Manufacturer: syz [ 89.860620][ T4491] usb 3-1: SerialNumber: syz [ 89.869226][ T4491] usb 3-1: config 0 descriptor?? [ 89.884403][ T4985] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 16 with error 28 [ 90.309000][ T4491] usb 3-1: Firmware: major: 97, minor: 105, hardware type: UNKNOWN (98) [ 90.349491][ T5047] loop4: detected capacity change from 0 to 40427 [ 90.374787][ T5047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.429085][ T5047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.508355][ T4251] syz-executor: attempt to access beyond end of device [ 90.508355][ T4251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.511725][ T4491] usb 3-1: no permanent extended address found, random address set [ 90.549620][ T4491] usb 3-1: atusb_probe: initialization failed, error = -524 [ 90.565429][ T4491] atusb: probe of 3-1:0.0 failed with error -524 [ 90.761937][ T14] usb 3-1: USB disconnect, device number 2 [ 90.944578][ T4491] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.013608][ T5066] loop0: detected capacity change from 0 to 1024 [ 91.060529][ T4933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.063794][ T5066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.122624][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 91.152054][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.177927][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.189873][ T4491] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 91.199420][ T4491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.213593][ T4491] usb 4-1: config 0 descriptor?? [ 91.240568][ T4933] usb 2-1: Using ep0 maxpacket: 16 [ 91.247319][ T4933] usb 2-1: config 1 has an invalid interface number: 203 but max is 0 [ 91.255854][ T4933] usb 2-1: config 1 has no interface number 0 [ 91.264232][ T4933] usb 2-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 91.273679][ T4933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.290449][ T4933] usb 2-1: Product: syz [ 91.294649][ T4933] usb 2-1: Manufacturer: syz [ 91.300368][ T4933] usb 2-1: SerialNumber: syz [ 91.457426][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 91.466465][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 91.476114][ T5079] netlink: 'syz.2.230': attribute type 18 has an invalid length. [ 91.565114][ T4933] aqc111: probe of 2-1:1.203 failed with error -22 [ 91.634405][ T4491] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 91.658026][ T4491] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 91.740549][ T4491] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 91.784269][ T4933] usb 2-1: USB disconnect, device number 2 [ 92.406785][ T4491] usb 4-1: USB disconnect, device number 3 [ 92.427536][ T4491] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 92.587717][ T5114] netlink: 'syz.2.239': attribute type 39 has an invalid length. [ 92.698853][ T5121] Bluetooth: hci0: service_discovery: too big uuid_count value 48427 [ 92.914776][ T5130] loop0: detected capacity change from 0 to 512 [ 92.967189][ T5130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.059369][ T5130] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.247: bg 0: block 5: invalid block bitmap [ 93.196664][ T5130] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 93.207177][ T5130] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.247: invalid indirect mapped block 3 (level 2) [ 93.256220][ T5130] EXT4-fs (loop0): 2 truncates cleaned up [ 93.265192][ T5130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.330973][ T5130] EXT4-fs (loop0): shut down requested (2) [ 93.455252][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 93.484926][ T5150] loop2: detected capacity change from 0 to 2048 [ 93.577318][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.616482][ T5150] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 93.768931][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 94.035731][ T5168] loop3: detected capacity change from 0 to 512 [ 94.065112][ T5168] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 94.078262][ T5170] binder: 5167:5170 ioctl 40309439 0 returned -22 [ 94.110240][ T5168] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.171215][ T5168] EXT4-fs (loop3): 1 truncate cleaned up [ 94.190946][ T5168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.202896][ T5168] EXT4-fs (loop3): unmounting filesystem. [ 94.961264][ T5191] input: syz1 as /devices/virtual/input/input9 [ 95.766352][ T5215] input: syz1 as /devices/virtual/input/input10 [ 95.819676][ T4370] udevd[4370]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 95.949899][ T5203] loop4: detected capacity change from 0 to 32768 [ 96.007625][ T5203] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.276 (5203) [ 96.046163][ T5203] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.079512][ T5219] loop0: detected capacity change from 0 to 2048 [ 96.097657][ T5203] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 96.133750][ T5203] BTRFS info (device loop4): enabling auto defrag [ 96.150473][ T5203] BTRFS info (device loop4): doing ref verification [ 96.157125][ T5203] BTRFS info (device loop4): max_inline at 0 [ 96.184940][ T5219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.200681][ T5203] BTRFS info (device loop4): force clearing of disk cache [ 96.218195][ T5203] BTRFS info (device loop4): disabling free space tree [ 96.272218][ T5210] loop2: detected capacity change from 0 to 32768 [ 96.384175][ T5219] overlayfs: upper fs needs to support d_type. [ 96.394828][ T5219] overlayfs: cleanup of 'work/#7' failed (-2) [ 96.401716][ T5219] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.409377][ T5219] overlayfs: failed to set xattr on upper [ 96.416839][ T5219] overlayfs: ...falling back to index=off,metacopy=off. [ 96.557297][ T5203] BTRFS info (device loop4): enabling ssd optimizations [ 96.568871][ T5210] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.584088][ T5203] BTRFS info (device loop4): rebuilding free space tree [ 96.655985][ T5203] BTRFS info (device loop4): disabling free space tree [ 96.682473][ T5203] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.721605][ T5203] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.849755][ T5210] (syz.2.279,5210,0):ocfs2_rename:1687 ERROR: status = -39 [ 97.077528][ T4257] ocfs2: Unmounting device (7,2) on (node local) [ 97.208690][ T4251] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.580340][ T5276] loop4: detected capacity change from 0 to 16 [ 97.618784][ T5276] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.748790][ T5281] device bridge_slave_0 left promiscuous mode [ 97.798146][ T5281] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.857820][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.118229][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 98.128950][ T5300] netlink: 'syz.3.308': attribute type 30 has an invalid length. [ 98.159572][ T5300] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.168831][ T5300] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.177827][ T5300] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.186594][ T5300] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.528389][ T5293] loop4: detected capacity change from 0 to 32768 [ 98.571327][ T5293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.305 (5293) [ 98.628891][ T5293] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.666077][ T5293] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.684678][ T5293] BTRFS info (device loop4): force clearing of disk cache [ 98.700713][ T5293] BTRFS info (device loop4): force zlib compression, level 3 [ 98.728424][ T5293] BTRFS info (device loop4): enabling auto defrag [ 98.747335][ T5293] BTRFS info (device loop4): max_inline at 0 [ 98.782593][ T5293] BTRFS info (device loop4): using free space tree [ 99.041148][ T5293] BTRFS info (device loop4): enabling ssd optimizations [ 99.098417][ T5293] BTRFS info (device loop4): rebuilding free space tree [ 99.433468][ T5361] mmap: syz.3.323 (5361) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.740330][ T4251] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.150570][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.299690][ T5378] loop0: detected capacity change from 0 to 8192 [ 100.324413][ T5378] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.352707][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 100.367834][ T14] usb 3-1: config 0 has no interfaces? [ 100.391924][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.407223][ T5378] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 100.418018][ T5378] REISERFS (device loop0): using ordered data mode [ 100.424276][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.425065][ T5378] reiserfs: using flush barriers [ 100.439333][ T5378] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.449030][ T14] usb 3-1: config 0 descriptor?? [ 100.456171][ T5378] REISERFS (device loop0): checking transaction log (loop0) [ 100.470308][ T5378] REISERFS (device loop0): Using r5 hash to sort names [ 100.495171][ T5378] reiserfs: enabling write barrier flush mode [ 100.507479][ T5378] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 100.698233][ T4337] usb 3-1: USB disconnect, device number 3 [ 100.792058][ T5397] loop4: detected capacity change from 0 to 4096 [ 101.005088][ T5397] EXT4-fs: Ignoring removed orlov option [ 101.032236][ T5397] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.050168][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.057832][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.058904][ T5397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.127052][ T5397] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 101.199922][ T5416] netlink: 52 bytes leftover after parsing attributes in process `syz.1.344'. [ 101.207510][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 101.221479][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.228883][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.287075][ T5420] netlink: 52 bytes leftover after parsing attributes in process `syz.1.344'. [ 101.415957][ T5426] loop4: detected capacity change from 0 to 1024 [ 101.541303][ T5430] kernel read not supported for file /eth0 (pid: 5430 comm: syz.3.349) [ 101.565822][ T27] audit: type=1800 audit(1744896756.757:8): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.349" name="eth0" dev="mqueue" ino=37154 res=0 errno=0 [ 101.637086][ T5426] hfsplus: xattr search failed [ 101.818893][ T4251] hfsplus: node 4:3 still has 1 user(s)! [ 101.951070][ T5442] loop4: detected capacity change from 0 to 512 [ 101.980281][ T5442] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.007561][ T5442] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.040652][ T5442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.132366][ T5442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 102.147924][ T5442] System zones: 1-12 [ 102.256391][ T5442] EXT4-fs (loop4): 1 truncate cleaned up [ 102.278448][ T5442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.510331][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 102.741214][ T5436] loop1: detected capacity change from 0 to 40427 [ 102.817342][ T5436] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.922272][ T5470] kernel read not supported for file /eth0 (pid: 5470 comm: syz.2.363) [ 102.936089][ T5472] input: syz1 as /devices/virtual/input/input11 [ 102.962139][ T5436] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.991490][ T27] audit: type=1800 audit(1744896758.187:9): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.363" name="eth0" dev="mqueue" ino=37216 res=0 errno=0 [ 103.080485][ T4929] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.285852][ T4929] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 103.305159][ T4929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.337086][ T4929] usb 5-1: Product: syz [ 103.360545][ T4929] usb 5-1: Manufacturer: syz [ 103.365187][ T4929] usb 5-1: SerialNumber: syz [ 103.401910][ T4929] usb 5-1: config 0 descriptor?? [ 103.559337][ T5488] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 103.587830][ T5488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.366'. [ 103.642221][ T5488] device batadv0 entered promiscuous mode [ 103.648838][ T5488] bridge0: port 3(batadv0) entered blocking state [ 103.714379][ T5488] bridge0: port 3(batadv0) entered disabled state [ 103.817133][ T4929] usb 5-1: Firmware: major: 97, minor: 105, hardware type: UNKNOWN (98) [ 104.018474][ T4929] usb 5-1: no permanent extended address found, random address set [ 104.043856][ T4929] usb 5-1: atusb_probe: initialization failed, error = -524 [ 104.054280][ T4929] atusb: probe of 5-1:0.0 failed with error -524 [ 104.060701][ T5501] loop3: detected capacity change from 0 to 512 [ 104.083837][ T5501] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.155682][ T5501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.190655][ T5501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 104.194063][ T4972] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 104.208688][ T4972] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 104.229122][ T4260] usb 5-1: USB disconnect, device number 4 [ 104.235702][ T5501] System zones: 1-12 [ 104.274820][ T5501] EXT4-fs (loop3): 1 truncate cleaned up [ 104.319853][ T5501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.492451][ T5510] netlink: 52 bytes leftover after parsing attributes in process `syz.0.376'. [ 104.531127][ T5510] netlink: 52 bytes leftover after parsing attributes in process `syz.0.376'. [ 104.587656][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 104.785536][ T5518] process 'syz.3.380' launched './file0' with NULL argv: empty string added [ 105.091649][ T5522] loop2: detected capacity change from 0 to 1024 [ 105.140665][ T4260] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.229500][ T5522] hfsplus: xattr search failed [ 105.332144][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.354987][ T4260] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.410471][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.416522][ T4257] hfsplus: node 4:3 still has 1 user(s)! [ 105.441429][ T4260] usb 5-1: config 0 descriptor?? [ 105.550880][ T5530] loop1: detected capacity change from 0 to 4096 [ 105.592616][ T5530] NILFS (loop1): invalid segment: Checksum error in segment payload [ 105.636629][ T5530] NILFS (loop1): trying rollback from an earlier position [ 105.698847][ T5530] NILFS (loop1): recovery complete [ 105.721946][ T5538] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.883495][ T4260] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 105.955444][ T4260] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input12 [ 106.090796][ T5543] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 106.242357][ T4260] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 106.299513][ T4260] usb 5-1: USB disconnect, device number 5 [ 106.894988][ T4972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.928891][ T5551] loop1: detected capacity change from 0 to 8192 [ 106.994154][ T5551] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.010578][ T5551] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 107.019776][ T5551] REISERFS (device loop1): using ordered data mode [ 107.111050][ T5551] reiserfs: using flush barriers [ 107.170707][ T5551] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.204667][ T4972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.221668][ T5551] REISERFS (device loop1): checking transaction log (loop1) [ 107.251485][ T5551] REISERFS (device loop1): Using r5 hash to sort names [ 107.298057][ T5551] reiserfs: enabling write barrier flush mode [ 107.315070][ T5551] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 107.435363][ T4972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.572748][ T4972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.593261][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.606904][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.614753][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.624300][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.631912][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.639129][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.161672][ T5604] sctp: [Deprecated]: syz.1.409 (pid 5604) Use of int in max_burst socket option. [ 109.161672][ T5604] Use struct sctp_assoc_value instead [ 109.509404][ T5585] chnl_net:caif_netlink_parms(): no params data found [ 109.790486][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.984800][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.005604][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.032222][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.064882][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.108382][ T26] usb 5-1: config 0 descriptor?? [ 110.131585][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.146297][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.183243][ T5585] device bridge_slave_0 entered promiscuous mode [ 110.462474][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.477993][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.510165][ T5585] device bridge_slave_1 entered promiscuous mode [ 110.678253][ T4253] Bluetooth: hci1: command 0x0409 tx timeout [ 110.722264][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.734088][ T26] usb 5-1: string descriptor 0 read error: -22 [ 110.779500][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.887570][ T4972] device hsr_slave_0 left promiscuous mode [ 110.915836][ T4972] device hsr_slave_1 left promiscuous mode [ 110.939817][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input13 [ 110.983367][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.991225][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.000104][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.009302][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.019745][ T4972] device bridge_slave_1 left promiscuous mode [ 111.027332][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.051205][ T4972] device bridge_slave_0 left promiscuous mode [ 111.057428][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.127081][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input14 [ 111.174390][ T26] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input15 [ 111.221999][ T4972] device veth1_macvtap left promiscuous mode [ 111.226653][ T26] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input16 [ 111.245734][ T4972] device veth0_macvtap left promiscuous mode [ 111.268819][ T4972] device veth1_vlan left promiscuous mode [ 111.283151][ T4972] device veth0_vlan left promiscuous mode [ 111.320264][ T26] uclogic 0003:256C:006D.0005: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 111.397093][ T26] usb 5-1: USB disconnect, device number 6 [ 111.516506][ T5661] loop3: detected capacity change from 0 to 8192 [ 111.614086][ T27] audit: type=1800 audit(1744896766.807:10): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.426" name="file2" dev="loop3" ino=1048607 res=0 errno=0 [ 111.675932][ T5661] syz.3.426: attempt to access beyond end of device [ 111.675932][ T5661] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 111.966430][ T5671] [ 111.968798][ T5671] ===================================================== [ 111.975734][ T5671] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 111.983197][ T5671] 6.1.134-syzkaller #0 Not tainted [ 111.988312][ T5671] ----------------------------------------------------- [ 111.989112][ T5659] loop1: detected capacity change from 0 to 32768 [ 111.995223][ T5671] syz.4.429/5671 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 111.995243][ T5671] ffffffff8d00a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xea/0x3b0 [ 112.017836][ T5671] [ 112.017836][ T5671] and this task is already holding: [ 112.022142][ T5659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.425 (5659) [ 112.025183][ T5671] ffff88807d359030 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x3b0 [ 112.046131][ T5671] which would create a new lock dependency: [ 112.052007][ T5671] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 112.059745][ T5671] [ 112.059745][ T5671] but this new dependency connects a HARDIRQ-irq-safe lock: [ 112.069202][ T5671] (&dev->event_lock#2){-...}-{2:2} [ 112.069229][ T5671] [ 112.069229][ T5671] ... which became HARDIRQ-irq-safe at: [ 112.082099][ T5671] lock_acquire+0x1f8/0x5a0 [ 112.086689][ T5671] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.092058][ T5671] input_event+0x8d/0xd0 [ 112.096385][ T5671] psmouse_report_standard_packet+0x50/0x200 [ 112.102451][ T5671] psmouse_process_byte+0x45b/0x640 [ 112.107740][ T5671] psmouse_handle_byte+0x46/0x4b0 [ 112.112852][ T5671] psmouse_interrupt+0x697/0x10a0 [ 112.117961][ T5671] serio_interrupt+0x88/0x130 [ 112.122725][ T5671] i8042_interrupt+0x357/0x750 [ 112.127568][ T5671] __handle_irq_event_percpu+0x2a8/0xb20 [ 112.133283][ T5671] handle_irq_event+0x85/0x1e0 [ 112.138130][ T5671] handle_edge_irq+0x245/0xbf0 [ 112.142977][ T5671] __common_interrupt+0xd7/0x1f0 [ 112.148002][ T5671] common_interrupt+0xae/0xd0 [ 112.152767][ T5671] asm_common_interrupt+0x22/0x40 [ 112.157889][ T5671] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 112.163710][ T5671] i8042_aux_write+0x112/0x190 [ 112.168551][ T5671] ps2_do_sendbyte+0x20a/0x720 [ 112.173398][ T5671] ps2_sendbyte+0x5c/0x120 [ 112.177900][ T5671] cypress_send_ext_cmd+0x21d/0x900 [ 112.183186][ T5671] cypress_detect+0x8f/0x220 [ 112.187854][ T5671] psmouse_extensions+0x68e/0xe30 [ 112.192962][ T5671] psmouse_switch_protocol+0xdf/0x650 [ 112.198423][ T5671] psmouse_connect+0x903/0x14c0 [ 112.203380][ T5671] serio_driver_probe+0x74/0x90 [ 112.208327][ T5671] really_probe+0x2ab/0xcb0 [ 112.212913][ T5671] __driver_probe_device+0x1a2/0x3d0 [ 112.218289][ T5671] driver_probe_device+0x50/0x420 [ 112.223398][ T5671] __driver_attach+0x458/0x6f0 [ 112.228247][ T5671] bus_for_each_dev+0x17c/0x1f0 [ 112.233176][ T5671] serio_handle_event+0x56a/0x8f0 [ 112.238370][ T5671] process_one_work+0x917/0x1260 [ 112.243389][ T5671] worker_thread+0xa47/0x1200 [ 112.248148][ T5671] kthread+0x28d/0x320 [ 112.252304][ T5671] ret_from_fork+0x1f/0x30 [ 112.256826][ T5671] [ 112.256826][ T5671] to a HARDIRQ-irq-unsafe lock: [ 112.263845][ T5671] (tasklist_lock){.+.+}-{2:2} [ 112.263868][ T5671] [ 112.263868][ T5671] ... which became HARDIRQ-irq-unsafe at: [ 112.276479][ T5671] ... [ 112.276485][ T5671] lock_acquire+0x1f8/0x5a0 [ 112.283642][ T5671] _raw_read_lock+0x32/0x40 [ 112.288231][ T5671] do_wait+0x2c6/0xb80 [ 112.292408][ T5671] kernel_wait+0xe5/0x230 [ 112.296829][ T5671] call_usermodehelper_exec_work+0xb5/0x220 [ 112.302809][ T5671] process_one_work+0x917/0x1260 [ 112.307829][ T5671] worker_thread+0xa47/0x1200 [ 112.312583][ T5671] kthread+0x28d/0x320 [ 112.316768][ T5671] ret_from_fork+0x1f/0x30 [ 112.321279][ T5671] [ 112.321279][ T5671] other info that might help us debug this: [ 112.321279][ T5671] [ 112.331496][ T5671] Chain exists of: [ 112.331496][ T5671] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 112.331496][ T5671] [ 112.344705][ T5671] Possible interrupt unsafe locking scenario: [ 112.344705][ T5671] [ 112.353026][ T5671] CPU0 CPU1 [ 112.358386][ T5671] ---- ---- [ 112.363734][ T5671] lock(tasklist_lock); [ 112.367966][ T5671] local_irq_disable(); [ 112.374702][ T5671] lock(&dev->event_lock#2); [ 112.381894][ T5671] lock(&f->f_owner.lock); [ 112.388901][ T5671] [ 112.392355][ T5671] lock(&dev->event_lock#2); [ 112.397204][ T5671] [ 112.397204][ T5671] *** DEADLOCK *** [ 112.397204][ T5671] [ 112.405348][ T5671] 2 locks held by syz.4.429/5671: [ 112.410357][ T5671] #0: ffff88807b253e80 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x4c4/0xaf0 [ 112.418883][ T5671] #1: ffff88807d359030 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x3b0 [ 112.428187][ T5671] [ 112.428187][ T5671] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 112.438575][ T5671] -> (&dev->event_lock#2){-...}-{2:2} { [ 112.444386][ T5671] IN-HARDIRQ-W at: [ 112.448612][ T5671] lock_acquire+0x1f8/0x5a0 [ 112.455284][ T5671] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.462749][ T5671] input_event+0x8d/0xd0 [ 112.469158][ T5671] psmouse_report_standard_packet+0x50/0x200 [ 112.477303][ T5671] psmouse_process_byte+0x45b/0x640 [ 112.484667][ T5671] psmouse_handle_byte+0x46/0x4b0 [ 112.491855][ T5671] psmouse_interrupt+0x697/0x10a0 [ 112.499043][ T5671] serio_interrupt+0x88/0x130 [ 112.505888][ T5671] i8042_interrupt+0x357/0x750 [ 112.512820][ T5671] __handle_irq_event_percpu+0x2a8/0xb20 [ 112.520618][ T5671] handle_irq_event+0x85/0x1e0 [ 112.527542][ T5671] handle_edge_irq+0x245/0xbf0 [ 112.534471][ T5671] __common_interrupt+0xd7/0x1f0 [ 112.541574][ T5671] common_interrupt+0xae/0xd0 [ 112.548413][ T5671] asm_common_interrupt+0x22/0x40 [ 112.555612][ T5671] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 112.563515][ T5671] i8042_aux_write+0x112/0x190 [ 112.570446][ T5671] ps2_do_sendbyte+0x20a/0x720 [ 112.577374][ T5671] ps2_sendbyte+0x5c/0x120 [ 112.583963][ T5671] cypress_send_ext_cmd+0x21d/0x900 [ 112.591324][ T5671] cypress_detect+0x8f/0x220 [ 112.598074][ T5671] psmouse_extensions+0x68e/0xe30 [ 112.605347][ T5671] psmouse_switch_protocol+0xdf/0x650 [ 112.612884][ T5671] psmouse_connect+0x903/0x14c0 [ 112.619903][ T5671] serio_driver_probe+0x74/0x90 [ 112.626925][ T5671] really_probe+0x2ab/0xcb0 [ 112.633592][ T5671] __driver_probe_device+0x1a2/0x3d0 [ 112.641039][ T5671] driver_probe_device+0x50/0x420 [ 112.648226][ T5671] __driver_attach+0x458/0x6f0 [ 112.655151][ T5671] bus_for_each_dev+0x17c/0x1f0 [ 112.662179][ T5671] serio_handle_event+0x56a/0x8f0 [ 112.669367][ T5671] process_one_work+0x917/0x1260 [ 112.676474][ T5671] worker_thread+0xa47/0x1200 [ 112.683314][ T5671] kthread+0x28d/0x320 [ 112.689557][ T5671] ret_from_fork+0x1f/0x30 [ 112.696140][ T5671] INITIAL USE at: [ 112.700283][ T5671] lock_acquire+0x1f8/0x5a0 [ 112.706862][ T5671] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.714351][ T5671] input_inject_event+0xc1/0x330 [ 112.721368][ T5671] led_trigger_event+0x130/0x210 [ 112.728384][ T5671] kbd_led_trigger_activate+0xb9/0x100 [ 112.735924][ T5671] led_trigger_set+0x55a/0x970 [ 112.742774][ T5671] led_trigger_set_default+0x1c2/0x200 [ 112.750316][ T5671] led_classdev_register_ext+0x5ee/0x800 [ 112.758027][ T5671] input_leds_connect+0x48f/0x630 [ 112.765138][ T5671] input_register_device+0xd65/0x1250 [ 112.772596][ T5671] atkbd_connect+0x79d/0x9e0 [ 112.779264][ T5671] serio_driver_probe+0x74/0x90 [ 112.786199][ T5671] really_probe+0x2ab/0xcb0 [ 112.792785][ T5671] __driver_probe_device+0x1a2/0x3d0 [ 112.800151][ T5671] driver_probe_device+0x50/0x420 [ 112.807253][ T5671] __driver_attach+0x458/0x6f0 [ 112.814096][ T5671] bus_for_each_dev+0x17c/0x1f0 [ 112.821030][ T5671] serio_handle_event+0x56a/0x8f0 [ 112.828131][ T5671] process_one_work+0x917/0x1260 [ 112.835147][ T5671] worker_thread+0xa47/0x1200 [ 112.841902][ T5671] kthread+0x28d/0x320 [ 112.848059][ T5671] ret_from_fork+0x1f/0x30 [ 112.854557][ T5671] } [ 112.857306][ T5671] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 112.866584][ T5671] -> (&client->buffer_lock){....}-{2:2} { [ 112.872492][ T5671] INITIAL USE at: [ 112.876552][ T5671] lock_acquire+0x1f8/0x5a0 [ 112.882966][ T5671] _raw_spin_lock+0x2a/0x40 [ 112.889378][ T5671] evdev_pass_values+0xee/0xad0 [ 112.896134][ T5671] evdev_events+0x1be/0x2f0 [ 112.902544][ T5671] input_pass_values+0x8e0/0x12a0 [ 112.909481][ T5671] input_event_dispose+0x366/0x650 [ 112.916496][ T5671] input_handle_event+0x97d/0xb00 [ 112.923430][ T5671] input_inject_event+0x224/0x330 [ 112.930369][ T5671] evdev_write+0x389/0x580 [ 112.936698][ T5671] vfs_write+0x2d9/0xbc0 [ 112.942856][ T5671] ksys_write+0x19c/0x2c0 [ 112.949090][ T5671] do_syscall_64+0x3b/0x80 [ 112.955405][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.963215][ T5671] } [ 112.965883][ T5671] ... key at: [] evdev_open.__key.28+0x0/0x20 [ 112.974205][ T5671] ... acquired at: [ 112.978165][ T5671] lock_acquire+0x1f8/0x5a0 [ 112.982836][ T5671] _raw_spin_lock+0x2a/0x40 [ 112.987507][ T5671] evdev_pass_values+0xee/0xad0 [ 112.992520][ T5671] evdev_events+0x1be/0x2f0 [ 112.997188][ T5671] input_pass_values+0x8e0/0x12a0 [ 113.002396][ T5671] input_event_dispose+0x366/0x650 [ 113.007677][ T5671] input_handle_event+0x97d/0xb00 [ 113.012868][ T5671] input_inject_event+0x224/0x330 [ 113.018062][ T5671] evdev_write+0x389/0x580 [ 113.022645][ T5671] vfs_write+0x2d9/0xbc0 [ 113.027065][ T5671] ksys_write+0x19c/0x2c0 [ 113.031580][ T5671] do_syscall_64+0x3b/0x80 [ 113.036184][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.042258][ T5671] [ 113.044571][ T5671] -> (&new->fa_lock){...-}-{2:2} { [ 113.049772][ T5671] IN-SOFTIRQ-R at: [ 113.053827][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.060341][ T5671] _raw_read_lock_irqsave+0xd9/0x120 [ 113.067447][ T5671] kill_fasync+0x196/0x4d0 [ 113.073679][ T5671] sock_wake_async+0x145/0x170 [ 113.080290][ T5671] sk_wake_async+0x186/0x280 [ 113.086694][ T5671] sock_def_readable+0x1a7/0x280 [ 113.093453][ T5671] mptcp_data_ready+0x41e/0x790 [ 113.100141][ T5671] subflow_data_ready+0x254/0x390 [ 113.106995][ T5671] tcp_data_queue+0x25e9/0x7720 [ 113.113665][ T5671] tcp_rcv_established+0xe6c/0x1e90 [ 113.120689][ T5671] tcp_v4_do_rcv+0x487/0xb10 [ 113.127088][ T5671] tcp_v4_rcv+0x23c9/0x2c60 [ 113.133409][ T5671] ip_protocol_deliver_rcu+0x386/0x750 [ 113.140718][ T5671] ip_local_deliver_finish+0x304/0x580 [ 113.147988][ T5671] NF_HOOK+0x39d/0x450 [ 113.153890][ T5671] NF_HOOK+0x39d/0x450 [ 113.159779][ T5671] __netif_receive_skb+0x1c6/0x530 [ 113.166726][ T5671] process_backlog+0x381/0x760 [ 113.173312][ T5671] __napi_poll+0xc7/0x470 [ 113.179464][ T5671] net_rx_action+0x70f/0xeb0 [ 113.185881][ T5671] handle_softirqs+0x2ee/0xa40 [ 113.192476][ T5671] __irq_exit_rcu+0x157/0x240 [ 113.198984][ T5671] irq_exit_rcu+0x5/0x20 [ 113.205053][ T5671] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 113.212511][ T5671] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.220317][ T5671] handle_mm_fault+0x3754/0x5340 [ 113.227080][ T5671] exc_page_fault+0x26f/0x620 [ 113.233585][ T5671] asm_exc_page_fault+0x22/0x30 [ 113.240282][ T5671] INITIAL USE at: [ 113.244256][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.250493][ T5671] _raw_write_lock_irq+0xcf/0x110 [ 113.257250][ T5671] fasync_remove_entry+0xfb/0x1d0 [ 113.264016][ T5671] __fput+0x75e/0x8d0 [ 113.269728][ T5671] task_work_run+0x246/0x300 [ 113.276054][ T5671] exit_to_user_mode_loop+0xde/0x100 [ 113.283083][ T5671] exit_to_user_mode_prepare+0xb1/0x140 [ 113.290370][ T5671] syscall_exit_to_user_mode+0x60/0x270 [ 113.297651][ T5671] do_syscall_64+0x47/0x80 [ 113.303795][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.311417][ T5671] INITIAL READ USE at: [ 113.315817][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.322488][ T5671] _raw_read_lock_irqsave+0xd9/0x120 [ 113.329941][ T5671] kill_fasync+0x196/0x4d0 [ 113.336521][ T5671] evdev_pass_values+0x586/0xad0 [ 113.343621][ T5671] evdev_events+0x1be/0x2f0 [ 113.350287][ T5671] input_pass_values+0x8e0/0x12a0 [ 113.357482][ T5671] input_event_dispose+0x366/0x650 [ 113.364758][ T5671] input_handle_event+0x97d/0xb00 [ 113.371941][ T5671] input_inject_event+0x224/0x330 [ 113.379126][ T5671] evdev_write+0x389/0x580 [ 113.385703][ T5671] vfs_write+0x2d9/0xbc0 [ 113.392112][ T5671] ksys_write+0x19c/0x2c0 [ 113.398598][ T5671] do_syscall_64+0x3b/0x80 [ 113.405176][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.413241][ T5671] } [ 113.415820][ T5671] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 113.424596][ T5671] ... acquired at: [ 113.428557][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.433231][ T5671] _raw_read_lock_irqsave+0xd9/0x120 [ 113.438693][ T5671] kill_fasync+0x196/0x4d0 [ 113.443279][ T5671] evdev_pass_values+0x586/0xad0 [ 113.448381][ T5671] evdev_events+0x1be/0x2f0 [ 113.453049][ T5671] input_pass_values+0x8e0/0x12a0 [ 113.458245][ T5671] input_event_dispose+0x366/0x650 [ 113.463534][ T5671] input_handle_event+0x97d/0xb00 [ 113.468736][ T5671] input_inject_event+0x224/0x330 [ 113.473920][ T5671] evdev_write+0x389/0x580 [ 113.478503][ T5671] vfs_write+0x2d9/0xbc0 [ 113.482927][ T5671] ksys_write+0x19c/0x2c0 [ 113.487419][ T5671] do_syscall_64+0x3b/0x80 [ 113.491998][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.498058][ T5671] [ 113.500365][ T5671] -> (&f->f_owner.lock){...-}-{2:2} { [ 113.505746][ T5671] IN-SOFTIRQ-R at: [ 113.509716][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.515866][ T5671] _raw_read_lock_irqsave+0xd9/0x120 [ 113.522798][ T5671] send_sigio+0x2f/0x360 [ 113.528689][ T5671] kill_fasync+0x232/0x4d0 [ 113.534750][ T5671] sock_wake_async+0x145/0x170 [ 113.541158][ T5671] sk_wake_async+0x186/0x280 [ 113.547385][ T5671] sock_def_readable+0x1a7/0x280 [ 113.553960][ T5671] mptcp_data_ready+0x41e/0x790 [ 113.560457][ T5671] subflow_data_ready+0x254/0x390 [ 113.567118][ T5671] tcp_data_queue+0x25e9/0x7720 [ 113.573610][ T5671] tcp_rcv_established+0xe6c/0x1e90 [ 113.580446][ T5671] tcp_v4_do_rcv+0x487/0xb10 [ 113.586674][ T5671] tcp_v4_rcv+0x23c9/0x2c60 [ 113.592816][ T5671] ip_protocol_deliver_rcu+0x386/0x750 [ 113.599928][ T5671] ip_local_deliver_finish+0x304/0x580 [ 113.607023][ T5671] NF_HOOK+0x39d/0x450 [ 113.612736][ T5671] NF_HOOK+0x39d/0x450 [ 113.618446][ T5671] __netif_receive_skb+0x1c6/0x530 [ 113.625197][ T5671] process_backlog+0x381/0x760 [ 113.631603][ T5671] __napi_poll+0xc7/0x470 [ 113.637572][ T5671] net_rx_action+0x70f/0xeb0 [ 113.643802][ T5671] handle_softirqs+0x2ee/0xa40 [ 113.650208][ T5671] __irq_exit_rcu+0x157/0x240 [ 113.656531][ T5671] irq_exit_rcu+0x5/0x20 [ 113.662427][ T5671] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 113.669719][ T5671] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.677353][ T5671] handle_mm_fault+0x3754/0x5340 [ 113.683930][ T5671] exc_page_fault+0x26f/0x620 [ 113.690250][ T5671] asm_exc_page_fault+0x22/0x30 [ 113.696745][ T5671] INITIAL USE at: [ 113.700623][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.706686][ T5671] _raw_write_lock_irq+0xcf/0x110 [ 113.713268][ T5671] __f_setown+0x38/0x350 [ 113.719071][ T5671] generic_setlease+0xf3f/0x1440 [ 113.725561][ T5671] fcntl_setlease+0x341/0x3f0 [ 113.731786][ T5671] do_fcntl+0x10a/0x1500 [ 113.737583][ T5671] __se_sys_fcntl+0xd5/0x1b0 [ 113.743734][ T5671] do_syscall_64+0x3b/0x80 [ 113.749710][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.757161][ T5671] INITIAL READ USE at: [ 113.761476][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.767969][ T5671] _raw_read_lock_irqsave+0xd9/0x120 [ 113.775240][ T5671] send_sigio+0x2f/0x360 [ 113.781478][ T5671] kill_fasync+0x232/0x4d0 [ 113.787904][ T5671] evdev_pass_values+0x586/0xad0 [ 113.794826][ T5671] evdev_events+0x1be/0x2f0 [ 113.801313][ T5671] input_pass_values+0x8e0/0x12a0 [ 113.808325][ T5671] input_event_dispose+0x366/0x650 [ 113.815446][ T5671] input_handle_event+0x97d/0xb00 [ 113.822463][ T5671] input_inject_event+0x224/0x330 [ 113.829479][ T5671] evdev_write+0x389/0x580 [ 113.835882][ T5671] vfs_write+0x2d9/0xbc0 [ 113.842122][ T5671] ksys_write+0x19c/0x2c0 [ 113.848449][ T5671] do_syscall_64+0x3b/0x80 [ 113.854850][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.862739][ T5671] } [ 113.865228][ T5671] ... key at: [] __alloc_file.__key+0x0/0x10 [ 113.873292][ T5671] ... acquired at: [ 113.877083][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.881753][ T5671] _raw_read_lock_irqsave+0xd9/0x120 [ 113.887200][ T5671] send_sigio+0x2f/0x360 [ 113.891607][ T5671] kill_fasync+0x232/0x4d0 [ 113.896195][ T5671] evdev_pass_values+0x586/0xad0 [ 113.901295][ T5671] evdev_events+0x1be/0x2f0 [ 113.905955][ T5671] input_pass_values+0x8e0/0x12a0 [ 113.911142][ T5671] input_event_dispose+0x366/0x650 [ 113.916419][ T5671] input_handle_event+0x97d/0xb00 [ 113.921606][ T5671] input_inject_event+0x224/0x330 [ 113.926800][ T5671] evdev_write+0x389/0x580 [ 113.931398][ T5671] vfs_write+0x2d9/0xbc0 [ 113.935809][ T5671] ksys_write+0x19c/0x2c0 [ 113.940294][ T5671] do_syscall_64+0x3b/0x80 [ 113.944875][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.950932][ T5671] [ 113.953244][ T5671] [ 113.953244][ T5671] the dependencies between the lock to be acquired [ 113.953252][ T5671] and HARDIRQ-irq-unsafe lock: [ 113.966750][ T5671] -> (tasklist_lock){.+.+}-{2:2} { [ 113.971864][ T5671] HARDIRQ-ON-R at: [ 113.975834][ T5671] lock_acquire+0x1f8/0x5a0 [ 113.981988][ T5671] _raw_read_lock+0x32/0x40 [ 113.988135][ T5671] do_wait+0x2c6/0xb80 [ 113.993855][ T5671] kernel_wait+0xe5/0x230 [ 113.999835][ T5671] call_usermodehelper_exec_work+0xb5/0x220 [ 114.007377][ T5671] process_one_work+0x917/0x1260 [ 114.013959][ T5671] worker_thread+0xa47/0x1200 [ 114.020275][ T5671] kthread+0x28d/0x320 [ 114.025993][ T5671] ret_from_fork+0x1f/0x30 [ 114.032054][ T5671] SOFTIRQ-ON-R at: [ 114.036026][ T5671] lock_acquire+0x1f8/0x5a0 [ 114.042178][ T5671] _raw_read_lock+0x32/0x40 [ 114.048325][ T5671] do_wait+0x2c6/0xb80 [ 114.054045][ T5671] kernel_wait+0xe5/0x230 [ 114.060037][ T5671] call_usermodehelper_exec_work+0xb5/0x220 [ 114.067588][ T5671] process_one_work+0x917/0x1260 [ 114.074175][ T5671] worker_thread+0xa47/0x1200 [ 114.080502][ T5671] kthread+0x28d/0x320 [ 114.086222][ T5671] ret_from_fork+0x1f/0x30 [ 114.092285][ T5671] INITIAL USE at: [ 114.096173][ T5671] lock_acquire+0x1f8/0x5a0 [ 114.102241][ T5671] _raw_write_lock_irq+0xcf/0x110 [ 114.108828][ T5671] copy_process+0x24f6/0x40a0 [ 114.115065][ T5671] kernel_clone+0x222/0x920 [ 114.121137][ T5671] user_mode_thread+0x140/0x1b0 [ 114.127546][ T5671] rest_init+0x23/0x300 [ 114.133266][ T5671] start_kernel+0x0/0x53f [ 114.139161][ T5671] start_kernel+0x496/0x53f [ 114.145221][ T5671] secondary_startup_64_no_verify+0xcf/0xdb [ 114.152672][ T5671] INITIAL READ USE at: [ 114.157009][ T5671] lock_acquire+0x1f8/0x5a0 [ 114.163516][ T5671] _raw_read_lock+0x32/0x40 [ 114.170026][ T5671] do_wait+0x2c6/0xb80 [ 114.176100][ T5671] kernel_wait+0xe5/0x230 [ 114.182440][ T5671] call_usermodehelper_exec_work+0xb5/0x220 [ 114.190341][ T5671] process_one_work+0x917/0x1260 [ 114.197282][ T5671] worker_thread+0xa47/0x1200 [ 114.203945][ T5671] kthread+0x28d/0x320 [ 114.210012][ T5671] ret_from_fork+0x1f/0x30 [ 114.216425][ T5671] } [ 114.218924][ T5671] ... key at: [] tasklist_lock+0x18/0x40 [ 114.226639][ T5671] ... acquired at: [ 114.230426][ T5671] lock_acquire+0x1f8/0x5a0 [ 114.235094][ T5671] _raw_read_lock+0x32/0x40 [ 114.239763][ T5671] send_sigurg+0xea/0x3b0 [ 114.244263][ T5671] sk_send_sigurg+0x6a/0xb0 [ 114.248927][ T5671] queue_oob+0x81a/0xaf0 [ 114.253336][ T5671] unix_stream_sendmsg+0xe10/0x1070 [ 114.258707][ T5671] ____sys_sendmsg+0x5d3/0x9a0 [ 114.263635][ T5671] __sys_sendmmsg+0x3ab/0x730 [ 114.268475][ T5671] __x64_sys_sendmmsg+0x9c/0xb0 [ 114.273503][ T5671] do_syscall_64+0x3b/0x80 [ 114.278109][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.284173][ T5671] [ 114.286484][ T5671] [ 114.286484][ T5671] stack backtrace: [ 114.292390][ T5671] CPU: 1 PID: 5671 Comm: syz.4.429 Not tainted 6.1.134-syzkaller #0 [ 114.300364][ T5671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.310417][ T5671] Call Trace: [ 114.313696][ T5671] [ 114.316621][ T5671] dump_stack_lvl+0x1e3/0x2cb [ 114.321298][ T5671] ? nf_tcp_handle_invalid+0x647/0x647 [ 114.326758][ T5671] ? panic+0x764/0x764 [ 114.330831][ T5671] ? print_shortest_lock_dependencies+0xee/0x150 [ 114.337157][ T5671] validate_chain+0x4d16/0x5950 [ 114.342014][ T5671] ? reacquire_held_locks+0x660/0x660 [ 114.347406][ T5671] ? reacquire_held_locks+0x660/0x660 [ 114.352786][ T5671] ? __lock_acquire+0x125b/0x1f80 [ 114.357813][ T5671] ? mark_lock+0x9a/0x340 [ 114.362141][ T5671] __lock_acquire+0x125b/0x1f80 [ 114.366989][ T5671] lock_acquire+0x1f8/0x5a0 [ 114.371486][ T5671] ? send_sigurg+0xea/0x3b0 [ 114.375988][ T5671] ? read_lock_is_recursive+0x10/0x10 [ 114.381362][ T5671] ? _raw_read_lock_irqsave+0xac/0x120 [ 114.386818][ T5671] ? do_raw_read_lock+0x38/0x80 [ 114.391659][ T5671] ? _raw_read_lock_irqsave+0xe5/0x120 [ 114.397112][ T5671] ? _raw_read_lock+0x40/0x40 [ 114.401780][ T5671] ? do_raw_spin_lock+0x14a/0x370 [ 114.406803][ T5671] _raw_read_lock+0x32/0x40 [ 114.411299][ T5671] ? send_sigurg+0xea/0x3b0 [ 114.415796][ T5671] send_sigurg+0xea/0x3b0 [ 114.420122][ T5671] sk_send_sigurg+0x6a/0xb0 [ 114.424615][ T5671] queue_oob+0x81a/0xaf0 [ 114.428850][ T5671] ? scm_stat_add+0xb0/0xb0 [ 114.433351][ T5671] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 114.439504][ T5671] ? security_socket_getpeersec_dgram+0x99/0xb0 [ 114.445738][ T5671] unix_stream_sendmsg+0xe10/0x1070 [ 114.450929][ T5671] ? tomoyo_socket_bind_permission+0x330/0x330 [ 114.457071][ T5671] ? unix_show_fdinfo+0x2d0/0x2d0 [ 114.462084][ T5671] ? aa_sock_msg_perm+0x91/0x150 [ 114.467011][ T5671] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 114.472289][ T5671] ? security_socket_sendmsg+0x7d/0xa0 [ 114.477737][ T5671] ? unix_show_fdinfo+0x2d0/0x2d0 [ 114.482751][ T5671] ____sys_sendmsg+0x5d3/0x9a0 [ 114.487518][ T5671] ? __sys_sendmsg_sock+0x30/0x30 [ 114.492545][ T5671] __sys_sendmmsg+0x3ab/0x730 [ 114.497226][ T5671] ? __ia32_sys_sendmsg+0x90/0x90 [ 114.502249][ T5671] ? futex_unqueue+0xc7/0xf0 [ 114.506847][ T5671] ? futex_wait_setup+0x340/0x340 [ 114.511862][ T5671] ? futex_wake+0x4ea/0x590 [ 114.516359][ T5671] ? do_futex+0x3b5/0x490 [ 114.520685][ T5671] ? print_irqtrace_events+0x210/0x210 [ 114.526137][ T5671] ? syscall_enter_from_user_mode+0x2e/0x230 [ 114.532114][ T5671] __x64_sys_sendmmsg+0x9c/0xb0 [ 114.536962][ T5671] do_syscall_64+0x3b/0x80 [ 114.541372][ T5671] ? clear_bhb_loop+0x45/0xa0 [ 114.546048][ T5671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.551939][ T5671] RIP: 0033:0x7eff6a98e169 [ 114.556349][ T5671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.575953][ T5671] RSP: 002b:00007eff6b789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.584360][ T5671] RAX: ffffffffffffffda RBX: 00007eff6abb5fa0 RCX: 00007eff6a98e169 [ 114.592320][ T5671] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 114.600302][ T5671] RBP: 00007eff6aa10a68 R08: 0000000000000000 R09: 0000000000000000 [ 114.608263][ T5671] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 114.616228][ T5671] R13: 0000000000000000 R14: 00007eff6abb5fa0 R15: 00007ffe95ab6f88 [ 114.624193][ T5671] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.627953][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 114.739818][ T5659] BTRFS error (device loop1): open_ctree failed: -4 [ 114.754457][ T5668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5668) [ 114.870660][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.440028][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 115.478125][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 115.515586][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.554785][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.956264][ T4972] bond0 (unregistering): Released all slaves [ 116.349331][ T4252] syz-executor (4252) used greatest stack depth: 19576 bytes left [ 116.619203][ T4972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.695587][ T4972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.736786][ T4972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.784452][ T4972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.871619][ T4972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.924371][ T4972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.965792][ T4972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.004756][ T4972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.096956][ T4972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.107588][ T4972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.184388][ T4972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.194823][ T4972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.237586][ T4972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.248005][ T4972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.286115][ T4972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.296455][ T4972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.382895][ T4972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.395001][ T4972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.425240][ T4972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.435715][ T4972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.486539][ T4972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.497012][ T4972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.545009][ T4972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.557268][ T4972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.839028][ T4972] device hsr_slave_0 left promiscuous mode [ 118.848274][ T4972] device hsr_slave_1 left promiscuous mode [ 118.856373][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.864687][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.874244][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.882134][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.889608][ T4972] device bridge_slave_1 left promiscuous mode [ 118.897329][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.905912][ T4972] device bridge_slave_0 left promiscuous mode [ 118.913708][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.925464][ T4972] device hsr_slave_0 left promiscuous mode [ 118.933602][ T4972] device hsr_slave_1 left promiscuous mode [ 118.939797][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.947841][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.956946][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.964844][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.974372][ T4972] bridge0: port 3(batadv0) entered disabled state [ 118.982358][ T4972] device bridge_slave_1 left promiscuous mode [ 118.988511][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.996507][ T4972] device bridge_slave_0 left promiscuous mode [ 119.002895][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.012693][ T4972] device hsr_slave_0 left promiscuous mode [ 119.018745][ T4972] device hsr_slave_1 left promiscuous mode [ 119.025273][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.032779][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.040160][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.047576][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.055126][ T4972] device bridge_slave_1 left promiscuous mode [ 119.061298][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.069038][ T4972] device bridge_slave_0 left promiscuous mode [ 119.075376][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.083942][ T4972] device bridge_slave_1 left promiscuous mode [ 119.090055][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.097786][ T4972] device bridge_slave_0 left promiscuous mode [ 119.103989][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.114662][ T4972] device hsr_slave_0 left promiscuous mode [ 119.120999][ T4972] device hsr_slave_1 left promiscuous mode [ 119.127064][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.134515][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.142522][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.149896][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.157496][ T4972] device bridge_slave_1 left promiscuous mode [ 119.163671][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.176087][ T4972] device veth1_macvtap left promiscuous mode [ 119.182112][ T4972] device veth0_macvtap left promiscuous mode [ 119.188132][ T4972] device veth1_vlan left promiscuous mode [ 119.193946][ T4972] device veth0_vlan left promiscuous mode [ 119.200329][ T4972] device veth1_macvtap left promiscuous mode [ 119.206410][ T4972] device veth0_macvtap left promiscuous mode [ 119.214515][ T4972] device veth1_vlan left promiscuous mode [ 119.220253][ T4972] device veth0_vlan left promiscuous mode [ 119.226843][ T4972] device veth1_macvtap left promiscuous mode [ 119.233004][ T4972] device veth1_vlan left promiscuous mode [ 119.238767][ T4972] device veth0_vlan left promiscuous mode [ 119.245412][ T4972] device veth1_macvtap left promiscuous mode [ 119.251505][ T4972] device veth0_macvtap left promiscuous mode [ 119.257524][ T4972] device veth1_vlan left promiscuous mode [ 119.263394][ T4972] device veth0_vlan left promiscuous mode [ 119.525089][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 119.549240][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 119.559481][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.573521][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.616829][ T4972] bond0 (unregistering): Released all slaves [ 119.782953][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 119.805509][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 119.827814][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.851007][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.894593][ T4972] bond0 (unregistering): Released all slaves [ 120.032740][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 120.054518][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 120.075449][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.098252][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.139699][ T4972] bond0 (unregistering): Released all slaves [ 120.188147][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.200111][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.231255][ T4972] bond0 (unregistering): Released all slaves [ 120.354570][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 120.377175][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 120.398254][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.421033][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.462255][ T4972] bond0 (unregistering): Released all slaves