last executing test programs: 35.604176018s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 35.078283479s ago: executing program 3 (id=10): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) 33.569821343s ago: executing program 3 (id=29): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x40, 0x0, 0x0, 0x2}, {0x28, 0x1, 0x4f, 0xfffff038}, {0x6, 0x1, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 33.385751654s ago: executing program 32 (id=29): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x40, 0x0, 0x0, 0x2}, {0x28, 0x1, 0x4f, 0xfffff038}, {0x6, 0x1, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 3.89232309s ago: executing program 5 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x313}, 0x14}}, 0x0) 3.856376s ago: executing program 4 (id=317): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0xd, 0xa}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "34034cd7"}, @main=@item_012={0x1, 0x0, 0x8, 'f'}]}}, 0x0}, 0x0) 3.81389227s ago: executing program 1 (id=318): write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 3.68879977s ago: executing program 5 (id=319): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.565622641s ago: executing program 5 (id=320): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20044020, &(0x7f0000000040)={0xa, 0xcaa1, 0xfffbff7c, @remote, 0xd}, 0x1c) 3.397832811s ago: executing program 5 (id=321): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) 3.207451572s ago: executing program 5 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010a05000000000000000000010000050900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) 2.965857673s ago: executing program 2 (id=324): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000280)=ANY=[@ANYBLOB="63726561746f723dbd3c66f52c6e6c733d6d61637475726b6973682c626172726965722c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX") mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f0000000300)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 2.647352833s ago: executing program 2 (id=326): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000280)) 2.415458894s ago: executing program 2 (id=327): r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0x4) 2.302892884s ago: executing program 2 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x34, r1, 0x1, 0x200, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) 2.159293874s ago: executing program 2 (id=330): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x80d8}) 2.030930475s ago: executing program 0 (id=332): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000000)={0x0, 0x0}) 1.889906035s ago: executing program 0 (id=333): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0xfffffd7d}, &(0x7f00000001c0)=[{0x0, 0x2c}], 0x1}}], 0x48, 0x20000001}, 0x0) 1.844363945s ago: executing program 1 (id=334): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 1.727476166s ago: executing program 0 (id=335): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x5, 0xd10, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) 1.641822576s ago: executing program 2 (id=336): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c696e6f646536342c6c6f63616c616c6c6f633d30303030303030303030303030303030313731342c61636c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c00882bb7a63864a19f186813ab5265f313eeeea0cb144b9317f58558f596fa072f9a29c38a293509350482fc7f"], 0x1, 0x4450, &(0x7f0000008900)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) 1.641602976s ago: executing program 4 (id=337): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0], 0x1, 0xaf4, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.608979936s ago: executing program 1 (id=338): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES8, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJPl1j8/X5H/D+wOyy8r/r8Z/3e0fTXFVb+HPP5v3h6bfaYnuqYbfb7bzbqvgVH13qrd/+t6Ym4D3EcRxieUtrnbDq1Wq9abfO4w1qvu77/u84S6y6/7+68Sx/+Nx/Bx/N+YHsf/jelx/N+Y3r6u+OHSoL3x+4rj/8b0OP5vTL8nlBvHB95Tkf7JivS9Fen3VqTfV5H+qYr0/RXp91ekP1CRfndF+oMV6Z8Jf/GY/tmKzz9Ukf7IR6fP/6ji85tdbo8yrusP4yy2z/P7h/GR7/8M+v3vqkgHRtfP3jjw5DO/+3Zzsf3/dOd6SL6PdyRNN9K5czxfitdPJlPaW2n67yF9o1/vgHES+8+I/98frkgHRld+zsvvG8ZQ2b/HnmH7rRp0nM9o+VyKP5/iL6T40RTPpHg2xQdSPLdO9WNtPPnbPxx+tVw6398R0od9njy2B4r9RM0PWZ94fWC5z7PHfvyWa6Xl32ZzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNpMtF8PHtxTFsXlNy8dffr46dmFOY93cjTbr1NdU43O54risRRPpviX6c2N91852R3fTHFZzBVlUXbmF9+83inpzqIozhf7iitFs9h7+eprb889dfzCsYv733n98LW1+wYAAABg8/t/AAAA//9N2hwq") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40786e88, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xe4242, 0x5c) 1.581285846s ago: executing program 0 (id=339): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x30, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x6}, @val={0xc}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.352463227s ago: executing program 0 (id=340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r1, 0xc61b5222c357e05f, 0x70bd27, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.165721037s ago: executing program 0 (id=341): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x17, 0x2, 'd8'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 984.796598ms ago: executing program 4 (id=342): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) 890.997508ms ago: executing program 1 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 785.805688ms ago: executing program 5 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 743.373598ms ago: executing program 4 (id=345): r0 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x13220c28) keyctl$read(0xb, r0, 0x0, 0x0) 642.238768ms ago: executing program 4 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d70002400028008000140faffff021000038009000100701e1630b7000000080002"], 0x88}}, 0x0) 217.729309ms ago: executing program 1 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a3000000000140007800600050000000000060004404e2000000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 206.86264ms ago: executing program 4 (id=348): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x9, "a9"}, @local=@item_4={0x3, 0x2, 0x9, "10339af3"}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=349): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$chown(0x4, r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 57.379339][ T4172] cgroup: Unknown subsys name 'net' [ 57.521702][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.054455][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.844049][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.910021][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.940118][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.990703][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.030397][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.050619][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.057954][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.066609][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.107338][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.114423][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.123030][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.152135][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.159264][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.167623][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.207669][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.214805][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.223689][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.236020][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.271740][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.281124][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.288405][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.296823][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.304208][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.311462][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.319445][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.345029][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.352118][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.360645][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.367717][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.374802][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.382971][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.392896][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.442574][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.459798][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.467206][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.475182][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.486074][ T4183] team0: Port device team_slave_0 added [ 61.492151][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.499257][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.507429][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.530818][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.541249][ T4183] team0: Port device team_slave_1 added [ 61.558313][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.577634][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.603911][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.616498][ T4190] team0: Port device team_slave_0 added [ 61.638231][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.656217][ T4190] team0: Port device team_slave_1 added [ 61.679027][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.686368][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.712327][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.725549][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.735834][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.742903][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.769273][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.790952][ T4189] team0: Port device team_slave_0 added [ 61.799569][ T4194] team0: Port device team_slave_0 added [ 61.832007][ T4189] team0: Port device team_slave_1 added [ 61.839962][ T4194] team0: Port device team_slave_1 added [ 61.855597][ T4187] team0: Port device team_slave_0 added [ 61.862630][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.869727][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.896030][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.933321][ T4187] team0: Port device team_slave_1 added [ 61.939682][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.947195][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.973229][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.000707][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.008111][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.034094][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.057061][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.064043][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.090044][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.108639][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.115947][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.142035][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.162266][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.169345][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.195666][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.213637][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.220851][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.243448][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.250585][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.276768][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.289976][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.297001][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.323049][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.357175][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.363898][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.371003][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.379760][ T3521] Bluetooth: hci0: command 0x0409 tx timeout [ 62.379807][ T4190] Cannot create hsr debugfs directory [ 62.413417][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.420307][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.427852][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.435534][ T4194] Cannot create hsr debugfs directory [ 62.455268][ T3521] Bluetooth: hci1: command 0x0409 tx timeout [ 62.513908][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.521378][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.528155][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.536255][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 62.542339][ T4189] Cannot create hsr debugfs directory [ 62.542397][ T3521] Bluetooth: hci4: command 0x0409 tx timeout [ 62.553900][ T3521] Bluetooth: hci2: command 0x0409 tx timeout [ 62.557944][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.566911][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.573550][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.581607][ T4187] Cannot create hsr debugfs directory [ 62.887239][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.901314][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.910631][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.924621][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.975756][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.991050][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.001854][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.021617][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.081376][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.094148][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.123469][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.132351][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.178133][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.192571][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.212821][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.222510][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.248533][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.287696][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.310566][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.319835][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.330552][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.341773][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.357224][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.379472][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.390703][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.419653][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.429154][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.438912][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.446270][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.461062][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.470018][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.479897][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.488827][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.496065][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.505548][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.516496][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.524382][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.550762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.565849][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.600108][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.609977][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.619143][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.648586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.657768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.669688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.678259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.687379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.696248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.704810][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.711918][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.719853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.729146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.738628][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.745756][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.753601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.763076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.771987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.780795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.812164][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.822227][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.835331][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.859242][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.883743][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.909791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.920142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.929980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.940256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.949519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.960503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.969210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.012707][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.021645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.031876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.040615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.049292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.058552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.067421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.085382][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.104764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.122389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.132689][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.139856][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.149451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.159426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.168553][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.175688][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.183380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.197322][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.207278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.218532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.227362][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.234464][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.243716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.294305][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.304552][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.321267][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.333079][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.343653][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.352811][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.360884][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.369668][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.380339][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.387493][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.395644][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.404358][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.413686][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.423138][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.432264][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.441011][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.453989][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.461336][ T1109] Bluetooth: hci0: command 0x041b tx timeout [ 64.481890][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.491237][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.500292][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.512062][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.521152][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.531348][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.539831][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 64.547192][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.554295][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.562748][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.586894][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.594217][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.602885][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.612041][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.621471][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.629603][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 64.630677][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.636668][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 64.649928][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 64.651336][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.664350][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.672118][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.686048][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.702823][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.721132][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.731805][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.745072][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.753527][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.762308][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.771288][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.780542][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.787673][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.796355][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.805233][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.813657][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.822191][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.905930][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.924180][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.934537][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.953761][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.962900][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.972287][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.981085][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.989736][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.000379][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.009545][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.021466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.030364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.052932][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.070154][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.092908][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.131979][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.151197][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.175891][ T4190] device veth0_vlan entered promiscuous mode [ 65.202802][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.212625][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.220985][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.230095][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.238060][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.245949][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.270475][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.284800][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.293845][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.303931][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.312912][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.321619][ T4183] device veth0_vlan entered promiscuous mode [ 65.331999][ T4190] device veth1_vlan entered promiscuous mode [ 65.344117][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.363970][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.374749][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.385420][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.400259][ T4183] device veth1_vlan entered promiscuous mode [ 65.444518][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.453839][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.462872][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.471459][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.480645][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.488746][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.497877][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.506405][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.518693][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.535106][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.544031][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.563939][ T4187] device veth0_vlan entered promiscuous mode [ 65.581075][ T4190] device veth0_macvtap entered promiscuous mode [ 65.607613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.616331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.626244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.634844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.650843][ T4187] device veth1_vlan entered promiscuous mode [ 65.662662][ T4190] device veth1_macvtap entered promiscuous mode [ 65.674308][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.686348][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.701150][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.710723][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.720829][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.729642][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.757654][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.767951][ T4183] device veth0_macvtap entered promiscuous mode [ 65.776806][ T4189] device veth0_vlan entered promiscuous mode [ 65.789995][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.799153][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.816089][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.824105][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.839051][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.852816][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.867565][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.878907][ T4183] device veth1_macvtap entered promiscuous mode [ 65.891908][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.901991][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.911015][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.923975][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.933946][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.942986][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.952908][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.979729][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.990050][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.002398][ T4189] device veth1_vlan entered promiscuous mode [ 66.021347][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.032626][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.043922][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.057072][ T4187] device veth0_macvtap entered promiscuous mode [ 66.084018][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.093017][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.104034][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.113733][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.122865][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.143897][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.155237][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.167352][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.185222][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.193957][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.206189][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.217698][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.233201][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.242530][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.259951][ T4187] device veth1_macvtap entered promiscuous mode [ 66.310559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.319862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.328475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.337998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.346578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.354702][ T4194] device veth0_vlan entered promiscuous mode [ 66.385137][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.393813][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.412496][ T4194] device veth1_vlan entered promiscuous mode [ 66.422605][ T4189] device veth0_macvtap entered promiscuous mode [ 66.457774][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.469346][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.479636][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.491122][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.502505][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.511937][ T4189] device veth1_macvtap entered promiscuous mode [ 66.535674][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.543676][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.551941][ T1109] Bluetooth: hci0: command 0x040f tx timeout [ 66.558946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.568484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.577239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.585737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.593818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.602363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.611452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.620096][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 66.622325][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.637161][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.647313][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.658119][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.669714][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.692410][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.705587][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 66.711918][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.721822][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 66.721924][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 66.734674][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.745369][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.755342][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.766007][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.777844][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.785664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.795157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.803841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.812755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.843240][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.853124][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.862485][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.871513][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.891422][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.900522][ T4194] device veth0_macvtap entered promiscuous mode [ 66.909737][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.922283][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.934373][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.945252][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.956354][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.966501][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.977237][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.988801][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.997556][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.006470][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.015118][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.023650][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.033460][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.043236][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.076625][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.085815][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.092107][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.093859][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.103895][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.121006][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.146398][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.159423][ T4194] device veth1_macvtap entered promiscuous mode [ 67.172493][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.174394][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.199227][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.299173][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.315055][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.344507][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.355714][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.365880][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.376787][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.387187][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.398547][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.410122][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.443100][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.506405][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.535736][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.540533][ T4289] loop3: detected capacity change from 0 to 1024 [ 67.547134][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.563581][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.589703][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.599973][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.610788][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.624083][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.636147][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.649161][ T4289] EXT4-fs (loop3): Ignoring removed bh option [ 67.664238][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.690103][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.706553][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.752262][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.772195][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.805901][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.823874][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.826286][ T4289] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 67.916497][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.947747][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.020259][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.030627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.032290][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.056248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.081025][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.098192][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.212876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.255475][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.265400][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.273436][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.281377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.303245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.317604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.348541][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.389883][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.415907][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.471676][ T4308] mkiss: ax0: crc mode is auto. [ 68.515040][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.615411][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 68.650962][ T4315] loop4: detected capacity change from 0 to 8 [ 68.696369][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 68.755092][ T4235] usb 2-1: Using ep0 maxpacket: 8 [ 68.786280][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 68.812837][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 68.880853][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.915377][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.942661][ T4235] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 68.952090][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.992929][ T4235] usb 2-1: config 0 descriptor?? [ 69.410641][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.463039][ T1160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.515491][ T4235] gembird 0003:11FF:3331.0001: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0 [ 69.540629][ T4352] program syz.0.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.776940][ T4235] usb 2-1: USB disconnect, device number 2 [ 69.817380][ T1160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.835262][ T21] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 69.867770][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.908823][ T4345] loop4: detected capacity change from 0 to 32768 [ 69.916744][ T21] usb 3-1: config 0 descriptor?? [ 69.965966][ T1160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.967862][ T21] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 70.020644][ T4345] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 70.062924][ T4345] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 70.103000][ T1160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.139505][ T26] audit: type=1800 audit(1762452481.724:2): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.25" name="file0" dev="loop4" ino=17058 res=0 errno=0 [ 70.362444][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 70.587426][ T4364] chnl_net:caif_netlink_parms(): no params data found [ 70.615131][ T21] gspca_cpia1: usb_control_msg 01, error -71 [ 70.621374][ T21] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 70.690753][ T21] usb 3-1: USB disconnect, device number 2 [ 70.939825][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.955579][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.964553][ T4364] device bridge_slave_0 entered promiscuous mode [ 71.020428][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.049678][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.057195][ T4235] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.061393][ T4364] device bridge_slave_1 entered promiscuous mode [ 71.128990][ T4408] loop4: detected capacity change from 0 to 16 [ 71.215740][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.229969][ T4410] loop2: detected capacity change from 0 to 1024 [ 71.239942][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.252445][ T4408] erofs: (device loop4): mounted with root inode @ nid 36. [ 71.275872][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282587][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.425128][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.454104][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.502500][ T4235] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 71.542373][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.572075][ T4420] loop0: detected capacity change from 0 to 1024 [ 71.589181][ T4235] usb 2-1: config 0 descriptor?? [ 71.592088][ T144] hfsplus: b-tree write err: -5, ino 4 [ 71.668911][ T4364] team0: Port device team_slave_0 added [ 71.676966][ T26] audit: type=1326 audit(1762452483.264:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4018c96c9 code=0x7ffc0000 [ 71.688964][ T4364] team0: Port device team_slave_1 added [ 71.747985][ T4424] loop4: detected capacity change from 0 to 512 [ 71.773308][ T4424] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.796743][ T26] audit: type=1326 audit(1762452483.294:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4018c96c9 code=0x7ffc0000 [ 71.844811][ T26] audit: type=1326 audit(1762452483.294:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4018c9703 code=0x7ffc0000 [ 71.867871][ T26] audit: type=1326 audit(1762452483.294:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4018c817f code=0x7ffc0000 [ 71.890936][ T26] audit: type=1326 audit(1762452483.334:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa4018c9757 code=0x7ffc0000 [ 71.913477][ T26] audit: type=1326 audit(1762452483.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4018c7f10 code=0x7ffc0000 [ 71.939675][ T26] audit: type=1326 audit(1762452483.334:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4018c92cb code=0x7ffc0000 [ 71.941512][ T4424] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 71.961947][ T26] audit: type=1326 audit(1762452483.334:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4018c832a code=0x7ffc0000 [ 71.994529][ T26] audit: type=1326 audit(1762452483.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4018c832a code=0x7ffc0000 [ 72.028207][ T4424] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.50: invalid indirect mapped block 2683928664 (level 1) [ 72.076317][ T4424] EXT4-fs (loop4): Remounting filesystem read-only [ 72.084523][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.118369][ T4235] viewsonic 0003:0543:E621.0002: item fetching failed at offset 3/5 [ 72.126774][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.154699][ T4424] EXT4-fs (loop4): 1 truncate cleaned up [ 72.161160][ T4235] viewsonic: probe of 0003:0543:E621.0002 failed with error -22 [ 72.169127][ T4424] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 72.188204][ T4235] Bluetooth: hci3: command 0x0409 tx timeout [ 72.201356][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.258253][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.273469][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.327590][ T4303] usb 2-1: USB disconnect, device number 3 [ 72.339105][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.589687][ T4364] device hsr_slave_0 entered promiscuous mode [ 72.656829][ T4364] device hsr_slave_1 entered promiscuous mode [ 72.673500][ T4364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.715005][ T4364] Cannot create hsr debugfs directory [ 72.931685][ T4447] loop1: detected capacity change from 0 to 64 [ 72.948182][ T4426] loop2: detected capacity change from 0 to 32768 [ 73.065881][ T4426] ======================================================= [ 73.065881][ T4426] WARNING: The mand mount option has been deprecated and [ 73.065881][ T4426] and is ignored by this kernel. Remove the mand [ 73.065881][ T4426] option from the mount to silence this warning. [ 73.065881][ T4426] ======================================================= [ 73.109604][ T4452] loop4: detected capacity change from 0 to 1024 [ 73.176815][ T4420] loop0: detected capacity change from 0 to 32768 [ 73.204713][ T4452] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 73.228475][ T4426] JBD2: Invalid start block of journal: 2 [ 73.234256][ T4426] (syz.2.49,4426,0):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 73.239184][ T4452] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.309890][ T4426] (syz.2.49,4426,1):ocfs2_check_volume:2424 ERROR: status = -22 [ 73.318489][ T4426] (syz.2.49,4426,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 73.326466][ T4426] (syz.2.49,4426,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 73.355183][ T4452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.55: bg 0: block 10: padding at end of block bitmap is not set [ 73.370911][ T1160] device hsr_slave_0 left promiscuous mode [ 73.388804][ T1160] device hsr_slave_1 left promiscuous mode [ 73.389186][ T4426] (syz.2.49,4426,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 73.415599][ T4420] XFS (loop0): Mounting V5 Filesystem [ 73.447807][ T4452] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.55: Failed to acquire dquot type 0 [ 73.461002][ T4452] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.55: Failed to acquire dquot type 0 [ 73.485554][ T4452] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.55: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.502204][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.517993][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.530196][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.537887][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.547137][ T4452] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.55: Failed to acquire dquot type 0 [ 73.562033][ T1160] device bridge_slave_1 left promiscuous mode [ 73.570107][ T4452] EXT4-fs (loop4): 1 orphan inode deleted [ 73.576554][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.599520][ T1160] device bridge_slave_0 left promiscuous mode [ 73.606315][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.633844][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.647596][ T1160] device veth1_macvtap left promiscuous mode [ 73.654177][ T1160] device veth0_macvtap left promiscuous mode [ 73.661799][ T1160] device veth1_vlan left promiscuous mode [ 73.667931][ T1160] device veth0_vlan left promiscuous mode [ 73.709789][ T4452] syz.4.55 (4452) used greatest stack depth: 20096 bytes left [ 73.728074][ T4420] XFS (loop0): Ending clean mount [ 73.901681][ T4471] loop4: detected capacity change from 0 to 4096 [ 73.927966][ T4187] XFS (loop0): Unmounting Filesystem [ 74.015118][ T4471] ntfs: volume version 3.1. [ 74.217017][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 74.261246][ T4476] loop4: detected capacity change from 0 to 764 [ 74.331107][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 74.356318][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 74.384025][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.411473][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.586781][ T1160] bond0 (unregistering): Released all slaves [ 74.816141][ T4364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.837504][ T4364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.887451][ T4364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.927887][ T4364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.124315][ T4489] loop0: detected capacity change from 0 to 4096 [ 75.213449][ T4484] loop4: detected capacity change from 0 to 32768 [ 75.230390][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.356110][ T4364] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.363290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.387187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.425631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.499180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.568904][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.576094][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.662222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.701639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.713371][ T4187] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 75.745364][ T4187] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 75.762068][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.769236][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.905650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.945056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.989194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.046009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.077493][ T4522] capability: warning: `syz.4.72' uses deprecated v2 capabilities in a way that may be insecure [ 76.107199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.114219][ T4519] loop0: detected capacity change from 0 to 4096 [ 76.203126][ T4519] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 76.243221][ T4519] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 76.245205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.295028][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 76.315345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.341199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.362077][ T4525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.73'. [ 76.387708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.417816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.448244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.464258][ T4187] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 76.487908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.576153][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.716262][ T4500] loop2: detected capacity change from 0 to 40427 [ 76.802558][ T4500] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.845146][ T4500] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.920105][ T4500] F2FS-fs (loop2): invalid crc value [ 76.974498][ T4500] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.199006][ T4509] loop1: detected capacity change from 0 to 32768 [ 77.238470][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.255546][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.330185][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.339043][ T4509] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.362811][ T4500] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 77.380542][ T4500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.402978][ T4509] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.484649][ T4553] loop4: detected capacity change from 0 to 4096 [ 77.568007][ T4509] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 77.636455][ T4242] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.648254][ T4242] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.733168][ T4242] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms [ 77.793128][ T4242] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.815655][ T4194] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 77.816500][ T4509] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.822134][ T4194] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 78.135493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.144418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.172436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.183744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.214841][ T4364] device veth0_vlan entered promiscuous mode [ 78.223827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.265737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.320999][ T4364] device veth1_vlan entered promiscuous mode [ 78.379258][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 78.429046][ T4569] loop4: detected capacity change from 0 to 8192 [ 78.466305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.495185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.526111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.584512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.593240][ T4569] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 78.623604][ T4569] REISERFS (device loop4): using ordered data mode [ 78.635058][ T4569] reiserfs: using flush barriers [ 78.666376][ T4364] device veth0_macvtap entered promiscuous mode [ 78.683810][ T4569] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.743936][ T4364] device veth1_macvtap entered promiscuous mode [ 78.807886][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.819496][ T4569] REISERFS (device loop4): checking transaction log (loop4) [ 78.875320][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.909051][ T4569] REISERFS (device loop4): Using r5 hash to sort names [ 78.915003][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.925809][ T4588] loop2: detected capacity change from 0 to 64 [ 78.961564][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.962576][ T4569] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 79.002262][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.062233][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.078451][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.091361][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.109040][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.132127][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.185634][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.227285][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.237578][ T4569] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 79.254124][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.349812][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.389567][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.431713][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.476080][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.523652][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.550561][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.577956][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.604974][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.627596][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.659744][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.681236][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.748498][ T4594] loop2: detected capacity change from 0 to 256 [ 79.759970][ T4364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.792739][ T4364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.847138][ T4364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.859698][ T4581] loop0: detected capacity change from 0 to 32768 [ 79.914699][ T4364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.916397][ T4581] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.85 (4581) [ 80.205836][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.213866][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.281833][ T4581] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 80.294662][ T4586] loop1: detected capacity change from 0 to 32768 [ 80.335043][ T4581] BTRFS info (device loop0): force zlib compression, level 3 [ 80.342496][ T4581] BTRFS info (device loop0): force clearing of disk cache [ 80.343922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.372505][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.385424][ T4581] BTRFS info (device loop0): setting nodatasum [ 80.404665][ T4581] BTRFS info (device loop0): allowing degraded mounts [ 80.411752][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.416288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.589293][ T4581] BTRFS info (device loop0): enabling disk space caching [ 80.621108][ T4586] find_entry called with index = 0 [ 80.675781][ T4581] BTRFS info (device loop0): disk space caching is enabled [ 80.702071][ T4586] read_mapping_page failed! [ 80.735291][ T4586] ERROR: (device loop1): txCommit: [ 80.735291][ T4586] [ 80.765062][ T4581] BTRFS info (device loop0): has skinny extents [ 80.781719][ T4586] ERROR: (device loop1): remounting filesystem as read-only [ 80.850191][ T4586] ERROR: (device loop1): diFree: numfree > numinos [ 80.850191][ T4586] [ 81.006721][ T4614] loop5: detected capacity change from 0 to 8192 [ 81.107648][ T4581] BTRFS info (device loop0): clearing free space tree [ 81.165922][ T4581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.196492][ T4581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.428507][ T4643] loop4: detected capacity change from 0 to 128 [ 81.526299][ T4643] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.615396][ T4643] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.966947][ T4648] loop1: detected capacity change from 0 to 4096 [ 81.989883][ T4654] loop4: detected capacity change from 0 to 512 [ 82.685891][ T4670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 82.775824][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 82.815044][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 82.837118][ T4672] loop5: detected capacity change from 0 to 8192 [ 82.978108][ T4672] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 83.005031][ T4672] REISERFS (device loop5): using ordered data mode [ 83.011590][ T4672] reiserfs: using flush barriers [ 83.082225][ T4687] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 83.086708][ T4672] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.092821][ T4687] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 83.235492][ T4672] REISERFS (device loop5): checking transaction log (loop5) [ 83.311737][ T4672] REISERFS (device loop5): Using r5 hash to sort names [ 83.344674][ T4672] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 83.496153][ T4672] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 83.932033][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.119'. [ 84.095469][ T4722] loop5: detected capacity change from 0 to 4096 [ 84.139105][ T4730] loop4: detected capacity change from 0 to 1024 [ 84.179808][ T4732] loop0: detected capacity change from 0 to 1024 [ 84.409142][ T4364] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 84.428224][ T4364] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 84.860701][ T4753] netlink: 108 bytes leftover after parsing attributes in process `syz.1.130'. [ 84.895809][ T4755] device gtp0 entered promiscuous mode [ 84.922092][ T4753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.130'. [ 84.971444][ T4746] loop0: detected capacity change from 0 to 8192 [ 85.071089][ T4746] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 85.163455][ T4769] loop1: detected capacity change from 0 to 4096 [ 85.168855][ T4746] REISERFS (device loop0): using ordered data mode [ 85.238052][ T4746] reiserfs: using flush barriers [ 85.290425][ T4746] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.368123][ T4781] mmap: syz.5.140 (4781) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 85.413195][ T4746] REISERFS (device loop0): checking transaction log (loop0) [ 85.442501][ T4746] REISERFS (device loop0): Using r5 hash to sort names [ 85.454575][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 85.496689][ T4746] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 85.516378][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 85.682531][ T4746] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 85.963056][ T4764] loop2: detected capacity change from 0 to 32768 [ 86.005021][ T4764] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.060318][ T4764] process 'syz.2.133' launched './file1' with NULL argv: empty string added [ 86.187114][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 86.216008][ T4801] vivid-001: disconnect [ 86.223173][ T4795] vivid-001: reconnect [ 86.619386][ T13] cfg80211: failed to load regulatory.db [ 86.860803][ T4666] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 87.245304][ T4666] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.289960][ T4666] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 87.315468][ T4666] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.322575][ T4666] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 87.365010][ T4666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.409553][ T4666] usb 2-1: config 0 descriptor?? [ 87.429801][ T4818] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.437175][ T4820] loop4: detected capacity change from 0 to 32768 [ 87.510464][ T4845] loop2: detected capacity change from 0 to 1024 [ 87.559837][ T4845] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.675912][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000001,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 87.901799][ T4845] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.904668][ T4829] loop0: detected capacity change from 0 to 32768 [ 87.978345][ T4666] holtek_mouse 0003:04D9:A067.0003: unbalanced delimiter at end of report description [ 88.027558][ T4666] holtek_mouse 0003:04D9:A067.0003: hid parse failed: -22 [ 88.037547][ T4666] holtek_mouse: probe of 0003:04D9:A067.0003 failed with error -22 [ 88.120174][ T4829] XFS (loop0): Mounting V5 Filesystem [ 88.180931][ T3521] usb 2-1: USB disconnect, device number 4 [ 88.299144][ T4842] loop5: detected capacity change from 0 to 32768 [ 88.373841][ T4829] XFS (loop0): Ending clean mount [ 88.407039][ T4829] XFS (loop0): Quotacheck needed: Please wait. [ 88.432610][ T4842] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 88.493656][ T4829] XFS (loop0): Quotacheck: Done. [ 88.571611][ T4849] loop4: detected capacity change from 0 to 32768 [ 88.645948][ T4364] XFS (loop5): Unmounting Filesystem [ 88.705836][ T4187] XFS (loop0): Unmounting Filesystem [ 88.773288][ T4849] XFS (loop4): Mounting V5 Filesystem [ 88.927422][ T4849] XFS (loop4): Ending clean mount [ 88.986948][ T4849] XFS (loop4): Quotacheck needed: Please wait. [ 89.133502][ T4666] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 89.138136][ T4849] XFS (loop4): Quotacheck: Done. [ 89.283162][ T4194] XFS (loop4): Unmounting Filesystem [ 89.505165][ T4666] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.515829][ T4888] loop2: detected capacity change from 0 to 32768 [ 89.523029][ T4666] usb 2-1: config 0 has no interface number 0 [ 89.534980][ T4666] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 89.563158][ T4666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.598450][ T4666] usb 2-1: config 0 descriptor?? [ 89.687364][ T4666] usb 2-1: selecting invalid altsetting 1 [ 89.710492][ T4666] dvb_ttusb_budget: ttusb_init_controller: error [ 89.735136][ T4666] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 89.924227][ T4666] DVB: Unable to find symbol cx22700_attach() [ 90.040712][ T4666] DVB: Unable to find symbol tda10046_attach() [ 90.063084][ T4666] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 90.071807][ T4901] tipc: Enabling of bearer rejected, failed to enable media [ 90.123141][ T4666] usb 2-1: USB disconnect, device number 5 [ 90.378354][ T4890] loop5: detected capacity change from 0 to 32768 [ 90.489528][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 90.489544][ T26] audit: type=1800 audit(2000000013.710:23): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.167" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 90.682213][ T4919] loop4: detected capacity change from 0 to 64 [ 90.755990][ T4924] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 90.825011][ T4666] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 90.858039][ T26] audit: type=1800 audit(2000000014.080:24): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.182" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 91.195274][ T4666] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 91.220621][ T4666] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.265605][ T4945] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 91.273471][ T4945] netlink: 'syz.4.192': attribute type 2 has an invalid length. [ 91.396559][ T4950] tmpfs: Unexpected value for 'inode32' [ 91.401509][ T4666] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.431099][ T4666] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 91.462139][ T4666] usb 1-1: Product: syz [ 91.476031][ T4666] usb 1-1: Manufacturer: syz [ 91.480684][ T4666] usb 1-1: SerialNumber: syz [ 91.537134][ T4666] usb 1-1: config 0 descriptor?? [ 91.543333][ T4957] loop4: detected capacity change from 0 to 256 [ 91.596714][ T4666] usb 1-1: selecting invalid altsetting 0 [ 91.869435][ T4913] usb 1-1: selecting invalid altsetting 0 [ 91.919350][ T4913] usb 1-1: 0:0: usb_set_interface failed (-22) [ 91.968817][ T4913] usb 1-1: selecting invalid altsetting 0 [ 91.974640][ T4913] usb 1-1: 0:0: usb_set_interface failed (-22) [ 91.989770][ T4911] usb 1-1: selecting invalid altsetting 0 [ 92.029421][ T4911] usb 1-1: 0:0: usb_set_interface failed (-22) [ 92.055439][ T4911] usb 1-1: selecting invalid altsetting 0 [ 92.089378][ T4911] usb 1-1: 0:0: usb_set_interface failed (-22) [ 92.114822][ T4911] usb 1-1: selecting invalid altsetting 0 [ 92.131938][ T4911] usb 1-1: 0:0: usb_set_interface failed (-22) [ 92.171070][ T4285] usb 1-1: USB disconnect, device number 2 [ 92.396014][ T5000] loop4: detected capacity change from 0 to 128 [ 92.469617][ T5002] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.540448][ T5000] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/59/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.282476][ T5042] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 93.370960][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.402562][ T5047] netlink: 52 bytes leftover after parsing attributes in process `syz.2.233'. [ 93.490767][ T4666] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.579750][ T5057] loop2: detected capacity change from 0 to 136 [ 93.624714][ T5061] program syz.4.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.676110][ T4285] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.685724][ T5057] Symlink component flag not implemented [ 93.793846][ T5066] capability: warning: `syz.4.239' uses 32-bit capabilities (legacy support in use) [ 93.855349][ T4666] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.892897][ T4666] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.925039][ T4666] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 93.935078][ T4285] usb 2-1: Using ep0 maxpacket: 32 [ 93.940569][ T4666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.996343][ T4666] usb 1-1: config 0 descriptor?? [ 94.075220][ T4285] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.106265][ T4285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.125150][ T4285] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 94.144213][ T4285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.183493][ T4285] usb 2-1: config 0 descriptor?? [ 94.259232][ T5083] loop2: detected capacity change from 0 to 1024 [ 94.431797][ T5083] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,discard,nodiscard,. Quota mode: none. [ 94.503636][ T5099] loop5: detected capacity change from 0 to 64 [ 94.503876][ T4666] hid-alps 0003:044E:1215.0004: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 94.541548][ T5099] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop5 [ 94.631595][ T5102] loop2: detected capacity change from 0 to 128 [ 94.672493][ T5102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.694903][ T4285] lg-g15 0003:046D:C225.0005: item fetching failed at offset 5/6 [ 94.703290][ T4285] lg-g15: probe of 0003:046D:C225.0005 failed with error -22 [ 94.705222][ T4666] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.725571][ T5102] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.757393][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.869841][ T4235] usb 1-1: USB disconnect, device number 3 [ 94.906999][ T4242] usb 2-1: USB disconnect, device number 6 [ 94.976546][ T5110] loop2: detected capacity change from 0 to 2048 [ 95.008794][ T5110] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.019957][ T5110] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.277326][ T5119] loop0: detected capacity change from 0 to 256 [ 95.288412][ T4666] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 95.319837][ T4666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.361189][ T4666] usb 5-1: Product: syz [ 95.365520][ T4666] usb 5-1: Manufacturer: syz [ 95.370146][ T4666] usb 5-1: SerialNumber: syz [ 95.385434][ T4666] usb 5-1: config 0 descriptor?? [ 95.447459][ T4666] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 95.494235][ T4666] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.525498][ T4666] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 95.534796][ T4666] usb 5-1: media controller created [ 95.580911][ T4666] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.646503][ T5094] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 95.675464][ T5094] dvb-usb: bulk message failed: -22 (7/0) [ 95.763709][ T4666] DVB: Unable to find symbol mt352_attach() [ 95.792948][ T5133] netlink: 'syz.1.265': attribute type 10 has an invalid length. [ 95.890793][ T4666] DVB: Unable to find symbol nxt6000_attach() [ 95.899614][ T4666] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 95.942506][ T5134] loop2: detected capacity change from 0 to 4096 [ 95.952526][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.976445][ T5133] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 95.987844][ T4666] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 96.046083][ T4666] dvb-usb: schedule remote query interval to 1000 msecs. [ 96.080606][ T5133] syz.1.265 (5133) used greatest stack depth: 20064 bytes left [ 96.105160][ T4666] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 96.145149][ T4666] dvb-usb: bulk message failed: -22 (7/0) [ 96.166650][ T4666] dvb-usb: bulk message failed: -22 (7/0) [ 96.230866][ T4666] usb 5-1: USB disconnect, device number 2 [ 96.271609][ T5134] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 96.343183][ T5134] ntfs3: loop2: Failed to load $Extend. [ 96.388341][ T4666] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 96.435028][ T4285] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 96.805360][ T4285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 96.841433][ T4285] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 96.884272][ T4285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.931718][ T4285] usb 2-1: config 0 descriptor?? [ 96.976029][ T5150] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.101419][ T5189] loop4: detected capacity change from 0 to 1024 [ 97.180008][ T5189] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 97.210272][ T5189] netlink: 'syz.4.287': attribute type 8 has an invalid length. [ 97.325132][ T4256] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.472393][ T5204] loop2: detected capacity change from 0 to 512 [ 97.497832][ T4285] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 97.524401][ T5206] sp0: Synchronizing with TNC [ 97.568648][ T5204] EXT4-fs (loop2): Ignoring removed nobh option [ 97.588351][ T5204] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 97.689942][ T4303] usb 2-1: USB disconnect, device number 7 [ 97.715353][ T4256] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 97.736235][ T4256] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 97.759537][ T5215] fido_id[5215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 97.784274][ T4256] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 97.834916][ T4256] usb 1-1: config 220 has no interface number 2 [ 97.845890][ T4256] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 97.890313][ T4256] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 97.926682][ T5204] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.949251][ T4256] usb 1-1: config 220 interface 0 has no altsetting 0 [ 97.967257][ T5204] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.293: iget: bad i_size value: 38620345925642 [ 97.981310][ T4256] usb 1-1: config 220 interface 76 has no altsetting 0 [ 97.994021][ T4256] usb 1-1: config 220 interface 1 has no altsetting 0 [ 98.021989][ T5204] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.293: couldn't read orphan inode 15 (err -117) [ 98.036228][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,nomblk_io_submit,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 98.165169][ T4256] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 98.194995][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.236073][ T4256] usb 1-1: Product: syz [ 98.240300][ T4256] usb 1-1: Manufacturer: syz [ 98.262720][ T4256] usb 1-1: SerialNumber: syz [ 98.292456][ T5243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.303'. [ 98.313028][ T5247] loop1: detected capacity change from 0 to 512 [ 98.368264][ T5247] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.422758][ T5247] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.499306][ T5247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.575715][ T4285] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 98.587315][ T5247] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.305: corrupted in-inode xattr [ 98.639136][ T5247] EXT4-fs (loop1): 1 orphan inode deleted [ 98.646964][ T4256] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 98.653387][ T4256] usb 1-1: No valid video chain found. [ 98.664934][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 98.687520][ T4256] usb 1-1: selecting invalid altsetting 0 [ 98.727489][ T5258] loop5: detected capacity change from 0 to 2048 [ 98.787345][ T4256] usb 1-1: selecting invalid altsetting 0 [ 98.797300][ T4256] usbtest: probe of 1-1:220.1 failed with error -22 [ 98.845511][ T4256] usb 1-1: USB disconnect, device number 4 [ 98.855821][ T5258] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.996786][ T5273] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.007741][ T4285] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.046413][ T4285] usb 3-1: config 0 has no interface number 0 [ 99.052574][ T4285] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 99.067636][ T4285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.078403][ T4285] usb 3-1: config 0 descriptor?? [ 99.141414][ T4285] usb 3-1: selecting invalid altsetting 1 [ 99.149810][ T4285] dvb_ttusb_budget: ttusb_init_controller: error [ 99.169976][ T4285] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 99.375105][ T4285] DVB: Unable to find symbol cx22700_attach() [ 99.479449][ T4285] DVB: Unable to find symbol tda10046_attach() [ 99.496357][ T4285] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 99.522989][ T4285] usb 3-1: USB disconnect, device number 3 [ 99.568165][ T4303] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.575914][ T4256] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 99.835147][ T4256] usb 2-1: Using ep0 maxpacket: 32 [ 99.955485][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.961559][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 99.985344][ T4303] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 99.997023][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.007463][ T4303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.035028][ T4256] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.047017][ T5282] loop0: detected capacity change from 0 to 32768 [ 100.054420][ T4303] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 100.101656][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.122954][ T4303] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 100.140834][ T4256] usb 2-1: config 0 descriptor?? [ 100.147394][ T4303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.162190][ T5282] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 100.165857][ T4303] usb 5-1: config 0 descriptor?? [ 100.197657][ T4256] hub 2-1:0.0: USB hub found [ 100.258315][ T5323] loop2: detected capacity change from 0 to 1024 [ 100.355970][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 100.421293][ T4256] hub 2-1:0.0: 1 port detected [ 100.445899][ T3065] hfsplus: b-tree write err: -5, ino 4 [ 100.629296][ T4256] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 100.647900][ T4256] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 100.663626][ T4303] viewsonic 0003:2133:0018.0007: hidraw0: USB HID v10.00 Device [HID 2133:0018] on usb-dummy_hcd.4-1/input0 [ 100.815510][ T4256] usbhid 2-1:0.0: can't add hid device: -71 [ 100.821641][ T4256] usbhid: probe of 2-1:0.0 failed with error -71 [ 100.864501][ T13] usb 5-1: USB disconnect, device number 3 [ 100.912046][ T4256] usb 2-1: USB disconnect, device number 8 [ 100.992784][ T5341] loop2: detected capacity change from 0 to 2048 [ 101.162795][ T5341] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.595362][ T5366] loop4: detected capacity change from 0 to 2048 [ 101.631648][ T5370] loop1: detected capacity change from 0 to 2048 [ 101.712286][ T5370] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.763372][ T5375] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.815492][ T5366] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 101.845230][ T5378] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.894663][ T26] audit: type=1800 audit(2000000025.110:25): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.338" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 101.958735][ T5370] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 101.973019][ T5366] Remounting filesystem read-only [ 102.004958][ T5366] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 102.015256][ T5370] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 102.098631][ T5370] Remounting filesystem read-only [ 102.120174][ T5370] NILFS (loop1): error -5 truncating bmap (ino=16) [ 102.243417][ T4183] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 102.268775][ T4303] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.565144][ T4303] usb 1-1: Using ep0 maxpacket: 8 [ 102.654206][ T5369] loop2: detected capacity change from 0 to 32768 [ 102.709552][ T4303] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 102.721717][ T4303] usb 1-1: config 2 has no interface number 0 [ 102.744673][ T4303] usb 1-1: config 2 interface 31 has no altsetting 0 [ 102.750385][ T5369] JBD2: Ignoring recovery information on journal [ 102.926742][ T4303] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 102.949022][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.974992][ T4303] usb 1-1: Product: syz [ 102.989527][ T4303] usb 1-1: Manufacturer: syz [ 103.007186][ T5369] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.023399][ T4303] usb 1-1: SerialNumber: syz [ 103.079459][ T5369] [ 103.081856][ T5369] ====================================================== [ 103.088897][ T5369] WARNING: possible circular locking dependency detected [ 103.095950][ T5369] syzkaller #0 Not tainted [ 103.100393][ T5369] ------------------------------------------------------ [ 103.108044][ T5369] syz.2.336/5369 is trying to acquire lock: [ 103.114052][ T5369] ffff88805d45a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 103.127318][ T5369] [ 103.127318][ T5369] but task is already holding lock: [ 103.134699][ T5369] ffff88805d45eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 103.144218][ T5369] [ 103.144218][ T5369] which lock already depends on the new lock. [ 103.144218][ T5369] [ 103.154635][ T5369] [ 103.154635][ T5369] the existing dependency chain (in reverse order) is: [ 103.163729][ T5369] [ 103.163729][ T5369] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 103.171579][ T5369] down_read+0x44/0x2e0 [ 103.176413][ T5369] ocfs2_init_acl+0x2fb/0x720 [ 103.181640][ T5369] ocfs2_mknod+0x142f/0x22b0 [ 103.186793][ T5369] ocfs2_create+0x192/0x410 [ 103.191848][ T5369] path_openat+0x11e1/0x2f30 [ 103.197079][ T5369] do_filp_open+0x1b3/0x3e0 [ 103.202130][ T5369] do_sys_openat2+0x142/0x4a0 [ 103.207372][ T5369] __x64_sys_openat+0x135/0x160 [ 103.212788][ T5369] do_syscall_64+0x4c/0xa0 [ 103.217766][ T5369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.224214][ T5369] [ 103.224214][ T5369] -> #4 (jbd2_handle){++++}-{0:0}: [ 103.231547][ T5369] start_this_handle+0x1338/0x15a0 [ 103.237217][ T5369] jbd2__journal_start+0x2b7/0x5a0 [ 103.242881][ T5369] jbd2_journal_start+0x26/0x30 [ 103.248284][ T5369] ocfs2_start_trans+0x374/0x6c0 [ 103.253778][ T5369] ocfs2_mknod+0xe2f/0x22b0 [ 103.258877][ T5369] ocfs2_create+0x192/0x410 [ 103.263941][ T5369] path_openat+0x11e1/0x2f30 [ 103.269186][ T5369] do_filp_open+0x1b3/0x3e0 [ 103.274239][ T5369] do_sys_openat2+0x142/0x4a0 [ 103.279468][ T5369] __x64_sys_openat+0x135/0x160 [ 103.284877][ T5369] do_syscall_64+0x4c/0xa0 [ 103.289847][ T5369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.296297][ T5369] [ 103.296297][ T5369] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 103.304843][ T5369] down_read+0x44/0x2e0 [ 103.309563][ T5369] ocfs2_start_trans+0x368/0x6c0 [ 103.315063][ T5369] ocfs2_mknod+0xe2f/0x22b0 [ 103.320125][ T5369] ocfs2_create+0x192/0x410 [ 103.325184][ T5369] path_openat+0x11e1/0x2f30 [ 103.332936][ T5369] do_filp_open+0x1b3/0x3e0 [ 103.338001][ T5369] do_sys_openat2+0x142/0x4a0 [ 103.343350][ T5369] __x64_sys_openat+0x135/0x160 [ 103.348759][ T5369] do_syscall_64+0x4c/0xa0 [ 103.353729][ T5369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.360268][ T5369] [ 103.360268][ T5369] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 103.367784][ T5369] ocfs2_start_trans+0x269/0x6c0 [ 103.373297][ T5369] ocfs2_mknod+0xe2f/0x22b0 [ 103.378388][ T5369] ocfs2_create+0x192/0x410 [ 103.383442][ T5369] path_openat+0x11e1/0x2f30 [ 103.386334][ T4285] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 103.388615][ T5369] do_filp_open+0x1b3/0x3e0 [ 103.401284][ T5369] do_sys_openat2+0x142/0x4a0 [ 103.406540][ T5369] __x64_sys_openat+0x135/0x160 [ 103.411950][ T5369] do_syscall_64+0x4c/0xa0 [ 103.416922][ T5369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.423369][ T5369] [ 103.423369][ T5369] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 103.433921][ T5369] down_write+0x38/0x60 [ 103.438637][ T5369] ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 103.445342][ T5369] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 103.452233][ T5369] ocfs2_mknod+0xddd/0x22b0 [ 103.457287][ T5369] ocfs2_create+0x192/0x410 [ 103.462424][ T5369] path_openat+0x11e1/0x2f30 [ 103.467761][ T5369] do_filp_open+0x1b3/0x3e0 [ 103.472814][ T5369] do_sys_openat2+0x142/0x4a0 [ 103.478052][ T5369] __x64_sys_openat+0x135/0x160 [ 103.483462][ T5369] do_syscall_64+0x4c/0xa0 [ 103.488437][ T5369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.494877][ T5369] [ 103.494877][ T5369] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 103.505490][ T5369] __lock_acquire+0x2c33/0x7c60 [ 103.510910][ T5369] lock_acquire+0x197/0x3f0 [ 103.515964][ T5369] down_write+0x38/0x60 [ 103.520671][ T5369] ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 103.527128][ T5369] ocfs2_reserve_new_metadata_blocks+0x400/0x940 [ 103.534004][ T5369] ocfs2_init_xattr_set_ctxt+0x2e1/0x6c0 [ 103.540174][ T5369] ocfs2_xattr_set+0xb69/0x11e0 [ 103.545576][ T5369] __vfs_setxattr+0x3e0/0x420 [ 103.550777][ T5369] __vfs_setxattr_noperm+0x129/0x5e0 [ 103.556588][ T5369] vfs_setxattr+0x168/0x2f0 [ 103.561624][ T5369] setxattr+0x2da/0x300 [ 103.566319][ T5369] path_setxattr+0x142/0x280 [ 103.571640][ T5369] __x64_sys_setxattr+0xb7/0xd0 [ 103.577024][ T5369] do_syscall_64+0x4c/0xa0 [ 103.581987][ T5369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.588406][ T5369] [ 103.588406][ T5369] other info that might help us debug this: [ 103.588406][ T5369] [ 103.598666][ T5369] Chain exists of: [ 103.598666][ T5369] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 103.598666][ T5369] [ 103.614409][ T5369] Possible unsafe locking scenario: [ 103.614409][ T5369] [ 103.621865][ T5369] CPU0 CPU1 [ 103.627275][ T5369] ---- ---- [ 103.632647][ T5369] lock(&oi->ip_xattr_sem); [ 103.637288][ T5369] lock(jbd2_handle); [ 103.643914][ T5369] lock(&oi->ip_xattr_sem); [ 103.651024][ T5369] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 103.658321][ T5369] [ 103.658321][ T5369] *** DEADLOCK *** [ 103.658321][ T5369] [ 103.666463][ T5369] 3 locks held by syz.2.336/5369: [ 103.671576][ T5369] #0: ffff888060e7e460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 103.680826][ T5369] #1: ffff88805d45ed88 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 103.691292][ T5369] #2: ffff88805d45eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 103.701221][ T5369] [ 103.701221][ T5369] stack backtrace: [ 103.707117][ T5369] CPU: 0 PID: 5369 Comm: syz.2.336 Not tainted syzkaller #0 [ 103.714419][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.724487][ T5369] Call Trace: [ 103.727769][ T5369] [ 103.730706][ T5369] dump_stack_lvl+0x168/0x230 [ 103.735436][ T5369] ? load_image+0x3b0/0x3b0 [ 103.740042][ T5369] ? show_regs_print_info+0x20/0x20 [ 103.745629][ T5369] ? print_circular_bug+0x12b/0x1a0 [ 103.750851][ T5369] check_noncircular+0x274/0x310 [ 103.755809][ T5369] ? add_chain_block+0x940/0x940 [ 103.760874][ T5369] ? lockdep_lock+0xdc/0x1e0 [ 103.765564][ T5369] ? verify_lock_unused+0x140/0x140 [ 103.770764][ T5369] ? mark_lock+0x94/0x320 [ 103.775113][ T5369] __lock_acquire+0x2c33/0x7c60 [ 103.779978][ T5369] ? verify_lock_unused+0x140/0x140 [ 103.785183][ T5369] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 103.790838][ T5369] ? do_raw_spin_lock+0x11d/0x280 [ 103.796018][ T5369] ? mutex_unlock+0x10/0x10 [ 103.800529][ T5369] ? __rwlock_init+0x140/0x140 [ 103.805306][ T5369] ? __rwlock_init+0x140/0x140 [ 103.810086][ T5369] ? do_raw_spin_unlock+0x11d/0x230 [ 103.815414][ T5369] lock_acquire+0x197/0x3f0 [ 103.819937][ T5369] ? ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 103.826020][ T5369] ? __might_sleep+0xf0/0xf0 [ 103.830773][ T5369] ? __bfs+0x2a3/0x5c0 [ 103.834890][ T5369] ? read_lock_is_recursive+0x10/0x10 [ 103.840310][ T5369] ? verify_lock_unused+0x140/0x140 [ 103.845550][ T5369] down_write+0x38/0x60 [ 103.849724][ T5369] ? ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 103.855813][ T5369] ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 103.861730][ T5369] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 103.867728][ T5369] ? lock_chain_count+0x20/0x20 [ 103.872609][ T5369] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.878779][ T5369] ? lockdep_hardirqs_on+0x94/0x140 [ 103.883990][ T5369] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.890160][ T5369] ? ocfs2_block_group_search+0x470/0x470 [ 103.895899][ T5369] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 103.901820][ T5369] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 103.907971][ T5369] ? _raw_spin_unlock+0x40/0x40 [ 103.913017][ T5369] ? stack_trace_save+0x98/0xe0 [ 103.917904][ T5369] ? stack_trace_snprint+0xf0/0xf0 [ 103.923030][ T5369] ? stack_depot_save+0x404/0x440 [ 103.928246][ T5369] ? __kasan_kmalloc+0xcc/0xf0 [ 103.933180][ T5369] ? __kasan_kmalloc+0xb5/0xf0 [ 103.937966][ T5369] ? ocfs2_reserve_new_metadata_blocks+0x110/0x940 [ 103.944499][ T5369] ? ocfs2_init_xattr_set_ctxt+0x2e1/0x6c0 [ 103.950315][ T5369] ? ocfs2_xattr_set+0xb69/0x11e0 [ 103.955360][ T5369] ? __vfs_setxattr+0x3e0/0x420 [ 103.960393][ T5369] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 103.966041][ T5369] ? vfs_setxattr+0x168/0x2f0 [ 103.970739][ T5369] ? setxattr+0x2da/0x300 [ 103.975077][ T5369] ? path_setxattr+0x142/0x280 [ 103.979839][ T5369] ? __x64_sys_setxattr+0xb7/0xd0 [ 103.984876][ T5369] ? do_syscall_64+0x4c/0xa0 [ 103.989500][ T5369] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.995590][ T5369] ocfs2_reserve_new_metadata_blocks+0x400/0x940 [ 104.001940][ T5369] ? ocfs2_init_steal_slots+0x150/0x150 [ 104.007607][ T5369] ? ocfs2_xattr_block_set+0x2b00/0x2b00 [ 104.013271][ T5369] ocfs2_init_xattr_set_ctxt+0x2e1/0x6c0 [ 104.018933][ T5369] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 104.025122][ T5369] ? ocfs2_truncate_log_needs_flush+0x131/0x2e0 [ 104.031370][ T5369] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 104.037275][ T5369] ? preempt_count_add+0x8d/0x190 [ 104.042324][ T5369] ? up_write+0x1bb/0x420 [ 104.046662][ T5369] ocfs2_xattr_set+0xb69/0x11e0 [ 104.051527][ T5369] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 104.057248][ T5369] ? mark_lock+0x94/0x320 [ 104.061603][ T5369] ? is_bpf_text_address+0x254/0x270 [ 104.066902][ T5369] ? __kernel_text_address+0x9a/0x100 [ 104.072286][ T5369] ? aa_get_newest_label+0xf9/0x590 [ 104.077496][ T5369] ? arch_stack_walk+0xf2/0x140 [ 104.082383][ T5369] ? posix_xattr_acl+0x8f/0xb0 [ 104.087182][ T5369] ? evm_protect_xattr+0x33c/0x970 [ 104.088244][ T4285] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 104.092324][ T5369] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 104.092351][ T5369] __vfs_setxattr+0x3e0/0x420 [ 104.101566][ T4285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.106849][ T5369] __vfs_setxattr_noperm+0x129/0x5e0 [ 104.106882][ T5369] vfs_setxattr+0x168/0x2f0 [ 104.129454][ T5369] ? xattr_permission+0x500/0x500 [ 104.129659][ T4285] usb 5-1: config 0 descriptor?? [ 104.134511][ T5369] ? strncpy_from_user+0x1fb/0x360 [ 104.134540][ T5369] setxattr+0x2da/0x300 [ 104.134562][ T5369] ? path_setxattr+0x280/0x280 [ 104.153528][ T5369] ? __mnt_want_write+0x1e2/0x260 [ 104.158600][ T5369] path_setxattr+0x142/0x280 [ 104.163204][ T5369] ? simple_xattr_list_add+0xf0/0xf0 [ 104.168507][ T5369] ? lock_chain_count+0x20/0x20 [ 104.173364][ T5369] ? vtime_user_exit+0x2dc/0x400 [ 104.178305][ T5369] __x64_sys_setxattr+0xb7/0xd0 [ 104.183170][ T5369] do_syscall_64+0x4c/0xa0 [ 104.187597][ T5369] ? clear_bhb_loop+0x30/0x80 [ 104.192280][ T5369] ? clear_bhb_loop+0x30/0x80 [ 104.196965][ T5369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.202911][ T5369] RIP: 0033:0x7fcdb12946c9 [ 104.207331][ T5369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.226946][ T5369] RSP: 002b:00007fcdaf4fb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 104.235493][ T5369] RAX: ffffffffffffffda RBX: 00007fcdb14eafa0 RCX: 00007fcdb12946c9 [ 104.243581][ T5369] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000180 [ 104.251575][ T5369] RBP: 00007fcdb1316f91 R08: 0000000000000001 R09: 0000000000000000 [ 104.259557][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.267540][ T5369] R13: 00007fcdb14eb038 R14: 00007fcdb14eafa0 R15: 00007fff09823948 [ 104.275525][ T5369] [ 104.308621][ T4303] ch9200: probe of 1-1:2.31 failed with error -22 [ 104.310163][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 104.326754][ T4303] usb 1-1: USB disconnect, device number 5 [ 104.678148][ T4285] lenovo 0003:17EF:6062.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 104.878740][ T4285] usb 5-1: USB disconnect, device number 4