last executing test programs: 1m5.257398725s ago: executing program 0 (id=7): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) userfaultfd(0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r4, 0x1) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x1, 0x1}, 0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 1m3.192662204s ago: executing program 0 (id=9): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x8, 0x3000, 0x0, 0x0}, {0x6, 0x8200, 0x0, 0x0}, {0x3ff, 0x0, 0x0, 0x0}], 0x3}) 59.687581876s ago: executing program 0 (id=15): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x48000) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 58.219820679s ago: executing program 0 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x400005, 0x2, 0x3, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 57.198826624s ago: executing program 0 (id=20): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="000602"], 0x0, 0x0}) 53.981438303s ago: executing program 0 (id=30): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 38.699090094s ago: executing program 32 (id=30): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 6.250661259s ago: executing program 5 (id=276): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x9}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x9}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x2}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xfffffffffffffdfa, 0x1e, 0x5}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 6.144750073s ago: executing program 5 (id=280): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1e1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0xfffffdce, {0x3, 0x7, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x1000, 0x5, 0x81, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.61886493s ago: executing program 4 (id=299): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) eventfd(0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x401, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.958991641s ago: executing program 4 (id=315): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$eJzslb9v00AUx793dpy0gkoMMLCkQyWKRB3bBdSFoexISC0Cxoheq4DbVGmGthJSKxYWZsQfwMbM0ImBDSZmBkBCYqAjC0gcuvM5Ptd22igIhr6PlMv33t27H8/PzyAI4tTy5fOPT89uLixfAXAGM6gb+zcnm8Ot+R9fODUj325MPT6whhqqYQCkzIzuMft7AN4sOsBesqyUmfcr86/WXAbHjOnfAcdlo++CwU/PKjNvAYb7xvxwUw5u050wIhbsQTdeWe3EIlBNqJpotfOyljufOv/hPsOKuaDagVnjWzu7j9ox0EtELFJRk+k+haFUJDcDSoZyYlj89PkWOW5YIVDP697TJ/uq7xt7YMUvBEdo9DwYloxeQB2+7zdNV4TW/S+62fpO8tgS9qrPXRSNUSaPL87N5SzTUEJl+HD3iVio2/61Y/yWQ+bUR16Qmazycin476JansrA6F68WfTyius0zEW1RRzzkpxgd3bUwuyUuHB48K7o9fW/hnc8ARNAe+i5CtSHyTi+Vep1PmeZrnhlPJzVJaEyJZL6wVzgklWfXOur0Oqvb7a2dnbnOuvtNbEmNqJo/npwNQiuRS1dm5PWLndH6l9D16dJa/1aRa30mIftdr/fC7eBfi8c9KOktZJp6XX3u/bhuv5xzP6SMv286Bcv/VCy/B7M/Lj+V2rWqTgOQRAEQRAEQRAEQRAEQRDECfhp6SYY3k8NurIcN7qth/8EAAD//7LLT5w=") socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) socket$alg(0x26, 0x5, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 2.958735521s ago: executing program 5 (id=316): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f2045460f21f765f30f1efbc7442400622c0000c744240200000080c7442406000000000f0114240f07b8010000000f01d9c4c3856807ba410f07b9f8090000b8bc7788bbba000000000f300f2066", 0x4f}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_getevents(0x0, 0x9, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.921524063s ago: executing program 2 (id=318): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f00000008c0)={[{@nodecompose}, {@nobarrier}, {}, {@gid}, {@barrier}, {@gid}, {@barrier}, {@part={'part', 0x3d, 0x8000000000000060}}]}, 0x1, 0x5e6, &(0x7f0000001a00)="$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") 2.672141334s ago: executing program 5 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000700)='./file0\x00', 0x14c0e, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000", @ANYRESOCT], 0x1, 0x6b1, &(0x7f0000000740)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000098a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x9248994dc613af0a, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000300)={"c391628eed1ab4db0120c3da637d4a28deed91b510cd1a2de4deff148357c84cc63fe0b0e72272aff7e99fbd69f824a4f3af52ba18aae09cc0296806e623a3d2c40c0ce240f5cd1bb0898c3c2cb4961aaebbaf84fd9bdfd2348a89fda62b44acff1870ecab16322183a1957707f93185ea269163b5ebc2a709aaff7dd9e54fc02db9bc3d49a6cad5cd69c99b05154a7249de7f4c0cdaa1400f1239202fa89d70e70378965120cf55c384645792eac6c400111f158654cdb4c71af358958183a7ab532ac5245f158c8b36a10f8f8538f28e6992215b3f68ca9e80531e763e3902911bc44b88e84feafbb472325acc0d436a4905a9109046e29774fef4c7cde4d4fb0c43f604a577d4be19dcc34ec3aba9a4e784e97f3a0955b75d0428e8562dc7026804ceb5ec7170455876bd76c536e3716a5d2be471d29c91f37861634b803411b20ffae8f181168df70963fee74c1e39fb32c44d408d4fa96554f8c509b7ee16ee152b9200bf4d383e4ad63604982d7d2a3f0c190f8a02a4a92fc73799ef40ec0694e51afd153a5fca82e75ec3d537f446af1608089718423d5042d0e4fdb75a076e6d9f466560d17d507aba25f3d344942eae697d31c7e5a42002263ec2c4478b95f4cc296161f8f93c9b01a45c661b47bde8d5d904a8eb5398cb4e46c8274fb2f7fcf19ecc6472e1a700abd0c5d4a01f66a034b74f16002a7877250eb1a3b0aae2dea41c6967e5ec592856e284e09ba60e429bcebfb620f90fe36d6b6404a38b9d638f1654ea5cc75262a665b17944932d6272bf04f621e73964010c4fbf2e4704467c90305f33ba0050026c4849625337ea13e609c15cf462384ba1d576b497d58f1bf3e2909e0ed7b5e9fbaa956f7af5bcb5b8ae79c93e54a81300332e0badb53baa788ebd5b9d8f202247b195530e85316c5b5fb50a29d13813ae34dbc44156c02f7bfa2fd8dea804e5a64098e5bba3e2dd6f10b57a4e3f2d2c43628088135edc3f6fe48c9914f55e8fd13eabd342d7bbe80d7efea62b6bf7090581a119d2561161a067987d13365c538489932872f3c71531249289673959f8c939d2bdac7da23c4a6ec7303ba87a20de9fb8db6556eb49b121ecab39276160110cf9b8b1f6b12ef654b4ee9e81614ccce3612ec610570bb7f6f86adc1585608845059131a0715858d56efeeda51f49ca11f43602051d2240dff30bdd5fe7d4ebeb8252080000003ccf60ef24f7ca3d1a57c2e824dc2d0697a15fdd82ffab1214cefe2539a18a1915ee71ba80f43919e59dc4214dca18872aac9f6f6b977811a35ea80d5d718418b97998b13dee1e79a1fedd40193a1bc9e659101eee0a3b04a5f478d73092dae6769d8ee0ba5b583db64600e197ffff00acc900"}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.54367406s ago: executing program 4 (id=322): r0 = epoll_create(0x4c4) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, 0x0) 2.408750085s ago: executing program 2 (id=324): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2.339637048s ago: executing program 4 (id=325): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) eventfd(0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x401, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.263666132s ago: executing program 2 (id=326): quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000027c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 2.246711682s ago: executing program 3 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 2.156491776s ago: executing program 2 (id=328): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x1, 0x1, 0xfffffffe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.095611619s ago: executing program 3 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.933737606s ago: executing program 1 (id=330): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000001780)=0xffffffffffff96b9, 0x12) 1.900018437s ago: executing program 2 (id=331): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.8237065s ago: executing program 1 (id=332): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) 1.297945463s ago: executing program 5 (id=333): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 1.279880164s ago: executing program 1 (id=334): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) 1.158733909s ago: executing program 4 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000740)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 1.158481359s ago: executing program 3 (id=336): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8a0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0x269, &(0x7f0000000540)="$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") mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) 1.056008673s ago: executing program 1 (id=337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) 1.022180315s ago: executing program 4 (id=338): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0xfe, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa], 0x0, [0x4, 0x2, 0x4, 0x0, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20]}}}}]}, 0x88}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f0000000f40)="3413c3ad95eddbad3d2fea", 0xb, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0)=0x9, 0x7fd) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 896.674131ms ago: executing program 1 (id=339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x814}]}]}, 0x20}}, 0x0) 896.163261ms ago: executing program 3 (id=340): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x94, 0x0, 0x1, 0x80000}]}) 755.684367ms ago: executing program 2 (id=341): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400", 0x3}], 0x2) 755.485677ms ago: executing program 3 (id=342): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x20925) keyctl$read(0xb, r0, 0x0, 0x0) 755.188867ms ago: executing program 1 (id=343): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 439.946601ms ago: executing program 3 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 0s ago: executing program 5 (id=345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r2) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 50.576908][ T4173] cgroup: Unknown subsys name 'net' [ 50.681955][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.897089][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.870625][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.896386][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.927298][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.009777][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 54.071643][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 54.113656][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.122086][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.130620][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.139391][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.146654][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.154496][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.165659][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.172871][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.181170][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.193424][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.200805][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.208614][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.224060][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.231138][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.239367][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.246562][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.253611][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.262291][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.306665][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.339688][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.350689][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.361531][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.387775][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.406110][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.415764][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.422868][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.430742][ T4197] device bridge_slave_0 entered promiscuous mode [ 54.469102][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.476311][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.484163][ T4197] device bridge_slave_1 entered promiscuous mode [ 54.498359][ T4185] team0: Port device team_slave_0 added [ 54.506484][ T4183] team0: Port device team_slave_0 added [ 54.513578][ T4185] team0: Port device team_slave_1 added [ 54.531827][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.539335][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.547286][ T4190] device bridge_slave_0 entered promiscuous mode [ 54.556024][ T4183] team0: Port device team_slave_1 added [ 54.561880][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.569154][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.577236][ T4190] device bridge_slave_1 entered promiscuous mode [ 54.594138][ T4184] team0: Port device team_slave_0 added [ 54.627054][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.634084][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.660390][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.673108][ T4184] team0: Port device team_slave_1 added [ 54.681040][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.698426][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.705529][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.731740][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.750841][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.757926][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.784151][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.804105][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.813866][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.821191][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.847328][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.860522][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.905241][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.922510][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.930199][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.956693][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.001229][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.008753][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.035497][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.048904][ T4197] team0: Port device team_slave_0 added [ 55.057703][ T4197] team0: Port device team_slave_1 added [ 55.076515][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.083285][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.092485][ T4190] team0: Port device team_slave_0 added [ 55.111939][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.118887][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.126206][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.134281][ T4183] Cannot create hsr debugfs directory [ 55.141574][ T4190] team0: Port device team_slave_1 added [ 55.179558][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.186901][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.213048][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.235922][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.242902][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.269320][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.288657][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.296135][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.323050][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.347040][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.354214][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.380849][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.422660][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.430190][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.437412][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.445176][ T4184] Cannot create hsr debugfs directory [ 55.515787][ T4190] device hsr_slave_0 entered promiscuous mode [ 55.522631][ T4190] device hsr_slave_1 entered promiscuous mode [ 55.530045][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.539124][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 55.541333][ T4190] Cannot create hsr debugfs directory [ 55.545882][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 55.551169][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 55.565571][ T4197] device hsr_slave_0 entered promiscuous mode [ 55.572568][ T4197] device hsr_slave_1 entered promiscuous mode [ 55.579783][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.587421][ T4197] Cannot create hsr debugfs directory [ 55.614119][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 55.620221][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 55.840558][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.851551][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.861899][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.872049][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.928182][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.938425][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.953138][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.969775][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.027798][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.040700][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.051918][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.063713][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.132462][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.151039][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.158650][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.182929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.195822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.203655][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.212808][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.225678][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.261343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.272223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.282249][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.289989][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.300319][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.311181][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.324601][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.341687][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.350363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.359562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.368341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.376866][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.383986][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.395913][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.416699][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.453138][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.474460][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.485311][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.493672][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.502700][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.512757][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.523081][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.536381][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.548244][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.557037][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.578190][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.588833][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.605990][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.623350][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.632348][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.641508][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.650205][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.660678][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.669521][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.678090][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.687036][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.696142][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.703191][ T612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.710816][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.719713][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.728327][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.735422][ T612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.743235][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.751947][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.760302][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.767415][ T612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.775701][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.783403][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.791472][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.822377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.832271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.841806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.857155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.865884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.874743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.883078][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.890172][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.898866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.951385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.961923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.972048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.981547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.990200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.999135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.007815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.016524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.025573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.034702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.043116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.052817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.061723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.110341][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.120361][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.152487][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.163377][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.180543][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.210994][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.220422][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.231455][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.245081][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.265306][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.284217][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.296424][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.331927][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.347869][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.356693][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.367683][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.388052][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.402817][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.415444][ T3060] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.422529][ T3060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.434369][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.442911][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.451976][ T3060] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.459073][ T3060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.467310][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.481324][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.502526][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.527884][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.544669][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.553043][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.576755][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.586843][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.598397][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.613384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.622163][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 57.627372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.636640][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 57.642743][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 57.659866][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.673772][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.682899][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.694428][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 57.702877][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.704702][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 57.721493][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.737475][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.749974][ T3060] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.757110][ T3060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.781123][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.789704][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.799114][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.808251][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.818154][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.825913][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.835125][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.843489][ T3060] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.850774][ T3060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.862216][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.875043][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.889246][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.898593][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.911559][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.919587][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.928156][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.945963][ T4185] device veth0_vlan entered promiscuous mode [ 57.963156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.998360][ T4185] device veth1_vlan entered promiscuous mode [ 58.016318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.026228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.036739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.046038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.055047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.063979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.072325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.081430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.090702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.113730][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.125650][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.144288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.153705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.163322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.182778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.193577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.203440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.215255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.244526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.253099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.266361][ T4183] device veth0_vlan entered promiscuous mode [ 58.292751][ T4190] device veth0_vlan entered promiscuous mode [ 58.303829][ T4185] device veth0_macvtap entered promiscuous mode [ 58.312382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.321110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.332748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.341486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.349450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.357054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.365387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.373695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.383113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.391256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.399130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.411352][ T4183] device veth1_vlan entered promiscuous mode [ 58.428179][ T4185] device veth1_macvtap entered promiscuous mode [ 58.439391][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.472157][ T4190] device veth1_vlan entered promiscuous mode [ 58.498821][ T4183] device veth0_macvtap entered promiscuous mode [ 58.516480][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.537273][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.546298][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.554844][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.562799][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.571281][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.579732][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.588823][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.598118][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.607082][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.616032][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.625728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.634625][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.653430][ T4190] device veth0_macvtap entered promiscuous mode [ 58.663715][ T4183] device veth1_macvtap entered promiscuous mode [ 58.673039][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.687779][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.697266][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.706566][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.716557][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.725981][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.735639][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.746833][ T4190] device veth1_macvtap entered promiscuous mode [ 58.761572][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.770535][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.779603][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.788642][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.809475][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.822084][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.833638][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.851911][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.862560][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.872954][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.885339][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.896565][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.910847][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.919099][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.927175][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.935519][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.944634][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.953287][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.961910][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.971187][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.981532][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.990354][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.998639][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.010076][ T4184] device veth0_vlan entered promiscuous mode [ 59.017708][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.028254][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.039526][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.050289][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.062001][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.072221][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.083030][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.095922][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.106132][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.114740][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.125020][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.133630][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.145466][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.156621][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.165802][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.174947][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.183647][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.202751][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.211802][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.221068][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.232227][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.248504][ T4184] device veth1_vlan entered promiscuous mode [ 59.343570][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.357561][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.367897][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.376957][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.415641][ T4184] device veth0_macvtap entered promiscuous mode [ 59.451756][ T4184] device veth1_macvtap entered promiscuous mode [ 59.475017][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.487674][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.498128][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.509059][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.519391][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.530473][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.543133][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.564304][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.572416][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.592640][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.606737][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.615546][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.624654][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.633646][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.643211][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.651843][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.660820][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.669815][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.689571][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.695149][ T1326] Bluetooth: hci1: command 0x040f tx timeout [ 59.703399][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.719569][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.720321][ T1326] Bluetooth: hci3: command 0x040f tx timeout [ 59.730319][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.741235][ T1326] Bluetooth: hci0: command 0x040f tx timeout [ 59.747417][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.763987][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.775131][ T1326] Bluetooth: hci2: command 0x040f tx timeout [ 59.781147][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.781220][ T1326] Bluetooth: hci4: command 0x040f tx timeout [ 59.796307][ T4197] device veth0_vlan entered promiscuous mode [ 59.812732][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.823635][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.841276][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.850357][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.860365][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.869166][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.887007][ T4197] device veth1_vlan entered promiscuous mode [ 59.903003][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.911312][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.932043][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.938835][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.976687][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.986467][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.997227][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.005692][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.020218][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.033286][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.050018][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.062326][ T4197] device veth0_macvtap entered promiscuous mode [ 60.073273][ T4197] device veth1_macvtap entered promiscuous mode [ 60.080669][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.104795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.113444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.123446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.141615][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.156690][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.166804][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.178612][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.190254][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.202348][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.212648][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.223453][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.235229][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.255282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.266637][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.281774][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.291258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.300420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.312211][ T3060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.312273][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.335119][ T3060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.341080][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.354386][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.366290][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.376402][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.387274][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.397549][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.408534][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.421549][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.447053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.455598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.464971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.477333][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.491506][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.502276][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.525415][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.593725][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.704271][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.713132][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.721124][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.749699][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.766492][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.864626][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.899672][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.920594][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.923388][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.242956][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.550506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.678597][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.959700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.062494][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.574837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.676710][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.752237][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.752695][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 62.881664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.223995][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 63.230589][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 63.237740][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 63.243817][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 63.706099][ T4317] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.110553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.172915][ T4317] usb 5-1: device not accepting address 2, error -71 [ 64.180273][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.212960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.372157][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.466103][ T4349] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.664080][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 69.474181][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 69.508713][ T23] usb 1-1: can't read configurations, error -71 [ 71.072186][ T4369] loop1: detected capacity change from 0 to 4096 [ 71.377981][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392823][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.434106][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.714227][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 71.929688][ T4375] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.049369][ T4317] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 72.050045][ T26] audit: type=1800 audit(1763971266.704:2): pid=4369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 72.076085][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.124099][ T4317] usb 4-1: Product: syz [ 72.128657][ T4317] usb 4-1: Manufacturer: syz [ 72.133261][ T4317] usb 4-1: SerialNumber: syz [ 72.173408][ T4317] usb 4-1: config 0 descriptor?? [ 72.444185][ T4317] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 72.595357][ T4391] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'. [ 72.608130][ T1326] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.655422][ T4391] Zero length message leads to an empty skb [ 73.259340][ T1326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.282133][ T1326] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 73.306731][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.351835][ T1326] usb 1-1: config 0 descriptor?? [ 73.422104][ T1326] pwc: Askey VC010 type 2 USB webcam detected. [ 73.635918][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.854190][ T1326] pwc: recv_control_msg error -32 req 02 val 2b00 [ 73.899280][ T1326] pwc: recv_control_msg error -32 req 02 val 2700 [ 73.945559][ T1326] pwc: recv_control_msg error -32 req 02 val 2c00 [ 73.983109][ T4417] syz.1.25 (4417) used greatest stack depth: 20640 bytes left [ 73.994183][ T1326] pwc: recv_control_msg error -32 req 04 val 1000 [ 74.006247][ T4234] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 74.019293][ T4234] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.050581][ T4420] loop1: detected capacity change from 0 to 4096 [ 74.057200][ T1326] pwc: recv_control_msg error -32 req 04 val 1300 [ 74.094105][ T1326] pwc: recv_control_msg error -32 req 04 val 1400 [ 74.123532][ T4421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.134763][ T1326] pwc: recv_control_msg error -32 req 02 val 2000 [ 74.163940][ T26] audit: type=1800 audit(1763971268.814:3): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 74.195323][ T1326] pwc: recv_control_msg error -32 req 02 val 2100 [ 74.204215][ T4234] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 74.223641][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.231828][ T4234] usb 5-1: Product: syz [ 74.242593][ T4234] usb 5-1: Manufacturer: syz [ 74.248321][ T1326] pwc: recv_control_msg error -32 req 04 val 1500 [ 74.264261][ T4234] usb 5-1: SerialNumber: syz [ 74.304304][ T4399] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 74.305165][ T4423] device syzkaller0 entered promiscuous mode [ 74.323245][ T1326] pwc: recv_control_msg error -32 req 02 val 2500 [ 74.325103][ T4234] usblp0: Disabling reads from problematic bidirectional printer [ 74.369297][ T1326] pwc: recv_control_msg error -32 req 02 val 2400 [ 74.561377][ T4234] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 74.634334][ T1326] pwc: recv_control_msg error -71 req 02 val 2900 [ 74.654217][ T4317] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 74.664328][ T1326] pwc: recv_control_msg error -71 req 02 val 2800 [ 74.685208][ T4317] usb 4-1: USB disconnect, device number 2 [ 74.694260][ T1326] pwc: recv_control_msg error -71 req 04 val 1100 [ 74.738364][ T1326] pwc: recv_control_msg error -71 req 04 val 1200 [ 74.763041][ T1326] pwc: Registered as video103. [ 74.786845][ T1326] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 74.813975][ C0] usblp0: nonzero write bulk status received: -71 [ 74.827593][ T1326] usb 1-1: USB disconnect, device number 4 [ 75.262052][ T4432] loop3: detected capacity change from 0 to 4096 [ 75.370173][ T4435] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.407895][ T26] audit: type=1800 audit(1763971270.064:4): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.29" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 76.226039][ T4188] usb 5-1: USB disconnect, device number 4 [ 76.300483][ T4188] usblp0: removed [ 76.498933][ T1112] cfg80211: failed to load regulatory.db [ 77.740183][ T4454] device syzkaller0 entered promiscuous mode [ 78.158821][ T4459] loop1: detected capacity change from 0 to 512 [ 78.239822][ T4459] EXT4-fs (loop1): invalid first ino: 0 [ 79.076003][ T4463] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.996823][ T4466] loop1: detected capacity change from 0 to 1024 [ 80.848385][ T4472] loop4: detected capacity change from 0 to 8 [ 81.958936][ T4480] process 'syz.4.41' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 82.549423][ T4373] Bluetooth: hci5: Frame reassembly failed (-84) [ 82.598456][ T4373] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.129729][ T4188] Bluetooth: hci5: command 0x1003 tx timeout [ 87.834121][ T4317] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.214336][ T4317] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 89.313350][ T4317] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.834329][ T4317] usb 3-1: string descriptor 0 read error: -71 [ 89.846031][ T4317] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 89.847596][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 89.868564][ T4226] Bluetooth: hci6: command 0x1003 tx timeout [ 89.874928][ T4196] Bluetooth: hci6: sending frame failed (-49) [ 89.899708][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.145066][ T4317] usb 3-1: can't set config #4, error -71 [ 90.172289][ T4317] usb 3-1: USB disconnect, device number 2 [ 91.366196][ T4519] chnl_net:caif_netlink_parms(): no params data found [ 91.423438][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.431014][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.439472][ T4519] device bridge_slave_0 entered promiscuous mode [ 91.448601][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.456673][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.465321][ T4519] device bridge_slave_1 entered promiscuous mode [ 91.491919][ T4519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.509323][ T4519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.552601][ T4503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.576561][ T4519] team0: Port device team_slave_0 added [ 91.586835][ T4519] team0: Port device team_slave_1 added [ 91.619820][ T4503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.633558][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.640753][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.667310][ T4519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.679790][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.690735][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.717213][ T4519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.741303][ T4503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.770452][ T4519] device hsr_slave_0 entered promiscuous mode [ 91.778199][ T4519] device hsr_slave_1 entered promiscuous mode [ 91.788975][ T4519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.796650][ T4519] Cannot create hsr debugfs directory [ 91.814675][ T4503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.944398][ T4226] Bluetooth: hci6: command 0x1001 tx timeout [ 91.950516][ T4196] Bluetooth: hci6: sending frame failed (-49) [ 91.964330][ T4226] Bluetooth: hci5: command 0x1001 tx timeout [ 91.974226][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 92.022795][ T4585] loop1: detected capacity change from 0 to 512 [ 92.102112][ T4519] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.109270][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.137270][ T4585] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.152271][ T4519] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.218603][ T4519] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.280564][ T4519] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.586834][ T4601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.53'. [ 93.017603][ T4188] Bluetooth: hci7: command 0x0409 tx timeout [ 93.232290][ T4519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.271296][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.271822][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.276707][ T4519] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.284014][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.284632][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.285402][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.285459][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.285804][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.286288][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.286618][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.286655][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.287121][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.373370][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.374283][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.388560][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.397461][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.399435][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.405137][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.547331][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.650192][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.701686][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.862556][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.873792][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.884630][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.917671][ T4617] device syzkaller0 entered promiscuous mode [ 94.029935][ T4226] Bluetooth: hci6: command 0x1009 tx timeout [ 94.140610][ T4629] device syzkaller0 entered promiscuous mode [ 94.259962][ T4644] loop2: detected capacity change from 0 to 256 [ 94.398992][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.423743][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.464890][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.541455][ T4519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.714340][ T4297] usb 4-1: Using ep0 maxpacket: 8 [ 94.743815][ T4663] binder: 4658:4663 unknown command 0 [ 94.763462][ T4663] binder: 4658:4663 ioctl c0306201 200000000080 returned -22 [ 94.841840][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 200, changing to 11 [ 94.871273][ T4297] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 94.885524][ T4297] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 94.894853][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.911144][ T4297] usb 4-1: config 0 descriptor?? [ 94.926353][ T4503] device hsr_slave_0 left promiscuous mode [ 94.934540][ T4503] device hsr_slave_1 left promiscuous mode [ 94.942105][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.956683][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.970949][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.981197][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.989688][ T4503] device bridge_slave_1 left promiscuous mode [ 94.998450][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.023226][ T4503] device bridge_slave_0 left promiscuous mode [ 95.030580][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.058340][ T4226] Bluetooth: hci7: command 0x041b tx timeout [ 95.090007][ T4503] device veth1_macvtap left promiscuous mode [ 95.097294][ T4503] device veth0_macvtap left promiscuous mode [ 95.103479][ T4503] device veth1_vlan left promiscuous mode [ 95.111747][ T4503] device veth0_vlan left promiscuous mode [ 95.170020][ T4674] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 95.255280][ T4297] usbhid 4-1:0.0: can't add hid device: -71 [ 95.262798][ T4297] usbhid: probe of 4-1:0.0 failed with error -71 [ 95.303727][ T4297] usb 4-1: USB disconnect, device number 3 [ 95.498722][ T4503] team0 (unregistering): Port device team_slave_1 removed [ 95.517459][ T4503] team0 (unregistering): Port device team_slave_0 removed [ 95.534331][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.552187][ T4503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.675499][ T4503] bond0 (unregistering): Released all slaves [ 95.754477][ T4226] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.813437][ T4226] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.883603][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.897761][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.970754][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.996728][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.033143][ T4519] device veth0_vlan entered promiscuous mode [ 97.046984][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.066477][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.094423][ T4722] loop1: detected capacity change from 0 to 1764 [ 97.130681][ T4519] device veth1_vlan entered promiscuous mode [ 97.146371][ T4188] Bluetooth: hci7: command 0x040f tx timeout [ 97.191994][ T4725] loop4: detected capacity change from 0 to 164 [ 97.274598][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.283043][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.333465][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.362744][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.420949][ T4519] device veth0_macvtap entered promiscuous mode [ 97.465969][ T4519] device veth1_macvtap entered promiscuous mode [ 97.552755][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.611591][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.662691][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.701798][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.731081][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.834608][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.853487][ T4750] loop1: detected capacity change from 0 to 1024 [ 97.867235][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.058966][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.418826][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.562749][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.615308][ T4756] loop3: detected capacity change from 0 to 512 [ 98.637199][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.683647][ T4756] EXT4-fs (loop3): fragment/cluster size (2048) != block size (4096) [ 98.699104][ T4563] hfsplus: b-tree write err: -5, ino 4 [ 98.708979][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.740955][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.759829][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.774369][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.797653][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.896777][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.965723][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.982328][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.170990][ T4768] netlink: 'syz.2.97': attribute type 11 has an invalid length. [ 99.221214][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.379861][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.564918][ T4226] Bluetooth: hci7: command 0x0419 tx timeout [ 99.627846][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.677343][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.691899][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.888529][ T4778] binder: 4777:4778 ioctl c00c620f 200000000100 returned -22 [ 99.905397][ T4779] loop2: detected capacity change from 0 to 128 [ 99.928317][ T4519] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.956237][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 99.973982][ T4519] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.992939][ T4519] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.023380][ T4519] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.196169][ T4785] binder: BINDER_SET_CONTEXT_MGR already set [ 100.365592][ T4785] binder: 4784:4785 ioctl 4018620d 200000000040 returned -16 [ 100.739927][ T4790] binder: 4784:4790 unknown command 0 [ 100.754330][ T4790] binder: 4784:4790 ioctl c0306201 2000000003c0 returned -22 [ 100.848638][ T4794] loop2: detected capacity change from 0 to 512 [ 100.924133][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.947345][ T4794] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.990199][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.031187][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.066797][ T612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.136091][ T612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.140931][ T4806] loop3: detected capacity change from 0 to 1024 [ 101.206625][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.939198][ T4806] EXT4-fs (loop3): Invalid commit interval 100663296, must be smaller than 21474836 [ 102.049964][ T4822] loop1: detected capacity change from 0 to 512 [ 102.124232][ T4822] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.270426][ T4822] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.352064][ T4822] EXT4-fs error (device loop1): ext4_quota_enable:6413: comm syz.1.118: Bad quota inum: 11, type: 1 [ 102.626873][ T4822] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 103.014902][ T4822] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 103.021734][ T4822] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.184433][ T4851] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 103.192447][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 103.221608][ T4853] loop5: detected capacity change from 0 to 256 [ 103.334670][ T4853] ======================================================= [ 103.334670][ T4853] WARNING: The mand mount option has been deprecated and [ 103.334670][ T4853] and is ignored by this kernel. Remove the mand [ 103.334670][ T4853] option from the mount to silence this warning. [ 103.334670][ T4853] ======================================================= [ 103.427804][ T4863] loop2: detected capacity change from 0 to 512 [ 103.445855][ T4853] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.493976][ T4853] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 103.524207][ T4863] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.569325][ T4853] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 103.573613][ T4872] loop1: detected capacity change from 0 to 512 [ 103.632669][ T4863] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0000] [ 103.897218][ T4863] EXT4-fs (loop2): 1 truncate cleaned up [ 103.902900][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,auto_da_alloc=0x0000000000000002,nodiscard,mb_optimize_scan=0x0000000000000001,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 103.904510][ T4872] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.931514][ T4295] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 103.943036][ T4872] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.033182][ T4887] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 104.621764][ T4295] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:6: Failed to release dquot type 1 [ 105.031913][ T4909] netlink: 'syz.2.146': attribute type 13 has an invalid length. [ 105.081993][ T4909] netlink: 'syz.2.146': attribute type 17 has an invalid length. [ 105.284458][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.387757][ T4909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.524194][ T4788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.764046][ T4788] usb 6-1: Using ep0 maxpacket: 32 [ 105.884106][ T4788] usb 6-1: unable to get BOS descriptor set [ 105.995898][ T4788] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 48, using maximum allowed: 30 [ 106.241758][ T4788] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.519411][ T4788] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.650421][ T4788] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 48 [ 106.674566][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 106.994419][ T4788] usb 6-1: string descriptor 0 read error: -22 [ 107.011833][ T4788] usb 6-1: New USB device found, idVendor=04f2, idProduct=1400, bcdDevice= 0.40 [ 107.044462][ T4788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.065175][ T4987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.216122][ T1112] usb 6-1: USB disconnect, device number 2 [ 112.607990][ T5013] loop4: detected capacity change from 0 to 1024 [ 112.724776][ T5017] loop1: detected capacity change from 0 to 2048 [ 112.771424][ T5020] loop2: detected capacity change from 0 to 1024 [ 112.781648][ T5023] capability: warning: `syz.5.184' uses deprecated v2 capabilities in a way that may be insecure [ 112.785678][ T5013] hfsplus: failed to extend attributes file [ 112.838755][ T5017] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.966145][ T5025] loop3: detected capacity change from 0 to 2048 [ 113.079153][ T5017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.853879][ C0] sched: RT throttling activated [ 114.169180][ T5025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.614720][ T26] audit: type=1804 audit(1763971308.984:5): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.182" name="/newroot/36/file0/file1" dev="loop3" ino=1367 res=1 errno=0 [ 115.033381][ T4545] hfsplus: b-tree write err: -5, ino 4 [ 115.167986][ T5035] loop4: detected capacity change from 0 to 256 [ 115.789647][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 116.123985][ T4492] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.138236][ T5077] loop1: detected capacity change from 0 to 2048 [ 116.276554][ T5077] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.312738][ T26] audit: type=1800 audit(1763971310.964:6): pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.199" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 116.504958][ T4492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.528262][ T4492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 116.944304][ T4492] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.132647][ T4492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.457400][ T4492] usb 4-1: Product: syz [ 117.474822][ T4492] usb 4-1: Manufacturer: syz [ 117.479468][ T4492] usb 4-1: SerialNumber: syz [ 117.530993][ T4492] usb 4-1: config 0 descriptor?? [ 117.580207][ T4492] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 117.812096][ T5108] loop2: detected capacity change from 0 to 2048 [ 117.931285][ T4492] usb 4-1: USB disconnect, device number 4 [ 117.950409][ T5108] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.012252][ T26] audit: type=1804 audit(1763971312.664:7): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.204" name="/newroot/42/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 118.477950][ T4926] udevd[4926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.937403][ T5164] loop3: detected capacity change from 0 to 512 [ 120.126061][ T5164] FAT-fs (loop3): Directory bread(block 199916) failed [ 120.132985][ T5164] FAT-fs (loop3): Directory bread(block 199917) failed [ 120.212699][ T5164] FAT-fs (loop3): Directory bread(block 199918) failed [ 120.240828][ T5164] FAT-fs (loop3): Directory bread(block 199919) failed [ 120.283977][ T5164] FAT-fs (loop3): Directory bread(block 199920) failed [ 120.321478][ T5164] FAT-fs (loop3): Directory bread(block 199921) failed [ 120.357860][ T5164] FAT-fs (loop3): Directory bread(block 199922) failed [ 120.381671][ T5164] FAT-fs (loop3): Directory bread(block 199923) failed [ 121.756730][ T5239] loop1: detected capacity change from 0 to 256 [ 121.877218][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 121.975264][ T5252] loop5: detected capacity change from 0 to 256 [ 121.997233][ T5254] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 122.083083][ T5252] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.120784][ T5252] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 122.131017][ T5264] netlink: 'syz.2.256': attribute type 25 has an invalid length. [ 122.156938][ T5264] netlink: 'syz.2.256': attribute type 7 has an invalid length. [ 122.186964][ T5252] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 122.191779][ T5264] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 122.286456][ T5264] netlink: 156 bytes leftover after parsing attributes in process `syz.2.256'. [ 122.335117][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.368806][ T5272] loop3: detected capacity change from 0 to 2048 [ 122.883984][ T1112] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.304179][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.315717][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.325553][ T4234] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.333140][ T1112] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.346278][ T1112] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.355389][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.369445][ T1112] usb 4-1: config 0 descriptor?? [ 123.574055][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.724629][ T4234] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.820789][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 123.857537][ T1112] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 123.881968][ T1112] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 123.902853][ T1112] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 123.916194][ T4234] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.947228][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.975325][ T13] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.010209][ T13] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.023470][ T4234] usb 6-1: Product: syz [ 124.039728][ T4234] usb 6-1: Manufacturer: syz [ 124.063909][ T4234] usb 6-1: SerialNumber: syz [ 124.069352][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.094324][ T26] audit: type=1326 audit(1763971318.744:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfd1a40749 code=0x0 [ 124.119401][ T4492] usb 4-1: USB disconnect, device number 5 [ 124.130002][ T13] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 124.141407][ T5347] fido_id[5347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 124.153928][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.173327][ T13] usb 3-1: config 0 descriptor?? [ 124.235814][ T5358] loop4: detected capacity change from 0 to 8 [ 124.336395][ T5358] SQUASHFS error: zlib decompression failed, data probably corrupt [ 124.347961][ T5358] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.356644][ T5358] SQUASHFS error: Failed to read block 0x4e2: -5 [ 124.363495][ T5358] SQUASHFS error: Failed to read block 0x9ca: -5 [ 124.370477][ T5358] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 124.377549][ T5358] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 124.385155][ T5358] SQUASHFS error: Failed to read block 0x535f2: -5 [ 124.393345][ T26] audit: type=1800 audit(1763971319.044:9): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.296" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 124.415737][ T5358] syz.4.296 (5358) used greatest stack depth: 19872 bytes left [ 124.569886][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 124.576425][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 124.592566][ T13] usb 3-1: USB disconnect, device number 3 [ 125.008089][ T5381] loop2: detected capacity change from 0 to 512 [ 125.084153][ T5381] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 3328 [ 125.162339][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 125.333330][ T4234] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 125.408236][ T4234] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 125.416432][ T4234] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 125.722558][ T4234] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 126.202310][ T5404] loop4: detected capacity change from 0 to 16 [ 126.212377][ T4234] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 126.282618][ T5404] erofs: (device loop4): mounted with root inode @ nid 36. [ 126.292079][ T5408] loop2: detected capacity change from 0 to 1024 [ 126.297715][ T4234] usb 6-1: USB disconnect, device number 3 [ 126.315965][ T4234] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 126.347602][ T5404] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.427310][ T5404] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 126.483960][ T5404] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 126.506140][ T5408] hfsplus: part requires an argument [ 126.511836][ T5408] hfsplus: unable to parse mount options [ 126.535431][ T5414] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 126.556638][ T5414] attempt to access beyond end of device [ 126.556638][ T5414] loop4: rw=0, want=304, limit=16 [ 126.581694][ T5416] loop3: detected capacity change from 0 to 8192 [ 126.583233][ T5414] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 126.597841][ T5414] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 126.636903][ T5420] loop5: detected capacity change from 0 to 164 [ 126.932714][ T5418] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.004441][ T5418] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.385248][ T5445] hub 2-0:1.0: USB hub found [ 127.393679][ T5445] hub 2-0:1.0: 1 port detected [ 128.003720][ T5452] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 128.056493][ T5457] loop3: detected capacity change from 0 to 128 [ 128.237949][ T5466] loop4: detected capacity change from 0 to 2048 [ 128.286788][ T5466] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.350740][ T5466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.562283][ T5484] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.251264][ T5478] [ 129.253627][ T5478] ====================================================== [ 129.260692][ T5478] WARNING: possible circular locking dependency detected [ 129.267753][ T5478] syzkaller #0 Not tainted [ 129.272174][ T5478] ------------------------------------------------------ [ 129.279565][ T5478] syz.2.341/5478 is trying to acquire lock: [ 129.285466][ T5478] ffff88807a55cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 129.297649][ T5478] [ 129.297649][ T5478] but task is already holding lock: [ 129.305019][ T5478] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 129.314947][ T5478] [ 129.314947][ T5478] which lock already depends on the new lock. [ 129.314947][ T5478] [ 129.325365][ T5478] [ 129.325365][ T5478] the existing dependency chain (in reverse order) is: [ 129.334436][ T5478] [ 129.334436][ T5478] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 129.342509][ T5478] __mutex_lock_common+0x1eb/0x2390 [ 129.348781][ T5478] mutex_lock_nested+0x17/0x20 [ 129.354093][ T5478] rfkill_register+0x33/0x8a0 [ 129.359313][ T5478] hci_register_dev+0x452/0x970 [ 129.364823][ T5478] vhci_create_device+0x32c/0x5c0 [ 129.370388][ T5478] vhci_write+0x391/0x450 [ 129.375257][ T5478] vfs_write+0x712/0xd00 [ 129.380034][ T5478] ksys_write+0x14d/0x250 [ 129.384905][ T5478] do_syscall_64+0x4c/0xa0 [ 129.389866][ T5478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.396297][ T5478] [ 129.396297][ T5478] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 129.404242][ T5478] __mutex_lock_common+0x1eb/0x2390 [ 129.410136][ T5478] mutex_lock_nested+0x17/0x20 [ 129.415476][ T5478] vhci_send_frame+0x88/0x100 [ 129.420698][ T5478] hci_send_frame+0x1a9/0x2e0 [ 129.425921][ T5478] hci_tx_work+0x9f9/0x1710 [ 129.431792][ T5478] process_one_work+0x863/0x1000 [ 129.437282][ T5478] worker_thread+0xaa8/0x12a0 [ 129.442497][ T5478] kthread+0x436/0x520 [ 129.447211][ T5478] ret_from_fork+0x1f/0x30 [ 129.452163][ T5478] [ 129.452163][ T5478] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 129.461463][ T5478] __flush_work+0xdd/0x1b0 [ 129.466462][ T5478] hci_dev_do_close+0x1e7/0x1030 [ 129.471948][ T5478] hci_unregister_dev+0x2d7/0x580 [ 129.477686][ T5478] vhci_release+0x73/0xc0 [ 129.482558][ T5478] __fput+0x234/0x930 [ 129.487073][ T5478] task_work_run+0x125/0x1a0 [ 129.492301][ T5478] do_exit+0x61e/0x20a0 [ 129.496991][ T5478] do_group_exit+0x12e/0x300 [ 129.502124][ T5478] get_signal+0x6ca/0x12c0 [ 129.507083][ T5478] arch_do_signal_or_restart+0xc1/0x1300 [ 129.513254][ T5478] exit_to_user_mode_loop+0x9e/0x130 [ 129.519086][ T5478] exit_to_user_mode_prepare+0xee/0x180 [ 129.525171][ T5478] syscall_exit_to_user_mode+0x16/0x40 [ 129.531174][ T5478] do_syscall_64+0x58/0xa0 [ 129.536142][ T5478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.542591][ T5478] [ 129.542591][ T5478] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 129.550281][ T5478] __mutex_lock_common+0x1eb/0x2390 [ 129.556024][ T5478] mutex_lock_nested+0x17/0x20 [ 129.561329][ T5478] bg_scan_update+0x44/0x3b0 [ 129.566490][ T5478] process_one_work+0x863/0x1000 [ 129.572296][ T5478] worker_thread+0xaa8/0x12a0 [ 129.577702][ T5478] kthread+0x436/0x520 [ 129.582309][ T5478] ret_from_fork+0x1f/0x30 [ 129.587365][ T5478] [ 129.587365][ T5478] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 129.597627][ T5478] __lock_acquire+0x2c33/0x7c60 [ 129.603017][ T5478] lock_acquire+0x197/0x3f0 [ 129.608061][ T5478] __flush_work+0xdd/0x1b0 [ 129.613059][ T5478] __cancel_work_timer+0x3ac/0x520 [ 129.618791][ T5478] hci_request_cancel_all+0xcc/0x300 [ 129.624624][ T5478] hci_dev_do_close+0x4e/0x1030 [ 129.630018][ T5478] hci_rfkill_set_block+0x10a/0x190 [ 129.635757][ T5478] rfkill_set_block+0x1c6/0x420 [ 129.641146][ T5478] rfkill_fop_write+0x458/0x560 [ 129.646537][ T5478] do_iter_write+0x3e4/0x7b0 [ 129.651660][ T5478] do_writev+0x254/0x410 [ 129.656436][ T5478] do_syscall_64+0x4c/0xa0 [ 129.661439][ T5478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.667985][ T5478] [ 129.667985][ T5478] other info that might help us debug this: [ 129.667985][ T5478] [ 129.678213][ T5478] Chain exists of: [ 129.678213][ T5478] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 129.678213][ T5478] [ 129.693951][ T5478] Possible unsafe locking scenario: [ 129.693951][ T5478] [ 129.701480][ T5478] CPU0 CPU1 [ 129.707410][ T5478] ---- ---- [ 129.712783][ T5478] lock(rfkill_global_mutex); [ 129.717569][ T5478] lock(&data->open_mutex); [ 129.724731][ T5478] lock(rfkill_global_mutex); [ 129.732024][ T5478] lock((work_completion)(&hdev->bg_scan_update)); [ 129.738628][ T5478] [ 129.738628][ T5478] *** DEADLOCK *** [ 129.738628][ T5478] [ 129.746885][ T5478] 1 lock held by syz.2.341/5478: [ 129.751933][ T5478] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 129.762270][ T5478] [ 129.762270][ T5478] stack backtrace: [ 129.768178][ T5478] CPU: 0 PID: 5478 Comm: syz.2.341 Not tainted syzkaller #0 [ 129.775472][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.785680][ T5478] Call Trace: [ 129.788967][ T5478] [ 129.792039][ T5478] dump_stack_lvl+0x168/0x230 [ 129.796741][ T5478] ? load_image+0x3b0/0x3b0 [ 129.801274][ T5478] ? show_regs_print_info+0x20/0x20 [ 129.806498][ T5478] ? print_circular_bug+0x12b/0x1a0 [ 129.812011][ T5478] check_noncircular+0x274/0x310 [ 129.816969][ T5478] ? add_chain_block+0x940/0x940 [ 129.822015][ T5478] ? lockdep_lock+0xdc/0x1e0 [ 129.826756][ T5478] ? __lock_acquire+0x12d9/0x7c60 [ 129.831807][ T5478] ? lockdep_lock+0x1e0/0x1e0 [ 129.836604][ T5478] ? mark_lock+0x94/0x320 [ 129.840960][ T5478] __lock_acquire+0x2c33/0x7c60 [ 129.845846][ T5478] ? verify_lock_unused+0x140/0x140 [ 129.851085][ T5478] ? verify_lock_unused+0x140/0x140 [ 129.856403][ T5478] lock_acquire+0x197/0x3f0 [ 129.861015][ T5478] ? __flush_work+0xc1/0x1b0 [ 129.865623][ T5478] ? __lock_acquire+0x7c60/0x7c60 [ 129.870674][ T5478] ? read_lock_is_recursive+0x10/0x10 [ 129.876069][ T5478] ? start_flush_work+0x776/0x820 [ 129.881207][ T5478] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 129.887200][ T5478] ? _raw_spin_unlock+0x40/0x40 [ 129.892069][ T5478] __flush_work+0xdd/0x1b0 [ 129.896504][ T5478] ? __flush_work+0xc1/0x1b0 [ 129.901128][ T5478] ? flush_work+0x20/0x20 [ 129.905673][ T5478] ? try_to_grab_pending+0xf3/0x7e0 [ 129.911102][ T5478] ? lockdep_hardirqs_off+0x70/0x100 [ 129.916528][ T5478] ? mark_lock+0x94/0x320 [ 129.922678][ T5478] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 129.930712][ T5478] ? lock_chain_count+0x20/0x20 [ 129.935611][ T5478] ? mark_lock+0x94/0x320 [ 129.940002][ T5478] ? __cancel_work_timer+0x331/0x520 [ 129.945832][ T5478] __cancel_work_timer+0x3ac/0x520 [ 129.951187][ T5478] ? cancel_work_sync+0x20/0x20 [ 129.956066][ T5478] ? __cancel_work+0x1f4/0x2d0 [ 129.961374][ T5478] ? lockdep_hardirqs_on+0x94/0x140 [ 129.966981][ T5478] ? __cancel_work+0x26f/0x2d0 [ 129.972029][ T5478] ? cancel_work+0x20/0x20 [ 129.976655][ T5478] ? lock_chain_count+0x20/0x20 [ 129.981533][ T5478] hci_request_cancel_all+0xcc/0x300 [ 129.987585][ T5478] hci_dev_do_close+0x4e/0x1030 [ 129.992461][ T5478] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 129.999363][ T5478] ? _raw_spin_unlock+0x40/0x40 [ 130.004260][ T5478] hci_rfkill_set_block+0x10a/0x190 [ 130.010308][ T5478] ? rcu_lock_release+0x20/0x20 [ 130.015511][ T5478] rfkill_set_block+0x1c6/0x420 [ 130.020411][ T5478] rfkill_fop_write+0x458/0x560 [ 130.025296][ T5478] ? _copy_from_user+0x111/0x170 [ 130.030347][ T5478] ? rfkill_fop_read+0x4b0/0x4b0 [ 130.035307][ T5478] ? common_file_perm+0x171/0x1c0 [ 130.040959][ T5478] ? fsnotify_perm+0x5d/0x560 [ 130.045668][ T5478] ? security_file_permission+0x75/0xa0 [ 130.051235][ T5478] do_iter_write+0x3e4/0x7b0 [ 130.055845][ T5478] do_writev+0x254/0x410 [ 130.060160][ T5478] ? do_readv+0x3e0/0x3e0 [ 130.064520][ T5478] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.070697][ T5478] ? lock_chain_count+0x20/0x20 [ 130.076107][ T5478] ? vtime_user_exit+0x2dc/0x400 [ 130.081293][ T5478] ? lockdep_hardirqs_on+0x94/0x140 [ 130.086542][ T5478] do_syscall_64+0x4c/0xa0 [ 130.091062][ T5478] ? clear_bhb_loop+0x30/0x80 [ 130.096382][ T5478] ? clear_bhb_loop+0x30/0x80 [ 130.101129][ T5478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.107060][ T5478] RIP: 0033:0x7f6b816d2749 [ 130.111641][ T5478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.131762][ T5478] RSP: 002b:00007f6b7f939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 130.140438][ T5478] RAX: ffffffffffffffda RBX: 00007f6b81928fa0 RCX: 00007f6b816d2749 [ 130.148797][ T5478] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 130.156779][ T5478] RBP: 00007f6b81756f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.164878][ T5478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.173586][ T5478] R13: 00007f6b81929038 R14: 00007f6b81928fa0 R15: 00007ffc6368f208 [ 130.181629][ T5478] [ 130.262490][ T5553] loop3: detected capacity change from 0 to 256 [ 130.348078][ T5553] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.364009][ T5553] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 130.394440][ T5553] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 130.656708][ T5574] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 132.815946][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.822810][ T1423] ieee802154 phy1 wpan1: encryption failed: -22