last executing test programs: 18.921888238s ago: executing program 0 (id=94): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21081e, &(0x7f0000001400)={[{@data_err_ignore}, {@barrier}, {@nojournal_checksum}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3}}]}, 0x0, 0x534, &(0x7f0000000440)="$eJzs3c9vI1cdAPDvzK4dbzZttqWHgqBd2sKCVutsvO2q6oGWE0KoEqJHkLYh8UZR7DiKndKEPaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiSQjGY8znqz9iZqEnt3/flIo/nxxv5+X5x5z36J5wUwta5GxF5ElCPi/YiYL44nxRLv9JbsvM/27y0f7N9bTqLbfe8fSV6eHYuBx2QuF89ZiYgffCfix8nDcds7u+tLjUZ9q9hf6DQ3F9o7uzfWmkur9dX6Rq12e/H2zTdvvVE7s7q+3CwXW1/59Pd73/xpltZccWSwHmepV/XSYZzMxYj43nkEm4ALRX3Kk06EzyWNiOcj4pX8+p+PC/mrWbyoAMBTqdudj+784P4R6agCAOBJleZjYElaLcYC5iJNq9XeGN4LMZs2Wu3O9but7Y2V3ljZlSild9ca9ZvFWOGVKCXZ/mK+fX+/dmT/VkQ8FxE/n7mU71eXW42VSb3pAYApd/lI///vmV7/DwA85SqTTgAAGDv9PwBMH/0/AEwf/T8ATJ9e/39p0mkAAGPk8z8ATB/9PwBMle+/+262dA+K+1+vfLCzvd764MZKvb1ebW4vV5dbW5vV1VZrNb9nT/O452u0WpuLr8f2h1e+tdnuLLR3du80W9sbnTv5fb3v1Ev5WXtjqBkAMMpzL3/ypyTrkd+6lC8xMJdDaaKZAectnXQCwMRcmHQCwMSY5gum1yk+4xsegKfEkCl6H1AZ9gWhbrfbPb+UgHN27YvG/2FaDYz/+y9gmDKfd/z/f974wxPP+D9Mr243OenU/nHSEwGAx5sxfmDE3/+fL9a/Kf448KOVo2d8PPRxe0XzcnYJAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGOoN//vXFSLucDnIk2r1YhnIuJKlJK7a436zYh4NiL+OFOayfYXJ500AHBK6V+TYv6va/OvzT1Q9NLlw81yRPzkl+/94sOlTmfrDxHl5J8z/eOdj4vjtfFnDwAcr99P5+uBD/Kf7d9b7i/jzOdv346ISi/+wX45Dg7jX4yL+boSpYiY/VeS788Uj0sOxy5OZ++jiHhxWP2TmMvHQHozn/bj92Wxnxlr/PSB+Gle1ltnP4svnEEuMG0+ydqfd4Zdf2lczdfDr/9K3kKdXtH+ZU+1fJC3gffj99u/C0PiZ9f81ZPGeP133+1tXXq47KOIL12M6Mc+GGh/+vGTEfFfO2H8P3/5pVdGlXV/FXEthscfjLXQaW4utHd2b6w1l1brq/WNWu324u2bb956o7aQj1EvjO4N/v7W9WdHlWX1nx0Rv3JM/b92wvr/+r/v//Crj4j/jVeHxU/jhUfEz/rEr58w/tLsbyujyrL4KyPqf9zrf/2E8T/9y+5D04YDAJPT3tldX2o06ltP6EYSj0UaZ7tRmWD07G30xKLPxjHnZL+yp42VxPkk//a4flDlEb/zP3u1d00fKep2H/2Ebw8vGtVi3P+cVR5HAwWcm8OLPiL+M+lkAAAAAAAAAAAAAACAocbxjaXBeC+exU17AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPD/AAAA//8Dmcv+") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 18.214134069s ago: executing program 0 (id=101): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x793, &(0x7f0000000800)="$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") r0 = socket$inet6(0xa, 0x3, 0x3c) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000014) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x200, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 17.470104471s ago: executing program 0 (id=107): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f0000000800)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) 17.058224427s ago: executing program 0 (id=111): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfd14) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 16.687949703s ago: executing program 0 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 16.114264802s ago: executing program 0 (id=121): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 15.810876316s ago: executing program 32 (id=121): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 7.295864567s ago: executing program 4 (id=177): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.310016398s ago: executing program 1 (id=187): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) 5.201986369s ago: executing program 4 (id=188): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000140)="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", 0x33f, 0x40080, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 4.923804984s ago: executing program 4 (id=189): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)={[{@utf8}, {@hide, 0x0}, {@utf8}, {@overriderock}, {@map_off}, {@map_normal, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {@overriderock}, {@map_off}, {@map_normal}, {}]}, 0x2, 0x6b1, &(0x7f0000001100)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4.233348705s ago: executing program 1 (id=192): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 3.700374903s ago: executing program 4 (id=194): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000002c000000000000000100000001"], 0x50, 0x4004c}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) 3.302353589s ago: executing program 3 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000ce"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000009d000040"]) 3.22227135s ago: executing program 1 (id=196): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_open_procfs(r0, &(0x7f0000000140)='smaps\x00') 3.172500061s ago: executing program 4 (id=198): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc227, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xa, 0xf}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x6, 0x11, {0x11, 0x9, "46ff4490130a1e0ab42eff40f3c390"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") close(r1) 2.853728766s ago: executing program 3 (id=200): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.743915418s ago: executing program 2 (id=201): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r0, &(0x7f0000000000)=""/111, 0x6f) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000980), 0xfdef) 2.442104832s ago: executing program 2 (id=202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x1, 0x22, 0x0) 2.355123543s ago: executing program 3 (id=203): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}]}, 0x3, 0x64d, &(0x7f0000001280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) 2.002904239s ago: executing program 3 (id=204): msgget$private(0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x188}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.850280071s ago: executing program 1 (id=205): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.393421828s ago: executing program 2 (id=206): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) 1.228633951s ago: executing program 3 (id=207): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.007926394s ago: executing program 2 (id=208): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x4, 0x8) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 771.110918ms ago: executing program 2 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@loopback}, {@remote}]}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 748.932228ms ago: executing program 1 (id=210): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x3, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 670.813579ms ago: executing program 4 (id=211): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@grpquota}, {@nolazytime}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x56d, &(0x7f00000015c0)="$eJzs3d9rU1ccAPDvTX9o1c0KItseRsGHOZypbffDwR7c49hkwvbuQhuLNDXSpGI7YfowX3wZMhhjwtgfsPc9yv6B/RXCJsiQsr1m3PSmxjZpY02buHw+cPWc+6PnnHvuOffcnBsSwMCaSP/JRbweEd8lEUebtg1HtnFifb+1Jzdn0yWJWu2Lv5NIsnWN/ZPs/8NZ5LWI+P3biNO5relWVlYXCqVScSmLT1YXr01WVlbPXFkszBfni1enZ2bOvTcz/eEH73etrG9f/PfHzx98cu7uybUffn107F4S5+NItq25HC/gVnNkIiayczIS5zftONWFxPpJ0usMsCtDWTsfibQPOBpDWasH/v++iYgaMKAS7R8GVGMc0Hi279Jz8Evj8cfrD0Bbyz+8/tlIHKw/Gx1aS555Mkqfd8e7kH6axm9/3b+XLtG9zyEAdnTrdkScHR5e7/sONvV/Sdb/7d7ZDvbZnIb+D/bPg3T8806r8U9uY/wTLcY/h1u03d3Yuf3nHrU4LOnWp9Tp+O+jluPfjUmr8aEs9kp9zDeSXL5SKqZ926sRcSpGDqTx7eZzzq09rLXb1jz+S5c0/cZYMMvHo+EDzx4zV6gWXqTMzR7fjnij5fg32aj/pEX9p+fjYodpnCjef7Pdtp3Lv7dqv0S81bL+n85oJdvPT07Wr4fJxlWx1T93TvzRLv1elz+t/0Pbl388aZ6vrTx/Gj8fbD87uNvrfzT5sh4ezdbdKFSrS1MRo8lnW9dPPz22EW/sn5b/1Mnt+79W1/9YRHzVYfnvHL/Tdtd+qP+556r/5w88/PTrn9ql31n9v1sPncrWdNL/dZrBFzl3AAAAAAAA0G9yEXEkklx+I5zL5fPr73ccj0O5UrlSPX25vHx1LurflR2PkVxjpvto0/sQU9n7sI349Kb4TEQci4jvh8bq8fxsuTTX68IDAAAAAAAAAAAAAAAAAABAnzjc5vv/qT+HWh4yur85BPaUn/yGwbVj++/GLz0Bfcn9HwbXrtr/WPfzAew/938YUCO9zgDQS+7/MLi0fxhcHbX/1i8DAS85938AAAAAAAAAAAAAAAAAAAAAAAAAAADoqosXLqRLbe3Jzdk0Pnd9ZXmhfP3MXLGykF9cns3Plpeu5efL5flSMT9bXtzp75XK5WtT07F8Y7JarFQnKyurlxbLy1erl64sFuaLl4p+bQgAAAAAAAAAAAAAAAAAAAC2qqysLhRKpeKSwB4ExrKz3C/52YvAcH9kQ6ApcLcLrbuHnRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPJfAAAA//+FqTCn") bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000140)='./file1\x00', 0x14927e, 0x191) fallocate(r0, 0x0, 0xf17, 0x1001f0) open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x91) 440.589073ms ago: executing program 2 (id=212): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) 352.337124ms ago: executing program 3 (id=213): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x55e}}, {@delalloc}, {@abort}, {@nodelalloc}]}, 0x3, 0x57e, &(0x7f0000001280)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 121.359738ms ago: executing program 1 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 63.041159ms ago: executing program 5 (id=123): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 0s ago: executing program 5 (id=215): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 72.105987][ T4255] cgroup: Unknown subsys name 'net' [ 72.223545][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.706911][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.559990][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.578135][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.586944][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.597963][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.606118][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.613954][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.621590][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.628936][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.636141][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.643833][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.651409][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.659066][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.666984][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.674147][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.675886][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.681936][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.689510][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.696410][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.702844][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.710075][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.716563][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.723822][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.738311][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.738448][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.745570][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.753141][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.760144][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.767102][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.820807][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.838917][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.251182][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 76.274270][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 76.382614][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 76.428434][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 76.503337][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 76.548172][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.555306][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.563862][ T4274] device bridge_slave_0 entered promiscuous mode [ 76.588008][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.595118][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.603648][ T4277] device bridge_slave_0 entered promiscuous mode [ 76.615167][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.622669][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.631149][ T4274] device bridge_slave_1 entered promiscuous mode [ 76.655658][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.662912][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.671326][ T4277] device bridge_slave_1 entered promiscuous mode [ 76.731582][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.738921][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.746949][ T4270] device bridge_slave_0 entered promiscuous mode [ 76.776730][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.786046][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.793762][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.802202][ T4270] device bridge_slave_1 entered promiscuous mode [ 76.814185][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.823485][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.831139][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.839188][ T4265] device bridge_slave_0 entered promiscuous mode [ 76.848587][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.874795][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.884358][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.892257][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.900612][ T4265] device bridge_slave_1 entered promiscuous mode [ 76.959880][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.969328][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.976430][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.984658][ T4276] device bridge_slave_0 entered promiscuous mode [ 77.011282][ T4274] team0: Port device team_slave_0 added [ 77.019136][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.031377][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.040750][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.048261][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.056073][ T4276] device bridge_slave_1 entered promiscuous mode [ 77.065315][ T4277] team0: Port device team_slave_0 added [ 77.072887][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.083554][ T4274] team0: Port device team_slave_1 added [ 77.123953][ T4277] team0: Port device team_slave_1 added [ 77.156181][ T4270] team0: Port device team_slave_0 added [ 77.178514][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.185505][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.211706][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.225487][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.232843][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.259133][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.279881][ T4270] team0: Port device team_slave_1 added [ 77.287744][ T4265] team0: Port device team_slave_0 added [ 77.295461][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.327433][ T4265] team0: Port device team_slave_1 added [ 77.334770][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.345275][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.352620][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.378674][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.418158][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.425159][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.451348][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.472394][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.482206][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.508673][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.555759][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.563148][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.589477][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.601368][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.608382][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.634327][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.648443][ T4276] team0: Port device team_slave_0 added [ 77.666290][ T4274] device hsr_slave_0 entered promiscuous mode [ 77.673562][ T4274] device hsr_slave_1 entered promiscuous mode [ 77.684533][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.694475][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.720993][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.734097][ T4276] team0: Port device team_slave_1 added [ 77.742648][ T4277] device hsr_slave_0 entered promiscuous mode [ 77.749845][ T4277] device hsr_slave_1 entered promiscuous mode [ 77.756434][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.764528][ T4277] Cannot create hsr debugfs directory [ 77.867181][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.874534][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.878538][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 77.900916][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 77.906916][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 77.913013][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 77.919025][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 77.932117][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.950575][ T4270] device hsr_slave_0 entered promiscuous mode [ 77.958152][ T4270] device hsr_slave_1 entered promiscuous mode [ 77.964805][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.972559][ T4270] Cannot create hsr debugfs directory [ 77.984905][ T4265] device hsr_slave_0 entered promiscuous mode [ 77.992410][ T4265] device hsr_slave_1 entered promiscuous mode [ 77.999283][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.006855][ T4265] Cannot create hsr debugfs directory [ 78.020033][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.027008][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.053143][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.230269][ T4276] device hsr_slave_0 entered promiscuous mode [ 78.236947][ T4276] device hsr_slave_1 entered promiscuous mode [ 78.244129][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.251964][ T4276] Cannot create hsr debugfs directory [ 78.418368][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.445048][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.459444][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.469237][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.529092][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.561436][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.572992][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.586647][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.661463][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.669878][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.681268][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.692472][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.709504][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.724532][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.733799][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.743481][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.773601][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.784711][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.794187][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.801545][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.810337][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.819884][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.828654][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.835728][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.860405][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.883451][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.901509][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.932738][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.955043][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.965022][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.003147][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.012631][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.022583][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.035327][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.051518][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.080740][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.093212][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.103414][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.117021][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.146584][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.162041][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.173824][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.186391][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.217566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.227102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.236370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.244594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.257777][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.276376][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.289341][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.345312][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.354950][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.373392][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.380603][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.395372][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.405189][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.421097][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.428303][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.440325][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.453488][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.493766][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.505858][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.523828][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.534849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.550250][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.561264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.570644][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.633307][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.650917][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.662042][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.671788][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.680634][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.687820][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.695606][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.704458][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.712958][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.741376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.751008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.761894][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.769055][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.776962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.786467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.795075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.809839][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.822206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.830921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.850166][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.865163][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.885689][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.916873][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.938242][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.956738][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.964879][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 79.964925][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 79.964955][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 79.964984][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 79.967992][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 79.988541][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.034655][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.068861][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.076972][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.112109][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.131167][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.162849][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.174338][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.182961][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.195161][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.205269][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.223393][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.232449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.241727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.274630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.298944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.328071][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.335228][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.379022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.394136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.413495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.433346][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.440556][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.473152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.498141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.516386][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.523591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.536321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.545282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.561015][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.568228][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.576513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.586520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.610424][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.626438][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.661426][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.671534][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.681112][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.690418][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.700998][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.710307][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.736647][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.749896][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.761059][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.770582][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.786290][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.802341][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.812280][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.821347][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.840719][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.865654][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.891657][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.944703][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.955775][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.969286][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.978395][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.986825][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.996784][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.006250][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.015524][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.024086][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.032779][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.087150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.103676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.128616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.136210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.170099][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.205155][ T4274] device veth0_vlan entered promiscuous mode [ 81.225053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.235933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.248700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.258975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.278678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.299136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.337956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.346838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.360215][ T4274] device veth1_vlan entered promiscuous mode [ 81.390353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.408908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.430997][ T4277] device veth0_vlan entered promiscuous mode [ 81.454124][ T4270] device veth0_vlan entered promiscuous mode [ 81.467885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.475909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.528192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.559824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.570226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.579902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.606572][ T4277] device veth1_vlan entered promiscuous mode [ 81.649452][ T4274] device veth0_macvtap entered promiscuous mode [ 81.669561][ T4270] device veth1_vlan entered promiscuous mode [ 81.677631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.685912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.718739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.726982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.746677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.761245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.771674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.792023][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.810217][ T4274] device veth1_macvtap entered promiscuous mode [ 81.847391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.858980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.867851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.878534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.899222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.908440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.915954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.931941][ T4277] device veth0_macvtap entered promiscuous mode [ 81.946396][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.963752][ T4270] device veth0_macvtap entered promiscuous mode [ 81.981545][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.004958][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.016859][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.025988][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.037581][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 82.043637][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 82.051023][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.054094][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 82.059069][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 82.065017][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 82.079739][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.100728][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.122362][ T4270] device veth1_macvtap entered promiscuous mode [ 82.138633][ T4277] device veth1_macvtap entered promiscuous mode [ 82.179684][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.194721][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.204915][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.221108][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.241156][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.254820][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.265264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.281757][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294113][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303524][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.316604][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.382010][ T4265] device veth0_vlan entered promiscuous mode [ 82.390829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.400347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.413093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.422090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.431919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.440972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.452549][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.465802][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.477703][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.487189][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.499024][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.509161][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.520325][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.531957][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.558117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.566836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.577866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.586450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.604594][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.618711][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.630933][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.642003][ T4265] device veth1_vlan entered promiscuous mode [ 82.655056][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.666341][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.676456][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.690340][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.701656][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.709867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.718783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.728200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.739639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.748919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.770427][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.787441][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.797054][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.806845][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.831650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.840826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.852040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.881387][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.891405][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.901174][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.910775][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.931496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.940887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.965032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.976767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.986537][ T4276] device veth0_vlan entered promiscuous mode [ 83.004389][ T4265] device veth0_macvtap entered promiscuous mode [ 83.024975][ T4276] device veth1_vlan entered promiscuous mode [ 83.048953][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.059773][ T4265] device veth1_macvtap entered promiscuous mode [ 83.070813][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.108817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.117043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.126715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.135290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.144315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.165381][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.180989][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.191887][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.202371][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.215455][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.226156][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.238746][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.262487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.272460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.289853][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.300692][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.312755][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.323863][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.333787][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.344581][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.355875][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.377452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.386220][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.395775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.405030][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.416948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.431910][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.440964][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.450199][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.461289][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.494207][ T4276] device veth0_macvtap entered promiscuous mode [ 83.510384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.519340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.565403][ T4276] device veth1_macvtap entered promiscuous mode [ 83.570784][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.582296][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.593855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.601571][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.610409][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.616635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.645094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.653317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.706772][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.720950][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.731946][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.740276][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.755066][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.770137][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.782800][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.796792][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.823738][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.839277][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.851091][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.863511][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.874086][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.897303][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.914892][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.925733][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.936672][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.953441][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.975605][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.019478][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.034730][ T4388] Bluetooth: MGMT ver 1.22 [ 84.054852][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.064051][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.068806][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.080000][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.092026][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.095097][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.113317][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.121858][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 84.127942][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 84.132101][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 84.133958][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 84.140389][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 84.170384][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.186839][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.219240][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.233213][ T4390] loop4: detected capacity change from 0 to 128 [ 84.241381][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.254640][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.420764][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.487455][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.509198][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.564462][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.590906][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.664659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.664773][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.754423][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.774751][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.803909][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.858017][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.880468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.926692][ T4405] loop1: detected capacity change from 0 to 128 [ 85.005062][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.079631][ T4405] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.349525][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 85.527145][ T4420] loop4: detected capacity change from 0 to 4096 [ 85.599395][ T4425] process 'syz.3.17' launched './file1' with NULL argv: empty string added [ 85.610694][ T4420] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 85.697605][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.817360][ T4353] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.907195][ T4318] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 85.950362][ T4318] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 85.970268][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.998701][ T4318] usb 1-1: Product: syz [ 86.007072][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 86.017313][ T4353] usb 2-1: Using ep0 maxpacket: 16 [ 86.026027][ T4318] usb 1-1: Manufacturer: syz [ 86.031295][ T4353] usb 2-1: config 0 has no interfaces? [ 86.046341][ T4318] usb 1-1: SerialNumber: syz [ 86.053319][ T4353] usb 2-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 86.063508][ T4434] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.072092][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.072819][ T4434] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.081063][ T4353] usb 2-1: Product: syz [ 86.089974][ T4434] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.094777][ T4353] usb 2-1: Manufacturer: syz [ 86.102934][ T4434] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.122076][ T4318] usb 1-1: config 0 descriptor?? [ 86.134163][ T4353] usb 2-1: SerialNumber: syz [ 86.139936][ T4434] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.145513][ T4353] usb 2-1: config 0 descriptor?? [ 86.149174][ T4434] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.162840][ T4434] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.171825][ T4434] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.268351][ T4434] Zero length message leads to an empty skb [ 86.424313][ T4342] usb 2-1: USB disconnect, device number 2 [ 86.559017][ T4318] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 86.567502][ T128] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.581093][ T4318] asix: probe of 1-1:0.0 failed with error -71 [ 86.600644][ T4318] usb 1-1: USB disconnect, device number 2 [ 86.601306][ T27] cfg80211: failed to load regulatory.db [ 86.760188][ T128] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.773681][ T128] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.794285][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.804051][ T128] usb 4-1: Product: syz [ 86.810471][ T128] usb 4-1: Manufacturer: syz [ 86.815186][ T128] usb 4-1: SerialNumber: syz [ 87.254198][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 87.844719][ T128] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 87.851434][ T128] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 87.877134][ T4480] loop4: detected capacity change from 0 to 256 [ 87.882485][ T128] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 87.924989][ T4480] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 87.933457][ T4476] loop1: detected capacity change from 0 to 8192 [ 88.053117][ T128] cdc_ncm 4-1:1.0: setting tx_max = 136 [ 88.074029][ T4476] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.125090][ T128] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 88.140193][ T4476] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 88.150623][ T4476] REISERFS (device loop1): using ordered data mode [ 88.157174][ T4476] reiserfs: using flush barriers [ 88.172840][ T4476] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.208014][ T4476] REISERFS (device loop1): checking transaction log (loop1) [ 88.215610][ T128] usb 4-1: USB disconnect, device number 2 [ 88.289187][ T128] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 88.509160][ T4491] loop4: detected capacity change from 0 to 7 [ 88.527879][ T4440] Dev loop4: unable to read RDB block 7 [ 88.547340][ T4440] loop4: unable to read partition table [ 88.553204][ T4440] loop4: partition table beyond EOD, truncated [ 88.584127][ T4491] Dev loop4: unable to read RDB block 7 [ 88.584446][ T4476] REISERFS (device loop1): Using tea hash to sort names [ 88.615681][ T4491] loop4: unable to read partition table [ 88.623773][ T4476] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 88.649550][ T4491] loop4: partition table beyond EOD, truncated [ 88.683762][ T4491] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.995530][ T4476] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 2) not found (pos 4) [ 89.068416][ T4476] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 3) not found (pos 4) [ 89.527852][ T4488] loop2: detected capacity change from 0 to 40427 [ 89.570129][ T4488] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 89.638190][ T4488] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.694348][ T4488] F2FS-fs (loop2): invalid crc value [ 89.785466][ T4488] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.887434][ T4525] syz.3.51 uses obsolete (PF_INET,SOCK_PACKET) [ 89.949530][ T4525] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 89.955453][ T4525] syzkaller1: Linktype set failed because interface is up [ 89.969648][ T27] syzkaller1: tun_net_xmit 90 [ 89.980974][ T4488] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 90.001516][ T4488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.152646][ T4488] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 90.439369][ T4539] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.576588][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 91.597552][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.632044][ T4577] device hsr_slave_0 left promiscuous mode [ 91.666211][ T4577] device hsr_slave_1 left promiscuous mode [ 91.814882][ T4318] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.836201][ T4318] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.867106][ T4318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.886492][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 91.948263][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 91.987524][ T4318] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.996644][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.025575][ T4318] usb 3-1: Product: syz [ 92.037325][ T4318] usb 3-1: Manufacturer: syz [ 92.065136][ T4318] cdc_wdm 3-1:1.0: skipping garbage [ 92.093636][ T4318] cdc_wdm 3-1:1.0: skipping garbage [ 92.126513][ T4563] loop3: detected capacity change from 0 to 32768 [ 92.142374][ T4318] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 92.149704][ T4318] cdc_wdm 3-1:1.0: Unknown control protocol [ 92.173331][ T4563] ======================================================= [ 92.173331][ T4563] WARNING: The mand mount option has been deprecated and [ 92.173331][ T4563] and is ignored by this kernel. Remove the mand [ 92.173331][ T4563] option from the mount to silence this warning. [ 92.173331][ T4563] ======================================================= [ 92.358655][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 92.365517][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 92.375507][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 92.380950][ T4318] usb 3-1: USB disconnect, device number 2 [ 92.382139][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 92.394070][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 92.409217][ T4563] XFS (loop3): Mounting V5 Filesystem [ 92.563801][ T4563] XFS (loop3): Ending clean mount [ 92.601480][ T4563] XFS (loop3): Quotacheck needed: Please wait. [ 92.711856][ T4563] XFS (loop3): Quotacheck: Done. [ 92.936690][ T4276] XFS (loop3): Unmounting Filesystem [ 92.973734][ T4586] loop4: detected capacity change from 0 to 32768 [ 93.032157][ T4586] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.70 (4586) [ 93.135075][ T4586] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 93.203849][ T4586] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 93.254937][ T4586] BTRFS info (device loop4): using free space tree [ 93.553483][ T4586] BTRFS info (device loop4): enabling ssd optimizations [ 93.772766][ T4608] loop1: detected capacity change from 0 to 40427 [ 93.789782][ T4643] loop0: detected capacity change from 0 to 256 [ 93.832095][ T4608] F2FS-fs (loop1): invalid crc value [ 93.863247][ T4643] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 93.884099][ T4608] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.962020][ T26] audit: type=1804 audit(1751999839.010:2): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.70" name="/newroot/24/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 94.108327][ T4608] F2FS-fs (loop1): Start checkpoint disabled! [ 94.195509][ T4608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 94.743620][ T4274] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 95.004028][ T4669] netlink: 'syz.0.88': attribute type 6 has an invalid length. [ 95.036473][ T11] kworker/u4:1: attempt to access beyond end of device [ 95.036473][ T11] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.056006][ T4648] syz.3.81 (4648): drop_caches: 2 [ 95.342097][ T4678] loop3: detected capacity change from 0 to 2048 [ 95.392542][ T4678] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.403388][ T4678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.419618][ T4678] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.504508][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 95.538818][ T4682] loop2: detected capacity change from 0 to 512 [ 95.629378][ T4686] loop0: detected capacity change from 0 to 512 [ 95.731172][ T4682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.770909][ T4682] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.805399][ T4686] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.835314][ T4697] sctp: [Deprecated]: syz.4.97 (pid 4697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.835314][ T4697] Use struct sctp_sack_info instead [ 95.854524][ T4686] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.897465][ T4667] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.065372][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 96.092980][ T4667] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.107304][ T4667] usb 4-1: config 1 has no interface number 0 [ 96.150739][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 96.159859][ T4667] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.211961][ T4667] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 96.221844][ T4667] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.249218][ T4667] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.268770][ T4667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.303913][ T4667] usb 4-1: Product: syz [ 96.318620][ T4667] usb 4-1: Manufacturer: syz [ 96.333102][ T4667] usb 4-1: SerialNumber: syz [ 96.426119][ T4712] loop0: detected capacity change from 0 to 2048 [ 96.490289][ T4712] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.507516][ T4712] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.532962][ T4706] loop1: detected capacity change from 0 to 4096 [ 96.596745][ T4708] loop4: detected capacity change from 0 to 8192 [ 96.678729][ T4708] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.855814][ T4708] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 96.888481][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 96.909850][ T4708] REISERFS (device loop4): using ordered data mode [ 96.916457][ T4708] reiserfs: using flush barriers [ 96.980938][ T4708] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.044114][ T4708] REISERFS (device loop4): checking transaction log (loop4) [ 97.087129][ T4708] REISERFS (device loop4): Using r5 hash to sort names [ 97.101567][ T4708] REISERFS (device loop4): using 3.5.x disk format [ 97.123445][ T4708] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 97.175698][ T4667] cdc_ncm 4-1:1.1: bind() failure [ 97.383647][ T3652] usb 4-1: USB disconnect, device number 3 [ 97.402220][ T4734] loop0: detected capacity change from 0 to 128 [ 97.495687][ T4734] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 97.519889][ T4734] FAT-fs (loop0): Filesystem has been set read-only [ 97.744740][ T4265] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 97.899308][ T26] audit: type=1326 audit(1751999842.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.4.114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd22778e929 code=0x0 [ 98.261729][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.441549][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.564817][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.729844][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.441262][ T4756] syz.1.124 (4756): drop_caches: 2 [ 99.450087][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.468566][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.478350][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.486943][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.494840][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.507463][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.531855][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.714451][ T4782] loop1: detected capacity change from 0 to 64 [ 99.735900][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 99.762686][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.807548][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.847332][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.882055][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.932953][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.952485][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.081290][ T4780] loop4: detected capacity change from 0 to 32768 [ 100.099567][ T4780] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.133 (4780) [ 100.134397][ T4780] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 100.147790][ T4780] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 100.171275][ T4780] BTRFS info (device loop4): using free space tree [ 100.265160][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 100.276520][ T27] usbtmc 4-1:16.0: can't read capabilities [ 100.476651][ T27] usb 4-1: USB disconnect, device number 4 [ 100.514578][ T4780] BTRFS info (device loop4): enabling ssd optimizations [ 100.675368][ T4777] chnl_net:caif_netlink_parms(): no params data found [ 100.779594][ T4825] input: syz0 as /devices/virtual/input/input5 [ 100.847655][ T4274] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 101.542043][ T4850] loop3: detected capacity change from 0 to 128 [ 101.557486][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 101.594428][ T4826] loop2: detected capacity change from 0 to 32768 [ 101.637701][ T4850] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.671938][ T4777] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.699741][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.715585][ T4777] device bridge_slave_0 entered promiscuous mode [ 101.883913][ T4826] find_entry called with index = 0 [ 101.936917][ T4826] read_mapping_page failed! [ 101.980983][ T4777] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.992237][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.994327][ T4356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.018206][ T4826] ERROR: (device loop2): txCommit: [ 102.018206][ T4826] [ 102.043735][ T4777] device bridge_slave_1 entered promiscuous mode [ 102.136670][ T11] device hsr_slave_0 left promiscuous mode [ 102.183405][ T11] device hsr_slave_1 left promiscuous mode [ 102.193066][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.247525][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.298909][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.316527][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.368402][ T11] device bridge_slave_1 left promiscuous mode [ 102.373048][ T4861] loop4: detected capacity change from 0 to 256 [ 102.375611][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.437367][ T11] device bridge_slave_0 left promiscuous mode [ 102.452346][ T4861] exfat: Deprecated parameter 'namecase' [ 102.453784][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.491527][ T4861] exfat: Deprecated parameter 'utf8' [ 102.545821][ T4861] exfat: Deprecated parameter 'namecase' [ 102.551851][ T4861] exfat: Deprecated parameter 'utf8' [ 102.596188][ T4861] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 102.612813][ T11] device veth1_macvtap left promiscuous mode [ 102.632692][ T11] device veth0_macvtap left promiscuous mode [ 102.660857][ T11] device veth1_vlan left promiscuous mode [ 102.673737][ T11] device veth0_vlan left promiscuous mode [ 103.205173][ T4864] loop3: detected capacity change from 0 to 32768 [ 103.267930][ T4864] XFS (loop3): Mounting V5 Filesystem [ 103.358744][ T4864] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 103.389716][ T4864] XFS (loop3): Starting recovery (logdev: internal) [ 103.434116][ T4864] XFS (loop3): Ending recovery (logdev: internal) [ 103.506576][ T4868] loop4: detected capacity change from 0 to 40427 [ 103.520789][ T4868] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 103.528654][ T4868] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 103.543823][ T4868] F2FS-fs (loop4): invalid crc value [ 103.574930][ T4868] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.636256][ T4276] XFS (loop3): Unmounting Filesystem [ 103.641921][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 103.712929][ T4868] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 103.733203][ T4868] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.778899][ T4868] syz.4.155: attempt to access beyond end of device [ 103.778899][ T4868] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.230245][ T11] team0 (unregistering): Port device team_slave_1 removed [ 104.369225][ T11] team0 (unregistering): Port device team_slave_0 removed [ 104.485296][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.613926][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.237028][ T4907] loop2: detected capacity change from 0 to 32768 [ 105.249382][ T4907] XFS: ikeep mount option is deprecated. [ 105.306725][ T4907] XFS (loop2): Mounting V5 Filesystem [ 105.327917][ T11] bond0 (unregistering): Released all slaves [ 105.389708][ T4907] XFS (loop2): Ending clean mount [ 105.406276][ T4907] XFS (loop2): Quotacheck needed: Please wait. [ 105.458981][ T4907] XFS (loop2): Quotacheck: Done. [ 105.559845][ T4777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.612349][ T4777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.717377][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 105.740191][ T4270] XFS (loop2): Unmounting Filesystem [ 105.852231][ T4777] team0: Port device team_slave_0 added [ 105.899146][ T4777] team0: Port device team_slave_1 added [ 106.058884][ T4777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.065885][ T4777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.172228][ T4926] loop1: detected capacity change from 0 to 2048 [ 106.205704][ T4777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.238548][ T4777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.245560][ T4777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.353788][ T4777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.446953][ T4932] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.584505][ T4777] device hsr_slave_0 entered promiscuous mode [ 106.648161][ T4777] device hsr_slave_1 entered promiscuous mode [ 106.890933][ T4948] loop3: detected capacity change from 0 to 512 [ 106.998980][ T4948] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.175: casefold flag without casefold feature [ 107.108155][ T4948] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.175: couldn't read orphan inode 15 (err -117) [ 107.150086][ T4948] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.428980][ T4777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.480351][ T4777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.514332][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 107.527356][ T3652] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.540455][ T4777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.578281][ T4777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.684400][ T4968] input: syz1 as /devices/virtual/input/input6 [ 107.727368][ T3652] usb 5-1: Using ep0 maxpacket: 16 [ 107.731653][ T4356] wlan1: Trigger new scan to find an IBSS to join [ 107.742948][ T3652] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.786807][ T3652] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.797787][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 107.827378][ T3652] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.834246][ T3652] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 107.854525][ T3652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.886687][ T3652] usb 5-1: config 0 descriptor?? [ 107.955784][ T4777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.031822][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.058469][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.090038][ T4777] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.131495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.148090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.177037][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.184216][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.215832][ T4980] loop3: detected capacity change from 0 to 4096 [ 108.253667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.268180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.308800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.323238][ T3652] apple 0003:05AC:0247.0001: unexpected long global item [ 108.366409][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.373659][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.377581][ T3652] apple 0003:05AC:0247.0001: parse failed [ 108.424974][ T3652] apple: probe of 0003:05AC:0247.0001 failed with error -22 [ 108.429356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.453273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.514719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.523625][ T3652] usb 5-1: USB disconnect, device number 2 [ 108.552350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.573806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.620490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.705596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.732857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.748461][ T4276] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 108.769802][ T4276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 108.778145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.807638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.826747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.868457][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.492195][ T5011] loop4: detected capacity change from 0 to 164 [ 109.553707][ T5011] Unable to read rock-ridge attributes [ 109.645357][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.684193][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.737009][ T4995] loop3: detected capacity change from 0 to 32768 [ 109.822471][ T4777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.824747][ T26] audit: type=1800 audit(1751999854.870:4): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 109.861300][ T5011] Unable to read rock-ridge attributes [ 109.984285][ T26] audit: type=1800 audit(1751999854.930:5): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 110.131453][ T5018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 110.270931][ T5021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 110.529626][ T5028] input: syz1 as /devices/virtual/input/input8 [ 110.758535][ T4356] wlan1: Trigger new scan to find an IBSS to join [ 111.322731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.348338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.403240][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.426491][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.464694][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.486311][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.547777][ T4777] device veth0_vlan entered promiscuous mode [ 111.567382][ T4666] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 111.615966][ T4777] device veth1_vlan entered promiscuous mode [ 111.645255][ T5056] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 111.699814][ T5056] device bond1 entered promiscuous mode [ 111.705808][ T5056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.768833][ T5061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.775831][ T5061] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 111.788910][ T4666] usb 5-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.827431][ T5061] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 111.834214][ T4666] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.841545][ T5061] bond1: (slave ip6gre1): making interface the new active one [ 111.851314][ T5061] device ip6gre1 entered promiscuous mode [ 111.857435][ T4666] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 111.860090][ T5061] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 111.867878][ T4666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.912523][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.934266][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.951875][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 111.969518][ T4666] usb 5-1: config 0 descriptor?? [ 112.014316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.026222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.058323][ T4777] device veth0_macvtap entered promiscuous mode [ 112.086851][ T4777] device veth1_macvtap entered promiscuous mode [ 112.116540][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.128516][ T5067] loop3: detected capacity change from 0 to 1024 [ 112.138933][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.177645][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.202155][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.243920][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.275402][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.307966][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.353150][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.389261][ T4777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.404777][ T4666] lg-g15 0003:046D:C227.0002: unknown main item tag 0x1 [ 112.414742][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.433154][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.464890][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.493590][ T4666] lg-g15 0003:046D:C227.0002: hidraw0: USB HID v1.01 Device [HID 046d:c227] on usb-dummy_hcd.4-1/input0 [ 112.516411][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.538630][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.562459][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.593249][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.669081][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.718465][ T5079] loop4: detected capacity change from 0 to 1024 [ 112.727426][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.773615][ T5079] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.806666][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.846964][ T4777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.935234][ T5079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.042017][ T4837] usb 5-1: USB disconnect, device number 3 [ 113.092789][ T4777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.159598][ T4777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.168645][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.189865][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.224448][ T4777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.242158][ T5078] fido_id[5078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 113.253703][ T4777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.291656][ T4777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.320996][ T4777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.357486][ T5089] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 113.418585][ T5074] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 113.485422][ T5089] device bond2 entered promiscuous mode [ 113.517806][ T5089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.622941][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 113.660724][ T5092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.669725][ T5092] bond2: (slave bond3): making interface the new active one [ 113.677100][ T5092] device bond3 entered promiscuous mode [ 113.700166][ T5092] bond2: (slave bond3): Enslaving as an active interface with an up link [ 113.736070][ T33] wlan1: Trigger new scan to find an IBSS to join [ 113.745525][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 113.884793][ T5111] netlink: 104 bytes leftover after parsing attributes in process `syz.1.210'. [ 113.936861][ T5114] loop4: detected capacity change from 0 to 1024 [ 113.976357][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.999558][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.010061][ T5114] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.061970][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.090037][ T5119] loop3: detected capacity change from 0 to 1024 [ 114.105466][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.120861][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.130093][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.180764][ T26] audit: type=1800 audit(1751999859.230:6): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.211" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 114.233688][ T5119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.359651][ T5119] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.213: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 114.384915][ T5129] [ 114.387312][ T5129] ===================================================== [ 114.394274][ T5129] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 114.401762][ T5129] 6.1.143-syzkaller #0 Not tainted [ 114.406881][ T5129] ----------------------------------------------------- [ 114.413821][ T5129] syz.5.215/5129 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 114.421402][ T5129] ffff888078744b30 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x360 [ 114.430251][ T5129] [ 114.430251][ T5129] and this task is already holding: [ 114.437630][ T5129] ffff88802ba9f0c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x18e/0x4b0 [ 114.446382][ T5129] which would create a new lock dependency: [ 114.452285][ T5129] (&new->fa_lock){....}-{2:2} -> (&f->f_owner.lock){....}-{2:2} [ 114.460182][ T5129] [ 114.460182][ T5129] but this new dependency connects a HARDIRQ-irq-safe lock: [ 114.469654][ T5129] (&dev->event_lock#2){-...}-{2:2} [ 114.469689][ T5129] [ 114.469689][ T5129] ... which became HARDIRQ-irq-safe at: [ 114.482602][ T5129] lock_acquire+0x1b4/0x490 [ 114.487222][ T5129] _raw_spin_lock_irqsave+0xa4/0xf0 [ 114.492539][ T5129] input_event+0x76/0xb0 [ 114.496911][ T5129] psmouse_report_standard_packet+0x4f/0x200 [ 114.503000][ T5129] psmouse_process_byte+0x42b/0x620 [ 114.508301][ T5129] psmouse_handle_byte+0x43/0x490 [ 114.513426][ T5129] psmouse_interrupt+0x699/0x1130 [ 114.518548][ T5129] serio_interrupt+0x87/0x130 [ 114.523340][ T5129] i8042_interrupt+0x36b/0x720 [ 114.528195][ T5129] __handle_irq_event_percpu+0x298/0xa30 [ 114.533919][ T5129] handle_irq_event+0x87/0x1e0 [ 114.538775][ T5129] handle_edge_irq+0x243/0xb20 [ 114.543630][ T5129] __common_interrupt+0xd7/0x1e0 [ 114.548663][ T5129] common_interrupt+0xb0/0xd0 [ 114.553441][ T5129] asm_common_interrupt+0x22/0x40 [ 114.558565][ T5129] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 114.564382][ T5129] i8042_aux_write+0x105/0x170 [ 114.569241][ T5129] ps2_do_sendbyte+0x1fb/0x6c0 [ 114.574104][ T5129] ps2_sendbyte+0x5b/0x110 [ 114.578618][ T5129] cypress_send_ext_cmd+0x239/0x910 [ 114.583929][ T5129] cypress_detect+0x89/0x190 [ 114.588613][ T5129] psmouse_extensions+0xda5/0x1510 [ 114.593823][ T5129] psmouse_switch_protocol+0x300/0x820 [ 114.599386][ T5129] psmouse_connect+0x8d3/0x1490 [ 114.604335][ T5129] serio_driver_probe+0x76/0x90 [ 114.609281][ T5129] really_probe+0x2aa/0xc70 [ 114.613877][ T5129] __driver_probe_device+0x18c/0x330 [ 114.619257][ T5129] driver_probe_device+0x4f/0x420 [ 114.624372][ T5129] __driver_attach+0x44a/0x6e0 [ 114.629226][ T5129] bus_for_each_dev+0x175/0x1e0 [ 114.634177][ T5129] serio_handle_event+0x29c/0x840 [ 114.639294][ T5129] process_one_work+0x898/0x1160 [ 114.644324][ T5129] worker_thread+0xaa2/0x1250 [ 114.649093][ T5129] kthread+0x29d/0x330 [ 114.653286][ T5129] ret_from_fork+0x1f/0x30 [ 114.657823][ T5129] [ 114.657823][ T5129] to a HARDIRQ-irq-unsafe lock: [ 114.664844][ T5129] (tasklist_lock){.+.+}-{2:2} [ 114.664874][ T5129] [ 114.664874][ T5129] ... which became HARDIRQ-irq-unsafe at: [ 114.677507][ T5129] ... [ 114.677513][ T5129] lock_acquire+0x1b4/0x490 [ 114.684697][ T5129] _raw_read_lock+0x32/0x40 [ 114.689290][ T5129] do_wait+0x2b6/0xb60 [ 114.693460][ T5129] kernel_wait+0xa8/0x160 [ 114.697891][ T5129] call_usermodehelper_exec_work+0xb5/0x220 [ 114.703894][ T5129] process_one_work+0x898/0x1160 [ 114.708925][ T5129] worker_thread+0xaa2/0x1250 [ 114.713706][ T5129] kthread+0x29d/0x330 [ 114.717876][ T5129] ret_from_fork+0x1f/0x30 [ 114.722398][ T5129] [ 114.722398][ T5129] other info that might help us debug this: [ 114.722398][ T5129] [ 114.732626][ T5129] Chain exists of: [ 114.732626][ T5129] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 114.732626][ T5129] [ 114.745590][ T5129] Possible interrupt unsafe locking scenario: [ 114.745590][ T5129] [ 114.753913][ T5129] CPU0 CPU1 [ 114.759280][ T5129] ---- ---- [ 114.764644][ T5129] lock(tasklist_lock); [ 114.768894][ T5129] local_irq_disable(); [ 114.775647][ T5129] lock(&dev->event_lock#2); [ 114.782868][ T5129] lock(&new->fa_lock); [ 114.789634][ T5129] [ 114.793091][ T5129] lock(&dev->event_lock#2); [ 114.797958][ T5129] [ 114.797958][ T5129] *** DEADLOCK *** [ 114.797958][ T5129] [ 114.806104][ T5129] 8 locks held by syz.5.215/5129: [ 114.811131][ T5129] #0: ffff888029633110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x177/0x470 [ 114.820286][ T5129] #1: ffff8881473da230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xa7/0x310 [ 114.830426][ T5129] #2: ffffffff8cb2aaa0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xb8/0x310 [ 114.840104][ T5129] #3: ffffffff8cb2aaa0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x1300 [ 114.849787][ T5129] #4: ffffffff8cb2aaa0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x75/0x320 [ 114.858937][ T5129] #5: ffff88805466b028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 114.869124][ T5129] #6: ffffffff8cb2aaa0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x4f/0x4b0 [ 114.878189][ T5129] #7: ffff88802ba9f0c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x18e/0x4b0 [ 114.887339][ T5129] [ 114.887339][ T5129] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 114.897753][ T5129] -> (&dev->event_lock#2){-...}-{2:2} { [ 114.903498][ T5129] IN-HARDIRQ-W at: [ 114.907655][ T5129] lock_acquire+0x1b4/0x490 [ 114.914165][ T5129] _raw_spin_lock_irqsave+0xa4/0xf0 [ 114.921366][ T5129] input_event+0x76/0xb0 [ 114.927612][ T5129] psmouse_report_standard_packet+0x4f/0x200 [ 114.935599][ T5129] psmouse_process_byte+0x42b/0x620 [ 114.942802][ T5129] psmouse_handle_byte+0x43/0x490 [ 114.949843][ T5129] psmouse_interrupt+0x699/0x1130 [ 114.956875][ T5129] serio_interrupt+0x87/0x130 [ 114.963557][ T5129] i8042_interrupt+0x36b/0x720 [ 114.970325][ T5129] __handle_irq_event_percpu+0x298/0xa30 [ 114.977960][ T5129] handle_irq_event+0x87/0x1e0 [ 114.984732][ T5129] handle_edge_irq+0x243/0xb20 [ 114.991500][ T5129] __common_interrupt+0xd7/0x1e0 [ 114.998448][ T5129] common_interrupt+0xb0/0xd0 [ 115.005133][ T5129] asm_common_interrupt+0x22/0x40 [ 115.012161][ T5129] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 115.019887][ T5129] i8042_aux_write+0x105/0x170 [ 115.026653][ T5129] ps2_do_sendbyte+0x1fb/0x6c0 [ 115.033425][ T5129] ps2_sendbyte+0x5b/0x110 [ 115.039861][ T5129] cypress_send_ext_cmd+0x239/0x910 [ 115.047060][ T5129] cypress_detect+0x89/0x190 [ 115.053653][ T5129] psmouse_extensions+0xda5/0x1510 [ 115.060772][ T5129] psmouse_switch_protocol+0x300/0x820 [ 115.068239][ T5129] psmouse_connect+0x8d3/0x1490 [ 115.075100][ T5129] serio_driver_probe+0x76/0x90 [ 115.081958][ T5129] really_probe+0x2aa/0xc70 [ 115.088466][ T5129] __driver_probe_device+0x18c/0x330 [ 115.095769][ T5129] driver_probe_device+0x4f/0x420 [ 115.102806][ T5129] __driver_attach+0x44a/0x6e0 [ 115.109578][ T5129] bus_for_each_dev+0x175/0x1e0 [ 115.116437][ T5129] serio_handle_event+0x29c/0x840 [ 115.123469][ T5129] process_one_work+0x898/0x1160 [ 115.130436][ T5129] worker_thread+0xaa2/0x1250 [ 115.137114][ T5129] kthread+0x29d/0x330 [ 115.143192][ T5129] ret_from_fork+0x1f/0x30 [ 115.149622][ T5129] INITIAL USE at: [ 115.153692][ T5129] lock_acquire+0x1b4/0x490 [ 115.160113][ T5129] _raw_spin_lock_irqsave+0xa4/0xf0 [ 115.167231][ T5129] input_inject_event+0xa7/0x310 [ 115.174093][ T5129] led_trigger_event+0x12f/0x210 [ 115.180951][ T5129] kbd_led_trigger_activate+0xb9/0x100 [ 115.188333][ T5129] led_trigger_set+0x504/0x900 [ 115.195022][ T5129] led_trigger_set_default+0x19c/0x1e0 [ 115.202401][ T5129] led_classdev_register_ext+0x5d3/0x7a0 [ 115.209952][ T5129] input_leds_connect+0x4e7/0x6b0 [ 115.216906][ T5129] input_register_device+0xdfd/0x1310 [ 115.224197][ T5129] atkbd_connect+0x6e9/0x980 [ 115.230701][ T5129] serio_driver_probe+0x76/0x90 [ 115.237468][ T5129] really_probe+0x2aa/0xc70 [ 115.243889][ T5129] __driver_probe_device+0x18c/0x330 [ 115.251085][ T5129] driver_probe_device+0x4f/0x420 [ 115.258031][ T5129] __driver_attach+0x44a/0x6e0 [ 115.264713][ T5129] bus_for_each_dev+0x175/0x1e0 [ 115.271489][ T5129] serio_handle_event+0x29c/0x840 [ 115.278525][ T5129] process_one_work+0x898/0x1160 [ 115.285381][ T5129] worker_thread+0xaa2/0x1250 [ 115.291991][ T5129] kthread+0x29d/0x330 [ 115.297986][ T5129] ret_from_fork+0x1f/0x30 [ 115.304322][ T5129] } [ 115.306993][ T5129] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 115.316204][ T5129] -> (&client->buffer_lock){....}-{2:2} { [ 115.322072][ T5129] INITIAL USE at: [ 115.326083][ T5129] lock_acquire+0x1b4/0x490 [ 115.332359][ T5129] _raw_spin_lock+0x2a/0x40 [ 115.338618][ T5129] evdev_pass_values+0xcb/0xab0 [ 115.345240][ T5129] evdev_events+0x1d4/0x320 [ 115.351509][ T5129] input_pass_values+0x907/0x1300 [ 115.358306][ T5129] input_event_dispose+0x346/0x6c0 [ 115.365171][ T5129] input_inject_event+0x1f5/0x310 [ 115.371960][ T5129] evdev_write+0x326/0x470 [ 115.378136][ T5129] vfs_write+0x2c4/0x960 [ 115.384134][ T5129] ksys_write+0x143/0x240 [ 115.390205][ T5129] do_syscall_64+0x4c/0xa0 [ 115.396382][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.404022][ T5129] } [ 115.406609][ T5129] ... key at: [] evdev_open.__key.29+0x0/0x20 [ 115.414887][ T5129] ... acquired at: [ 115.418773][ T5129] _raw_spin_lock+0x2a/0x40 [ 115.423458][ T5129] evdev_pass_values+0xcb/0xab0 [ 115.428488][ T5129] evdev_events+0x1d4/0x320 [ 115.433174][ T5129] input_pass_values+0x907/0x1300 [ 115.438382][ T5129] input_event_dispose+0x346/0x6c0 [ 115.443677][ T5129] input_inject_event+0x1f5/0x310 [ 115.448904][ T5129] evdev_write+0x326/0x470 [ 115.453515][ T5129] vfs_write+0x2c4/0x960 [ 115.457946][ T5129] ksys_write+0x143/0x240 [ 115.462465][ T5129] do_syscall_64+0x4c/0xa0 [ 115.467075][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.473152][ T5129] [ 115.475479][ T5129] -> (&new->fa_lock){....}-{2:2} { [ 115.480616][ T5129] INITIAL USE at: [ 115.484514][ T5129] lock_acquire+0x1b4/0x490 [ 115.490593][ T5129] _raw_write_lock_irq+0x9f/0xe0 [ 115.497100][ T5129] fasync_remove_entry+0xf0/0x1c0 [ 115.503711][ T5129] lease_modify+0x1a2/0x390 [ 115.509785][ T5129] locks_remove_file+0x492/0xdf0 [ 115.516303][ T5129] __fput+0x188/0x920 [ 115.521858][ T5129] task_work_run+0x1ca/0x250 [ 115.528018][ T5129] exit_to_user_mode_loop+0xe6/0x110 [ 115.534882][ T5129] exit_to_user_mode_prepare+0xb1/0x140 [ 115.542003][ T5129] syscall_exit_to_user_mode+0x16/0x40 [ 115.549042][ T5129] do_syscall_64+0x58/0xa0 [ 115.555033][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.562505][ T5129] INITIAL READ USE at: [ 115.566840][ T5129] lock_acquire+0x1b4/0x490 [ 115.573351][ T5129] _raw_read_lock_irqsave+0xac/0xf0 [ 115.580557][ T5129] kill_fasync+0x18e/0x4b0 [ 115.586987][ T5129] sock_wake_async+0x128/0x150 [ 115.593761][ T5129] sk_wake_async+0x184/0x280 [ 115.600374][ T5129] sock_def_readable+0x1a7/0x280 [ 115.607317][ T5129] mptcp_data_ready+0x33c/0x620 [ 115.614188][ T5129] tcp_data_queue+0x21a8/0x59e0 [ 115.621052][ T5129] tcp_rcv_established+0xdef/0x1d30 [ 115.628263][ T5129] tcp_v4_do_rcv+0x48d/0xb00 [ 115.634874][ T5129] __release_sock+0x1b9/0x420 [ 115.641558][ T5129] release_sock+0x5b/0x1b0 [ 115.648002][ T5129] __mptcp_push_pending+0x21b/0x980 [ 115.655219][ T5129] mptcp_sendmsg+0xa8a/0x1730 [ 115.661902][ T5129] sock_write_iter+0x2b5/0x3a0 [ 115.668677][ T5129] do_iter_write+0x62d/0xaf0 [ 115.675272][ T5129] do_writev+0x24e/0x410 [ 115.681520][ T5129] do_syscall_64+0x4c/0xa0 [ 115.687942][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.695836][ T5129] } [ 115.698339][ T5129] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 115.707025][ T5129] ... acquired at: [ 115.710836][ T5129] _raw_read_lock_irqsave+0xac/0xf0 [ 115.716214][ T5129] kill_fasync+0x18e/0x4b0 [ 115.720816][ T5129] evdev_pass_values+0x54b/0xab0 [ 115.725939][ T5129] evdev_events+0x1d4/0x320 [ 115.730622][ T5129] input_pass_values+0x907/0x1300 [ 115.735833][ T5129] input_event_dispose+0x346/0x6c0 [ 115.741158][ T5129] input_inject_event+0x1f5/0x310 [ 115.746368][ T5129] evdev_write+0x326/0x470 [ 115.750962][ T5129] vfs_write+0x2c4/0x960 [ 115.755379][ T5129] ksys_write+0x143/0x240 [ 115.759882][ T5129] do_syscall_64+0x4c/0xa0 [ 115.764480][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.770572][ T5129] [ 115.772902][ T5129] [ 115.772902][ T5129] the dependencies between the lock to be acquired [ 115.772910][ T5129] and HARDIRQ-irq-unsafe lock: [ 115.786442][ T5129] -> (tasklist_lock){.+.+}-{2:2} { [ 115.791667][ T5129] HARDIRQ-ON-R at: [ 115.795741][ T5129] lock_acquire+0x1b4/0x490 [ 115.802170][ T5129] _raw_read_lock+0x32/0x40 [ 115.808503][ T5129] do_wait+0x2b6/0xb60 [ 115.814413][ T5129] kernel_wait+0xa8/0x160 [ 115.820596][ T5129] call_usermodehelper_exec_work+0xb5/0x220 [ 115.828328][ T5129] process_one_work+0x898/0x1160 [ 115.835100][ T5129] worker_thread+0xaa2/0x1250 [ 115.841608][ T5129] kthread+0x29d/0x330 [ 115.847518][ T5129] ret_from_fork+0x1f/0x30 [ 115.853781][ T5129] SOFTIRQ-ON-R at: [ 115.857858][ T5129] lock_acquire+0x1b4/0x490 [ 115.864191][ T5129] _raw_read_lock+0x32/0x40 [ 115.870527][ T5129] do_wait+0x2b6/0xb60 [ 115.876436][ T5129] kernel_wait+0xa8/0x160 [ 115.882605][ T5129] call_usermodehelper_exec_work+0xb5/0x220 [ 115.890340][ T5129] process_one_work+0x898/0x1160 [ 115.897109][ T5129] worker_thread+0xaa2/0x1250 [ 115.903618][ T5129] kthread+0x29d/0x330 [ 115.909525][ T5129] ret_from_fork+0x1f/0x30 [ 115.915777][ T5129] INITIAL USE at: [ 115.919762][ T5129] lock_acquire+0x1b4/0x490 [ 115.926019][ T5129] _raw_write_lock_irq+0x9f/0xe0 [ 115.932701][ T5129] copy_process+0x2531/0x4020 [ 115.939118][ T5129] kernel_clone+0x225/0x8b0 [ 115.945363][ T5129] user_mode_thread+0xda/0x130 [ 115.951867][ T5129] rest_init+0x23/0x300 [ 115.957769][ T5129] start_kernel+0x0/0x539 [ 115.963844][ T5129] start_kernel+0x490/0x539 [ 115.970095][ T5129] secondary_startup_64_no_verify+0xcf/0xdb [ 115.977743][ T5129] INITIAL READ USE at: [ 115.982165][ T5129] lock_acquire+0x1b4/0x490 [ 115.988851][ T5129] _raw_read_lock+0x32/0x40 [ 115.995531][ T5129] do_wait+0x2b6/0xb60 [ 116.001789][ T5129] kernel_wait+0xa8/0x160 [ 116.008307][ T5129] call_usermodehelper_exec_work+0xb5/0x220 [ 116.016384][ T5129] process_one_work+0x898/0x1160 [ 116.023499][ T5129] worker_thread+0xaa2/0x1250 [ 116.030353][ T5129] kthread+0x29d/0x330 [ 116.036626][ T5129] ret_from_fork+0x1f/0x30 [ 116.043230][ T5129] } [ 116.045821][ T5129] ... key at: [] tasklist_lock+0x18/0x40 [ 116.053644][ T5129] ... acquired at: [ 116.057533][ T5129] _raw_read_lock+0x32/0x40 [ 116.062215][ T5129] send_sigurg+0xec/0x3c0 [ 116.066731][ T5129] sk_send_sigurg+0x6b/0xc0 [ 116.071506][ T5129] queue_oob+0x3d3/0x4d0 [ 116.075957][ T5129] unix_stream_sendmsg+0x8c2/0xa60 [ 116.081261][ T5129] ____sys_sendmsg+0x59b/0x970 [ 116.086218][ T5129] ___sys_sendmsg+0x21c/0x290 [ 116.091086][ T5129] __sys_sendmmsg+0x272/0x490 [ 116.095960][ T5129] __x64_sys_sendmmsg+0x9c/0xb0 [ 116.101004][ T5129] do_syscall_64+0x4c/0xa0 [ 116.105603][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.111679][ T5129] [ 116.114021][ T5129] -> (&f->f_owner.lock){....}-{2:2} { [ 116.119416][ T5129] INITIAL USE at: [ 116.123311][ T5129] lock_acquire+0x1b4/0x490 [ 116.129388][ T5129] _raw_write_lock_irq+0x9f/0xe0 [ 116.135899][ T5129] __f_setown+0x37/0x330 [ 116.141719][ T5129] generic_setlease+0xf2c/0x13c0 [ 116.148244][ T5129] fcntl_setlease+0x25e/0x330 [ 116.154500][ T5129] do_fcntl+0x10c/0x11c0 [ 116.160334][ T5129] __se_sys_fcntl+0xc9/0x190 [ 116.166502][ T5129] do_syscall_64+0x4c/0xa0 [ 116.172491][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.179955][ T5129] INITIAL READ USE at: [ 116.184293][ T5129] lock_acquire+0x1b4/0x490 [ 116.190805][ T5129] _raw_read_lock_irqsave+0xac/0xf0 [ 116.198009][ T5129] send_sigio+0x2f/0x360 [ 116.204259][ T5129] kill_fasync+0x224/0x4b0 [ 116.210683][ T5129] sock_wake_async+0x128/0x150 [ 116.217454][ T5129] sk_wake_async+0x184/0x280 [ 116.224047][ T5129] sock_def_readable+0x1a7/0x280 [ 116.230992][ T5129] mptcp_data_ready+0x33c/0x620 [ 116.237857][ T5129] tcp_data_queue+0x21a8/0x59e0 [ 116.244756][ T5129] tcp_rcv_established+0xdef/0x1d30 [ 116.251965][ T5129] tcp_v4_do_rcv+0x48d/0xb00 [ 116.258578][ T5129] __release_sock+0x1b9/0x420 [ 116.265261][ T5129] release_sock+0x5b/0x1b0 [ 116.271678][ T5129] __mptcp_push_pending+0x21b/0x980 [ 116.278921][ T5129] mptcp_sendmsg+0xa8a/0x1730 [ 116.285629][ T5129] sock_write_iter+0x2b5/0x3a0 [ 116.292421][ T5129] do_iter_write+0x62d/0xaf0 [ 116.299024][ T5129] do_writev+0x24e/0x410 [ 116.305282][ T5129] do_syscall_64+0x4c/0xa0 [ 116.311719][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.319621][ T5129] } [ 116.322120][ T5129] ... key at: [] __alloc_file.__key+0x0/0x10 [ 116.330198][ T5129] ... acquired at: [ 116.334001][ T5129] _raw_read_lock_irqsave+0xac/0xf0 [ 116.339385][ T5129] send_sigio+0x2f/0x360 [ 116.343811][ T5129] kill_fasync+0x224/0x4b0 [ 116.348416][ T5129] evdev_pass_values+0x54b/0xab0 [ 116.353536][ T5129] evdev_events+0x1d4/0x320 [ 116.358222][ T5129] input_pass_values+0x907/0x1300 [ 116.363432][ T5129] input_event_dispose+0x346/0x6c0 [ 116.368726][ T5129] input_inject_event+0x1f5/0x310 [ 116.373936][ T5129] evdev_write+0x326/0x470 [ 116.378537][ T5129] vfs_write+0x2c4/0x960 [ 116.382956][ T5129] ksys_write+0x143/0x240 [ 116.387466][ T5129] do_syscall_64+0x4c/0xa0 [ 116.392065][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.398144][ T5129] [ 116.400470][ T5129] [ 116.400470][ T5129] stack backtrace: [ 116.406373][ T5129] CPU: 0 PID: 5129 Comm: syz.5.215 Not tainted 6.1.143-syzkaller #0 [ 116.414456][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.424534][ T5129] Call Trace: [ 116.427821][ T5129] [ 116.430780][ T5129] dump_stack_lvl+0x168/0x22e [ 116.435471][ T5129] ? load_image+0x3b0/0x3b0 [ 116.439986][ T5129] ? show_regs_print_info+0x12/0x12 [ 116.445194][ T5129] ? load_image+0x3b0/0x3b0 [ 116.449719][ T5129] ? print_shortest_lock_dependencies+0xf0/0x160 [ 116.456068][ T5129] __lock_acquire+0x660b/0x7c50 [ 116.460947][ T5129] ? verify_lock_unused+0x140/0x140 [ 116.466167][ T5129] ? verify_lock_unused+0x140/0x140 [ 116.471405][ T5129] lock_acquire+0x1b4/0x490 [ 116.475957][ T5129] ? send_sigio+0x2f/0x360 [ 116.480412][ T5129] ? read_lock_is_recursive+0x10/0x10 [ 116.485814][ T5129] ? read_lock_is_recursive+0x10/0x10 [ 116.491207][ T5129] _raw_read_lock_irqsave+0xac/0xf0 [ 116.496418][ T5129] ? send_sigio+0x2f/0x360 [ 116.500849][ T5129] ? _raw_read_lock+0x40/0x40 [ 116.505533][ T5129] ? do_raw_read_lock+0x39/0x80 [ 116.510403][ T5129] ? _raw_read_lock_irqsave+0xb8/0xf0 [ 116.515790][ T5129] ? _raw_read_lock+0x40/0x40 [ 116.520563][ T5129] send_sigio+0x2f/0x360 [ 116.524823][ T5129] kill_fasync+0x224/0x4b0 [ 116.529251][ T5129] ? kill_fasync+0x4f/0x4b0 [ 116.533770][ T5129] evdev_pass_values+0x54b/0xab0 [ 116.538731][ T5129] ? evdev_pass_values+0x501/0xab0 [ 116.543938][ T5129] evdev_events+0x1d4/0x320 [ 116.548557][ T5129] ? evdev_events+0x75/0x320 [ 116.553155][ T5129] ? evdev_event+0xd0/0xd0 [ 116.557581][ T5129] input_pass_values+0x907/0x1300 [ 116.562708][ T5129] ? input_pass_values+0xa3/0x1300 [ 116.567860][ T5129] input_event_dispose+0x346/0x6c0 [ 116.572983][ T5129] input_inject_event+0x1f5/0x310 [ 116.578021][ T5129] ? input_inject_event+0xb8/0x310 [ 116.583149][ T5129] evdev_write+0x326/0x470 [ 116.587577][ T5129] ? evdev_read+0xb40/0xb40 [ 116.592086][ T5129] ? end_current_label_crit_section+0x14b/0x170 [ 116.598357][ T5129] ? common_file_perm+0x171/0x1c0 [ 116.603396][ T5129] ? fsnotify_perm+0x5a/0x550 [ 116.608088][ T5129] ? security_file_permission+0x75/0xa0 [ 116.613645][ T5129] ? evdev_read+0xb40/0xb40 [ 116.618164][ T5129] vfs_write+0x2c4/0x960 [ 116.622414][ T5129] ? file_end_write+0x250/0x250 [ 116.627281][ T5129] ? __fget_files+0x28/0x4d0 [ 116.631923][ T5129] ? __fget_files+0x44a/0x4d0 [ 116.636629][ T5129] ? __fdget_pos+0x1d4/0x360 [ 116.641254][ T5129] ? ksys_write+0x71/0x240 [ 116.645679][ T5129] ksys_write+0x143/0x240 [ 116.650020][ T5129] ? __ia32_sys_read+0x80/0x80 [ 116.654795][ T5129] ? lockdep_hardirqs_on+0x94/0x140 [ 116.660014][ T5129] do_syscall_64+0x4c/0xa0 [ 116.664448][ T5129] ? clear_bhb_loop+0x60/0xb0 [ 116.669148][ T5129] ? clear_bhb_loop+0x60/0xb0 [ 116.673838][ T5129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.679740][ T5129] RIP: 0033:0x7fb09f78e929 [ 116.684173][ T5129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.703879][ T5129] RSP: 002b:00007fb0a068a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.712330][ T5129] RAX: ffffffffffffffda RBX: 00007fb09f9b5fa0 RCX: 00007fb09f78e929 [ 116.720311][ T5129] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 116.728378][ T5129] RBP: 00007fb09f810b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.736359][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.744352][ T5129] R13: 0000000000000000 R14: 00007fb09f9b5fa0 R15: 00007ffe014fce58 [ 116.752338][ T5129] [ 116.792947][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 116.851448][ T5119] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 116.900406][ T5119] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.213: Deleting old file: nlink 4, error=-117 [ 117.022163][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 117.102468][ T4790] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00