last executing test programs: 8.082238639s ago: executing program 4 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') 7.152717329s ago: executing program 4 (id=166): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xb, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xff, 0xb6, '\x00', 0x2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000300)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 5.838523352s ago: executing program 1 (id=171): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.803259293s ago: executing program 4 (id=172): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x2018440, &(0x7f0000003900)={[{@init_itable}, {@quota}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@lazytime}, {@nomblk_io_submit}, {@jqfmt_vfsv1}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5.749652044s ago: executing program 2 (id=173): openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 5.723868315s ago: executing program 2 (id=175): socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0xed0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000680), 0x0) 5.679509927s ago: executing program 2 (id=176): syz_emit_ethernet(0xb3, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0xbf, 0x0, 0x1}, {0x9a2}, {0x5}, {0x200, 0x0, 0x1}, {0x1ab70}], @ipv6=@tipc_packet={0xc, 0x6, "abb2a8", 0x61, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, {[@srh={0x2e, 0x8, 0x4, 0x4, 0xea, 0x20, 0x3, [@local, @loopback, @local, @loopback]}], @payload_conn={{{0x19, 0x0, 0x1, 0x1, 0x1, 0x6, 0x3, 0x2, 0x4, 0x0, 0x3, 0xc, 0x4, 0x0, 0x5, 0xa515, 0x1, 0x4e20, 0x4e20}}, [0x0]}}}}}}}, 0x0) 5.597659099s ago: executing program 2 (id=177): r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x434, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfff, 0x9, 0x3, 0x8, 0xa6, 0x7ff, 0x3, 0x4, 0x6, 0x5d01, 0x9, 0x9, 0x6, 0x1ff, 0x8000, 0x9, 0xfffffffa, 0x200, 0xfff, 0x1, 0x4, 0x6, 0x3, 0xb, 0x4, 0x5fe, 0x4, 0x9, 0x5, 0x7, 0x3, 0x4, 0xffffffff, 0x84, 0x400, 0x8000, 0x9, 0x2ff5, 0xffff, 0x7, 0x4, 0xd5, 0x4, 0x5, 0x8, 0x3ff, 0x4, 0x1, 0x8001, 0x8, 0xa85, 0x4, 0x7, 0x7, 0x1, 0x0, 0x8, 0xffff7fff, 0x1, 0xff, 0x7, 0x1, 0x4, 0x4, 0x0, 0xe6, 0x4, 0x1a, 0x1ff, 0xe, 0x55, 0x7, 0x6, 0x8000008, 0x400, 0x6, 0xffffffff, 0xfffffffe, 0x7, 0x0, 0x80000001, 0x400000, 0x6, 0x401, 0x3, 0x200, 0x1, 0x0, 0x6852, 0x10001, 0x0, 0x3, 0x4, 0xcb, 0xb0, 0xae, 0x8, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x8, 0x245, 0xfc, 0x8b, 0x80000000, 0x0, 0x5, 0x80000000, 0x1, 0x80000000, 0xa976362a, 0x9, 0x9, 0x8, 0xff, 0x80000000, 0x9, 0x8, 0xc869, 0xffff8001, 0xf7, 0x8, 0x40, 0x8, 0x1, 0xf1, 0x6, 0x7, 0x200, 0x2, 0x200, 0x8, 0x5, 0x8, 0x5, 0x7, 0x1, 0x9, 0x918, 0xc035, 0xe, 0x2, 0x3, 0x4, 0x5, 0x5, 0x7a60, 0x9d, 0xfffffffb, 0x1, 0x0, 0x5, 0x5, 0x1, 0x9, 0x8, 0x4, 0x6, 0xc93, 0x13e, 0xff, 0x4, 0x2, 0x7, 0xcd3, 0x6, 0x4, 0xe, 0xffffa776, 0x401, 0x4, 0x8000, 0x3, 0xdbf, 0x10001, 0x0, 0x4, 0x5683e473, 0x13, 0x81, 0xa187, 0x4, 0x1ff, 0x66c, 0x7ff, 0x3610, 0xfffffffd, 0x5, 0x0, 0x9, 0x5, 0xfffff801, 0x0, 0x81, 0xfffffffb, 0x401, 0x6, 0x6, 0xe, 0x101, 0x4, 0x9, 0x4, 0x97c, 0xdb, 0x1, 0x8, 0x7, 0x8, 0x4fbf, 0x160, 0x2, 0x1, 0x5, 0x3, 0x3, 0xfffffff9, 0x7, 0x8, 0x3, 0x4, 0xa, 0x4, 0x6, 0x400, 0x0, 0x9, 0x2d29, 0x1, 0xffffffff, 0x8001, 0x5, 0x7, 0x9, 0xa, 0xec, 0x5, 0x9, 0xffff8acb, 0x4, 0x9, 0x4, 0x2, 0xffffff35, 0x9, 0x8, 0x5, 0x9, 0x7fff, 0x1, 0x6b, 0x81, 0x1, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 5.597400959s ago: executing program 2 (id=178): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, 0x0) socket$netlink(0x10, 0x3, 0xd8e6bc4c30ce9d36) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}, {@usrquota}, {@data_err_ignore}, {@sb={'sb', 0x3d, 0x3}}, {@noauto_da_alloc}]}, 0x4, 0x501, &(0x7f0000000f40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 4.119790747s ago: executing program 4 (id=180): pipe(&(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') sync_file_range(r3, 0x1, 0x81, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x40008c0) recvmmsg(r4, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) 3.521955506s ago: executing program 0 (id=182): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xb, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xff, 0xb6, '\x00', 0x2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000300)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 3.39549151s ago: executing program 0 (id=183): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x20, 0xfffd, 0xa, 0x20, 0x30, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@broadcast, 0x4d6, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0xf}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 3.161398728s ago: executing program 2 (id=184): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) readlink(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048c80}, 0x4000080) 3.10315296s ago: executing program 0 (id=185): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)=ANY=[]) 2.749391731s ago: executing program 1 (id=186): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) getdents64(r0, 0x0, 0x2e) 2.547486428s ago: executing program 3 (id=187): socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0xed0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000680), 0x0) 1.670685586s ago: executing program 4 (id=188): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x27) 1.54503477s ago: executing program 4 (id=189): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0x6, 0x2, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.54477292s ago: executing program 3 (id=190): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) fdatasync(r0) 1.54432936s ago: executing program 1 (id=191): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) readv(r0, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1) 1.313655317s ago: executing program 1 (id=192): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="bad33075218151db00316f3a277f17a8e596c270", 0x14, 0x6008093, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 1.134395503s ago: executing program 1 (id=193): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xb, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xff, 0xb6, '\x00', 0x2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000300)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 965.307759ms ago: executing program 3 (id=194): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x470, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)={0x2}) 783.621205ms ago: executing program 0 (id=195): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 707.640157ms ago: executing program 0 (id=196): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b00010000000009"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 527.779152ms ago: executing program 3 (id=197): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1200010, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 377.674637ms ago: executing program 3 (id=198): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 215.121603ms ago: executing program 1 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000004000000050008"], 0x50) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f0000000640), 0x1, 0x46b, &(0x7f0000001680)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100256a86cf12893d83a6000000", @ANYRES32=r3], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) 71.873828ms ago: executing program 0 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x20000000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r1, 0x2000, 0x0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 0s ago: executing program 3 (id=201): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="757466383d302c757466383d312c636f6465706167653d3933362c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6575632d6a702c726f6469722c756e695f786c6174653d302c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303030392c757466383d312c726f6469722c696f636861727365743d63703836332c757466383d302c726f6469722c00720fdfc8c18c9e546084703b043897c4d67dffdfea0235407a4f4b2012c34806087096b353176de0eeeb9d593d5295ad71caa1f861d19eb343d85e70a36db5b4f9d5cc5f7ba47f74991a265c7c537daa4814f139d3985bb37cdaf8e1cf95fc42b9003ab8f343edaac3e36ea9a608bb1edb3024e8ab6a2ffa51871a01f80740fed5f20e34172fe3820d689aa6"], 0x27, 0x366, &(0x7f0000000340)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xa2, 0x7e, 0x6, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 50.736982][ T4171] cgroup: Unknown subsys name 'net' [ 50.871218][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.090030][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.425919][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 53.469618][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 53.526502][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.556587][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.610020][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 53.628092][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.636154][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.644326][ T4195] device bridge_slave_0 entered promiscuous mode [ 53.673754][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.683563][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.691733][ T4195] device bridge_slave_1 entered promiscuous mode [ 53.712570][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.720011][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.728096][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.765847][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.772921][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.781147][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.792904][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.811132][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.831826][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.839692][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.847633][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.861477][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.868816][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.877276][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.902021][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.920926][ T4195] team0: Port device team_slave_0 added [ 53.948333][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.959554][ T4195] team0: Port device team_slave_1 added [ 53.971871][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.980406][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.989129][ T4194] device bridge_slave_0 entered promiscuous mode [ 53.997002][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.004078][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.012029][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.040907][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.053149][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.062950][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.070236][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.077925][ T4194] device bridge_slave_1 entered promiscuous mode [ 54.086401][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.093754][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.102120][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.111399][ T4190] team0: Port device team_slave_0 added [ 54.125184][ T4190] team0: Port device team_slave_1 added [ 54.148175][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.155442][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.181786][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.215042][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.222461][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.249074][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.272485][ T4185] team0: Port device team_slave_0 added [ 54.280401][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.292195][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.302788][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.309846][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.336218][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.349725][ T4185] team0: Port device team_slave_1 added [ 54.357212][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.375293][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.392273][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.399471][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.426128][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.468478][ T4195] device hsr_slave_0 entered promiscuous mode [ 54.475721][ T4195] device hsr_slave_1 entered promiscuous mode [ 54.518358][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.525494][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.551635][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.571929][ T4194] team0: Port device team_slave_0 added [ 54.581415][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.588375][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.596005][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.603700][ T4190] Cannot create hsr debugfs directory [ 54.619353][ T4184] team0: Port device team_slave_0 added [ 54.627336][ T4184] team0: Port device team_slave_1 added [ 54.637245][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.644278][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.670377][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.682861][ T4194] team0: Port device team_slave_1 added [ 54.744095][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.751286][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.777918][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.789632][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.797464][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.824586][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.836953][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.843960][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.869965][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.902190][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.909240][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.935404][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.975559][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.982809][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.989698][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.997523][ T4185] Cannot create hsr debugfs directory [ 55.057345][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.064765][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.071667][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.079465][ T4184] Cannot create hsr debugfs directory [ 55.108712][ T4194] device hsr_slave_0 entered promiscuous mode [ 55.116394][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 55.116413][ T4194] device hsr_slave_1 entered promiscuous mode [ 55.125912][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 55.135542][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.143383][ T4194] Cannot create hsr debugfs directory [ 55.149271][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 55.195324][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 55.205856][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 55.381095][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.394603][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.407932][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.418046][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.465295][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.501272][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.509850][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.522412][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.534368][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.545537][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.554676][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.566166][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.646805][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.663629][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.696760][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.711116][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.720494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.746241][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.759569][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.779237][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.792483][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.805576][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.814920][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.823978][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.833441][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.843269][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.853442][ T1530] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.860663][ T1530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.869277][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.886930][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.908757][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.918593][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.927626][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.934672][ T1530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.943520][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.971496][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.986571][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.998920][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.009038][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.020267][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.036471][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.045254][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.053239][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.062812][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.072278][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.093555][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.102819][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.112599][ T1530] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.119719][ T1530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.128524][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.138530][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.148240][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.161184][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.169798][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.179322][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.188180][ T1530] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.195299][ T1530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.227508][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.239473][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.251680][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.260109][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.270260][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.278980][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.286095][ T1530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.294024][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.303237][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.313385][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.322701][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.331498][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.340590][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.349553][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.359204][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.368272][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.377314][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.403735][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.412857][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.422832][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.431771][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.441362][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.450873][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.466516][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.499494][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.509108][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.518622][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.525876][ T1530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.534864][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.562555][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.580339][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.590542][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.604175][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.613590][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.622559][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.631922][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.643956][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.656185][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.669280][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.692751][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.701956][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.711715][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.738776][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.765056][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.782153][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.792833][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.802722][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.813522][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.827279][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.844987][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.877700][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.886411][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.906631][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.919864][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.928993][ T1530] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.936107][ T1530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.945491][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.954251][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.964253][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.971457][ T1530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.979671][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.989044][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.998815][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.008095][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.033151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.042526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.051705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.063021][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.070153][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.078036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.087226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.095988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.104731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.113994][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.121188][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.130978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.139817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.156448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.164911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.179183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.187633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.195694][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 57.202615][ T4227] Bluetooth: hci0: command 0x041b tx timeout [ 57.209305][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 57.222474][ T4190] device veth0_vlan entered promiscuous mode [ 57.235599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.244275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.256332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.267770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.276589][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 57.278539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.283620][ T1324] Bluetooth: hci3: command 0x041b tx timeout [ 57.297234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.297829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.313709][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.322421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.330369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.339390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.348882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.358860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.367255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.375456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.386046][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.408015][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.428820][ T4190] device veth1_vlan entered promiscuous mode [ 57.444772][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.458310][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.467416][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.483510][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.517885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.536522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.552428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.560963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.578756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.607426][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.622221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.631687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.659148][ T4190] device veth0_macvtap entered promiscuous mode [ 57.675855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.705895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.714678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.757125][ T4190] device veth1_macvtap entered promiscuous mode [ 57.786408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.803466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.817949][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.827526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.835035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.853548][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.862771][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.872327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.880375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.889631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.899567][ T4185] device veth0_vlan entered promiscuous mode [ 57.909876][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.937683][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.947133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.954992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.970785][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.982387][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.995699][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.004774][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.014222][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.041336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.050190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.059631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.069453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.092017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.103041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.130525][ T4185] device veth1_vlan entered promiscuous mode [ 58.141178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.150013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.160182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.193790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.210075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.218954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.228805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.239146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.260296][ T4184] device veth0_vlan entered promiscuous mode [ 58.272990][ T4195] device veth0_vlan entered promiscuous mode [ 58.287606][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.297320][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.306514][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.314661][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.324075][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.332229][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.341023][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.349216][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.387719][ T1530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.399395][ T4194] device veth0_vlan entered promiscuous mode [ 58.400279][ T1530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.414488][ T4195] device veth1_vlan entered promiscuous mode [ 58.430733][ T4184] device veth1_vlan entered promiscuous mode [ 58.440635][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.449872][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.458341][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.471793][ T4194] device veth1_vlan entered promiscuous mode [ 58.494128][ T4185] device veth0_macvtap entered promiscuous mode [ 58.504502][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.516169][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.527485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.536275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.544369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.553127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.564745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.574456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.589025][ T4185] device veth1_macvtap entered promiscuous mode [ 58.611036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.639589][ T4184] device veth0_macvtap entered promiscuous mode [ 58.649454][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.662755][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.674769][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.683254][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.693775][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.703016][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.712175][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.730093][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.739125][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.749556][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.768191][ T4195] device veth0_macvtap entered promiscuous mode [ 58.779335][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.796636][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.830448][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.843394][ T4194] device veth0_macvtap entered promiscuous mode [ 58.858776][ T4184] device veth1_macvtap entered promiscuous mode [ 58.867408][ T4195] device veth1_macvtap entered promiscuous mode [ 58.874515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.885071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.895254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.903352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.912280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.921530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.930673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.947046][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.965546][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.974866][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.984644][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.031294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.067642][ T4194] device veth1_macvtap entered promiscuous mode [ 59.104830][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.124651][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.135008][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.145821][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.157423][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.166029][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.177706][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.187694][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.199816][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.209905][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.220756][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.233076][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.275759][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 59.288034][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 59.294179][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 59.311299][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.320511][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.329840][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.340535][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.349451][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.358245][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 59.364938][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 59.368754][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.383721][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.394328][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.405012][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.417209][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.426500][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.438214][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.448361][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.459549][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.469656][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.481079][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.491363][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.502091][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.513264][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.524419][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.537400][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.547342][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.558257][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.568381][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.579118][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.596797][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.607714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.624238][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.633950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.648245][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.659908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.673305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.693778][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.703414][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.725210][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.733954][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.750256][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.772539][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.786187][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.797951][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.808372][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.819144][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.830161][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.842447][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.860372][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.886713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.901124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.912819][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.926908][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.937069][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.945955][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.961062][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.970975][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.980857][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.990504][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.009976][ T1530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.022875][ T1530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.104865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.146431][ T4280] capability: warning: `syz.0.8' uses 32-bit capabilities (legacy support in use) [ 60.207633][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.216816][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.243158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.299238][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.317847][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.327643][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.342777][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.357720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.367849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.379868][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.389918][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.402084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.412182][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.430081][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.440224][ T1530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.453059][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.461752][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.493348][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.542030][ T1530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.561536][ T1530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.580146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.695248][ T4225] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.716968][ T4289] loop3: detected capacity change from 0 to 256 [ 60.781181][ T4289] FAT-fs (loop3): Directory bread(block 64) failed [ 60.797928][ T4289] FAT-fs (loop3): Directory bread(block 65) failed [ 60.804823][ T4289] FAT-fs (loop3): Directory bread(block 66) failed [ 60.814312][ T4289] FAT-fs (loop3): Directory bread(block 67) failed [ 60.822192][ T4289] FAT-fs (loop3): Directory bread(block 68) failed [ 60.840414][ T4289] FAT-fs (loop3): Directory bread(block 69) failed [ 60.862911][ T4289] FAT-fs (loop3): Directory bread(block 70) failed [ 60.905738][ T4289] FAT-fs (loop3): Directory bread(block 71) failed [ 60.913344][ T4289] FAT-fs (loop3): Directory bread(block 72) failed [ 60.920190][ T4289] FAT-fs (loop3): Directory bread(block 73) failed [ 61.356860][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 61.451599][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 61.610763][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 61.626963][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 61.635097][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 61.678236][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.694157][ T4301] loop0: detected capacity change from 0 to 512 [ 61.705351][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.725846][ T4225] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 61.745310][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.777145][ T4225] usb 2-1: config 0 descriptor?? [ 61.806937][ T4301] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 61.835932][ T4301] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.958231][ T4301] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,lazytime,auto_da_alloc,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 62.005026][ T4301] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.166899][ T26] audit: type=1800 audit(1774930434.268:2): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 62.271606][ T4225] hid-led 0003:27B8:01ED.0001: unexpected long global item [ 62.290620][ T4225] hid-led: probe of 0003:27B8:01ED.0001 failed with error -22 [ 62.598323][ T13] usb 2-1: USB disconnect, device number 2 [ 62.848090][ T4312] mmap: syz.3.13 (4312) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 63.269685][ T4318] loop1: detected capacity change from 0 to 512 [ 63.384946][ T4318] EXT4-fs (loop1): Unrecognized mount option "context=sysadm_u" or missing value [ 63.617535][ T4318] loop1: detected capacity change from 0 to 2048 [ 63.665921][ T4322] loop0: detected capacity change from 0 to 1024 [ 63.699615][ T4318] loop1: p1 < > p4 [ 63.723487][ T4318] loop1: p4 start 42180 is beyond EOD, truncated [ 63.724680][ T4322] ======================================================= [ 63.724680][ T4322] WARNING: The mand mount option has been deprecated and [ 63.724680][ T4322] and is ignored by this kernel. Remove the mand [ 63.724680][ T4322] option from the mount to silence this warning. [ 63.724680][ T4322] ======================================================= [ 63.903895][ T4322] EXT4-fs (loop0): Ignoring removed oldalloc option [ 63.949632][ T4322] EXT4-fs (loop0): Ignoring removed bh option [ 63.957333][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 64.091777][ T4322] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsddf,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,noload,user_xattr,bh,nobarrier,,errors=continue. Quota mode: writeback. [ 64.300935][ T4330] loop3: detected capacity change from 0 to 2048 [ 64.513678][ T4303] loop2: detected capacity change from 0 to 131072 [ 64.515356][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.569079][ T4330] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resuid=0x0000000000000000,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none. [ 64.588390][ T4330] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.785316][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 64.872131][ T4303] F2FS-fs (loop2): invalid crc value [ 64.936419][ T21] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 64.952097][ T4330] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.19: bad entry in directory: rec_len % 4 != 0 - offset=44, inode=12, rec_len=255, size=4096 fake=0 [ 65.027470][ T21] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 65.101336][ T4303] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 65.213691][ T21] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 65.230201][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.413327][ T4352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.26'. [ 65.461784][ T4355] hub 9-0:1.0: USB hub found [ 65.480497][ T4355] hub 9-0:1.0: 1 port detected [ 65.546521][ T21] usb 2-1: string descriptor 0 read error: -71 [ 65.629364][ T21] usb 2-1: USB disconnect, device number 3 [ 65.700762][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.242399][ T4366] loop0: detected capacity change from 0 to 40427 [ 66.629911][ T4366] F2FS-fs (loop0): invalid crc value [ 66.912332][ T4366] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 67.168773][ T4383] loop1: detected capacity change from 0 to 512 [ 67.226112][ T4383] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 67.852893][ T4366] F2FS-fs (loop0): Start checkpoint disabled! [ 67.894041][ T4366] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 68.031861][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.042281][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.089549][ T4391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.272937][ T4401] binder: 4400:4401 ioctl 400c620e 200000000100 returned -22 [ 68.575702][ T4412] loop1: detected capacity change from 0 to 256 [ 68.630635][ T4412] FAT-fs (loop1): Directory bread(block 64) failed [ 68.637653][ T4412] FAT-fs (loop1): Directory bread(block 65) failed [ 68.646242][ T4412] FAT-fs (loop1): Directory bread(block 66) failed [ 68.652812][ T4412] FAT-fs (loop1): Directory bread(block 67) failed [ 68.659735][ T4412] FAT-fs (loop1): Directory bread(block 68) failed [ 68.666309][ T4412] FAT-fs (loop1): Directory bread(block 69) failed [ 68.673212][ T4412] FAT-fs (loop1): Directory bread(block 70) failed [ 68.679883][ T4412] FAT-fs (loop1): Directory bread(block 71) failed [ 68.686685][ T4412] FAT-fs (loop1): Directory bread(block 72) failed [ 68.693321][ T4412] FAT-fs (loop1): Directory bread(block 73) failed [ 69.733987][ T4412] sched: RT throttling activated [ 69.773548][ T4420] attempt to access beyond end of device [ 69.773548][ T4420] loop1: rw=0, want=1196, limit=256 [ 69.786769][ T26] audit: type=1800 audit(1774930441.868:3): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 70.942930][ T4432] loop3: detected capacity change from 0 to 2048 [ 71.025595][ T4432] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 71.135482][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 71.215607][ T4432] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.344548][ T4444] loop2: detected capacity change from 0 to 512 [ 71.373146][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.380032][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.479965][ T4444] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 71.513989][ T4444] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.563256][ T4444] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.608027][ T4444] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 71.665359][ T4173] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 71.692922][ T4444] EXT4-fs (loop2): Remounting filesystem read-only [ 71.710531][ T4444] Quota error (device loop2): write_blk: dquota write failed [ 71.732002][ T4444] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 71.793910][ T4444] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.47: Failed to acquire dquot type 0 [ 71.867461][ T4444] EXT4-fs (loop2): Remounting filesystem read-only [ 71.885821][ T4444] EXT4-fs (loop2): 1 truncate cleaned up [ 71.898603][ T4444] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,bsddf,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 72.735632][ T4173] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 72.790101][ T4173] usb 4-1: config 0 has no interface number 0 [ 72.802127][ T4173] usb 4-1: config 0 interface 41 has no altsetting 0 [ 72.830184][ T4444] syz.2.47 (4444) used greatest stack depth: 20600 bytes left [ 72.965492][ T4173] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 73.005299][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.013347][ T4173] usb 4-1: Product: syz [ 73.035268][ T4173] usb 4-1: Manufacturer: syz [ 73.041637][ T4173] usb 4-1: SerialNumber: syz [ 73.063960][ T4173] usb 4-1: config 0 descriptor?? [ 73.085247][ T4228] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 73.290610][ T4228] usb 2-1: device descriptor read/64, error -71 [ 73.339432][ T4436] loop4: detected capacity change from 0 to 131072 [ 73.390284][ T4436] F2FS-fs (loop4): invalid crc value [ 73.433925][ T4436] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.544865][ T4436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.565256][ T4228] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 73.612841][ T4442] loop0: detected capacity change from 0 to 131072 [ 73.765290][ T4228] usb 2-1: device descriptor read/64, error -71 [ 73.766339][ T4442] F2FS-fs (loop0): Test dummy encryption mode enabled [ 73.781713][ T4442] F2FS-fs (loop0): invalid crc value [ 73.808454][ T4467] loop2: detected capacity change from 0 to 128 [ 73.831080][ T4442] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.885466][ T4228] usb usb2-port1: attempt power cycle [ 73.896378][ T4467] EXT4-fs (loop2): Test dummy encryption mode enabled [ 73.964806][ T4467] EXT4-fs (loop2): inline encryption not supported [ 73.991854][ T4467] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 74.010163][ T4173] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 74.029005][ T4442] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.054227][ T4467] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.235463][ T4442] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 74.315233][ T4228] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 74.405572][ T4228] usb 2-1: device descriptor read/8, error -71 [ 74.675198][ T4228] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 74.776537][ T4228] usb 2-1: device descriptor read/8, error -71 [ 74.895409][ T4228] usb usb2-port1: unable to enumerate USB device [ 75.173466][ T4496] can: request_module (can-proto-0) failed. [ 75.636799][ T4502] kvm: emulating exchange as write [ 75.725514][ T4173] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 75.748303][ T4173] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 75.766282][ T4173] CoreChips: probe of 4-1:0.41 failed with error -71 [ 75.777631][ T4173] usb 4-1: USB disconnect, device number 2 [ 75.825935][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.834078][ T4505] device syzkaller0 entered promiscuous mode [ 75.884335][ T4508] loop1: detected capacity change from 0 to 512 [ 76.046810][ T4508] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 76.067779][ T4508] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.095333][ T4227] usb 3-1: Using ep0 maxpacket: 8 [ 76.345846][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.399466][ T4520] netlink: 'syz.1.70': attribute type 4 has an invalid length. [ 76.597131][ T4227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.613693][ T4227] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 76.625362][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.667416][ T4227] usb 3-1: config 0 descriptor?? [ 76.777851][ T1108] cfg80211: failed to load regulatory.db [ 77.142609][ T4531] loop1: detected capacity change from 0 to 1024 [ 77.269032][ T4531] EXT4-fs (loop1): Ignoring removed bh option [ 77.336716][ T4531] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 77.361477][ T4227] usbhid 3-1:0.0: can't add hid device: -71 [ 77.383364][ T4227] usbhid: probe of 3-1:0.0 failed with error -71 [ 77.445473][ T4227] usb 3-1: USB disconnect, device number 2 [ 78.781264][ T4527] loop0: detected capacity change from 0 to 40427 [ 78.816133][ T4552] device syzkaller0 entered promiscuous mode [ 78.877975][ T4527] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 78.889644][ T4527] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 78.922022][ T4527] F2FS-fs (loop0): Unrecognized mount option "0177777777777777777777718446744073709551615" or missing value [ 79.035266][ T1324] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 79.045384][ T4225] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.265206][ T1324] usb 2-1: device descriptor read/64, error -71 [ 79.405460][ T4225] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 79.422859][ T4225] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 79.478634][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.505077][ T4574] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.507294][ T4551] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 79.555285][ T1324] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 79.677844][ T4578] device syzkaller0 entered promiscuous mode [ 79.755463][ T1324] usb 2-1: device descriptor read/64, error -71 [ 79.765219][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.825342][ T4225] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 79.833951][ T4225] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 79.882285][ T1324] usb usb2-port1: attempt power cycle [ 79.896090][ T4225] usb 3-1: USB disconnect, device number 3 [ 79.905205][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 80.019465][ T4583] loop0: detected capacity change from 0 to 512 [ 80.142770][ T4583] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 80.142770][ T4583] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 80.142770][ T4583] [ 80.161604][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.205702][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.207406][ T4583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.220708][ T4228] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 80.238598][ T4583] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.319224][ T1324] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 80.526318][ T1324] usb 2-1: device descriptor read/8, error -71 [ 80.588226][ T4583] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.907810][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.923924][ T4583] EXT4-fs (loop0): 1 truncate cleaned up [ 80.929751][ T4583] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,nouser_xattr,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 80.963293][ T4228] usb 4-1: config 0 descriptor?? [ 80.993551][ T1324] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 81.031196][ T26] audit: type=1804 audit(1774930453.128:4): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.95" name="/newroot/27/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 81.145462][ T1324] usb 2-1: device descriptor read/8, error -71 [ 81.169509][ T4597] loop4: detected capacity change from 0 to 256 [ 81.202597][ T4595] loop2: detected capacity change from 0 to 8192 [ 81.271244][ T1324] usb usb2-port1: unable to enumerate USB device [ 81.340134][ T4597] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 81.448261][ T4228] hid-led 0003:27B8:01ED.0002: unbalanced collection at end of report description [ 81.486518][ T4228] hid-led: probe of 0003:27B8:01ED.0002 failed with error -22 [ 81.653174][ T4228] usb 4-1: USB disconnect, device number 3 [ 82.816217][ T4609] device syzkaller0 entered promiscuous mode [ 83.217789][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 83.278196][ T4618] device vlan2 entered promiscuous mode [ 83.284044][ T4618] device bond0 entered promiscuous mode [ 83.507557][ T4622] fuse: Unknown parameter '0xffffffffffffffff' [ 83.860506][ T4618] device bond_slave_0 entered promiscuous mode [ 83.939857][ T4618] device bond_slave_1 entered promiscuous mode [ 84.079092][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 84.231286][ T4634] loop3: detected capacity change from 0 to 512 [ 84.277080][ T4225] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 84.442026][ T4634] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 84.474664][ T4634] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.525220][ T1324] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 84.668384][ T4225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.690492][ T4225] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.713493][ T4225] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 84.736466][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.783595][ T4225] usb 3-1: config 0 descriptor?? [ 84.905224][ T1324] usb 2-1: device descriptor read/64, error -71 [ 85.255509][ T1324] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 85.547115][ T1324] usb 2-1: device descriptor read/64, error -71 [ 85.756712][ T1324] usb usb2-port1: attempt power cycle [ 85.816049][ T4641] loop4: detected capacity change from 0 to 40427 [ 85.882096][ T4651] device syzkaller0 entered promiscuous mode [ 85.913533][ T4641] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 85.935290][ T4641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 85.963126][ T4641] F2FS-fs (loop4): invalid crc value [ 86.020867][ T4641] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.202329][ T4641] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.215747][ T1324] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 86.226668][ T4641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.337685][ T1324] usb 2-1: device descriptor read/8, error -71 [ 86.455589][ T4225] usb 3-1: USB disconnect, device number 4 [ 86.495318][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.630554][ T1324] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 86.761116][ T1324] usb 2-1: device descriptor read/8, error -71 [ 86.767525][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 86.902154][ T1324] usb usb2-port1: unable to enumerate USB device [ 86.930618][ T4229] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.961295][ T4229] usb 1-1: config 179 has no interface number 0 [ 86.967845][ T4229] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 86.984310][ T4229] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.020473][ T4229] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.032646][ T4229] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.052913][ T4229] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.062702][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.110825][ T4660] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 87.245253][ T4277] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.345920][ T1324] usb 1-1: USB disconnect, device number 2 [ 87.442516][ T4667] loop2: detected capacity change from 0 to 40427 [ 87.583246][ T4657] loop3: detected capacity change from 0 to 131072 [ 87.605402][ T4657] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 87.612215][ T4657] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.622151][ T4657] F2FS-fs (loop3): invalid crc value [ 87.660623][ T4657] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.667323][ T4277] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 87.682067][ T4228] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 87.685794][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.724194][ T4277] usb 5-1: config 0 descriptor?? [ 87.774681][ T4657] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.786912][ T4657] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 87.885302][ T4277] usb 5-1: can't set config #0, error -71 [ 87.901795][ T4277] usb 5-1: USB disconnect, device number 2 [ 87.935359][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 88.055480][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.101772][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.135921][ T4656] F2FS-fs (loop3): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 88.145989][ T4228] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.175249][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.223999][ T4228] usb 2-1: config 0 descriptor?? [ 88.721939][ T4228] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 88.765770][ T4228] microsoft 0003:045E:07DA.0003: parse failed [ 88.771905][ T4228] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 88.923715][ T4228] usb 2-1: USB disconnect, device number 16 [ 89.266360][ T13] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 89.595207][ T1324] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 89.855432][ T13] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 89.887520][ T13] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.950688][ T13] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.010727][ T13] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.064990][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 90.094529][ T13] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 90.131160][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.156201][ T13] usb 1-1: config 0 descriptor?? [ 90.165282][ T1324] usb 4-1: device descriptor read/64, error -71 [ 90.589962][ T1324] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 90.653408][ T13] hid-alps 0003:044E:120C.0004: unknown main item tag 0x0 [ 90.835575][ T1324] usb 4-1: device descriptor read/64, error -71 [ 90.967146][ T1324] usb usb4-port1: attempt power cycle [ 91.309160][ T13] hid-alps 0003:044E:120C.0004: unknown main item tag 0x0 [ 91.317866][ T13] hid-alps 0003:044E:120C.0004: unknown main item tag 0x5 [ 91.331858][ T13] hid-alps 0003:044E:120C.0004: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 91.412777][ T4730] loop1: detected capacity change from 0 to 512 [ 91.416382][ T13] usb 1-1: USB disconnect, device number 3 [ 91.475423][ T1324] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 91.532909][ T4730] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,errors=remount-ro,quota,. Quota mode: writeback. [ 91.562974][ T4738] process 'syz.0.142' launched './file0' with NULL argv: empty string added [ 91.602838][ T4730] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.626642][ T1324] usb 4-1: device descriptor read/8, error -71 [ 91.684812][ T4737] fido_id[4737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 91.753007][ T4694] loop4: detected capacity change from 0 to 131072 [ 91.802190][ T4694] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 91.815692][ T4694] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.855840][ T4694] F2FS-fs (loop4): invalid crc value [ 91.880720][ T4694] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 91.945334][ T1324] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 92.051272][ T1324] usb 4-1: device descriptor read/8, error -71 [ 92.067690][ T4752] loop4: detected capacity change from 0 to 1024 [ 92.145459][ T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 92.172804][ T4752] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 92.181207][ T1324] usb usb4-port1: unable to enumerate USB device [ 92.196598][ T4752] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.224369][ T4752] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.147: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.286382][ T4752] EXT4-fs (loop4): Remounting filesystem read-only [ 92.361153][ T4752] EXT4-fs (loop4): 1 orphan inode deleted [ 92.422838][ T4752] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 92.516334][ T13] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 92.533857][ T13] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 92.536167][ T4752] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.147: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 92.625550][ T13] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 92.626219][ T4761] xt_TCPMSS: Only works on TCP SYN packets [ 92.657752][ T13] usb 2-1: config 220 has no interface number 1 [ 92.664045][ T13] usb 2-1: config 220 interface 0 has no altsetting 0 [ 92.671316][ T13] usb 2-1: config 220 interface 76 has no altsetting 0 [ 92.835404][ T13] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 92.857411][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.876509][ T1324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.881550][ T13] usb 2-1: Product: syz [ 92.910667][ T13] usb 2-1: Manufacturer: syz [ 92.926471][ T13] usb 2-1: SerialNumber: syz [ 93.156528][ T1324] usb 4-1: Using ep0 maxpacket: 8 [ 93.172711][ T4765] loop4: detected capacity change from 0 to 512 [ 93.276380][ T4765] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 93.305422][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.315640][ T13] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 93.322738][ T13] usb 2-1: No valid video chain found. [ 93.343320][ T1324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.387048][ T13] usb 2-1: USB disconnect, device number 17 [ 93.397393][ T4765] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.427937][ T1324] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 93.497205][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.549872][ T1324] usb 4-1: config 0 descriptor?? [ 93.695495][ T4787] device xfrm0 entered promiscuous mode [ 94.225844][ T1324] usbhid 4-1:0.0: can't add hid device: -71 [ 94.235059][ T1324] usbhid: probe of 4-1:0.0 failed with error -71 [ 94.378644][ T4787] syz.0.157 (4787) used greatest stack depth: 19952 bytes left [ 94.600024][ T1324] usb 4-1: USB disconnect, device number 8 [ 95.210706][ T4817] capability: warning: `syz.3.165' uses deprecated v2 capabilities in a way that may be insecure [ 95.222028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 95.625311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1c2!!! [ 95.634353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1c2!!! [ 95.989090][ T4823] syz.2.169 (4823) used greatest stack depth: 18096 bytes left [ 96.007939][ T4821] netlink: 104 bytes leftover after parsing attributes in process `syz.0.168'. [ 96.300192][ T4832] loop4: detected capacity change from 0 to 512 [ 96.454230][ T4832] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 96.473819][ T4832] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 96.485231][ T4228] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 96.711734][ T4228] usb 2-1: device descriptor read/64, error -71 [ 96.738902][ T4832] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,quota,grpjquota=,stripe=0x0000000000000003,lazytime,nomblk_io_submit,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 97.767725][ T4832] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.341060][ T4858] loop3: detected capacity change from 0 to 512 [ 98.399302][ T4858] EXT4-fs (loop3): Ignoring removed nobh option [ 98.533138][ T4858] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.181: corrupted in-inode xattr [ 98.559153][ T4858] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.181: couldn't read orphan inode 15 (err -117) [ 98.596958][ T4858] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000005a,usrjquota=,barrier,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 98.862454][ T4228] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 99.099729][ T4870] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.555603][ T4875] loop1: detected capacity change from 0 to 2048 [ 99.785624][ T4879] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 100.245971][ T4875] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.503751][ T4888] loop3: detected capacity change from 0 to 256 [ 100.651363][ T4888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 100.722862][ T26] audit: type=1800 audit(1774930472.818:5): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.190" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 100.805023][ T4895] attempt to access beyond end of device [ 100.805023][ T4895] loop3: rw=2049, want=10840, limit=256 [ 100.825340][ T1324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.076887][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 101.205567][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.230327][ T1324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.242267][ T4901] loop3: detected capacity change from 0 to 512 [ 101.258706][ T1324] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 101.292506][ T4901] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.295952][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.312027][ T4901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.344870][ T4901] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.194: bad orphan inode 131083 [ 101.352211][ T1324] usb 5-1: config 0 descriptor?? [ 101.367718][ T4901] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 101.657846][ T4910] loop3: detected capacity change from 0 to 2048 [ 101.737392][ T4910] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 101.764115][ T4910] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 101.845352][ T4910] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.929640][ T4910] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 101.936970][ T4913] loop1: detected capacity change from 0 to 512 [ 101.939533][ T4910] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 102.048703][ T4184] [ 102.051227][ T4184] ====================================================== [ 102.058352][ T4184] WARNING: possible circular locking dependency detected [ 102.065572][ T4184] syzkaller #0 Not tainted [ 102.070283][ T4184] ------------------------------------------------------ [ 102.077805][ T4184] syz-executor/4184 is trying to acquire lock: [ 102.083964][ T4184] ffff8880634965e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 102.092955][ T4184] [ 102.092955][ T4184] but task is already holding lock: [ 102.100407][ T4184] ffff888063796628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 102.109832][ T4184] [ 102.109832][ T4184] which lock already depends on the new lock. [ 102.109832][ T4184] [ 102.120510][ T4184] [ 102.120510][ T4184] the existing dependency chain (in reverse order) is: [ 102.129884][ T4184] [ 102.129884][ T4184] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 102.137886][ T4184] down_read+0x44/0x2e0 [ 102.142577][ T4184] ext4_map_blocks+0x33c/0x1b30 [ 102.148095][ T4184] ext4_getblk+0x176/0x670 [ 102.153217][ T4184] ext4_bread+0x26/0x180 [ 102.157990][ T4184] ext4_quota_read+0x1b3/0x3a0 [ 102.163424][ T4184] find_tree_dqentry+0x188/0xb30 [ 102.169163][ T4184] find_tree_dqentry+0x3eb/0xb30 [ 102.175503][ T4184] qtree_read_dquot+0x13c/0x680 [ 102.180978][ T4184] v2_read_dquot+0xc0/0x110 [ 102.186016][ T4184] dquot_acquire+0x152/0x520 [ 102.191209][ T4184] ext4_acquire_dquot+0x2d9/0x4a0 [ 102.197036][ T4184] dqget+0x778/0xeb0 [ 102.201462][ T4184] __dquot_initialize+0x3c3/0xcd0 [ 102.207454][ T4184] ext4_process_orphan+0x54/0x300 [ 102.213009][ T4184] ext4_orphan_cleanup+0xad2/0x1320 [ 102.218821][ T4184] ext4_fill_super+0x8e25/0x95a0 [ 102.224861][ T4184] mount_bdev+0x287/0x3c0 [ 102.229903][ T4184] legacy_get_tree+0xe6/0x180 [ 102.235383][ T4184] vfs_get_tree+0x88/0x270 [ 102.240330][ T4184] do_new_mount+0x24a/0xa40 [ 102.245363][ T4184] __se_sys_mount+0x2e3/0x3d0 [ 102.250687][ T4184] do_syscall_64+0x4c/0xa0 [ 102.255745][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.262170][ T4184] [ 102.262170][ T4184] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 102.270343][ T4184] down_read+0x44/0x2e0 [ 102.275113][ T4184] v2_read_dquot+0x4a/0x110 [ 102.280232][ T4184] dquot_acquire+0x152/0x520 [ 102.285522][ T4184] ext4_acquire_dquot+0x2d9/0x4a0 [ 102.291191][ T4184] dqget+0x778/0xeb0 [ 102.295619][ T4184] __dquot_initialize+0x3c3/0xcd0 [ 102.301544][ T4184] ext4_file_open+0x2e4/0x700 [ 102.306762][ T4184] do_dentry_open+0x7ff/0xf80 [ 102.311971][ T4184] path_openat+0x26f5/0x2fa0 [ 102.317178][ T4184] do_filp_open+0x1e2/0x410 [ 102.322434][ T4184] do_sys_openat2+0x150/0x4b0 [ 102.327728][ T4184] __x64_sys_creat+0x8c/0xb0 [ 102.332847][ T4184] do_syscall_64+0x4c/0xa0 [ 102.337881][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.344309][ T4184] [ 102.344309][ T4184] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 102.351961][ T4184] __lock_acquire+0x2c42/0x7d10 [ 102.357375][ T4184] lock_acquire+0x19e/0x400 [ 102.362444][ T4184] __mutex_lock_common+0x1e3/0x2400 [ 102.368175][ T4184] mutex_lock_nested+0x17/0x20 [ 102.373475][ T4184] dquot_commit+0x5a/0x410 [ 102.378424][ T4184] ext4_write_dquot+0x1f0/0x360 [ 102.383803][ T4184] mark_all_dquot_dirty+0xf9/0x400 [ 102.389448][ T4184] __dquot_free_space+0x7ca/0xb90 [ 102.395177][ T4184] ext4_free_blocks+0x1b2b/0x24d0 [ 102.400733][ T4184] ext4_ext_remove_space+0x211e/0x42b0 [ 102.406725][ T4184] ext4_ext_truncate+0x192/0x240 [ 102.412199][ T4184] ext4_truncate+0xa09/0x10f0 [ 102.417491][ T4184] ext4_evict_inode+0xb4f/0x1090 [ 102.423205][ T4184] evict+0x4c9/0x8d0 [ 102.427635][ T4184] do_unlinkat+0x3e7/0x710 [ 102.432669][ T4184] __x64_sys_unlink+0x45/0x50 [ 102.437876][ T4184] do_syscall_64+0x4c/0xa0 [ 102.442816][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.449239][ T4184] [ 102.449239][ T4184] other info that might help us debug this: [ 102.449239][ T4184] [ 102.459556][ T4184] Chain exists of: [ 102.459556][ T4184] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 102.459556][ T4184] [ 102.473395][ T4184] Possible unsafe locking scenario: [ 102.473395][ T4184] [ 102.480954][ T4184] CPU0 CPU1 [ 102.486352][ T4184] ---- ---- [ 102.491719][ T4184] lock(&ei->i_data_sem/2); [ 102.496321][ T4184] lock(&s->s_dquot.dqio_sem); [ 102.503702][ T4184] lock(&ei->i_data_sem/2); [ 102.510906][ T4184] lock(&dquot->dq_lock); [ 102.515430][ T4184] [ 102.515430][ T4184] *** DEADLOCK *** [ 102.515430][ T4184] [ 102.517471][ T4913] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.523582][ T4184] 4 locks held by syz-executor/4184: [ 102.523596][ T4184] #0: ffff88807a0f8460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 102.546551][ T4913] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 102.547953][ T4184] #1: ffff88807a0f8650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 102.558802][ T1324] usbhid 5-1:0.0: can't add hid device: -71 [ 102.564892][ T4184] #2: ffff888063796628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 102.575422][ T1324] usbhid: probe of 5-1:0.0 failed with error -71 [ 102.581084][ T4184] #3: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 102.581140][ T4184] [ 102.581140][ T4184] stack backtrace: [ 102.581160][ T4184] CPU: 0 PID: 4184 Comm: syz-executor Not tainted syzkaller #0 [ 102.610530][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.620598][ T4184] Call Trace: [ 102.624005][ T4184] [ 102.627017][ T4184] dump_stack_lvl+0x188/0x250 [ 102.631883][ T4184] ? load_image+0x400/0x400 [ 102.636470][ T4184] ? show_regs_print_info+0x20/0x20 [ 102.641757][ T4184] ? print_circular_bug+0x12b/0x1a0 [ 102.646955][ T4184] check_noncircular+0x296/0x330 [ 102.651890][ T4184] ? add_chain_block+0x940/0x940 [ 102.657101][ T4184] ? lockdep_lock+0xf1/0x1f0 [ 102.661685][ T4184] ? mark_lock+0x94/0x320 [ 102.665993][ T4184] __lock_acquire+0x2c42/0x7d10 [ 102.670923][ T4184] ? verify_lock_unused+0x140/0x140 [ 102.676200][ T4184] ? mark_lock+0x94/0x320 [ 102.680511][ T4184] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 102.686473][ T4184] ? lock_chain_count+0x20/0x20 [ 102.691307][ T4184] ? __perf_event_task_sched_in+0x4e6/0x560 [ 102.697275][ T4184] lock_acquire+0x19e/0x400 [ 102.701771][ T4184] ? dquot_commit+0x5a/0x410 [ 102.706432][ T4184] ? finish_task_switch+0x12f/0x640 [ 102.711702][ T4184] ? __might_sleep+0xf0/0xf0 [ 102.716364][ T4184] ? read_lock_is_recursive+0x10/0x10 [ 102.721772][ T4184] ? __schedule+0x11f7/0x43c0 [ 102.726543][ T4184] ? dquot_commit+0x5a/0x410 [ 102.731296][ T4184] __mutex_lock_common+0x1e3/0x2400 [ 102.736841][ T4184] ? dquot_commit+0x5a/0x410 [ 102.741446][ T4184] ? __might_sleep+0xf0/0xf0 [ 102.746050][ T4184] ? mutex_lock_io_nested+0x60/0x60 [ 102.751436][ T4184] ? preempt_schedule+0xbc/0xd0 [ 102.756287][ T4184] mutex_lock_nested+0x17/0x20 [ 102.761064][ T4184] dquot_commit+0x5a/0x410 [ 102.765466][ T4184] ? __ext4_journal_start_sb+0x1bd/0x360 [ 102.771178][ T4184] ext4_write_dquot+0x1f0/0x360 [ 102.776015][ T4184] mark_all_dquot_dirty+0xf9/0x400 [ 102.781113][ T4184] __dquot_free_space+0x7ca/0xb90 [ 102.786132][ T4184] ext4_free_blocks+0x1b2b/0x24d0 [ 102.791194][ T4184] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 102.798729][ T4184] ? do_raw_read_unlock+0x39/0x70 [ 102.803768][ T4184] ? _raw_read_unlock+0x24/0x40 [ 102.808640][ T4184] ? ext4_is_pending+0x176/0x1c0 [ 102.813583][ T4184] ext4_ext_remove_space+0x211e/0x42b0 [ 102.819132][ T4184] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 102.824929][ T4184] ? ext4_es_remove_extent+0x24f/0x3e0 [ 102.830511][ T4184] ext4_ext_truncate+0x192/0x240 [ 102.835458][ T4184] ext4_truncate+0xa09/0x10f0 [ 102.840285][ T4184] ? __ext4_mark_inode_dirty+0x700/0x700 [ 102.846318][ T4184] ext4_evict_inode+0xb4f/0x1090 [ 102.851493][ T4184] ? _raw_spin_unlock+0x24/0x40 [ 102.856516][ T4184] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 102.862493][ T4184] ? do_raw_spin_unlock+0x11d/0x230 [ 102.867775][ T4184] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 102.873825][ T4184] evict+0x4c9/0x8d0 [ 102.877706][ T4184] ? proc_nr_inodes+0x320/0x320 [ 102.882649][ T4184] ? do_raw_spin_unlock+0x11d/0x230 [ 102.887826][ T4184] ? _raw_spin_unlock+0x24/0x40 [ 102.892657][ T4184] ? iput+0x706/0x8a0 [ 102.896636][ T4184] do_unlinkat+0x3e7/0x710 [ 102.901036][ T4184] ? __virt_addr_valid+0x3c6/0x470 [ 102.906155][ T4184] ? fsnotify_link_count+0xf0/0xf0 [ 102.911260][ T4184] ? strncpy_from_user+0x1fb/0x360 [ 102.916732][ T4184] ? getname_flags+0x1fe/0x500 [ 102.921478][ T4184] __x64_sys_unlink+0x45/0x50 [ 102.926242][ T4184] do_syscall_64+0x4c/0xa0 [ 102.930745][ T4184] ? clear_bhb_loop+0x30/0x80 [ 102.935670][ T4184] ? clear_bhb_loop+0x30/0x80 [ 102.940414][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.946297][ T4184] RIP: 0033:0x7f40a6342907 [ 102.950696][ T4184] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.970721][ T4184] RSP: 002b:00007ffc147fc898 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 102.979388][ T4184] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f40a6342907 [ 102.987341][ T4184] RDX: 00007ffc147fc8c0 RSI: 00007ffc147fc950 RDI: 00007ffc147fc950 [ 102.995504][ T4184] RBP: 00007ffc147fc950 R08: 00007ffc147fd950 R09: 00000000ffffffff [ 103.003637][ T4184] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc147fda40 [ 103.011620][ T4184] R13: 00007f40a63d9048 R14: 0000000000018e4f R15: 00007ffc147feb10 [ 103.020141][ T4184] [ 103.043921][ T1324] usb 5-1: USB disconnect, device number 3 [ 103.187789][ T4913] team0: Port device team_slave_0 removed [ 103.262304][ T4920] loop3: detected capacity change from 0 to 256 [ 103.298048][ T4920] FAT-fs (loop3): Directory bread(block 64) failed [ 103.315275][ T4920] FAT-fs (loop3): Directory bread(block 65) failed [ 103.328903][ T4920] FAT-fs (loop3): Directory bread(block 66) failed [ 103.342901][ T4920] FAT-fs (loop3): Directory bread(block 67) failed [ 103.350484][ T4920] FAT-fs (loop3): Directory bread(block 68) failed [ 103.379677][ T4920] FAT-fs (loop3): Directory bread(block 69) failed [ 103.395274][ T4920] FAT-fs (loop3): Directory bread(block 70) failed [ 103.402021][ T4920] FAT-fs (loop3): Directory bread(block 71) failed [ 103.412592][ T4920] FAT-fs (loop3): Directory bread(block 72) failed [ 103.419263][ T4920] FAT-fs (loop3): Directory bread(block 73) failed