last executing test programs: 7.008538328s ago: executing program 3 (id=197): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x81, 0x80000000, 0x47, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x700, 0x8, 0x3, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x15, 0x2, 0x80000000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) symlinkat(&(0x7f0000000440)='./file0\x00', r8, &(0x7f00000000c0)='./file0\x00') sync() sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2, 0x8}}) io_setup(0xea, &(0x7f00000000c0)) 5.952294754s ago: executing program 3 (id=201): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000004c0)={0x0, 0x30, 0x6, "b5a7bede8711"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000940)={0x0, 0x5, 0x4, "de2cbaaf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.416470913s ago: executing program 1 (id=211): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TCSBRKP(r0, 0x5425, 0x6) r1 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.901820007s ago: executing program 0 (id=212): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x81, 0x80000000, 0x47, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x700, 0x8, 0x3, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x15, 0x2, 0x80000000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) symlinkat(&(0x7f0000000440)='./file0\x00', r7, &(0x7f00000000c0)='./file0\x00') sync() sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) io_setup(0xea, &(0x7f00000000c0)) 3.761347707s ago: executing program 2 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000180), 0x400000) 3.35257613s ago: executing program 1 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000001c0)) 3.091658351s ago: executing program 3 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 2.997507992s ago: executing program 0 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x40000000}]}, 0x5c}}, 0x0) 2.976633782s ago: executing program 4 (id=218): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c3"], 0x30}}, 0x0) 2.852666993s ago: executing program 1 (id=219): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x80001088, 0x73}, 0x2c) 2.785956413s ago: executing program 3 (id=220): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$eJzs209u00AUx/Gf4xAn5V+hwAIhtRISsGrTAJXY0aOE1lQoBiRg04pF6QU4A+diwwHIArFBXTBo/CcFuzahYI9Rvp+F7fq9Gb+RNfU4UQRgYT3Wmjx56tg/bvWX3694Fdnd5goDUDuT7r+bOX30pHlzAbSc/y3Zr7kuBEDDptsa2Of/5y9vd+T3ZuuC7Gi6LR1m8U5QWD9M30k3u1L81uD1k85+Xl98kO5m7b2lfPOv9szSLH4+F+7F/d+7nV3/gi7qki5rWVd0VSvp9Xdn7W/86fKnOCAAABaAp/XfxUsSzsXbgZ4+i8Kh/GLCkwdxlo1vlvbfi+Ojyri/Wl5fELdf33kZ7VYNA8ApOmee/wnfzr+jYUVG9fwH4M7r/YPJOIrCVy046P9ajwmk05IlfTKr0l9eNGjDkP/fg0D5M93JODLpBypz9WPvdyE0KG11pP1jY0wuZDupf8jH5t92eJg/Y1fTzu/pwcQ/KcP1fyYAddt4cyf9JuD5eC/cC1+MhsNHWw/vb26NNuI3+2TrukwANTh5+ruuBAAAAAAAAAAAAAAAnNU1XXddAgAAAICGNPG7ItdjBACgdX4EAAD//5qhEmQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x6000, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="fae1", 0x2}], 0x1, 0x783f, 0x9, 0x3) 2.771277553s ago: executing program 0 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000027c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x1}, {0xc, 0x7}, {0x4}, {0x4}, {0x9, 0x6}, {0x5, 0x3}], "e1011506903eb00c"}}]}, 0x34}, 0x1, 0x0, 0x0, 0xbc1ade7217a9ca8c}, 0x20008880) 2.725191984s ago: executing program 2 (id=222): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4d, &(0x7f0000000980)={@random="0f68f1e7312e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x17, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"5738ce"}}}}}}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x1a, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800}, {"056f56e983d7"}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.664335174s ago: executing program 4 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x44}}, 0x0) 2.596253364s ago: executing program 1 (id=224): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f00000000c0)) 2.460527145s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x28, 0x0, &(0x7f0000000780)) sched_setscheduler(0x0, 0x1, 0x0) getpid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0xc0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x142}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x8001, 0xd) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x7a, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @random="d492e7256c63", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[@dstopts], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @private1, @private2}}}}}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000e80)={0xa, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x8, @mcast2, 0x3}}, {{0xa, 0x4e20, 0x5, @empty, 0x3ff}}, {{0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}}}, {{0xa, 0x4e22, 0x2, @private2, 0x8000}}, {{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0}}]}, 0x310) shmget(0x0, 0x3000, 0x1, &(0x7f000037d000/0x3000)=nil) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 2.270869796s ago: executing program 3 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.270683736s ago: executing program 4 (id=227): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a1, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) 2.173549727s ago: executing program 2 (id=228): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 1.980980778s ago: executing program 3 (id=229): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.925219799s ago: executing program 2 (id=230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) 1.834798229s ago: executing program 4 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) 1.716589549s ago: executing program 2 (id=232): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x804000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.545273031s ago: executing program 2 (id=233): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x8, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x4, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xbffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x10000004, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0xc, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x4, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffff, 0xb1e, 0x5, 0x200, 0xffff3441, 0x40fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.525754311s ago: executing program 0 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x7c, r1, 0x1, 0x70bd2b, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x5e, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x650}, @device_b, @device_a, @initial, {0x8, 0x6}}, 0x3, @random=0x3, 0x84, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x4, 0x34, 0x2, 0x9}}, @void, @void, @val={0x25, 0x3, {0x1, 0x38, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x3, 0x2, 0x0, {0x3, 0x445, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x6, 0x4}}, @void, @void, @void}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 1.432653261s ago: executing program 4 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 1.354018332s ago: executing program 0 (id=236): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.246632223s ago: executing program 4 (id=237): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000000140)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@journal_async_commit}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4719, &(0x7f0000008f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 570.981426ms ago: executing program 1 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000008f11"], 0xc9) 0s ago: executing program 1 (id=239): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) r1 = io_uring_setup(0x64e0, &(0x7f0000000a00)={0x0, 0x25f7, 0x40, 0x2, 0x38c}) close(r1) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 67.140363][ T4254] cgroup: Unknown subsys name 'net' [ 67.275041][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.709851][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.645533][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.653330][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.655701][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.662726][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.668974][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.675988][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.683686][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.689992][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.696604][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.703720][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.711165][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.717822][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.724467][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.731472][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.739878][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.744954][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.760092][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.760212][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.767335][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.774843][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.782063][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.790023][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.795488][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.802823][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.809488][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.816453][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.830036][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.830515][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.837813][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.854690][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.317908][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 71.334607][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 71.382136][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388994][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.403168][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 71.500034][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 71.547653][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.554914][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.563720][ T4266] device bridge_slave_0 entered promiscuous mode [ 71.584973][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 71.610361][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.617473][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.626396][ T4266] device bridge_slave_1 entered promiscuous mode [ 71.634046][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.641271][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.649370][ T4265] device bridge_slave_0 entered promiscuous mode [ 71.686465][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.693903][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.702076][ T4265] device bridge_slave_1 entered promiscuous mode [ 71.725693][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.732996][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.741255][ T4280] device bridge_slave_0 entered promiscuous mode [ 71.782801][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.790052][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.797905][ T4280] device bridge_slave_1 entered promiscuous mode [ 71.806812][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.823300][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.840869][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.848054][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.856217][ T4272] device bridge_slave_0 entered promiscuous mode [ 71.873071][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.887010][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.905899][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.913214][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.921628][ T4272] device bridge_slave_1 entered promiscuous mode [ 71.970675][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.991505][ T4266] team0: Port device team_slave_0 added [ 72.000506][ T4265] team0: Port device team_slave_0 added [ 72.015515][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.033253][ T4266] team0: Port device team_slave_1 added [ 72.040521][ T4265] team0: Port device team_slave_1 added [ 72.054799][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.072704][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.080231][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.088200][ T4275] device bridge_slave_0 entered promiscuous mode [ 72.115657][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.134768][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.142169][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.150468][ T4275] device bridge_slave_1 entered promiscuous mode [ 72.165225][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.172530][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.198978][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.219723][ T4280] team0: Port device team_slave_0 added [ 72.232815][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.240144][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.266241][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.286111][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.293184][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.319487][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.340481][ T4280] team0: Port device team_slave_1 added [ 72.347993][ T4272] team0: Port device team_slave_0 added [ 72.363563][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.370815][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.396823][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.413694][ T4272] team0: Port device team_slave_1 added [ 72.429974][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.448644][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.508032][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.515268][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.541292][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.577030][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.584170][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.610305][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.622055][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.629076][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.655022][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.670079][ T4266] device hsr_slave_0 entered promiscuous mode [ 72.676872][ T4266] device hsr_slave_1 entered promiscuous mode [ 72.686388][ T4265] device hsr_slave_0 entered promiscuous mode [ 72.693683][ T4265] device hsr_slave_1 entered promiscuous mode [ 72.700628][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.708741][ T4265] Cannot create hsr debugfs directory [ 72.716531][ T4275] team0: Port device team_slave_0 added [ 72.724660][ T4275] team0: Port device team_slave_1 added [ 72.730897][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.737858][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.764081][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.830123][ T4280] device hsr_slave_0 entered promiscuous mode [ 72.836940][ T4280] device hsr_slave_1 entered promiscuous mode [ 72.843752][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.851832][ T4280] Cannot create hsr debugfs directory [ 72.869458][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.876537][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.899554][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 72.902703][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 72.908940][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 72.914627][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 72.927651][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.964185][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.971285][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.997944][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 73.004102][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.058140][ T4272] device hsr_slave_0 entered promiscuous mode [ 73.065322][ T4272] device hsr_slave_1 entered promiscuous mode [ 73.072690][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.080579][ T4272] Cannot create hsr debugfs directory [ 73.137450][ T4275] device hsr_slave_0 entered promiscuous mode [ 73.144447][ T4275] device hsr_slave_1 entered promiscuous mode [ 73.151793][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.159588][ T4275] Cannot create hsr debugfs directory [ 73.426384][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.440325][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.449533][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.460806][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.511090][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.523699][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.534832][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.558075][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.633925][ T4280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.646111][ T4280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.663800][ T4280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.690285][ T4280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.724795][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.765910][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.775747][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.790160][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.805944][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.821471][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.832111][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.841985][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.862342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.873497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.882827][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.890213][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.921997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.930579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.940604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.951088][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.958167][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.993519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.004213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.013342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.024450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.035773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.061037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.073499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.090418][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.104263][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.115974][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.135013][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.146225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.156150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.171083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.180939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.195935][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.210704][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.226289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.236225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.260461][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.273635][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.312108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.326077][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.335608][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.342809][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.352603][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.362852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.372384][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.379561][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.387685][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.398257][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.407774][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.437895][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.457990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.466222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.475152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.484510][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.494657][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.501829][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.512140][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.543770][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.555485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.565579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.593424][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.611720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.621700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.630899][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.638052][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.646647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.685084][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.697630][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.712370][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.721152][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.730369][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.738887][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.753027][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.767396][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.785642][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.799340][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.810309][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.819992][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.827859][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.837216][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.846180][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.855082][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.862279][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.886998][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.897782][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.917422][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.932241][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.943455][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.955049][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.965242][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.978103][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.986181][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 74.986217][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 74.986244][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 74.992274][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 75.015181][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.025328][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.036079][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.045470][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.054239][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.063074][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 75.070288][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.079430][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.086550][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.094726][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.112679][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.135266][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.166048][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.194940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.231144][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.251906][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.273493][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.297212][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.326291][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.360252][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.387489][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.410713][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.426056][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.434526][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.443783][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.453812][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.463323][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.472493][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.485567][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.504246][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.520380][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.549072][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.556251][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.615274][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.645053][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.660364][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.667913][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.683678][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.709312][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.728708][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.735869][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.745686][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.828642][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.837570][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.855358][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.865259][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.875040][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.884630][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.894236][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.905917][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.915191][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.924153][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.933750][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.953532][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.964729][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.005936][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.029052][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.044910][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.064913][ T4265] device veth0_vlan entered promiscuous mode [ 76.094181][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.105503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.120553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.135062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.176402][ T4265] device veth1_vlan entered promiscuous mode [ 76.185426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.197835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.208269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.217534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.227359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.286462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.296562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.306046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.315622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.325059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.333938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.342906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.351391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.360365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.371254][ T4280] device veth0_vlan entered promiscuous mode [ 76.381527][ T4266] device veth0_vlan entered promiscuous mode [ 76.396027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.410387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.441107][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.455901][ T4265] device veth0_macvtap entered promiscuous mode [ 76.468302][ T4266] device veth1_vlan entered promiscuous mode [ 76.479674][ T4280] device veth1_vlan entered promiscuous mode [ 76.487495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.505281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.514016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.523053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.532485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.546316][ T4265] device veth1_macvtap entered promiscuous mode [ 76.599864][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.620282][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.633264][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.651425][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.670099][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.680263][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.689622][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.698211][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.707109][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.715137][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.729920][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.740611][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.750397][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.759265][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.784456][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.794595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.804394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.813888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.827034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.841560][ T4272] device veth0_vlan entered promiscuous mode [ 76.850034][ T4280] device veth0_macvtap entered promiscuous mode [ 76.871729][ T4266] device veth0_macvtap entered promiscuous mode [ 76.879656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.888237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.897122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.907070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.916771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.925119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.954857][ T4266] device veth1_macvtap entered promiscuous mode [ 76.964820][ T4280] device veth1_macvtap entered promiscuous mode [ 77.007406][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.015890][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.027609][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.036689][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.058213][ T4272] device veth1_vlan entered promiscuous mode [ 77.064539][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 77.070655][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 77.070681][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 77.076665][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 77.101507][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.112556][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.125037][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.138928][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 77.141846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.155954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.165506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.174424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.183629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.200914][ T4275] device veth0_vlan entered promiscuous mode [ 77.231604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.240586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.248338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.265402][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.275966][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.288123][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.295923][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.309621][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.319932][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.330508][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.342725][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.357342][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.368209][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.379297][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.391401][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.403177][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.421076][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.429588][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.442619][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.455780][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.467464][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.476563][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.486229][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.495187][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.505674][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.517336][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.526542][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.535545][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.545821][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.558322][ T4275] device veth1_vlan entered promiscuous mode [ 77.582933][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.594716][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.603623][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.613555][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.623997][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.643646][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.652601][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.668781][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.676881][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.704454][ T4272] device veth0_macvtap entered promiscuous mode [ 77.736374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.746219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.757319][ T4272] device veth1_macvtap entered promiscuous mode [ 77.826913][ T4275] device veth0_macvtap entered promiscuous mode [ 77.844823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.854533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.863837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.893414][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.904963][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.910402][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.926301][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.928569][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.936934][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.956535][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.967254][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.980062][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.990047][ T4275] device veth1_macvtap entered promiscuous mode [ 77.997515][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.008691][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.019053][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.030474][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.040564][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.051619][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.063972][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.072754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.081769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.090244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.098176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.107843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.117380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.132374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.190048][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.207264][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.216353][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.229975][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.316032][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.340394][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.350780][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.361301][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.371264][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.382101][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.395271][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.406497][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.419639][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.440136][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.448162][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.466528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.475508][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.484573][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.484940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.507037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.520323][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.534830][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.547145][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.566799][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.577013][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.588364][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.599584][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.610360][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.628606][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.668560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.681944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.694284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.710199][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.724661][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.734070][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.759246][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.793348][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.803610][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.842766][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.951359][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.964597][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.008795][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.016828][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.039720][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.078207][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.115781][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.126908][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.127727][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.146531][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.157775][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 79.163865][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 79.170400][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 79.221858][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.230264][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 79.302981][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.345637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.582732][ T4402] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 79.696502][ T4406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9'. [ 79.726123][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.734640][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.374558][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 80.818981][ T4326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.028740][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 81.044638][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.075442][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.095110][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 81.116306][ T4326] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.160288][ T4326] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.207973][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.246908][ T4326] usb 3-1: config 0 descriptor?? [ 81.704775][ T4326] HID 045e:07da: Invalid code 65791 type 1 [ 81.731830][ T4326] HID 045e:07da: Invalid code 768 type 1 [ 81.737555][ T4326] HID 045e:07da: Invalid code 769 type 1 [ 81.775439][ T4326] HID 045e:07da: Invalid code 770 type 1 [ 81.802790][ T4326] HID 045e:07da: Invalid code 771 type 1 [ 81.813948][ T4326] HID 045e:07da: Invalid code 772 type 1 [ 81.839439][ T4326] HID 045e:07da: Invalid code 773 type 1 [ 81.855318][ T4326] HID 045e:07da: Invalid code 774 type 1 [ 81.881261][ T4326] HID 045e:07da: Invalid code 775 type 1 [ 81.886968][ T4326] HID 045e:07da: Invalid code 776 type 1 [ 81.981071][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 82.041381][ T4326] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 82.176962][ T4326] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 82.255110][ T4326] usb 3-1: USB disconnect, device number 2 [ 82.577367][ T4503] fido_id[4503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 83.377699][ T4530] loop3: detected capacity change from 0 to 512 [ 83.430236][ T4530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.436910][ T4530] EXT4-fs: Ignoring removed bh option [ 83.520014][ T4530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.562682][ T4535] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use) [ 83.585730][ T4536] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 83.606222][ T4536] netlink: 'syz.4.54': attribute type 6 has an invalid length. [ 83.616063][ T4530] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 83.633878][ T4536] netlink: 52 bytes leftover after parsing attributes in process `syz.4.54'. [ 83.639615][ T4530] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #11: comm syz.3.51: corrupted inode contents [ 83.728568][ T4530] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #11: comm syz.3.51: mark_inode_dirty error [ 83.769493][ T4530] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.51: invalid indirect mapped block 1 (level 1) [ 83.795806][ T4530] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #11: comm syz.3.51: corrupted inode contents [ 83.859104][ T4530] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 83.898821][ T4530] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #11: comm syz.3.51: corrupted inode contents [ 83.920806][ T4530] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.51: mark_inode_dirty error [ 83.968586][ T4530] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 83.999804][ T4530] EXT4-fs (loop3): 1 truncate cleaned up [ 84.005627][ T4530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.070882][ T4545] loop2: detected capacity change from 0 to 128 [ 84.470483][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 84.873710][ T4326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.974937][ T4576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 85.014116][ T4576] bond0: ARP target 170.170.170.170 is already present [ 85.021819][ T4576] bond0: option arp_ip_target: invalid value (2863311530) [ 85.088646][ T4326] usb 1-1: Using ep0 maxpacket: 8 [ 85.104023][ T4326] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 85.125918][ T4326] usb 1-1: config 179 has no interface number 0 [ 85.142724][ T4326] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 85.164203][ T4326] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 85.204135][ T4326] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.208637][ T4334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.220946][ T4326] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 85.242165][ T4326] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 85.262021][ T4326] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 85.272698][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.296183][ T4558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.438522][ T4334] usb 5-1: Using ep0 maxpacket: 8 [ 85.445095][ T4334] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 85.477900][ T4334] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.498389][ T4334] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.558603][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.560259][ T4334] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.602097][ T4326] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 85.631101][ T4334] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.691682][ T4334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.745243][ T4594] Bluetooth: MGMT ver 1.22 [ 85.788571][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 85.810131][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 85.835037][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.850540][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.862641][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.876323][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.886138][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.933842][ T4334] usb 5-1: GET_CAPABILITIES returned 0 [ 85.940076][ T4334] usbtmc 5-1:16.0: can't read capabilities [ 86.012989][ T4326] usb 1-1: USB disconnect, device number 2 [ 86.019255][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 86.019320][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 86.077636][ T4589] loop1: detected capacity change from 0 to 32768 [ 86.120251][ T4589] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.76 (4589) [ 86.158119][ T4589] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.170979][ T7] usb 3-1: GET_CAPABILITIES returned 0 [ 86.173908][ T4334] usb 5-1: USB disconnect, device number 2 [ 86.176582][ T7] usbtmc 3-1:16.0: can't read capabilities [ 86.200748][ T4589] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 86.246893][ T4589] BTRFS info (device loop1): setting nodatacow, compression disabled [ 86.271383][ T4589] BTRFS info (device loop1): turning on flush-on-commit [ 86.285094][ T4589] BTRFS info (device loop1): enabling auto defrag [ 86.308288][ T4589] BTRFS info (device loop1): trying to use backup root at mount time [ 86.317054][ T4589] BTRFS info (device loop1): turning on async discard [ 86.324278][ T4589] BTRFS info (device loop1): using free space tree [ 86.388271][ T4359] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 86.423832][ T4326] usb 3-1: USB disconnect, device number 3 [ 86.431390][ T4589] BTRFS error (device loop1): failed to load root extent [ 86.445557][ T4589] BTRFS warning (device loop1): try to load backup roots slot 1 [ 86.476695][ T56] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 86.495944][ T4589] BTRFS warning (device loop1): couldn't read tree root [ 86.517160][ T4589] BTRFS warning (device loop1): try to load backup roots slot 2 [ 86.540775][ T4589] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 86.563041][ T4589] BTRFS warning (device loop1): couldn't read tree root [ 86.576024][ T4589] BTRFS warning (device loop1): try to load backup roots slot 3 [ 86.618828][ T4589] BTRFS info (device loop1): enabling ssd optimizations [ 86.626802][ T4589] BTRFS info (device loop1): rebuilding free space tree [ 86.693688][ T4589] BTRFS info (device loop1): checking UUID tree [ 86.741835][ T41] cfg80211: failed to load regulatory.db [ 87.156018][ T4272] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.788652][ T4326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.988727][ T4326] usb 4-1: Using ep0 maxpacket: 8 [ 88.000556][ T4326] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 88.018213][ T4326] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.047628][ T4326] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.065148][ T4326] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.087620][ T4326] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.097343][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.353144][ T4326] usb 4-1: GET_CAPABILITIES returned 0 [ 88.372731][ T4326] usbtmc 4-1:16.0: can't read capabilities [ 88.467683][ T4657] loop4: detected capacity change from 0 to 32768 [ 88.485538][ T4657] ======================================================= [ 88.485538][ T4657] WARNING: The mand mount option has been deprecated and [ 88.485538][ T4657] and is ignored by this kernel. Remove the mand [ 88.485538][ T4657] option from the mount to silence this warning. [ 88.485538][ T4657] ======================================================= [ 88.582156][ T4326] usb 4-1: USB disconnect, device number 2 [ 88.637946][ T4657] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 88.738667][ T4648] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.768384][ T4687] loop2: detected capacity change from 0 to 512 [ 88.780800][ T4657] (syz.4.92,4657,0):ocfs2_remove_inode_range:1794 ERROR: status = -22 [ 88.819531][ T4657] (syz.4.92,4657,0):__ocfs2_change_file_space:2045 ERROR: status = -22 [ 88.833703][ T4687] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.854136][ T4687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.920237][ T4687] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.104: corrupted inode contents [ 88.940215][ T4648] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 88.958612][ T4648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.984965][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 88.992031][ T4648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.002372][ T4687] EXT4-fs error (device loop2): ext4_dirty_inode:6133: inode #16: comm syz.2.104: mark_inode_dirty error [ 89.007959][ T4266] ocfs2: Unmounting device (7,4) on (node local) [ 89.028830][ T4648] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 89.043438][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 89.063269][ T4687] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.104: corrupted inode contents [ 89.082347][ T4648] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 89.108576][ T4648] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 89.116729][ T4648] usb 2-1: Manufacturer: syz [ 89.122179][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 89.135529][ T4687] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.104: mark_inode_dirty error [ 89.156585][ T4648] usb 2-1: config 0 descriptor?? [ 89.193028][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 89.218298][ T4687] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.104: corrupted inode contents [ 89.278309][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 89.287337][ T4687] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 89.343110][ T4700] autofs4:pid:4700:autofs_fill_super: called with bogus options [ 89.357643][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 89.417736][ T4687] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.104: corrupted inode contents [ 89.581782][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 89.645206][ T4687] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.104: mark_inode_dirty error [ 89.660657][ T4648] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 89.698840][ T4648] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 89.726959][ T4648] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 89.747272][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 89.807553][ T4687] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 89.940797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.968615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 89.982736][ T4687] EXT4-fs (loop2): Remounting filesystem read-only [ 90.016339][ T4687] EXT4-fs (loop2): 1 truncate cleaned up [ 90.069778][ T56] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.157777][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:4: Failed to release dquot type 1 [ 90.213104][ T4326] usb 2-1: USB disconnect, device number 2 [ 90.277562][ T56] EXT4-fs (loop2): Remounting filesystem read-only [ 90.306594][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.469764][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 90.545150][ T4712] fido_id[4712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 90.601214][ T4717] loop3: detected capacity change from 0 to 2048 [ 90.657911][ T4717] loop3: p1 < > p4 [ 90.670513][ T4717] loop3: p4 size 8388608 extends beyond EOD, truncated [ 91.086955][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 91.111471][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 91.161542][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 91.174767][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 91.249610][ T4731] device syzkaller1 entered promiscuous mode [ 91.535147][ T4738] loop1: detected capacity change from 0 to 2048 [ 91.615629][ T4738] loop1: p1 < > p4 [ 91.638826][ T4738] loop1: p4 size 8388608 extends beyond EOD, truncated [ 91.742591][ T4738] syz.1.120: attempt to access beyond end of device [ 91.742591][ T4738] loop1p1: rw=2048, sector=0, nr_sectors = 8 limit=2 [ 91.785034][ T4738] SQUASHFS error: Failed to read block 0x0: -5 [ 91.981106][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 92.221063][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 92.243110][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 92.296744][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 92.311172][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 92.874048][ T4774] syz.2.133[4774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.874155][ T4774] syz.2.133[4774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.168491][ T4648] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.176176][ T4787] loop3: detected capacity change from 0 to 2048 [ 93.255407][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.306874][ T4792] loop0: detected capacity change from 0 to 128 [ 93.349434][ T4648] usb 2-1: Using ep0 maxpacket: 32 [ 93.351233][ T4792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.357729][ T4648] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 93.374293][ T4648] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 93.391245][ T4787] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.408086][ T4648] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 93.421176][ T4792] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.437238][ T4648] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 93.461883][ T4787] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 93.483712][ T4787] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.483712][ T4787] [ 93.498021][ T4787] EXT4-fs (loop3): Total free blocks count 0 [ 93.498801][ T4648] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.510229][ T4787] EXT4-fs (loop3): Free/Dirty block details [ 93.516918][ T4787] EXT4-fs (loop3): free_blocks=2415919104 [ 93.523404][ T4787] EXT4-fs (loop3): dirty_blocks=16 [ 93.528806][ T4787] EXT4-fs (loop3): Block reservation details [ 93.535203][ T4787] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 93.547740][ T4787] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 93.572283][ T4648] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.586508][ T4648] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.595654][ T4648] usb 2-1: Product: syz [ 93.622344][ T4648] usb 2-1: Manufacturer: syz [ 93.627021][ T4648] usb 2-1: SerialNumber: syz [ 93.633434][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 93.642491][ T4648] usb 2-1: config 0 descriptor?? [ 93.656864][ T4648] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.691917][ T4648] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 93.726258][ T4647] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.788951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.808585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.818446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.826732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.918970][ T4647] usb 3-1: Using ep0 maxpacket: 16 [ 93.994237][ T4804] autofs4:pid:4804:autofs_fill_super: called with bogus options [ 94.017227][ T4647] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 94.038047][ T4647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.088679][ T4647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.107661][ T4418] usb 2-1: USB disconnect, device number 3 [ 94.126338][ T4418] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 94.133189][ T4647] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.143068][ T4647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.154116][ T4647] usb 3-1: Product: syz [ 94.158372][ T4647] usb 3-1: Manufacturer: syz [ 94.163351][ T4647] usb 3-1: SerialNumber: syz [ 94.562160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.578477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.587137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.595829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.652268][ T4647] usb 3-1: 0:2 : does not exist [ 95.069053][ T4279] Bluetooth: latency 38150 > 499 [ 95.331031][ T4647] usb 3-1: USB disconnect, device number 4 [ 95.348086][ T4811] loop3: detected capacity change from 0 to 32768 [ 95.427441][ T4811] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.507956][ T4811] (syz.3.146,4811,1):ocfs2_remove_inode_range:1794 ERROR: status = -22 [ 95.519874][ T4811] (syz.3.146,4811,0):__ocfs2_change_file_space:2045 ERROR: status = -22 [ 95.590705][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.659333][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 95.665604][ T4819] loop0: detected capacity change from 0 to 32768 [ 95.692738][ T4819] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.149 (4819) [ 95.725613][ T4819] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 95.736488][ T4819] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 95.747239][ T4819] BTRFS info (device loop0): using free space tree [ 95.778544][ T4418] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.834051][ T4830] loop3: detected capacity change from 0 to 1024 [ 95.947201][ T4830] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.968518][ T4418] usb 5-1: Using ep0 maxpacket: 16 [ 95.980918][ T4418] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.013620][ T4830] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.153: bg 0: block 260: invalid block bitmap [ 96.027216][ T4418] usb 5-1: config 0 has no interface number 0 [ 96.048714][ T4418] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.062590][ T4418] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.079926][ T4418] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 96.093620][ T4418] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 96.152620][ T4819] BTRFS info (device loop0): enabling ssd optimizations [ 96.161479][ T4418] usb 5-1: Product: syz [ 96.179070][ T4418] usb 5-1: SerialNumber: syz [ 96.206342][ T4418] usb 5-1: config 0 descriptor?? [ 96.232530][ T4418] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 96.264519][ T4418] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 96.268336][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 96.435719][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 96.612446][ T4867] input: syz1 as /devices/virtual/input/input8 [ 96.637028][ T4265] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 96.712108][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.721306][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.728607][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.735839][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.743436][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.752021][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.784189][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.791402][ T7] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.801421][ T4341] usb 5-1: USB disconnect, device number 3 [ 96.829390][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.836417][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 96.908893][ T4341] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 97.055441][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 97.087140][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 97.112941][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.125873][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.138581][ T4284] Bluetooth: hci2: command 0x2021 tx timeout [ 97.145708][ T4862] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.155183][ T4862] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.298810][ T4870] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.413358][ T4647] usb 4-1: USB disconnect, device number 3 [ 97.491083][ T4870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.521764][ T4870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.535844][ T4870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.555147][ T4870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.613797][ T4870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.634484][ T4893] autofs4:pid:4893:autofs_fill_super: called with bogus options [ 97.685200][ T4870] usb 3-1: config 0 descriptor?? [ 98.325453][ T4900] loop0: detected capacity change from 0 to 512 [ 98.345147][ T4900] EXT4-fs: Ignoring removed orlov option [ 98.345295][ T4901] sctp: [Deprecated]: syz.1.167 (pid 4901) Use of int in max_burst socket option. [ 98.345295][ T4901] Use struct sctp_assoc_value instead [ 98.371648][ T4870] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 98.421850][ T4870] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 98.422088][ T4900] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.478921][ T4900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880ee02c, mo2=0102] [ 98.496492][ T4900] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.520946][ T4900] EXT4-fs error (device loop0): __ext4_iget:5091: inode #11: block 16777236: comm syz.0.168: invalid block [ 98.542582][ T4900] EXT4-fs (loop0): Remounting filesystem read-only [ 98.549470][ T4900] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.168: couldn't read orphan inode 11 (err -117) [ 98.567359][ T4900] EXT4-fs (loop0): Remounting filesystem read-only [ 98.574507][ T4900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.600300][ T4900] EXT4-fs (loop0): shut down requested (2) [ 98.654079][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 98.704639][ T7] usb 3-1: USB disconnect, device number 5 [ 98.739901][ T4909] fido_id[4909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 98.791671][ T4870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.980321][ T4870] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 98.995621][ T4870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.022483][ T4870] usb 4-1: config 0 descriptor?? [ 99.184922][ T4913] loop4: detected capacity change from 0 to 32768 [ 99.248990][ T4418] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.253677][ T4870] kaweth 4-1:0.0: Firmware present in device. [ 99.293100][ T26] audit: type=1804 audit(1762225663.093:2): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.173" name="/newroot/34/file0/file1" dev="loop4" ino=4 res=1 errno=0 [ 99.448847][ T4870] kaweth 4-1:0.0: Statistics collection: 0 [ 99.450752][ T4418] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 99.454869][ T4870] kaweth 4-1:0.0: Multicast filter limit: 0 [ 99.465818][ T4645] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.501278][ T4418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.511658][ T4870] kaweth 4-1:0.0: MTU: 0 [ 99.526016][ T4870] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 99.528545][ T4418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.543372][ T4418] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 99.592464][ T4418] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 99.623458][ T4418] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 99.637540][ T4418] usb 1-1: Manufacturer: syz [ 99.655126][ T4418] usb 1-1: config 0 descriptor?? [ 99.678835][ T4645] usb 2-1: Using ep0 maxpacket: 16 [ 99.694363][ T4645] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 99.736982][ T4645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.764553][ T4645] usb 2-1: config 0 descriptor?? [ 99.821007][ T4645] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 99.894461][ T4929] autofs4:pid:4929:autofs_fill_super: called with bogus options [ 100.294849][ T4418] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 100.297912][ T4870] kaweth 4-1:0.0: Error setting receive filter [ 100.305339][ T4418] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 100.382893][ T4418] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 100.464214][ T4870] kaweth: probe of 4-1:0.0 failed with error -5 [ 100.521633][ T4870] usb 4-1: USB disconnect, device number 4 [ 100.615940][ T4418] usb 1-1: USB disconnect, device number 3 [ 100.732387][ T4933] fido_id[4933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 100.852907][ T4870] usb 2-1: USB disconnect, device number 4 [ 100.928795][ T4942] loop3: detected capacity change from 0 to 512 [ 100.935879][ T4942] EXT4-fs: Ignoring removed orlov option [ 100.943679][ T4942] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 100.957134][ T4942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880ee02c, mo2=0102] [ 100.967339][ T4942] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.974308][ T4942] EXT4-fs error (device loop3): __ext4_iget:5091: inode #11: block 16777236: comm syz.3.182: invalid block [ 100.996635][ T4942] EXT4-fs (loop3): Remounting filesystem read-only [ 101.005803][ T4942] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.182: couldn't read orphan inode 11 (err -117) [ 101.026084][ T4942] EXT4-fs (loop3): Remounting filesystem read-only [ 101.033237][ T4942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.055538][ T4942] EXT4-fs (loop3): shut down requested (2) [ 101.089138][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 101.114653][ T4341] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.207662][ T4945] loop3: detected capacity change from 0 to 2048 [ 101.212704][ T4947] loop0: detected capacity change from 0 to 64 [ 101.258857][ T4945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.298677][ T4341] usb 3-1: Using ep0 maxpacket: 16 [ 101.306965][ T4341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.344820][ T4341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.377653][ T4945] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1376) [ 101.391732][ T4341] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.416182][ T4341] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.432117][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.503209][ T4341] usb 3-1: config 0 descriptor?? [ 101.687613][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 101.922158][ T4341] hid_map_usage: 4377 callbacks suppressed [ 101.922175][ T4341] HID 045e:07da: Invalid code 65791 type 1 [ 101.956415][ T4341] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input9 [ 101.999532][ T4341] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 102.543246][ T4964] autofs4:pid:4964:autofs_fill_super: called with bogus options [ 102.668524][ T4341] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.695565][ T4870] usb 3-1: USB disconnect, device number 6 [ 102.789163][ T4967] fido_id[4967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 102.809626][ T4950] loop1: detected capacity change from 0 to 32768 [ 102.888692][ T4341] usb 1-1: Using ep0 maxpacket: 8 [ 102.901774][ T4341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 102.932106][ T4341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.945795][ T4341] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.960693][ T4341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 102.973851][ T4341] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 102.984037][ T4341] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 103.001621][ T4341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.014288][ T4341] usb 1-1: config 0 descriptor?? [ 103.016189][ T4950] XFS (loop1): Mounting V5 Filesystem [ 103.040261][ T4279] Bluetooth: hci5: urb ffff88802ea18b00 submission failed (90) [ 103.119668][ T4950] XFS (loop1): Ending clean mount [ 103.343255][ T4341] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.350906][ T4645] usb 1-1: USB disconnect, device number 4 [ 103.449755][ T4989] autofs4:pid:4989:autofs_fill_super: called with bogus options [ 103.715073][ T4272] XFS (loop1): Unmounting Filesystem [ 103.890156][ T4341] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.908118][ T4341] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 103.919171][ T4341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.928208][ T4341] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 103.945904][ T4341] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 103.960821][ T4341] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.980381][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.000665][ T4341] usb 5-1: Product: syz [ 104.004920][ T4341] usb 5-1: Manufacturer: syz [ 104.047482][ T4341] cdc_wdm 5-1:1.0: skipping garbage [ 104.074079][ T4341] cdc_wdm 5-1:1.0: skipping garbage [ 104.103830][ T4341] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 104.136105][ T4341] cdc_wdm 5-1:1.0: Unknown control protocol [ 104.654352][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 104.661281][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 104.668153][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 104.677981][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 104.684637][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 104.691307][ T4341] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 104.700146][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 104.700167][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 104.713498][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 104.713519][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 104.726543][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 104.733178][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 104.739468][ T4870] usb 5-1: USB disconnect, device number 4 [ 104.946198][ T4341] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 104.964921][ T4341] usb 4-1: config 0 has no interface number 0 [ 104.976712][ T4341] usb 4-1: config 0 interface 41 has no altsetting 0 [ 105.000227][ T4341] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 105.025840][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.052976][ T4341] usb 4-1: Product: syz [ 105.057219][ T4341] usb 4-1: Manufacturer: syz [ 105.073073][ T4341] usb 4-1: SerialNumber: syz [ 105.093989][ T4341] usb 4-1: config 0 descriptor?? [ 105.227543][ T5017] loop0: detected capacity change from 0 to 47 [ 105.347280][ T5017] syz.0.207: attempt to access beyond end of device [ 105.347280][ T5017] loop0: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 105.374107][ T5017] Buffer I/O error on dev loop0, logical block 24, lost async page write [ 105.412934][ T5017] syz.0.207: attempt to access beyond end of device [ 105.412934][ T5017] loop0: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 105.448624][ T5017] Buffer I/O error on dev loop0, logical block 25, lost async page write [ 105.468021][ T5017] syz.0.207: attempt to access beyond end of device [ 105.468021][ T5017] loop0: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 105.508335][ T5017] Buffer I/O error on dev loop0, logical block 26, lost async page write [ 105.528609][ T5017] syz.0.207: attempt to access beyond end of device [ 105.528609][ T5017] loop0: rw=2049, sector=54, nr_sectors = 2 limit=47 [ 105.544712][ T5015] loop1: detected capacity change from 0 to 32768 [ 105.562130][ T5017] Buffer I/O error on dev loop0, logical block 27, lost async page write [ 105.617721][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.653584][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.669200][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.693502][ T5020] device bridge_slave_0 left promiscuous mode [ 105.714318][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.760017][ T5020] device bridge_slave_1 left promiscuous mode [ 105.798667][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.849758][ T5020] bond0: (slave bond_slave_0): Releasing backup interface [ 105.872348][ T5024] loop0: detected capacity change from 0 to 512 [ 105.905437][ T5020] bond0: (slave bond_slave_1): Releasing backup interface [ 105.935095][ T5024] EXT4-fs: Ignoring removed orlov option [ 105.954769][ T5024] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 105.982907][ T5024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 106.038266][ T5020] team0: Port device team_slave_0 removed [ 106.054092][ T5024] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.209: corrupted in-inode xattr [ 106.074825][ T5024] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.209: couldn't read orphan inode 15 (err -117) [ 106.090054][ T5020] team0: Port device team_slave_1 removed [ 106.102669][ T5024] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.104473][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.128981][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.139617][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.141529][ T4341] CoreChips: probe of 4-1:0.41 failed with error -71 [ 106.164547][ T4341] usb 4-1: USB disconnect, device number 5 [ 106.175587][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.317002][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 106.581234][ T5034] autofs4:pid:5034:autofs_fill_super: called with bogus options [ 107.392247][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 107.506198][ T5059] loop3: detected capacity change from 0 to 47 [ 107.587821][ T5059] syz.3.220: attempt to access beyond end of device [ 107.587821][ T5059] loop3: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 107.654628][ T5059] Buffer I/O error on dev loop3, logical block 24, lost async page write [ 107.708364][ T5059] syz.3.220: attempt to access beyond end of device [ 107.708364][ T5059] loop3: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 107.785611][ T5059] Buffer I/O error on dev loop3, logical block 25, lost async page write [ 107.813943][ T5059] syz.3.220: attempt to access beyond end of device [ 107.813943][ T5059] loop3: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 107.830982][ T5059] Buffer I/O error on dev loop3, logical block 26, lost async page write [ 107.840524][ T5059] syz.3.220: attempt to access beyond end of device [ 107.840524][ T5059] loop3: rw=2049, sector=54, nr_sectors = 2 limit=47 [ 107.854183][ T5059] Buffer I/O error on dev loop3, logical block 27, lost async page write [ 107.948513][ T4418] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.001510][ T5075] loop4: detected capacity change from 0 to 512 [ 108.038160][ T5075] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 108.062626][ T5075] UDF-fs: Scanning with blocksize 512 failed [ 108.091234][ T5075] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 108.109222][ T5075] UDF-fs: Scanning with blocksize 1024 failed [ 108.129474][ T5075] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 108.145852][ T5075] UDF-fs: Scanning with blocksize 2048 failed [ 108.156983][ T4418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.177305][ T5075] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.187966][ T4418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.204801][ T5075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.214134][ T4418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.237433][ T4418] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.262186][ T4418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.295318][ T4418] usb 2-1: config 0 descriptor?? [ 108.741829][ T4418] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 108.757842][ T4418] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 109.038029][ T4645] usb 2-1: USB disconnect, device number 5 [ 109.083292][ T7] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 109.091049][ T5093] fido_id[5093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 109.178627][ T4418] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.290290][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.308117][ T7] usb 3-1: config 0 has no interface number 0 [ 109.314645][ T7] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 109.338633][ T7] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 109.359768][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.378514][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.388760][ T4418] usb 1-1: Using ep0 maxpacket: 8 [ 109.397428][ T4418] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.408522][ T7] usb 3-1: config 0 descriptor?? [ 109.415752][ T5092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.428047][ T4418] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.448718][ T4418] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.464374][ T7] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 109.468521][ T4418] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.508182][ T4418] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.554298][ T4418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.702927][ T4645] usb 3-1: USB disconnect, device number 7 [ 109.702943][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 109.805982][ T4418] usb 1-1: GET_CAPABILITIES returned 0 [ 109.813970][ T4418] usbtmc 1-1:16.0: can't read capabilities [ 109.826141][ T5100] loop4: detected capacity change from 0 to 32768 [ 109.897402][ T5100] (syz.4.237,5100,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.923836][ T5100] (syz.4.237,5100,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.973416][ T5100] JBD2: Ignoring recovery information on journal [ 110.101195][ T4645] usb 1-1: USB disconnect, device number 5 [ 110.146969][ T5100] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 110.274631][ T5100] [ 110.277032][ T5100] ====================================================== [ 110.284069][ T5100] WARNING: possible circular locking dependency detected [ 110.291124][ T5100] syzkaller #0 Not tainted [ 110.295550][ T5100] ------------------------------------------------------ [ 110.302579][ T5100] syz.4.237/5100 is trying to acquire lock: [ 110.308526][ T5100] ffff8880700ed108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 110.322080][ T5100] [ 110.322080][ T5100] but task is already holding lock: [ 110.329465][ T5100] ffff8880549fdbe0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 110.340374][ T5100] [ 110.340374][ T5100] which lock already depends on the new lock. [ 110.340374][ T5100] [ 110.350794][ T5100] [ 110.350794][ T5100] the existing dependency chain (in reverse order) is: [ 110.359831][ T5100] [ 110.359831][ T5100] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 110.368720][ T5100] down_write+0x36/0x60 [ 110.373422][ T5100] ocfs2_lock_global_qf+0x1e5/0x270 [ 110.379163][ T5100] ocfs2_acquire_dquot+0x2a0/0xb10 [ 110.384825][ T5100] dqget+0x778/0xeb0 [ 110.389270][ T5100] ocfs2_setattr+0xf16/0x1cf0 [ 110.394504][ T5100] notify_change+0xc74/0xf40 [ 110.399654][ T5100] chown_common+0x486/0x620 [ 110.404716][ T5100] ksys_fchown+0xe2/0x150 [ 110.409592][ T5100] __x64_sys_fchown+0x76/0x80 [ 110.414819][ T5100] do_syscall_64+0x4c/0xa0 [ 110.419781][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.426219][ T5100] [ 110.426219][ T5100] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 110.436779][ T5100] down_write+0x36/0x60 [ 110.441501][ T5100] ocfs2_lock_global_qf+0x1c7/0x270 [ 110.447242][ T5100] ocfs2_acquire_dquot+0x2a0/0xb10 [ 110.452906][ T5100] dqget+0x778/0xeb0 [ 110.457348][ T5100] ocfs2_setattr+0xf16/0x1cf0 [ 110.462572][ T5100] notify_change+0xc74/0xf40 [ 110.467717][ T5100] chown_common+0x486/0x620 [ 110.472809][ T5100] ksys_fchown+0xe2/0x150 [ 110.477704][ T5100] __x64_sys_fchown+0x76/0x80 [ 110.482938][ T5100] do_syscall_64+0x4c/0xa0 [ 110.487901][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.494347][ T5100] [ 110.494347][ T5100] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 110.502040][ T5100] __mutex_lock+0x120/0xaf0 [ 110.507097][ T5100] dquot_commit+0x5a/0x410 [ 110.512064][ T5100] ext4_write_dquot+0x1f0/0x360 [ 110.517467][ T5100] mark_all_dquot_dirty+0xf9/0x400 [ 110.523132][ T5100] __dquot_free_space+0x7ec/0xbc0 [ 110.528721][ T5100] ext4_free_blocks+0x1bab/0x2640 [ 110.534295][ T5100] ext4_ext_remove_space+0x1f0d/0x4490 [ 110.540297][ T5100] ext4_ext_truncate+0x211/0x370 [ 110.545778][ T5100] ext4_truncate+0xa0b/0x1230 [ 110.551007][ T5100] ext4_process_orphan+0x1cb/0x300 [ 110.556666][ T5100] ext4_orphan_cleanup+0xbd3/0x1400 [ 110.562417][ T5100] ext4_fill_super+0x7bdf/0x8150 [ 110.567895][ T5100] get_tree_bdev+0x3f1/0x610 [ 110.573031][ T5100] vfs_get_tree+0x88/0x270 [ 110.577994][ T5100] do_new_mount+0x24a/0xa40 [ 110.583045][ T5100] __se_sys_mount+0x2d6/0x3c0 [ 110.588266][ T5100] do_syscall_64+0x4c/0xa0 [ 110.593231][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.599674][ T5100] [ 110.599674][ T5100] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 110.607353][ T5100] down_write+0x36/0x60 [ 110.612064][ T5100] ext4_truncate+0x987/0x1230 [ 110.617297][ T5100] ext4_setattr+0x10cb/0x19f0 [ 110.622526][ T5100] notify_change+0xc74/0xf40 [ 110.627672][ T5100] do_truncate+0x197/0x220 [ 110.632643][ T5100] do_sys_ftruncate+0x312/0x3c0 [ 110.638051][ T5100] do_syscall_64+0x4c/0xa0 [ 110.643021][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.649478][ T5100] [ 110.649478][ T5100] -> #3 (jbd2_handle){++++}-{0:0}: [ 110.656813][ T5100] start_this_handle+0x1f49/0x2150 [ 110.662485][ T5100] jbd2__journal_start+0x2b7/0x5a0 [ 110.668157][ T5100] jbd2_journal_start+0x26/0x30 [ 110.673562][ T5100] ocfs2_start_trans+0x372/0x6c0 [ 110.679069][ T5100] ocfs2_mknod+0xe6a/0x2350 [ 110.684123][ T5100] ocfs2_create+0x1b6/0x4a0 [ 110.689175][ T5100] path_openat+0x1187/0x2e70 [ 110.694312][ T5100] do_filp_open+0x1c1/0x3c0 [ 110.699356][ T5100] do_sys_openat2+0x142/0x490 [ 110.704588][ T5100] __x64_sys_openat+0x135/0x160 [ 110.709979][ T5100] do_syscall_64+0x4c/0xa0 [ 110.714951][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.721382][ T5100] [ 110.721382][ T5100] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 110.729920][ T5100] down_read+0x42/0x2d0 [ 110.734633][ T5100] ocfs2_start_trans+0x366/0x6c0 [ 110.740131][ T5100] ocfs2_mknod+0xe6a/0x2350 [ 110.745200][ T5100] ocfs2_create+0x1b6/0x4a0 [ 110.750268][ T5100] path_openat+0x1187/0x2e70 [ 110.755407][ T5100] do_filp_open+0x1c1/0x3c0 [ 110.760456][ T5100] do_sys_openat2+0x142/0x490 [ 110.765671][ T5100] __x64_sys_openat+0x135/0x160 [ 110.771074][ T5100] do_syscall_64+0x4c/0xa0 [ 110.776029][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.782470][ T5100] [ 110.782470][ T5100] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 110.789987][ T5100] ocfs2_start_trans+0x267/0x6c0 [ 110.795486][ T5100] ocfs2_mknod+0xe6a/0x2350 [ 110.800530][ T5100] ocfs2_create+0x1b6/0x4a0 [ 110.805587][ T5100] path_openat+0x1187/0x2e70 [ 110.810723][ T5100] do_filp_open+0x1c1/0x3c0 [ 110.815756][ T5100] do_sys_openat2+0x142/0x490 [ 110.820970][ T5100] __x64_sys_openat+0x135/0x160 [ 110.826365][ T5100] do_syscall_64+0x4c/0xa0 [ 110.831320][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.837762][ T5100] [ 110.837762][ T5100] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 110.848309][ T5100] __lock_acquire+0x2cf8/0x7c50 [ 110.853710][ T5100] lock_acquire+0x1b4/0x490 [ 110.858757][ T5100] down_write+0x36/0x60 [ 110.863456][ T5100] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 110.870155][ T5100] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 110.877036][ T5100] ocfs2_lock_allocators+0x2f7/0x5b0 [ 110.882874][ T5100] ocfs2_extend_allocation+0x394/0x1840 [ 110.888969][ T5100] ocfs2_extend_no_holes+0x20b/0x490 [ 110.894798][ T5100] ocfs2_acquire_dquot+0x5e8/0xb10 [ 110.900449][ T5100] dqget+0x778/0xeb0 [ 110.904879][ T5100] ocfs2_setattr+0xf16/0x1cf0 [ 110.910112][ T5100] notify_change+0xc74/0xf40 [ 110.915236][ T5100] chown_common+0x486/0x620 [ 110.920275][ T5100] ksys_fchown+0xe2/0x150 [ 110.925144][ T5100] __x64_sys_fchown+0x76/0x80 [ 110.930382][ T5100] do_syscall_64+0x4c/0xa0 [ 110.935347][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.941783][ T5100] [ 110.941783][ T5100] other info that might help us debug this: [ 110.941783][ T5100] [ 110.952040][ T5100] Chain exists of: [ 110.952040][ T5100] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 110.952040][ T5100] [ 110.972085][ T5100] Possible unsafe locking scenario: [ 110.972085][ T5100] [ 110.979568][ T5100] CPU0 CPU1 [ 110.984954][ T5100] ---- ---- [ 110.990335][ T5100] lock(&ocfs2_quota_ip_alloc_sem_key); [ 110.995989][ T5100] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 111.005828][ T5100] lock(&ocfs2_quota_ip_alloc_sem_key); [ 111.014007][ T5100] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 111.021318][ T5100] [ 111.021318][ T5100] *** DEADLOCK *** [ 111.021318][ T5100] [ 111.029474][ T5100] 5 locks held by syz.4.237/5100: [ 111.034502][ T5100] #0: ffff888054158460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 111.044306][ T5100] #1: ffff8880549fa648 (&type->i_mutex_dir_key#9){+.+.}-{3:3}, at: chown_common+0x320/0x620 [ 111.054567][ T5100] #2: ffff8880548c60a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 111.064624][ T5100] #3: ffff8880549fdf48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 111.077641][ T5100] #4: ffff8880549fdbe0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 111.089019][ T5100] [ 111.089019][ T5100] stack backtrace: [ 111.094965][ T5100] CPU: 0 PID: 5100 Comm: syz.4.237 Not tainted syzkaller #0 [ 111.102283][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.112374][ T5100] Call Trace: [ 111.115673][ T5100] [ 111.118628][ T5100] dump_stack_lvl+0x168/0x22e [ 111.123344][ T5100] ? load_image+0x3b0/0x3b0 [ 111.127884][ T5100] ? show_regs_print_info+0x12/0x12 [ 111.133116][ T5100] ? print_circular_bug+0x12b/0x1a0 [ 111.138355][ T5100] check_noncircular+0x274/0x310 [ 111.143372][ T5100] ? add_chain_block+0x940/0x940 [ 111.148334][ T5100] ? lockdep_lock+0xdc/0x1e0 [ 111.152953][ T5100] ? verify_lock_unused+0x140/0x140 [ 111.158181][ T5100] ? _find_first_zero_bit+0xcf/0x100 [ 111.163498][ T5100] __lock_acquire+0x2cf8/0x7c50 [ 111.168387][ T5100] ? verify_lock_unused+0x140/0x140 [ 111.173619][ T5100] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 111.179287][ T5100] ? do_raw_spin_lock+0x11d/0x280 [ 111.184347][ T5100] ? mutex_unlock+0x10/0x10 [ 111.188869][ T5100] ? __rwlock_init+0x140/0x140 [ 111.193660][ T5100] ? __rwlock_init+0x140/0x140 [ 111.198445][ T5100] ? do_raw_spin_unlock+0x11d/0x230 [ 111.203689][ T5100] lock_acquire+0x1b4/0x490 [ 111.208227][ T5100] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 111.214577][ T5100] ? __might_sleep+0xd0/0xd0 [ 111.219217][ T5100] ? mark_lock+0x94/0x320 [ 111.223584][ T5100] ? read_lock_is_recursive+0x10/0x10 [ 111.228989][ T5100] ? mark_lock+0x94/0x320 [ 111.233353][ T5100] ? __lock_acquire+0x13c0/0x7c50 [ 111.238408][ T5100] ? lock_chain_count+0x20/0x20 [ 111.243293][ T5100] down_write+0x36/0x60 [ 111.247479][ T5100] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 111.253842][ T5100] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 111.260036][ T5100] ? _raw_spin_unlock+0x40/0x40 [ 111.264923][ T5100] ? stack_trace_save+0x98/0xe0 [ 111.269798][ T5100] ? verify_lock_unused+0x140/0x140 [ 111.275026][ T5100] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 111.281812][ T5100] ? kasan_set_track+0x60/0x70 [ 111.286607][ T5100] ? kasan_set_track+0x4b/0x70 [ 111.291509][ T5100] ? __kasan_kmalloc+0x8e/0xa0 [ 111.296308][ T5100] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 111.302759][ T5100] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 111.308255][ T5100] ? ocfs2_extend_allocation+0x394/0x1840 [ 111.313998][ T5100] ? ocfs2_extend_no_holes+0x20b/0x490 [ 111.319492][ T5100] ? ocfs2_acquire_dquot+0x5e8/0xb10 [ 111.324802][ T5100] ? dqget+0x778/0xeb0 [ 111.328898][ T5100] ? ocfs2_setattr+0xf16/0x1cf0 [ 111.333779][ T5100] ? notify_change+0xc74/0xf40 [ 111.338571][ T5100] ? chown_common+0x486/0x620 [ 111.343276][ T5100] ? ksys_fchown+0xe2/0x150 [ 111.347810][ T5100] ? do_syscall_64+0x4c/0xa0 [ 111.352430][ T5100] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.358560][ T5100] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 111.364679][ T5100] ? __lock_acquire+0x7c50/0x7c50 [ 111.369740][ T5100] ? do_raw_spin_lock+0x11d/0x280 [ 111.374821][ T5100] ? __rwlock_init+0x140/0x140 [ 111.379627][ T5100] ? do_raw_spin_unlock+0x11d/0x230 [ 111.384863][ T5100] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 111.390982][ T5100] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 111.397357][ T5100] ? ocfs2_reserve_clusters+0x30/0x30 [ 111.400598][ T5113] loop2: detected capacity change from 0 to 32768 [ 111.402744][ T5100] ? lock_chain_count+0x20/0x20 [ 111.414077][ T5100] ? rcu_is_watching+0x11/0xa0 [ 111.418886][ T5100] ? ocfs2_num_free_extents+0x2fa/0x620 [ 111.424469][ T5100] ? ocfs2_validate_extent_block+0x5e0/0x5e0 [ 111.430494][ T5100] ? ocfs2_read_blocks_sync+0xc50/0xc50 [ 111.430963][ T5113] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.240 (5113) [ 111.436073][ T5100] ? stack_trace_save+0x98/0xe0 [ 111.453028][ T5100] ocfs2_lock_allocators+0x2f7/0x5b0 [ 111.458372][ T5100] ? _ocfs2_clear_bit+0x30/0x30 [ 111.463264][ T5100] ? ocfs2_read_inode_block+0x11a/0x180 [ 111.468846][ T5100] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 111.474864][ T5100] ? ocfs2_acquire_dquot+0x2e8/0xb10 [ 111.480176][ T5100] ? ocfs2_setattr+0xf16/0x1cf0 [ 111.485043][ T5100] ? notify_change+0xc74/0xf40 [ 111.489836][ T5100] ? chown_common+0x486/0x620 [ 111.494527][ T5100] ? __x64_sys_fchown+0x76/0x80 [ 111.499388][ T5100] ? do_syscall_64+0x4c/0xa0 [ 111.503984][ T5100] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.510060][ T5100] ocfs2_extend_allocation+0x394/0x1840 [ 111.515680][ T5100] ? __lock_acquire+0x13c0/0x7c50 [ 111.520722][ T5100] ? ocfs2_extend_no_holes+0x490/0x490 [ 111.526195][ T5100] ? kasan_quarantine_put+0xd4/0x220 [ 111.531499][ T5100] ? lockdep_hardirqs_on+0x94/0x140 [ 111.536715][ T5100] ? slab_free_freelist_hook+0x131/0x1a0 [ 111.542358][ T5100] ? ocfs2_allocate_extend_trans+0x640/0x640 [ 111.548356][ T5100] ? find_tree_dqentry+0xbb1/0xf30 [ 111.553493][ T5100] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 111.558637][ T5100] ocfs2_extend_no_holes+0x20b/0x490 [ 111.563929][ T5100] ? ocfs2_zero_extend+0x2950/0x2950 [ 111.569223][ T5100] ? do_raw_spin_unlock+0x11d/0x230 [ 111.574436][ T5100] ? _raw_spin_unlock+0x24/0x40 [ 111.579297][ T5100] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 111.584521][ T5100] ocfs2_acquire_dquot+0x5e8/0xb10 [ 111.589646][ T5100] ? ocfs2_destroy_dquot+0x40/0x40 [ 111.594761][ T5100] ? percpu_counter_add_batch+0x13b/0x160 [ 111.600502][ T5100] dqget+0x778/0xeb0 [ 111.604411][ T5100] ocfs2_setattr+0xf16/0x1cf0 [ 111.609100][ T5100] ? ocfs2_extend_allocation+0x1840/0x1840 [ 111.614911][ T5100] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 111.620721][ T5100] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 111.626973][ T5100] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 111.632876][ T5100] ? current_time+0x18e/0x2a0 [ 111.637561][ T5100] ? atime_needs_update+0x780/0x780 [ 111.642765][ T5100] ? common_perm_cond+0x2ad/0x340 [ 111.647808][ T5100] ? evm_inode_setattr+0x91/0x790 [ 111.652839][ T5100] ? bpf_lsm_inode_setattr+0x5/0x10 [ 111.658051][ T5100] ? security_inode_setattr+0xd8/0x140 [ 111.663604][ T5100] ? try_break_deleg+0x79/0x120 [ 111.668463][ T5100] ? ocfs2_extend_allocation+0x1840/0x1840 [ 111.674298][ T5100] notify_change+0xc74/0xf40 [ 111.678918][ T5100] chown_common+0x486/0x620 [ 111.683432][ T5100] ? __ia32_sys_chmod+0x70/0x70 [ 111.688292][ T5100] ? rcu_read_lock_any_held+0xb0/0x120 [ 111.693761][ T5100] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 111.699056][ T5100] ? __mnt_want_write+0x21f/0x2a0 [ 111.704093][ T5100] ? mnt_want_write_file+0x16e/0x200 [ 111.709391][ T5100] ksys_fchown+0xe2/0x150 [ 111.713729][ T5100] __x64_sys_fchown+0x76/0x80 [ 111.718417][ T5100] do_syscall_64+0x4c/0xa0 [ 111.722845][ T5100] ? clear_bhb_loop+0x60/0xb0 [ 111.727530][ T5100] ? clear_bhb_loop+0x60/0xb0 [ 111.732236][ T5100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.738135][ T5100] RIP: 0033:0x7fb85f78f6c9 [ 111.742571][ T5100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.762185][ T5100] RSP: 002b:00007fb85d9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 111.770609][ T5100] RAX: ffffffffffffffda RBX: 00007fb85f9e5fa0 RCX: 00007fb85f78f6c9 [ 111.778587][ T5100] RDX: 000000000000000a RSI: 000000003a736e6f RDI: 0000000000000004 [ 111.786562][ T5100] RBP: 00007fb85f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.794535][ T5100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.802541][ T5100] R13: 00007fb85f9e6038 R14: 00007fb85f9e5fa0 R15: 00007ffe8ed43a98 [ 111.810527][ T5100] [ 111.825876][ T5100] (syz.4.237,5100,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0xa3cde6cc. Applying ECC. [ 111.852374][ T5113] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.882399][ T5113] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 111.902435][ T5113] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.928317][ T5113] BTRFS info (device loop2): use zstd compression, level 3 [ 111.937634][ T5100] (syz.4.237,5100,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x95e606d1 [ 111.948568][ T5113] BTRFS info (device loop2): using free space tree [ 112.030604][ T5100] (syz.4.237,5100,1):ocfs2_search_chain:1761 ERROR: status = -5 [ 112.038330][ T5100] (syz.4.237,5100,1):ocfs2_search_chain:1871 ERROR: status = -5 [ 112.046304][ T5100] (syz.4.237,5100,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5 [ 112.058203][ T5100] (syz.4.237,5100,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 112.079632][ T5100] (syz.4.237,5100,0):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 112.103619][ T5100] (syz.4.237,5100,0):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 112.123617][ T5100] (syz.4.237,5100,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 112.132567][ T5113] BTRFS info (device loop2): enabling ssd optimizations [ 112.156120][ T5100] (syz.4.237,5100,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 112.172562][ T5100] (syz.4.237,5100,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 112.173272][ T26] audit: type=1800 audit(1762225675.973:3): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.240" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 112.182984][ T5100] (syz.4.237,5100,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 112.211092][ T5100] (syz.4.237,5100,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 112.221248][ T5100] (syz.4.237,5100,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 112.230042][ T5100] (syz.4.237,5100,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 112.239201][ T5100] (syz.4.237,5100,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 112.248187][ T5100] (syz.4.237,5100,1):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 112.256365][ T5100] (syz.4.237,5100,1):ocfs2_extend_allocation:588 ERROR: status = -5 [ 112.264660][ T5100] (syz.4.237,5100,1):ocfs2_extend_no_holes:1030 ERROR: status = -5 [ 112.272823][ T5100] (syz.4.237,5100,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 112.298663][ T4266] ocfs2: Unmounting device (7,4) on (node local) [ 112.323897][ T4275] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 112.330339][ T5082] Set syz1 is full, maxelem 65536 reached