last executing test programs: 5.567892656s ago: executing program 1 (id=162): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095000000000000000a43e17cffedcebf417131f8148328051cf516e7199c124eda7c6bc8a6a56f627e21f1f98eec653deb9c8550c7a03231084309aed4d4b0f1b552972d7905a1073ab8a93df9f71bed65b31aef8d751d17bfd3567a845a43ad64"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5.436064914s ago: executing program 1 (id=165): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) 5.379226579s ago: executing program 1 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x2}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 5.160080643s ago: executing program 1 (id=169): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 4.16380202s ago: executing program 0 (id=181): socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x100006, 0x4) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x87}], 0x1, 0x10120, 0x0) 3.936063685s ago: executing program 0 (id=183): unlinkat(0xffffffffffffff9c, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) 3.894865338s ago: executing program 0 (id=184): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@dioread_nolock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x14, 0x17, 0x2, {0xb, './bus/file0'}}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 3.524085934s ago: executing program 0 (id=187): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 3.267729901s ago: executing program 1 (id=189): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 2.778928833s ago: executing program 1 (id=195): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.761020905s ago: executing program 2 (id=196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f00000005c0), 0x0}, 0x20) 2.591872246s ago: executing program 2 (id=197): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 2.557385698s ago: executing program 2 (id=199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2.23207768s ago: executing program 2 (id=201): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 2.190780883s ago: executing program 2 (id=202): syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x694, &(0x7f0000000a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.892550593s ago: executing program 2 (id=206): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x19, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x4000000) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.183974031s ago: executing program 3 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1.087778787s ago: executing program 3 (id=215): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) 1.04801201s ago: executing program 3 (id=216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="340024800c"], 0x50}}, 0x4000844) 876.085721ms ago: executing program 3 (id=218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/73, 0x49}], 0x1}, 0x120) write$cgroup_pid(r0, 0x0, 0x0) 732.059601ms ago: executing program 3 (id=221): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setuid(0xee00) statx(r1, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) 695.457294ms ago: executing program 3 (id=223): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 575.988552ms ago: executing program 4 (id=224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x40) 555.863203ms ago: executing program 4 (id=225): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 509.236426ms ago: executing program 4 (id=226): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'team_slave_0\x00', @ifru_names='vlan0\x00'}}) 340.019828ms ago: executing program 0 (id=227): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 339.746868ms ago: executing program 4 (id=228): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2b, 0x80801, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) 269.006842ms ago: executing program 4 (id=229): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x1, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0xffffffff, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x1d2c, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x6, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 102.947613ms ago: executing program 4 (id=230): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000040)={[{@utf8no}, {@utf8}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@utf8no}, {@rodir}, {@utf8}, {@shortname_win95}, {@utf8no}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@numtail}]}, 0x26, 0x358, &(0x7f0000000540)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) unlink(&(0x7f0000000040)='./file1\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000240)=""/224, 0xe0) 0s ago: executing program 0 (id=231): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0xdaa) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x9, 0x0, &(0x7f0000000240)={r0, r1+10000000}, 0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 49.950186][ T4172] cgroup: Unknown subsys name 'net' [ 50.136294][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.349413][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.076684][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 53.115915][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 53.177021][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 53.247647][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.254853][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.263341][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.275200][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.282469][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.290869][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.312404][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 53.363733][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.370978][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.378891][ T4192] device bridge_slave_0 entered promiscuous mode [ 53.405798][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.415428][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.422723][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.430433][ T4192] device bridge_slave_1 entered promiscuous mode [ 53.437719][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.444896][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.453170][ T4197] device bridge_slave_0 entered promiscuous mode [ 53.460865][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.477280][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.502436][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.509515][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.518024][ T4197] device bridge_slave_1 entered promiscuous mode [ 53.541386][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.552830][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.590400][ T4188] team0: Port device team_slave_0 added [ 53.603476][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.611346][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.619126][ T4194] device bridge_slave_0 entered promiscuous mode [ 53.636031][ T4188] team0: Port device team_slave_1 added [ 53.650059][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.660551][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.667634][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.675478][ T4194] device bridge_slave_1 entered promiscuous mode [ 53.694076][ T4192] team0: Port device team_slave_0 added [ 53.709041][ T4192] team0: Port device team_slave_1 added [ 53.716103][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.741098][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.748046][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.773991][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.798623][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.814278][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.821588][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.847590][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.868067][ T4197] team0: Port device team_slave_0 added [ 53.875521][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.909199][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.916317][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.943045][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.955403][ T4197] team0: Port device team_slave_1 added [ 53.968389][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.975757][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.983644][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.993250][ T4194] team0: Port device team_slave_0 added [ 53.999274][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.006902][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.015482][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.045484][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.054995][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.062519][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.088593][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.111240][ T4194] team0: Port device team_slave_1 added [ 54.122728][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.129680][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.156744][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.169858][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.213058][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.220023][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.246427][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.267907][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.275252][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.289410][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.296516][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.323099][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.341209][ T4185] team0: Port device team_slave_0 added [ 54.351411][ T4192] device hsr_slave_0 entered promiscuous mode [ 54.358217][ T4192] device hsr_slave_1 entered promiscuous mode [ 54.365087][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.373169][ T4192] Cannot create hsr debugfs directory [ 54.379064][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.386204][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.412647][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.429484][ T4185] team0: Port device team_slave_1 added [ 54.521938][ T4194] device hsr_slave_0 entered promiscuous mode [ 54.528736][ T4194] device hsr_slave_1 entered promiscuous mode [ 54.535923][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.544347][ T4194] Cannot create hsr debugfs directory [ 54.550306][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.557493][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.583785][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.598106][ T4197] device hsr_slave_0 entered promiscuous mode [ 54.605196][ T4197] device hsr_slave_1 entered promiscuous mode [ 54.611926][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.619496][ T4197] Cannot create hsr debugfs directory [ 54.643589][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.650884][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.677057][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.748392][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.755075][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.762078][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.769760][ T4185] Cannot create hsr debugfs directory [ 54.791365][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 54.870823][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 54.880774][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 54.894764][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 54.910563][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 54.999171][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.011044][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.027890][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.036506][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.078450][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.088662][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.109462][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.123740][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.169268][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.178317][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.214493][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.224125][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.278627][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.306149][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.315901][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.335358][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.349803][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.359251][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.377541][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.385566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.395895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.414850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.423917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.433254][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.440617][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.458219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.467319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.475311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.494641][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.516641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.526273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.535985][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.543079][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.551874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.571368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.579959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.589011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.598660][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.605754][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.614357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.624147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.633397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.642270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.651029][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.658078][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.665889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.674889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.683707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.709356][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.719891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.727789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.739279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.748108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.757380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.766394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.778310][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.792800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.804167][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.816555][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.832099][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.841682][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.865111][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.880102][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.889789][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.905642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.914572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.941860][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.955137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.966279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.004303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.013300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.023971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.033526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.043007][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.050090][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.064376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.074976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.083516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.092630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.101514][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.108574][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.116418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.125231][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.140524][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.148576][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.183261][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.225170][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.239283][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.249868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.264796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.276759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.285769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.296773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.304551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.312652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.321482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.329688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.337979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.353700][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.367792][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.379466][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.393920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.409896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.419757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.433775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.445893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.454573][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.461675][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.469485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.478672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.487431][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.494537][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.502512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.518897][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.538093][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.546656][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.573438][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.592383][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.611492][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.622346][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.642186][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.649271][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.668164][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.678625][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.689826][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.698750][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.708153][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.715300][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.723322][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.735111][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.746440][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.775260][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.790201][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.801138][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.809920][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.826413][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.836331][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.845881][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.856272][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.860725][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 56.865448][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.879029][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.892152][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.901034][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.913486][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.934179][ T4188] device veth0_vlan entered promiscuous mode [ 56.941374][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 56.947614][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 56.957613][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.960796][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 56.974639][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 56.975387][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.000700][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.008348][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.020270][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.031126][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.039505][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.048682][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.057967][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.066975][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.075904][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.084593][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.093634][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.102875][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.116731][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.136539][ T4188] device veth1_vlan entered promiscuous mode [ 57.144527][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.153687][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.163295][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.172216][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.182675][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.195329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.206743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.291458][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.300327][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.312840][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.339869][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.349063][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.361595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.369903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.379130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.392560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.402775][ T4188] device veth0_macvtap entered promiscuous mode [ 57.426825][ T4192] device veth0_vlan entered promiscuous mode [ 57.434512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.444534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.453498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.462900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.470346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.480835][ T4188] device veth1_macvtap entered promiscuous mode [ 57.496003][ T4194] device veth0_vlan entered promiscuous mode [ 57.506957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.515739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.523874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.539973][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.552903][ T4192] device veth1_vlan entered promiscuous mode [ 57.565507][ T4194] device veth1_vlan entered promiscuous mode [ 57.581589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.593623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.605939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.616307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.631792][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.657527][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.665934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.675482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.691075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.699732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.722086][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.730989][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.738038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.748063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.763770][ T4194] device veth0_macvtap entered promiscuous mode [ 57.786021][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.795570][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.808388][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.817510][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.834596][ T4194] device veth1_macvtap entered promiscuous mode [ 57.846843][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.855764][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.865628][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.874242][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.888458][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.920237][ T4192] device veth0_macvtap entered promiscuous mode [ 57.948725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.957590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.966969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.976624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.990225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.998496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.007094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.016090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.024254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.038256][ T4185] device veth0_vlan entered promiscuous mode [ 58.046465][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.057115][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.069737][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.078285][ T4192] device veth1_macvtap entered promiscuous mode [ 58.103124][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.111795][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.120289][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.131052][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.144154][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.155284][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.178460][ T4185] device veth1_vlan entered promiscuous mode [ 58.196457][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.207066][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.217040][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.234749][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.243925][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.254964][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.264126][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.283385][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.294248][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.307174][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.317875][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.329115][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.347036][ T4197] device veth0_vlan entered promiscuous mode [ 58.365153][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.374203][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.384053][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.393650][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.402213][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.412144][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.420050][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.435832][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.446567][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.456658][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.467913][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.479157][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.502428][ T4197] device veth1_vlan entered promiscuous mode [ 58.511719][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.520313][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.535710][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.545834][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.554710][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.564195][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.607116][ T4185] device veth0_macvtap entered promiscuous mode [ 58.614630][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.641134][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.658235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.666592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.675974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.686955][ T4185] device veth1_macvtap entered promiscuous mode [ 58.715749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.726120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.745090][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.756101][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.767651][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.778221][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.788908][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.799817][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.811931][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.825334][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.836246][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.846449][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.857120][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.868139][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.878779][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.890190][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.899732][ T4197] device veth0_macvtap entered promiscuous mode [ 58.910367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.919218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.928056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.937749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.945130][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 58.947941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.960400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.969379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.985570][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.986581][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.000733][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.010040][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.019127][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.028679][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 59.028905][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.034887][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 59.035075][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 59.035150][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 59.068329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.083830][ T4197] device veth1_macvtap entered promiscuous mode [ 59.114499][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.123724][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.133874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.142796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.181237][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.194442][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.204919][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.215616][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.225809][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.236616][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.246723][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.257987][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.270961][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.296067][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.310340][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.322280][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.330142][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.363013][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.371195][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.380005][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.389402][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.403105][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.415131][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.427420][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.436200][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.448615][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.459873][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.490720][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.502167][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.513186][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.523924][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.535612][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.549224][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.559242][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.571626][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.580395][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.596041][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.609798][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.637768][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.668617][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.678415][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.688543][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.728230][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.747736][ T4268] loop2: detected capacity change from 0 to 256 [ 59.782742][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.791781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.894373][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.897373][ T4268] FAT-fs (loop2): Directory bread(block 64) failed [ 59.914780][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.977097][ T4268] FAT-fs (loop2): Directory bread(block 65) failed [ 59.986003][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.009339][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.028026][ T4277] loop0: detected capacity change from 0 to 512 [ 60.034610][ T4268] FAT-fs (loop2): Directory bread(block 66) failed [ 60.036442][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.055214][ T4268] FAT-fs (loop2): Directory bread(block 67) failed [ 60.055669][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.099657][ T4268] FAT-fs (loop2): Directory bread(block 68) failed [ 60.117265][ T4277] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.151952][ T4268] FAT-fs (loop2): Directory bread(block 69) failed [ 60.158710][ T4268] FAT-fs (loop2): Directory bread(block 70) failed [ 60.174876][ T4277] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.198476][ T4268] FAT-fs (loop2): Directory bread(block 71) failed [ 60.220390][ T4268] FAT-fs (loop2): Directory bread(block 72) failed [ 60.240024][ T4268] FAT-fs (loop2): Directory bread(block 73) failed [ 60.242973][ T4280] loop4: detected capacity change from 0 to 512 [ 60.269657][ T4277] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.1: inode #15: comm syz.0.1: iget: illegal inode # [ 60.358612][ T4277] EXT4-fs (loop0): Remounting filesystem read-only [ 60.374203][ T4277] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 60.399071][ T4277] EXT4-fs (loop0): Remounting filesystem read-only [ 60.404569][ T4280] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.408566][ T4277] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 60.966260][ T4287] loop0: detected capacity change from 0 to 32768 [ 61.007831][ T4295] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 61.029475][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 61.032128][ T4287] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 61.043926][ T4287] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 61.063782][ T4297] loop3: detected capacity change from 0 to 64 [ 61.088762][ T4287] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 61.104093][ T4293] loop1: detected capacity change from 0 to 2048 [ 61.108382][ T4225] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 61.117417][ T4225] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 61.164879][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 61.179730][ T26] audit: type=1800 audit(1775572851.983:2): pid=4297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 61.208712][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 61.226326][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 61.239799][ T4293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.244918][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 61.250204][ T4225] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 132ms [ 61.282367][ T4225] gfs2: fsid=syz:syz.0: jid=0: Done [ 61.298541][ T4287] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 61.535586][ T4311] loop2: detected capacity change from 0 to 512 [ 61.623072][ T4311] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.678833][ T4311] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.821875][ T4311] EXT4-fs (loop2): 1 truncate cleaned up [ 61.861897][ T4311] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 62.038070][ T4321] loop1: detected capacity change from 0 to 4096 [ 62.122615][ T4321] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 62.269212][ T4321] ntfs: volume version 3.1. [ 62.831859][ T4325] loop0: detected capacity change from 0 to 65536 [ 62.881053][ T4325] ======================================================= [ 62.881053][ T4325] WARNING: The mand mount option has been deprecated and [ 62.881053][ T4325] and is ignored by this kernel. Remove the mand [ 62.881053][ T4325] option from the mount to silence this warning. [ 62.881053][ T4325] ======================================================= [ 63.070961][ T4325] XFS (loop0): Mounting V5 Filesystem [ 63.193136][ T4325] XFS (loop0): Ending clean mount [ 63.217108][ T4325] XFS (loop0): Quotacheck needed: Please wait. [ 63.277730][ T4325] XFS (loop0): Quotacheck: Done. [ 63.320592][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.355631][ T4185] XFS (loop0): Unmounting Filesystem [ 63.393931][ T4357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.570705][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 63.700676][ T4369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41'. [ 63.700753][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.748708][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.776704][ T4369] netlink: 2 bytes leftover after parsing attributes in process `syz.4.41'. [ 63.778404][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.802249][ T4228] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.812322][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.850650][ T4228] usb 2-1: config 0 descriptor?? [ 64.155052][ T4390] loop4: detected capacity change from 0 to 128 [ 64.166262][ T4392] capability: warning: `syz.2.49' uses 32-bit capabilities (legacy support in use) [ 64.293092][ T4394] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.50'. [ 64.352685][ T4228] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 64.404606][ T4396] TCP: TCP_TX_DELAY enabled [ 64.472917][ T4228] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 64.485386][ T4226] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.602744][ T21] usb 2-1: USB disconnect, device number 2 [ 64.681421][ T4400] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,bsdgroups,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 64.790312][ T4401] fido_id[4401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 64.825412][ T4400] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.927375][ T4400] EXT4-fs error (device loop2): ext4_free_blocks:6232: comm syz.2.53: Freeing blocks not in datazone - block = 0, count = 16 [ 64.930715][ T4403] set_capacity_and_notify: 1 callbacks suppressed [ 64.930728][ T4403] loop4: detected capacity change from 0 to 32768 [ 64.994147][ T4403] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.54 (4403) [ 65.022159][ T153] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 65.040829][ T4226] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 65.049886][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.059228][ T153] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 61 with max blocks 1 with error 28 [ 65.086233][ T153] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.086233][ T153] [ 65.093653][ T4226] usb 1-1: Product: syz [ 65.106948][ T4403] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 65.116104][ T153] EXT4-fs (loop2): Total free blocks count 0 [ 65.123384][ T153] EXT4-fs (loop2): Free/Dirty block details [ 65.126239][ T4226] usb 1-1: Manufacturer: syz [ 65.129324][ T153] EXT4-fs (loop2): free_blocks=0 [ 65.149587][ T153] EXT4-fs (loop2): dirty_blocks=16 [ 65.155099][ T4226] usb 1-1: SerialNumber: syz [ 65.159975][ T4403] BTRFS info (device loop4): enabling auto defrag [ 65.189873][ T4403] BTRFS info (device loop4): use no compression [ 65.197495][ T153] EXT4-fs (loop2): Block reservation details [ 65.199650][ T4403] BTRFS info (device loop4): max_inline at 4096 [ 65.231181][ T4403] BTRFS info (device loop4): using free space tree [ 65.237962][ T4403] BTRFS info (device loop4): has skinny extents [ 65.238801][ T153] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 65.303339][ T4414] loop1: detected capacity change from 0 to 512 [ 65.392840][ T4414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.446526][ T4424] loop2: detected capacity change from 0 to 64 [ 65.489389][ T4428] loop3: detected capacity change from 0 to 128 [ 65.613646][ T4403] BTRFS info (device loop4): enabling ssd optimizations [ 65.660988][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 65.843335][ T4443] tipc: Started in network mode [ 65.848317][ T4443] tipc: Node identity ac14142f, cluster identity 4711 [ 65.856996][ T4443] tipc: New replicast peer: 0.0.0.0 [ 65.864737][ T4443] tipc: Enabled bearer , priority 10 [ 65.884355][ T4443] netlink: 64 bytes leftover after parsing attributes in process `syz.2.63'. [ 65.950606][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 65.950733][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.980589][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 66.033686][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 66.066473][ T4226] lan78xx: probe of 1-1:1.0 failed with error -71 [ 66.088316][ T4226] usb 1-1: USB disconnect, device number 2 [ 66.410737][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.567691][ T4465] loop0: detected capacity change from 0 to 128 [ 66.583706][ T4465] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 66.602138][ T4465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.921589][ T4448] loop1: detected capacity change from 0 to 40427 [ 66.927198][ T4463] loop4: detected capacity change from 0 to 65536 [ 66.941669][ T4225] tipc: Node number set to 2886997039 [ 66.998012][ T4467] input: syz1 as /devices/virtual/input/input6 [ 67.013833][ T4448] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 67.030772][ T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.040764][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.048860][ T13] usb 4-1: Product: syz [ 67.053339][ T13] usb 4-1: Manufacturer: syz [ 67.057983][ T13] usb 4-1: SerialNumber: syz [ 67.070601][ T4448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 67.087283][ T4463] XFS (loop4): Mounting V5 Filesystem [ 67.112497][ T13] cdc_ncm 4-1:1.0: skipping garbage [ 67.164448][ T4448] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.248946][ T4463] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x21 dinode [ 67.259595][ T4463] XFS (loop4): Unmount and run xfs_repair [ 67.266295][ T4463] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 67.273745][ T4463] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 67.282684][ T4463] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 67.291735][ T4463] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 69 c5 80 b8 ..e.....4.Xhi... [ 67.300662][ T4463] 00000030: 34 f7 58 68 69 c5 80 b8 00 00 00 00 00 00 00 00 4.Xhi........... [ 67.309519][ T4463] 00000040: 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ [ 67.319770][ T4463] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 67.328748][ T4463] 00000060: ff ff ff ff f6 31 a3 b2 00 00 00 00 00 00 00 02 .....1.......... [ 67.337631][ T4463] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 67.348296][ T4463] XFS (loop4): failed to read RT inodes [ 67.523038][ T4448] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 67.562117][ T4448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 67.743978][ T9] attempt to access beyond end of device [ 67.743978][ T9] loop1: rw=1, want=45128, limit=40427 [ 67.790058][ T4493] netlink: 60 bytes leftover after parsing attributes in process `syz.4.76'. [ 67.868811][ T4495] netlink: 'syz.4.77': attribute type 5 has an invalid length. [ 67.981122][ T4225] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.170014][ T4497] binder: 4496:4497 ioctl c0306201 200000001a80 returned -14 [ 68.241064][ T13] cdc_ncm 4-1:1.0: bind() failure [ 68.266480][ T4225] usb 1-1: Using ep0 maxpacket: 16 [ 68.300835][ T13] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 68.320839][ T13] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 68.350662][ T13] usbtest: probe of 4-1:1.1 failed with error -71 [ 68.368508][ T13] usb 4-1: USB disconnect, device number 2 [ 68.596221][ T4225] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 68.610492][ T4225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.620930][ T4225] usb 1-1: Product: syz [ 68.625112][ T4225] usb 1-1: Manufacturer: syz [ 68.639044][ T4225] usb 1-1: SerialNumber: syz [ 68.654021][ T4225] usb 1-1: config 0 descriptor?? [ 68.693132][ T4225] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 68.749787][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.758074][ T4225] usb 1-1: Detected FT-X [ 68.859226][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.905960][ T4225] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 68.955774][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.030247][ T4516] loop2: detected capacity change from 0 to 32768 [ 69.045852][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.100702][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.114671][ T4516] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.86 (4516) [ 69.154785][ T4516] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 69.193865][ T4516] BTRFS info (device loop2): setting nodatacow, compression disabled [ 69.220969][ T4516] BTRFS info (device loop2): turning on flush-on-commit [ 69.228152][ T4516] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 69.251338][ T4516] BTRFS info (device loop2): turning off flush-on-commit [ 69.267708][ T4516] BTRFS info (device loop2): using free space tree [ 69.281754][ T4516] BTRFS info (device loop2): has skinny extents [ 69.370848][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 69.376648][ T4530] loop4: detected capacity change from 0 to 1024 [ 69.406045][ T4225] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 69.459440][ T4530] EXT4-fs (loop4): Ignoring removed bh option [ 69.501261][ T13] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 69.529256][ T13] usb 4-1: config 0 has no interface number 0 [ 69.582439][ T4530] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noblock_validity,delalloc,journal_dev=0x0000000000000002,commit=0x0000000000000000,barrier=0x000000000000701c,bh,,errors=continue. Quota mode: none. [ 69.615109][ T7] usb 1-1: USB disconnect, device number 3 [ 69.648172][ T4530] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.682673][ T4530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.89: bg 0: block 112: padding at end of block bitmap is not set [ 69.704665][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 69.745891][ T4516] BTRFS info (device loop2): enabling ssd optimizations [ 69.746057][ T4530] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.89: Freeing blocks not in datazone - block = 0, count = 16 [ 69.753400][ T13] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 69.786568][ T7] ftdi_sio 1-1:0.0: device disconnected [ 69.815387][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.829536][ T13] usb 4-1: Product: syz [ 69.860940][ T13] usb 4-1: Manufacturer: syz [ 69.867396][ T13] usb 4-1: SerialNumber: syz [ 69.904820][ T4544] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.919941][ T13] usb 4-1: config 0 descriptor?? [ 69.932443][ T4544] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.932443][ T4544] [ 69.947358][ T4544] EXT4-fs (loop4): Total free blocks count 0 [ 69.958253][ T4544] EXT4-fs (loop4): Free/Dirty block details [ 69.974089][ T4544] EXT4-fs (loop4): free_blocks=16 [ 69.989900][ T13] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 70.003398][ T4544] EXT4-fs (loop4): dirty_blocks=16 [ 70.016713][ T4544] EXT4-fs (loop4): Block reservation details [ 70.040653][ T4544] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 70.066585][ T4520] chnl_net:caif_netlink_parms(): no params data found [ 70.202423][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 70.283651][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 70.440143][ T4518] udc-core: couldn't find an available UDC or it's busy [ 70.462868][ T4573] loop0: detected capacity change from 0 to 128 [ 70.476337][ T4518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.592526][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.599641][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.610838][ T4520] device bridge_slave_0 entered promiscuous mode [ 70.620081][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.641228][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.649284][ T4573] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.649310][ T4520] device bridge_slave_1 entered promiscuous mode [ 70.666140][ T4520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.688346][ T4573] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.703838][ T4455] usb 4-1: USB disconnect, device number 3 [ 70.720621][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 70.740504][ T4520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.766638][ T4520] team0: Port device team_slave_0 added [ 70.784405][ T4573] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 70.785337][ T4583] loop4: detected capacity change from 0 to 2048 [ 70.811186][ T4520] team0: Port device team_slave_1 added [ 70.836984][ T4455] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 70.898383][ T4455] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 70.913000][ T4455] quatech2 4-1:0.51: device disconnected [ 70.932026][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.938995][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.978913][ T4583] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.042899][ T4520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.060971][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop4 [ 71.065582][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.085459][ T4583] NILFS (loop4): mounting unchecked fs [ 71.123676][ T4587] loop2: detected capacity change from 0 to 8192 [ 71.145853][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop4 [ 71.153798][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.169027][ T4583] NILFS (loop4): recovery complete [ 71.188708][ T4457] Bluetooth: hci3: command 0x0409 tx timeout [ 71.199486][ T4520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.205287][ T4596] input: syz0 as /devices/virtual/input/input7 [ 71.266930][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.274862][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285794][ T4599] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.301679][ T4587] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 71.351605][ T4520] device hsr_slave_0 entered promiscuous mode [ 71.358697][ T4520] device hsr_slave_1 entered promiscuous mode [ 71.365885][ T4520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.385056][ T4520] Cannot create hsr debugfs directory [ 71.401880][ T4587] REISERFS (device loop2): using ordered data mode [ 71.408657][ T4587] reiserfs: using flush barriers [ 71.422538][ T4587] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.439867][ T4587] REISERFS (device loop2): checking transaction log (loop2) [ 71.474588][ T4606] loop3: detected capacity change from 0 to 256 [ 71.682575][ T4587] REISERFS (device loop2): Using tea hash to sort names [ 71.725777][ T4587] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 71.860903][ T4587] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 72.018019][ T4619] device syzkaller1 entered promiscuous mode [ 72.246072][ T4630] loop3: detected capacity change from 0 to 1024 [ 72.400970][ T9] device hsr_slave_0 left promiscuous mode [ 72.441169][ T4630] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.478486][ T9] device hsr_slave_1 left promiscuous mode [ 72.493238][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.501432][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.509955][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.518181][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.526168][ T9] device bridge_slave_1 left promiscuous mode [ 72.534138][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.616886][ T9] device bridge_slave_0 left promiscuous mode [ 72.635225][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.740910][ T9] device veth1_macvtap left promiscuous mode [ 72.747550][ T9] device veth0_macvtap left promiscuous mode [ 72.775265][ T9] device veth1_vlan left promiscuous mode [ 72.784003][ T9] device veth0_vlan left promiscuous mode [ 72.809710][ T4654] loop3: detected capacity change from 0 to 128 [ 72.873148][ T4654] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 72.916843][ T4654] sysv_free_block: flc_count > flc_size [ 72.930916][ T4654] sysv_free_block: flc_count > flc_size [ 72.946702][ T4654] sysv_free_block: flc_count > flc_size [ 72.955389][ T4654] sysv_free_block: flc_count > flc_size [ 72.966842][ T4654] sysv_free_block: flc_count > flc_size [ 72.973857][ T4654] sysv_free_block: flc_count > flc_size [ 72.981906][ T4654] sysv_free_block: flc_count > flc_size [ 72.987621][ T4654] sysv_free_block: flc_count > flc_size [ 73.001535][ T4654] sysv_free_block: flc_count > flc_size [ 73.007209][ T4654] sysv_free_block: flc_count > flc_size [ 73.022076][ T4654] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 73.168870][ T4650] loop4: detected capacity change from 0 to 40427 [ 73.226014][ T4650] F2FS-fs (loop4): invalid crc value [ 73.260612][ T4455] Bluetooth: hci3: command 0x041b tx timeout [ 73.277025][ T9] team0 (unregistering): Port device team_slave_1 removed [ 73.289813][ T4650] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.328855][ T9] team0 (unregistering): Port device team_slave_0 removed [ 73.390037][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.408064][ T4650] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 73.422226][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.460199][ T4650] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.530203][ T4650] attempt to access beyond end of device [ 73.530203][ T4650] loop4: rw=2049, want=45104, limit=40427 [ 73.599433][ T9] bond0 (unregistering): Released all slaves [ 73.819400][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 74.301402][ T4663] loop3: detected capacity change from 0 to 131072 [ 74.341258][ T4663] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 74.347988][ T4663] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.370340][ T4663] F2FS-fs (loop3): invalid crc value [ 74.398613][ T4663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.460634][ T4663] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.467741][ T4663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 74.827990][ T4690] device syzkaller1 entered promiscuous mode [ 74.958508][ T4520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.000968][ T4520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.099343][ T4520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.140997][ T4520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.340714][ T4455] Bluetooth: hci3: command 0x040f tx timeout [ 75.457513][ T4520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.521526][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.537526][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.607527][ T4713] device dummy0 entered promiscuous mode [ 75.647275][ T4713] device netdevsim0 entered promiscuous mode [ 75.697286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 75.735723][ T4520] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.761619][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.811901][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.831881][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.838954][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.890978][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.906018][ T4692] loop0: detected capacity change from 0 to 32768 [ 75.975363][ T4692] XFS: attr2 mount option is deprecated. [ 76.017160][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.044325][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.113868][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.121003][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.164508][ T4692] XFS (loop0): Mounting V5 Filesystem [ 76.208535][ T4736] loop4: detected capacity change from 0 to 512 [ 76.256656][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.293342][ T4692] XFS (loop0): Ending clean mount [ 76.344825][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.369470][ T4692] XFS (loop0): Quotacheck needed: Please wait. [ 76.382735][ T1107] cfg80211: failed to load regulatory.db [ 76.399658][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.440383][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.488573][ T4520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.518979][ T4520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.558846][ T4736] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.600616][ T4692] XFS (loop0): Quotacheck: Done. [ 76.655388][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.657580][ T4736] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.671341][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.691601][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.701498][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.725552][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.746538][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.782401][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.803786][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.827957][ T4185] XFS (loop0): Unmounting Filesystem [ 76.833408][ T4750] EXT4-fs (loop4): shut down requested (0) [ 76.937472][ T4719] loop2: detected capacity change from 0 to 32768 [ 77.170798][ T4719] XFS (loop2): Mounting V5 Filesystem [ 77.412514][ T4719] XFS (loop2): Ending clean mount [ 77.420753][ T4454] Bluetooth: hci3: command 0x0419 tx timeout [ 77.491719][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.495589][ T4719] XFS (loop2): Quotacheck needed: Please wait. [ 77.499248][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.573628][ T4520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.610751][ T4226] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.659929][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.699415][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.747620][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.791388][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.804640][ T4719] XFS (loop2): Quotacheck: Done. [ 77.818659][ T4520] device veth0_vlan entered promiscuous mode [ 77.850597][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 77.866964][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.887948][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.936502][ T4520] device veth1_vlan entered promiscuous mode [ 77.951424][ T4225] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 77.983435][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.021165][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.049392][ T4194] XFS (loop2): Unmounting Filesystem [ 78.057400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.070837][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 78.071556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.087816][ T4226] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 78.106303][ T4520] device veth0_macvtap entered promiscuous mode [ 78.127578][ T4520] device veth1_macvtap entered promiscuous mode [ 78.158567][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.199431][ T4226] usb 4-1: config 0 descriptor?? [ 78.201869][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.242725][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.276488][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.298062][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.310757][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.322834][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.334193][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.345844][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.366903][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.378317][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.389540][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.409496][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.420408][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.430644][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.441465][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.451664][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.465386][ T4773] udc-core: couldn't find an available UDC or it's busy [ 78.472409][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.473653][ T4773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.512767][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.531550][ T4225] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 78.538590][ T4520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.559683][ T4225] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 78.564347][ T4773] udc-core: couldn't find an available UDC or it's busy [ 78.568474][ T4225] usb 5-1: Product: syz [ 78.579271][ T4225] usb 5-1: Manufacturer: syz [ 78.582914][ T4520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.589288][ T4225] usb 5-1: SerialNumber: syz [ 78.592789][ T4773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.604127][ T4225] usb 5-1: config 0 descriptor?? [ 78.609911][ T4520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.623010][ T4520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.638284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.647454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.661941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.676358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.687114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.708253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.854498][ T4226] hid (null): global environment stack underflow [ 78.861380][ T4225] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 78.862756][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.937449][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.995675][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.014965][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.038300][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.056729][ T4455] usb 4-1: USB disconnect, device number 4 [ 79.070176][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.077738][ T4225] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 79.094727][ T4225] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 79.121649][ T4225] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 79.606598][ T4822] loop1: detected capacity change from 0 to 65536 [ 79.618482][ T4225] peak_usb: probe of 5-1:0.0 failed with error -22 [ 79.629402][ T4225] usb 5-1: USB disconnect, device number 2 [ 79.792950][ T4822] XFS (loop1): Mounting V5 Filesystem [ 79.897036][ T4854] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 79.916643][ T4822] XFS (loop1): Ending clean mount [ 79.928652][ T4822] XFS (loop1): Quotacheck needed: Please wait. [ 79.964284][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 80.051630][ T4822] XFS (loop1): Quotacheck: Done. [ 80.157927][ T4520] XFS (loop1): Unmounting Filesystem [ 80.462659][ T4882] loop3: detected capacity change from 0 to 128 [ 80.520548][ T4226] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 80.521856][ T4882] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,errors=remount-ro,nodioread_nolock,nolazytime,. Quota mode: none. [ 80.577834][ T4882] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.701182][ T4882] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.158: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 80.744156][ T4882] EXT4-fs (loop3): Remounting filesystem read-only [ 80.890834][ T4226] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 80.913894][ T4226] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 80.932876][ T4226] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 80.967085][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.005902][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 81.050579][ T4226] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.088056][ T4226] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 81.107581][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.157674][ T4226] usb 5-1: config 0 descriptor?? [ 81.181934][ T4871] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.305616][ T4912] loop8: detected capacity change from 0 to 8 [ 81.323322][ T4912] Dev loop8: unable to read RDB block 8 [ 81.340579][ T4912] loop8: unable to read partition table [ 81.357590][ T4912] loop8: partition table beyond EOD, truncated [ 81.364008][ T4912] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 81.505820][ T4226] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 81.578994][ T4901] loop3: detected capacity change from 0 to 32768 [ 81.585552][ T4918] sctp: [Deprecated]: syz.2.171 (pid 4918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.585552][ T4918] Use struct sctp_sack_info instead [ 81.650546][ C1] usblp0: nonzero read bulk status received: -71 [ 81.659857][ T4871] usblp0: error -71 reading from printer [ 81.692497][ T4901] XFS (loop3): Mounting V5 Filesystem [ 81.699800][ T4226] usb 5-1: USB disconnect, device number 3 [ 81.750864][ T4226] usblp0: removed [ 81.818752][ T4914] loop1: detected capacity change from 0 to 32768 [ 81.825642][ T4901] XFS (loop3): Ending clean mount [ 81.849202][ T26] audit: type=1800 audit(1775572872.653:3): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="file2" dev="loop3" ino=6151 res=0 errno=0 [ 81.880699][ T4932] netlink: 452 bytes leftover after parsing attributes in process `syz.2.174'. [ 81.894704][ T4188] XFS (loop3): Unmounting Filesystem [ 81.951361][ T4934] netlink: 'syz.0.176': attribute type 11 has an invalid length. [ 81.964810][ T4914] (syz.1.169,4914,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.988680][ T4934] netlink: 19 bytes leftover after parsing attributes in process `syz.0.176'. [ 82.084589][ T4914] (syz.1.169,4914,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.143387][ T4939] loop2: detected capacity change from 0 to 64 [ 82.157967][ T4940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 82.207653][ T4939] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 82.242983][ T4939] hfs: filesystem is marked locked, mounting read-only. [ 82.313739][ T4914] JBD2: Ignoring recovery information on journal [ 82.561267][ T4945] loop3: detected capacity change from 0 to 32768 [ 82.566125][ T4914] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 82.633385][ T4952] loop0: detected capacity change from 0 to 512 [ 82.655244][ T4945] [ 82.655244][ T4945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.655244][ T4945] [ 82.686480][ T4945] [ 82.686480][ T4945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.686480][ T4945] [ 82.697562][ T4945] [ 82.697562][ T4945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.697562][ T4945] [ 82.708503][ T4945] [ 82.708503][ T4945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.708503][ T4945] [ 82.719121][ T4945] [ 82.719121][ T4945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.719121][ T4945] [ 82.722718][ T4952] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.729744][ T4945] [ 82.729744][ T4945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.729744][ T4945] [ 82.755801][ T4226] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.764131][ T277] [ 82.764131][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.764131][ T277] [ 82.807583][ T4952] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.840622][ T4303] [ 82.840622][ T4303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.840622][ T4303] [ 82.846826][ T4952] EXT4-fs (loop0): 1 truncate cleaned up [ 82.867481][ T4952] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nogrpid,debug_want_extra_isize=0x0000000000000068,barrier,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 82.887455][ T4303] [ 82.887455][ T4303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.887455][ T4303] [ 82.908867][ T4188] [ 82.908867][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.908867][ T4188] [ 82.932141][ T276] [ 82.932141][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.932141][ T276] [ 82.974123][ T4188] [ 82.974123][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.974123][ T4188] [ 83.130849][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.160280][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.191439][ T4226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 83.213365][ T4226] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 83.230563][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.240333][ T4966] loop3: detected capacity change from 0 to 256 [ 83.268389][ T4226] usb 5-1: config 0 descriptor?? [ 83.361215][ T4966] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 83.424121][ T4520] ocfs2: Unmounting device (7,1) on (node local) [ 83.641386][ T4974] loop3: detected capacity change from 0 to 64 [ 83.763200][ T4226] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 83.772671][ T4226] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 83.779932][ T4226] kovaplus 0003:1E7D:2D50.0003: item fetching failed at offset 2/5 [ 83.819145][ T4226] kovaplus 0003:1E7D:2D50.0003: parse failed [ 83.840756][ T4226] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -22 [ 83.954382][ T4986] loop3: detected capacity change from 0 to 64 [ 83.967469][ T4455] usb 5-1: USB disconnect, device number 4 [ 84.120193][ T4188] Trying to free block not in datazone [ 84.358308][ T5001] loop2: detected capacity change from 0 to 1024 [ 84.678766][ T5008] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.205: invalid indirect mapped block 4294967295 (level 1) [ 84.710501][ T5008] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.205: invalid indirect mapped block 4294967295 (level 1) [ 84.751548][ T5008] EXT4-fs (loop3): 2 truncates cleaned up [ 84.785737][ T5008] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 84.851495][ T5008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.205: bg 0: block 5: invalid block bitmap [ 84.921353][ T5015] EXT4-fs (loop4): Ignoring removed bh option [ 84.927865][ T5008] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 536870917 > max in inode 15 [ 84.975863][ T5015] EXT4-fs (loop4): 1 truncate cleaned up [ 85.017649][ T5015] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,dax=never,bh,jqfmt=vfsv0,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 85.040680][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.244721][ T5023] tmpfs: Unknown parameter 'nr' [ 85.251104][ T5023] tmpfs: Too few inodes for current use [ 85.310687][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 85.460952][ T7] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 85.481626][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.492534][ T7] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 85.499945][ T5033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.216'. [ 85.517157][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.535972][ T7] usb 3-1: config 0 descriptor?? [ 86.291740][ T5061] input: syz0 as /devices/virtual/input/input9 [ 86.323068][ T5059] ªªªªª»: renamed from veth0_vlan [ 86.435731][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.450035][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.455086][ T5066] set_capacity_and_notify: 2 callbacks suppressed [ 86.455100][ T5066] loop4: detected capacity change from 0 to 256 [ 86.470415][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.479202][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.487788][ T4454] [ 86.490125][ T4454] ====================================================== [ 86.492388][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.497128][ T4454] WARNING: possible circular locking dependency detected [ 86.497148][ T4454] syzkaller #0 Not tainted [ 86.497156][ T4454] ------------------------------------------------------ [ 86.497161][ T4454] kworker/1:9/4454 is trying to acquire lock: [ 86.497169][ T4454] ffff88807a6e0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 86.497210][ T4454] [ 86.497210][ T4454] but task is already holding lock: [ 86.497214][ T4454] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 86.497251][ T4454] [ 86.497251][ T4454] which lock already depends on the new lock. [ 86.497251][ T4454] [ 86.497256][ T4454] [ 86.497256][ T4454] the existing dependency chain (in reverse order) is: [ 86.497260][ T4454] [ 86.497260][ T4454] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 86.497283][ T4454] __mutex_lock_common+0x1e3/0x2400 [ 86.497301][ T4454] mutex_lock_nested+0x17/0x20 [ 86.497317][ T4454] rfkill_register+0x33/0x8a0 [ 86.497332][ T4454] hci_register_dev+0x452/0x970 [ 86.497349][ T4454] vhci_create_device+0x32c/0x5c0 [ 86.497367][ T4454] vhci_write+0x391/0x450 [ 86.497382][ T4454] vfs_write+0x745/0xd60 [ 86.497396][ T4454] ksys_write+0x152/0x260 [ 86.497409][ T4454] do_syscall_64+0x4c/0xa0 [ 86.497423][ T4454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.497440][ T4454] [ 86.497440][ T4454] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 86.497462][ T4454] __mutex_lock_common+0x1e3/0x2400 [ 86.497479][ T4454] mutex_lock_nested+0x17/0x20 [ 86.497494][ T4454] vhci_send_frame+0x88/0x100 [ 86.497510][ T4454] hci_send_frame+0x1a9/0x2e0 [ 86.497525][ T4454] hci_tx_work+0x9f9/0x1710 [ 86.497541][ T4454] process_one_work+0x85f/0x1010 [ 86.497556][ T4454] worker_thread+0xaa6/0x1290 [ 86.497571][ T4454] kthread+0x436/0x520 [ 86.497584][ T4454] ret_from_fork+0x1f/0x30 [ 86.497600][ T4454] [ 86.497600][ T4454] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 86.497623][ T4454] __flush_work+0x116/0x210 [ 86.497637][ T4454] hci_dev_do_close+0x1e7/0x1030 [ 86.497652][ T4454] hci_unregister_dev+0x2d7/0x580 [ 86.497667][ T4454] vhci_release+0x73/0xc0 [ 86.505288][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.511925][ T4454] __fput+0x234/0x930 [ 86.511945][ T4454] task_work_run+0x125/0x1a0 [ 86.511961][ T4454] do_exit+0x626/0x20c0 [ 86.516533][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.523399][ T4454] do_group_exit+0x12e/0x300 [ 86.523419][ T4454] __x64_sys_exit_group+0x3b/0x40 [ 86.523431][ T4454] do_syscall_64+0x4c/0xa0 [ 86.523447][ T4454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.529616][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.540575][ T4454] [ 86.540575][ T4454] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 86.540601][ T4454] __mutex_lock_common+0x1e3/0x2400 [ 86.540620][ T4454] mutex_lock_nested+0x17/0x20 [ 86.540632][ T4454] bg_scan_update+0x44/0x3b0 [ 86.540646][ T4454] process_one_work+0x85f/0x1010 [ 86.540660][ T4454] worker_thread+0xaa6/0x1290 [ 86.540679][ T4454] kthread+0x436/0x520 [ 86.540693][ T4454] ret_from_fork+0x1f/0x30 [ 86.540709][ T4454] [ 86.540709][ T4454] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 86.540733][ T4454] __lock_acquire+0x2c42/0x7d10 [ 86.540751][ T4454] lock_acquire+0x19e/0x400 [ 86.540766][ T4454] __flush_work+0x116/0x210 [ 86.540780][ T4454] __cancel_work_timer+0x3f4/0x560 [ 86.540792][ T4454] hci_request_cancel_all+0xcc/0x300 [ 86.540806][ T4454] hci_dev_do_close+0x4e/0x1030 [ 86.540820][ T4454] hci_rfkill_set_block+0x10a/0x190 [ 86.540836][ T4454] rfkill_set_block+0x1c6/0x420 [ 86.540850][ T4454] rfkill_epo+0x75/0x170 [ 86.540862][ T4454] rfkill_op_handler+0x76/0x220 [ 86.540873][ T4454] process_one_work+0x85f/0x1010 [ 86.540885][ T4454] worker_thread+0xaa6/0x1290 [ 86.540899][ T4454] kthread+0x436/0x520 [ 86.540910][ T4454] ret_from_fork+0x1f/0x30 [ 86.540923][ T4454] [ 86.540923][ T4454] other info that might help us debug this: [ 86.540923][ T4454] [ 86.540928][ T4454] Chain exists of: [ 86.540928][ T4454] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 86.540928][ T4454] [ 86.540954][ T4454] Possible unsafe locking scenario: [ 86.540954][ T4454] [ 86.540959][ T4454] CPU0 CPU1 [ 86.540963][ T4454] ---- ---- [ 86.540967][ T4454] lock(rfkill_global_mutex); [ 86.540977][ T4454] lock(&data->open_mutex); [ 86.540988][ T4454] lock(rfkill_global_mutex); [ 86.540998][ T4454] lock((work_completion)(&hdev->bg_scan_update)); [ 86.541010][ T4454] [ 86.541010][ T4454] *** DEADLOCK *** [ 86.541010][ T4454] [ 86.541013][ T4454] 3 locks held by kworker/1:9/4454: [ 86.541021][ T4454] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 86.541062][ T4454] #1: ffffc900030cfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 86.541102][ T4454] #2: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 86.541138][ T4454] [ 86.541138][ T4454] stack backtrace: [ 86.541158][ T4454] CPU: 1 PID: 4454 Comm: kworker/1:9 Not tainted syzkaller #0 [ 86.541173][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 86.541182][ T4454] Workqueue: events rfkill_op_handler [ 86.562208][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.567951][ T4454] Call Trace: [ 86.567960][ T4454] [ 86.567966][ T4454] dump_stack_lvl+0x188/0x250 [ 86.588175][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.590812][ T4454] ? load_image+0x400/0x400 [ 86.590832][ T4454] ? show_regs_print_info+0x20/0x20 [ 86.590853][ T4454] ? print_circular_bug+0x12b/0x1a0 [ 86.590870][ T4454] check_noncircular+0x296/0x330 [ 86.590884][ T4454] ? look_up_lock_class+0x71/0x110 [ 86.590901][ T4454] ? add_chain_block+0x940/0x940 [ 86.590914][ T4454] ? lockdep_lock+0xf1/0x1f0 [ 86.590933][ T4454] ? __lock_acquire+0x12e8/0x7d10 [ 86.590952][ T4454] ? mark_lock+0x94/0x320 [ 86.590967][ T4454] __lock_acquire+0x2c42/0x7d10 [ 86.590995][ T4454] ? verify_lock_unused+0x140/0x140 [ 86.591021][ T4454] lock_acquire+0x19e/0x400 [ 86.591038][ T4454] ? __flush_work+0xfa/0x210 [ 86.591054][ T4454] ? __lock_acquire+0x7d10/0x7d10 [ 86.591073][ T4454] ? read_lock_is_recursive+0x10/0x10 [ 86.591092][ T4454] ? start_flush_work+0x776/0x820 [ 86.591109][ T4454] __flush_work+0x116/0x210 [ 86.591121][ T4454] ? __flush_work+0xfa/0x210 [ 86.591135][ T4454] ? flush_work+0x20/0x20 [ 86.591146][ T4454] ? try_to_grab_pending+0xfa/0x7f0 [ 86.591162][ T4454] ? mark_lock+0x94/0x320 [ 86.591175][ T4454] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 86.591193][ T4454] ? lock_chain_count+0x20/0x20 [ 86.591208][ T4454] ? mark_lock+0x94/0x320 [ 86.591220][ T4454] ? __cancel_work_timer+0x36a/0x560 [ 86.591235][ T4454] __cancel_work_timer+0x3f4/0x560 [ 86.591249][ T4454] ? cancel_work_sync+0x20/0x20 [ 86.591263][ T4454] ? __cancel_work+0x1f9/0x2e0 [ 86.602028][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.607065][ T4454] ? lockdep_hardirqs_on+0x94/0x140 [ 86.607090][ T4454] ? __cancel_work+0x27b/0x2e0 [ 86.624719][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.627036][ T4454] ? cancel_work+0x20/0x20 [ 86.627060][ T4454] hci_request_cancel_all+0xcc/0x300 [ 86.668021][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.672466][ T4454] hci_dev_do_close+0x4e/0x1030 [ 86.672490][ T4454] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 86.688882][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.692594][ T4454] ? _raw_spin_unlock+0x40/0x40 [ 86.692613][ T4454] ? kobject_uevent_env+0x371/0x890 [ 86.692631][ T4454] hci_rfkill_set_block+0x10a/0x190 [ 86.692649][ T4454] ? rcu_lock_release+0x20/0x20 [ 86.692670][ T4454] rfkill_set_block+0x1c6/0x420 [ 86.692691][ T4454] rfkill_epo+0x75/0x170 [ 86.692708][ T4454] rfkill_op_handler+0x76/0x220 [ 86.692723][ T4454] process_one_work+0x85f/0x1010 [ 86.692746][ T4454] ? worker_detach_from_pool+0x240/0x240 [ 86.692761][ T4454] ? lockdep_hardirqs_off+0x70/0x100 [ 86.692780][ T4454] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.692795][ T4454] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.692812][ T4454] ? wq_worker_running+0x97/0x170 [ 86.692829][ T4454] worker_thread+0xaa6/0x1290 [ 86.692855][ T4454] kthread+0x436/0x520 [ 86.718520][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.722818][ T4454] ? rcu_lock_release+0x20/0x20 [ 86.722841][ T4454] ? kthread_blkcg+0xd0/0xd0 [ 86.744336][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.744362][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 86.751522][ T4454] ret_from_fork+0x1f/0x30 [ 86.751549][ T4454] [ 87.390541][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.397799][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.405994][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.419354][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.426856][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.434277][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.446459][ T5066] FAT-fs (loop4): Directory bread(block 64) failed [ 87.455083][ T5066] FAT-fs (loop4): Directory bread(block 65) failed [ 87.461677][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.469712][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.478853][ T5066] FAT-fs (loop4): Directory bread(block 66) failed [ 87.485461][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.494345][ T5066] FAT-fs (loop4): Directory bread(block 67) failed [ 87.501375][ T5066] FAT-fs (loop4): Directory bread(block 68) failed [ 87.507957][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.516760][ T5066] FAT-fs (loop4): Directory bread(block 69) failed [ 87.524012][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.533012][ T5066] FAT-fs (loop4): Directory bread(block 70) failed [ 87.539587][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.546869][ T5066] FAT-fs (loop4): Directory bread(block 71) failed [ 87.555078][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.562426][ T5066] FAT-fs (loop4): Directory bread(block 72) failed [ 87.568999][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.593294][ T5066] FAT-fs (loop4): Directory bread(block 73) failed [ 87.611348][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.621791][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.654074][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.669929][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.678992][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.692401][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.699786][ T7] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 87.713551][ T7] greenasia 0003:0E8F:0012.0004: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 87.725143][ T7] greenasia 0003:0E8F:0012.0004: no inputs found [ 87.770690][ T7] usb 3-1: USB disconnect, device number 2 [ 87.808181][ T5121] fido_id[5121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory